December 2003 - cypherpunks-legacy

Re: Word lists for passphrases
by John Deters 17 Dec '03

17 Dec '03

At 10:33 AM 7/15/96 -0700, David Sternlight wrote: >At 12:45 AM -0700 7/15/96, Bill Stewart wrote: >>At 09:43 PM 7/8/96 -0700, ??? wrote: >>>If the purpose is for use with "Crack" or some similar program, it might be >>>better than you would think. You won't get the "unusual" words, but you >>>will also get the words in common usage that do not appear in dictionaries. >>>(Such as fnord, jedi, killfile, and the like...) >> >>"fnord" is in _my_ dictionary - can't you find it in yours? :-) >> >>>Another thing to look for when choosing dictionaries/wordlists for crack is >>>not sticking to english. If you have a userbase that is known to have a >>>certain percentage of people of a non-english background, you will want to >>>find lists of words from that background. (I had a sysadmin asking me about >>>Yiddish and Hebrew wordlists for just that reason.) These can be a bit >>>harder. (Especially for unusual languages.) >> >>Grady Ward has his Moby Words databases with some of this kind of information. >>In addition to the usual sets of languages, it's useful to include any >>available lexicons of Elvish, Klingon, Unix, and other popular >>hacker-languages, > >It is pretty easy to defend against dictionary attacks by using an expanded >character set--mixed caps and lower case; numbers substituted for some >letters according to easily-remembered personal rules. Then I caution you to review the program 'Crack'. Crack comes with two sets of rules with which it mutates the words from two separate dictionaries. Things like: replace 'i' with 'y', 's' with '$', 'e' with '3', change capitalization to pattern AbCdE, etc. Typically, there is an extensive set of rules (I remember 47) that perform more "morphing" of a shorter "hot" dictionary list, followed by a common subset of the rules applied to the entire dictionary. The shorter dictionary list I remember seeing contained an extensive list of female first names, common computer "words" such as foo, bar, etc., and even some Klingon and Elvish words. These words were subjected to extensive letter shifting, case changing, and substitutions. The balance of the dictionary was subjected to the simpler subset of rules (22, I believe) regarding substitution, reversal of letters, capitalizing the first and/or last letters, suffixing a single non-alpha character, etc. I know a rather paranoid sa who used to think he had secure passwords because he'd look around for some "word" of some random object nearby, then transmogrify some letter (typically substituting 'y' for 'i'). Crack found him out in very short order. The reason I post this is that these word lists are invaluable to the Crack operator. *ANY* knowledge that reduces the search space can render the security useless. For example, if a Crack operator learns that you once had a password of "any0ne", he or she will make sure to include a rule substituting zero for 'o' in both dictionaries, they will probably make an effort to emphasize letter-to-number substitutions of the words in their dictionary, and maybe even focus less (or at least test last) on other attacks, such as case-changing or number-suffixing. Those "easily-remembered personal rules" to which you refer can catch you pretty quickly. >"Da5id" in "Snow Crash" by Neal Stephenson is an obvious example, since the >"v" is a roman numeral 5. Another is the "Compuserve method" of inserting >punctuation characters between words making up a password or key. Since the >length of the words used is unknown to the cracker, this makes his job >harder. Harder is not NP-hard. It's a very very long way away from NP-hard. >That is--a dictionary which accomodates such things as the above will be >pretty large. With the number rule, there would have to be 10 additional >versions of the one-letter word, 10 versions of each leading character >making up a two letter word, and then it starts increasing combinatorially. >Might as well use brute force. A "pretty large" dictionary is still much! smaller than brute force. And even if it is the precursor to brute-force, it's still a better starting point than 0x00000000000000, if you have reason to believe that it's based on an ASCII password. Just remember the old joke: entropy ain't what it used to be. And every generation of faster processor that arrives makes this statement more relevant to cryptanalysis. John -- J. Deters "Captain's log, stardate 25970-point-5. I am nailed to the hull." +-------------------------------------------------------+ | NET: jad(a)dsddhc.com (work) jad(a)pclink.com (home) | | PSTN: 1 612 375 3116 (work) 1 612 894 8507 (home) | | ICBM: 44^58'33"N by 93^16'42"W Elev. ~=290m (work) | | PGP Key ID: 768 / 15FFA875 | +-------------------------------------------------------+

