December 2003 - cypherpunks-legacy

RE: Crypto's Role in Evil?
by agermain＠cmp.com 17 Dec '03

17 Dec '03

I have unsubscribed from this mailing list. Please remove my name from your personal address lists. Thanks. ahg3 ---------- From: Carl Ellison[SMTP:cme@TIS.COM] Sent: Tuesday, October 24, 1995 12:52 PM To: tcmay Cc: cypherpunks Subject: Re: Crypto's Role in Evil? Sender: owner-cypherpunks(a)toad.com Precedence: bulk >Date: Mon, 9 Oct 1995 11:20:41 -0700 I'm late getting to my mail backlog. >From: tcmay(a)got.net (Timothy C. May) >It's clear that cops cannot protect people, only try to catch the perpetrators. I heard a particularly scary quote from Director Freeh last Sunday on NPR's Weekend Edition (I believe that was the show -- segment A-1) in which he declared "our job is to protect the people". If that were the FBI's job, then we'd have to look at it as one does to a loving parent and give it all the authority and respect a child gives a parent. - Carl +------------------------------------------------------------------------- -+ |Carl M. Ellison cme(a)acm.org http://www.clark.net/pub/cme | |PGP: E0414C79B5AF36750217BC1A57386478 & 61E2DE7FCB9D7984E9C8048BA63221A2 | | ``Officer, officer, arrest that man! He's whistling a dirty song.'' | +---------------------------------------------- Jean Ellison (aka Mother) -+

1 0

RE: MD5 weakness ? [was Re: Netscape Log
by dmandl＠bear.com 17 Dec '03

17 Dec '03

> I have unsubscribed from this mailing list. Please remove my name from > your personal address lists. Thanks. > > ahg3 We heard you the first 15 times, Einstein. --D. -- ******************************************************************************* Bear Stearns is not responsible for any recommendation, solicitation, offer or agreement or any information about any transaction, customer account or account activity contained in this communication. *******************************************************************************

1 0

Re: Netscape Logic Bomb detailed by IETF
by tomw＠orac.engr.sgi.com 17 Dec '03

17 Dec '03

In article <DGypKo.Isx(a)sgi.sgi.com>, sameer <sameer(a)c2.org> writes: >> I posted a list of MD5 checksums as a personal favor to various cypherpunks >> who asked for them, since I have access to the original bits. The official >> Netscape solution for checking your downloaded distribution will be >> announced later in the year. In the mean time anyone who is uncomfortable >> with downloading the bits from the net can always buy a copy. We will >> ship them the distribution on floppy. >> > That's quite lame.. (not on your part jeff, obviously, because > you posted the md5s) Netscape's responses in the past has been pretty > quick, but this is damn slow. I am disappointed. This isn't an easy problem. Personally, I'd rather have them get it right than get it done fast. -- Sure we spend a lot of money, but that doesn't mean | Tom Weinstein we *do* anything. -- Washington DC motto | tomw(a)engr.sgi.com

