December 2003 - cypherpunks-legacy

No Subject
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

The DEA announced friday that doctors in Oregon that participate in doctor assisted suicides will have their licence to prescribe drugs revoked. Since when did the DEA gestapo obtain the power to regulate physician's rights to prescribe the drugs their patients need? But more important is the realization that the thugs in DC now consider our votes null and void, the _people_ of Oregon voted to allow assisted suicide, TWICE, I thought this was a government _of_ the people? In Arizona, the people voted to allow doctor prescribed marijuana for those that the doctors thought it would help relieve their pain, the governor of that state the morning after the vote declared the people of Arizona were stupid and he would block implementation of the law, what the fuck are these hicks voting for don't they read the pabulum we spoon feed them day after day about the dangers of drugs? The Kent Crispins of the world wake up, voting is a waste of time, the bastards only allow us to vote for Moe, Curly, or Larry, all of the same union of thugs, some assigned to the Republican party, some assigned to the Democratic party, soon even that fig leaf of democracy will be discarded and the maximum leader will tell us it is necessary for national security reasons to suspend voting on our leaders. Lock and Load? No I dont think so, it is pointless, go out get drunk, screw anybody that will consent, have a good time, the chains will soon clamp on your neck. Amerika love it or leave it.

2 1

Re: The Electronic Privacy Papers
by John Young 17 Dec '03

17 Dec '03

Thanks to David Spector's praise and pointer for: "The Electronic Privacy Papers: Documents on the Battle for Privacy in the Age of Surveillance" by Bruce Schneier and David Banisar we offer its 10-page detailed TOC, foreword, preface and epilog: http://jya.com/tepp.htm (49K) The 747-page volume is an excellent read and rich resource of once secret documents, legislation, regulations, letters, memos, names, events, policies, opinions and disputes of the surveillance age and crypto battles. Subscribers to this list are amply represented. In addition to the Amazon URL provided by David: http://www.amazon.com/exec/obidos/ats-query/9615-8912043-502933 Bruce offers a 15% discount off the $60 price at: http://www.counterpane.com/privacy.html B&N sells it in Manhattan for $39.95, hardcover.

1 0

Re: PGPsdk is now free for non-commercial use
by Bill Stewart 17 Dec '03

17 Dec '03

[I'm also posting this to coderpunks, but cypherpunks is probably a better place for discussions.] At 10:13 PM 11/15/1997 -0800, Bill Frantz wrote: >At 1:06 AM -0800 11/15/97, phelix(a)vallnet.com wrote: >>Well, PGP has come to it's senses and is allowing non-commercial >>developers to use the sdk for free. I didn't notice anything too >>ominous in the license agreement, and they promise a new >>licensing/prices for shareware and small commercial developers. >> >>Perhaps nobody is buying the sdk at it's current highly >>inflated licensing price. > >Much more likely is that more than a few cypherpunks discussed >the issue with PRZ at the last SF Bay Area Physical meeting, >and that discussion is bearing fruit. I'm pleased to see PGP Inc. permitting development of freeware, but at leased from a first reading of the license, it's a _really_ restrictive definition of "freeware" - not only does the software have to be free, but it can only be used in extremely restrictively non-commercial activities. It's far more restrictive than RSAREF (though more precisely defined.) Here's an excerpt from the web page at http://www.pgp.com/sdk/sdklicencefree.html For purposes hereof, the term "non-commercial" shall mean that the application (a) has been distributed or otherwise made available at no charge (direct or indirect) and (b) is not used for any commercial purpose, which includes, but is not limited to, any activity engaged for the purpose of generating revenues (directly or indirectly). For example, a commercial purpose includes the use of the application within a commercial business or facility or the use of the product to provide a service, or in support of service, for which you charge. Commercial purpose also includes use by any government agency or organization. Examples of non-commercial purposes include use at home for personal correspondence, use by students for academic activities, or use by human rights organizations. First of all, it sounds like it can only be used by students at non-government-run universities, but not at Berkeley, and if Random MIT Student develops PGPwidget using the toolkit, students at U.C.Berkeley can't use it for academic use either, except perhaps on their PCs at home (if they live off-campus.) (Do any of the UK universities count as non-government-run?) But "within a commercial business or facility" is far more restrictive. I use a laptop for my home and work email, and carry it around. It sounds like I can't use PGPwidget or PGPsdk for encrypting personal email at lunchtime when my laptop is at the office, and perhaps not from a hotel (at least if I'm there on business)? I probably can't start PGPwidget at home and leave it running when I carry the laptop to work. I probably can't use PGPwidget when I'm reading my work email at home, though perhaps it's ok to use it on personal mail that someone sent to my work MSExchange, assuming it's not a widget that competes with a PGP product. This is frustrating - today, I can use PGP 2.6.2, and maybe 5.0, at work, though I can't sell it without a license, and it's not very clear whether I can run a commercial service without a license (I probably need a license from RSA, but not PGP, and non-RSA keys probably don't require that.) And I can certainly write programs that use PGP command-line interfaces to encrypt things without any restrictions on my code. Thanks! Bill Bill Stewart, stewarts(a)ix.netcom.com Regular Key PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