1 0

blowfish bug
by oolid＠acqic.org 17 Dec '03

17 Dec '03

Could someone recap the reference to the Blowfish bug fix and where it is and is not correct? I have lost the emails that referenced this. Best Regards, --- Joseph L. (Joe) Moll, Greenville, SC USA mailto:oolid@acqic.org

1 0

It's no "WON_der"
by Deranged Mutant 17 Dec '03

17 Dec '03

On 16 Jul 96 at 1:08, John Young wrote: > 6-15-96. NYP, Book review: > > AFTER THOUGHT > The Computer Challenge to Human Intelligence > By James Bailey > Illustrated. 277 pages Basic Books/HarperCollins. $25. > ISBN 0-465-00781-3 > Mr. Bailey, a former senior manager at the Thinking > Machines Corporation, foresees an "electronic computing > revolution" whose "intellectual impact will be greater than > anything since the Renaissance, possibly greater than > anything since the invention of language." In his view, the > greatest challenge posed by the computer revolution will be > for humans to trust processes of thinking they won't > necessarily understand, such as neural networks spotting > patterns without supplying proof "in any human-absorbable > form." Of course it's important to note that all models of computing (serial, neural, etc.) are based somewhat on conceptions of how humans think, compute, etc. Rob --- No-frills sig. Befriend my mail filter by sending a message with the subject "send help" Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0

Re: Netscape download requirements
by Alex de Joode 17 Dec '03

17 Dec '03

In article <199607161346.JAA07227(a)jekyll.piermont.com> you wrote: : Jeff Weinstein writes: : > If you are not comfortable providing this information, then you : > may either run the export version, or purchase the retail navigator : > package, which also includes the US only version when sold in the US. : But you can't buy the Linux or other similar versions, so this is not : an option for many of us. Well one 'ITAR gangsta' can alwas upload the linux version to a 'liberated ftp site'. It seems that the program checks something in the supplied phone, area code and zip code, so why not do a 'whois netscape.com' and enter the Netscape Communications Corps. data ? Afterall whois to know .... (for the humorly impaired: *g*) bEST Regards, -- -AJ-

1 0

Re: Put Uncle Sam in your Calling Circle
by Alex F 17 Dec '03

17 Dec '03

> Hey guys, > > I just got a really cool poster from RSA. It's a big circle split off > into several sections showing people talking to each other, the upper > right hand corner shows two NSA dweebs looking like Bevis & Butthead in > suits, one smoking, the other seated infront of an old 60's reel to reel > audio tape recorder, a sign on the wall behind them says "Key Escrow" You can get images of these at the RSA homepage (www.rsa.com) Click on "Art Gallery." The Key Escrow sign is impossible to read though. Alex F =-=-=-=-=-=-=-=-=-=-=-=-=- Alex F alexf(a)iss.net Marketing Specialist Internet Security Systems =-=-=-=-=-=-=-=-=-=-=-=-=-

