December 2003 - cypherpunks-legacy

Court challenge to AOL junk-mail blocks
by E. Allen Smith 17 Dec '03

17 Dec '03

I wouldn't personally use AOL in any event, but their use of their computers is their business. I do have some doubts as to whether AOL subscribers necessarily signed on for this - as noted on the list-managers list, a consent arrangement would thus be preferable. The other argument of the Cyber Promotions jerks is nonsense - how does AOL blocking affect the rest of the Internet? -Allen >PHILADELPHIA, Pa. (Sep 6, 1996 12:23 p.m. EDT) -- A federal judge has = >ordered America Online to stop blocking up to 1.8 million "junk" e-mail = >files flooding subscribers' electronic mailboxes daily from a = >Philadelphia marketing firm. [...] >Pending a trial tentatively scheduled for Nov. 12, U.S. District Judge = >Charles R. Weiner ordered AOL Thursday to lift the block on Cyber = >Promotions' mailings. Weiner is presiding over a suit Cyber Promotions = >Inc. filed accusing AOL of trying to drive it out of business. >Cyber Promotions controls three of the five sites blocked by AOL. The = >others -- one that distributes software to create bulk e-mail lists and = >one that had sent out ads for Internet video porn -- were not affected = >by Weiner's order. >AOL attorney David Phillips said the company was considering an appeal. = >He said AOL customers had been "complaining vociferously about Cyber = >Promotions' junk mail." >Sanford A. Wallace, the president of Cyber Promotions, was pleased about = >the decision. >"We feel that America Online has violated the civil rights of their = >members and has violated our rights to send e-mail through the Internet, = >which AOL does not own," he said. >Although unsolicited mail sent through the post office in the United = >States is not considered illegal, the rules have yet to be defined in = >cyberspace. The larger services -- AOL, Prodigy and Compuserve -- all = >have policies forbidding mass junk mailings

1 0

Re: What is the EFF doing exactly?
by Duncan Frissell 17 Dec '03

17 Dec '03

>Indeed. It appears the Unabomber has taken away the privelege of >dropping stamped mail weighing over 16ozs into street-side mailboxes. >One is now instructed to take these packages to a post-office mail >clerk for mailing. So switch to Fedex. The P.O. gives lousy service anyway. Privitize. DCF

3 2

Re: Doing away with govt. people
by jim bell 17 Dec '03

17 Dec '03

At 12:13 PM 9/6/96 -0700, Dale Thorn wrote: >Gee, if we could just prosecute "the govt." under auspices of the >"three strikes" legislation: > >Gehlen Deal MK/ULTRA >"That 'Bay of Pigs' thing" ZR/RIFLE >Watergate MH/CHAOS >Iran/Contra Phoenix Program >BCCI/BNL COINTELPRO >INSLAW Waco, etc. You've probably heard of the "RICO statute," or "Racketeer-Influenced and Corrupt Organizations" law. It's both criminal and civil: You're supposed to be able to bring a RICO lawsuit against an organization and get triple damages. Maybe somebody should try it and name the federal government as defendant...There's certainly plenty of evidence. >Just say "Three strikes and you're (what?)" "Dead," preferably. Jim Bell jimbell(a)pacifier.com

