December 2003 - cypherpunks-legacy

(fwd) E-Commerce Info. Needed
by Robert Hettinga 17 Dec '03

17 Dec '03

Reply directly to this person, and not me, please... Cheers, Bob Hettinga --- begin forwarded text From: aiq005(a)teix.uib.es Date: Tue, 30 Apr 1996 09:46:56 +0200 To: RAH(a)shipwright.com Subject: E-Commerce Info. Needed Status: U Dear sir, I'm doing a project on Security and E-Commerce. I would like to know if you could help me on my search of information on two subjects: * Graphics and statistics about the growth of the e-commerce in the last years, and also on the attacks to comercial sites on this period. * Future tendencies, projects... on e-commerce, and how security is going to affect the future on the commercial sites. When I say 'information' I'm talking about URL's (of course) Thanks a lot, and please forgive my bad use of English! Joan Andreu (Universitat de les Illes Balears) aiq005(a)teix.uib.es --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "If they could 'just pass a few more laws', we would all be criminals." --Vinnie Moscaritolo The e$ Home Page: http://thumper.vmeng.com/pub/rah/

1 0

Austin, TX meeting notice
by sdt＠zilker.net 17 Dec '03

17 Dec '03

There will be a physical meeting of cypherpunks in Austin, TX. Location: Central Market Cafe 4001 N. Lamar Blvd. Time: Saturday, May 4 at 6:00PM This will be a general meeting covering the existing projects (the video, the web page rebuild, and remailer planning), events in the news, and assorted other topics. As usual, look for a table with a stack of crypto-related books.

1 0

Re: LolitaWatch v1.1
by Duncan Frissell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 08:02 PM 4/17/96 -0700, Dave Del Torto wrote: >[ Newt Gingrich and his ilk being the mensches they are, I expect v2.0 may ] >[ add support for the "Jew," "Nigger," "Kike," "Fag," "Nerd" and "Wop" bits ] >[ -dave ] > Slick Willie and his ilk being the copraphagic cretins they are, I expect v2.0 may add support for the "religion", African-American, "Person of the Jewish Faith", "Lesbian", "Gay man", "Itellectually enhanced but socially challenged", and "Euro-American" bits. DCF -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMYYXfIVO4r4sgSPhAQGLlQP/dB4ElSyHbDEqdOMNGESh6UNrzTcvbsZH BKvXiPBAz2HUitD5lX3AdJ0KqJmZkPo+nRKe48rE19H370M9hFuvkOT04Jsydf6E IOt3EyOw2McZw66rRjN0HxWiS4yHu1Bj+bhjASX7QpZoG1XKO2wozUb/AHhH1dvA UroHHC6bJFc= =uHho -----END PGP SIGNATURE-----

2 1

Netscape 3 betas
by Adam Shostack 17 Dec '03

17 Dec '03

I'd like to commend Jeff and Phil, and any other members of the netscape team who are here, for the strong list of security controls available in Atlas (beta 2) They include control of caching SSL protected docs, alerts before showing a cookie or submitting a form via email, control over email address as ftp password, and, best of all, Java and JavaScript come turned off by default. Nice work! (I'll also offer a pet peeve, which is I can't refuse to accept server pushes, and the stop button doesn't really seem to affect them. I should be able to prevent keep-alive if I don't want it.) Adam -- "It is seldom that liberty of any kind is lost all at once." -Hume

2 1

Re: Calling other code in Java applications and applets
by Hal 17 Dec '03

17 Dec '03

I understand that Sun is considering including a bignum package and possibly other crypto support in native form in a future release of Java. There has been considerable discussion of this on the coderpunks list. Apparently Sun has said they will release their crypto API within the next week or so. However these kinds of things are often delayed, in my experience. An earlier version of the crypto API was shared with Java developers at a meeting a few months ago, and the response was quite negative, according to list memebers. The class and method design in many cases seemed awkward, spotty, and inconsistent. Apparently there are also export considerations, with the NSA resisting the inclusion of too many explicitly crypto oriented classes. Hal

