December 2003 - cypherpunks-legacy

Re: art encryption...
by Pierre Uszynski 17 Dec '03

17 Dec '03

> From: Lile Elam <lile(a)art.net> > > [...] a way an artist can insure a viewer that the art > they are viewing is really that of the artist, the artist can *sign* their > art with their private key and others can check it with their public key. The problem is that's pretty much all that can be done so far: The viewer can *verfify* that the copy is a full un-molested copy of what the artist released, or for physical works, maybe that the object being scanned *is* the original object (maybe). But for pictures released in bitmap form, and then lossily compressed, cropped, scaled, dithered, and whatnot, the (ahem) authenticity of the copy can't be checked anymore. At least not if the signature was, for example, a signed message digest as has been mentioned. Message digests, in the form we now know them, do not resist lossy compression and such injury. That's what they are designed for. So, in particular, a magazine can still take a signed copy of a picture, creatively modify it slightly, and print it claiming this is original work by somebody else. In this case, the printing process itself is most likely enough to dispell any hope of recomputing the same message digest. Handling this case relies back on conventional evidence and juries. Other formats such as CAD drawings, text, and pictures in primitive forms (such as Postscript), and source and binary code, are susceptible to more: It is possible to hide some identifying info in them. But they also are susceptible to mechanical modification (lossless in terms of the "artwork", but lossy in terms of the steganography.) For example, by rewriting "for the same functionality" mechanically or manually. For a mechanical translation, the plaintiff may now have to identify which mechanical process was used before, maybe, having a case again (in addition of conventional legal wranglings). What would be ideal in all these cases is a steganographic process that would map to the whole as much as to the parts. Fractal steganography. In the case of architectural drawings, a signature of the original architects would be embedded in small sets of dimensions, in small sets of proportions, in ways the CAD language is used, in the background details of artwork, in the text included in drawings as well as in CAD files comments and variable names... etc... In summary in sufficiently numerous and different places that mechanical modification, or even extensive manual rework could still forget some instances of the signature. The signature still has to be specific enough to identify certainly the author, as opposed to being attributable to random luck (as in DNA matching). This means this signature requires a rather large number of bits (fewer if the signatures are registered precisely and provably before the works are released), but still enough bits that it is not so easy to hide many of them (depending on the medium: rather hard in text, rather easy in complex pictures.) The signature becomes part of the picture, it is not an afterthought anymore. Fractal message digests, whose verifiability would degrade gracefully as the original is more and more mutilated, would serve the same purpose for verification (you could check that a decompressed, cropped part of a picture is really from the artist who fractally signed the whole.) Conceivably it would be the same if the part was printed in weird colors or something: "some" of it still "is" from the same artist. But, for legal issues, how would that be different from copyright registration? Doesn't copyright registration rely on the same principle: a set of jurors will determine what the chance is that this is the same work or not. This just provides tools to fortify a court case. Enough ramblings :-) I'll stop now, Pierre pierre(a)shell.portal.com

1 0

Nice little privacy threat...
by L. Todd Masco 17 Dec '03

17 Dec '03

Just a little tidbit for the privacy-paranoid among us. I live in NYC, while my father, H. L. Masco, MD, lives in Florida. My dad's never lived in NYC, and I've never forwarded mail from his address to mine... in fact, I haven't forwarded anything from his address since before I left Pittsburgh. I just got a mailing from Harry & David that included a pre-printed list of folks from "my" last year's orders so I could repeat order this year. They were my father's orders from last year. Masco isn't that common a surname, so I have to wonder how often this is going to happen to people with more common surnames. -- L. Todd Masco | "A man would simply have to be as mad as a hatter, to try and cactus(a)bb.com | change the world with a plastic platter." - Todd Rundgren

