December 2003 - cypherpunks-legacy

Re: PGP public key servers are NOT useful!
by Omegaman 17 Dec '03

17 Dec '03

> What I want to prevent is some person I dislike uploading his > signature on my key Yes, that's unpreventable. It still does not change the fact that it is up to the person using your public key to determine if you are indeed that actual owner of that key. > How would you like it if I added a new ID to your key containing sort > of insult, certified that ID, and uploaded the new signature to the > key servers. RTFM. Look, go into PGP and try to change your key ID. You will note that PGP asks you to provide the passphrase to your secret key before allowing an id change. Someone could not get your public key off of a keyserver and change the id of the key. The need both your secret key and your passphrase to do that. Now someone could create a key-pair themselves and falsely assign your e-mail address and some miscellaneous crap as the ID. They could then upload the"rogue" public key portion of this keypair to the servers. However, the falsity of this "rogue" public key can be easily determined by you and anyone who is trying to communicate securely with you. All of this is explained with great clarity in the PGP documentation. Think about this... Suppose I knew who you were and knew your e-mail address. What's to stop me from creating a "rogue" key-pair with your address as the e-mail id and uploading it to the keyservers? Just because you don't utilize the keyservers, doesn't mean your public key can't be placed there. "Controlling" the distribution of your public key is giving you a false sense of security where none is really needed. Ponder: why is a public key called a "public" key? "Controlling" the distribution of you public key is a pointless exercise. Controlling authentication is what you and those who communicate securely with you whould be concerned about. me -------------------------------------------------------------- Omegaman <omega(a)bigeasy.com> PGP Key fingerprint = 6D 31 C3 00 77 8C D1 C2 59 0A 01 E3 AF 81 94 63 Send a message with the text "get key" in the "Subject:" field to get a copy of my public key. --------------------------------------------------------------