1 0

Econo Ads 7/16
by Econo Ads 17 Dec '03

17 Dec '03

ECONO ADS & MORE! July 16th, 1996 ____________________ We stand for Freedom of the Press, Freedom of Speech, and the Free Enterprise System that made America Great !! ___________________ REMOVAL: If you wish to receive no further mail from us, we understand. Just press "reply" and type the word remove in the subject or message area. No other words are necessary. This is an automated system and any other words or messages will only delay your being removed. ___________________ PRESIDENTIAL ELECTION POLL: In our next issue, you will be able to participate in the Internets Largest Election Poll. Be a part of Internet History! ___________________ To respond to any of these messages, DO NOT HIT REPLY! Rather, create a New E-Mail for each response and address it to the E-Mail address provided in the message you are responding to. _________________ -- Americans for Constitutional Action -- Invite you to join the drive to repeal the Federal Income Tax (&.the IRS), and replace it with a National Retail Sales Tax. Imagine -TAKE HOME YOUR ENTIRE PAY CHECK -- and spend it on whatever you want! Like to help with the petition drive? You can! Two Bills have already been introduced in the U.S House of Representatives to eliminate the federal income tax! Learn how to help in this historic effort. This is not some crackpot "tax rebellion" scheme, but rather a serious effort to restore sanity to our Federal Government. Respond now to learn all the facts, free! See our Home Page at http://www.webbuild.com/~acanc/index.htm . Or, E-Mail: acanc(a)nando.net for complete details. _______________________ If you sell advertising for a living, LOVE GOLF, and want to own your own business, we have a unique opportunity. Call 1-203-521-9466 and we'll send you the most amazing Yardage Book you've ever seen - and information. ____________________ GOLFERS - ENTREPRENEURS - Great opportunity to be part of the fast growing golf industry world. Manufacturing facility opening off shore plant for golf bags, etc. Looking for investors. Profit. Sponsors and involvement. Interested parties - contact W.L. Rose. E-Mail kenford(a)aol.com or fax 1-714-476-0190 _____________________ "FREE HOME BASE BUSINESS" For FREE information send #10 SASE to : HOME BASE, 2042 Craft Ln. , Sarasota Fl. 34239 _____________________ NEW TRAVEL WEB SITE The Traveler Savings SiteO helps you stretch your travel budget. Continually updated travel savings tips, articles and resources complement a guide to businesses offering discounts to travelers. http://home.sprynet.com/sprynet/inetmktg/ ____________________ ARCHERY SUPPLIES via the Internet. Bows, arrows, and accessories shipped directly to you. Free Bow tuning info. For complete information, PRESS REPLY and type the word ARCHERY ____________________ PLEASE PARDON MY INTRUSION ... ... but did you know, that within 30-60 days, you could be making $300 - $600 per day with your fax?? It's Simple! Let me show you how ... For FREE details, send E-Mail to: teammark(a)pin-point.com ____________________ IT'S PARTY TIME!!! Voice Personals Dateline. Single Guys and Ladies are waiting to meet you! Respond to create your own personal message. Local Areas - 1-900-835-5182 ext. 9200. 18+ $2.95 / min. Profit Systems, 612-776-8557 _______________________ ATTENTION CRUISE LOVERS! If you love Cruise Vacations, you need to subscribe to Cruise News. It's FREE. This E-Mail newsletter will come to you mailbox twice monthly. You will read the latest news from the Cruise Industry, special insider deals, reader contests (win a prize!), funny stories, and more. To subscribe, send an E-Mail to: CruiseNews(a)American-Dream.com ______________ ATTENTION GOLF LOVERS: Subscribe to Golfers E-Mail Express! It will come to your mailbox twice a month, with exciting new products and services & unusual offers for Golfers Only! It's FREE! To subscribe, send an E-Mail to: Golf(a)American-Dream.com ______________ STAY HOME AND MAKE $100 A DAY! Great new source-book of 100's of Work at Home ideas. For complete details, send an E-Mail to: Homework(a)American-Dream.com _______________________ ATTENTION ADVERTISERS: To receive information about advertising in a future issue of ECONO ADS, press REPLY and type the word: adinfo in the subject or message area. That's all you need to say. We will E-Mail complete details to you. ______________________ ECONO ADS This was mailed to List C on July 15th, 1996 ______________________ "We mutually pledge to each other our lives, our fortunes, and our sacred honor." -- Thomas Jefferson, The Delclaration of Independence July 4th, 1776 "It is impossible to travel faster than the speed of light, and certainly not desireable, as ones hat keeps blowing off!" --Woody Allen

