December 2003 - cypherpunks-legacy

Re: [NOISE] #/%age of CDA-blackened sites
by Bill Stewart 17 Dec '03

17 Dec '03

>Sorry to post this question here, but I know of no other group with >folks who would know. Have any of the "spiders" such as Alta Vista >been sent to see just how many US sites have been blackened in the >protest? The approximate number and percentage of US sites blackened >might be interesting. In my limited surfing, I have been gratified >to see the _widespread_ response -- but I am not the typical user. I don't think it's updated enough things recently (or else it only indexes the contents of a page and not the header details in the <BODY> statement.) For instance, BGCOLOR="#000000" had 197 hits, but most of them were old, and on topics like "How to set the background colors on your web page", and NO documents matched both BGCOLOR="#000000" and vtw. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com / billstewart(a)attmail.com +1-415-442-2215 # http://www.idiom.com/~wcs

1 0

Re: Fair Credit Reporting Act and Privacy Act
by Bill Stewart 17 Dec '03

17 Dec '03

At 06:28 AM 2/9/96 -0500, Duncan wrote, regarding the appallingly invasive British Privacy Act: >Computer bureaux which process personal data for others or allow data users >to process personal data on their computers must also register. Their >register entries will contain only their name and address. > >Data users and computer bureaux who should register but do not, are >committing a criminal offence, as are those operating outside the >descriptions contained in their register entries. In these cases the >Registrar regularly prosecutes. The penalty for non-registration can be a >fine of up to £5,000 plus costs in the Magistrates Courts, or an unlimited >fine in the Higher Courts." Ouch - does this mean that if you offer shell accounts, you either have to contractually limit the processing your users may do, or be fined as a criminal for not registering? #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com / billstewart(a)attmail.com +1-415-442-2215 # http://www.idiom.com/~wcs

1 0

Re: Fair Credit Reporting Act and Privacy Act
by Bill Stewart 17 Dec '03

17 Dec '03

At 09:21 AM 2/9/96 -0500, Tim Philp wrote: > Private individuals are not what I was refering to. I am more >concerned about corporations who hold information about me and release it >to the highest bidder. When it comes to individual versus corporate >rights, I am clearly on the side of the individual. Remember that there's a major difference between "corporations" and "business"; you seem to be mixing them up. A corporation is a legal fiction that treats a cooperative effort by one or more people as if it were a person in itself, and normally involves limiting the liability of the corporation's investors by putting it all on the fictional person. A business is what one or more people do to make money. Most corporations are businesses, though not all. Governments can legitimately tell corporations what to do because that's part of the price of the legal fiction; a government can't abuse a corporation because you can't beat up a legal fiction, though it can say "Poof! You're not a legal fiction any more", and conversely, if the people who own the legal fiction don't like what the government's telling it to do, they can dissolve it. (Governments also enjoy regulating non-corporate businesses, but they're no longer on solid moral ground.) > I have also not suggested some form of prior restraint that would >require government access to computers. I simply suggest that should a >violation occur, that I have the right of civil and criminal law as a >recourse to both compensate me for my loss of privacy as well as deter >future damage. A company knowing that civil and criminal penalties could >result from a violation would take extra care to ensure the security of >my data. How are you going to _know_ that a "violation" occurred, if company A tells company B your address or favorite liquor? Only by having access to the records of both companies. Getting that through the courts, for only the parts of their information relevant to you, is better than blanket permission for the government to rummage through their files, but after the first lawsuit lets investigators in, everything they've got is clam bait anyway. It's still major privacy violation - for the company whose machines are being violated, and for the non-suing individuals whose data is also on those machines. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com / billstewart(a)attmail.com +1-415-442-2215 # http://www.idiom.com/~wcs

