December 2003 - cypherpunks-legacy

Re: Text of Wassenaar regulations, with comments
by Arnold G. Reinhold 17 Dec '03

17 Dec '03

At 5:59 PM +0000 12/14/98, Frank O'Dwyer wrote: >"Arnold G. Reinhold" wrote: >> I am not a lawyer and different administrations could issue more >> restrictive rules (as the US does), but the new Wassenaar regulations >> themselves do not seem to affect free distribution of programs like PGP and >> Linux as long as they qualify as "public domain" as Wassenaar defines it. > >Unfortunately, AFAIK copyrighted software is NOT public domain. GPL and >the like usually make a big song and dance to the effect of "this s/w is >copyrighted and not in the public domain". Even worse, I think the >original PGP is pretty clearly not in the public domain, since >commercial uses must be paid for. So does anyone know just how does >Wassenaar define the term "public domain", and is open source indeed >covered? > This is the definition of PD from Wassenaar's "DEFINITIONS OF TERMS USED IN THESE LISTS" http://www.fitug.de/news/wa/Def.html: >GTN "In the public domain" > > GSN This means "technology" or "software" which >has been made available without restrictions upon its further >dissemination. > > N.B. Copyright restrictions >do not remove "technology" or "software" from > being "in the public domain". I think that is pretty clear, but it might be wise for people who are distributing open source crypto to include language in their legal notices stating that the material is to be considered in the public domain for the purposes of the Wassenaar arangement and waving any rights that would cause the export of the material to be prohibited under that arangement. Check with a good lawyer first, of course. Arnold Reinhold

1 0

Forced DNA Collection
by Eric Cordian 17 Dec '03

17 Dec '03

Top Story on AP... NEW YORK (AP) -- Despite objections from civil libertarians, the city's police commissioner proposed Monday to take a DNA sample along with the fingerprints of everyone arrested. Commissioner Howard Safir said the test would solve crimes and help curb repeat offenders. ``The innocents have nothing to fear ... only if you are guilty should you worry about DNA testing,'' he said. ... In Britain, where DNA samples are taken from every suspect, officials have solved 17 major cases using such data since 1995, according to the National Institute of Justice Journal. -- Eric Michael Cordian 0+ O:.T:.O:. Mathematical Munitions Division "Do What Thou Wilt Shall Be The Whole Of The Law"

1 0

MEDIA RELEASE: Data Fellows Joins the Microsoft Security Partners Program
by Marita Nasman-Repo 17 Dec '03