1 0

More identification laws
by E. Allen Smith 17 Dec '03

17 Dec '03

From: IN%"rre(a)weber.ucsd.edu" 2-SEP-1996 22:33:17.31 [The new welfare bill in the US has profound privacy implications and will require major new identification systems and databases. See the article on the front page of today's (9/2/96) New York Times for some details. (There's a bunch of useful Internet stuff in the business section too.) This issue of the Privacy Forum, which I've abridged and rearranged, includes three items on Social Security Numbers and another on fingerscanning. This is really it: pressures for universal identifiers are growing exponentially from a hundred directions as we speak. I wish I knew how to communicate the magnitude of it. If half the stuff currently being launched in this area really happens then the world is going to be completely different a year from now -- give it two if the system development projects choke as per usual on their overambition. I hope you're not sick of this topic, because you'll be hearing lots more about it this autumn. Educate, agitate, organize. Please. Speaking of which, I've also enclosed a note about a Privacy International web page on national identification cards.] =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= This message was forwarded through the Red Rock Eater News Service (RRE). Send any replies to the original author, listed in the From: field below. You are welcome to send the message along to others but please do not use the "redirect" command. For information on RRE, including instructions for (un)subscribing, send an empty message to rre-help(a)weber.ucsd.edu =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Date: Sun, 1 Sep 96 18:14 PDT From: privacy(a)vortex.com (PRIVACY Forum) Subject: PRIVACY Forum Digest V05 #16 PRIVACY Forum Digest Sunday, 1 September 1996 Volume 05 : Issue 16 ---------------------------------------------------------------------- Date: Fri, 30 Aug 1996 10:51:45 -0700 (PDT) From: jd(a)scn.org (Janeane Dubuar) Subject: NCSL ALERT: Driver's Licenses and Birth Certificates This alert came by mail from the National Conference of State Legislatures in Washington, D.C. I added an update which includes the names of House-Senate conferees. The federal immigration bill (H.R. 2202) is expected to emerge from conference committee some time during the first week of September. Now is the time to act. TOWARD A NATIONAL IDENTIFICATION CARD AND MORE RED TAPE: CONGRESS MANDATES CHANGES TO DRIVER'S LICENSES AND BIRTH CERTIFICATES On May 2, 1996, the U.S. Senate passed S. 1664 (now called H.R. 2202 - Senate version), a bill to reform illegal immigration, that proposes monumental changes to all driver's licenses and birth certificates (section 118). These changes will force most U.S. citizens to obtain and pay for new driver's licenses and birth certificates; compromise each citizen's right to privacy; violate state and local control over driver's licenses and birth certificates; and invite discrimination against minorities. The Congressional Budget Office estimates that the federal driver's license mandate alone will shift up to $20 million in costs to states and localities. The House also passed an immigration bill, H.R. 2202. The House bill does not contain the driver's license and birth certificate mandates. Both House and Senate immigration staff are currently reconciling the two bills in an informal conference committee. Phone calls to House and Senate Leadership are urgently needed to demand that the driver's license and birth certificate mandates be deleted from the final bill. What Does the Senate Version of H.R. 2202 Require? 1. Driver's Licenses - State driver's licenses and identification cards MUST CONTAIN THE APPLICANT'S SOCIAL SECURITY NUMBER. The federal government will also create new federal standards for the application process and design of all driver's licenses and ID cards. States that currently retain and verify an applicant's social security number but do not place the number on the cards are initially exempt from the social security number mandate. According to the American Association of Motor Vehicle Administrators, of the 38 states that do not require the social security number to be on their driver's licenses, only Massachusetts would qualify for this exemption; all other states would be required to place social security numbers on driver's licenses and ID cards. All states are required to conform to the other federal standards. States with cycles of renewal longer than six years must start October 1, 2006. After October 1, 2006, NO ONE may use a driver's license or ID card for identification purposes that does not meet these federal standards. 2. Birth Certificates - All birth certificates must be printed on federally-approved safety paper and be certified by the issuing agency. The federal government will also issue additional provisions requiring other security features in the future. Starting in 1999 (three years after the bill's enactment), birth certificates that do not meet these federal standards cannot be accepted by any federal agency or by any state or local agency that issues driver's licenses or ID cards. Who Needs a New Driver's License? Anyone who wants to use their driver's license as a valid form of identification after October 1, 2006. If you need to use a driver's license to vote, to apply for a passport, to qualify for a federal school loan, license, contract or public assistance program or to meet any other federal, state or local requirement