December 2003 - cypherpunks-legacy

Re: Remailer in a box
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

I've been able to locate the following on the Web in regards to fax and voicemail to Internet. The first is the one you were thinking of; the third was mailed to me by a helpful individual (thanks). http://www.faxweb.net/ Allows 1/4 size web page looking, then download full via special software for Windows. Not sure why demands special software to do the web page - should be able to download normally then auto-delete (or charge more for memory space usage). Email used for notification. Requires a credit card. http://www.jfax.net/ Emails you with a compressed file containing the fax. JFAX software for Windows or Mac used to decompress it. Requires a credit card. http://www.vix.com/hylafax/ Software to enable fax reception and translation either into PostScript or TIFF/S (sp?). This may be the most practical for anonymous use; can TIFF/S and Postscript be easily translated into a jpg or gif file? Those are the easiest viewers to locate. -Allen

1 0

Re: PGP, Inc.
by timd＠consensus.com 17 Dec '03

17 Dec '03

At 5:48 PM 5/10/96, Dan Weinstein wrote: >On Fri, 10 May 1996 10:22:24 -0700, timd(a)consensus.com wrote: >> >>The only effort they make is that when using the email-based CA, it mails >>the certificate to the address within, so it's not trivial to get a cert >>for an address that you don't have access to. (I'm not saying it's >>impossible, or even hard, just that it requires some skill and effort). > >I don't believe this is correct. They send you information after you >have created the cert verifying that you set it up, but nothing >requires a response and the key is transfered via http. If you'll examine my message, you'll see I was referring to the email-based S/MIME class 1 CA. Best, - Tim Dierks Tim Dierks -- timd(a)consensus.com -- www.consensus.com Head of Thing-u-ma-jig Engineering, Consensus Development

1 0

Re: Dear friends,
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 10:02 AM 5/10/96 +0800, MOHAMED HABIB MOHAMED EUSOFF wrote: >I am searching for NETWORK SECURITY white paper, documents and hacking >uitlities. Maybe you guys/gals can >shed some light on this. Wietse Venema and Dan farmer recomended RFC1244 in their Security Auditing and Risk Analysis class. Available from ftp:ftp://munnari.oz.au/rfc/rfc1244.Z ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

