December 2003 - cypherpunks-legacy

Gorelick testifies before Senate, unveils new executive order
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Wed, 17 Jul 1996 15:54:24 -0500 From: Declan McCullagh <declan(a)well.com> To: fight-censorship+(a)andrew.cmu.edu Subject: Gorelick testifies before Senate, unveils new executive order Deputy Attorney General Jamie Gorelick testified yesterday before Sen. Sam Nunn's cyberscare hearing (take #3), where she ranted about the evils of the Net and unveiled an executive order signed by the president on Monday. Gorelick, the administration's newly-annointed chief Net fearmonger, said: "The executive order is on Federal Information Infrastructure protection... It creates a committee to draft policy and recommend legislation. The order cites two types of threats: physical and cyber." The infrastructure she's talking about isn't government computers; she means the private sector. "Because this infrastructure is privately owned, this [executive order] emphasizes and recognizes the importance of cooperation." That is, cooperation with the fear of government regulation hanging over your head. The President's Commission on Critical Infrastructure Protection, which will have an industry advisory panel, has one year to report back with recommendations. Sen. Patrick Leahy testified: "Armed with a modem and a computer, a criminal can wreak havoc on our computers from anywhere in the world. There are no borders in cyberspace... Existing criminal statutes provide a good framework for prosecuting [some] computer offenses... We have to assume we have to update our criminal code." Clinton's executive order also creates a "Infrastructure Protection Task Force," effective immediately, with reps from the FBI, DOD, and NSA. At yesterday's Senate permanent subcommittee on investigations hearing, Gorelick ducked Sen. Nunn's questions about the limits of the task force's authority. But the executive order says the group must: (i) provide, or facilitate and coordinate the provision of, expert guidance to critical infrastructures to detect, revent, halt, or confine an attack and to recover and restore service... (v) coordinate with the pertinent law enforcement authorities during or after an attack to facilitate any resulting criminal investigation. "Critical infrastructures" include telecommunications facilities and the Net. -Declan PS: For background, check out: http://www.netizen.com/netizen/96/29/campaign_dispatch0a.html Critical infrastructures: 1. telecommunications; 2. electrical power systems; 3. gas and oil storage and transportation; 4. banking and finance; 5. transportation; 6. water supply systems; 7. emergency services (including medical, police, fire and rescue); and 8. continuity of government. EXECUTIVE ORDER - - - - - - - CRITICAL INFRASTRUCTURE PROTECTION Certain national infrastructures are so vital that their incapacity or destruction would have a debilitating impact on the defense or economic security of the United States. These critical infrastructures include telecommunications, electrical power systems, gas and oil storage and transportation, banking and finance, transportation, water supply systems, emergency services (including medical, police, fire and rescue), and continuity of government. Threats to these critical infrastructures fall into two categories: physical threats to tangible property ("physical threats"), and threats of electronic, radio-frequency, or computer-based attacks on the information or communications components that control critical infrastructures ("cyber threats"). Because many of these critical infrastructures are owned and operated by the private sector, it is essential that the government and private sector work together to develop a strategy for protecting them and assuring their continued operation. NOW, THEREFORE, by the authority vested in me as President by the Constitution and the laws of the United States of America, it is hereby ordered as follows: Section 1. Establishment. There is hereby established the President's Commission on Critical Infrastructure Protection ("Commission"). (a) Chair. A qualified individual from outside the Federal Government shall be appointed by the President to serve as Chair of the Commission. The Commission Chair shall be employed on a full-time basis. (b) Members. The head of each of the following executive branch departments and agencies shall nominate not more than two full-time members of the Commission: (i) Department of the Treasury; (ii) Department of Justice; (iii) Department of Defense; (iv) Department of Commerce; (v) Department of Transportation; (vi) Department of Energy; (vii) Central Intelligence Agency; (viii) Federal Emergency Management Agency; (ix) Federal Bureau of Investigation; (x) National Security Agency. One of the nominees of each agency may be an individual from outside the Federal Government who shall be employed by the agency on a full-time basis. Each nominee must be approved by the Steering Committee. Sec. 2. The Principals Committee. The Commission shall report to the President through a Principals Committee ("Principals Committee"), which shall review any reports or recommendations before submission tot he President. The Principals Committee shall comprise the: (i) Secretary of the Treasury; (ii) Secretary of Defense; (iii) Attorney General; (iv) Secretary of Commerce; (v) Secretary of Transportation; (vi) Secretary of Energy; (vii) Director of Central Intelligence; (viii) Director of the Office of Management and Budget; (ix) Director of the Federal Emergency Management Agency; (x) Assistant to the President for National Security Affairs; (xi) Assistant to the Vice President for National Security Affairs. Sec. 3. The Steering Committee of the President's Commission on Critical Infrastructure Protection. A Steering Committee ("Steering Committee") shall oversee the work of the Commission on behalf of the Principals Committee. The Steering Committee shall comprise four members appointed by the President. One of the members shall be the Chair of the Commission and one shall be an employee of the Executive Office of the President. The Steering Committee will receive regular reports on the progress of the Commission's work and approve the submission of reports to the Principals Committee. Sec. 4. Mission. The Commission shall: (a) within 30 days of this order, produce a statement of its mission objectives, which will elaborate the general objectives set forth in this order, and a detailed schedule for addressing each mission objective, for approval by the Steering Committee; (b) identify and consult with: (i) elements of the public and private sectors that conduct, support or contribute to infrastructure