you will need a new driver's license. Will I Have to Put My Social Security Number on My Driver's License? Yes. While most states currently give applicants the option of not using this number on their driver's license or prohibit its use outright, the new federal requirements will force almost every American to put their social security number on their license or ID card. Many citizens are concerned by laws that increase the circulation of their social security number. The social security number is a key which provides access to vital personal information, which could be misused if it fell into the wrong hands. Others believe that proposals making driver's licenses uniform, including social security numbers, are a significant step toward a national ID card. Finally, many minorities contend that they will be disproportionately affected by the new requirements because they will be asked to show their documents more often than other Americans. Who Needs a New Birth Certificate? Anyone who wants to use their birth certificate as a valid form of identification after October 1, 1999. If you need to use your birth certificate to establish citizenship, apply for or renew a driver's license, passport or other identification documents, obtain a marriage license, register to vote, change your name, or many other purposes you will need a new certificate. No matter how old you are, if you need to use your birth certificate it must conform to the new federal standards, otherwise it is invalid. Fees will almost certainly be charged for new birth certificates to pay for the new federal requirements. This will impose a significant hardship on elderly and low-income Americans. THE DRIVER'S LICENSE AND BIRTH CERTIFICATE MANDATES IN ILLEGAL IMMIGRATION BILL H.R. 2202 (Senate) WILL... ...INCREASE SOCIAL SECURTY NUMBER FRAUD. H.R. 2202 (Senate version) will require the vast majority of automobile drivers in the U.S. to put their social security numbers on their driver's licenses. In the future, whenever someone shows their driver's license they will also be exposing their social security number. With the social security number accessible to so many people, it will be relatively easy for someone to fraudulently use your social security number to assume your identity and gain access to your bank account, credit services, utility billing information, driving history, and other sources of personal information. This new federal law will compound and exacerbate a disturbing trend reported by banks and credit card companies that social security number-related fraud is already on the rise. ...INVADE PRIVACY AND THREATEN CIVIL LIBERTIES. According to the Privacy Rights Clearinghouse, when social security numbers were first issued in 1936, the federal government assured the public that use of the numbers would be limited to social security programs. The driver's license and ID card provisions in H.R. 2202 (Senate version) violate this promise, and will dramatically increase the circulation of the social security number and its use as a national identifier. Now more corporations, creditors, insurance companies, government officials and others will be able to get easier access to vast amounts of personal information that can be used to support marketing schemes, determine insurance and loan eligibility, gain an advantage in a lawsuit, etc. ...PREEMPT STATE LAWS AND SHIFT COSTS TO STATES AND LOCALITIES. According to the Automobile Association of America, 38 states do not require drivers to put their social security numbers on their driver's licenses. Legislation has been introduced in a number of states (including Mississippi and Hawaii) that require social security numbers on their driver's licenses to take the numbers off the card because of fraud and privacy problems. The new federal law would require all but Massachusetts to change their laws, taking this option away from the majority of the nation's drivers and limiting state authority to decide whether this policy is appropriate for their residents. The bill also gives the federal government wide latitude to develop new and more costly requirements for state driver's licenses, ID cards and birth certificates in the future. According to the Congressional Budget Office, the new unfunded federal mandates in the law will shift up to $20 million in costs to states and force states and localities to increase fees for birth certificates to pay for new federal requirements. ...LEAD TO A NATIONAL ID CARD THAT DISCRIMINATES AGAINST MINORITIES. By requiring states to tie the social security number to state-issued identification documents, the proposal marks a dramatic shift toward using the number as an identifier. Today's mandate that the states follow federal requirements in their identification documents will lead to tomorrow's mandate: that the federal government issue the identification documents itself to ensure uniformity and reliability. Make no mistake: this provision is a key building block for national identification documents, and the national ID card. If such an ID card is mandated, Latinos, Asians, and other Americans who "look foreign" or speak with an accent will be expected to produce this document far more often than other Americans, especially if they live in border areas. Increasing discrimination against our own citizens is no way to deal with the problem of illegal immigration. ...TANGLE CITIZENS IN GOVERNMENT RED TAPE. The federal bill requires any citizen that needs to use their birth certificate for official