1 0

cr> ACLU v. RENO: Trial Update 5/10/96
by Craig A. Johnson 17 Dec '03

17 Dec '03

This just in from the ACLU! I was in Philly today folks, and I can tell you, the update below is an understatement; it was a rout! The ACLU and the ALA, with ample help from the judges and Government counsel, literally pulled the legs off the Government case! I'll be posting my own version on this by Monday. Suddenly, there is a new light in cyberspace! Craig @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ACLU V. RENO: TRIAL UPDATE AT CLOSING ARGUMENTS, ACLU CALLS ON COURT TO PROTECT FREE SPEECH IN CYBERSPACE FOR IMMEDIATE RELEASE Contact: Emily Whitfield Friday, May 10, 1996 212-944 -9800, x426 emilyaclu(a)aol.com PHILADELPHIA-- A three-judge panel heard closing arguments today regarding a law that would criminalize free speech in cyberspace. Plaintiffs and defendants each had approximately two hours to make their case and answer questions from the judges. Much of the government's argument today hinged on a proposal requiring Internet users to identify so-called indecent or patently offensive words or images with an electronic"tag." But by the end of the day, government lawyers conceded -- under pointed questioning from the judges -- that it would be impossible to implement this scheme given the technology currently available. That concession alone, the ACLU said, could justify granting plaintiff's motion for a preliminary injunction against the censorship provisions of the Communications Decency Act, which criminalizes making available to minors "indecent" or "patently offensive" speech online. "It's about time that the government conceded what the cyberspace community has known all along -- that this is an unworkable law," said Christopher Hansen, who presented oral arguments for the ACLU. "And even if it were feasible, it is constitutionally unthinkable to give the government the power to restrict valuable speech, or to compel people to pejoratively label their speech." Government lawyers also acknowledged today that the law criminalizes speech of value -- e.g., artistic, literary or medical information -- not just "pornography" or other prurient words or images that aren't covered under existing obscenity laws. In fact, as Hansen pointed out to the Court, Congress made sure that the Communications Decency Act applied specifically to libraries and educational institutions, and rejected several opportunities to make any exceptions for valuable speech. Such an omission might have been a "legislative craftsmanship problem," suggested Anthony Coppolino, one of the lawyers appearing for the Department of Justice. But that argument was met with skepticism from the judges. "The government is basically saying eetrust me' when it comes to determining what kind of online words and images will be considered eeindecent' or eepatently offensive,'" said Marjorie Heins, a lawyer on the ACLU v. Reno team. "But they were not able to offer a coherent explanation as to what those terms mean." The risk involved to individuals in making such a determination is especially grave when criminal penalties are involved, the ACLU emphasized. The CDA provides for penalties of up to two years in jail and $250,000 in fines. Addressing this issue, Judge Stewart Dalzell asked the government how it would view an individual such as ACLU plaintiff Kiyoshi Kuromiya, who has vowed to maintain his website no matter what. Kuromiya has testified that his website, the Critical Path AIDS Project, provides "lifesaving" information on safer sex practices -- some of it necessary sexually explicit -- aimed at reaching teens around the world. Justice Department lawyer Jason Baron responded that if Mr. Kuromiya didn't want to comply, "he can take the consequences." Overall, the ACLU said, plaintiffs succeeded in making three essential points to the court: -- The Communications Decency Act is a criminal statute with criminal penalties. -- The law is aimed specifically at speech that is constitutionally protected. -- The government's tagging scheme would force every American to censor him/herself to avoid risk of criminal prosecution. Plaintiffs also reminded the Court that the censorship law applies not only to websites, but to newsgroups, chat rooms, mail exploders, and other fora that constitute a vital part of the Internet. The ACLU has asserted in its brief -- and the government largely conceded today -- that various schemes for self-censorship would be unworkable in these environments as well. At the conclusion of today's proceedings, Chief Judge Dolores K. Sloviter said that the Court would issue a ruling "in due course." Under expedited provisions, any appeal on rulings regarding the new censorship law will be made directly to the U.S. Supreme Court. ACLU v. Reno, which was filed the day the Communications Decency Act was signed into law, was consolidated on February 26 with a second case brought by the American Library Association and 26 co-plaintiffs, known as the Citizens Internet Empowerment Coalition. Lawyers for the ACLU appearing before the judges are Christopher Hansen, Marjorie Heins, Ann Beeson, and Stefan Presser, legal director of the ACLU of Pennsylvania. Attorney Bruce J. Ennis presented oral arguments today on behalf of the ALA/CIEC coalition. -end- @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ~ CYBER-RIGHTS ~ ~=-=-=-=-=-=-=-=~=-=-=-=-=-=-=-=-=~-~=-=-=-=-=-=-=-=~=-=-=-=-=-=-=-=- Visit The Cyber-Rights Library, accessible via FTP or WWW at: ftp://www.cpsr.org/cpsr/nii/cyber-rights/Library/ http://www.cpsr.org/cpsr/nii/cyber-rights/Library/ You are encouraged to forward and cross-post list traffic, pursuant to any contained copyright & redistribution restrictions. ~=-=-=-=-=-=-=-=~=-=-=-=-=-=-=-=-=~-~=-=-=-=-=-=-=-=~=-=-=-=-=-=-=-=-

