December 2003 - cypherpunks-legacy

Re: PICS is not censorship
by Lucky Green 17 Dec '03

17 Dec '03

At 07:18 PM 12/8/96 -0800, Thaddeus J. Beier wrote: >I think that most of the PICS labels that are on web pages will be those >generated by scripts from groups like RSACi. (http://www.rsac.org) >These groups have contracts that require you to not lie when you fill out their >questionnaires, and if you do lie, you are in breach of contract and should expect >to be sued by them. So what is going to happen if I generate one of their tags from scratch without filling out their questionnaire? Are they going to sue me, claiming that they own an html tag? Can one own an html tag? -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://ourworld.compuserve.com/homepages/justforfun/prime.htm

1 0

Re: PICS is not censorship
by Greg Broiles 17 Dec '03

17 Dec '03

At 08:37 PM 12/8/96 -0800, Lucky Green wrote: >>>> At 07:18 PM 12/8/96 -0800, Thaddeus J. Beier wrote: >I think that most of the PICS labels that are on web pages will be those >generated by scripts from groups like RSACi. (http://www.rsac.org) >These groups have contracts that require you to not lie when you fill out their >questionnaires, and if you do lie, you are in breach of contract and should expect >to be sued by them. So what is going to happen if I generate one of their tags from scratch without filling out their questionnaire? Are they going to sue me, claiming that they own an html tag? Can one own an html tag? "Owning" an html tag is oversimplifying things; but claiming that you've been rated a certain way by a certain group (if you haven't) could potentially create fraud, trademark, and (maybe) copyright problems - an easy analogy is to the "UL" and "Good Housekeeping" symbols displayed on some consumer goods. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

1 0

Protect against physical theft of the harddisk ??
by Pavel Korensky 17 Dec '03

17 Dec '03

Hello, I have one problem which I would like to consult with you. I need to protect the data on the computer harddisk against physical theft. Current situation: Computer with several harddisks - approx. 9 GB. On this computer, the following OS are used: Linux, DOS, Windows NT. The data on this computer must be accessible from all operating systems. Encryption of files must be transparent to user and encryption algorithm must be "strong". Because I am not able to find any disk encryption software which is able to run on all these platforms, I decided to use the following temporary solution: Add one more computer with Linux OS. On this computer, there will be only a small root partition with necessary Linux components. All other disk space will be encrypted with IDEA, using the /dev/loop. This machine will be some kind of secure file server. On the second machine, where the user works, there will be partitions with operating systems, necessary utilities and the TCP/IP stack for DOS/Windows, NT and Linux. The data and application disks will be mounted via NFS and user will work with files from file server. The computers will be interconnected with Fast Ethernet. This mini-network is NOT connected to the Internet, so the NFS (in)security should not be a problem. Also, both computers will be placed in the same room (distance approx. 3 m), so there should be no problem with tapping/data capturing on the Fast Ethernet connection. I have the following questions. Can anybody see some major security hole in this system ? How fast will be this system ? Anybody has any idea if there is some more sophisticated solution for this problem ? Anybody heard about some strong disk encryption which is able to rund under Windows NT, Linux and DOS ? It seems that the Win NT are the major problem. I am not able to find any disk encryption for NT. Anybody is able to port Secure File System to Windows NT ? I am trying to port this program under Linux, but I am not the NT system programmer. Thanx for any comments, help, ideas etc. Best regards PavelK -- **************************************************************************** * Pavel Korensky (pavelk(a)dator3.anet.cz) * * DATOR3 Ltd., Modranska 1895/17, 143 00 Prague 4, Czech Republic * * PGP key fingerprint: 00 65 5A B3 70 20 F1 54 D3 B3 E4 3E F8 A3 5E 7C * ****************************************************************************