1 0

(www-b) (fwd) Privacy Marketing
by rah＠shipwright.com 17 Dec '03

17 Dec '03

Nick's on a roll now... Cheers, Bob Hettinga --- begin forwarded text From: szabo(a)netcom.com (Nick Szabo) Subject: Privacy Marketing To: philipw.nrd(a)cbo.gov (PHILIP WEBRE) Date: Wed, 25 Oct 1995 09:26:23 -0700 (PDT) Cc: www-buyinfo(a)allegra.att.com Mime-Version: 1.0 Most Internet businesses, especially the Web software and payment systems providers, are severely underestimating the market for privacy features that is out there. Consider: * A recent general survey showed that 83% of Americans are very concerned about their privacy on the "Information Superhighway". One can expect even stronger figures from European customers, which have more first-hand experience with private data, much of it originally compiled for innocuous reasons, being used for political repression. The vast majority of our customers are concerned about privacy. * Marketing surveys on privacy that are both detailed and accurate are hard to come by, because customers who care more about their privacy tend to dislike filling out detailed forms (even if they claim to be anonymous). * Over half the BBS, and potentially the Internet, online service market is in controversial services, where customers are even more concerned about privacy than average. * Privacy, once considered merely a political issue, is now being recognized for its more important aspect, as a market differentiator and value-add. Marketers correctly recognize that government "privacy regulations" mean much less privacy for businesses if it is to be enforced, and the voters no longer expect such laws to have any teeth in the face of modern technology. That hardly means that customers are not concerned about it, as the numbers show. The alternative to regulation is market solutions. Recognize that many customers do want privacy, give them what they want, and contrast yourself to your competitor. Making visible the ways your competitor is violating their customers' privacy will become a powerful marketing strategy. This strategy was used rather timidly, and inaccurately, by AT&T against MCI, where it nevertheless had great success. (Inaccurate because all major phone companies compile lists of who calls whom, and use them for marketing as well as billing -- MCI was simply being more honest about it). Used boldly and accurately, privacy marketing has vast potential to upset competitors who rely too much on marketing data and not enough on empathy with the human customer. For an idea of what such a marketing campaign might be like, imagine combining Apple "1984" Mac ads, one of the most effective campaigns in history, with the AT&T vs. MCI campaign, to sell products and services that in fact do protect customer privacy where the competition does not. * Most Americans do _not_ participate in frequent flier and similar customer tracking programs. Many who do participate don't realize the extent to which their lifestyle is tracked, since these actions are performed on remote databases, well hidden from the customer. If customers aren't concerned about their privacy, then why the need for all the distracting gimmicks and giveaways? Why not just promote these programs straightforwardly to the customer as "Customer Tracking Programs"? A competitor who can provide a privacy protecting solution can do just that, damaging these tracking programs severely. * It is ludicrous to argue that cash transactions, which leave no identified paper trail, provide no practical privacy. In fact they prevent detailed compilation of lifestyle habits, by (a) not depending on identity to settle the transaction, (b) making identity tracking, where it occurs, a visible, separate process, and (c) making it too expensive to track identity via the payment system itself, except in extreme, very rare cases. In practice, this means that cash customers don't get their lifestyles described in detail in remote databases, while non-confidential electronic payers increasingly do. Eventually this sharp difference in outcome will feed back to the customer, greatly increasing the demand for cash over non-confidential electronic payment. * A big challenge for vendors value-adding privacy is to accurately communicate these privacy features, through both the user interface and their marketing, while debunking fraudulent claims (such as calling non-confidential payment systems "cash") and exposing the privacy violating actions of their competitors. I conclude that privacy marketing will be an important value-add for Internet commerce. It will be a terrific way to gain market share at the expense of the competition -- or to lose much of your market share, if you find yourself on the wrong end of a privacy campaign. Nick Szabo szabo(a)netcom.com Consultant, Internet Commerce & Security IBM, Sequent, DigiCash, Agorics Nine years experience on the Internet --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Shipwright Development Corporation, 44 Farquhar Street, Boston, MA 02131 USA (617) 323-7923 "Reality is not optional." --Thomas Sowell >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

BSDC: Designing Systems for Electronic Commerce
by rah＠shipwright.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The Boston Society for Digital Commerce Presents Win Treese Open Market, Inc. Designing Systems for Electronic Commerce Tuesday, November 7, 1995 12 - 2 PM The Downtown Harvard Club of Boston One Federal Street, Boston, MA Win Treese is Director of Security and Advanced Technology for Open Market, Inc., a startup company building systems and software for electronic commerce on open networks. Before joining Open Market, he was a member of the research staff at the Cambridge Research Laboratory of Digital Equipment Corporation, where he worked on a variety of projects, including the design and implementation of Digital's Internet firewall system and the AudioFile network audio system. Win says: >"Electronic commerce" is a short name for a big topic. In this talk I >will describe Open Market's Transaction Management System and other >components that can be used in many different applications, such as >ordering of retail products for delivery, subscription access to >information, "pay-per-page" purchasing of information, and others. In >addition to payment, I will discuss other issues that arise in >commerce, such as customer service and content management. This meeting of the Boston Society for Digital Commerce will be held on Tuesday, November 7, 1995 from 12pm - 2pm at the Downtown Branch of the Harvard Club of Boston, One Federal Street. The price for lunch is $27.50. This price includes lunch, room rental, and the speaker's lunch. ;-). The Harvard Club *does* have a jacket and tie dress code. We need to receive a company check, or money order, (or if we *really* know you, a personal check) payable to "The Harvard Club of Boston", by Saturday, November 4 (that's one week from this Saturday), or you won't be on the list for lunch. Checks payable to anyone else but The Harvard Club of Boston will have to be sent back. Checks should be sent to Robert Hettinga, c/o The Shipwright Development Corporation, 44 Farquhar Street, Boston, Massachusetts, 02131. Again, they must be made payable to "The Harvard Club of Boston". If anyone has questions, or has a problem with these arrangements (We've had to work with a few glacial A/P departments ourselves, for instance), please let us know via e-mail, and we'll see if we can work something out. November's speaker will be Art Hutchinson of Northeast Consulting Resources, Inc. We are actively searching for future speakers. If you are in Boston on the first Tuesday of the month, and you would like to make a presentation to the Society, please send e-mail to the BSDC Program Commmittee care of Robert Hettinga, rah(a)shipwright.com . For more information about the Boston Society for Digital Commerce, send "info bsdc" in the body of a message to majordomo(a)ai.mit.edu . If you want to subscribe to the BSDC e-mail list, send "subscribe bsdc" in the body of a message to majordomo(a)ai.mit.edu . Looking forward to seeing you there! Cheers, Bob Hettinga Interim Moderator, The Boston Society for Digital Commerce -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMI5Iw/gyLN8bw6ZVAQF3FQP+LxoCbP4AoijIMobOVE1PzX066WrmvwMb pSaSpBP4F7/XJ0NP2EdKDZw24xpqxrvKm6j+FDzC3dDWcR3zlZPeEjvIGSFpNDW4 QJhGDlBfDo8LPAp9ua28CwxDSeyFmUZcMIjh7cgVOjCuG9Gegkn0jO3MihtrDb7U yki9gTYDaNw= =2VH9 -----END PGP SIGNATURE----- ----------------- Robert Hettinga (rah(a)shipwright.com) Shipwright Development Corporation, 44 Farquhar Street, Boston, MA 02131 USA (617) 323-7923 "Reality is not optional." --Thomas Sowell >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

