December 2003 - cypherpunks-legacy

Re: FBI calls for mandatory key escrow; Denning on export ctrls (fwd)
by Brian B. Riley 17 Dec '03

17 Dec '03

On 9/3/97 8:30 PM, Lucky Green (shamrock(a)netcom.com) passed this wisdom: >[Freeh] >There are a number of ways that that could be >implemented, but what we believe we need as a minimum >is a feature implemented and designed by the >manufacturers of the products and services here that >will allow law enforcement to have an immediate lawful >decryption of the communications in transit or the >stored data. That could be done in a mandatory >manner. It could be done in an involuntary manner. >But the key is that we have the ability. >- ... hmmmm, immediate *lawful* decryption ... which implies that they plan to end run the Bill of Rights with some law that permits them to walk in and snoop on the spot ... right now to look at my mail which needs no key, just a teakettle, they at least have to stop somewhere and find a tame judge, which removes at least some of the immediacy. Brian B. Riley --> http://www.macconnect.com/~brianbr For PGP Keys - Send Email Subject "Get PGP Key" "In effect, to follow, not to force the public inclination; to give a direction, a form, a technical dress, and a specific sanction, to the general sense of the community, is the true end of legislature." -- Edmund Burke

5 5

Smoking and IDs
by Blanc 17 Dec '03

17 Dec '03

Lucky Green wrote: >As signs in any liquor store have been informing tobacco customers for >months, new FDA regulations require stores to check the ID of any tobacco >customer under 25. This despite the fact that you are legally allowed to >purchase tobacco products at age 18. If the store fails to check the ID of >a person legally permitted to conduct the purchase but is under age 25, the >store faces hefty fines. ........................................................ Thanks for providing more details on this, Lucky, I overlooked the fact that not everyone on the list will understand the situation was referring to. Another odd thing: I was talking to the clerk at a convenience store about the ID sign next to the register, and she said that on the other hand, there aren't any such requirements for the purchase of any of the cigars which were on display on the counter. Another odd thing is how popular cigars have become lately. Last month I bought a copy of "Cigar Aficionado" magazine to peruse, even though I don't smoke, because it was so pretty :>) and spent quite some time looking at their web site. It is a curious matter that when one "vice" is squelched, another grows in its place. This magazine really emphasizes living "the good life", and I discovered that there are places springing up all over the U.S. (and I expect elsewhere) which are smoking clubs - people can actually go there just to smoke their cigar, perhaps with a glass of after-dinner liquor. I thought this was a great idea, myself, because here these people can be with others who enjoy the same activity, and there's no one outside who can complain (not yet, anyway). I think sometimes it is not only a Truth, but a great & useful Means to an End, that "living well is the best revenge". Not sure how this will apply to transponder implants, though. A subject for late-night speculation.

3 2

More metaphors: Key Recovery like "painting the windshield black?"
by Will Rodger 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Marc Rotenberg had a compelling simile to counter Director Freeh's "airbag" statement on mandatory key recovery yesterday. Though some outlets saw the FBI position as a radical departure, this writer saw only more emphasis on themes from previous statements. This is from my story this AM. - From : http://www4.zdnet.com/zdnn/content/inwo/0904/inwo0003.html "But Marc Rotenberg, director of the Electronic Privacy Center, said the statement wasn't surprising. Indeed, documents obtained under the Freedom of Information Act and posted on the group's Web site for the past two years show that various parties within the White House have long favored mandatory controls. 'This is such old news that we had this on our Christmas cards two years ago,' Rotenberg said. 'We've known all along this was their goal. Louis Freeh says mandatory key escrow is like airbags? It's more like painting the windshield black. Happy driving, crypto users.'" Denning had much to say against immediate imposition of mandatory controls, as well. -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQEVAwUBNA8WFEcByjT5n+LZAQEdIgf/QhTlieK5QnnY3TIXEkSrL9j3FE5iMSoE obt7EmBwZEv8jTFX46BUWTej9lG0ljkYeXvtJoX4r5oKmqlkqRsLCuWS8vaAARXy XUYh0cB3KOBduVn2XG4bUIGhYwR/vuK7N7CgAY5fLbEzRmUwr56sj/nThFEPYR2j PITvsH5X0RYzhqhY68En4M0+xWxx2udt4MBCQfrFdROLzWN1hEs6MV8j3bv6h+JR cg5LORDuuIPbi98Eh3M8+ZPKTb650Y4U/XvzfUu30h9RHpHJ9CwYtt3EmMgjUKMw Sw1A99ucK77FUjy4kkq1JBCFR7zW8KFQyszYrezbbXOXJXzS4obJ8Q== =N6Et -----END PGP SIGNATURE----- Will Rodger Voice: +1 202-408-7027 Washington Bureau Chief Fax: +1 202-789-2036 Inter@ctive Week http://www.interactiveweek.com A Ziff-Davis Publication PGP 2.6.2: D83D 0095 299C 2505 25FA 93FE DDF6 9B5F

