December 2003 - cypherpunks-legacy

mailing lists
by patrickbc＠juno.com 17 Dec '03

17 Dec '03

If any body knows any good mailings lists please tell me. -P. Cummings- Patrickbc(a)juno.com

2 1

Bob Dole on Drugs
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

http://allpolitics.com/news/9608/31/radio.addresses/ ... snip ... Dole, who returned to Washington for Labor Day weekend, also pledged to use the White House as a bully pulpit to promote the "moral message" against drugs and to criticize what he called the entertainment industry's glamorization of drug use. On Sunday, he is to address the convention of the National Guard Association of the United States during which he's expected to propose that the military be enlisted to assist in a renewed war on drugs.

4 3

"Security risks" vs. "credit risks"
by tcmay＠got.net 17 Dec '03

17 Dec '03

The news that airports/airlines (more on this difference in a bit) may be establishing a data base of security risks sounds Big Brotherish. But, how is it so much different from credit risks and credit reporting data bases? If, for example, private airlines (and the U.S. has only private airlines, not any "public" or "national" airline) wish to check the data bases on their customers, is this not quite similar to checking credit risks and ratings before lending money? There is great danger, to be sure, especially if one's writings and public utterances become entries into a "threat data base." But I see nothing unsurprising in, say, American Airlines expressing more interest in Jim Bell or Tim May, both of whom have written publically about terrorism and "soft targets," and both of whom have written about how to make pipe bombs, than in Marianne Smith, retired school teacher from Peoria. And there is even more danger--even unconstitutionality--in *government involvement* in such data bases. It's unclear from what I've seen if this data base is to be run like the private credit ratings agencies or if it is to have inputs from the FBI, NSA, Interpol, SDECE, etc. Remember, private airlines are just that: private. Surely we do not support laws which limit a private airline from using data it has acquired to decide whom to pay closer attention to. This is the essence of what knowledge is. (So long as none of this is mandatory. If Tim's Pretty Good Airline wishes to not bother screening customers, this should not be illegal. Nor, to my mind, should TPGA be exposed to negligence lawsuits, so long as his policies are clearly spelled out.) I find the notion that one's speeches and Usenet utterances could "harm one's security rating" a distasteful idea, but so long as such security ratings are handled by private players, and used by private players, I see no illegality. (Of course, the major credit reporting agencies--TRW Credit, Equifax, and TransUnion--already collude with the government. They collude to falsify credit ratings, to create identies and histories that never existed when they say they did, and to provide government with data bases for various purposes. Obviously a "TRW Security" function would be at least as corrupt, maybe more so.) --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

4 3

Re: Workers of the Web, UNITE!
by Duncan Frissell 17 Dec '03

17 Dec '03

At 06:38 AM 9/4/96 -0700, Martin Minow wrote: >The Wobblies are a prime example of Tom Leherer's comment: > >"They won all of the battles, but we had all the good songs." > >Up the Revolution. > >Martin (crypto social democrat) I dreamed I saw Joe Hill last night, Alive as you or me Says I, "But Joe, you're ten years dead," "I never died," says he "I never died," says he "The copper bosses killed you, Joe, They shot you, Joe," says I. "Takes more than guns to kill a man," Says Joe, "I didn't die," Says Joe, "I didn't die." See: http://www.bluemarble.net/~mitch/iww/lrs.html for more. DCF "Who wonders where his IWW card is -- 'Unemployed Worker' (Student) Dues 50 cents a month." It was the only organization on the Attorney General's list I could still join in 1970. You had to be there...

1 0

Re: What is the EFF doing exactly?
by James A. Donald 17 Dec '03

17 Dec '03

At 10:33 PM 9/3/96 -0800, jim bell wrote: >>The Leahy crypto bill introduced early this year made (paraphrasing) "the >>use of encryption to thwart a law-enforcement investigation illegal." I >>immediately pointed out that while this wouldn't make _encrypted_ remailers >>illegal, per se, effectively it would because the moment an investigation >>(even a phony or trumped-up one) is started and is "thwarted" by the >>encryption used, the remailer operator became guilty of a crime. At 07:10 AM 9/4/96 -0500, Jon Lebkowsky wrote: > Is that true? Or is it that the individual user would be guilty of a crime? Since the individual user would already be guilty of a crime, if he is using the remailer to conceal his crimes, the paragraph in question would be fairly useless and irrelevant unless it had the meaning that Jim Bell attributes to it. I believe that judges have a policy of interpreting deliberately ambiguous statutes in whatever way makes the most sense. The only sensible interpretation of Leahy's bill is that it criminalizes strong remailers, that it is intended to punish ANYONE, not just the criminals themselves, who obstructs investigations. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

How To Do Cgi Against www.anonymizer.com
by qut＠netcom.com 17 Dec '03

17 Dec '03

There are two difficult ways to tell how to Cgi your page against http://www.anonymizer.com:8080/{*} Either ask Rich Graves for the details on how he did it with http://www.stanford.edu/{*} or Use a decent browser client with 100% debugging mode, {and|or} telnet://www.stanford.edu:80/{*} {and|or} telnet://www.anonymous.com:8080/http://www.stanford.edu/{*} and enter a telnet script to find out how he did it. BTW, how to do telnet scripting and data transfers between two remote hosts with standard telnet clients available for Unice shells? It's rediculous to have to sz to my local machine before sz to my remote account if I simply want to transfer a file between two remote hosts! Yes, I'm aware of the mail utility, I mean telnet. -- | | | | | | | | | | | | | | _|__|__|__|__ /--------------\ | | | 0 0 |--\ | * | | | \-------/ | | | \_____/ |__/ \______________/ Æ×õ áîšõä

