December 2003 - cypherpunks-legacy

Re: AP [was: Re: Kiddie porn on the Internet] [NOISE]
by Jean-Francois Avon 17 Dec '03

17 Dec '03

On 23 Sep 96 at 22:10, hallam(a)vesuvius.ai.mit.edu wrote: > People like Jim want to impose their will on others by > force. Mr. Bell pushing the AP scheme does not mean that he wants to impose his ideas by force since he will have *no* mean of controlling what ideas will be favored. It is strictly market forces that will dictates what will happens. As many, including Mr. Bell have pointed out, he might very well be one of the first victim of the AP system. Mr Bell is pushing AP because he believe that the bulk of human race wants to live peacefully and he therefore concludes that AP, being led by the demand of ordinary people, will lead to a more peacefull world. When you'll get to learn how AP operates, your conclusions of an AP regulated world will, IMO, be dependent on the specifics of your definition of human race. > Despite prolonged attempts by each faction to assasinate the > leaders of the other they have been unsuccessful. As I mentionned in my other post to you, this is not a reference since the operating mode of AP is entirely different. > If terrorists trained by Lybia and Syria are unable to assasinate > at will then we can be sure thaqt Jim's band of kooks is not going > to get any further. Again, absolutely irrelevant to AP. Go read the book again. > It is suprising that someone from the press has not seized upon > Jims ideas as cause for another cyber-scare. I suspect this is > because people like Markof are somewhat more responsible. No, it is not surprizing at all, but you did not seem to have understood why: 1) The dissatisfaction of the population is such that many would actively seek where to send their buck to have somebody offed. 2) The way AP works, journalists would be priviledged victims, paid for by the same disgruntled population 3) More than everything else, they (the journalists) probably understood *exactly* how AP works and thus fully realised point 2) > This is not going to stop me from producing an op-ed piece linkiing > the net libertarians to assasination politics unless I hear a few > more repudiations of Bell's ideas. That would be the best way of promoting AP. Every peoples who favor it would say: "Go ahead, it'll be our pleasure!" AP will not die for several reason. The first one is that it only requires knowledge and a little coding. The second is that there is a demand. Prostitution could never be eliminated. Yet, it does not menace the system itself. AP will be tougher than prostitution and it will probably actively seek the system's destruction (as we know it). I suggest you try to understand the mechanics of AP. jfa Jean-Francois Avon, Montreal QC Canada DePompadour, Societe d'Importation Ltee Finest Limoges porcelain and crystal JFA Technologies, R&D consultant physicists and engineers, LabView programming PGP keys at: http://w3.citenet.net/users/jf_avon ID# C58ADD0D : 529645E8205A8A5E F87CC86FAEFEF891

1 0

ICI_96x
by jya＠pipeline.com 17 Dec '03

17 Dec '03

A fax appeared of the International Cryptography Institute, 1996, October 25-26, in DC. Here are excerpts: _________________________________________________________ What are the different national policies and regulations governing cryptography and how might these evolve? What cryptography technologies are on the market in different countries, what is being used, and for what purpose? What problems is cryptography causing law enforcement? What are the requirements of business and other organizations? What are the new trends in cryptography and what will be their impact on society? What efforts are leading toward an international cryptography framework? _________________________________________________________ Sample sessions: The International Cryptography Experiment Export controls on Encryption Software Cryptography: Recent Developments in the EU Towards an Australian Policy on Encryption New Russian Encryption Policies and Regulations International Regulation of Cryptography: Update U.S. Government Cryptography Policy Law Enforcement Requirements for Encryption Transnational Key Escrow Commercial and International Key Escrow Digital Cash _________________________________________________________ Some of 38 "Invited Faculty" Dr. Dorothy Denning, Georgetown University Mr. John Droge, Mykotronix Mr. Louis. J. Freeh, Director, FBI Mr. Michael Gilmore, FBI Mr. David Kahn, Author, NSA Dr. Kwok-Yeo Lam, National University of Singapore Dr. Anatoly N. Lebedev, LAN Crypto, Ltd. Mr. Ronald Lee, General Counsel, NSA Mr. Yves LeRoux, Digital Equipment Mr. Nick Mansfield, Shell International Petroleum Mr. Michael Nelson, White House Office STP Dr. Jean-Jacques Quisquatier, University of Louvain Mr. John Young, National Computer Board [Nope] ----- http://jya.com/ici96x.txt ICI_96x