1 0

art encryption...
by John Young 17 Dec '03

17 Dec '03

Responding to msg by pierre(a)shell.portal.com (Pierre Uszynski) on Mon, 19 Sep 6:32 PM > >What would be ideal in all these cases is a >steganographic process that would map to the whole as >much as to the parts. Fractal steganography. In the >case of architectural drawings, a signature of the >original architects would be embedded in small sets of >dimensions, in small sets of proportions, in ways the >CAD language is used, in the background details of >artwork, in the text included in drawings as well as in >CAD files comments and variable names... etc... In >summary in sufficiently numerous and different places >that mechanical modification, or even extensive manual >rework could still forget some instances of the >signature. [Snip] >But, for legal issues, how would that be different from >copyright registration? Doesn't copyright registration >rely on the same principle: a set of jurors will >determine what the chance is that >this is the same work or not. This just provides tools >to fortify a court case. Pierre, The fractal steganography sounds promising. Is this yours or has it been done? The need for authentic sigs on architectural and engineering drawings is not merely aesthetic. Right now municipal agencies will not accept digital documents because of the lack of verifiable authorship to establish responsibility, and liability, for the health and safety of the design and construction. Hard copy with original seal is required to prevent unauthorized manipulation. Beyond copyright protection, architectural and engineering documents are means to guide actual construction, rather than end products like paintings and drawings in the art world. If there could be a way for buildings themselves to convey authenticity, say, that they are healthy and safe, by a kind decryption by the public that could help prevent concealment of shoddy construction. It's not the drawings that assure safety but field verification of the end result that construction work was done right. What a great help if a building could convey its own message of authenticity about its fitness and safety for habitation and use. That might keep us architects more honest. Probably a long shot that your fractal idea could be stretched this far, but it is certainly needed in the flim flam world of New York City real estate where deception about building safety and health is all too common. Any other thoughts? John

1 0

(fwd) "Will You Be a Terrorist?"
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