identification to get a reissued birth certificate from their place of birth by October 1999. Senior citizens that intend to apply for Medicare will need to obtain a new birth certificate. Couples engaged to be married will need new birth certificates for a marriage license and to change their names. Professionals traveling internationally for business or families going on vacation overseas will need new birth certificates to obtain passports. With millions of citizens requesting new birth certificates, lines and waits for federally-approved birth certificates will be long. All recipients will be charged a fee for their new birth certificates. ------------------------------- UPDATE: To study the full text of the Senate's version of H.R. 2202, go to http://thomas.loc.gov and look up S.1664, section 118. Write or call conferees and your own member of the House. As of Thursday, 8/29/96, 4:30 pm EDT, Senate conferees on the immigration bill were: Feinstein, Dianne - California Grassley, Chuck - Iowa Hatch, Orrin - Utah Kennedy, Edward - Massachusetts Kohl, Herb - Wisconsin Kyl, Jon - Arizona Leahy, Patrick - Vermont Simon, Paul - Illinois Simpson, Alan - Wyoming Specter, Arlen - Pennsylvania Thurmond, Strom - South Carolina Likely House conferees include: Becerra, Xavier - California (30) Berman, Howard - California (26) Bono, Sonny - California (44) Bryant, Ed - Tennessee (7) Bryant, John - Texas (5) Conyers, John, Jr. - Michigan (14) Frank, Barney - Massachusetts (4) Gallegly, Elton - California (23) Goodlatte, Bob - Virginia (6) Hyde, Henry - Illinois (6) McCollum, Bill - Florida (8) Smith, Lamar - Texas (21) Please do not wait to contact House conferees. The conference report could be issued within as little as 24 hours of their final selection. To be most effective, letters should be postmarked by Saturday, August 31st, or faxed early the following week. Members' offices also may be reached by phone through the Capitol Switchboard (202) 224-3121. Thanks for your help. ------------------------------ Date: Fri, 16 Aug 96 15:24 EST From: Robert Ellis Smith <0005101719(a)mcimail.com> Subject: Alternatives to Social Security Numbers [ From Risks-Forum Digest; Volume 18 : Issue 35 -- MODERATOR ] Last spring, I asked readers of RISKS for suggestions on alternatives to Social Security numbers in organizations with large data bases of information about individuals. Many such organizations find they do not need to use SSNs, and avoid privacy problems associated with using them. For a copy of all of the responses, send a request to us and specify whether you want hard copy or electronic edition of our August issue, and provide postal address or e-mail address. Robert Ellis Smith, Publisher, Privacy Journal newsletter, Providence, RI, 401/274-7861, e-mail 5101719(a)mcimail.com. Excerpts from the suggestions follow: * FROM WASHINGTON, D.C.: Maryland uses Soundex (of name and birth date concatenated [linked in a chain]) both for driver and vehicle registrations. * FROM CAMBRIDGE, MASS.: "Against Universal Health-Care Identifiers" in the JOURNAL OF THE AMERICAN MEDICAL INFORMATICS ASSOCIATION 1:316-319, 1994, by Dr. Peter Szolovits of MIT and Dr. Isaac Kohane of Children's Hospital in Boston, discusses a number of ways in which cryptography- based health care identifiers can be used to preserve privacy while remaining manageable for typical medical purposes. This is publication #49 (in Postscript format) at http://medg.lcs.mit.edu/people/psz/publications.html. * FROM YARDLEY, PA.: One way is to use a simple scheme like three letters from last name, the first initial, and some digits; another is just to use sequential numbers. Another is an MD5 hash of the full-name string [a one-way mathematical function as a stand-in for the name that makes translation back to the original name impossible]. This is always unique for a unique string, so you might need to add some numbers. * FROM MADISON, WISC.: When I was working on the development of the Wisconsin Student Data Handbook - we tried to develop what we called an "SSN surrogate," also of nine bytes per individual. It involved an algorithm which combined year, month, and date of birth with sex and two consonants each extracted from the first and middle names. * FROM CYBERSPACE: I worked with a banking software company that set up employee records simply by exact hire date and time. Since they never hired anyone at exactly the same time, it gave each person a unique number. You could do the same for any data base in which records are added gradually one at a time - just number them based on exact date and time added. * FROM PALO ALTO, CAL.: At Stanford University we made a decision long ago not to use SSN for identification except where required by law (payroll taxes, for example). We use a unique Stanford University ID (SUID), which is a lifetime number and applies to all students, alumni, faculty, staff, and patients. It serves all the same purposes that the SSN would do if it were used. ------------------------------ Date: Sat, 24 Aug 1996 00:25:15 -0400 From: Monty Solomon <monty(a)roscom.COM> Subject: SSN and Welfare Legislation Excerpt from EPIC Alert 3.15 ======================================================================= [3] Welfare Legislation Signed by Clinton ======================================================================= On August 22, President Clinton signed the Personal Responsibility and Work Opportunity Reconciliation Act of 1996. The bill includes a number of sections that expand the use of the