assurance; (ii) owners and operators of the critical infrastructures; and (iii) other elements of the public and private sectors, including the Congress, that have an interest in critical infrastructure assurance issues and that may have differing perspectives on these issues; (c) assess the scope and nature of the vulnerabilities of, and threats to, critical infrastructures; (d) determine what legal and policy issues are raised by efforts to protect critical infrastrucutres and assess how these issues should be addressed; (e) recommend a comprehensive national policy and implementation strategy for protecting critical infrastructures from physical and cyber threats and assuring their continued operation; (f) propose any statutory or regulatory changes necessary to effect its recommendations; and (g) produce reports and recommendations to the Steering Committee as they become available; it shall not limit itself to producing one final report. Sec. 5. Advisory Committee to the President's Commission on Critical Infrastructure Protection. (a) The Commission shall receive advice from an advisory committee ("Advisory Committee") composed of no more than ten individuals appointed by the President from the private sector who are knowledgeable about critical infrastructures. The Advisory Committee shall advise the Commission on the subjects of the Commission's mission in whatever manner the Advisory Committee, the Commission Chair, and the Steering Committee deem appropriate. (b) A Chair shall be designated by the President from among the members of the Advisory Committee. (c) The Advisory Committee shall be established in compliance with the Federal Advisory Committee Act, as amended (5 U.S.C. App.). The Department of Defense shall perform the functions of the President under the Federal Advisory Committee Act for the Advisory Committee, except that of reporting to the Congress, in accordance with the guidelines and procedures established by the Administrator of General Services. Sec. 6. Administration. (a) All executive departments and agencies shall cooperate with the Commission and provide such assistance, information, and advice to the Commission as it may request, to the extent permitted by law. (b) The Commission and the Advisory Committee may hold open and closed hearings, conduct inquiries, and establish subcommittees, as necessary. (c) Members of the Advisory Committee shall serve without compensation for their work on the Advisory Committee. While engaged in the work of the Advisory Committee, members may be allowed travel expenses, including per diem in lieu of subsistence, as authorized by law for persons serving intermittently in the government service. (d) To the extent permitted by law, and subject to the availability of appropriations, the Department of Defense shall provide the Commission and the Advisory Committee with administrative services, staff, other support services, and such funds as may be necessary for the performance of its functions and shall reimburse the executive branch components that provide representatives to the Commission for the compensation of those representatives. (e) In order to augment the expertise of the Commission, the Department of Defense may, at the Commission's request, contract for the services of nongovernmental consultants who may prepare analyses, reports, background papers, and other materials for consideration by the Commission. In addition, at the Commission's request, executive departments and agencies shall request that existing Federal advisory committees consider and provide advice on issue sof critical infrastructure protection, to the extent permitted by law. (f) The Commission, the Principals Committee, the Steering Committee, and the Advisory Committee shall terminate 1 year from the date of this order, unless extended by the President prior to this date. Sec. 7. Interim Coordinating Mission. (a) While the Commission is conducting its analysis and until the President has an opportunity to consider and act on its recommendations, there is a need to increase coordination of existing infrastructure protection efforts in order to better address, and prevent, crises that would have a debilitating regional or national impact. There is hereby established an Infrastructure Protection Task Force ("IPTF") within the Department of Justice, chaired by the Federal Bureau of Investigation, to undertake this interim coordinating mission. (b) The IPTF will not supplant any existing programs or organizations. (c) The Steering Committee shall oversee the work of the IPTF. (d) The IPTF shall include at least one full-time member each from the Federal Bureau of Investigation, the Department of Defense, and the National Security Agency. It shall also receive part-time assistance from other executive branch departments and agencies. Members shall be designated by their departments or agencies on the basis of their expertise in the protection of critical infrastructures. IPTF members' compensation shall be paid by their parent agency or department. (e) The IPTF's function is to identify and coordinate existing expertise, inside and outside of the Federal Government, to: (i) provide, or facilitate and coordinate the provision of, expert guidance to critical infrastructures to detect, revent, halt, or confine an attack and to recover and restore service; (ii) issue threat and warning notices in the event advance information is obtained about a threat; (iii) provide training and education on methods of reducing vulnerabilities and responding to attacks on critical infrastructures; (iv) conduct after-action analysis to determine possible future threats, targets, or methods of attack; and (v) coordinate with the pertinent law enforcement authorities during or after an attack to facilitate any resulting criminal investigation. (f) All executive departments and agencies shall cooperate with the IPTF and provide such assistance, information, and advice as the IPTF may request, to the extent permitted by law. (g) All executive departments and agencies shall share with the IPTF information about threats and warning of attacks, and about actual attacks on critical infrastructures, to the extent permitted by law. (h) The IPTF shall terminate no later than 180 days after the termination of the Commission, unless extended by the President prior to that date. Sec. 8. General. (a) This order is not intended to change any existing statutes or Executive orders. (b) This order is not intended to create any right, benefit, trust, or responsibility, substantive or procedural, enforceable at law or equity by a party against the United States, its agencies, its officers, or any person. (signed) William J. Clinton THE WHITE HOUSE July 15, 1996