Cypherpunks, Not all of you like posts that mention "guns" in any form, so if this the case for you, hit "D" now. I think the recently-passed Crime Act has implications for what some are calling "terrorist speech" and that Cypherpunks remailers may be construed as "PROVIDING MATERIAL SUPPORT TO TERRORISTS" in the context of being "communications equipment." Consider this "food for thought." An excerpt, and commentary by the original anonymous poster, is included below. I know that our favorite optimists, Duncan Frissell and Sandy Sandfort, are fond of saying that it's already over, that we've already won, that the state is powerless, etc., but when I read the text of the Crime Bill (available from ftp.nra.org in pub/legislation), I just can't buy that. I see a growing police force, I see U.N. blue helmets, I see many more prosecutions for a growing list of crimes, I see my gun rights being taken away, and on and on. In the section below, read carefully the sections about providing support for "terrorists." Note that belonging to a pro- or anti-abortion group in which _one_ of the members uses violence (a fistfight, a jostling of a cop, or a shooting...) makes the group a "terrorist" group, under the new language of the Crime Act. I will not be surprised to hear that the Cypherpunks group is classified as a terrorist group, for a variety of reasons (not the least of which was the "liberation" of the RC4 code, the Mykotronx-government deal info, the debates about undermining the government, the talk of assasination markets, etc.). Sorry, but I just can't "Don't worry, be happy." --Tim May Newsgroups: talk.politics.guns From: anonymous(a)extropia.wimsey.com Subject: "Will You Be a Terrorist?" Message-ID: <199409120907.AA15385@xtropia> Date: Mon, 12 Sep 1994 02:07:16 -0700 X-Mailer: mail-news 2.0.3 Remailed-By: remail(a)extropia.wimsey.com Comments: This message was anonymously remailed. Do not reply to the address in [Check it out - Cross-posted from Fidonet:] The "Crime Bill" passed by Congress recently (truename: Violent Crime Control and Law Enforcement Act of 1994) has a frightening provision that hides a boogeyman under its superficially appealing surface: *----------* *----------* *----------* SEC. 120005. PROVIDING MATERIAL SUPPORT TO TERRORISTS. (a) Offense.--Chapter 113A of title 18, United States Code, is amended by adding the following new section: ``Sec. 2339A. Providing material support to terrorists ``(a) Definition.--In this section, `material support or resources' means currency or other financial securities, financial services, lodging, training, safehouses, false documentation or identification, communications equipment, facilities, weapons, lethal substances, explosives, personnel, transportation, and other physical assets, but does not include humanitarian assistance to persons not directly involved in such violations. ``(b) Offense.--A person who, within the United States, provides material support or resources or conceals or disguises the nature, location, source, or ownership of material support or resources, knowing or intending that they are to be used in preparation for, or in carrying out, a violation of section 32, 36, 351, 844 (f) or (i), 1114, 1116, 1203, 1361, 1363, 1751, 2280, 2281, 2331, or 2339 of this title or section 46502 of title 49, or in preparation for or carrying out the concealment of an escape from the commission of any such violation, shall be fined under this title, imprisoned not more than 10 years, or both. ``(c) Investigations.-- ``(1) In general.--Within the United States, an investigation may be initiated or continued under this section only when facts reasonably indicate that-- ``(A) in the case of an individual, the individual knowingly or intentionally engages, has engaged, or is about to engage in the violation of this or any other Federal criminal law; and ``(B) in the case of a group of individuals, the group knowingly or intentionally engages, has engaged, or is about to engage in the violation of this or any other Federal criminal law. ``(2) Activities protected by the first amendment.--An investigation may not be initiated or continued under this section based on activities protected by the First Amendment to the Constitution, including expressions of support or the provision of financial support for the nonviolent political, religious, philosophical, or ideological goals or beliefs of any person or group.''. (b) Technical Amendment.--The chapter analysis for chapter 113A of title 18, United States Code, is amended by adding the following new item: ``2339A. Providing material support to terrorists.''. *----------* *----------* *----------* In the U.S. Title 18 Code, terrorism is defined as "engaging in any act or conspiring to engage in any act intended to intimidate or coerce the civilian population or the government" or close words to that effect. What does this mean? Suppose you organize a militia and some little jot or tittle is just that much off -- and the thugs at the BATF or FBI or NatPol decide that your militia is an "armed group"? They can now seize your house, your car, your bank account and anything else even remotely connected with the maintenance or support of the militia, and make *you* prove your innocence before the Federal thugs will grudgingly return your life to you. Suppose you participate in a demonstration against abortion and just one member of the peaceful demonstration gets into a fistfight with an escort. You had given a ride to this demonstrator -- is the fistfight "terrorism" and you a collaborator in this "terrorism" to be arrested and thrown in jail and your car seized until you can prove that you did not know that the other demonstrator did intend to fight with an escort? Suppose you demonstrate against national health care and you yell that Clinton should be thrown out of office and make a threatening gesture -- will the thugs treat this as an "attempt to intimidate the government" and take your car and perhaps your home if you used it to prepare materials for the demonstration? Suppose you quote Thomas Jefferson's words about a revolution being due every twenty years -- will you be thrown into jail for that? Note that the above section does not allow anything but "NON-violent" goals. This is another direct attack upon the First Amendment and deeply disturbing in its implications when considered as part of a set of other federal statutes scattered across Title 18 criminal law. ***end of quoted section*** -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^859433 | Public Key: PGP and MailSafe available. Cypherpunks list: majordomo(a)toad.com with body message of only: subscribe cypherpunks. FAQ available at ftp.netcom.com in pub/tcmay -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^859433 | Public Key: PGP and MailSafe available. Cypherpunks list: majordomo(a)toad.com with body message of only: subscribe cypherpunks. FAQ available at ftp.netcom.com in pub/tcmay