1 0

Re: rc2 export limits..
by Kent Briggs 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- stewarts(a)ix.netcom.com wrote: > However, the usual guidelines for systems like RC2 and RC4 is > 40-bit keys, and RSA keys up to 512 bits for encrypting > session keys and 1024 bits for signatures Can you list a source for the 1024-bit signature restriction? I know about the 40-bit RC2/RC4 and 512-bit public encryption keys because they are specifically addressed in the State Dept's "Procedure for Submitting a Commodity Jurisdiction Request for a Mass Market Software Product that Contains Encryption". However, digital signatures are not mentioned in this procedure. I can't image what justificication could be used to restrict the strength of digital signatures. Kent - ------------------------------------------------------------ Puffer & CryptaPix available from http://execpc.com/~kbriggs - ------------------------------------------------------------ - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMi2o9SoZzwIn1bdtAQEBoAF+PjxvtAuPUnlMr9UGoIYhjgjPQ0Bs0GeE 5077GFz/pASkMfFvsh5uO6I9BBtpGMpI =P92s -----END PGP SIGNATURE-----

1 0

Re: Mail OnNet
by Alan Olsen 17 Dec '03

17 Dec '03

At 05:10 PM 8/31/96 -0700, Joel McNamara wrote: >In my never-ending search for the perfect PGP e-mail client, I just stumbled >on to a beta of a product put out by FTP Software called Mail OnNet. Unlike >the Pronto Secure and Pegasus, this client actually has PGP code (licensed >from PGP Inc.) built directly in. No shelling out to DOS! It is very nice. It is a bit on the hard side to get. (Took me three tries. It seems to time out the transfer if it is not completed within a certain time frame. I guess that is what I get for trying to download all three parts at the same time.) It does have the beta nature however. I have found a couple of problems with the program that make it so that i will not use it beyond testing. The people at FTP have been very responsive to e-mail, so I expect the problems to be fixed soon. They also seem to have no idea as to what it will retail for. With proper marketing, Eudora could be in real trouble. >Very nice interface and almost complete idiot-proof >encrypting/decrypting/signing. Extremely powerful rules based processing too. The interface design is very clean. (It is nice seeing well designed dialog boxes in a product. I have been using too much shareware lately I guess...) The rules processing looks to be very powerful. (Puts Eudora 3.0 to shame.) >Check out: > >http://www.ftp.com/mkt_info/onnet32/try.htm > >IMHO, this is getting very close to transparent secure e-mail for the masses. Now all they need is a remailer interface. >Two notes. (1) It only runs under Win95 and NT. (2) It's ITAR restricted. (3) It is bigger than a battleship. The distribution is just shy of 10 megs. Installed it is supposed to be about 45 megs. (In perspective, a full install of Visual Basic 4.0 "Professional" is about 50 megs.) --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "Microsoft -- Nothing but NT promises."

1 0

[troll] Re: Workers of the Web, UNITE!
by Jean-Francois Avon 17 Dec '03

17 Dec '03

On 4 Sep 96 at 6:38, Martin Minow wrote: > >Tired: Libertarian cypherpunks > >Wired: Crypto-socialists > > > The Wobblies are a prime example of Tom Leherer's comment: > "They won all of the battles, but we had all the good songs." > Up the Revolution. > Martin (crypto social democrat) Minow? What is a missing "n" on the net? Everybody makes typos nowadays... Minow? Sound like a little living thing used as a lure on a troll, isn't it? jfa

1 0

Race Bit: C
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 3:02 AM 9/4/96, James A. Donald wrote: >At 10:33 PM 9/3/96 -0800, jim bell wrote: >>>The Leahy crypto bill introduced early this year made (paraphrasing) "the >>>use of encryption to thwart a law-enforcement investigation illegal." I >>>immediately pointed out that while this wouldn't make _encrypted_ remailers >>>illegal, per se, effectively it would because the moment an investigation >>>(even a phony or trumped-up one) is started and is "thwarted" by the >>>encryption used, the remailer operator became guilty of a crime. ... >I believe that judges have a policy of interpreting deliberately >ambiguous statutes in whatever way makes the most sense. The only >sensible interpretation of Leahy's bill is that it criminalizes >strong remailers, that it is intended to punish ANYONE, not just >the criminals themselves, who obstructs investigations. As the recent discussion of knives, switchblades, and throwing stars showed, such ambiguous laws are often used to keep the coloreds down. But how will cops and local prosecutors know which users of remailers are colored? Answer: the race bit must be set on all posts. --Klaus (P.S. More than one of you has expressed anger to me that I am using the term "colored." As in "what the coloreds are doing." I use this term deliberately, because the perfectly fine term "black" is now being replaced by the ultra-awkward and stupid-sounding "person of color." We have even seen this in posts to this list. Here in Santa Cruz, the terms in use are: people of color, students of color, lesbians of color, etc. Only about 17.32% of the entire population is _not_ "persons of color." I say, "Fuck it...they want to be called "colored," then, fine, they're "colored."") We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0