December 2003 - cypherpunks-legacy

Re: Linking = Showing = Transferring?
by joseph＠genome.wi.mit.edu 17 Dec '03

17 Dec '03

>>And Duncan's specific point remains: >> >>-- is it a violation of pornography laws (perhaps campus rules) to have a >>home page with links to URLs containing pornographic images? >> >>-- is it a violation of _child pornography_ laws to have a home page with >>links to URLs containing child pornography images? (The URLs could be >>offshore, perhaps in jurisdictions where the age of consent is much >>different than in the U.S., e.g., Denmark or Thailand.) >> >>-- is it a violation of national security laws to have a home page with >>links to URLs containing national defense secrets? (The URLs could be >>offshore.) >> >>-- is it a violation of copyright/patent laws to have home pages with >>pointers to protected material? (Songs, written works, images, inventions, >>etc.) >> >>And so on.... Here's my question, and a thought to ponder: If it is/becomes illegal to have links on a homepage to pornography because it is ruled as the same as having the pornography there; then can you have links to pages with links (the same as having it) to pornography? This repeats, so would it be legal to links at all? -------------------------------------------------------------------------------- Joseph Sokol-Margolis joseph(a)genome.wi.mit.edu Assistant Systems Administrator seph(a)mit.edu Whitehead Institute/MIT Center for Genome Research phone: (617) 252-1922 One Kendall Sq. Bldg. 300 fax: (617) 252-1902 Cambridge, MA 02139-1561 ----------------------http://www-genome.wi.mit.edu/~joseph/----------------- ----

1 0

Mixmaster status changing
by loki＠obscura.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I recently promised to release the next version of Mixmaster (V 2.0.2) within 48 hours. The situation has changed. The release of the next version of Mixmaster will be indefinitely delayed. There has been an offer to purchase and commercially develop Mixmaster. This will hasten the development of Mixmaster for other platforms (e.g. Dos, Windows Macintosh), and bring significant improvements to the interface, but I will not compromise on the level of security provided by Mixmaster. Free client software will continue to be available. This could be the big breakthrough for remailers, finally thrusting them out of the hobbyist's closet into the corporate world. We have all known that remailers would not become widely used by the rest of the word until they were easy to use. Many corporations also fear freeware because of its unknown provenance and its lack of support. I apologize for the delay, but I think that the wait will be worth it. -Lance M. Cottrell <loki(a)obscura.com> -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMFimnfPzr81BVjMVAQEfpQgAktbVCj3f39sXtTHPL/H2qh6xJuSvozv1 YXai2/NOh9Y5+qTYJS0R1u8+xSdzQlwfvbdteeXtqK0Ba9QBa2tIPwo0jVVvnano eyFSic0+FoPg33geVGO7Opn+RjOIsvz1MXD41mHxB7p9tRClnEuenvTKqjWovHwU wQX8mDRsz14cqN1x4YN5MtiFZwz+FgqD8r3O/u6eAT032X0KirfPkxwyIFbfOqz4 crxR/P6KJ7GZzxfyYjoAjOSSan1VkAcp11HzmFU37PA/LB8kbKyYxCrfg+grQu+x cDMGvb/xg6cwD+D/D7RTUT756m4TDpbgzaNy9SIQTAnbAAspZXZ1mA== =GIrJ -----END PGP SIGNATURE----- -- Lance Cottrell loki(a)obscura.com PGP 2.6 key available by finger or server. Mixmaster, the next generation remailer, is now available! http://obscura.com/~loki/Welcome.html or FTP to obscura.com "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche

1 0

Privtool 0.85 Released
by Rev. Mark Grant 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hi, I've just released a new version of Privtool, with a large number of bugfixes and new features. It's available from ftp.c2.org as /pub/privtool/privtool-0.85.tar.gz, and in Europe from ftp.dsi.unimi.it in /pub/security/crypt/code, or from ftp.ox.ac.uk in /pub/crypt/pgp/utils. DUE TO US ITAR REGULATIONS, IF YOU ARE OUTSIDE THE US YOU SHOULD DOWNLOAD PRIVTOOL FROM A NON-US SITE. Dumb, but true... Documentation is also available on the WWW at http://www.c2.org/~mark/privtool/privtool.html. Mark Privtool Beta Release @(#)README.1ST 1.34 9/12/95 ----------------------------------------------------- Privtool ("Privacy Tool") is intended to be a PGP-aware replacement for the standard Sun Workstation mailtool program, with a similar user interface and automagick support for PGP-signing and PGP-encryption. Just to make things clear, I have written this program from scratch, it is *not* a modified mailtool (and I'd hope that the Sun program code is much cleaner than mine 8-) !). When the program starts up, it displays a list of messages in your mailbox, along with flags to indicate whether messages are signed or encrypted, and if they have had their signatures verified or have been decrypted. When you double click on a message, it will be decrypted (requesting your passphrase if neccesary), and/or will have the signature checked, and the decrypted message will be displayed in the top part of the display window, with signature information in the bottom part. The mail header is not displayed, but can be read by pressing the 'Header' button to display the header window. In addition, the program has support for encrypted mailing list feeds, and if the decrypted message includes another standard-format message it will replace the original message and be fed back into the display processing chain. When composing a message or replying to one, the compose window has several check-boxes, including one for signature, and one for encryption. If these are selected, then the message will be automatically encrypted and/or signed (requesting your passphrase when neccesary) before it is sent. You may also select a 'Remail' box, which will use the Mixmaster anonymous remailer client program to send the message through one or more remailers. Being an Beta release, there are a number of bugs and nonfeatures : Known Bugs : When you save changes to the mail file, it throws away the signature verification and decrypted messages, so that the next time you view a message it has to be verified or decrypted again. Privtool requires that the /usr/spool/mail directory is world-writable. Some versions of Linux are set up to have mail programs setgid mail, and have write access only to mail and root, causing hangs when saving changes. This will be fixed in the next release. Header window is not updated if left open. Date parsing on Linux is not quite correct. Problem with compose window layout if using Bcc: or extra header lines. Crashes if you tab from the Cc: field to the message body. Known Nonfeatures : Currently if you send encrypted mail to multiple recipients, all must have valid encrpytion keys otherwise you will have to send the message decrypted. Also, the message will be sent encrypted to all users, not just the one who is receiving each copy. Only one display window. Code should be more modular to assist with ports to Xt, Motif, Mac, Windows, etc. Not very well documented ! Encrypted messages are saved to mail files in encrypted form. There is currently no option to save messages in decrypted form. No support for anonymous return addresses. Not very well tested on Solaris 2.x, or Linux. Changes for 0.85: Support for Reply-To: addresses in message headers. If you have PGP Tools, then the passphrase is now stored in MD5 form rather than as ASCII text. This will make it harder to steal your passphrase if you're running on a multi-user machine (which you shouldn't be, but many of us are). Improved documentation. 'New mail' indicator in icon now goes away if you open the window and close it again without reading any messages. Support for multiple compose windows - no more pressing 'Reply' and screaming because you deleted the message you were editing ! Query on exit if any compose windows are open. Show busy cursor for time-consuming operations. Kill-by-name and Kill-by-subject now work correctly. 'Add Key' button now works. Optionally beep on bad signature. Added various changes from Anders Baekgaard (baekgrd(a)ibm.net) we can how use a more normal icon if preferred, pass arguments on the command line, specify the font to use, support the 'showto' option, allow X-resources to be set up, fix a bug in Linux which showed the message list as a black box, cleaned up some warnings from x.c, support bcc:, and have an option for a simplified, smaller, display layout for machines with small screens. Fixed some memory leaks in deliver_proc (). Anders finally got the scrollbar to go to the right place when opening mail files ! Yay !!!! Fixed bad arguments that were being passed to bzero() in pgplib.c and potentially causing random memory overwrites. Fix for Linux icon corruption from A J Teeder (ajteeder(a)dra.hmg.gb) Added 'resend' to resend a message that failed the first time. Added Linux-specific Makefile, now that I have my own Linux box to test it on. Fixed SEGV when delivering messages (with some .mailrc files), caused by a bug in the alias-handling code. Privtool can be compiled to either use PGP Tools, or to fork off a copy of PGP whenever it is needed. There are also a number of different security level options for the passphrase, varying from 'read it from PGPPASS and keep it in memory' to 'request it every time and delete it as soon as possible', via 'request it when neccesary and delete it if it's not used for a while'. Unfortunately, PGP Tools (or at least the version that I have) does not appear to work correctly on Linux. See the README file for information on compiling the code, and the user.doc file for user documentation (the little that currently exists). You should also ensure that you read the security concerns section in user.doc before using the program. Mark Grant (mark(a)unicorn.com) -----BEGIN PGP SIGNATURE----- Version: 2.6 iQEVAgUBMFileFVvaTo9kEQVAQFU6ggAk9MWUkT3b6b6dGpzZSiCR/pGM6SMdXIP ZCcE546a65cOl3esgdVSSUlaw3SDGt1FxuHB/pzPqTJBqaZNsPoSrvZbPSz0Fcl7 GjuDCGFIm4vPYi8tgoTc2WPbj4E0w1O5+vZvZWwvm/TrzfYNeMnlI3wWb18U+TXF hj9tOKbd1rmzx3an/ZGgfFzwlKtidPbLhOPxxv7XWFkpZAXbKAesKPw85sNilxy4 NwerRu9OAXBVNHGgJfM6S6+qfYygCuzIodseMwpOU+7uL1MfvB6LFJ5WL3di3FdA Hnv2CKbqmEVWlFc1TIY0mK6Ze+U/uRlgbM04/GLk1X3qM8r4SQUqwg== =jd5V -----END PGP SIGNATURE-----