9 19

Copyright enforcement through crypto
by sdw＠lig.net 17 Dec '03

17 Dec '03

I'd like to explore the technical problems of enforcing copyright restrictions through encryption and custom viewing software. What I have in mind is a viewer, say a spin off of Mosaic, that has a general purpose decryption engine that could be programmed with an algorythm as part of the document download process. The goal I have in mind is to make possible one time, or limited time viewing of a downloaded document The document would be encrypted with the selected method and keyed with a timestamp. The client would need access to a timeserver and a session key, etc. to decrypt as close as possible to the display hardware. This could be prototyped as a user process, but securely implemented as an extension to X, MS-Windows, etc. I haven't worked out all the problems, but see quite a few already. Obviously, the goal would be to get really good copyright material on the net, like first run movies, when we have the bandwidth. Just wondering what minimum collection of hardware, software, and infrastructure would be needed. Of course, this is related to the pay-per-use software paradigm (vs. current unlimited license). sdw -- Stephen D. Williams Local Internet Gateway Co.; SDW Systems 510 503-9227APager LIG dev./sales Internet: sdw(a)lig.net In Bay Area Aug94-Feb95!!! OO R&D Source Dist. By Horse: 2464 Rosina Dr., Miamisburg, OH 45342-6430 Internet Consulting ICBM: 39 38 34N 84 17 12W home, 37 58 41N 122 01 48W work Newbie Notice: I speak for LIGCo., CCI, myself, and no one else, regardless of where it is convenient to post from or thru.

4 4

Re: Tedious Chomsky arguments, some small remailer relevance.
by chen＠intuit.com 17 Dec '03

17 Dec '03

In response to James Donald: The Hayek quote is correct, and an example of what Reinholdt Niebuhr called "manufacturing consent" (where have I heard this?). I am not going to get into your Chomsky argument, except to say that your excerpt explicitly contradicts your conclusions: > "The Chomsky reader" Pantheon books, 1987, p.201, quotes > a paper written by Chomsky in 1975: > > "When the *New York Times* editors and U. N. Ambassador > Moynihan castigate Idi Amin of Uganda as a "racist > murderer," perhaps correctly, there is a surge of public > pride throughout the country; and they are lauded for their > courage and honesty. No one would be so vulgar as to > observe that the editors and the ambassador, in the not > very distant past, have supported racist murder on a scale > that exceeds Amin's wildest fantasies. The general failure > to be appalled by their hypocritical pronouncements > reflects, in the first place, the extremely powerful > ideological controls that prevent us from coming to terms > with our acts and their significance and, in the second > place, the nation's profound commitment to racist > principle." For which you graciously provide a vigorous, trenchant "analysis": > 1. Whatever Idi Amin is, he is morally much better than > Moynihan and the NY Times editors. There is no mention anywhere of moral superiority. There is a statement of the demonstrable fact that "the editors and the ambassador, in the not very distant past, have supported racist murder on a scale that exceeds Amin's wildest fantasies," referring, perhaps, to the (then) recent Indonesian slaughter in East Timor, or to the secret genocide in Cambodia (the one that happened *before* Pol Pot), or to any number of other U.S.-_Times_-backed atrocities. > 2. Only a country steeped in racist principle will fail to be > appalled when hearing Idi Amin called a racist murderer, even > when he is. This is simply nowhere to be found. "The general failure to be appalled by their hypocritical pronouncements" clearly has nothing whatever to do with Idi Amin. I know that it's difficult for you to conceive, James, but life is not always a football game. Hating the Rams doesn't imply loving the Packers. > ** 3. Only powerful ideological controls can prevent the > public from being outraged when someone truthfully calls a > black man a racist murderer. This is the same as your #2, and again, it is neither said nor implied. I would suggest that you read the passage again, but I don't think it will help. You're evidently quite intent on tilting at Chomsky as some sort of symbol of all that is threatening to your special brand of proto-Malthusian machismo. And it's really an extraordinary conceit to suppose that anyone else cares. You say elsewhere: > This coming thread will actually have some very slight > relevance to remailers, (gasp) in that I point out that the > same reasoning that enables Chomsky to define the > government to be the people, and individuals to be the evil > Capitalist Conspiracy, can be used in the same way; to > conclude that the eradication of Remailers and eradication > of the sort of thoughts that remailers are often used to > communicate, and the eradication of the kind of people that > are on the cypherpunks mailing list, represents a triumph > for liberty and civil rights, a triumph that would prove > how far civil liberties have advanced from the bad old > days. Before doing the service of "pointing out" all of these grandiose things to us, perhaps you should work on your reading comprehension. Your original claim was: > Of course Noam Chomsky is optimistic - he favors limitless and > absolute state power and the forcible and violent silencing of all > those who deviate from political correctness. The "analysis" which you present, apart from being factually wrong in every imaginable way, does not move one inch toward supporting this. If the only purpose of your claim was to serve as a platform for launching vapid diatribes, then knock yourself out. Otherwise, we would all appreciate it if you'd stick to the point. This is the last I will say on the subject, unless the thread assumes the shape of something vaguely relevant. -- Mark Chen chen(a)netcom.com 415/329-6913 finger for PGP public key D4 99 54 2A 98 B1 48 0C CF 95 A5 B0 6E E0 1E 1D