1 0

.mil links
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

Somebody e-mailed me a nice collection of military/intelligence sites. I'll forward it to the list in case anybody is interested. (Note: I haven't checked the links myself yet) Harka == Forwarded Message Follows ========================================= MILITARY SCIENCES AND DEFENSE SITES: Advanced Information Technology Current research aimed at developing and implementing cutting edge hardware and software solutions for Navy problems. Also pointers to US Navy information, Washington DC Area Information and more. http://www.ait.nrl.navy.mil:80/home.html Advanced Research Projects Agency Provides selected information about the activities and programs of the Advanced Research Projects Agency(ARPA). http://ftp.arpa.mil/ Air Intelligence Agency This World Wide Web home page is your gateway to information about the U.S. Air Force's Air Intelligence Agency, a Field Operating Agency headquartered at Kelly Air Force Base in San Antonio, Texas. http://tecnet2.jcte.jcs.mil:8000/cybrspke/aialink.html Armament Research Development and Engineering Center (ARDEC), Picatinny Arsenal, NJ Access to staff directories, ARDEC information sources and remote non-technical information. http://www.pica.army.mil/ Army Research Laboratory Allow scientist from government, academia, and industry to discover information about current Army research. http://info.arl.army.mil/ Bosnia Link BosniaLINK, is the official Department of Defense information system about U.S. military activities in Operation JOINT ENDEAVOR, the NATO peace keeping mission in Bosnia. http://www.dtic.dla.mil/bosnia/ Brooks Air Force Base, Human Systems Center Brooks AFB organizations, information by topic and local interest, publications, weather and keyword searches are available. http://www.brooks.af.mil/ Central Intelligence Agency The Central Intelligence Agency (CIA) supports the President, the National Security Council, and all who make and execute US national security policy. http://www.odci.gov/cia/ Defense Information Systems Agency Center for Standards Access to the DISA CFS Information Technology Standards Libary, Bulletin Board System and the Department of Defense Electronic Commerce/Electronic Data Interchange Standards Repository. http://www.itsi.disa.mil/ Defense Information Systems Agency Server The Defense Information Systems Agency (DISA) mission is to Plan, Engineer, Develop, Test, Manage Programs, Acquire, Implement, Operate and Maintain Information Systems for C4I and Mission Support Under all conditions of Peace and War. http://www.disa.mil/ Defense Intelligence Agency The Defense Intelligence Agency (DIA) is a Combat Support Agency and the senior military intelligence component of the U.S. Intelligence Community. http://www.dia.mil/ Defense Logistics Service Center Provides logistics information products and services to all military and civilian government services and agencies. Server provides information on full range of DLSC products and services including LOGRUN, MEDALS, CAGE, FEDLOG, GIRDER, AMLS, Customer Service and FOI. http://www.dlsc.dla.mil/ Defense Research and Engineering Network Information about the Defense Research and Engineering Network(DREN), the networking component of the DoD High Performance Computing Modernization Program. http://www.arl.mil/HPCMP/DREN/index.html Defense Technical Information Center Provides access to and transfer of scientific and technical information for DoD personnel, DoD contractors and other US government agencies. http://www.dtic.mil/ DefenseLINK Access to DoD news releases, contract awards, briefing transcripts and related information. Postings are normally made within 20 minutes of official release. A search feature provides easy access to past releases. http://www.dtic.mil/defenselink/ Hydromechanics Directorate, Naval Surface Warfare Center Navy lab responsible for the research, development, testing, and evaluation of ships, submarines and other marine technologies. Contains information on facilities, projects and technical reports. http://www50.dt.navy.mil/ Intelligence Community Homepage The Intelligence Community is a group of 13 government agencies and organizations that carry out the intelligence activities of the United States government. http://www.odci.gov/ic/ National Defense University Information on professional military education. NDU is home to several colleges and institutions dedicated to military education, research, executive skills training, public policy information resource management, and more. Also contains a library. http://www.ndu.edu/ National Security Agency The National Security Agency (NSA) is responsible for the centralized coordination, direction, and performance of highly specialized technical functions in support of U.S. Government activities to protect U.S. information systems and produce foreign intelligence information. http://www.nsa.gov:8080/ Naval Command, Control and Ocean Surveillance Center (NCCOSC) Information about the three subordinate commands of NCCOSC as well as pointers to other naval resources. http://www.nosc.mil/ Naval Surface Warfare Center, Carderock Division Contains information pertaining to CALS in the Navy. All certified Navy DTDs and FOSIs are available on the Repository for downloading. http://navysgml.dt.navy.mil/ NavyOnLine Gateway to the Department of Navy online resources. Access to the Navy News Service, Naval Postgraduate School, Navy Public Affairs Library, Naval Research Laboratory, Space and Naval Warfare Systems Command and more. http://www.navy.mil/ Office of the Director of Information Systems for Command, Control, Communications and Computers (ODISC4) Provides up to date information on the ODSIC4 and the Army's Information Mission Area. http://www.army.mil/disc4-pg/disc4.htm Office of Naval Research The Office of Naval Research (ONR) coordinates, executes, and promotes the science and technology programs of the United States Navy and Marine Corps through universities, government laboratories, and nonprofit organizations. http://www.onr.navy.mil/ Office of Strategic Phenomena The mission of the Office of Strategic Phenomena is to develop and maintain the means by which certain phenomenology data is to be archived, distributed, analyzed and used by the community of designers, experimenters, scientists, and wargamers working in the areas such as ballistic missile defense or in synthetic environments for more comprehensive DoD simulations. http://vader.nrl.navy.mil/osp.html The Pentagon Access the headquarters of the Department of Defense and get general information and tour schedules for the Pentagon. http://www.dtic.mil/defenselink/pubs/pentagon/index.html Persian Gulf War Illness Home Page Visit GulfLINK, the information system of the Persian Gulf War Veterans Illnesses Task Force. This service provides to the public information concerning the illnesses affecting Persian Gulf War veterans. http://www.dtic.dla.mil/gulflink/ Space & Naval Warfare Systems Command Information about the resources at the Space and Naval Warfare Systems Command. http://www.spawar.navy.mil/ U.S. Air Force The official web site of the U.S. Air Force. Contains news, fact sheets and photos of weapon systems, biographies and key leaders, the latest publications about the Air Force, and photos for current operations around the world. The site also lists more than 40 Air Force web sites around the world. http://www.dtic.mil/airforcelink/ U.S. Army Center of Military History The U.S. Army Center of Military History provides information on past Wars and Army history in general. http://www.army.mil/cmh-pg/default.htm U.S. Army Homepage The Army Homepage is a central index for all U.S. Army Web sites. It is updated daily and has both Organizational and Subject lists. If you need to find a U.S. Army Homepage, you will find it here! http://www.army.mil/ U.S. Marines Corp Homepage The official World Wide Web information service of the United States Marine Corps. http://www.usmc.mil/ ___ Blue Wave/386 v2.30 [NR]