1 0

Re: [NOISE] Alice's Remailer site
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

> > And can you imagine FIFTY people a day? I said FIFTY people a day -- > loggin' in, sending mail through Alice's Remailer site and loggin' out? > And friends, they may think it's a MOVEMENT, and that's what it is: > > THE ALICE'S REMAILER SITE ANTI-E-MAIL-SNIFFING MOVEMENT!-- > > and all you gotta do to join is to flip the bird to those traffic-sniffin' > spooks out there -- With feelin' ... > > > -Tom Swiss / tms(a)tis.com > There sure are a lot of us old fogies around here:) Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

1 0

Re: AOL Porno
by Alan Olsen 17 Dec '03

17 Dec '03

At 05:25 AM 9/14/95 -0400, you wrote: >Will the federal prosecutors and Fibbies on this list please >emphasize that the Internet was not involved in the AOL kiddie porn >case. The Internet has enough opportunities for bad publicity as >it is. I watched the local news coverage of that case. The report was given by an individual who has made that mistake before. (He hosts a "Town Hall" program that exploits various subjects of the day. He was corrected as to "AOL not being the Internet" during one of them. I know, I was the one who corrected him.) The coverage showed lots of shots of the various internet binaries echos (including alt.binaries.pictures.erotica.children, but not alt.binaries.pictures.cops.), the web including the Penthouse site (as if Penthouse has kiddy porn), and other unrelated and non-AOL pictures. The Internet has become the new scapegoat of choice. The general media cannot (or is unwilling) to distinguish the difference between electronic nets. The Internet is a generic term for them and since when is the media willing to look beyond the surface? How does this connect to crypto? Well, aiding and abetting in a scapegoat is a capitol crime in this country. You can be assured that the Department of Scapegoat Management will link kiddy porn and crypto at some point in the minds of the generic public. Hopefully that perception can be "headed off at the pass". Having cryptography as a means of avoiding crime and criminals in the perception of the public is a good idea. The question is how to get that perception into the minds of the general public before the other meme can be inplanted by Scapegoat management and the other TLAa? >"Who wonders: How it is that CompuServe was able to exist from 1979 >to the arrival of Prodigy and AOL without major sex, and drugs, and >rock and roll problems?" I think the six-dot-three filenames has something to do with it... | Visualize whirled keys | alano(a)teleport.com | |"It's only half a keyserver. I had to split the | Disclaimer: | |other half with the government man." - Black Art | Ignore the man | | -- PGP 2.6.2 key available on request -- | behind the keyboard.| | http://www.teleport.com/~alano | <fnord> |