Social Security Number and create new databases of personal information. The bill requires that states obtain individuals' Social Security Numbers for many state documents. It provides that on "any application for a professional license, commercial driver's license, occupational license, or marriage license [the SSN] be recorded on the application." The new bill also creates a national database of every employee in the United States. States are also required to create databases of "new hires." The state databases would be uploaded to a federal registry and the Social Security Administration would verify the SSNs. The Commissioner of Social Security is required to develop "a prototype of a counterfeit-resistant social security card" made of tamper proof materials for proving citizenship, and to issue a report on the cost of issuing a new card to all citizens over a three, five or ten year period. More information on the welfare bill, the Social Security Number, and efforts to expand its use is available at: http://www.epic.org/privacy/ssn/ ------------------------------ Date: Fri, 30 Aug 1996 10:34:03 -0700 (PDT) From: jd(a)scn.org (Janeane Dubuar) Subject: fingerprinting by banks SEATTLE WEEKLY Copyright 1996 - used with permission July 24,1996 - "Quick and Dirty" column by Eric Scigliano Thumbprint, retinal or body-odor scan, sir? If you think those "Go to Jail" charity slumber parties are a scream, you may get a kick out of cashing checks after September 11. That's when US Bank will start requiring that non-customers cashing its checks consent to be finger--or, rather, thumb--printed. Other local banks are expected to join US Bank on the new security frontier in September, and at least one, Seafirst, plans to start taking thumbprints next year in step with its California parent, Bank America. The thumbprinting scheme is being pushed by the Washington Bankers Association, which wants all its members to take the plunge together. As Dan Doyle, regional manager over US Bank's Western Washington branches, notes, "I'm not sure any one bank wants to be the one to step out and do it--it probably sounds cold, hard, and not very customer-friendly." Indeed. "But it's really to protect customers." That protection is supposed to come from deterrence. Very few, if any, check forgers actually get caught via thumbprints in those states (most notably Texas, Nevada, and Arizona) whose banks already take them. Tellers can't (yet, anyway) check the prints for known forgers; the prints will merely be saved (on the checks themselves) for investigation in the event of a bounce. But Bruce Koppe, the Bankers Association's executive director, reports that bogus-check losses have declined by 40 percent in those states. Doyle says US Bank has charted 45 percent reductions in states where it's tried the system, and fewer than 1 percent of those asked decline to give prints. Some retailers, and reportedly at least one local credit union, are already taking prints on checks. Customers can at least be reassured that they won't have to bear the telltale black stains of traditional fingerprinting; the new "inkless" printing leaves no visible mark on the skin. Still, fingerprinting is, in the words of American Civil Liberties Union lobbyist Jerry Sheehan, "the archetypal metaphor of criminality, along with the mug shot and lineup." Some tellers are already grumbling at the prospect of having to do it. The banks take heart that they won't be demanding prints of their current customers. But the ill will may still come around to bite them; those are all potential customers they stand to infuriate, and account-holders may not like the idea of their checks being valid only when backed by thumbprints. And thumbprinting may be just the nose under the tent. That mixed bodily metaphor suits the brave new world of "biometric" identification in which we will, very soon, find ourselves. Down in Olympia, a working group of the joint Legislative Transportation Committee is considering what kind of biometric and/or computer technology to adopt in upcoming "smart" driver's licenses; its findings are due in December, preparatory to the next legislative session. Possibilities include a bar code or magnetic strip; a store scrutinizing your check or a cop writing a ticket could scan your full digitalized profile. All the drivers' license data that now fills a state warehouse could be consolidated in a single data base. And all those sci-fi and privacy-protectionist warnings about personal bar codes and instant snooping will come true. Transportation Committee staffer Jennifer Joly says that fingerprinting is still the most common form of biometric ID. But more exotic techniques are coming in: hand geometry scans, retinal scans, iris scans, computerized facial recognition, and (I am not making this up) body odor measurement. It seems unlikely that those who take IDs will stop at thumbprinting checks. Joly reports that bankers, retailers, and law-enforcement groups have joined in a coalition to weigh in on the new drivers' licenses. "We'll be pushing for legislation imposing severe restrictions" on fingerprinting, the ACLU's Sheehan vows. And they'll "continue to resist these pressures to create uniform identification papers from a document intended for driver's certification." [...] July 31, 1996 - "Quick and Dirty" column by Eric Scigliano [...] They want to know it all If you feel queasy about being fingerprinted by a bank, imagine how tellers feel about all the information they're supposed to disclose. US