1 0

Re: Boom!
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 10:43 PM 8/8/96, Duncan Frissell wrote: >So, if it turns out that TWA 800 was an accidental wing tank explosion, will >they give us our civil liberties back? If not, why not? > You must be kidding. Civil rights (the real ones, not the affirmative action/antidiscrimination bullshit kind) only get constricted. The government only tightens the noose, it never loosens it. On a related note, it looks like Richard Jewell, the "Olympic Bomber," may not be charged and may even receive a page 37B "letter of clarification" from the Feds. No word on what the pack of 100 media vultures camped in his apartment's driveway will say. I suspect he will never live a normal life. Even if never charged, the splashing of private photos from his apartment--such as him cradling an AR-15 while dressed in camo--will stick in people's minds. What recourse does he have that camera crews were invited in on the searches? (*) (* In my local large city, San Jose, the cops used to invite the tabloid t.v. crews in on busts of suspected drug dealers. Kickbacks were probably involved. Anyway, the Fox network used to send camera crews in with the cops who kicked down doors, getting juicy coverage for "reality t.v." shows like "Cops." People in their underwear, people crying, people naked (Fox covered up the naughty bits digitally). After a privacy invasion lawsuit filed by one of the raided parties--I don't recall if they were ever found guilty or not, not that it matters--the cops stopped inviting the camera crews along. Judging by what I still see on t.v., other cities haven't stopped the practice. Surely a raid by cops, justified or not, does not give me, or you, or KCBS t.v. to tag along and enter a private home with our tape recorders and cameras rolling.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Fw: AOL crashes and burns
by Charley Sparks 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: cypherpunks(a)toad.com Date: Thu Aug 08 21:28:04 1996 - -----Begin Included Message ----- I thought things were a bit faster there for a while.. They had just rolled out AOL 3.0 in time for Mac World ( county ??) when it burned.... Seems some new server software gagged it <GRIN> Date: Thu, 8 Aug 1996 15:16:38 -0500 From: Warrior <warrior(a)tateonline.com> To: cypherpunks(a)toad.com Cc: Great news, eh? - ---- End of forwarded message ---- Charles E. Sparks<sparks(a)bah.com> In God we trust, all others we encrypt ! http:/www.clark.net/pub/charley/index.htm Public Key At http://www.clark.net/pub/charley/cp_1.htm -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCXAwUBMgqUJeJ+JZd/Y4yVAQGXpQQMC4HvZJDaHYOeSF/2nw4LEdSt6g+h5eZU NYo594LK9VTogbOLG/XgLol3aZ/GtQLyWs3gzbHFUwgByzZzjdDq+UEwbj4wV7jb XE3D1EJ5zCg3k7+Pbj4LKqag4VngD/0yd38bx7Okcvi3pfuwaPjIjNy/IStxZjV8 L6tHPzdlbwwa2g== =CG8R -----END PGP SIGNATURE-----

1 0

Why should we trust the system?
by jim bell 17 Dec '03

17 Dec '03

When supporting plans like GAK ("key escrow") and wiretaps, you will frequently see the Denning-types justify them by claiming that there's protection from a requirement that a judge issue a search warrant. It should be instructive, then, to present the Richard Jewell case as an excellent counter-example. Richard Jewell, as you should all be aware, is the poor soul who happened to first see that pipe bomb at the Atlanta Olympics. However, hours after it was publicly revealed that the Atlanta 911 center screwed up, wasting 10 minutes looking up the address of "Centennial park," officialdom suddenly discovered they needed news to divert attention from their buffoonery. They found it, as if on cue. Tonight, I saw a national network news show say how Jewell is apparently quite innocent, and that the news media was quite willingly "used" by the government to convict Jewell in the press. Great mea culpa, but that still leaves some serious questions. Presumably, the government got warrants to search Jewell's apartment, correct? Okay, what evidence did they use to support the granting of those warrants? What, EXACTLY, did they tell the judge that ostensibly convinced him to grant a warrant? Remember, police aren't supposed to get a warrant simply if they can't prove that a person is NOT a bomber. The standard is suppose to work the other way around: The police should get a warrant only if the amount of evidence of guilt (or, evidence of evidence) is sufficiently detailed to rise to a certain level of authority, known as "probable cause." Evidence doesn't evaporate. More precisely, the police had a responsibility to collect enough evidence together, POSITIVELY, to be able to show probable cause to believe that a crime had occurred, and that Jewell was guilty. Some of that evidence might, hypothetically, have initially appeared to show guilt and was later clarified, but that early evidence must still exist, to at least show the public that the cops didn't entirely fabricate the justifications they used to get the warrants. So I ask again, did the police/FBI EVER have enough evidence to convince anyone by that "probable cause" standard? Well, if they say they had it in the case of Richard Jewell, that isn't very reassuring. Okay, I'll admit that I _never_ believed that judges actually follow the standards they claim to. But many other people of those who are more establishmentarian than I (I guess that group includes just about everybody, huh?) at least pretend to believe this, or hope this, and maybe a few suckers actually do. It should be their responsibity, then, to show that the granting of a search warrant occurs only when justified. In Jewell's case, that was not the case. If we allow this fiasco to die without a full analysis, particularly in light of the government's repeated assurances with regards to search warrants, we will be as incompetent as the police were. Jim Bell jimbell(a)pacifier.com

