December 2003 - cypherpunks-legacy

"Protect the children" as passphrase to Constitution
by tcmay＠got.net 17 Dec '03

17 Dec '03

I was reminded the other night by someone of the "'National security' is the root passphrase of the Constitution." The idea being that the normal Constitutional protections are bypassed by invocation of "national security." But it occurs to me that we are seeing a new variant of this: "Protect the children." Some recent examples: - Clinton's Executive Order today which limits advertising of cigarettes, limits the display of tobacco-related symbols and words on t-shirts, baseball caps, billboards, and publically-visible signs at sports events. (There were all kinds of details, most of them blatantly in violation of the First Amendment. I half-watched the Clinton announcement, but didn't take notes...consult your newspaper or the Web.) The critical phrase: "We have to protect the children." (Oh, and one amazing detail: the possible issuance of I.D. cards to all of those under the age of 18. Besides being useful for things like curfews, video tape rental prohibitions, and the cigarette ban, it would lead to I.D. cards for those over 18. naturally (if those over 18 don't have to carry them, then all a child less than 18 has to do is to claim not to have to carry one because he's 18!) - The whole Exon and V-chip debates, now likely to be passed by Congress, are about "protecting children." - and the Oklahoma City bombing, not that I supported it in any way, was seen as especially horrific because of the children that were killed. This means that restrictive legislation, such as bans on explosives information, guns, etc., can be justified as measures to "protect children." And so on. Now clearly this strategy will be welcomed by many. It's hard to argue against children and against the "protection of children." Arguing the Constitutional side is tough when "the children" are at issue. More speculatively, I think Clinton has hit on this strategy as a way to line up support from the Republican majority in Congress on many key issues. There may even be repercussions for welfare and health care issues (which Clinton can also cast as "protect the children" issues). The potential crypto relevance? Look for arguments about limiting access to strong crypto to be more heavily focussed on "pedophiles" and "pornographers." Look for calls to have a national I.D. card--which serves many State-needed purposes (and I don't mean in terms of Revelations). A national I.D. card could then be tied in to GAK/escrow systems. "We have to protect the children." --Tim May Special note: My ISP has changed its domain name from "sensemedia.net" to "got.net" (as in "got milk?"), so I have to again ask you all to bear with me and use my new e-mail address, "tcmay(a)got.net". ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

SSL bruting progress (was: Crypto-relevant flame interruption)
by aba＠dcs.exeter.ac.uk 17 Dec '03

17 Dec '03

Fred <admin(a)dcwill.com> wrote on cpunks: > Would someone be so kind as to provide a status report on the > planned SSL attack? Last word was that codework was still underway, > but I might have missed something relevant to this project amidst > all of the noise about excessive list noise. There has been no public announce. This is due to a desire to make real sure it's going to work before announcing. So, we're working on it. Software is basically all there, but we're experiencing difficulties, like during a trial run no key for Hal's challenge seems to be being found, even though the same software finds test keys. We've not managed to isolate the cause of it, as (two people) have nearly swept the entire keyspace (heh they had a bit of spare compute) and no key has been forthcoming so far. Give it a few more days - until monday - and if no key is found we've got problems, 3 possible outcomes looming: a) we find the key to Hal's challenge and go whoopee! Request a 2nd challenge from Hal? and announce a public sweep to see how fast it can be done. b) something is wrong with the interpretation or the gathering of the SSL session data Hal based his challenge on (difficult to see as there are numerous fixed fields which tally with the SSL spec.) c) software problems (also difficult to see, the software in all cases (3 separate versions) finds the keys of examples provided by Andrew Roos (ie he generated a key manually, so we know where to start for testing purposes)). The likelihood of a) happening is receding, as the last key space gets ticked off. More news next week. Adam

2 1

Re: PERRY METZGER: YOUR MOMMY IS CALLING YOU HOME
by anon-remailer＠utopia.hacktic.nl 17 Dec '03

17 Dec '03

Brad Shantz writes: > >I'm tired of Perry. > > <REST DELETED> > > I think that any Perry bashing can be taken offline. I don't think that 700 > people subscribed to the "I Hate Perry Metzger" list; Nah, that list is way bigger than cypherpunks.

