December 2003 - cypherpunks-legacy

Re: Oh No! Nazis on the Nets
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

> I will indeed shoot at anyone that is trying to shoot at me. Tell me, > are the Nazis currently censoring you in Germany? Boy, what a comparison. I assume you are defending against bank robbery by taking them their money... > My point was very simple: a free > country is one in which people may speak their mind. A free country is a country where weak people can be protected before bad people with bad ideas speaking their mind. If the USA was a free country, you wouldn't have so many murders by gun. Is it an essential part of freedom to be free to attack everyone? > You cannot keep a > country free by imposing censorship; it is a contradiction in terms. You cannot keep a country free by allowing everyone doing whatever they want; this is a contradiction in terms. > > I wish it were true. They were trying this for many years. We all thought > > that Naziism will never come back because the lesson (WW II) was big enough. > > But it didn't work as you can see in the news magazines. > > Using your own criterion, the censorship hasn't worked either. We DO NOT HAVE CENSORSHIP!!! (How many times do I have to repeat?) "Let them do what they want" didn't work. > > If you can get them... > > One has no choice but to try. Don't you believe that we are trying? Do you think we are stupid? > Are you telling me that if I were to write in a newspaper "all Turks > should be killed" that this would be legal under German law? I was > under the impression that you cannot. It is illegal, because it is "Anstiftung zum Mord", instigation for murder. This has nothing to do with press. Do you want to tell me that this is allowed in the USA? Do you want to tell me this is good? > Then by definition yours cannot be good, because yours is unfree. Your are talking the hole time about things you don't know. What pieces of german press did you read? > Yes. In fact, many magazines are published with nude women in front. > You may have difficulty finding places willing to sell them, however. Isn't this a kind of censorship? Is this "can publish whatever I want"? Hadmut

2 1

Re: Oh No! Nazis on the Nets
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

Hi everyone, at the moment the mails for this thread are coming faster than I am able to write. It's 0.30 a.m. in Germany and I will go home now. At the moment I have 5 mails in the box which should be answered in my opinion, but [6 mails now] I will continue tomorrow. Sleep well and have a good night all you Cypherpunks Hadmut :-) [7 mails now]

1 0

Re: Oh No! Nonsense on the Nets
by lefty＠apple.com 17 Dec '03

17 Dec '03

>This thread becomes non-cryptographic; perhaps it should be moved elsewhere? Perhaps, if it doesn't move under its own steam, it ought to consigned to the custody of the Shooting Out Back Squad. It has long since long whatever marginal relevance it might once have enjoyed. -- Lefty (lefty(a)apple.com) C:.M:.C:., D:.O:.D:.

1 0

Re: Oh No! Nazis on the Nets
by freeman＠MasPar.COM 17 Dec '03

17 Dec '03

This thread becomes non-cryptographic; perhaps it should be moved elsewhere?

1 0

FLASH: Vice President Gore Questions Current Key Escrow Policy!
by Stanton McCandlish 17 Dec '03