1 0

New Infowarfare Panel
by Dave Banisar 17 Dec '03

17 Dec '03

If y'all have heard, Clinton signed an executive order 2 days ago creating a new panel to examine how to "protect" "critical" computer systems. The panel will be made of of the usual suspects with a non-govt person ($5.00 says it will be someone from one of those wonderfully independant companies like SAIC, MITRETEC, EDS, E-Systems). Needless to say, it looks an awful lot like NSDD-145 all over again with the panel recommending changes to the law to allo for greater coordination of LE, intell for govt computers and god knows what for non-govt computers. Anyway, the directive is now up on our site at http://www.epic.org/security/infowar/eo_cip.html -dave _________________________________________________________________________ Subject: New Infowarfare Panel _________________________________________________________________________ David Banisar (Banisar(a)epic.org) * 202-544-9240 (tel) Electronic Privacy Information Center * 202-547-5482 (fax) 666 Pennsylvania Ave, SE, Suite 301 * HTTP://www.epic.org Washington, DC 20003 * ftp/gopher/wais cpsr.org

1 0

TLA abuse (?) [non-crypto, mostly]
by David K. Merriman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hmmmm. Got a call this morning from a Mike Hughes of the Amarillo PD (APD). Seems they've received "several" complaints about the anti-CDA image on my home page (http://www.shellback.com/p/merriman) Supposedly, it's not the nudity they complainer(s) is(are) all riled up about: it's the age of the models that's being questioned. Hardcopy of said image has been forwarded to the FBI for 'review'. Officer (sorry, don't recall his rank) Hughes says *he* thinks the models could conceivably be 18; a judge they showed it to said _she_ thought (personal opinion) younger. Hence, the forwarding to FBI for quasi-official determination. Officer Hughes going to stop by so I can show him: A - that the page is PICS rated B - the original of the image :-) C - the precautions that PWS takes to warn folks about possibly offensive content. I don't plan to change the image, so if anyone can point me in the general direction of some Legal Assistance (tm), I'd appreciate it. Dave Merriman -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMexn/cVrTvyYOzAZAQHlRgP/dKIbtldSNhFe7pe3PVIHfTtDsSFH82OG i4/yBxD2dcFi+Ou+2nbol2MKOew7qKeV7Lq3raU/rcjIVutFDUGIxa+SAJTzuc5F t6Wb8lD3M4rvH/7kklhW0yf1iQaauT+bQt+ZHaUDNGLBCpiy0RPPMnluydcGZeRV Xq6IEnkH9a4= =yg4d -----END PGP SIGNATURE-----

1 0

Fw: Re: US versions of Netscape now available
by Lou Zirko 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: cypherpunks(a)toad.com Date: Wed Jul 17 17:36:57 1996 - -----Begin Included Message ----- Date: From: To: remailer(a)yap.pactitle.com Cc: cypherpunks(a)toal.com To: remailer(a)yap.pactitle.com, cypherpunks(a)toal.com Date: Wed Jul 17 17:30:28 1996 Successfully downloaded and installed last night. It tool a while for the transfer to commence though. Lou Zirko > > From: Tom Weinstein <tomw(a)netscape.com> > > Date: Tue, 16 Jul 1996 11:56:51 -0700 > > > > Duncan Frissell wrote: > > > > > > I'm glad too. So how many minutes did it take to leak overseas? > > > > I have heard no reports of it leaking overseas. > > Have you heard any reports of anyone successfully downloading it > period? Netscape always times out in the middle of a download. I > think the server is so overloaded that it's actually impossible to > download the software. > > I sure wish there were an ftp site overseas somewhere, then I could > actually get the damned thing. > > Lou Zirko (502)383-2175 Zystems lzirko(a)c2.org "We're all bozos on this bus" - Nick Danger, Third Eye - ---- End of forwarded message ---- Lou Zirko (502)383-2175 Zystems lzirko(a)c2.org "We're all bozos on this bus" - Nick Danger, Third Eye -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 iQEVAwUBMe1rFMtPRTNbb5z9AQHjtwf+Mhz46IY3fImoeymgi5pINyxQ1ifhElJ0 xMlyAVQlaYQYYGTND/xue8Ig3C66eI2WhG4P6L3A1aEcwZNstqFoH90OPmBornPU L8N/7wpVR0EK74Ptlt2cyDsCUYw6UTKjBz9Zue4jR1Y7nW/V8SLhGEPx5PAz/h+r m3yNqgSi4YmKdy4gg35BbuSuSFKQG81iIjcipKYB1s67RORytzXG4kOsrptUHZNm gzLFcR4ldlPw0O1vU3yY38lXi2DygllLZGCl4+HFSW5rnBvEEXeVo4yINqYepVkx vsfoqKGrn2dQ6fWY0yQnPGi0O1mWGeDdTWzabJIvMG2AlM8AfP4hIA== =cXnP -----END PGP SIGNATURE-----