2 1

Re: Benefits of the V-Chip
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:11 AM 2/9/96 -0500, olbon(a)dynetics.com (Clay Olbon II) wrote: >There is one potential side-benefit to the V-chip -- The inverse-V-chip .. >I am looking forward to a time when I will never, even accidentally, have >my TV tuned to "Full House" ;-) Just as many people program their televisions using VCR-Plus codes to record the shows they want (using TV Guide as a rating service) it would be easy for any rating service to publish a list of the codes for Approved Shows, Banned Shows, Rated-by-interestingness shows, etc. without putting any government-mandated rating chip in the TVs or forcing the TV producers to rate them (which also has a chilling effect on the shows produced.) #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com / billstewart(a)attmail.com +1-415-442-2215 # http://www.idiom.com/~wcs

1 0

World's Financial Police To Cast Money Laundering Net Wider
by tcmay＠got.net 17 Dec '03

17 Dec '03

I found this article in misc.survivalism, but despite its presence there, it actually has some interesting things to say about developing directions in money laundering enforcement, including mention of electronic purses. And "The Financial Times" is no slouch of a paper. --Tim May In article <4fbg19$nv1(a)ixnews7.ix.netcom.com>, taxhaven(a)ix.netcom.com(Adam Starchild ) wrote: > From The Financial Times (London) for February 3-4, 1996: > > > WORLD'S FINANCIAL POLICE TO CAST MONEY LAUNDERING NET WIDER > > by George Graham, Banking Correspondent > > > The world's leading financial policemen are to consider > targeting money laundering from arms trafficking, extortion and > bribery as well as the drugs trade. > Members of the Financial Action Task Force, grouping senior > government officials from the European Commission, the Gulf Co- > operation Council and 26 other countries, have launched a review > of their guiding principles. > The review is expected to be completed by June, and could > result in the criminalisation of money laundering linked to any > serious crime. > The Task Force's current recommendations, which set out > minimum standards for money laundering laws in member countries, > only require the criminalisation of drug money laundering, > although countries are also urged to consider extending the > offence to other crimes with a narcotics link. > Mr. Ronald Noble, under-secretary for enforcement at the US > Treasury and president of the Task Force, said the group had not > yet decided whether to widen the definition of money laundering. > Including all serious crimes could, however, make it simpler for > law enforcement officials to launch investigations of > transactions that look suspicious but have no obvious drugs link. > "It would make it much easier to collect information," Mr. > Noble said. "People who before were engaged in the illegal > transfer of funds would find it more difficult and more costly." > A broader definition might, however, make it more difficult > to apply the Task Force recommendation that countries should have > the power to confiscate laundered money. > The review is not expected to result in big changes to the > 40 principles currently recommended by the Task Force, which > officials believe have already contributed to substantial > advances in the fight against money laundering. > But the review will also have to consider whether to address > the new issues raised by the development of "cybercash," new > varieties of payments systems such as stored value cards or > electronic purses. > "We have to be concerned as an organisation to come up with > principles which recognize that technologies could pose a threat > but do not define them in such a way that you are dated as soon > as you publish them," Mr. Noble said. > Law enforcement officials are keen that the developers of > new financial technologies should think about their criminal > potential before they launch them, so that governments do not > have to clamp down on them afterwards with rigid rules. > Possible safeguards against the misuse of electronic purses > could include limiting their maximum value or restricting their > use to certain closed systems. > > Posted by Adam Starchild > Asset Protection & Becoming Judgement Proof on the World > Wide Web at http://www.catalog.com/corner/taxhaven

1 0

Re: CDA Yes Votes; Collection
by Tim Cook 17 Dec '03

17 Dec '03

Duncan, > badly as you are upset. That is why some of us want less legislation > and less regulation to minimize just this sort of human suffering. > Maybe next time those of you who are into "proactive" government > will think before you crush other people's lives. > That's why I support Lamar Alexander! <BG>. Another "Logical Conclusion" by: Tim Cook <twcook(a)cts.com> Support THE US Constitution... Vote Alexander in '96 and '00!