1 0

"Scruffies" vs. "Neats"
by tcmay＠got.net 17 Dec '03

17 Dec '03

(The version I apparently just sent out was not quite complete. I saved it in my mail program, intending to work on it later today, but it got queued for sending inadvertently. Sorry it got sent. But maybe it's just as well, as I can look at the commentary--if any--and make additions and clarifications later.) --Tim Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: [Joke] It Takes a Village
by attila 17 Dec '03

17 Dec '03

** Reply to note from cpunk(a)remail.ecafe.org 04/30/96 10:49am +0100 well, might as well flesh it out and get the rest of us who were slighted --and don't forget yourself. if you can not laugh at yourself occasionally, check your pulse = Friend, = = Here's Timothy May, the self-appointed village headman. = He's surrounded by a bunch of arse-kissing accolytes: = -"Gosh, I thought that Java was garbage, but now that Tim mentions it, = it's the best thing in the world" = -"Tim's right, Java is terrific." = = Village Jester: "Tim's dead wrong. Java isn't good--it's great!" = = Then there's Perry Metzger, the local squire, who's embittered over the = fact that, while he's got some worthwhile things to say, he's always = overpowered by the "charisma" and new clothes of May. = = Jim Bell, village idiot. He's always good sport for the village bully, = Black Unicorn. His pretentions aside ("the black unicorn has been in = my family crest for a thousand years"), he is in actuality a short, = portly Philadelphia accountant by the name of Irving Lipshitz-Groins. = = Cordially, = = Your village historian -- Overseeing first-rate programmers is a managerial challenge roughly comparable to herding cats.

1 0

Re: Freedom and security
by angels＠wavenet.com 17 Dec '03

17 Dec '03

Mike McNally wrote >If.... (freedom and security) ....weren't antithetical, there'd be no need >for a balance. If they were antithetical then as freedom increased security would decrease, and as security increased freedom would decrease. It is not IMHO inevitable that if we increase security we will jeopardize freedom. My concern is that if we ignore security we will have no freedom left to protect. I don't believe the Internet community is split into two camps on this issue - there appear to me to be many places where people draw their lines at different points. I don't believe that security is the enemy of freedom. I believe that freedom needs security in order to exist at all. ********************************************************* Colin Gabriel Hatcher - CyberAngels Director angels(a)wavenet.com "Two people may disagree, but that does not mean that one of them is evil" *********************************************************

4 3

once again
by Perry E. Metzger 17 Dec '03

17 Dec '03

Lots of people seem to have misread my statement about java programs and I/O. To repeat: I fully understand that Java is a general programming language and can do I/O. However, "Safe" Java subsets, like the ones used for writing applets or presumably the ones that would be needed for markets in CPU cycles, do not do i/o. One could add i/o to the suite, but that would be dangerous. Perry