Re: Exporting crypto from Japan
by Nobuki Nakatuji 17 Dec '03

17 Dec '03

Do you readJapanese import & export law book? If you don't read at yet,You must read it. ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

1 0

Digital Revolution!
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

~~~ IMPORTANT NOTE ~~~ This is NOT a chainletter, it is an ANTI-CHAINLETTER! This message has gone to everyone in the world with a computer, and we are asking you to go to the homes and businesses of ten people you know, and delete it. ~~~ IMPORTANT NOTE ~~~ I am proud to announce the formation of the DIGITAL MAJORITY TAX FREE FOUNDATION for the purpose of serving as the voice of people with ten fingers, across the face of the earth. As a one-person operation, the DIGITAL MAJORITY TAX FREE FOUNDATION will be able to voice opinions representative of all ten-fingered people for a fraction of the cost of the bloated bureacracies which bleed charitable people around the world dry through a multitude of sham organizations catering to narrowly focused self-interest groups which have spread like a plague throughout the DEXADIGITAL community. As the sole member of the Digitally United Membership Board, I will be in a position to speak for practically everyone, everywhere, on all issues, and getting stinking rich while still bleeding the mass of humanity of their hard-earned money at a mere fraction of the cost of the current unweildy network of tax deductible rights and freedoms organizations. The DIGITAL MAJORITY believes in equal charitablization for those with equal digitization, as well as many other vague concepts under which all DexaDigital people can stand under the flag of freedom on the distant shores where bells ring for liberty and all mankind. To save the life of a single child, send your contributions to: DIGITAL MAJORITY, BOX 281, BIENFAIT, SK. CANADA S0C 0M0 ~~~~~~~~~~~~~~~~~~~~~~~~~ This message sponsored by: Modern Motels of Bienfait Conglomeration "Modern, in the traditional sense of the word." ~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Mail interception
by Jason 17 Dec '03

17 Dec '03

Hi all, I was trying to convince some friends of mine of the need for crypto in email. They don't however bel;ive it is possible to intercept email on the wauy through. So, does anybody know how to or where i can get information on intercepting email from ? Any help that can be provided would be greeatly appreciated. regards jason

5 7

ACM Washington Update 1.7
by USACM Washington Office 17 Dec '03

17 Dec '03

____________________________________________________________ +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ ACM WASHINGTON UPDATE U.S. Office of Public Policy of the Association for Computing __________________________________________ +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ November 14, 1997 Volume 1.7 _____________________________________________________ +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ CONTENTS =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ INTRODUCTION USACM ACTIVITIES USACM Signs Amicus Brief in Cryptography Case Leading US Science Groups Protest Crypto Restrictions USACM Meets With Congressional Staff USACM To Sponsor ACM Policy 98 Conference POLICY BRIEFS Congress To Re-Think U.S. Science Policy New Net Decency Bill Introduced in Senate Copyright Legislation Introduced NRC Solicits Comments on Information Literacy Proposed Database Protection Legislation National Research Investment Act of 1998 Introduced Digital Signatures Discussed in Congressional Committees Federal Involvement Seen as Crucial to Science Education Reform President's Commission Releases Infowar Report. Nominations and New Appointments __________________________________________________________ +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ INTRODUCTION =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ The Association for Computing is an international professional society whose 75,000 members (60,000 in the U.S.) represent a critical mass of computer scientists in education, industry, and government. The USACM provides a means for promoting dialogue on technology policy issues with United States policy makers and the general public. The WASHINGTON UPDATE will report on activities in Washington which may be of interest to those in the computing and information policy communities and will highlight USACM's involvement in many of these issues. To subscribe to the ACM WASHINGTON UPDATE send an e-mail to listserv(a)acm.org with "subscribe WASHINGTON-UPDATE" (no quotes) in the body of the message. Back issues are available at http:/www.acm.org/usacm For information about joining the Association for Computing, see: http://www.acm.org/membership/join.html _________________________________________________________ +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ ACM POLICY 98 CONFERENCE =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ ACM POLICY '98 "Shaping Policy in the Information Age" May 10-12, 1998 Washington Renaissance Hotel Washington, DC + Electronic Commerce + Intellectual Property + Learning Online + Universal Service Sponsored by USACM in cooperation with SIGCAS, SIGGRAPH, and SIGCHI. For Conference and Registration information see: http://www.acm.org/usacm/events/policy98/ _________________________________________________________ +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ USACM ACTIVITIES =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ USACM SIGNS AMICUS BRIEF IN CRYPTOGRAPHY CASE USACM has joined 14 other groups and three distinguished computer security experts and cryptographers to sign a brief on encryption submitted to the 9th Circuit Court of Appeals in the Bernstein v. State Department case. The case challenges the constitutionality of export controls of encryption. In a lower court decision issued in August, Judge Marilyn Patel ruled that source code is protected by the First Amendment. http://www.acm.org/usacm/crypto/bernstein_brief.html LEADING U.S. SCIENCE GROUPS PROTEST CRYPTO RESTRICTIONS On September, 24 the leading U.S. scientific, mathematics, and engineering societies sent a united message to Congress protesting proposed U.S. cryptography policies that would maintain export restrictions limiting the open exchange of scientific information and the progress of scientific research and development. In addition, these organizations warned that new requirements for domestic key recovery raise serious scientific and technical problems that undermine its viability as a policy alternative. In a letter to the House Commerce Committee, the societies indicated that the policies will "diminish the scientific reputation of the United States and weaken us economically." This is the first time these highly influential societies have united to inform Congress how cryptography policies will effect the future of scientific research and development in the U. S. Until now, the debate has focused on commercial, civil liberties, and national security/ law enforcement interests. The letter urges the Committee to reject restrictive proposals or " U.S. leadership in many areas of science and technology is likely to be jeopardized with no discernible benefits to our National Interests." http://www.acm.org/usacm/crypto/societies_crypto_letter_1997.html USACM MEETS WITH CONGRESSIONAL STAFF On October 9 and 10, USACM Chairperson Barbara Simons met with staffers from Sen. Boxer, Sen. Feinstein, Sen. Kerry, Rep. Eshoo, and Rep. Campbell's offices to discuss U.S. cryptography policy. Simons discussed both California Resolution SJR29 which sets forth the Legislature's vigorous disagreement with the Administration's crypto export policy and the letter from the scientific societies. http://www.acm.org/usacm/crypto/usacm_cal_resolution.html USACM TO SPONSOR ACM POLICY 98 CONFERENCE USACM is sponsoring the ACM Policy '98 Conference to be held May 10-12 in Washington DC. The purpose of the conference is to increase the influence of computer professionals in shaping the future of computing by establishing a discourse between computer professionals and policy makers. ACM proposes to exert leadership in this area through USACM and SIGCAS by bringing together relevant audiences from academia, government, industry, and journalism. Leading experts in the field will be invited to discuss, debate, and develop policies to manage the impact of these technologies to produce outcomes beneficial to society. The co-chairs of the conference are Ben Shneiderman, USACM and C. Dianne Martin, SIGCAS and the conference is being held in cooperation with SIGCAS, SIGGRAPH, and SIGCHI. The conference will feature discussions on Universal Access, Electronic Commerce, Intellectual Property, and Learning Online. The panel coordinators are USACM members David Farber, Jim Horning, Pam Samuelson, and Chuck Brownstein. http://www.acm.org/usacm/events/policy98/ __________________________________________________________ =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ POLICY BRIEFS =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ CONGRESS TO RETHINK U.S. SCIENCE POLICY On Oct. 23, Congressman Vern Ehlers (R-Mich), Vice Chairman of the House Science Committee, began an effort to redefinine U.S. Science Policy for the next century. The project was initiated by Rep. Newt Gingrich, who requested that the House Science Committee develop a new, post-Cold War, paradigm for national science policy. Ehlers convened a meeting of distinguished policy experts including the Presidents of the National Academies of Science and Engineering; the President, Vice-President, Chairman, plus a Senior Fellow from the Council on Competitiveness; leaders of the Sandia and Lawrence Berkeley National Laboratories; the retired President of Hewlett Packard Corporation; and the President of MIT. This project offers novel opportunities for scientists and science policy makers to be involved in the creation of a new paradigm for US science policy. Vice Chairman Ehlers has set up a web site that will provide information on this year-long effort and where he will solicit comments on developing the new policy outline. First, he is planning to post a mission/challenge