Bank asks employees to fill out an "extortion readiness card" listing all their cars (by number and "markings") and neighbors, the names, schools, and daily routes and schedules of their children, and any meetings they themselves regularly attend. US Bancorp spokeswoman Mary Ruble says taking such data is a longtime standard banking practice done for the employees' "own safety," to protect them in "hostage situations" and to help authorities "follow up if a claim of kidnapping is made." She adds that US Bank has never encountered such a situation, but believes other banks have. The cards are kept confidential in a central office, and filling them out is "voluntary for employees." But one bank worker who objected recalls being told to fill out the card anyway, and got the feeling, despite the explanation, that the intent was really to guard against crimes by, rather than against, employees. "The extortion readiness card has nothing to do with embezzlement," says Ruble. ----------------------------------------------------------------------------- The Internet PRIVACY Forum is a moderated digest for the discussion and analysis of issues relating to the general topic of privacy (both personal and collective) in the "information age" of the 1990's and beyond. The moderator will choose submissions for inclusion based on their relevance and content. Submissions will not be routinely acknowledged. All submissions should be addressed to "privacy(a)vortex.com" and must have RELEVANT "Subject:" lines; submissions without appropriate and relevant "Subject:" lines may be ignored. Excessive "signatures" on submissions are subject to editing. Subscriptions are by an automatic "listserv" system; for subscription information, please send a message consisting of the word "help" (quotes not included) in the BODY of a message to: "privacy-request(a)vortex.com". Mailing list problems should be reported to "list-maint(a)vortex.com". All messages included in this digest represent the views of their individual authors and all messages submitted must be appropriate to be distributable without limitations. The PRIVACY Forum archive, including all issues of the digest and all related materials, is available via anonymous FTP from site "ftp.vortex.com", in the "/privacy" directory. Use the FTP login "ftp" or "anonymous", and enter your e-mail address as the password. The typical "README" and "INDEX" files are available to guide you through the files available for FTP access. PRIVACY Forum materials may also be obtained automatically via e-mail through the listserv system. Please follow the instructions above for getting the listserv "help" information, which includes details regarding the "index" and "get" listserv commands, which are used to access the PRIVACY Forum archive. All PRIVACY Forum materials are available through the Internet Gopher system via a gopher server on site "gopher.vortex.com". Access to PRIVACY Forum materials is also available through the Internet World Wide Web (WWW) via the Vortex Technology WWW server at the URL: "http://www.vortex.com"; full keyword searching of all PRIVACY Forum files is available via WWW access. ------------------------------ End of PRIVACY Forum Digest 05.16 ************************ Date: 2 Sep 1996 13:52:18 -0500 From: "Dave Banisar" <banisar(a)epic.org> To: "Interested People" <interest(a)epic.org> Subject: National ID Card Web Pages EXTENSIVE NATIONAL ID CARD WEB SITE IS NOW ON LINE The London-based human rights watchdog Privacy International (PI) has just opened an extensive web page on National ID cards. The initiative comes in the wake of pending efforts in the United States, Canada and United Kingdom to implement national ID card systems. The page contains a 7,000 word FAQ (Frequently Asked Questions) on all aspects of ID cards and their implications. Also included in the PI documents is a paper describing successful campaigns opposing to ID cards in Australia and other countries. The page also has links to numerous other sites and documents. PI Director Simon Davies said he hoped the page would help promote debate about the cards, "ID cards are often introduced without serious discussion or consultation. The implications are profound, and countries planning to introduce them should proceed with caution." "The existence of a card challenges important precepts of individual rights and privacy. At a symbolic and a functional level, ID cards are often an unnecessary and potentially dangerous white elephant. They are promoted by way of fear-mongering and false patriotism, and are implemented with scant regard for serious investigation of the consequences." he said. The URL is : http://www.privacy.org/pi/activities/idcard/ PI has also set up an auto response function for the FAQ document. Its address is: idcardfaq(a)mail.privacy.org Privacy International is an international human rights group concerned with privacy and surveillance issues. It is based in London, UK. For further information contact the Privacy International Washington Office at +1.202.544.9240 or email pi(a)privacy.org. PI's web page is available at: http://www.privacy.org/pi/ _________________________________________________________________________ Subject: National ID Card Web Pages _________________________________________________________________________ David Banisar (Banisar(a)privacy.org) * 202-544-9240 (tel) Privacy International Washington Office * 202-547-5482 (fax) 666 Pennsylvania Ave, SE, Suite 301 * HTTP://www.privacy.org/pi/ Washington, DC 20003