1 0

Freeh's ScheiBeSturm
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- the even more ominous (and ridiculous) demand which Freeh (apparently even more emboldened) is presenting: "...And Louis J. Freeh, the director of the FBI, raised the prospect of also requiring Internet service providers to have keys to the data flowing over their networks. "Law enforcement needs to have a system for immediate decryption" when a judge determines it is likely that crime is being or is about to be committed, Freeh told the Subcommittee on Technology, Terrorism and Government Information. "We should also look at whether network service providers should have a system for immediate decryption." .... this is nothing short of demanding _three_ key encryption, with the third key a _universal_ master key for the men who claim they wear the white hats, but tinker with the facts in their "crime" labs --whose crime? "ours" or theirs? Given the historical perspective on abuse of power by our federal government (and everybody else down their food chain), this is patently absurd --yet they WILL try for it. asking Congress to evaluate the technology of information exchange, let alone the nuances of encryption, is a waste of effort in the shitstorm of Louis Freeh's inflammatory predictions of the four horsemen. There are not more than a handful who have the intelligence to do much other than collect bribes. why dont the bastards admit it? all they really want is to wire our brains, implant an ID, and enable GPS on us. "Experience keeps a dear school, but fools will learn in no other." --Benjamin Franklin ______________________________________________________________________ "attila" 1024/C20B6905/23 D0 FA 7F 6A 8F 60 66 BC AF AE 56 98 C0 D7 B0 -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQCVAwUBNA76KL04kQrCC2kFAQG1awP+IJLitJVDjuVgN9+ukldgHjLB6TAkT5s/ 8JnFTi/dPcKTpXJk6ZbCsVkag2m4RZ3cOssFm304BuGqpUn/Xoyj1hJvhLkJQXEM gUjASANBQffzTvQAdNNKOHU26ycpY8ji5mPKO5T86JbcWOne3S/BEQX9YiI1JUWA CqqELqiiOX4= =A8qG -----END PGP SIGNATURE-----

1 0

Stupid Senate Tricks -- request for help
by Declan McCullagh 17 Dec '03

17 Dec '03

After yesterday's crypto-hearing, I decided I should write a story about Stupid Senate Tricks -- how your elected representatives misspeak, misstate, and misstep when it comes to technology. From the "What is PGP" question at a recent hearing to Feinstein's meaningless blather yesterday, this is fertile ground. Do you have any favorite quotes? Not just crypto, but CDA, copyright, and technology in general. Send 'em to declan(a)well.com. thanks, Declan

2 1

Re: Big Brother is watching
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tim May wrote: > > At 9:03 AM -0700 9/4/97, Anonymous wrote: > >> Yes, rest assured that Big Brother is watching. Three CopBots have been > >> deployed around the county to take pictures of vehicles exiting > >> intersections after the light has turned red. > (We have the cameras in our area, too. In Campbell, CA, for example. My > recollection from news stories is that the camera also snaps a photo of the > driver, allowing reasonably positive ID. If the photo is blurred or not > usable in court, the traffic charge is dropped (probably only if > challenged, though). Some interesting constitutional issues, it seems to > me. Namely, if Alice is driving Bob's car and is ticketed, should Bob face > the points on his license? Or even criminal charges? Seems to violate our > notions of scienter.) Their is a pair of on-off ramps in the Bay area where they have the PhotoCop Bots on both sides you can get nailed both ways if you circle back and forth. I like to steal the plates off of a matching vehicle late at night and spend an hour or so speeding back and forth between the exits, then replacing the plates on the vehicle when I'm done. (Hint: wear a cap and glasses with the big clown nose.) Not that I'm a troublemaker... PlateMonger

1 0

Feinstein first...then Clinton..._then_ the lawyers!
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