1 0

SKIP Alpha-2 Source release
by markson＠osmosys.incog.com 17 Dec '03

17 Dec '03

Hi, We've just released the Alpha-2 SKIP reference source for SunOS 4.1.3. This is a bug fix release of our Alpha-1 Source reference Source. The source is available from http://skip.incog.com. Included in this mail message are excerpts from the README file for the the package. Please direct comments to freeskip(a)incog.com. Enjoy! Tom Markson Sun Microsystems ------------------------------------------------------------------------- ALPHA 2 Release of SKIP Reference Source for SunOS 4.1.3 -------------------------------------------------------- Overview and Release Notes Overview -------- SKIP is a Key-management protocol for IP based protocols. It is an acronym for Simple Key-management for Internet Protocols. SKIP is documented in the SKIP IETF IPSEC draft included in this directory as draft-ietf-ipsec-skip-06.txt. The most recent SKIP draft is always available at http://skip.incog.com and the Internet-Drafts directories. >From this public domain source release, you can build a fully functional IP-layer encryption package which supports DES and Triple-DES for SunOS 4.1.3. This means that every IP networked application can have it's network traffic encrypted. Unlike application level encryption packages, this package encrypts IP packets. Thus, applications do not need to be recompiled or modified to take advantage of encryption. The SKIP source is possible through the efforts of engineers in Sun Microsystems Internet Commerce Group. The developers and designers are Ashar Aziz, Tom Markson, Martin Patterson, Hemma Prafullchandra and Joseph Reveane. Linda Cavanaugh worked on the documentation. The package compiles under both the SunPro compiler and GCC. We expect that this release should port without too much pain to any operating system which uses BSD style networking (mbufs). A legal warning: Because this package contains strong encryption, the Software must not be transferred to persons who are not US citizens or permanent residents of the US, or exported outside the US (except Canada) in any form (including by electronic transmission) without prior written approval from the US Government. Non-compliance with these restrictions constitutes a violation of the U.S. Export Control Laws. This source release may be used for both commercial and noncommercial purposes, subject to the restrictions described in the software and patent license statements. Furthermore, Sun Microsystems has licensed the Stanford public key patents from Cylink Corp. which are available to users of this package on a royalty free basis. The patent statement is in README.PATENT. Be sure to read this, as it contains some restrictions and other important information. Also included in this release is a high speed Big Number package written by Colin Plumb. bnlib/legal.c contains Colin's software license statement. Features -------- 1. SKIP V2 compliant implementation using ESP encapsulation. 2. Support for DES/3DES for traffic and key encryption. 3. Diffie-Hellman Public Key Agreement based system. 4. Full Support for manual establishment of master keys. 5. Support for multiple NSIDs and multiple local certificates. 6. GUI tool for user friendly manipulation of access control lists and key statistics. 7. Command line tools for manipulating access control lists, etc. 8. Implementation of the Certificate Discovery protocol fully integrated into SKIP. 9 Implementation of X.509 public key certificates. 10. Implementation of DSA signature algorithm for certificate signatures. 11. Implementation for MD2, MD5 and SHA message digest algorithms. 12. Implementation of ASN.1 DER encoding/decoding. 13. SunScreen(tm) SKIP compatibility mode. 14. Implementation of hashed public keys as defined in the SKIP draft. Implementation of programs to generate hashed public keys. 15. Certificate utilities to convert X.509 Certificates to hashed keys and print both X.509 and Hashed certificates. 16. High performance Big Number library for Diffie-Hellman calculations. 17. Implementation is effectively "public domain" and may be used both commercially and non-commercially. 18. Patent Agreement with Cylink allows roylaty-free use of the Diffie-Hellman and other Stanford patents with this package for commercial and non-commercial use. Read README.PATENT for some restrictions. 19. Inclusion of prime generation program used to generate the primes in SKIP draft. Release Notes ------------- Here are the release notes for this Alpha 2 release of the SKIP source. 1. This release is a bug fix release for Alpha-1. Major areas of change include: o Fix ESP and AH protocol numbers. o Fix Unsigned DH Public encoding. o Remove truncatation of shared secret (for this release only). o Various other Bug fixes. o Fix Triple DES. 2. This release does not interoperate with Alpha-1. Alpha-1 sites should upgrade. Alpha-1 had a bug where unsigned public keys were being encoded incorrectly. Therefore, unsigned DH keys generated with alpha-1 do not work with Alpha-2. Regenerate your unsigned public keys. X509 Certificates from alpha-1 will continue to work. 3. This release interoperates with Swiss ETH SKIP using unsigned DH keys and DES and triple DES. It was tested at the Dallas 1995 IETF. However, the certificate discovery protocol does not interoperate. This will be fixed in the next release. 4. This release does not fully comply with the SKIP drafts. It is closest to the 05 version of the draft. However, the shared secret is not truncated according to that draft. This change is made to interoperate with the ETH implementation. The next release will correspond to the 06 draft.