statement and then will begin fashioning a draft science policy statement. Beginning in the early summer 1998, he will hold hearings on the statement. Subsequently, he will submit the final science policy document and it will hopefully be adopted as a concurrent resolution of the Congress. http://www.house.gov/science/science_policy_study.htm =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ NEW NET DECENCY BILL INTRODUCED IN SENATE Senator Dan Coates (R-IN) introduced S. 1482 on November 8. The bill criminalizes commercial distribution of materials "harmful to minors" on the Internet. Under the statute, commercial online distributors of material deemed "harmful to minors" could be punished with up to six months in jail and a $50,000 fine unless they have developed age verification or credit card processing systems. This is a second iteration of the Communications Decency Act which the Supreme Court held unconstitutional this past summer. http://thomas.loc.gov/cgi-bin/query/z?c105:S.1482.IS: =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ COPYRIGHT LEGISLATION INTRODUCED Sen. John Ashcroft (Mi.) has introduced Digital Copyright Clarification and Technology Education Act of 1997, S. 1145, a comprehensive bill that provides implementing legislation for the WIPO Copyright Treaty passed last year. The bill contains three separate titles covering, OSP/ISP Liability, Technology for Teachers and Librarians, and WIPO Implementation. The OSP/ISP Liability section would clarify that merely providing network services and facilities for transmitting an electronic communication will not result in liability under the Copyright Act; confirm that providing a site-linking aid, a navigational aid (including a search engine or browser), or the tools for creating a site-linking aid will not result in liability under the Copyright Act; clarify that Internet and on-line service providers will not be liable for third-party copyright infringement unless they have received notice and have a reasonable opportunity to limit the third-party infringement; and confirm that an employee of an educational institution, library, or archives will not be deemed to have received notice and thus will not be required to "take down" an allegedly infringing work if she believed the use was a fair use or otherwise lawful. The WIPO Implementation title implements provisions of two international copyright treaties adopted by the World Intellectual Property Organization. The WIPO treaties oblige signatory nations to offer legal protection against circumvention of technology intended to protect copyrighted material against infringement, but do not require the broad prohibition of software or devices that might be used by infringers. Section 1201 would only create liability for a person who--for purposes of infringing a copyrighted work--knowingly circumvents the application of an effective anti-copying measure used to protect a work in a digital format. Section 1202 would create liability for a person who knowingly provides false copyright management information or who removes or alters copyright management information without the authority of the copyright owner. http://thomas.loc.gov/cgi-bin/query/z?c105:S.1146: =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ NRC SOLICITS COMMENTS ON INFORMATION LITERACY The Computer Science and Telecommunications Board (CSTB) of the National Research Council is undertaking a project "to explicate the various dimensions of what might be called information technology (IT) literacy, i.e., what everyone needs to know about information technology. A major part of the project's task is to develop a consensus for the appropriate definitions of "everyone", "know", and "information technology"." The committee responsible for this project is chaired by Larry Snyder, professor of computer science and engineering at the University of Washington. Because the subject of IT literacy is subject to many differing opinions, the committee has developed a number of questions for which it hopes to generate a broad response. Sets of questions have been developed for computer and communications scientists and engineers, employers and labor professionals, librarians, K-12 educators, and other groups. The committee invites you to submit your answers to these questions in the form of a short position paper. For more information, see http://www2.nas.edu/cstbweb/549a.html =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ PROPOSED DATABASE PROTECTION LEGISLATION Chairman Coble has introduced H.R. 2652, the Collections of Information Antipiracy Act. This database bill is designed as a misappropriation bill, not a sui generis protection bill which had previously been proposed. In other words, it in theory does not create a property right in the database; it simply prohibits the unfair use of the data one has collected. As this bill is drafted, however, there is little to distinguish it from a sui generis protection bill. Historically, the misappropriation approach in the U.S. is based on the Supreme Court's holding that the state common law of misappropriation was not preempted by the copyright law when it covered *hot news.