CNN Interactive Internet privacy interview
by m5＠dev.tivoli.com 17 Dec '03

17 Dec '03

Probably triggered by the USA Today article. <URL:http://www.cnn.com/TECH/9510/computer_privacy/index.html> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | Nobody's going to listen to you if you just | Mike McNally (m5(a)tivoli.com) | | stand there and flap your arms like a fish. | Tivoli Systems, Austin TX | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Re: airport security
by Peter Trei 17 Dec '03

17 Dec '03

Another data point: This week I flew TWA from Boston to St. Louis, then TW Express from St. Louis to Champaign, Ill, and back. I was asked for picture ID when boarding at Boston, but at no other time. I protested, and was told that my alternative was not to fly. Since I was travelling on business and my employer's dime, I did not want to risk missing the flight, so I complied. Peter Trei ptrei(a)acm.org

1 0

Mandatory ID in California?
by Ian Goldberg 17 Dec '03

17 Dec '03

>From "The Daily Californian", Wed., 25 October, 1995, page 3: <snip> "Police were called to the scene by an officer who passed Burton and smelled marijuana smoke, Phelps said. The officer believed it was coming from Burton's cigarette. "The officer issued a citation to Burton for smoking marijuana and requested to see identification. Burton refused to show identification and argued that smoking marijuana is legal in Berkeley, Phelps said. "The officer, in accordance with police policy, arrested Burton for refusing to properly identify himself." <snip> That last sentence seemed ominous to me... - Ian

1 0

Re: CJR returned to sender
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:35 AM 10/25/95, Timothy C. May wrote: > >(* Hal Abelson of MIT says there are possible export problems with the MIT >Press book on PGP, and MIT dropped plans for a version in a special OCR >font. So, I agree that _some_ books cross the line and look like pure >software. However, I continue to maintain that a badly-printed barcode is >just a joke, nothing more.) Brian LaMacchia sent me e-mail saying the MIT book _was_ published with the OCR font as originally planned. No response to their CJR request, submitted in Jan or Feb. (I spoke to Hal Abelson at the CFP Conference in Feb, and that's when I got the impression the OCR font had been dropped. Apparently not.) --Tim May Views here are not the views of my Internet Service Provider or Government. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

2 1

Re: Mandatory ID in California?
by Duncan Frissell 17 Dec '03

17 Dec '03

At 08:45 AM 10/25/95 -0700, Ian Goldberg wrote: >"The officer, in accordance with police policy, arrested Burton >for refusing to properly identify himself." ><snip> > >That last sentence seemed ominous to me... This has been chatted about for years. Under California law, failure to identify yourself is a minor violation. They always dismiss the next day at your hearing. You don't have to carry ID, you just have to identify yourself (there's a difference). "my name Jose Jimenez." You still don't need ID unless you are operating a motor vehicle on public streets and roads (or maybe catching a plane). DCF "The average seasoned citizen pays a higher percentage of his income for medical expenses today than he did in 1964 before the passage of Medicaid."

4 4