December 2003 - cypherpunks-legacy

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

Note: downloaded from www.vtw.org so cannot guarentee correctness- "§2804. Unlawful use of encryption to obstruct justice" "Whoever willfully endeavors by means of encryption to obstruct, impede, or prevent the communication of information in furtherance to a felony which may be prosecuted in a court of the United States, to an investigative or law enforcement officer shall-..." Interesting wording - sounds almost like if you impede the *commission* of a felony, you is been had. Keyword would seem to be "willingly". Suspect they meant to say "...obstruct (etc) the investigation of a felony..." "(b) CONTROL OF EXPORTS BY SECRETARY OF COMMERCE.- "(1) GENERAL RULE.-Notwithstanding any other law, subject to paragraphs (2), (3), and (4), the Secretary of Commerce shall have exclusive authority to control exports of all computer hardware, software, and technology for information security (including encryption), except computer hardware, software, and technology that is specifically designed or modified for military use, including command, control, and intelligence applications. This would seem to extend ITAR, not limit it. "(2) ITEMS NOT REQUIRING LICENSES.-No validated license may be required, except pursuant to the Trading With The Enemy Act or the International Emergency Economic Powers Act (but only to the extent that the authority of such Act is not exercised to extend controls imposed under this Act), for the export or reexport of- "(A) any software, including software with encryption capabilities, that is- "(i) generally available, as is, and designed for installation by the purchaser; or "(ii) in the public domain or publicly available because it is generally accessible to the interested public in any form; or "(B) any computing device solely because it incorporates or employs in any form software (including software with encryption capabilities) exempted from any requirement for a validated license under subparagraph (A). Microsoft's CryptoAPI seems OK. PGP would seem to fall under both (i) and (ii). "(3) SOFTWARE WITH ENCRYPTION CAPABILITIES.-The Secretary of Commerce shall authorize the export or reexport of software with encryption capabilities for nonmilitary end-uses in any country to which exports of software of similar capability are permitted for use by financial institutions not controlled in fact by United States persons, unless there is substantial evidence that such software will be- "(A) diverted to a military end-use or an end-use supporting international terrorism; "(B) modified for military or terrorist end-use; or "(C) reexported without requisite United States authorization. Thank you MasterCard/VISA for SET. Note that it does not seem to say that you do not need a license, just that one shall not be witheld without "substantial evidence". "(4) HARDWARE WITH ENCRYPTION CAPABILITIES.-The Secretary shall authorize the export or reexport of computer hardware with encryption capabilities if the Secretary determines that a product offering comparable security is commercially available from a foreign supplier without effective restrictions outside the United States. Same comment except that token & INE vendors will have to demonstrate that a foreign competitor exists. Real lawyers please comment. Warmly, Padgett

1 0

Test of email netnews post.
by uunet!in2.uu.net!news.ner.bbnplanet.net!news3.near.net!yale!news-mail-gateway!daemon＠warwick.com 17 Dec '03

17 Dec '03

Test of email netnews post. -- Rich Carreiro rcarreiro(a)bos.saic.com Software Engineer (617)221-7607 (voice/voice mail) SAIC (617)270-0063 (fax) 20 Mall Road, Suite 130 Burlington, MA 01803

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

David Lesher wrote: | How about code that goes out & fetches keys upon demand, al-la DNS? This works with procmail to get keys for all mail I receive. I discovered the problem is your keyrings get unmanageably large when you do this. # auto key retreival # # I have an elm alias, pgp, points to a keyserver :0BW * -----BEGIN PGP *!^FROM_DAEMON KEYID=|/home/adam/bin/sender_unknown :0 ahc # added h 8 jan 95 * ! ^X-Loop: Adams akr | formail -a"X-Loop: Adams akr" |elm -s"mget $KEYID" pgp # add the incoming keys to the ring :0 * From bal(a)swissnet.ai.mit.edu { # if we accidentally get the whole thing. :0 h * >10000 /dev/null :0 h *^Subject:.*no keys match /dev/null :0: *Subject: Your command, ADD $DEFAULT :0E | pgp +batchmode -fka } sender_unknown: #!/bin/sh # unknown returns a keyid, exits 1 if the key is known # $output is to get the exit status. Othierwise, this would be a one liner. OUTPUT=`pgp -f +VERBOSE=0 +batchmode -o /dev/null` echo $OUTPUT | egrep -s 'not found in file' EV=$? if [ $EV -eq 0 ]; then echo $OUTPUT | awk '{print $6}' fi exit $EV -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