And while Clinton on July 1 took a very public stand for a tax-free, self-governed Internet, In contrast to Clinton's support of proposals like the Internet Tax Freedom Act, which would prohibit states from taxing online commerce, Excuse me? Sounds like a 'State-tax'-free InterNet. The proposal to give the States money for welfare and let them decide how to disperse it is the preliminary move toward dropping the funding levels and let the States bear the burden of the fallout from the new welfare 'reforms'. First you dump it in the lap of the States, then you cut back funding, and you let the citizens cry out to D.C. for help, at which time you take away even more of their rights in return for "protecting" them from the evil States, or you turn them into slave labor for big corporations, like you did with the people in your prisons. Once the States are prohibited by law from taxing online commerce, D.C. will suddenly discover the great "crisis" that will ensue when the citizens find out how to dodge taxes, and the Feds will step forward to "save the day" by announcing a Federal InterNet commerce tax, promising to "share" it with the States. (Of course, the States won't _get_ their share if they don't force their citizens to drive 55 mph and work 20 hours a week in the voluntary-mandatory Federal Re-election Campaign Fund Work Camp. During discussion of the Kerrey-McCain bill in July, Feinstein left before her constituents from the software industry in the Silicon Valley testified -- and after telling representatives of the FBI and the National Security Agency that she would defer to their expertise on what was a confusing issue. I didn't see the FBI or the NSA on the election ballot. Did you? I ask you, "WHO THE FUCK IS RUNNING THIS COUNTRY?!?!?" Where does this Nazi CUNT get off telling the people who elected her that she can't be bothered to make the effort to understand the issues involved so she will let nameless, faceless government Law Enforcement Agents make the decision as to what to do with the encryption plunger. NEWS FLASH!!! --- THIS JUST IN... The pilot of a U.S. nuclear bomber left formation before receiving her flight orders from the Pentagon--and after telling Tim C. May and James Dalton Bell that she would defer to their expertise on what was a confusing issue (where to drop the BIG ONE). President Clinton, when reached for comment, said, "Didn't we fire that slut from Minot Air Force Base? And what the fuck is Paula Jones doing up there with her? Say...what is that plane............" In solidarity, we remain... FineSwineFirstMonger CintonNextMonger ThenTheLawyersMonger KentCrispinMonger <kentmonger(a)songbirdmonger.commonger> Kent'sBossMonger TheSpookReadingKentAndHisBoss'sPrivateEmailMonger TheSpookReadingTheOtherSpooksEmailMonger EtcEtcMonger

1 0

FBI calls for mandatory key escrow; Denning on export ctrls
by Declan McCullagh 17 Dec '03

17 Dec '03

All encryption products sold or distributed in the U.S. must have a key escrow backdoor "like an airbag in a car," law enforcement agents advised a Senate panel this afternoon. FBI Director Louis Freeh also told a Senate Judiciary subcommittee that "network service providers should be required to have some immediate decryption ability available" permitting agents to readily descramble encrypted messages that pass through their system. This marks the most aggressive push to date for mandatory domestic key escrow (or "key recovery"), which means someone else other than the recipient can decipher messages you send out. Now, the easiest way to win such a political tussle in Washington is to control the terms of the debate. And nobody understands that rule better than Sen. Jon Kyl (R-Arizona), chair of the Judiciary subcommittee on technology, terrorism, and government information. Kyl opened today's hearing not by saying its purpose was to discuss crypto in a balanced manner, but that he wanted "to explore how encryption is affecting the way we deal with criminals, terrorists, and the security needs of business." Then he talked at length about "criminals and terrorists" using crypto, and child pornographers "using encryption to hide pornographic images of children that they transmit across the Internet." Kyl also stacked the three panels. Out of seven witnesses, five were current or former law enforcement agents. No privacy or civil liberties advocates testified. Some companies including FedEx apparently dropped out when told they'd have to pay lip service to key escrow if they wanted to speak. Dorothy Denning, a Georgetown University professor of computer science, did testify. Kyl made a point of asking her if she still supported key escrow systems (two recent articles by Will Rodger and Simson Garfinkel said she was changing her mind). "I think key recovery offers a very attractive approach," Denning said. What about export controls? "In the absence of any controls, the problem for law enforcement would get worse," she replied. But when Sen. Dianne Feinstein (D-Calif) asked if Denning would support a *mandatory* key escrow system, the computer scientist said she wouldn't. "No, because we don't have a lot of experience we key recovery systems... a lot of people are legitimately nervous." (Keep in mind that although Feinstein supposedly represents Silicon Valley, she's no friend of high tech firms. She opposes lifting export controls; in fact, she says that "nothing other than some form of mandatory key recovery really does the job" of preventing crime. Of course, Feinstein doesn't have a clue. She talks about whether businesses would want "a hard key or digital key or a key infrastructure." Yes, folks, this is in fact meaningless blather.) Marc Rotenberg, director of the Electronic Privacy Information Center in Washington, DC, says, "Simply stated, the Senate train is headed in the wrong direction. But of course this doesn't answer the question of what will ultimately be resolved by Congress? There's a very popular measure in the House right now that's heading in a different direction." Rotenberg is talking about Rep. Bob Goodlatte's SAFE bill, which is much more pro-business than S.909, the McCain-Kerrey Senate bill that Kyl supports. Now, S.909 doesn't mandate key recovery; it only strongly encourages it by wielding the federal government's purchasing power to jumpstart a key recovery infrastructure. But Kyl would go further. At a recent Heritage Foundation roundtable on encryption, I asked him, "Why not make key recovery technology mandatory -- after all, terrorists, drug kingpins and other criminals won't use it otherwise. Kyl's response? Not that it would be a violation of Constitutional due process and search and seizure protections or a bad idea. Instead, he told me he simply didn't have enough votes... -Declan