1 0

Gorelick testifies before Senate, unveils new executive order
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Wed, 17 Jul 1996 15:54:24 -0500 From: Declan McCullagh <declan(a)well.com> To: fight-censorship+(a)andrew.cmu.edu Subject: Gorelick testifies before Senate, unveils new executive order Deputy Attorney General Jamie Gorelick testified yesterday before Sen. Sam Nunn's cyberscare hearing (take #3), where she ranted about the evils of the Net and unveiled an executive order signed by the president on Monday. Gorelick, the administration's newly-annointed chief Net fearmonger, said: "The executive order is on Federal Information Infrastructure protection... It creates a committee to draft policy and recommend legislation. The order cites two types of threats: physical and cyber." The infrastructure she's talking about isn't government computers; she means the private sector. "Because this infrastructure is privately owned, this [executive order] emphasizes and recognizes the importance of cooperation." That is, cooperation with the fear of government regulation hanging over your head. The President's Commission on Critical Infrastructure Protection, which will have an industry advisory panel, has one year to report back with recommendations. Sen. Patrick Leahy testified: "Armed with a modem and a computer, a criminal can wreak havoc on our computers from anywhere in the world. There are no borders in cyberspace... Existing criminal statutes provide a good framework for prosecuting [some] computer offenses... We have to assume we have to update our criminal code." Clinton's executive order also creates a "Infrastructure Protection Task Force," effective immediately, with reps from the FBI, DOD, and NSA. At yesterday's Senate permanent subcommittee on investigations hearing, Gorelick ducked Sen. Nunn's questions about the limits of the task force's authority. But the executive order says the group must: (i) provide, or facilitate and coordinate the provision of, expert guidance to critical infrastructures to detect, revent, halt, or confine an attack and to recover and restore service... (v) coordinate with the pertinent law enforcement authorities during or after an attack to facilitate any resulting criminal investigation. "Critical infrastructures" include telecommunications facilities and the Net. -Declan PS: For background, check out: http://www.netizen.com/netizen/96/29/campaign_dispatch0a.html Critical infrastructures: 1. telecommunications; 2. electrical power systems; 3. gas and oil storage and transportation; 4. banking and finance; 5. transportation; 6. water supply systems; 7. emergency services (including medical, police, fire and rescue); and 8. continuity of government. EXECUTIVE ORDER - - - - - - - CRITICAL INFRASTRUCTURE PROTECTION Certain national infrastructures are so vital that their incapacity or destruction would have a debilitating impact on the defense or economic security of the United States. These critical infrastructures include telecommunications, electrical power systems, gas and oil storage and transportation, banking and finance, transportation, water supply systems, emergency services (including medical, police, fire and rescue), and continuity of government. Threats to these critical infrastructures fall into two categories: physical threats to tangible property ("physical threats"), and threats of electronic, radio-frequency, or computer-based attacks on the information or communications components that control critical infrastructures ("cyber threats"). Because many of these critical infrastructures are owned and operated by the private sector, it is essential that the government and private sector work together to develop a strategy for protecting them and assuring their continued operation. NOW, THEREFORE, by the authority vested in me as President by the Constitution and the laws of the United States of America, it is hereby ordered as follows: Section 1. Establishment. There is hereby established the President's Commission on Critical Infrastructure Protection ("Commission"). (a) Chair. A qualified individual from outside the Federal Government shall be appointed by the President to serve as Chair of the Commission. The Commission Chair shall be employed on a full-time basis. (b) Members. The head of each of the following executive branch departments and agencies shall nominate not more than two full-time members of the Commission: (i) Department of the Treasury; (ii) Department