1 0

Re: cryptography eliminates lawyers?
by liberty＠gate.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Brian Davis wrote: <snip> >Just wondering about liability issues after state accrediting is dead. <snip> <I can resist jumping in no longer...> Despite loud squawking, "chaos" will not ensue. Instead, the private sector will take over assesing risk, which it has always done better. An example: I'd rather jump into a full bathtub with a plugged-in, UL [Underwriter's Laboratories] certified TV set than take the FDA approved (but very dangerous, IMO) prostate drug called "Proscar." While there is only one UL (by choice, not force) and only one FDA (by force, not choice) I can easily imagine a lawyer-certifying companies like UL for appliances, probably tied [like UL] to the insurance industry. [I am not a lawyer, or a doctor either.] JMR -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Freedom isn't Freeh iQCVAwUBMFiyw21lp8bpvW01AQGWmQP/QrIwiASIcwWZ6T6mcg7lB+BknBzlgBjy IXMdTalqk5gepHhO386QiA4XNdhlBtaJWpOCQkqRu4M7MrSlCZBuPTNgyu5DJRNS Ru7X/XVWzCKrODWGg8o45GblveNQker7XOJp6v5cmU5xyo2hZNvwZlPb4jq2fWou wW/Amy49BNA= =Nbil -----END PGP SIGNATURE----- Regards, Jim Ray "When making public-policy decisions for the government, I think one should ask oneself which technologies would best strengthen the hand of a police state. Then, do not allow the government to deploy those technologies." -- Phillip Zimmermann, talking to himself. (Congress sure-as-hell wasn't paying attention!) ----------------------------------------------------------------------- PGP key Fingerprint 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 Key id. # E9BD6D35 James M. Ray <liberty(a)gate.net> ----------------------------------------------------------------------- Help Phil! email zldf(a)clark.net or see http://www.netresponse.com/zldf _______________________________________________________________________

2 1

Re: NSA on GAK
by Rich Salz 17 Dec '03

17 Dec '03

>> Internet runs on software distributed over the Internet. This is more like an aphorism than a true statement.

1 0

Re: Linking = Showing = Transferring?
by Frank Stuart 17 Dec '03

17 Dec '03

[...] >Here's my question, and a thought to ponder: If it is/becomes illegal to >have links on a homepage to pornography because it is ruled as the same as >having the pornography there; then can you have links to pages with links >(the same as having it) to pornography? This repeats, so would it be legal >to links at all? [...] And then there's the problem of URLs not being static. What may be a perfectly innocuos link one day may turn into something not perceived as harmless the next. I seem to recall reading about a French site (Femmes Femmes Femmes) that offered pictures of nude females. When the traffic got too much for them, they jokingly changed the links to point to pictures at the Louvre. However, it could just as easily happen the other way. I also heard something about the ACM taking the position that a URL was not equivalent to the work itself, but I don't have a reference. Frank Stuart | (Admiral Grace) Hopper's Law: fstuart(a)vetmed.auburn.edu | It's easier to get forgiveness than permission.

1 0

Re: <SAFER SK-xx>
by David E. Smith 17 Dec '03

17 Dec '03

-- [ From: David E. Smith * EMC.Ver #2.5.02 ] -- > /* SAFER SK-128 designed by James L. Massey who did not do this > conversion and is not responsible for any bugs in it. > > This a 'C' conversion of the reference Turbo Pascal implementation Does anyone out there have a pointer to the "Turbo Pascal implementation?" (Or the code itself?) Reply to me, not the list; there's quite enough spam as it is. -- David E. Smith, c/o Southeast Missouri State University 1210 Towers South, Cape Girardeau MO 63701-4745 (314)339-3814, dsmith(a)midwest.net, PGP ID 0x92732139 Opinions are mine (though I often claim demonic possession) http://www.midwest.net/scribers/dsmith/index.html

1 0

Re: Child Porn, Morphing, and Pointers
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <ac7db05202021004bc61(a)[205.199.118.202]>, tcmay(a)got.net (Timothy C. May) wrote: >>If I'm reading this correctly, if I Photoshop a kids face onto the body >>of the latest Playboy centerfold, I'm in violation of this proposed law? > >I believe there have already been prosecutions along these lines. For >example, do you think a _comic book_ with child porn themes ("explicit" >art, situations) would not be prosecuted as child porn? > >I strongly suspect that a _painting_ of a 7-year-old girl engaged in a sex >act would result in a prosecution. Any cites? - -- - -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMFjEkSoZzwIn1bdtAQFO5gGAvKEwd8DuWbNAzMtkqQ4BCPrp5YAOWrcu eSooY922jvZlXV+PYFcamevbR3mZ4bYj =Jxeu -----END PGP SIGNATURE-----

1 0