1 0

Re: "Protect the children" as passphrase to Constitution
by liberty＠gate.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Every time I hear some porker say, "Protect the children," the BS translator that resides in my brain replaces the word "Protect" with the words, "Treat adults like." Probably a mental defect. JMR PS RIP Jerry G. Let's cease the flamewar for 24 hours, in memory. - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Freedom isn't Freeh iQCVAwUBMCq1/m1lp8bpvW01AQGg8gQAiq+kzyQopCLFQtzPhr4WIN42I41ZDPyh 1qH1/DBHAS8BaNqK8f9jObEvG4a5dlpbzp5c0FdJ2cbcZtG/GZIG3clUPNd0cqtf hR1abL8pTgoj7WMclOMF6iclzRn/fcHY9VawZHT10At3I11eyjOq3hBsfIU1c1IG 9pjlPeEW/IE= =Ci1C - -----END PGP SIGNATURE----- Regards, Jim Ray PGPsign all your cleartext messages! [Makes the statists nervous.] - ------------------------------------------------------------------------ PGP key Fingerprint 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 Key id. # E9BD6D35 - ------------------------------------------------------------------------ Support the Phil Zimmermann (Author of PGP) Legal Defense Fund! email: zldf(a)clark.net or visit http://www.netresponse.com/zldf ________________________________________________________________________ - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMCq3ESoZzwIn1bdtAQGfFQF9FL9ptx5QVfg6nGL+NePHg6cuq3B2fa/U 9Ir2SmI6NZQPgjvFtCPO9ZmepaLBkEqs =+nDm -----END PGP SIGNATURE-----

1 0

UHS encoding
by anon-remailer＠utopia.hacktic.nl 17 Dec '03

17 Dec '03

has anyone heard of UHS ? ? its universal hint system . . its for game hints . . its data files are encrypted and a decoder decodes only the hints you need . . anyone know what encryption is used ? ? its probably very weak but a good idea . . i wonder if this is export - restricted too ! ! --

1 0

PRZ encrypted voice software release imminent
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

as if PRZ is not already enough of a folk hero.... BTW, he has been beat by Nautilus, right? Nautilus is public domain, right? (I'm thinking of that public domain voice encryption released a few mos ago). I wonder if he is going to try to put a "spin" on this one to differentiate it from the other one. on the other hand, just having his name on it is plenty of "spin"... ------- Forwarded Message - ------- Forwarded Message Date: Thu, 10 Aug 1995 06:47:31 -0400 (EDT) From: Brad Dolan <bdolan(a)use.usit.net> Subject: Washington Whisper from U.S. News (fwd) - - ---------- Forwarded message ---------- Date: Wed, 9 Aug 1995 21:26:42 -0700 Subject: Washington Whisper from U.S. News From: Vic Sussman <vic(a)clark.net> U.S.NEWS & WORLD REPORT, AUGUST 14, 1995 TAPS FOR THE CODE BREAKERS The cryptographer who riled the federal government over his popular encryption software, PGP (``Pretty Good Privacy''), claims he is only a few weeks away from launching yet another dazzling piece of software: PGPfone. Philip Zimmermann's latest product permits virtually untappable telephone conversations through personal computers. But the launch of the software, which uses military-grade encryption to scramble transmissions, is likely to sharpen the debate among those who worry about such technology falling into criminal or enemy hands and those who consider it essential for secure communications, especially on the Internet. In a test of the new software last week, a U.S. NEWS writer, using a microphone-equipped laptop in Washington, found the encrypted conversation with Zimmermann in Boulder, Colo., to be remarkably clear. Zimmermann, who ran afoul of the government over charges--strongly denied--that he illegally ``exported'' the PGP software on the Internet, says he plans to give away his new software for free. Why? ``I can't simply stop doing what I do because I'm afraid of angering the government,'' he says. ``Americans have a right to private conversations.'' Copyright, 1995, U.S. News & World Report All rights reserved. ............................................................................. Vic Sussman : "Lines of light ranged in the nonspace U.S. News & World Report : of the mind, clusters and constellations vic(a)clark.net : of data. Like city lights, receding..." http://www.clark.net/pub/ journalism/vic.html : _Neuromancer_ William Gibson .............................................................................. - ------- End of Forwarded Message ------- End of Forwarded Message

1 0

No Subject
by Ford Prefect 17 Dec '03

17 Dec '03

I think we ought to just throw TIM MAY out of the list. let's EXCOMMUNICATE HIM. its becoming increasingly clear that he is the source of all our problems. I mean, isn't it obvious that our progress has stalled? who has written any code within the last 3 days? if we got rid of him, it would be EVOLUTION IN ACTION. this is ERIC HUGHES' mailing list, and eric hughes knows how to write some decent code. I mean, TCM's signature doesn't even have any geek code, and he hasn't changed it in 4 years or so, at least since my last grandparent died (and she was considerably more skillful at programming than TCM by knowing how to make toast). get rid of all the pricks who continually spout and spew conspiracy theories. let TCM go and find himself a new mailing list. that would be a fair comeuppance if he found that he couldn't learn to do squish because he doesn't have the slightest clue. he's a leech, a parasite, sucking on the work of others, pretending that he is at the forefront of our cause when he is only at the forefront of maniacal egomania. what has he contributed to the cause? SQUAT. just a lot of ranting about conspiracy theories and his Stock Pick of the Week crap. "the web is really growing. people should focus on it". well, THANK YOU VERY MUCH, MR. BRILLIANT COMMENTATOR AND VISIONARY, T.C.MAY, I would have never have THOUGHT of that in a zillion years, but now that you point it out, I GUESS YOU'RE RIGHT.