1 0

A Message From Sue
by sue1968＠ix17.ix.netcom.com 17 Dec '03

17 Dec '03

Hi, Please excuse this intrusion into your mailbox, but I would like to tell you about something which will be of interest to you. About a year ago, I purchased two personalized children's books for my kids and they have been such an incredible hit with them that the parents of several of their friends have gone out and purchased the books for their own kids. I've also ended up buying several more as gifts. This gave me the idea of becoming a distributor for these great books. The books are all made with highly durable, hard cover bindings and have tons of full color illustrations. Your child's name and the names of their friends are woven into the story and appear on every page. They not only hear the story, they're actually a part of it and no other book has inspired my children to want to read more than these books have. Whether it's for your own child or for another child you care about, these books make the perfect gift, especially with the holiday season approaching. It's impossible for me to describe these books well enough to do them justice, so instead, I would like to invite you to visit my web site at: http://www.steppingstones.com <A HREF="http://www.steppingstones.com">Click here to go to the website www.steppingstones.com</A> There you will find pictures of each of the books I offer and a more complete description. I'm so sure you'll love these books as much as I do, that I'm offering a 100% money back guarantee if you're not completely satisfied. We are currently offering a Holiday Special: For every book you order at the regular price of only $12.95 you can order another for 1/2 price!!! In order to claim this special offer, you must include Invitation # 192 on your order form. Note: All orders for Christmas must be placed by Wednesday December 18th in order to ensure on time delivery!!!!!!!!!! Thanks for taking the time to read this. If you are not interested, please pass it on to a friend who might be, or simply hit delete. Have a great day!!! Sue :-)

4 3

Re: Please post Eudora PGP plugin URL
by Alan Olsen 17 Dec '03

17 Dec '03

At 03:52 PM 12/8/96 -0800, Lucky Green wrote: >>If you want to be automatically notified of new versions, send e-mail to >>gt6525c(a)prism.gatech.edu with the subject of "eppi news", and the following >>message body: > >Just FYI, while the plugin is still available, email to this address has >been bouncing for weeks. It is therefore impossible to submit bug reports >or subscribe to the EPPI mailing list. If somebody on this list knows the >current address of the EPPI author, please post it. The current address of the author of the Eudora plug-in is Damon Gallaty <dgal(a)cad.gatech.edu>. I have been coorisponding with him on a couple of odd problems with the software. (Implemenation issues more than bugs.) He has been very responsive. (In fact, I need to send him another bug report tonight about failing to deal with line wrap in signatures.) So far the set of plug-ins have been very useful. I have been pretty happy with it so far. (It does have the problem of not word wrapping before applying the PGP sig and defaulting to the last key if you do not set one in config.txt.) All in all, worth the download. --- | "Spam is the Devil's toothpaste!" - stuart(a)teleport.com | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{'alpha'} = '<alias(a)alpha.c2.org> alpha pgp'; $remailer{'nymrod'} = '<nymrod(a)nym.jpunix.com> alpha pgp'; $remailer{"lead"} = "<mix(a)zifi.genetics.utah.edu> cpunk mix pgp hash latent cut ek"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"lucifer"} = "<lucifer(a)dhp.com> cpunk mix pgp hash latent cut ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash latent cut ek"; $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp pgponly hash cut ksub reord"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"balls"} = "<remailer(a)huge.cajones.com> cpunk pgp hash latent cut ek"; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp pgponly hash latent cut ek"; $remailer{"middle"} = "<middleman(a)jpunix.com> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"dustbin"} = "<dustman(a)athensnet.com> cpunk pgp hash latent cut ek mix reord middle ?"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"death"} = "<x(a)deathsdoor.com> cpunk pgp hash latent post"; $remailer{"reno"} = "<middleman(a)cyberpass.net> cpunk mix pgp hash middle latent cut ek reord ?"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix) (weasel squirrel) The alpha and nymrod nymservers are down due to abuse. However, you can use the nym or weasel (newnym style) nymservers. The cyber nymserver is quite reliable for outgoing mail (which is what's measured here), but is exhibiting serious reliability problems for incoming mail. The squirrel and winsock remailers accept PGP encrypted mail only. 403 Permission denied errors have been caused by a flaky disk on the Berkeley WWW server. This seems to be fixed now. The penet remailer is closed. Last update: Mon 9 Dec 96 6:45:04 PST remailer email address history latency uptime ----------------------------------------------------------------------- cyber alias(a)alias.cyberpass.net +***+**+*+** 32:58 99.98% jam remailer(a)cypherpunks.ca ************ 14:36 99.97% nym config(a)nym.alias.net ####***#*### :48 99.97% lucifer lucifer(a)dhp.com ++++++++++++ 38:32 99.96% lead mix(a)zifi.genetics.utah.edu +++*+++-++-+ 1:00:18 99.93% middle middleman(a)jpunix.com -.---------- 4:01:26 99.93% reno middleman(a)cyberpass.net -.--------- 3:15:16 99.74% squirrel mix(a)squirrel.owl.de --+++-+++++ 1:40:17 99.68% dustbin dustman(a)athensnet.com __.-+++-++++ 7:14:49 99.66% weasel config(a)weasel.owl.de --+++-+++-+ 1:39:24 99.50% haystack haystack(a)holy.cow.net #** **#*#**+ 4:58 99.42% replay remailer(a)replay.com +**** *-- -* 1:22:47 99.41% exon remailer(a)remailer.nl.com #*#***#+#### 6:25 99.29% extropia remail(a)miron.vip.best.com -- -- .. -- 9:05:48 94.66% winsock winsock(a)rigel.cyberpass.net - - ----- 3:43:35 93.66% balls remailer(a)huge.cajones.com #**** 1:37:33 74.17% mix mixmaster(a)remail.obscura.com ._.--++-. 8:37:03 71.73% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