1 0

Re: PGP, Inc.
by Dan Weinstein 17 Dec '03

17 Dec '03

On 10 May 96 at 18:12, you wrote: > At 5:48 PM 5/10/96, Dan Weinstein wrote: > >On Fri, 10 May 1996 10:22:24 -0700, timd(a)consensus.com wrote: > >> > >>The only effort they make is that when using the email-based CA, > >>it mails the certificate to the address within, so it's not > >>trivial to get a cert for an address that you don't have access > >>to. (I'm not saying it's impossible, or even hard, just that it > >>requires some skill and effort). > > > >I don't believe this is correct. They send you information after > >you have created the cert verifying that you set it up, but nothing > >requires a response and the key is transfered via http. > > If you'll examine my message, you'll see I was referring to the > email-based S/MIME class 1 CA. > > Best, > - Tim Dierks > > Tim Dierks -- timd(a)consensus.com -- www.consensus.com > Head of Thing-u-ma-jig Engineering, Consensus Development Oops, sorry about that. Dan Weinstein djw(a)vplus.com http://www.vplus.com/~djw PGP public key is available from my Home Page. All opinions expressed above are mine. "I understand by 'freedom of Spirit' something quite definite - the unconditional will to say No, where it is dangerous to say No. Friedrich Nietzsche

1 0

Reminder/details on May 11th SF Bay Area Meeting
by Rich Graves 17 Dec '03

17 Dec '03

Tomorrow, noon, Tresidder patio at Stanford. If you have the bandwidth, you can get a DETAILED look at EXACTLY where we'll sit through http://www-tour.stanford.edu:1081/cgi-bin/campus-click.prl/jmtl Tresidder is at B4; a closeup picture of the benches where we'll sit is at http://www-tour.stanford.edu:1081/cgi-bin/ctour.prl/00075.10/jmtl Different versions of the JPEGs are appropriate for monitors with different gamma settings. (Why yes, as a matter of fact, we *did* have far too much time on our hands.) If people are really nice, we might sneak into my office for Ethernet connectivity and presentation hardware. I suppose it's probably too late to offer to drive people from the PA CalTrain station to campus, but you could page me. If you were counting on the shuttle, sorry, it doesn't run tomorrow. It's about a 25-minute walk. There will also be a "Spring Faire" and a "Powwow" on campus this weekend, so count on a little traffic. Nowhere near as bad as a football game, mind you. Hugh Daniel wrote: >For dinner I will suggest 'Thai City', about a 2 kilometers >south of Page Mill at 4329 El Camino Real. It is on the >Peninsula East side of the road, white building with a purple >stripe around it and some {}`s (really). +1 415 493 0643 Thai City is excellent (and cheap). -rich

1 0

Re: Mandatory Voluntary Self-Ratings
by Joseph M. Reagle Jr. 17 Dec '03

17 Dec '03

> I see it as an author provided a value added service to his content >same as anyone else. In fact, 3rd party services may have problems with large and dynamic WEB sites (in which case they just might rate it high, and rate the whole directory.) (I was thinking about this with regards to incorporating rating systems into WEB site managements tools and apps...) If MICS and signatures do become prevalent, an easy way I can defeat ratings I don't like (or to keep from others rating me) is to repeatedly change my content in some simple way, throwing off their MICS. _______________________ Regards, Men govern nothing with more difficulty than their tongues, and can moderate their desires more than their words. -Spinoza Joseph Reagle http://farnsworth.mit.edu/~reagle/home.html reagle(a)mit.edu E0 D5 B2 05 B6 12 DA 65 BE 4D E3 C1 6A 66 25 4E

2 1

Re: will the real Irving J. Schlublutz please stand up? was: Senator Leahy'sPublic Key
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 10:58 PM 5/10/96, Sandy Sandfort wrote: >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > SANDY SANDFORT >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > >C'punks, > >>On Thu, 9 May 1996, Timothy C. May wrote: > >>i think a related point is one we all know well, that being if there is a >>will, there is a way.. we've seen it with phoney physicians and >>specialists, even, with certificates and physicians' licenses.. if someone >>wants to intercept corespondence and impersonate another person, it is >>easy enough if that person has the time and impetus.. Actually, neither I nor Irving J. Schlublutz wrote this. (Careful reading of the ">" marks makes this clear, but not all readers take the time to do this, and the "Timothy C. May wrote" is misleading.) --Tim Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