6 13

Re: US versions of Netscape now available---NOT
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 2:03 AM 7/18/96, Tom Weinstein wrote: >Yes. We've had a few thousand people download it. Unfortunately, we >only have one machine serving downloads right now, and it tends to melt >down a couple times a day. I've tried four times, and each time has timed out. (That is, I've filled out the Web form four times and tried n times each iteration...at least I get to experiment with variations on my name and address each time :-}) I guess I'll have to connect to the Italian and/or Swedish sites again. Has the software arrived there yet? --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

recent spam: government home-business
by sameer 17 Dec '03

17 Dec '03

Please don't mail mwci.net about the recent spam to cypherpunks. The spam came from interramp: > > >From cypherpunks-errors(a)toad.com Tue Jul 16 12:32:32 1996 > > Message-Id: <199607160811.EAA00698(a)smtp1.interramp.com> > > Comments: Authenticated sender is <cd004561(a)pop3.interramp.com> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > From: "Creative Financial Alternatives" <homebiz(a)flock.mwci.net> > > To: homebiz(a)flock.mwci.net > > Date: Tue, 16 Jul 1996 04:11:56 +0000 {0} infinity:mail/lists 10:05am [10] > whois interramp-dom PSINet, Inc (INTERRAMP-DOM) 510 Huntmar Park Drive Herndon, VA 22070 USA Domain Name: INTERRAMP.COM Administrative Contact: Administration, PSINet Domain (PDA4) psinet-domain-admin(a)PSI.COM (703) 904-4100 Technical Contact, Zone Contact: Network Information and Support Center (PSI-NISC) hostinfo(a)psi.com (518) 283-8860 Billing Contact: Andrews, Ken (KA16) domain-fee-contact(a)PSI.COM 703-904-4100 Record last updated on 22-Feb-96. Record created on 14-Apr-94. Domain servers in listed order: NS.PSI.NET 192.33.4.10 NS2.PSI.NET 38.8.50.2 INTERRAMP.COM 38.8.17.2 The InterNIC Registration Services Host contains ONLY Inte -- Sameer Parekh Voice: 510-986-8770 Community ConneXion, Inc. FAX: 510-986-8777 The Internet Privacy Provider http://www.c2.net/ sameer(a)c2.net

1 0

An interesting instance of poltical anonymnity, now revealed
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