1 0

Universal Avatar spec
by Bovine Remailer 17 Dec '03

17 Dec '03

IBM, Velocity, and Chaco team up for identity on the net: http://www.chaco.com/avatar/avatar.html > The real power of Universal Avatars comes from the inclusion of > other capabilities into the system. First, consider the implications > of embedding a public key, or Netscape certificate, into the > Universal Avatar file. By introducing secure communications, the > avatar can effect instantaneous financial micro-transactions > seamlessly in a virtual world. For example, an avatar could walk > through a virtual mall and transparently purchase items. Since his/her > profile is under the strict control of the user, s/he could declare > an interest in modems. Virtual stores could then automate the process > of discovering where the potential customer's interests lie, while > keeping the customer's personal information strictly confidential and > email address safe from spamming.

1 0

Bernstein hrg in the news
by Bovine Remailer 17 Dec '03

17 Dec '03

Feds on the Ropes In Suit Challenging Arms Export Law (Dan Goodin, The Recorder (SF), 9/23/96, p.1) A professor who says federal restrictions on the export of encryption software violate his right to free speech seemed to get a sympathetic hearing from a federal judge on Friday. In a closely watched case challenging export restrictions on encryption software, U.S. District Judge Marilyn Hall Patel did not rule on summary judgment motions. But she appeared impatient when a U.S. Department of Justice attorney attempted to revive an issue settled months ago in that case. Patel handed plaintiff Daniel Bernstein a big victory in April, ruling that software is protected speech under the First Amendment. But the ruling in _Bernstein v. U.S. Department of State_, 95-0582, didn't deter government attorneys Friday from trying to reargue the point. Justice Department trial attorney Anthony Coppolino argued that the government controls on the export of software are not based on the content of the computer code but rather on its functionality. Therefore, he argued, the restrictions are not a prior restraint of speech protected under the Constitution. Patel replied: "You'll get a chance to argue that in another courtroom." Cindy Cohn, an associate with San Mateo's McGlashan & Sarrail representing Bernstein, said she was pleased with the way the hearing appeared to go. "My impression is the fact that [Patel] was asking more questions of [Coppolino] than me meant that he was the one who needed to convince her," Cohn said. Coppolino declined to comment. LICENSE TO 'SNUFFLE' Filed in February 1995, the suit challenges provisions of the International Traffic in Arms Regulation Act, which classifies encryption programs as "munitions" and subjects them to strict export controls. In October 1993, the U.S. State Department told Bernstein he would need an arms export license to post his "Snuffle" encryption program and accompanying documentation to an Internet discussion group. He subsequently filed suit seeking to have the requirement declared unconstitutional. After Patel's April ruling, the case now turns on whether restrictions on the export of such software and accompanying "technical data" amount to prior restraint, which can only be exercised extremely narrowly. High-tech companies are closely watching the case, having complained bitterly for years that the law has crippled their ability to compete in the global software market. Particularly in the burgeoning arena of Internet and network-related software products, encryption features are considered essential to protect sensitive data transmissions from unauthorized access. Legislative attempts at relaxing export laws so far have been unsuccessful. A bill now before the Senate Commerce Committee has received stiff opposition from the Clinton administration, and even its supporters say it is unlikely the bill will pass this term. But Stanton McCandlish, a spokesman for the Electronic Frontier Foundation - a group that advocates extending civil liberties into digital media such as the Internet - said the so-called Pro-CODE bill sponsored by Sen. Conrad Burns, R-Mont, could be made moot by Bernstein's case. "If we get the ruling we're looking for," he said, "and it's affirmed at the Supreme Court level, which is pretty likely, the Pro-CODE bill is probably not needed at all." (retyping by NLA, newspaper liberation army.)