17 Dec '03

This message comes from Data Fellows. You have previously expressed interest in our products or asked to be included on one of our press release lists. To remove yourself from our mailing lists, reply to this message with the text "remove " in the subject field. PRESS RELEASE FOR IMMEDIATE RELEASE Data Fellows Joins the Microsoft Security Partners Program Helsinki, Finland, December 15, 1998-- Data Fellows, the global leader in developing data security software solutions, has been invited to join the Microsoft Security Partners Program. The Microsoft Security Partners Program (http://www.microsoft.com/security/partners) provides customers with the tools and information they need to establish, test and maintain effective information security for their computing infrastructure. The program brings together software manufacturers, security consultants and security trainers, making it even easier for customers to provide robust security in their Microsoft Windows NT operating system-based networks. Three Data Fellows products are included in the Microsoft Security Partners Program. F-Secure Workstation Suite consists of malicious code detection and removal as well as unobtrusive file and network encryption, all integrated into a policy-based management architecture. F-Secure VPN+ provides a software-based, IPSec/IKE VPN solution scaleable for large corporate networks as well as remote and small office networks. F-Secure FileCrypto is the first and only product to integrate strong real-time encryption directly into the Windows NT-based file system. "Microsoft is pleased to include Data Fellows as part of its Security Partners Program," said Karan Khanna, Windows NT Security Product Manager at Microsoft Corp. "This program will help our mutual customers develop and deploy secure solutions built on the Windows NT platform." "The relationship with Microsoft shows Data Fellows commitment to improve the native security of standalone and networked computers with a comprehensive, centrally managed suite of security services," said Risto Siilasmaa, president and CEO of Data Fellows. "Data Fellows is committed to providing globally available seamless security for Windows users; security that is strong yet easy to manage and economical." Data Fellows is one of the worlds leading developers of data security products. The company develops, markets and supports anti-virus, data security and cryptography software products for corporate computer networks. The company has head offices in San Jose, California, and Espoo, Finland, and branch offices in Washington, DC, Calgary, London, Paris and Munich, as well as corporate partners, VARs and distributors in over 80 countries. All F-Secure products are integrated into the F-Secure Framework management architecture, which provides a three-tier, scaleable, policy-based management infrastructure which minimizes the costs of security management. In addition to the products in the Microsoft Security Partners Program, the F-Secure product line also includes the following products. F-Secure Anti-Virus is the most comprehensive, real-time virus scanning and protection system for all Windows platforms. It utilizes multiple scanning engines, including F-PROT and AVP. F-Secure SSH provides secure remote login, terminal, and other connections over unsecured networks. It is the most widely used secure remote administration tool. F-Secure NameSurfer is the solution for remote Internet and intranet DNS administration. Its easy-to-use WWW user interface automates and simplifies DNS administration. Data Fellows has customers in more than 100 countries. Its customers include many of the worlds largest industrial corporations and best-known telecommunications companies, major international airlines, governments, post offices and defence forces, and several of the worlds largest banks. Data Fellows was named one of the Top 100 Technology companies in the world by Red Herring magazine in its September 1998 issue. Other commendations include the Virus Bulletin 100 % award (several times in 1998); Hot Product of the Year 1997 (Data Communications Magazine); and the 1996 European Information Technology Grand Prize. For more information, please contact USA: Data Fellows, Inc. Mr. Pirkka Palomaki 675 N. First Street, 8th floor San Jose, CA 95112 USA Tel. +1 408 938 6700, fax +1 408 938 6701 E-mail: Pirkka.Palomaki(a)DataFellows.com Europe: Data Fellows Ltd. Mr. Ari Hypponen PL 24 FIN-02331 Espoo Finland Tel. +358 9 859 900, fax. +358 9 8599 0599 E-mail: Ari.Hypponen(a)DataFellows.com -- Marita.Nasman-Repo(a)DataFellows.com, World-Wide Web http://www.DataFellows.com

2 1

....
by Anonymous 17 Dec '03

17 Dec '03

> For fast file-system crypto, you really want to implement the ciphers > so that you encrypt several blocks at a time. ... > I'd like to know how this method compares to using an interleaved cbc > mode - for example 8-way interleaved cbc. The n-way interlaved > cbc-mode works by chaining each n'th block together instead of each > block. [...] Am I missing something? In either case, you need to be sure that changed data is always encrypted with different parameters -- that is, a changed file should be encrypted with a new IV or different offset into S1 and S2. Otherwise, the attacks used to recover badly wiped information could be used to look back in time, so to speak, and figure out which portions of the file were changed. It's more of a problem if you're using ofb o ecb o ofb (i.e., the CFS mode) than an interleaved CBC mode. The 8-way interleaved CBC mode should have different IVs for each "lane" (that is, a monster 512-bit IV) -- otherwise, files data types with repetitions in the headers could be identified. The IV should be secret to completely rule out leakage. However, there are some important restrictions on how you can use the key in making an IV -- I suggest something like this to ensure nothing is messed up: hash the passphrase into K0, use nDES-OFB with K0 to make a K1 and K2, then nDES-OFB with K1 for making the IVs which nDES-interleaved-CBC uses with K2 for the actual encryption. > > astor > > -- > Alexander Kjeldaas, Guardian Networks AS, Trondheim, Norway > http://www.guardian.no/