1 0

Send Your Message to 50 Million---at "INSANE SPEED" !!
by owner-cypherpunks 17 Dec '03

17 Dec '03

50 MILLION EMAIL ADDRESSES... EARN INSANE PROFITS WITH THE RIGHT FORMULA If you have a product, service, or message that you would like to get out to Thousands, Hundreds of Thousands, or even Millions of people, you have several options.Traditional methods include print advertising, direct mail, radio, and television advertising. They are all effective, but they all have two catches: They're EXPENSIVE and TIME CONSUMING. Not only that, you only get ONE SHOT at making your message heard, by the right people. The INTERNET, the "Global Communications Frontier" has changed this dramatically, including making countless individuals wealthy. "Electronic Marketing," as it's commonly referred to, has effectively leveled the playing fields of all types businesses. Gulf Coast Marketing has been in the online marketing business for 4 years. We can help make your goals come true. We have helped many individuals succeed in marketing their product effectively. It's very simple to do. In fact soon you will have the problem of what to do with all the cash you will make from sending out bulk email. Here are just a couple of many true success stories we have seen... " I was trying to market computer equipment on the Internet with limited success. I bought 5 million e-mail addresses and the Stealth Mass Mailer from Gulf Coast Marketing and within the first two weeks I sold over 500 modems. At a profit of $50 each I made over $25,000" T.S. --- Dallas I bought the Stealth Mass Mailer and 10 million e-mail addresses from Gulf Coast Marketing in March. Within two months I was making so much money that I was able to quit my job and do my internet marketing business full time." K.B. Web Page Designer--- FL Those were just two of the many success stories we hear everyday. It may all sound to good to be true. Well, we can tell you this. It really does work. Why else are so many individuals doing it? They are not just wasting their time. They are all making mega bucks. HERE'S THE BOTTOM LINE AND WHAT WE CAN DO FOR YOU Here is what you get when you order today! >> 50 Million Email Addresses... 1 per line in simple text format on a CD. Multiple files of 100,000 or greater (no codes needed to open files). You will receive email addresses of the following domains... AOL, PRODIGY, COMPUSERVE, DELPHI, GENIE, JUNO, PIPELINE, EARTHLINK, INTERAMP, MSN, NETCOM and MILLIONS OF OTHER MIXED EMAIL ADDRESSES (.com, .net). All names listed above are separated by domain name for your convenience. PLUS THESE BONUS SPECIALS... >> Stealth Mass Mailer Evaluation Version. A fully functional Mass E-mail program that will mail up to 250,000 messages per hour. With Stealth Mass Mailer you can send your message to millions of people every day. Imagine the response! AND Stealth Mass Mailer will disguise your dial-up account to make it untraceable. Never lose your dial-up account again. The registered version of Stealth sells for $399 The free evaluation version will work for 10 days after intallation before requiring registration codes. Plenty of time to send you offer to millions. >> "Floodgate" Bulk Email Loader Demo. This is the most popular bulk emailer in the world. You can test drive it for free. >> Winzip Self Extractor... This program will be needed when de-compressing a compressed file. It will come in handy when dealing with files of zip format. >> Over 1,000 Places To Advertise For Free! Plus Yet Another Bonus... "The Complete Internet Business Starter Kit" Includes "The Information Freeway" The most up-to-date information for marketing on the Internet. Also contains over 300 of the latest best selling reports. Comes with full reprint and resale rights YOU GET EVERYTHING FOR ONLY $499... UPDATE... SAVE $200 AND ORDER WITHIN 