17 Dec '03

National Information Infrastructure Advisory Committee met today in Washington at the Old Executive Office Building. In comments made after a question and answer period, Vice President Al Gore said that key escrow policy announced last Friday (2/4/94) had serious flaws and that he hope the issue of who holds the keys and under what terms would be given more serious, careful consideration. Gore made it clear that some amount of control of cryptography technology was necessary for national security. However, the key escrow policies announced by the Departments of Justice, Commerce & State, and the NSA, were "low level decisions" that got out before thorough analysis. In a conversation with Mitchell Kapor, Esther Dyson, and Mike Nelson (of the White House Staff), Gore said that he would prefer that the keys be held by some part of the Judiciary branch, or perhaps even by trusted, private escrow agents. He made it clear that he believed that the escrow agents named in last Friday's announcement (National Institute of Standards & Technology and the Treasure Department) were no appropriate key holders. Mike Nelson also indicated that there was real interest in a software-based escrow system instead of the hardware-based SKIPJACK standard Those of us who heard Gore were quite surprised. His remarks suggest that the key escrow policies to date do not have full support of the White House. Still, Gore was quite firm in asserting that some control of encryption technology is essential to national security. "Encryption and codebreaking have determined the outcome of world wars. He stated (incorrectly) that most our industrialized allies place must stricter controls in encryption that the US does. In fact, almost all COCOM countries allow the export of DES-based products, though some do not allow DES to be imported. The whole question of encryption was raised when Mitchell Kapor told the Vice President that over half of the Advisory Council members had serious reservations about the current Clipper/Skipjack policies. Gore and Kapor agreed that the Advisory Council should be used to have a serious dialogue about encryption policy. Given Gore's departure from the current Clipper proposals, there might actually be something to talk about. ========== NOTE: This DOES NOT mean that Clipper is going away. Part of stopping Clipper is to lift export controls on encryption and enable US companies to start producing products that enable all of us to protect our privacy with strong encryption. I urge you to write to Rep. Cantwell today at cantwell(a)eff.org. In the Subject header of your message, type "I support HR 3627." In the body of your message, express your reasons for supporting the bill. EFF will deliver printouts of all letters to Rep. Cantwell. With a strong showing of support from the Net community, Rep. Cantwell can tell her colleagues on Capitol Hill that encryption is not only an industry concern, but also a grassroots issue. *Again: remember to put "I support HR 3627" in your Subject header.* P.S. If you want additional information about the Cantwell bill, send e-mail to cantwell-info(a)eff.org. To join EFF, write membership(a)eff.org. For introductory info about EFF, send any message to info(a)eff.org. The text of the Cantwell bill can be found on the Internet with the any of the following URLs (Universal Resource Locaters): ftp://ftp.eff.org/pub/Policy/Legislation/cantwell.bill http://www.eff.org/ftp/EFF/Policy/Legislation/cantwell.bill gopher://gopher.eff.org/00/EFF/legislation/cantwell.bill ************************************************************************** Relying on the government to protect your privacy is like asking a peeping tom to install your window blinds. - John Perry Barlow, EFF co-founder The Electronic Frontier Foundation is working to protect your privacy. To help stop Clipper and eliminate export controls on cryptography, support a bill introduced in the House of Representatives, HR 3627. To support the bill, send email to <cantwell(a)eff.org>. ...................................................................... Daniel J. Weitzner, Senior Staff Counsel <djw(a)eff.org> Electronic Frontier Foundation 202-347-5400 (v) 1001 G St, NW Suite 950 East 202-393-5509 (f) Washington, DC 20001 *** Join EFF!!! Send mail to membership(a)eff.org for information *** -- Stanton McCandlish * mech(a)eff.org * Electronic Frontier Found. OnlineActivist F O R M O R E I N F O, E - M A I L T O: I N F O @ E F F . O R G O P E N P L A T F O R M O N L I N E R I G H T S V I R T U A L C U L T U R E C R Y P T O

3 2

Magic money not working bigendian
by qwerty-remailer＠netcom.com 17 Dec '03

17 Dec '03

I have not been able to get Magic Money to work right in big-endian mode using pgptl10c.zip and mgmny10d.zip. It does not work with either -DHIGHFIRST or -DHIGHFIRST plus -DHIGH_KLUDGE. The key generation seems to go OK, but then when I "mint" a coins.dat file with 6 coins in the server and try reading it in the client, all coins after the first are said to have bad signature. I have tried it with both 512 and 1024 bit keys and both fail. The previous version of magicmny.zip worked OK.

4 3

Re: Oh No! Nazis on the Nets
by richardr＠netcom.com 17 Dec '03

17 Dec '03

I have just been lurking on the cypherpunks e-mail list until I get a feel for the group dynamics, that's why I haven't made any comments about the less-than-relevant topics and the nasty ad hominum (?) attacks that seem to take up an extraordinary amount of bandwidth on this list. I thought that cypherpunks were interested in uses and practice of encryption, but I am beginning to wonder. Richard Robertson richardr(a)netcom.com

1 0

GILMORE ON TV
by Sandy Sandfort 17 Dec '03

17 Dec '03

Hey C'punks, Was everyone too busy arguing about "freedom of the press" to note a real act of Cypherpunk stealth? While some of you were rehashing WWII, Cypherpunk co-founder, John Gilmore, was slipping cryptography between the lines in a news item about the "information superhighway." The item was about a "new" way to protect against (dare I say it?) pseudospoofing. Perhaps John will honor us with an official description of Cygnus Support's new software. S a n d y