1 0

No Subject
by holist 17 Dec '03

17 Dec '03

Tim May wrote: >Clearly the Wassenaar folks will be so influenced by a few thousands >computer users withdrawing from the Net for one frigging day that they will >rethink their Orwellian plans and will admit their crimes in an orgy of >self-criticism. Like the Irony. But. I striked (or is it stroke?). Largely as practice - not checking my e-mail for a continuous 24 hours was a major spiritual trial. In return, I discovered a whole range of alternative ways of spending evenings. You may have heard that in several countries in Europe, telephone strikes by the public were successful in bringing telephone prices down radically. Similar strikes by interenet users were also successful in obtaining special deals, such as *flat rate local calls* (a brand new buzzword in the hereabouts), at least on internet calls. What I mean to say is there's a place for a strike. >The _only_ motivation was to induce journalists to give the think a few >column inches, if even that. "Hundreds of geeks cut their noses off to >spite their faces...details on page 75." Well, just imagine those one-day strikes becoming a kind of craze on the internet. Be honest now, you could do with one day a week when you simply avoided the frizzy screen, perhaps even two (heard about two-day week-ends, pal? When I went to school in seventies Hungary, we were allowed off every second Saturday as a great favour!) People could use their leisure-time, their time off-line, as capital, just by timing it with a little care! Boycott-brokerage! You'd be borrowing the muscle of the entire network: after all, they'd not be kind to anyone who somehow or other pissed customers off enough to drop network traffic by 10 percent? Exporting PGP within minutes of its release...now _that's_ a meaningful action! (And one which Cypherpunks continue to be good at.) How meaningful exactly? How do you know who gets it? The truly valuable work is the creation of the social structures wherein such exportation could be truly meaningful. I don't see a lot of that (perhaps you'll smirk and say they hid themselves too well). It is quite clear to me that educating the public is imperative: if people haven't got a clue as to what strong cryptography is, etc. then they're not going to remember something as foreign as Wassenaar even if it is on the evening news. But surruptitiously spreading PGP to other countries doesn't seem to do a great deal of that. What does? Hacker activities that are illegal and dangerous and probably difficult, too, have obvious potential. But I think there must also be legal options. comments, please Let's leave the "National Solidarity Against Racist Policies" crapola to the lefties. --Tim May

2 1

Re: I must admit. . . (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 14 Dec 1998 19:14:05 -0600 > From: mib <mib(a)io.com> > Subject: Re: I must admit. . . > On Mon, Dec 14, 1998 at 12:25:50PM -0800, you wrote: > > I wonder sometimes whether or not there is hope for us to ever stop > > this tyrrany. I've seen a bunch of us diss the strike saying it was > > an outlandish and foolish idea, but I hadn't seen anyone of you come > > up with something better. > > Cypherpunks write code? It's too bad they don't publish some of it in a newspaper or two... ____________________________________________________________________ What raises the standard of living may well diminish the quality of life. The Club of Rome The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1

The grandest jury nullification?
by Jim Choate 17 Dec '03

17 Dec '03

Has it occurred to anyone that if Congress really does end up voting for a censure instead of a full impeachment we will have the largest jury nullification in history, if it's based upon the consensus of the people per the various samples. ____________________________________________________________________ What raises the standard of living may well diminish the quality of life. The Club of Rome The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

3 2

Re: I missed you!
by fjaj732h＠yahoo.com 17 Dec '03

17 Dec '03

<HTML><PRE><BODY BGCOLOR="#c0c0c0">~~~HOT GIRLS LIVE~~~ (Your kind of Sex Awaits You) Pick from the Variety of Pleasure... Amateur Sluts, Hollywood Hookers, Horny Strippers, 20 LIVE NUDE SEX SHOWS, HardCore Streaming Videos, XXX Girl Girl Action, Adult Film Stars, and YES 8,000 + XXX Show All Movies! CLICK HERE FOR ACCESS "Rated #2 on the Net for the Most and Best Variety of Adult Entertainment!" </PRE></HTML>

