December 2003 - cypherpunks-legacy

Re: Vulis on the remailers
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

Vulis writes: >nobody(a)cypherpunks.ca (John Anonymous MacDonald) writes: > >> Please, remailers, source block Vulis for a week. >> Remailer Fan > >I'm not sending anything via any remailers. Hmmmm. Let's see...I'll respect you in the morning, the check is in the mail, I won't come in your mouth... Get real, kook.

1 0

Re: Legal Definition of Encryption?
by Richard L. Field 17 Dec '03

17 Dec '03

The U.S. Export Administration Regulations (Commerce Department) include the following definitions: "Cryptography" -- "The discipline that embodies principles, means and methods for the transformation of data in order to hide its information content, prevent its undetected modification or prevent its unauthorized use. 'Cryptography' is limited to the transformation of information using one or more 'secret parameters' (e.g., crypto variables) and/or associated key management. Note: 'Secret parameter': a constant or key kept from the knowledge of others or shared only within a group." (Part 772) "Information security" -- "All the means and functions ensuring the accessibility, confidentiality or integrity of information or communications, excluding the means and functions intended to safeguard against malfunctions. This includes 'cryptography', 'cryptanalysis', protection against compromising emanations and computer security." These definitions and others are used within the Commerce Control List (Supplement No. 1 to Part 774) to regulate the export of certain Information Security related equipment, software, etc. (Category 5:II). The U.S. International Traffic in Arms Regulations (State Department) also regulates (until 1/1/97, when jurisdiction is expected to move to Commerce) the export of certain "Cryptographic systems", etc. including those with the capability of maintaining secrecy or confidentiality of information systems. (The United States Munitions List, Section 121.1, Category XIII-Auxiliary Military Equipment) - Richard Field At 01:48 PM 11/8/96 -0400, "William H. Geiger III" <whgiii(a)amaranth.com> wrote: >Is there any law(s) that actully define encryption? > >At it's very basics encryption is taking a group of 1's & 0's converting them into a different group of 1's & 0's and providing a mecanisim to change them back to the original group of 1's & 0's. > >>From a legal standpoitnt how is PGP any different than PKZIP? How does the law make a diference between an "encryption" program and a "compression" program other than the fact that the encryption program is advertized as encryption and the compression program is advertized as compression?

1 0

No Subject
by Bovine Remailer 17 Dec '03

17 Dec '03

Tim C. May has been beaten up numerous times by fellow prostitutes for driving blow job prices down.

1 0

allow me to state the obvious....
by SUCRUM22_at_INDY-ADP＠smtp-gw.cv62.navy.mil 17 Dec '03

17 Dec '03

i am your average joe who uses the computer for work and e-mail and the occasional jaunt into the internet. going along reading this whole crypto-anarchy thing makes me want to cry. the whole point of cryptography is getting info from my eyes to yours. period. you can say that "illegal" information passes along the internet, but hello people - illegalities have been going on since long before the invention of the computer (or even the notion of cryptography - if i may stop to point out the obvious). the only reason _i_ use encrypted stuff is because i don't want my nosy sysadmin reading my mail. its that simple. think about it. how many times is your e-mail handed off? when sent it naturally follows the most convenient path to its destination, and even anonymous re-mailers (can) keep a hard copy of the messages that cross their connections with the original address included. you can go off into spoofing address and so on, but your average joe may (or may not) have the time or knowledge (much less the motivation) to do that. keep that in mind before you go saying that crypto is a good/bad thing. ---------------------- SUCRUM22(a)cv62.navy.mil ----------------------- a calculated risk based on the possible consequence of an action is better than a haphazard one based on poor judgment or ignorance --------------------------------------------------------------------- Don't confuse my views with those of the DoD or the United States Navy

5 4

Re: Information [for new PGP user]
by Paul Bradley 17 Dec '03

17 Dec '03

> >I'll bet you can't find 10 out of 1,000 users who have read the total source, > >let alone comprehended and validated it. > > Depending on the system, compiler and version of PGP, compilation may or > may not function as expected. I know, I class myself as quite an experience programmer (though I haven`t done a lot of code recently) but I spent several days weeding through the bugs and it still wouldn`t compile on Borland C++ V4.51 so I just read the core code and hoped the executable was really derived from that code. I`m normally more paranoid than that but I just don`t have the time to spend getting borland to compile it. It won`t even compile on my system with the borland makefile than comes with PGP. Has anyone else on here managed to get it to compile under Borland and how long did it take them???? Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