1 0

Re: Smartcards are coming to the US
by btmoore＠iquest.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 06:00 PM 4/20/96 -0700, Lucky Green wrote: >Years after smartcards have become ubiquitous in such countries as Pakistan >and Nepal, not to mention Europe, I just saw my first smartcard commercial >ever on US television. > >Way to go :-) > > > >Disclaimer: My opinions are my own, not those of my employer, DigiCash, Inc. > >-- Lucky Green <mailto:shamrock@netcom.com> > PGP encrypted mail preferred. Hummm... Did you ever wonder *why* this was introduced to the "third-world" countries first? If you've been following the progress of the so called "smart- card," you will have noticed it was first introduced to areas that are extremely "low-tech" and well off the beaten path. Also the areas it was *first* introduced were generally marked by a high population density. Notice, "low-tech," high population density and in locations that are definitely out of the loop when it comes to news coverage. There was obviously a strategy involved and I think it would be prudent to wonder why. The U.S. is one of the most technologically advanced nations on the face of the earth. The citizenry are very familiar with technology and are quite adept in it's uses. Not to mention the fact that some of the worlds pivotal financial markets are located here, it makes one wonder why they didn't introduce the card here. I for one am not nearly so intrigued with the benefits of these "smart cards." I see too much room for mischief. Already, where I live, there are Insurance com- panies that have access to the data bases of grocery stores in this area. If one uses one's "debit card" to purchase groceries... and say, purchases a carton of cigarettes for a loved one or friend, the insurance company has access to that information. There is a growing collection of information being gathered on every- one in this country. Although it appears to be harmless, using sophisticated collation and analysis techniques, the accuracy of the inferences *I* believe constitute an invasion of privacy and a clear and present danger. Consider a scheme used by local law enforcement here several years ago. They set up an operation with the several horticulture stores. Anyone purchasing "grow lights" was noted, their license plates were copied and later... based on the fact, a person purchased a "grow light" a search warrant was issued for the search of their homes. Although grow lights are used all the time for legitimate purposes it was assumed that anyone purchasing one was growing marijuana. Imagine being awakened at 6:00 am by a team of narcotics officers with dogs and a warrant allowing them to search your premises. Given the current asset forfeiture laws, and given that well over 75% of the money supply by government studies has been contaminated with cocaine, you could lose your home if the dogs happen to "hit" on any money in your home. Never mind you're not one who grows or deals in narcotics, this is extremely dangerous! In the new anti-terrorism bill recently signed, the FBI has been given the ability to tap 1 out of 10 phone lines without the need to actually come out and set up a tap on your line. This will now be handled automatically for them by your friendly phone company. I see "smart cards" as one more twist in the ever tightening noose around our necks and the Bill of Rights. Not only will the cards be able to keep your complete history from cradle to the grave on them, but what's to prevent them from being used in the future as an internal passport of sorts? We are rapidly approaching the point where we will be stopped and required to produce our papers. This information will be readily available to any government agency... and not a few corporations to exploit at will. No I'm not at all enthused with the advent of the smart card. Currently there is much discussion regarding various banking institutions charging excessive amounts for transaction fees at your local "ATM." Wonder how much they will be looking to charge for this service? Something to think about. Benjamin T. Moore, Jr. (btmoore(a)iquest.net) -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMYT0c4SAJOVFNaChAQG6kAf/SF/cMlbkj+0FQCBjHe29wJR93UMBqykf Fz0N9dUB+TLksddhcEMWzwY0oDGjT87DOjYmimzvDQgwinxQEemxe4pS2ph2ydJZ 3iELOWRcyKdD4Hi+RB2O9gjKNR6M1O2I/cvdnxjV6r+L9Ysd1ea35jJ2R7LhVVMf MRQQuMs3zx5zJafp2LNI43JCGvWweHy0ZEzHex65Ee9FdRTLNT5KIbl/QHaFP6Ij gMWysxBnj3bBCoBx0l511GMmPN0W/tycec45EvRFhJOUPR+H0bKhzoYs46tSQAkr NPPTFCdvFae539xgWlvVpIffp/mGigsjaKv7WJRu4hEpQeRV9lNGmA== =GGwf -----END PGP SIGNATURE----- --------------------------------------------------------------------------------------------------------------- "When they came for the Fourth Amendment I didn't say anything because I had nothing to hide. When they came for the Second Amendment I didn't say anything because I wasn't a gun owner. When they came for the Fifth and Sixth Amendments I didn't say anything because I had committed no crimes. When they came for the First Amendment I couldn't say anything." -------------------------------------------------------------------------------------------------------------- PGP Key available from key servers, or on request. Key Fingerprint = 3D 90 0C 58 EE 65 AE 89 28 C5 58 A2 D5 F4 A8 --------------------------------------------------------------------------------------------------------------

5 4