1 0

E-Snoop Law Review
by John Young 17 Dec '03

17 Dec '03

South Africa published in November a discussion paper, "Review of Security Legislation" on electronic surveillance law in several countries -- South Africa, US, UK, France, Germany, the Netherlands, Belgium, Canada and Hong Kong, with detailed review of legislation of the last two -- as a basis for new legislation to protect against latest intrusive technology, or, rather, to restrict its usage to government agencies: http://jya.com/za-esnoop.htm (364K) Its comparative review of surveillance law is informative for the way it lays out the similarity of each country's definition of the threat of technology -- somewhat to citizen privacy but more importantly to law enforcement. It notes variations in privacy protection law, and finds, for example, US and UK deficiencies in that area even as these countries excell in manufacturing the evil tools. Still, South Africa is joining the crowd in tightening controls on technology by proposing that telecomm providers make their systems accessible to government (at their own expense), emulating the recent US-EU snooping agreement advanced by the FBI and Europol. Thanks to APB for pointing.

1 0

Trans World Specials Fare Sales
by Trans World Specials 17 Dec '03

17 Dec '03

Welcome to Trans World Specials for December 15th, 1998. This week marks the beginning of a great enhancement for Trans World Specials. To make it easier for you, telephoning is no longer necessary. After you read over the list of Trans World Specials just point your browser to http://www.twa.com/hotdeals and book your trip directly on our website. It's easy and only takes a minute. Just point and click. All tickets must be purchased between December 15 and December 18, 1998. All domestic fares allow travel to originate in either direction, except New York/Las Vegas, which may originate in New York only. Travel to St. Maarten may originate in New York City only. Did you know TWA has gift certificates available for you to give to your friends and family? Read all about it on our home page at http://www.twa.com On to this week's Trans World Specials. *************INTERNATIONAL************ Roundtrip fare from NEW YORK, NY (JFK) to: (Depart New York on December 17 or 18 and return December 19-21, 24, 25) Fare: City: $248 St. Maarten, Netherlands Antilles ************DOMESTIC***************** Roundtrip fare between ST. LOUIS, MO and: (Depart Friday 12/18 after 7 p.m. and return Monday or Tuesday 12/21 or 12/22) Fare: City: $129 Atlanta, GA $139 Dallas/Ft. Worth, TX $139 Pittsburgh, PA $89 Wichita, KS Roundtrip fares between ST. LOUIS, MO and: (Depart Friday 12/18 after 7 p.m. or all day 12/19 and return Monday or Tuesday 12/21 or 12/22) Fare: City: $89 Dayton, OH $69 Louisville, KY $69 Springfield, MO Roundtrip fare From NEW YORK, NY (JFK) to: (Depart Friday 12/18 or Saturday 12/19 and return Monday or Tuesday 12/21 or 12/22. Nonstop) Fare: City: $239 Las Vegas, NV **************ALAMO**************** Alamo offers the following low rates valid 12/12/98 - 12/14/98. $17.49 Las Vegas, NV - St. Louis, MO $20.49 Atlanta, GA - Pittsburgh, PA For reservations call Alamo at 1-800-GO-ALAMO and request rate code RT and ID # 443833. For online reservations visit Alamo at: http://www.goalamo.com ********HILTON HOTELS/RESORTS**************** Hilton Hotels/Resorts offers these low rates valid the night of 12/18/98 - 12/21/98. $59 Hilton Arlington - Arlington, TX (Includes breakfast for two! Visit Six Flags Over Texas and Hurricane Harbor) $85 Hilton Atlanta & Towers - Atlanta, GA (Downtown near Peachtree Center, SCITREK museum, and the Underground) $49 Hilton Atlanta Northwest - Atlanta, GA (Convenient to Six Flags, Marietta, and downtown Atlanta) $79 Hilton Dallas Parkway - Dallas, TX (N. Dallas location, free shuttle to Galleria and Valley View Shopping Malls) $76 The Seelbach Hilton Louisville - Louisville, KY (Located in downtown Louisville close to shopping, fine dining and theatres) $85 Hilton Pittsburgh & Towers - Pittsburgh, PA (Near theatres, museums, and