5 DAYS! >>> NOW ONLY $299! We have previously sold the Starter Kit alone for over $200. Now you can have the complete package for the low price of only $295! All lists are completely free of any Duplicates. We also on a continual basis, add New Names and Remove Undeliverables and Remove Requests. The result is the Cleanest Email Addresses Available Anywhere to use over and over again, for a FRACTION of the cost that other companies charge. Typical rates for acquiring email lists are from 1 cent to as high as 3 cents per email address - that's "INFORMATION HIGHWAY" ROBBERY!. Don't even hesitate on this one or you will miss out on the most effective way to market anywhere..PERIOD! Start earning mega money and get started now! If you have any further questions call our Marketing Department at: 504-757-1686 To order our email package, simply print out the EZ ORDER FORM below and fax or mail it to our office today. We accept Visa, Mastercard, AMEX, Checks by Fax and Mail. _________________ EZ Order Form _____Yes! I would like to order your 50,000,000 email addresses Plus all the bonuses for only $299. ***********SPECIAL BONUS OFFER***************** Order the registered version of Stealth along with the 50 Million E-mail addresses and we'll knock $100 of the price. Thats right. Stealth retails for $399. If you order the complete package of the registered version of Stealth Mass Mailer that will send up to 300,000 messages per hour and you can have the whole package for just $599. Thats a savings of $100. $$$$$$$$$$ AND $$$$$$$$$ When you order the complete package including the registered verion of Stealth......We'll give you the $350 E-Mail Pro Extractor software absolutely FREE. E-Mail Pro will not only extract thousands of new addresses from the online services and the internet, it is the perfect list management tool. I want the WHOLE Package for $599 plus shipping & handling ______ Send me the CD with 50 Million E-mail addresses only for $299______ *Please select one of the following for shipping.. ____I would like to receive my package OVERNIGHT. I'm including $15 for shipping. (outside US add an additional $20 for shipping) ____I would like to receive my package 2 DAY delivery. I'm including $10 for shipping. (outside US add an additional $15 for shipping) Foreign orders add $10. DATE_____________________________________________________ NAME____________________________________________________ COMPANY NAME___________________________________________ ADDRESS_________________________________________________ CITY, STATE, ZIP___________________________________________ PHONE NUMBERS__________________________________________ FAX NUMBERS_____________________________________________ EMAIL ADDRESS___________________________________________ TYPE OF CREDIT CARD: ______VISA _____MASTERCARD _____AMEX_____DISCOVER/NOVUS CREDIT CARD# __________________________________________ EXPIRATION DATE________________________________________ NAME ON CARD___________________________________________ AMOUNT $____________________ (Required) SIGNATURE:x________________________ DATE:x__________________ You may fax your order to us at: 1-504-757-9988 CHECK BY FAX SERVICES! If you would like to fax a check, paste it below and fax it to our office along with all forms to: 1-504-757-9988 ****************************************************** ***24 HOUR FAX SERVICES*** PLEASE PASTE YOUR CHECK HERE AND FAX IT TO US AT 1-504-757=9988 ******************************************************* If You fax a check, there is no need for you to send the original check. We will draft up a new check, with the exact information from your original check. If you feel more comfortable sending payment through the mail, please send all forms and Check or Money Order to: Gulf Coast Marketing 8867 Highland Rd. Suite 112 Baton Rouge, LA 70808