3 4

TEA REMAILER: new mix key & type-1 pgponly mended
by Antonomasia 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- My apologies for the recent failure of the type-1 portion of tea, due to my clumsiness with procmail. The tea remailer has a new mix key, as is my custom, old ones remain in force _for a little while_. (If somebody can explain how to force the use of the previous key on a new installation I'd be pleased to learn - I haven't managed so far.) The (not very) old PGP key remains unchanged. Here is the public key for The Email Anonymizer: =-=-=-=-=-=-=-=-=-=-=-= tea tea(a)notatla.demon.co.uk c0c054d374a12420e881dd7d27bff5fc 2.0.4b14 MC - -----Begin Mix Key----- c0c054d374a12420e881dd7d27bff5fc 258 AASoHzHsRr3emZA9t0ARvKUf6K4/5rYxRxuYk7XD 6ECrnZIQjYYeloI2yiiN+NUXCrVbsSUJqgGCnX+O XoTdOaO2d/GA5r4rB8EsjLVNewAKq9w6a7vIhO5m 4OyNC7rvA3xkiaexrdbt6/qN4Ab1+SY7GuTOKXwy 5bLHC2qPzqVVNwAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAQAB - -----End Mix Key----- Key for user ID: The Email Anonymizer <tea(a)notatla.demon.co.uk> 2048-bit key, key ID C551BA85, created 1997/08/25 - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQENAjQBmK8AAAEIAOHEvRoyB2+TRDdVfIYmSWE+2mHdGVGfSOfdheMUpsUTn2PF Hg3cCEAcpp9KJjSW4hIu0csBcpdEFMb4uu8ZCZIgjOs6QFLhqb6MnVNAXJoxfq1Y U0sl32/ttKBlFvDFJ9vDgORML9Gqz/chgfDGNbe4Cd0DNy7K8azrVdnPE+4SrH0e C/cfZPfRbYTauQ1Qx1Z2sSp2muDRhodnM1U124Rxkr3nEECadpQfofVDRc5sKAu5 /Vi5TDyj+YLrw33ilp3KceAsCod6WW1JUJm0fkTHEXRrfC6QFq5FiV1kcxx+WwW2 nMHbv3SaLbdPnIsfJPmi/AsdLPfacNP6IsVRuoUABRG0LlRoZSBFbWFpbCBBbm9u eW1pemVyIDx0ZWFAbm90YXRsYS5kZW1vbi5jby51az6JARUCBRA0AZiwcNP6IsVR uoUBAfM1CADFwRTqyrYENZy+5jFGv8fOteXcR+AvpLcY1Rz6Wkz4EbFS75ZO9lrU oUSwGhR5hyzitBmNBKoJxuZxTf/8TePvUC4uSZViWIvQeFFRnC6ho6iEk2lSE/aQ xHLXSReoXhjOwrZXn0Uot6wG1J3sxfytbBQrpAcNIiqXVlYNvJzCjTemdjjPcec3 Q4v02YsPBUIS3eFBJtNmrVjbMuG/EvJvI1TsSwTklp/z7ieIsZ02uIgW80N3cGZG b7fF32wlZUOQdkXjcbc3+ND2+uqnMK4Lp9qQVs30q6rg71TPm372YJE13BkcWcYw BgypsiaVtbEmxR6AINj38XIk2IaPRT1Q =mKq+ - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQCVAgUBNA80E0rZ5ZQH9XIxAQEqKgP8DROVlKims1cIxImaormPrsGk7HLnxCtq pw5WjER7nnI4jQMhXAlo4sWUeuCNKaCCq9zzghrtlRO2hHKk4QJ1DtKvKhlcs9Go V0cT/iCoz51ogxRWma/G+3LKUoTTq34+6KsCFxl+sCvjk0gFBQQSqUPx+BBxbh41 HgaD/zFS/E4= =/0UG -----END PGP SIGNATURE----- -- ############################################################## # Antonomasia ant(a)notatla.demon.co.uk # # See http://www.notatla.demon.co.uk/ # ##############################################################

1 0

One Smart Polack (Was: Students of Hitler)
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Vin Suprynowicz, vin(a)lvrj.com "A well-regulated population being necessary to the security of a police state, the right of the Government to keep and destroy arms shall not be infringed." http://www.nguworld.com/vindex/

1 0