1 0

OS2 IO driver for RNG-810 random number generator is released.
by Paul Elliott 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have released an OS/2 device driver for the CALNET/NEWBRIDGE RNG-810 random number generator. The file rng-810.zip has been uploaded to ftp-os2.cdrom.com. It has been placed in the directory /pub/os2/incoming. I have recommended that this file find its ultimate home in: /pub/os2/2_x/drivers. It has also been made available in compu$erve forum: OS2USER LIB:3 as the file rng810.zip Sources are included in the file, and its is released under the GNU Public Licence. It is written in Borland C++ 3.0 and TASM(IDEAL MODE). The Borland C++ runtime source is needed to compile it. - - From the software point of view, the RNG-810 is a very simple device. Simply do a "in" instruction on the port (300h 302h 304h or 306h) depending on its jumpers and you receive a random byte. The IO driver can probably be used with any random number generator that is accessed in the same way. - ------------------------------------------------------------------------------ Paul Elliott Telephone: 1-713-781-4543 Paul.Elliott(a)hrnowl.lonestar.org Address: 3987 South Gessner #224 Houston Texas 77063 -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLVqS2fBUQYbUhJh5AQGc/QP/aGuUJ1vluEi83/5miDc2RR+IKeqwbzBy wdLP4YxTptTLaBaJvAUdBZhjX70SFUt8l5i25pEvs6nvHMjzNp0Q+w0e55E9jfkW alvvo+R5n6+l6NjuFvESmQy+6U6zvQalGwVxY+VosiSDfXNy6PJhMYbmWSN8t0h9 +C4zXAWvM8w= =KEkC -----END PGP SIGNATURE-----

1 0

Strategies for getting encryption in widespread use QUICKLY
by Bryan Ford 17 Dec '03

17 Dec '03

I recently sent a version of this message to Stanton McCandlish in response to EFF's call for support on the Cantwell bill; he said you people would probably be most interested in the idea. I was planning to sit quietly for a few weeks, watch the list, and make sure it's not just old news here before opening my big mouth. But seeing the volume of the list I may not last that long, so I'll post now. :-) --- It seems like the most effective way to fight Clipper would be to ensure that by the time the government has a chance to impose any effective controls, strong public encryption is in wide enough use to make such controls completely unenforceable. While encouraging people to always encrypt their E-mail might seem the most straightforward way to do this, most people just aren't interested enough and don't see a threat in leaving their mail open, and encryption is still inconvenient. An approach introducing encryption into some other aspect of information transfer, where it is more immediately and obviously useful, might be more successful in the short term. One of the most popular uses of the Internet is for distribution of free software, both in binary and source form. It would make the lives of many people much easier if the downloading and installation process could be made more automatic. Right now if I want to always have the latest version of GCC on my Linux box at home, I have to watch the right newsgroup for announcements, FTP to the right site, download the new version, unzip, untar, and install it (not to mention compiling it if I get a source code distribution). This is not too bad by itself, but it gets inconvenient on a "real" system containing hundreds of packages to be kept up-to-date, a new version of one coming out every day or two. It shouldn't be too difficult to automate this monitoring, downloading, and installation process, especially for binary distributions that require no complicated configuration or build sequence. But suggest this to most anyone, and they'll immediately get jittery with fear about trojan horses, viruses, and every other attach known. This is where encryption technology (specifically, public-key-based signatures) could come in. Unlike with E-mail privacy, where most people don't get a really tangible benefit, in this case encryption could be a real enabling technology: it would allow people to do what they couldn't (or wouldn't dare) do before. If it was done right, in a way that people can trust, people _would_ use it because it would make their lives easier, not more complicated. Before I get into any more detail, I want to hear what you all think about the general idea, so I'll leave it at that for now. Thanks! Bryan Ford --- Bryan Ford baford(a)cs.utah.edu University of Utah, CSS `finger baford(a)schirf.cs.utah.edu' for PGP key and other info.

6 7