1 0

Re: The Crime Bill - text re intent requirement
by nobody＠kaiwan.com 17 Dec '03

17 Dec '03

In case anyone still doubts me... 103 P.L. 322 Sec. 120005. PROVIDING MATERIAL SUPPORT TO TERRORISTS. (a) Offense.--Chapter 113A of title 18, United States Code, is amended by adding the following new section: " Sec. 2339A. Providing material support to terrorists "(a) Definition.--In this section, 'material support or resources' means currency or other financial securities, financial services, lodging, training, safehouses, false documentation or identification, communications equipment, facilities, weapons, lethal substances, explosives, personnel, transportation, and other physical assets, but does not include humanitarian assistance to persons not directly involved in such violations. "(b) Offense.--A person who, within the United States, provides material support or resources or conceals or disguises the nature, location, source, or ownership of material support or resources, knowing or intending that they are ^^^^^^^^^^^^^^^^^^^^ to be used in preparation for, or in carrying out, a violation of section 32, ?6, 351, 844 (f) or (i), 1114, 1116, 1203, 1361, 1363, 1751, 2280, 2281, 2331, or 2339 of this title or section 46502 of title 49, or in preparation for or carrying out the concealment of an escape from the commission of any such violation, shall be fined under this title, imprisoned not more than 10 years, or both. "(c) Investigations.-- "(1) In general.-- Within the United States, an investigation may be initiated or continued under this section only when facts reasonably indicate that-- "(A) in the case of an individual, the individual knowingly or intentionally engages, has engaged, or is about to engage in the violation of this or any other Federal criminal law; and "(B) in the case of a group of individuals, the group knowingly or intentionally engages, has engaged, or is about to engage in the violation of this or any other Federal criminal law. "(2) Activities protected by the first amendment.-- An investigation may not be initiated or continued under this section based on activities protected by the First Amendment to the Constitution, including expressions of support or the provision of financial support for the nonviolent political, religious, philosophical, or ideological goals or beliefs of any person or group.". SOLONg

1 0

WSJ on RC4
by John Young 17 Dec '03

17 Dec '03

Thanks to David Sternlight for posting pointer to this. -------------------- The Wall Street Journal September 19, 1994 p. B10 -------------------- RSA Data Security Says Exposed Code Poses No Threat By Ralph T. King Jr. Staff Reporter of The Wall Street Journal The anonymous dissemination over the last several days of a software code used to safeguard the privacy of electronic messages in no way threatens the security of existing computer networks, according to the code's owner and encryption experts. However, the defiant act is expected to trigger a trade-secret dispute between the culprit and RSA Data Security Inc., the Redwood City, Calif., company that developed the code. The act also raises thorny legal questions about how public data networks, collectively known as the Internet, may be used. An unidentified person used the Internet to post RSA's encryption code, called RC4, on electronic bulletin boards. The RC4 code works something like a padlock. But knowing how the lock works isn't enough to open it. The system user has an individualized combination or key that prevents access by other parties to private computer messages. RSA's code product is incorporated in numerous popular software programs, including those of Apple Computer Inc., Lotus Development Corp. and Microsoft Corp. Some reports published over the weekend indicated that the disclosure might jeopardize the integrity of computer systems that are equipped with these programs. "This doesn't compromise systems that are in use," says Jim Bidzos, president of closely-held RSA. "This is a misappropriation of our intellectual property. It's a legal issue and it will be pursued." Mr. Bidzos also said officials at U.S. Customs Service and the Federal Bureau of Investigation are investigating the matter. One analyst noted that disclosure of the formula may benefit RSA because some users have questioned whether its code contains the equivalent of secret trapdoors enabling people familiar with it to eavesdrop on private communications at will. As a result, some computer operators have turned to an alternative code whose formula is publicly available. Now it will be clear to interested parties that no such trapdoors exist, Mr. Bidzos said. In any case, RSA is about to release a new encryption code for use with the latest computer-chip architecture, he said. One possible effect of the disclosure is to shed light on the extent of legal liability that applies to people who make copyrighted or protected material freely available on the Internet. Those who use such material under license typically sign nondisclosure agreements. In this case, someone apparently violated a nondisclosure pact and in effect invalidated the protections of RSA, the formula's owner. -------------------- END

1 0

HIT MEN
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, Okay, back to basics. David Merriman wrote: But if the system is set up for total anonymity, _who would know_ that an escrow agent was the "bag man"? Just like no one would know who the contractee was, or the contractor: The escrow agent is a publicly known entity. That's how it gets a reputation. How do you imagine an escrow agent could get a reputation for being a murder's bag man if it didn't advertise as such. If it advertises as such, I believe most people would refuse to do any business with it. If it doesn't advertise, how will it get those sorts of clients? There is no reputational incentive to perform the loathsome service, and plenty of incentive to (a) just keep the money, or (b) blow the whistle to the cops and the intended victim (and keep the money). Please note, this was all intuitively obvious from my previous post. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0