I find the CBS News response unfortunate. There's also the simple question on lying to maintain the identity: what's so bad about lying? Why he revealed himself is somewhat of lesson also. -Allen _ Wednesday July 17 9:12 PM EDT _ 'Primary Colors' Author Steps Forward NEW YORK (Reuter) - One of the best kept secrets in political, journalistic and publishing circles was revealed Wednesday when Newsweek journalist Joe Klein admitted he was ''Anonymous'', the mysterious author of a novel based on President Clinton's 1992 presidential campaign. [...] Klein, facing fellow journalists who had been speculating along with many politicians and readers about the identity of ''Anonymous'' since the book's publication in January, fended off questions about his credibility and about how he had lied when asked whether he wrote the book. ``It wasn't easy, but I felt that there are times when I too can lie to protect a source and I put this in that category. Other people may see this differently,'' said Klein. [...] CBS News later said it was unhappy with Klein, who works for the network as a political consultant. ``We are obviously disturbed by the fact that Joe Klein was not forthcoming with us nor with nearly anyone else of his authorship of the novel 'Primary Colors,''' CBS News executive Vice President Jonathan Klein (no relation) said in a statement. He said network president Andrew Hayward would meet the author next week to discuss the matter. [...] His announcement followed a report in Wednesday's Washington Post that handwritten changes to the manuscript appeared to match Klein's handwriting. [...] _Reuters Limited_

1 0

Zimmermann's open letter and Congressional crypto-musing
by declan＠well.com 17 Dec '03

17 Dec '03

Date: Wed, 17 Jul 1996 14:02:05 -0500 To: fight-censorship+(a)andrew.cmu.edu From: declan(a)well.com (Declan McCullagh) Subject: Zimmermann's open letter and Congressional crypto-musing Sender: owner-fight-censorship(a)vorlon.mit.edu Phil Zimmermann has an open letter to Congress on ProCODE and HR3011 in today's "The Hill" newspaper, on page 17. Excerpts follow. Unfortunately, no matter how wonderful the ProCODE bill may be (and it is), it isn't going anywhere this year. There's no time left. And in the Senate, national security interests have strong allies who would move to block the bill if it suddenly slithered out of committee. But at least netizens have been able to educate Congress, and the debate is shifting in our favor. Take Sen. Nunn's cyberscare hearing yesterday, where Deputy Attorney General Jamie Gorelick cried that "we will have a cyber equivalent of Pearl Harbor in time." During the hearing, Sen. Carl Levin (D-Michigan) mused: "Part of the problem is we have competing goals... Encryption is one way to secure that data. But law enforcement wants access to that data... It's not just a matter of [strong] encryption. We are torn between these conflicting goals." So while the Hill is waking up, American businesses are losing out. By the time Congress moves on this issue in 1997, it may be too late. -Declan --- The Hill, July 17, 1996, page 17 "Democracy in the Information Age" I urge you to support S.1726, the Burns-Leahy ProCODE bill to lift export controls on cryptographic software, or Goodlatt's House version of the bill, H.R. 3011... ...U.S. software makers cannot incorporate good cryptography features into their products if that results in their inability to export such products... It also threatens the competitiveness of the entire U.S. computer industry, as we lose entire systems sales to foreign competitors, because we cnanot supply systems to our foreign customers if those systems contain cryptographic components. Cryptogrpahy has become the most pivotal technology for privacy and civil liberties in the information age. It is for this reason that I wrote Pretty Good Privacy, now called PGPmail, and published it for free on the Internet in 1991... Privacy is a human right that appeals to everyone across the political spectrum. It offers a rare combination of moral high ground and political safety. The onlyway to hold the line on privacy in the information age is strong cryptography, strong enough to keep out major governments. And S.1726 is our best home for giving Americans access to this essential tool of liberty. Let us bequeath to our children a society that lets them whisper in someone ear, even if the ear is a thousand miles away. Sincerely, PHILIP R. ZIMMERMANN Chairman and Chief Technology Officer Pretty Good Privacy, Inc. 555 Twin Dolphin Drive, Suite 570 Redwood City, CA 94065 415-631-1747

1 0

Telecom regulations - Reuters coverage
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