1 0

Re: Where to write crypto?
by azur＠netcom.com 17 Dec '03

17 Dec '03

I believe Taiwan might be an excellent location to have 'clear room' crypto work done. Taiwan has a very large skilled software labor pool and isn't a member of COCOM. PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Snoop Daty Data | Internet: azur(a)netcom.com Grinder | Voice: 1-702-655-2877 Sacred Cow Meat Co. | Fax: 1-702-658-2673 7075 W. Gowan Road, #2148 | Las Vegas, NV 89129 | --------------------------------------------------------------------- Just say NO to prescription DRUGS. "Of all tyrannies, a tyranny sincerely exercised for the good of its victims may be the most oppressive." -- C.S. Lewis "Surveillence is ultimately just another form of media, and thus, potential entertainment." -- G. Beato

2 1

WARNING: This Message Actually Contains a Question Reguarding Crypto!
by William H. Geiger III 17 Dec '03

17 Dec '03

Hi, I just recently downloaded copies of Blowfish & Ghost. Does anyone have any experiance with these two algorithims? How do they comare to RSA, DES, 3DES, IDEA ? I can across a post awhile back that mentioned that they were using Blowfish in PGPPhone. Can anyone confirm this? Does anyone know how they are using Blowfish and why? Thanks, -- ----------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting WebExplorer & Java Enhanced!!! Merlin Beta Test Site - WarpServer SMP Test Site Author of PGPMR2 - PGP Front End for MR/2 Ice Look for MR/2 Tips & Rexx Scripts Get Work Place Shell for Windows!! PGP & MR/2 the only way for secure e-mail. Finger whgiii(a)amaranth.com for PGP Key and other info -----------------------------------------------------------

4 3

Good article on inevitability of unregulated crypto ...
by Ernest Hua 17 Dec '03

17 Dec '03

http://www.zdnet.com/intweek/print/960624/cover/doc1.html This, of course, is not any indication that we should not stay vigilant. As is clear from every public statement by the past and present administrations, they have an agenda to protect their monopoly on intelligence gathering. They clearly have a strong interest in hamstringing every single challenge to the current regulations. If ITAR is torn down, then they will use the OECD and other international organizations to stop the flow of encryption. It is NOT useful to reason with them. It takes direct confrontation using legislation and court case battles to fix this problem. Ern