2 1

driver license info, loss of liberty, etc.
by Pete Loshin 17 Dec '03

17 Dec '03

The furor over the Oregon DMV database seems a bit misplaced: this type of information is considered to be in the public domain. You can buy it on tape/whatever for business purposes direct from the state. There are lots of people who I don't want to have any information about me who can get what's on file down at the Mass Registry of Motor Vehicles. That's the way it works. Now, there's lots of times when it would have been nice to have access to that information myself. Use your imagination. Why should the public be denied the right to access this information when businesses have had that privilege for some time? I wouldn't hold my breath waiting for it to be taken away from businesses, either, though I suppose the states will now pass laws prohibiting the public dissemination of this data. BTW, has anyone heard about the Post Office now requiring that all airmail packages over 1 lb must now be posted in person (no mail drop boxes)? Someone told me this, and it sounds just stupid and pointless enough to be true. I won't have a chance to go to the PO until Monday, so I'd appreciate any updates. regards, -pl

1 0

"Thank you for not smoking" and other euphemisms
by tcmay＠got.net 17 Dec '03

17 Dec '03

[Not to pick on Alan, but I clipped out 8 (eight) separate cc: copies besides the main address! People, take a minute to trim the ever-accumulating cc: list. If someone is subscribed to CP, they don't need a separate copy. And so on.] At 1:11 AM 8/9/96, Alan Horowitz wrote: >Nrth Carolina Jury instructions also mention that petite jurors are >"discouraged" from asking questions of the witness. I guess that means >they are not forbidden to do so. "Petite jurors" Is this a typo, or a special term of art in North Carolina? But your "discouraged" point is well-taken, an all too common. Other examples are: "Thank you for not smoking" (Suggesting they'll thank me if I don't smoke, but not actually forbid me from smoking. Of course, this euphemism means "Smoking forbidden.") "Donations suggested." This usually for leftist events, e.g., a speech by a Nicaraguan freedom fighter. Of course, what they really mean is "admission fee mandatory," but they call it a "suggested donation." I doubt one will be arrested for barging through the door without paying the "suggested donation," but this is a possibility, as they may deny admission. (And then there's the "sliding scale donation suggested," say, from $5 to $15. Presumably this is the embodiment of pure Marxist theory, "from each according to his ability, to each according to his need." Be interesting to see their reaction if one declined to make any donation.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

4 4

subscribing
by Doug Mortimer 17 Dec '03

17 Dec '03

Please add my name to your list. Thanks. D. Mortimer djmortim(a)sprynet.com

1 0

Re: Internal Passports
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"declan(a)eff.org" "Declan McCullagh" 7-AUG-1996 10:15:54.28 >The Hatch simulated "child porn" bill was reported out of the Senate >judiciary committee favorably, with the addition of language making it a >felony to *attempt* to view child porn. This wording is aimed at the Net: > "Click Here to see Young Girls in Lust." One wonders if someone could dig up pictures taken by some senators or reps of their grandkids bathing in a pool... could be a nice publicity stunt. -Allen

1 0

Re: Talking about Crypto Anarchy
by Arun Mehta 17 Dec '03

17 Dec '03

At 20:12 06/08/96 -0700, Timothy C. May wrote: >6. I've given up on discussing crypto anarchy in short talks because nearly >nobody in the audiences I've done it for has the foggiest notions of what >I'm talking about, and I've found no short, sweet, simple methods of >getting across the implications. .. >(I've also seen David Chaum struggle to just get the basic idea of >"credentials without identity" across to a tecnical audience...even when he >concentrates on only getting a single facet of his ideas across, the light >bulbs just don't go off in the heads of the audience members... I appreciate what you are saying, and I'm sure we all have felt this frustration at some time or another. I've had lots of people, particularly social scientists, aghast at the thought that I could have spent 4 years on a PhD trying to get a crane to reach its destination 2 seconds sooner -- after a while, you just get tired, and reach for your beer. However, policy that affects us is framed by people with little idea, and *someone* with a clue has to educate them (as well as, maybe, educate their constituents to bring the right kind of public pressure). Perhaps people like Tim, who seem to be tired of this, could further the cause best by "training the trainers." Which, I suppose, is what he is doing on this list... In closing, a short, simple story that's worth thinking about: When Buddha attained enlightenment, the gods asked him to go forth and spread his knowledge to the world. "Why should I?" he asked, "Those that know won't need it, those that need it won't listen." "Can you rule out," asked the gods, "that there might be people in between? Those that with your teaching might learn, who otherwise wouldn't?" Beware of binary thinking... Arun Mehta Phone +91-11-6841172, 6849103 amehta(a)cpsr.org http://www.cerfnet.com/~amehta/ finger amehta(a)cerfnet.com for public key

1 0