4 3

No Subject
by David L. Garrard 17 Dec '03

17 Dec '03

---------- From: Ford Prefect[SMTP:remailer@bi-node.zerberus.de] Sent: Friday, 11 August 1995 2:31 To: cypherpunks(a)toad.com I think we ought to just throw TIM MAY out of the list. let's EXCOMMUNICATE HIM. its becoming increasingly clear that he is the source of all our problems. I mean, isn't it obvious that our progress has stalled? who has written any code within the last 3 days? if we got rid of him, it would be EVOLUTION IN ACTION. More drivel deleted. Personal attacks in this mailing list is highly inappropriate but doing through a Remailer is downright pathetic. Dr David L. Garrard

1 0

Re: PRZ encrypted voice software release imminent
by Richard.Johnson＠Colorado.EDU 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >BTW, he has been beat by Nautilus, right? Nautilus >is public domain, right? (I'm thinking of that public >domain voice encryption released a few mos ago). >I wonder if he is going to try to put a "spin" on this >one to differentiate it from the other one. on the >other hand, just having his name on it is plenty of >"spin"... When I originally volunteered to help with coding on the PGP voice stuff, the author (I think) of Nautilus sent me, and the rest of the PGP voice mailing list participants, version 0.2 for review. The initial plan was to take the Nautilus code, rewrite it in a more modular fashion, and add encryption to create voice PGP. However, the incarnation of the PGP voice mailing list we were using for the project just died, and I heard nothing more about Nautilus after I submitted my comments and suggestions -- until the release of Nautilus 0.9. So if Nautilus code was not used in PGPfone, I suspect licensing or other such issues got in the way, and Will Price and crew started from a different base. Then again, perhaps Nautilus and PGPfone have much in common. We'll have to wait for the PGPfone release for the answer. Richard -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMCrPhfobez3wRbTBAQHM8AP6AjrIg3j2FjRW1vXSLJQ201cTbOic9Tms 3e6TtCdKu4m9OfOyJDIa+RuW+gRIpF8uBmhDAT8d50rhWa9RdEqAgxRSS6mLtzho ExxjSaX3JPdbZjW5G6kMamN9czMFd1hfkxfBMTMVLFdnYzUhG/MQZCyJzLHqcy0c idV9OPHTrck= =bGwv -----END PGP SIGNATURE-----

1 0

If only Vxxxx Fxxxxx had used encryption....
by monty.harder＠famend.com 17 Dec '03

17 Dec '03

C'punks: [Wait! This =is= crypto-related! I promise!] Heard on the news today that Bernard Nussbaum said he had done "nothing irregular" in going through Vince Foster's effects immediately after his demise, in order to secure "sensitive information". Presumably, Nussbaum's contention is that some of the information in Foster's possession was covered by attorney-client privelege, and therefore the Authorities had no right to take it into possession. (IANAL-Comments from those who are?) Anyway, this case got me to thinking: If Vince had kept all his "sensitive" things encrypted, and never written down the passphrase, then the data would effectively have died with him. In this case, lack of key escrow is not a bug, but a feature! Then I thought some more - that the whole Key Escrow thing needs to be rethought: Instead of escrowing the private key, we need to develop better key management techniques for multiple recipients. For example, if Alice is an attorney representing Carol Client, Bob and Ray are partners in Alice's firm, which uses escrow agent E; and A, B, C, R and E are the public keys (and A'... are the private keys) of our dramatis personae: Carol sends her message to Alice as usual, generating the session key S, and encrypting it S'=A(S). Whenever Alice recieves a message, after decrypting the session key [S= A'(S')] she adds to it an additional S"= E( B(S) ) and S"'= E( R(S) ) or some other construct which involving Shamir Sharing or whatever. The details of the protocol(s) can be worked out after the basic premise: There is no reason for anyone to give up the "master key" to all of their business, when the minimal overhead in storage space for adding an escrowed =session= key will suffice. PGP needs a mechanism to handle "detatched session keys", so that our escrow agent can, upon notification by Bob and Ray that Alice has [died | left the firm], process the whole package of S" and S"' back into B(S) and R(S), so that Bob and Ray can carry on their work. Just as with a detatched signature certificate going to a notary, the detatched session key does not give the escrow agent any knowledge of the content of the message itself. Another option is to put the whole creation of S" and S"' on to Carol, which requires a public key that specifies E and {B, R}, as well as the particular escrow protocol involved. This could be tricky to implement. Also, Carol needs to be able to specify to Alice that she is retaining a copy of the communication, encrypted to self, and therefore Alice need not escrow the session key for this particular message. Comments? * "All authority belongs to the people" -Thomas Jefferson --- * Monster(a)FAmend.Com *

2 1