1 0

ISPs' information on users
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: rodney(a)pop3.pn.com Mime-Version: 1.0 Date: Tue, 24 Sep 1996 08:57:01 -0400 To: dcsb(a)ai.mit.edu From: Rodney Thayer <rodney(a)sabletech.com> Subject: ISPs' information on users Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Rodney Thayer <rodney(a)sabletech.com> Something to think about before any of us start selling Ketchup on-line via E-cash... >Date: Sun, 22 Sep 1996 23:53:02 -0400 >From: darius(a)world.std.com (Darius Thabit) >Subject: ISPs' information on users >Date: Sun, 22 Sep 1996 01:18:59 -0700 (PDT) >From: Phil Agre <pagre(a)weber.ucsd.edu> > >=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= >This message was forwarded through the Red Rock Eater News Service (RRE). >Send any replies to the original author, listed in the From: field below. >You are welcome to send the message along to others but please do not use >the "redirect" command. For information on RRE, including instructions >for (un)subscribing, send an empty message to rre-help(a)weber.ucsd.edu >=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= > >Date: Fri, 20 Sep 1996 19:16:19 +0200 >From: steve(a)isys.hu (Steven Carlson) >To: hungary-online-announce(a)hungary.yak.net >Subject: (HOL-A) It's a Brave Old World > > ------------------------------ > Brave Old World: > Reflections on Europe in the Digital Age > by Steven Carlson; 20 Sep 1996 > ------------------------------ > > ** So Much Fuss About A Bottle Of Ketchup > > Hungarian police recently sent a fax around to the local Internet > service providers (ISPs) asking them to provide lists of their users > in Esztergom, a small town outside of Budapest. It seems somebody > had planted a bomb in a bottle of ketchup. Since everyone knows you > can download bomb-making instructions from the Internet, the police > figured they should investigate the local users. No, I'm not making > this up. > > What's more, nearly every local ISP gave the police this information. > Fortunately my company has no users in Esztergom and so that's what we > told the police. We got off lucky. Believe me, as much as might want > to make a stand for privacy of information my company is NOT eager to > do battle with the Hungarian authorities. > > But that's what it might take. Because if the Hungarian police really > understood the Internet they could have asked for even more. For > example, it would only take a few keystrokes to forward a users' mail > to the authorities. The police might also have asked for old email, > since many ISPs back this up routinely. > > But that's not all. Some ISPs run caching servers, machines that store > frequently-viewed webpages so that users access them locally rather > than across the net. An ISP's caching server could give the police a > profile of what web pages the users have been browsing. > > I'm not trying to scare anyone. My point is that sharing information > on the Internet is a two-way street. Computers keep extensive records. > Using the Internet often means you leave a trail behind you. This is > part of life in the digital age. > > This "electronic trail" is not unique to the Internet. Every time you > use a credit card you create a record in several computers. Other > computers may be storing information about you such as your medical > history, driving record, tax filings and so on. The more we rely on > computers to manage our affairs, the more information that may be "out > there." This means citizens in the digital age should know their > rights. > > Many governments already have laws to protect private information. For > example, the US has many laws restricting access to sensitive > information such as medical and credit records. You might be surprised > to know Hungary passed a law in 1991 to prevent misuse of information > associated with the national identity card. > > Yet the growth of new technologies is outpacing legislation. For > example, Holland and other countries are experimenting with "smart > road" systems that can identify the licence number of a moving car for > purposes of toll collection. Cellular phones and satellite navigation > systems can report the locations of their users. It's not difficult to > imagine how these and other technologies could be abused. > > Of course, now you know that even your local Internet provider has > access to some rather sensitive information about you. This leads me > to ask: what sort of service is your Internet provider actually > offering? > > When it comes down to it, your ISP is like your doctor, your lawyer, > your accountant or your psychiatrist. Each of these professionals > deals with your data; each profession is governed by a code of ethics, > written or implicit. Moreover these limits are codified in law. If > your accountant allowed your competitors to read the company books, > you could take him to court. > > Similarly, your Internet provider has an implicit duty to protect the > privacy of your communication. Most professionals in my industry > recognize this. I know most of the people working in Hungarian > Internet and I doubt very much that they are reading your mail or > mine. But they don't know where they stand in the eyes of the law. > > Internet professionals should certainly assist the police in a > legitimate investigation. But should every Internet user in Esztergom > be investigated just because they could (theoretically) find > bomb-making information on the Internet? > > To hammer that point home a local Internet-based magazine has > published, in Hungarian, complete bomb-making instructions: > <http://www.idg.hu/internetto/cyber/special/dinamit.htm>. In other > words, if you've read this far you may be the subject of a future > investigation. Have a nice day! > > > > ** Further Links: > > The Electronic Frontier Foundation > <http://www.eff.org> > The International Electronic Rights Server > <http://www.privacy.org> > The Electronic Privacy Information Center > <http://www.epic.org> > > ---------------------------------------------------- > Copyright (c) 1996. Permission granted to redistribute this article in > electronic form for non-profit purposes only. My byline and this message > must remain intact. Contact me <steve(a)isys.hu> for reprint rights. >----------------------------------------------------- > > > > > --- from Rodney Thayer <rodney(a)sabletech.com> +1 617 332 7292 --- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ To unsubscribe from this list, send a letter to: Majordomo(a)ai.mit.edu In the body of the message, write: unsubscribe dcsb Or, to subscribe, write: subscribe dcsb If you have questions, write to me at Owner-DCSB(a)ai.mit.edu --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "'Bart Bucks' are not legal tender." -- Punishment, 100 times on a chalkboard, for Bart Simpson The e$ Home Page: http://www.vmeng.com/rah/

2 1

Tamper-Resistant Software from INTEL
by Scott Guthery 17 Dec '03

17 Dec '03

Has anybody heard of tamper-resistant software in general or a method for tamper-resistant software from Intel in particular? -*-*-*-*-*-*-*- http://www.snailbox.com -*-*-*-*-*-*-*- Scott Guthery Home: 1 512 266 1278 The SnailBox Work: 1 512 331 3774 12417 River Bend #6 FAX: 1 512 331 3059 Austin, Texas 78732 Email: guthery(a)snailbox.com

3 2

FLITE is now on the web
by John Fricker 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- http://www.fedworld.gov/supcourt/index.htm 7000 supreme court decisions from 1937 to 1975 -----BEGIN PGP SIGNATURE----- Version: 2.9 iQCVAgUBMkhnzbuA0owOB/fpAQEKWwQArJwMFrL5kVXSYfNC9I8T8bzi+8D8Zdma vZj84TB+2KmW28wuFvbxnVE02MT4DMkwTYR8NQpGfAxsHHkOCOzkasdVB1IRpnpP RUuZsyQ3Iabm3q7INywMcy+c+u+5bl6stzYAlKVypsmPYJh0J9TSnhH5zN+xdowG /6dj+90GGNc= =/4qd -----END PGP SIGNATURE-----

1 0