1 0

Re: German Government censors dutch site www.xs4all.nl
by tank 17 Dec '03

17 Dec '03

Forwarded: a letter by Felipe Rodriquez, Managing Director XS4ALL Hello, This is an email I just wrote to Michael Schneider, the guy that adviced German Internetproviders to censor www.xs4all.nl and www.serve.com. He will probably forward the text to the German Public Prosecutor General, who should also read it. I try to make them understand that censoring is not very effective on the Net, and that they should stop it right now. At the same time I threathen to sue both of them for free-speech infringement and damages. We'll see what happens. Censoring the Net is _the way_ to make bestsellers, when will the governments understand ? ------------------------------------------------------------------- Hello Michael, > http://www.anwalt.de/ictf/p960901e.htm > > It now contains a digest of the complete occasion including parts of the > letters I wrote to the Public Prosecutor General. I read it yesterday. Thanks. > I would appreciate, if you portray the activities of ICTF entirely and > exactly. I consistently state that the German providers where forced to censor by the Public Prosecutor. This is also what people understand from the press-releases we sent. Evenso the entire www.xs4all.nl website is blocked, with 3100 pages, in order to censor 1 single homepage. Regardless who is responsible for the censor-actions, it is an outrage that 3100 xs4all customers are censored by Germany. Without a single phonecall, fax, email or letter to Xs4all internet or the user that placed the Radikal pages on our website. If there are pages that are not accepted by Germany, then Germany can always confront us, or the website owner, in a Dutch court of law. It may interest you to know about some developments: There are a number of mirrors for the Radikal site. All sorts of people have spontaneously started to copy the websites to their own system: http://burn.ucsd.edu/%7Eats/RADIKAL/ http://www.jca.or.jp/~taratta/mirror/radikal/ http://www.serve.com/~spg/ http://huizen.dds.nl/~radikal http://www.canucksoup.net/radikal/index.html http://www.ecn.org/radikal http://www.well.com/~declan/mirrors/ http://www.connix.com/~harry/radikal/index.htm http://www.ganesa.com/radikal/ http://www.denhaag.org/~radikal There are more mirrors than just these, but i did not get the entire list. According to the German General Prosecutors opinion these sites would also need to be blocked. Expect the list of mirrors to grow, and expect to be forced to block that growing list of sites on the Net. Realize that a lot of internetusers consider it a sport to redistribute censored information. The way to write a bestseller on the Net is to have it censored by some government. It has the opposite effect. The entire issue 154 of Radikal has been posted in German newsgroup by anonymous users. German users can still use remote (non-german) proxy-servers to access all the Radikal information on Internet. People have posted information about these remote proxyservers in German newsgroups. Xs4all uses rotating IP-numbers for its services. The IP-numbers of certain sites and services are changed every couple of hours. A static ip-filter would certainly not be enough to block www.xs4all.nl. We have asked our parliament and department of Foreign Affairs to help us fight this blunt German censorship. We have also asked the EFF, CPSR and EPIC for advice, and to spread our press-release. A fax was also sent to CNN, Wired, and other press-services. We have discussed starting legal procedures against Germany and the ICTF with our lawyer. If any political and diplomatic actions fail to stop this act of blunt censorship, then we will most probably start litigation against the German government and the ICTF, for damages and violation of the European right on free-speech. It is clear that censoring 3100 pages, to prevent one of them from being published, is an infringement of European free-speech legislation. We have adviced the provider behind www.serve.com, that is also censored, to engage in the same kind of procedures. Please inform the German Public Prosecutor General that the censoring actions have been ineffective, and that Radikal is now on many different websites and is being distributed widely on the entire Internet. Continuing to block this growing list of sites would be an impossible task, what happens if Germany demands to block AOL, EFF, Compuserve, Prodigy, The Well, Netcom and Demon Internet next week ? Providers would be forced to block large part of Internet. I don't think that's what anyone would like to happen. Kind regards, Felipe Rodriquez -- Felipe Rodriquez - XS4ALL Internet - finger felipe(a)xs4all.nl for http://xs4all.nl/~felipe/ - Managing Director - pub pgp-key 1024/A07C02F9

1 0

Job for netescrow ? (was Secure anonymouse server protocol...
by peter.allan＠aeat.co.uk 17 Dec '03

17 Dec '03

In the talk about replyable nym-mailers I haven't yet seen netescrow mentioned. You DID all read this ? > Oblivious Key Escrow > Matt Blaze AT&T Research > mab(a)research.att.com > 12 June 1996 > > Abstract > We propose a simple scheme, based on secret-sharing over large-scale > networks, for assuring recoverability of sensitive archived data e.g., > cryptographic keys. In our model any one can request a copy of the > archived data but it is very difficult to keep the existence of a > request secret or to subvert the access policy of the data owner. This all hinges on a policy to be followed by archive holders defining the conditions under which they release their shares. This could be receipt of a signed request from the owner (remailer). Maybe the table relating nyms to reply addresses could be stored in netescrow style so that captured remailers reveal nothing. The problem of operator coercion is not addressed by this. Police investigations might apply "angry mob cryptanalysis" to find a sender - convincing a sizable number of operators that a crime had been committed with some particular piece of traffic. Anybody want to estimate traffic + storage requirements ? Or number of participants needed for a viable scheme ? -- Peter Allan peter.allan(a)aeat.co.uk