Of course, the Demopublicans want to subsidize access for their voters. Those already on the net have a considerably higher likelihood, so far as I can tell, of being Independents or Libertarians. The bad guys naturally want to bring it in line with their domination. -Allen > _ Tuesday July 16 1:52 PM EDT _ >FCC Chairman Hundt Sees Tax On Telecom Industry > FAJARDO, Puerto Rico - A small tax will probably be imposed on > telecommunications companies' revenues to subsidize telephone access > in rural areas and help wire classrooms for the Internet, Federal > Communications Commission Chairman Reed Hundt told the nation's > governors. [...] > But ensuring that residents in sparsely populated areas have access at > affordable rates and meeting the administration's goal of wiring every > classroom in the nation for Internet access will require annual > subsidies of about $10 billion, Hundt said. > "The current subsidy system won't work and has to be totally > overhauled," he said. > Asked how that money would be raised, Hundt said, "Probably the > right way to go is, based on total revenues, throw a chunk of change > into the pot." > He said the levy would be "competitively neutral" and would > represent a small percentage of revenues for the telecommunications > industry, whose annual gross revenues are about $250 billion. [...] > Copyright, Reuters Ltd. All rights reserved

1 0

Reuters coverage of the Netscape release
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

Most people reading this are likely to wonder "how could overseas Net surfers downloading it hurt anyone?", although some wil have their minds go blank (or blanker than normal) at the mention of "terrorist groups." A mixed set of news coverage, overall. As usual (even if I forget to state it), edited to try to stay within fair use. -Allen > _ Wednesday July 17 6:52 AM EDT _ >Government Approves More Secure Netscape > MOUNTAIN VIEW, Calif. (Reuter) - Netscape Communications Corp. has > received government clearance to distribute a highly secure version of > its popular Navigator Web browser in the United States via the > Internet. [...] > Officials had been concerned that if the more secure version was > available on the Net, overseas Net surfers -- possibly including > terrorist groups -- would download it, she said. > The software contains multiple formulas that make it virtually > impenetrable for computer hackers and others who might attempt to > break into Internet transmissions, steal credit card codes or tamper > with bank accounts. [...] > ``This new ability ... means more people will have access to stronger > and more secure communications than ever before,'' Netscape co-founder > Marc Andreessen said in a statement. > ``This stronger security will help to accelerate the adoption of the > Internet as a medium for online communication and commerce,'' he > added. [...] > _Reuters Limited_

1 0

Re: Opiated file systems
by Deranged Mutant 17 Dec '03

17 Dec '03

On 16 Jul 96 at 13:30, Jim Gillogly wrote: > "Deranged Mutant" <WlkngOwl(a)unix.asb.com> writes: > >A problem with a c'punk-style encrypted fs with source code and wide > >distribution is, of course, that attackers will KNOW that there is a > >duress key. > > Good point. This suggests a design desideratum for any such system should > be that the user may choose not to have a duress key, maintaining > semi-plausible deniability for those who choose to have one. Semi-plausible. (See my other reply to this: an attacker could get ahold of the HD and your system, reverse engineer the driver used, to see what you're doing; backups of the encrypted partition in case of destructive measures are helpful ... they could even return your computer to you and take it apart carefully.) The problem with a duress key is that it relies on "security through obscurity". Rob. --- No-frills sig. Befriend my mail filter by sending a message with the subject "send help" Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0

Anyone knows TCFS ?
by Alex de Joode 17 Dec '03

17 Dec '03

Does anyone use or know off Transparent Cryptografic File System ? More information available on URL http://mikonos.dia.unisa.it/tcfs bEST Regards, -- Alex de Joode | Berserk Consultancy -- Diemen, The Netherlands usura(a)berserk.com | mailto:info@berserk.com http://www.berserk.com/

1 0

119_816
by jya＠pipeline.com 17 Dec '03

17 Dec '03

6-17-96. NYP: "11 Officers Are Accused of Failure to pay Taxes. Claims of Sovereignty and 98 Dependents." At least 11 New York City police officers have been accused of failing to pay any Federal taxes for several years by declaring they each had 98 dependents and by insisting that the Government had no right to tax them. The officers relied on a package of instructions that described how to avoid paying taxes by declaring that they were sovereign citizens who did not have to pay taxes. "16 Indicted On Charges Of Internet Pornography." Exon-Reno-ing into one of the more distant frontiers of sexual crime, a Federal grand jury charged 16 people in the US and abroad with joining in a pornography ring. Its members shared homemade pictures, recounted their sexual experiences with children and even chatted electronically as two of the men molested a 10-year-old girl. The case appeared likely to heighten concerns about the spread of child pornography over the Internet. ----- http://pwp.usa.pipeline.com/~jya/119816.txt (11 kb for 2) 119_816 (For 2)

1 0