restaurants, overlooks Pointe State Park) $89 Hilton St. Louis Frontenac - St. Louis, MO (Free airport shuttle and parking, located midtown near shopping and entertainment) For reservations call Hilton at 1-800-774-1500 and ask for Hilton Value Rates. Visit Hilton online at http://www.hilton.com ***************TERMS & CONDITIONS************** Airfare: GENERAL : Fares shown are roundtrip, nonrefundable and nonchangeable. Tickets may only be purchased via the TWA website. Fares do not include Passenger Facility Charges of up to $12 depending on itinerary. Electronic ticketing and credit card form of payment only. Offer is not available in conjunction with any other promotion, coupon, or discount. Seats are limited and may not be availabe on all flights or dates. Standby is not allowed. Tickets must be purchased at the time of booking. Travel is on TWA only, no other air carrier. Certain domestic airfares of $89 or higher may be discounted by redeeming 5000 Aviatior miles. Aviator miles are not earned when redeeming miles for fare discount. Aviators earned and purchased upgrades may not be used in conjunction with the 5000 mile redemption. Once miles are redeemed they may not be recredited to the members account and are nonrefundable. DOMESTIC: All fares allow travel to originate in either direction (except NYC/LAS which may originate in NY only). All fares allow departure Friday 12/18 after 7 p.m. and certain fares indicated also allow departure all day Saturday 12/19. All return travel is allowed either Monday or Tuesday 12/21 or 12/22. All travel must be completed by 12/22. Travel between New York and Las Vegas via nonstop flights only. Tickets must be purchased by 12/18/98. INTERNATIONAL: Travel for St. Maarten must originate in New York only and may depart December 17 or 18. Return travel is allowed December 19-21, 24, 25. Fare does not include $47 in APHIS/U.S. Customs/Immigration/ U.S. Departure/Security Surcharge fees. Aviator upgrades are not permitted. Tickets must be purchased by 12/18/98. Car Rental Conditions: Taxes (including in California, VLF taxes ranging up to $1.89 per day), registrations fee/tax reimbursement, and airport access fees/taxes, if any, are extra. Optional CDW, liability insurance, fuel, additional driver fee, drop charges and other optional items are extra. Rates higher for renters under age 25. Rates valid for economy rentals(unless stated otherwise by Alamo) commencing on Friday and ending by 11:59 PM on Monday. Rates only valid during week in which they are published via TWA Internet site. A 24-hour advance reservation is required. Availability is limited. Two day minimum rental required. Hotel Conditions: Hilton Hotels and Resorts special rates are available only during the specific week in which they are published via the TWA Hot Deals Internet site and the HiltonNet Internet site. Limited availability; rooms at these Hilton Value Rates are sold on a first-come, first-served basis. Availability, rate, and terms of occupancy are not guaranteed and will be confirmed at time of reservation. Participating hotels, rates and terms are subject to change without notice. Single or double occupancy. Early check-in, late check-out subject to availability. No extra charge for children when they stay in parents' or grandparents' room; total room occupancy subject to local fire safety regulations and other applicable laws or regulations. Rates vary by season, do not include any other fees or charges, including without limitation state or local taxes or gratuities and are subject to change without notice. Advance booking required. Advance deposit may be required. Offer cannot be combined with any other special discounts, coupons, certificates, special rates, promotional offers, award stays, or meeting/group stays. Hilton reserves the right to cancel any Hilton Value Rate at any time without notice. Hilton is not responsible for the terms of other offers in the program, or for any electronic, computer, telephone, security, virus or any other problem or damage related to use of the program or its offers.

1 0