of Justice; (iii) Department of Defense; (iv) Department of Commerce; (v) Department of Transportation; (vi) Department of Energy; (vii) Central Intelligence Agency; (viii) Federal Emergency Management Agency; (ix) Federal Bureau of Investigation; (x) National Security Agency. One of the nominees of each agency may be an individual from outside the Federal Government who shall be employed by the agency on a full-time basis. Each nominee must be approved by the Steering Committee. Sec. 2. The Principals Committee. The Commission shall report to the President through a Principals Committee ("Principals Committee"), which shall review any reports or recommendations before submission tot he President. The Principals Committee shall comprise the: (i) Secretary of the Treasury; (ii) Secretary of Defense; (iii) Attorney General; (iv) Secretary of Commerce; (v) Secretary of Transportation; (vi) Secretary of Energy; (vii) Director of Central Intelligence; (viii) Director of the Office of Management and Budget; (ix) Director of the Federal Emergency Management Agency; (x) Assistant to the President for National Security Affairs; (xi) Assistant to the Vice President for National Security Affairs. Sec. 3. The Steering Committee of the President's Commission on Critical Infrastructure Protection. A Steering Committee ("Steering Committee") shall oversee the work of the Commission on behalf of the Principals Committee. The Steering Committee shall comprise four members appointed by the President. One of the members shall be the Chair of the Commission and one shall be an employee of the Executive Office of the President. The Steering Committee will receive regular reports on the progress of the Commission's work and approve the submission of reports to the Principals Committee. Sec. 4. Mission. The Commission shall: (a) within 30 days of this order, produce a statement of its mission objectives, which will elaborate the general objectives set forth in this order, and a detailed schedule for addressing each mission objective, for approval by the Steering Committee; (b) identify and consult with: (i) elements of the public and private sectors that conduct, support or contribute to infrastructure assurance; (ii) owners and operators of the critical infrastructures; and (iii) other elements of the public and private sectors, including the Congress, that have an interest in critical infrastructure assurance issues and that may have differing perspectives on these issues; (c) assess the scope and nature of the vulnerabilities of, and threats to, critical infrastructures; (d) determine what legal and policy issues are raised by efforts to protect critical infrastrucutres and assess how these issues should be addressed; (e) recommend a comprehensive national policy and implementation strategy for protecting critical infrastructures from physical and cyber threats and assuring their continued operation; (f) propose any statutory or regulatory changes necessary to effect its recommendations; and (g) produce reports and recommendations to the Steering Committee as they become available; it shall not limit itself to producing one final report. Sec. 5. Advisory Committee to the President's Commission on Critical Infrastructure Protection. (a) The Commission shall receive advice from an advisory committee ("Advisory Committee") composed of no more than ten individuals appointed by the President from the private sector who are knowledgeable about critical infrastructures. The Advisory Committee shall advise the Commission on the subjects of the Commission's mission in whatever manner the Advisory Committee, the Commission Chair, and the Steering Committee deem appropriate. (b) A Chair shall be designated by the President from among the members of the Advisory Committee. (c) The Advisory Committee shall be established in compliance with the Federal Advisory Committee Act, as amended (5 U.S.C. App.). The Department of Defense shall perform the functions of the President under the Federal Advisory Committee Act for the Advisory Committee, except that of reporting to the Congress, in accordance with the guidelines and procedures established by the Administrator of General Services. Sec. 6. Administration. (a) All executive departments and agencies shall cooperate with the Commission and provide such assistance, information, and advice to the Commission as it may request, to the extent permitted by law. (b) The Commission and the Advisory Committee may