1 0

Re: Tell me whats wrong with this
by Duncan Frissell 17 Dec '03

17 Dec '03

At 01:00 AM 2/9/96 -0800, lunaslide(a)loop.com wrote: >to speak your mind on the matter, as you are now. People talking about gay >rights, abortion options, better sex (a la Dr. Ruth) can no longer do that >on the net without wondering whether they are in violation of the bill or >not. If people where more used to regularly violating laws, one more law violation would mean much. Practice makes perfect. "Your Honor, I plead necessity. The reason I violated this law was so that I would have plenty of practice in case I ever find myself in a totalitarian state. Since the laws of the US and International Law permit (and in some cases require) me to violate the laws of a totalitarian state, I need to practice law violation under the less stressful circumstances of the current US. Without practice, I won't be able to violate totalitarian laws smoothly and thus might have to obey them. This could put me in jeopardy under International Law. Necessity defense." DCF

1 0

Re: Not so fast
by Duncan Frissell 17 Dec '03

17 Dec '03

At 02:37 AM 2/9/96 -0800, anonymous-remailer(a)shell.portal.com wrote: >Coppolino also told U.S. District Judge Ronald L. Buckwalter that >the Justice Department will stand by its longstanding policy >``unchristian speech will be vigorously prosecuted.'' We warned you what would happen if you elected *Southern Baptists* to the White House. DCF "Of course, Algore used to be an Episcopalian until he had a political conversion to Southern Baptism."

1 0

PGP & Seamless Pegasus
by Adam Philipp 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Can I just add a loud HURRAH! on the integration of PGP and Pegasus using the PGPJN add-on. It is by far the smoothest melding of PGP and a e-mail routine to date. The only way it would be smoother is on one program. THe learning curve is also negligible. For all those griping about no good PGP windoze e-mail programs, your wait is over. This mail program won over a die hard Eudora fan in about 15 minutes... Someone else already posted the sites to get this so forgive my laziness of not repeating their words. Oh, did I mention this is seamless under Windoze 95 as well? Adam, Esq. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMRs/RAaMHlrz9swxAQGWUwf/amggouHkGjrjoYQ3JXYXiWblHc2NBvQx wwy1jMSvEEiP0kQD1iaysA6fw4t+xU1bFAftqACRa3rTF7ZgCRRgFuhgwTwhwR8u HZ8zDed5PIgywsn9/jqXW+nqneNx2uboUjq7FsncZiC7EG90/SMK78et8QZ/sT0l ifiCvoLXaYhW4anmIeHMADLwDRqUlhVWX5RX1ccG2MrOrrrKHjJcveG4CF72M8EV hftXDTWdElUuPUHD0JUBlp555+YMuolSUuu4sq1eodwlX0L4tq9vv4QBCwnBvq0H 4XONwa9BaRvEjVJ0Gg6+HjC4/IHOt/5CJ+SfwvQAaysH7Q11nkKTZw== =/zQA -----END PGP SIGNATURE-----

1 0