5 6

New Linux-IPSEC mailing list for the S/WAN project
by John Gilmore 17 Dec '03

17 Dec '03

I'm sending you this message because you might be interested in helping to build or test or document, or teach about, my S/WAN project to secure 5% of the net by Christmas. There is now a public mailing list which you can join to find out what's happening in the project, get the latest software for testing, ask questions, etc. To join the list, send mail to: linux-ipsec-REQUEST(a)clinet.fi The email should contain a single line that just says: subscribe This mailing list will have discussions, not just announcements, and will be very technical (not political or social). The S/WAN project's goal is to provide free software that makes it easy to encrypt a site's net traffic automatically, and to encourage acceptance and deployment of this software. My original timetable aimed to have 5% of the net encrypted by Christmas. We will not meet this goal; it was romantic, but very ambitious. Instead, my current goal is to have our first complete software release available by Christmas, which people can use to encrypt 5% of the net in the following months. This is still an ambitious goal. In case you haven't been following developments in the project, there's a new version of the Domain Name System BIND code that you can install to enable your site to publish its keys to the net. Our software to USE the keys isn't ready yet -- but it usually takes weeks or months to get your domain administrator to update their version of BIND, so it's a great idea to get them started now. There's also a very new test version of the Linux kernel code that implements low-level packet encryption. This code requires manual configuration, and only implements single-DES rather than triple-DES. It has a long way to go. But it enables you to manually set up encrypted tunnels to other sites around the Internet (such as other sites in your company, or which you collaborate with). Shaking out this layer and making it solid and bulletproof is important, so we can depend on it as we build the higher layers that provide encrypting tunnels automatically and opportunistically. Details on how to get the test software are in the web page at: http://www.cygnus.com/~gnu/swan.html I hope that having a mailing list for the helpers and implementers will make it easier for everyone to stay up to date, and easier for everyone to contribute. If we all push in the same direction, we may have 5% of the net traffic encrypted by Easter... John Gilmore PS: The new Linux-IPSEC mailing list is graciously hosted in Finland by Tatu Ylonen, author of ssh, another good piece of cryptographic software. Linux is the free operating system on which the project is being built. IPSEC is the set of (Internet Protocol SECurity) protocols which add packet-level encryption to TCP/IP.

2 1

Re: Why is cryptoanarchy irreversible?
by Paul Bradley 17 Dec '03

17 Dec '03

> It appears to be widely believed that cryptoanarchy is irreversible. > Everybody believes that the race to deploy or forbid strong cryptography > will define the outcome for a long time. This is certainly my position... > I can't think of a reason why this should be so. > If the wide use of strong cryptography results in widely unpopular > activities such as sarin attacks and political assassinations, it > would not be all that hard to forbid it, even after deployment. I don`t think so. The point is that cryptoanarchic ideals and strong cryptography will be too widely deployed to remove them from circulation. Also I believe that the sheer amount of traffic over the internet will make it virtually impossible to find encrypted messages even if strong encryption is outlawed. And last but not least the system of anonymous remailers and the ease with which return addresses can be forged means people using strong cryptography couldn`t be traced anyway. Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

1 0

French Smart Card Firms in Merger Deal
by Dildophus 17 Dec '03

17 Dec '03

NEW YORK -- Schlumberger Electronic Transactions, a leading French smart card company, said Wednesday it signed a letter of intent to acquire Soliac, a unit of the French processing company Sligos that makes magnetic stripe and smart cards. The Schlumberger company's agreement to buy Solaic points to further consolidation in the smart card industry, which has seen a number of joint ventures and acquisitions in the past year. Solaic has manufacturing facilities in France and Spain. Its marketing operations are primarily in those countries, Germany, and the United Kingdom. The proposed transaction, which is subject to the signing of definitive agreements, would include a partnership to develop smart-card-based systems.

1 0

FICS Group to Build On Microsoft Platform
by Dildophus 17 Dec '03

17 Dec '03

BRUSSELS -- FICS Group, an international banking systems company, announced a major electronic delivery initiative based on Microsoft Corp. technology. Expanding on the personal computer and telephone modes of banking service delivery, FICS said it is expanding into smart phones, personal digital assistants and wireless phones, electronic wallets, and Internet-based services. Microsoft platforms play a major role in FICS offerings, and Microsoft's Activex technology will be employed in Internet development. "The fact that FICS has chosen Windows NT as one of its key development platforms and adheres to the Open Financial Connectivity standard makes the company a valuable partner for Microsoft," said Ashley Steele, the Redmond, Wash., software company's marketing manager for the banking industry. FICS also participates in the Tandem Computers Inc. "payments factory" program, also based on Windows NT. Separately, FICS said it entered into a strategic partnership with Swift, the global banking telecommunications network. As a Level 3 partner, FICS is one of a few select firms that exchange strategic information with Swift and promote each other's products.

1 0

Re: No More
by brazie＠ipa.net 17 Dec '03

17 Dec '03

At 06:53 PM 11/8/96 -0500, YoungSik Jeong wrote: >I want take off mail list > > >so do i, i tried but i keep getting all this damn mail

2 1