* This doctrine was explained in the recent NBA v. Motorola case, where the Court listed five conditions for misappropriation not to be preempted. However, H.R. 2652 appears far broader than the traditional misappropriation doctrine. Significantly, traditional misappropriation is limited to time sensitive information, while H.R. 2652 applies to all information. Also, the definitions in the statute are extremely vague. The bill contains several exceptions and exclusions, but they appear limited. Finally, H.R. 2652 contains civil and criminal penalties ($500,000 penalty and 10 years in jail). H.R. 2652 expressly does not extend to computer programs, but this exclusion "does not apply to a collection of information directly or indirectly incorporated in a computer program." There are numerous interpretations to that language. For example, would a command structure be viewed as a collection of information incorporated in a program? Or, what about a look-up table for translation purposes? One could argue that the phrase "collection of information ... incorporated in a computer program" refers to information related to the application rather the functioning of the program itself. For example, in a program designed to determine structural stress, the engineering constants in the program would be protected, while the interface specifications would not. This interpretation, however, is not clear from the face of the statute. http://thomas.loc.gov/cgi-bin/query/z?c105:H.R.2652: =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ NATIONAL RESEARCH INVESTMENT ACT OF 1998 INTRODUCED On November 7, Sens. Lieberman (D-Conn.) and Gramm (R-Texas) introduced S. 1305, the National Research Investment Act of 1998. The Act is designed to reverse a downward trend in the federal government's allocation to science and engineering research by authorizing the doubling of federal research spending over the next ten years. According to Sen. Lieberman, "...Publicly funded science has shown to be surprisingly important to the innovation system. A new study prepared for the National Science Foundation found that 73 percent of the main science papers cited by American industrial patents in two recent years were based on domestic and foreign research financed by governments or nonprofit agencies." He continued, "Yet, despite the demonstrated importance of publicly funded scientific research, the amount spent on science and engineering by the Federal Government is declining. Senator Gramm has already noted that in 1965, 5.7 percent of the Federal budget was spent on non defense research and development. Thirty-two years later, that figure has dropped by two-thirds to 1.9 percent." On November 12, S. 1305, was discussed at a conference in Washington. A member of Senator Gramm's staff indicated that passage of S. 1305 is "going to be very difficult." That is why the Bill supports a ten yearperiod during which federal spending on R&D will continue to grow until it is doubled in 2008. S. 1305 differs from Gramm's previous bill because of its bipartisan support. Having both a Democratic and a Republican original cosponsors will help to reassure other senators. Also participating in this session were speakers from the AAAS and the Office of Management and Budget. AAAS recently calculated that total federal R&D for FY 1998 increased 3.9% over last year. Basic research support increased by 4.0% (both figures subject to change as remaining appropriations bill are passed.) The OMB official predicted that previously forecasted dramatic cuts in federal support for R&D seem unlikely, as is a doubling of future federal support. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ DIGITAL SIGNATURES DISCUSSED IN CONGRESSIONAL COMMITTEES The Senate Banking and House Science Committee held hearings on October 28 on digital signatures. The witnesses at the hearings recommended that any bill proposed be limited in its scope. They argued that since many companies are using digital signatures for different reasons, it would be premature for Congress to pass far- reaching legislation. Andrew Pincus from the Commerce Department noted "it seems unlikely that the market will settle on one universal authentication mechanism." Senator Robert Bennett (R-UT) announced that he is planning to introduce legislation early next year. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ FEDERAL INVOLVEMENT SEEN AS CRUCIAL TO SCIENCE EDUCATION REFORM Efforts are being made to improve U.S. K-12 science and math education. An October 29 House Science Committee hearing reviewed the federal role in improving science education and asked the question: is the federal government coordinating its many programs for maximum effectiveness? Committee Vice Chair Vern Ehlers (R-MI), who has run this series of hearings, blamed the lack of a national consensus for the current "fragmented, mile-wide and inch-deep science and math curricula" that students face. He believes the federal government should play a role in correcting this trend. At an October 8 hearing in the same series, three experts in the field of science education were invited to discuss the lessons learned from TIMMS, the Third International Mathematics and Science Study which analyzed international achievement in math and science at several grade levels. The TIMMS results showed that US fourth-graders performed above the international average in math and were second only to South Korea in science. But by eighth grade, US students performed only slightly above the international average in science and below the average in math. This drop in achievement from fourth to eighth grade, said TIMMS National Research Coordinator William Schmidt, demonstrated that "US students don't start out behind the rest of the world, but fall behind during the middle school years." All three witnesses attributed this failing of US math and science education to the lack of a national consensus on what should be taught at each grade. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ PRESIDENT'S COMMISSION RELEASES INFOWAR REPORT The President's Commission on Critical Infrastructure Protection released its final report on November 5. The report recommends increased spending for computer security and training and warns that currently, most major U.S. infrastructures which depentd on computer systems are unprotected. In a controversial section, it recommended that key escrow/recovery systems be adopted. The report was heavily criticized by industry representatives in hearings before the House and Senate. USACM member Peter Neumann testified about the report before the House Science Committee on November 6, 1997 criticizing numerous findings of the Commision.. The President's Commission on Critical Infrastructure Protection was established in July 1996 to examine both physical and electronic cyber threats to eight key U.S. infrastructures (energy, telecommunications, banking and finance, transportation, gas and oil storage, water supply systems, government services and emergency service). The Commission will develop a comprehensive national strategy for infrastructure assurance. The full report is available at http://www.pccip.gov =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ NOMINATIONS AND NEW APPOINTMENTS The President's National Security Telecommunications Advisory Committee was established under Executive Order 12382 to provide the President with technical information and advice on national security telecommunications policy. The committee is composed of no more than 30 members who have particular knowledge and expertise in the field of telecommunications and who represent elements of the Nation's telecommunications industry. The President appointed Mr. Charles R. Lee and Mr. Van B. Honeycutt to the Committee. The Advisory Committee on High Performance Computing and Communications, Information Technology, and The Next Generation Internet will provide valuable guidance and advice on all areas of high performance computing, communications, and information technologies to the President, the Office of Science and Technology Policy, and the Federal agencies involved in the Computing, Information, and Communications R & D, including the Next Generation Internet Initiative. They will also provide valuable guidance on the Administration's efforts to accelerate development and adoption of Information technologies that will be vital for American prosperity in the 21st century. The President announced his intent to appoint Mr. David W. Dorman, Dr. Joe F. Thompson, Dr. Irving Wladawsky-Berger, and Dr. John P. Miller to the Committee. President Clinton announced his intent to appoint Dr. Jeffrey Jaffe, Mayor Sharon Sayles Belton, Norman Mineta, and Joseph Holmes as Members to the Advisory Committee to the President's Commission on Critical Infrastructure Protection. The Advisory Committee, which is made up of infrastructure industry executives and private-sector leaders will advise and support the President's Commission on Critical Infrastructure Protection. ________________________________________________________________________ =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= Washington Update is a biweekly publication of the U.S. Public Policy Office of the Association for Computing http://www.acm.org/usacm 666 Pennsylvania Ave., SE, Suite 302B, Washington, DC 20003. 202/298-0842 (tel), 202/547-5482 (fax). ________________________________________________________________________

1 0

Re: auto signing messages Re: perl from Amad3us
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Amad3us Anonymous (if that is his/her *real* name wrote: > Antonomasia says: > > Real paranoiacs don't put temporary files in world-writeable directories. > > If a hostile user symlinks your majordomo binary (or something) > > to /tmp/.sig999 you're going to overwrite it with garbage. > Sure. But have you looked at pgp2 source code? (smirks). > > (Hint, temporary files all over the place.) For you old farts who have not been out in the real world for a while, you should make note of the fact that the price of memory has dropped, and it is now feasible to implement RAM disks to store temporary files. You can also direct a program to use a RAM trash-disk for its temporary files, wiping it immediately after use without having to worry about fucking up your other temporary files.