hold open and closed hearings, conduct inquiries, and establish subcommittees, as necessary. (c) Members of the Advisory Committee shall serve without compensation for their work on the Advisory Committee. While engaged in the work of the Advisory Committee, members may be allowed travel expenses, including per diem in lieu of subsistence, as authorized by law for persons serving intermittently in the government service. (d) To the extent permitted by law, and subject to the availability of appropriations, the Department of Defense shall provide the Commission and the Advisory Committee with administrative services, staff, other support services, and such funds as may be necessary for the performance of its functions and shall reimburse the executive branch components that provide representatives to the Commission for the compensation of those representatives. (e) In order to augment the expertise of the Commission, the Department of Defense may, at the Commission's request, contract for the services of nongovernmental consultants who may prepare analyses, reports, background papers, and other materials for consideration by the Commission. In addition, at the Commission's request, executive departments and agencies shall request that existing Federal advisory committees consider and provide advice on issue sof critical infrastructure protection, to the extent permitted by law. (f) The Commission, the Principals Committee, the Steering Committee, and the Advisory Committee shall terminate 1 year from the date of this order, unless extended by the President prior to this date. Sec. 7. Interim Coordinating Mission. (a) While the Commission is conducting its analysis and until the President has an opportunity to consider and act on its recommendations, there is a need to increase coordination of existing infrastructure protection efforts in order to better address, and prevent, crises that would have a debilitating regional or national impact. There is hereby established an Infrastructure Protection Task Force ("IPTF") within the Department of Justice, chaired by the Federal Bureau of Investigation, to undertake this interim coordinating mission. (b) The IPTF will not supplant any existing programs or organizations. (c) The Steering Committee shall oversee the work of the IPTF. (d) The IPTF shall include at least one full-time member each from the Federal Bureau of Investigation, the Department of Defense, and the National Security Agency. It shall also receive part-time assistance from other executive branch departments and agencies. Members shall be designated by their departments or agencies on the basis of their expertise in the protection of critical infrastructures. IPTF members' compensation shall be paid by their parent agency or department. (e) The IPTF's function is to identify and coordinate existing expertise, inside and outside of the Federal Government, to: (i) provide, or facilitate and coordinate the provision of, expert guidance to critical infrastructures to detect, revent, halt, or confine an attack and to recover and restore service; (ii) issue threat and warning notices in the event advance information is obtained about a threat; (iii) provide training and education on methods of reducing vulnerabilities and responding to attacks on critical infrastructures; (iv) conduct after-action analysis to determine possible future threats, targets, or methods of attack; and (v) coordinate with the pertinent law enforcement authorities during or after an attack to facilitate any resulting criminal investigation. (f) All executive departments and agencies shall cooperate with the IPTF and provide such assistance, information, and advice as the IPTF may request, to the extent permitted by law. (g) All executive departments and agencies shall share with the IPTF information about threats and warning of attacks, and about actual attacks on critical infrastructures, to the extent permitted by law. (h) The IPTF shall terminate no later than 180 days after the termination of the Commission, unless extended by the President prior to that date. Sec. 8. General. (a) This order is not intended to change any existing statutes or Executive orders. (b) This order is not intended to create any right, benefit, trust, or responsibility, substantive or procedural, enforceable at law or equity by a party against the United States, its agencies, its officers, or any person. (signed) William J. Clinton THE WHITE HOUSE July 15, 1996

6 13