RE: self-ratings vs. market ratings
by blanc 17 Dec '03

17 Dec '03

>From Vladimir Z. Nuri (just when I thought it was over): ".......PICS is a very flexible architecture and I hope it will be "used in many ingenious ways not previously foreseen." Guess so. . How long do "cool sites" stay "hot"? . How long would web pages rated "sexual content" keep that rating? . Many sites are casually rated as "cool" for the fun of it. . Why are controversial pages rated? . What motivated Yahoo to begin featuring Top 5 Sites of the Week? . What motivates those who are calling for mandatory rating? "but in a sense, this is what you do whenever you read a book or a newspaper. you are reading information screened by someone else." You could say that *all* communication is a rating, then. All evaluations are ratings (as are all emotions, and all modifying terms in grammar. Art is a rating on life, as love is a rating on others). But an individual must decide how much screening they can tolerate before they become useless to themselves (or: *whose* rating is important?) Many things help us to make judgements, to aid us in arriving at conclusions. Ratings present the conclusion itself: rather than assisting, by reasoning and discussion (or argument) in the development of judgement, they present a final evaluation. They leave out the middle, where the work of thought takes place. "ratings are not a substitute for personal judgement. they are meant to be a method to aid thinking, not to replace it, imho." They can do that, in a very reduced, limited way. I myself think that even short descriptions are more informative and useful. You can reduce communication to such constricted labels that it loses all meaning. Or as Beavis n Butthead would posit: uh - uh; uh - uh (hee-hee. It just occurred to me how dogs mark their territory. You could call *that* a rating, too. THIS site is MINE, honey!!) .. Blanc

1 0

[Fwd: Re: PGP, Inc.]
by Jeff Weinstein 17 Dec '03

17 Dec '03

I meant to send this along to the list as well as Raph. --Jeff -- Jeff Weinstein - Electronic Munitions Specialist Netscape Communication Corporation jsw(a)netscape.com - http://home.netscape.com/people/jsw Any opinions expressed above are mine. To: Raph Levien <raph(a)cs.berkeley.edu> Subject: Re: PGP, Inc. From: Jeff Weinstein <jsw(a)netscape.com> Date: Sat, 11 May 1996 02:07:40 -0700 Organization: Netscape Communications Corp. References: <v02140b03adb92b2dbc65(a)[205.149.165.24]> <3193E226.575E651C(a)cs.berkeley.edu> Reply-To: jsw(a)netscape.com Raph Levien wrote: > > Tim Dierks wrote: > > > > The only effort they make is that when using the email-based CA, it mails > > the certificate to the address within, so it's not trivial to get a cert > > for an address that you don't have access to. (I'm not saying it's > > impossible, or even hard, just that it requires some skill and effort). > > For example, see http://www.digicrime.com/id.html . I believe they got > these certificates using the Web, rather than e-mail. > > I think with e-mail, you'd actually have to be running a packet sniffer > or doing an active attack such as DNS spoofing. However, the Web is > much, much more convenient. > > In any case, the page I referenced above is worthwhile reading. It is certainly possible to put e-mail 'into the loop' when issuing certs via the web. With Netscape Navigator 3.0 there is no requirement that the cert be issued immediately when requested. I expect that some cert vendors who are issuing low assurance certs will e-mail the requestor a password that they can use to retrieve their cert. This at least provides some(not total) assurance that the requestor can receive e-mail at the address in the cert. --Jeff -- Jeff Weinstein - Electronic Munitions Specialist Netscape Communication Corporation jsw(a)netscape.com - http://home.netscape.com/people/jsw Any opinions expressed above are mine.

1 0