3 2

Re: PGPsdk is now free for non-commercial use
by Alan Olsen 17 Dec '03

17 Dec '03

At 06:53 PM 11/16/97 -0800, Lucky Green wrote: > >At 06:25 PM 11/16/97 -0800, Bill Stewart wrote: >>I'm pleased to see PGP Inc. permitting development of freeware, >>but at leased from a first reading of the license, >>it's a _really_ restrictive definition of "freeware" - >>not only does the software have to be free, but it can only be used >>in extremely restrictively non-commercial activities. > >The idea is simple: you make money from software that costs the authors >lots of money to develop or use their software in a business environment >(=to make money), you have to pay the people that spent time, effort, and, >yes, money, on making it happen. > >Sounds reasonable to me. I can see where they want to make a profit, but the licence makes the software virtually undistributable by normal shareware channels. >From what I have read of the license it is against the license agreement to ship the libraries on a CD of shareware products for which a price is charged. If I were to create a program using the libraries and upload them to Simtel or one of the other big archives, it could not be distributed on a Simtel CD-ROM that someone was charging money for. (Ignoring the usual export issues.) I see this as a big problem. --- | "That'll make it hot for them!" - Guy Grand | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

2 2

cryptx spam - des-based program.
by Bill Stewart 17 Dec '03

17 Dec '03

I got spammed by someone selling Cryptx, a DES-based encryption program. I'm assuming they know they're spamming; at least the person who sent the email did, though perhaps the vendor doesn't understand it. In addition to selling crypto, their web page says they also sell an "Automates the process of submitting your URL's to over 370 sites!" which is at least on the borderline tacky side. Their web page doesn't look like snake oil, though they _really_ need to emphasize the importance of good keys (they talk about DES having been cracked once by the distributed internet crack, and neglect to mention that DES with easy-to-guess keys has been cracked regularly for years. So not only do the Bad Guys abuse the level of effort of the crack, but so do well-meaning but clueless people.) I'd guess they don't do anything like generating a random high-entropy session key and encrypting it with a passphrase. Also, they promise an "Update to 448-Bit encryption", which says that even if there's no snake oil now, there may be soon. Upgrade so you can email your encrypted files right through Cryptx. You will never have to worry about sending uncompromised email again. All of the domain names in the SPAM are from directsend.com Info World PO BOX 92223 City of Industry, CA 91715-2223 except of course than nrply.com is non-existent. The web page gives its identity as PBD Technologies 13502-H Whittier Blvd. Suite 304 Whittier, CA 90605 Their web page also says they have offices in Portland and Toronto, presumably including the person named in the whois for crypt-x.com Mark Weber CRYPT-X-DOM 4534 SE 17th Ave. Ste. 153B Portland, OR 97202 US Administrative Contact: Weber, Mark MW3634 coolio(a)AIMARKET.COM 503-235-9442 (FAX) 503-235-9254 > Return-Path: <cryptx(a)ultra-mail.com> > Received: from digital-coupons.com ([206.84.21.30]) > by ixmail2.ix.netcom.com (8.8.7-s-4/8.8.7/(NETCOM v1.01)) with ESMTP id NAA21132; ; > Sat, 15 Nov 1997 13:50:22 -0800 (PST) >From: cryptx(a)ultra-mail.com >Message-Id: <199711152150.NAA21132(a)ixmail2.ix.netcom.com> >Received: by digital-coupons.com (8.8.7/8.8.5) with SMTP id QAA07327; > Sat, 15 Nov 1997 16:48:59 -0500 (EST) >Date: Sat, 15 Nov 1997 16:48:59 -0500 (EST) >Received: from by (8.8.5/8.7.3) with SMTP id XAA02678 for ; Sat, 15 November 1997 13:38:59 -0700 (EDT) >To: GetProtected(a)nrply.com >Subject: Protect your data from prying eyes! > >Hello - >Do you have information that is vulnerable? Do you >utilize Email, FTP, HTTP, or just browse the Net? >If so, your personal and business information is accessable >to those who know how to find it. Now you can have the most >powerful Data Security program, Cryptx, completely encrypt >your data to keep out prying eyes. Why take the chance? Get >your information completely secured and keep everyone from >children to co-workers OUT of your private data. For more >information and to get your FREE, fully-functional, Demo today >simply go to our website at: >http://www.ultra-mail.com/cryptx >For questions or information on Dealer opportunities, please >send a message to: cryptx(a)ultra-mail.com >Thanks- >Cryptx Staff > >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >to be permanently removed, please send a message >to: remove(a)ultra-mail.com > > Thanks! Bill Bill Stewart, stewarts(a)ix.netcom.com Regular Key PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0