POO_bah
by jya＠pipeline.com 17 Dec '03

17 Dec '03

3-6-96. TWP and NYT give additional reports on WW II atomic spying by the Soviets revealed by decoding cables under NSA's Venona program. With more on the role of physicist Theodore Hall and others initially reported by TWP on February 25. NYT quotes David Kahn on the "unquestionable" code-breaking and doubts of FBI "gumshoe" follow-up of decrypted leads. TWP's is more robust, quotes poo-bahs. POO_bah

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

Post Test -- John G. Jones Director, Computer Services UTDS, Inc. <http://www.utech.net> <mailto:john@utech.net> 1593 E. Chestnut Lompoc, CA 93436 (805) 735-4447

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

> This is a test... Follow up on test...test...test -- Live on the edge, push the limits, and go EXTREME... -------------------------------------------------------------------------- Svein Ove Solsvik * E-Mail: sveinove(a)ringnett.no -Dyslexic atheists don't believe in Dog.

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

> In the "real world" there is nothing to prevent someone from forging > your real signature on a check or document or from disguising themselves > as you and taking your place at an important business meeting. The > digital equivalents can be slightly more secure, but nothing is ever > perfect. > > jim > Heh. Whoops. I may be a beginner but I'm not THAT green. I shoulda known better than to use that exact wording. Please excuse the inappropriate wording, all. Sincerely. Quentin Holte. ( aka Charles Choi. ) You are all the Buddha. - Last words of Buddha. If you see the Buddha, kill him. - Zen proverb.

1 0

did this get out?
by uunet!in2.uu.net!newsfeed.internetmci.com!lamarck.sura.net!rs7.loc.gov!news＠warwick.com 17 Dec '03

17 Dec '03

Is this getting past news.loc.gov? These opinions are my own, not those of the Library of Congress. Howard Sanner hcs(a)hsan.loc.gov sanner(a)mail.loc.gov

1 0

PLEASE REPLY!!
by uunet!in2.uu.net!gatech!newsfeed.internetmci.com!news.emeraldis.com!usenet＠warwick.com 17 Dec '03

17 Dec '03

Did this message make it out to the "real" world?? Please reply to this message if it did. Thankyou. *David*

4 3

Not a good idea...
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 10:35 PM 3/7/96, owner-cypherpunks(a)toad.com wrote: >I wonder whether they've actually considered the liability situation >in re: blocking sites that shouldn't be blocked? I mean, sure, they >seem nice enough about setting things right (like with the Nynex sites >whose url's had "xxx" in the paths), but it seems to this non-lawyer >that a case could be made for damages inflicted by being known as a >purveyor of filthy indecency for even a short while. We need to be very careful here. A service like "SurfWatch," voluntarily used by others, has entered into no contracts with sites to meet defined standards of what should and shouldn't be blocked. It is essentially a "review" service, like a reviewer of books, movies, restaurants, etc. Sure, some books, movies, and restaurants are "hurt" by negative reviews, but this is life in a free society. It has not yet reached the point in these Beknighted States that a bad review can be the basis of a tort (though I could be wrong...nothing would surprise me these days). Let me use myself as an example. "TimWatch" offers to inform people of sites he thinks are not desirable for them to visit. I freely admit that my criteria are imperfect, and people can choose to follow my advice or not follow my advice. I may even sell a software package ("TimWatch") to let users screen sites at their own machines. Now, do we as Cypherpunks really think TimWatch or SurfWatch should be liable for "damages" because someone got their feelings hurt? Absent a contract, spelling out the performance expected, of course not. If SurfWatch can be sued for a "bad review," then Siskel and Ebert had better find a new line of work. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

4 4