3 2

Re: Court challenge to AOL junk-mail blocks
by Ross Wright 17 Dec '03

17 Dec '03

On Or About: 6 Sep 96 at 18:04, E. Allen Smith wrote: > list-managers list, a consent arrangement would thus be preferable. The > other argument of the Cyber Promotions jerks is nonsense - how does AOL > blocking affect the rest of the Internet? It's affecting the rights of these fine spammers, Cyber Promotions. That affects spammers everywhere. More rules by our government affects all of us. > >PHILADELPHIA, Pa. (Sep 6, 1996 12:23 p.m. EDT) -- A federal judge has = <<<<SNIP>>>>> > >"We feel that America Online has violated the civil rights of their = > >members and has violated our rights to send e-mail through the Internet, = > >which AOL does not own," he said. > > >Although unsolicited mail sent through the post office in the United = > >States is not considered illegal, the rules have yet to be defined in = > >cyberspace. That's the real point I have always made. No rules and we should not want rules. Why are we INVITING the government into OUR internet??? Just cause we have to read spam? That is just plain stupid!!! Just cause we have to read spam, oh well, let the government come on in. Do we let the government into our bedrooms because our wife says no to sex tonight or because we don't like to make our beds?? Everyone on this list seems to want to limit government intervention EXCEPT when it comes to spam, then every one just holds the door open wide and let them in. If they get that inch, they WILL take the whole 9 YARDS!!!!!! Get a clue, delete or killfile those who spam and keep the government out of cyberspace!!!!!! By the way, I get about 2 or 3 spams a day in my mailbox and it is not killing me! Don't get the wrong idea, I don't like it. I like the government WAY LESS!!!!! =========== Ross Wright King Media: Bulk Sales of Software Media and Duplication Services http://www.slip.net/~cdr/kingmedia Voice: 415-206-9906

4 5

Re: Race Bit: C
by Jean-Francois Avon 17 Dec '03

17 Dec '03

On 6 Sep 96 at 10:50, jim bell wrote: > Since red liquid running in the streets is generally so reviled, one > of the things which mystifies me is why there aren't more > simulation-type programs used to test out hypotheticals, for example > a "SimEconomy." For example, you'll occasionally hear about a > media news organization gathering a dozen or so volunteers in a > room, and asking them to solve a problem like "The Budget Deficit" > or some such. The result of their interplay is generally used to > explain why these problems are hard to solve. Why do you suppose that solving the problem they created is their goal? On a more fundamental level, why do you assume the their goal is to improve life at all? Ask yourself if this is what they truly want. jfa Jean-Francois Avon, Montreal QC Canada DePompadour, Societe d'Importation Ltee Limoges porcelain, silverware and crystal JFA Technologies, R&D consultant physicists, technologists and engineers PGP keys at: http://w3.citenet.net/users/jf_avon ID# C58ADD0D : 529645E8205A8A5E F87CC86FAEFEF891

1 0

Re: What the NSA is patenting
by Jean-Francois Avon 17 Dec '03

17 Dec '03

A maybe usefull program would be a little tsr that constantly overwrite unused sectors of the entire drive with random patterns (maybe seeded with a fast keyboard interval timer). Like at the very moment I am writing this, my HD has been idle for several minutes... One more of my silly ideas JFA Jean-Francois Avon, Montreal QC Canada DePompadour, Societe d'Importation Ltee Limoges porcelain, silverware and crystal JFA Technologies, R&D consultant physicists, technologists and engineers PGP keys at: http://w3.citenet.net/users/jf_avon ID# C58ADD0D : 529645E8205A8A5E F87CC86FAEFEF891

1 0

Re: PRESS RELEASE: GERMANY CENSORS DUTCH WEBSITE WWW.XS4ALL.NL
by nobody＠replay.com 17 Dec '03

17 Dec '03

>A Modest Proposal: > >* as Germany is bent on blocking sites which carry this subversive >pamphlet, "Radikal," let us mirror it on thousands of sites around the >world. > >* when the Germans went into Danmark and insisted Jews wear badges, >ordinary citizens (and the Danish Royal Family, as I recall) also took to >wearing these Star of David badges. Add this plug to signatures and web pages: ----------------------------------------------------------------------- Lebt und lest radikal! http://www.xs4all.nl/~tank/radikal/ ----------------------------------------------------------------------- Then, your messages are "promoting a terrorist organization" (cf. http://www.anwalt.de/ictf/p960901e.htm) and may no longer be carried in Germany. [It just says to live radically, and to read "radikal". But "radikal" is a terrorist magazine after all.]

2 1