OECD crypto policy draft guidelines
by Robin Whittle 17 Dec '03

17 Dec '03

There is an ad-hoc group of government representatives (called an "expert group" actually) working on an OECD set of cryptography policy guidelines. They have a big five day meeting coming up starting 12 December in Paris. A September draft of their guidelines was leaked and put on a WWW site in Austria: http://www.quintessenz.at/Netzteil/OECD/index.html as a Word 6 file. I got it, turned it into HTML and put it on my site with comments. http://www.ozemail.com.au/~firstpr Recently, someone from the OECD crypto secretariat emailed me indicating they had read my comments and found them reasonably constructive. I have since added more comments, which I emailed to the secretariate person. If anyone has something constructive to convey to them, email me and I will put you in touch with them. I understand there will be an article on the debate in the next weekly edition of The European newspaper. The people at Quintessenz apparently have a later draft which they are scanning and will put up on their site ASAP. - Robin . Robin Whittle . . http://www.ozemail.com.au/~firstpr firstpr(a)ozemail.com.au . . 11 Miller St. Heidelberg Heights 3081 Melbourne Australia . . Ph +61-3-9459-2889 Fax +61-3-9458-1736 . . Consumer advocacy in telecommunications, especially privacy . . . . First Principles - Research and expression - music, . . music industry, telecommunications . . human factors in technology adoption. . . . Real World Interfaces - Hardware and software, especially . . for music .

1 0

[Fwd: take me off the list]
by Rosario Family 17 Dec '03

17 Dec '03

me too samiam(a)coqui.net To: cypherpunks(a)toad.com Subject: take me off the list From: Bryondp(a)aol.com Date: Sun, 8 Dec 1996 19:47:48 -0500 Sender: owner-cypherpunks(a)toad.com take me off the list

1 0

Malaysian Netropolis and Net-regs, from The Netly News
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Mon, 9 Dec 1996 09:15:12 -0800 (PST) From: Declan McCullagh <declan(a)well.com> To: fight-censorship(a)vorlon.mit.edu Subject: Malaysian Netropolis and Net-regs, from The Netly News The Netly News December 9, 1996 http://netlynews.com/ The Malaysian Solution By Declan McCullagh (declan(a)well.com) My first thought when I arrived in Kuala Lumpur was that it was dirty, at least compared to whisper-clean Singapore, where I had just been. Yet the city was fully alive -- not just with hawker stalls but with a newfound sense of optimism. That's because Malaysia, long a sleepy jungle backwater, is carefully preparing an area just south of the capital to be the Asian technology center, a no-taxes-here free trade zone, the place to be for all things cyber. It will be patterned after Penang, an island off Malaysia's northwest coast that's home to one of the largest collections of chip manufacturers in the world. The way Prime Minister Mahathir Mohamad describes it, fiber will line the streets of the $8 billion "Multimedia Super Corridor" and dollars will flow into the coffers of Western businesses that settle here. Malaysia is busy crafting a Netropolis. Dr. Tommi Chen, the CEO of asiapac.net, explains the government's plan to me over satay and bowls of chee cheong fun. We're waiting out the monsoon rain in one of the countless Malay-Chinese eateries in Petaling Jaya, a town about 15 miles from the capital, Kuala Lumpur. "This region is exploding," he says. "Everyone is competing to be the information-technology hub. The government is trying to attract the best to create another Silicon Valley." Sun Microsystems, Ernst & Young and Microsoft have already announced plans to shift Asian operations to this tropical city. That influx will doubtless be hastened in February when intellectual property and digital signature laws are set to be introduced. To attract firms, the government is unabashedly pro-business. "I think Malaysia will leapfrog other countries in the region as a business center," Chen says. "The prime minister and the deputy prime minister championed the Internet themselves." Yet just like everywhere else that embraces rapid datafication, a Net connection brings with it overseas ideas and values that alarm authorities in this strict Islamic state, which still refuses to sign the International Declaration of Human Rights and has a police force that can indefinitely detain individuals deemed a threat to national security. In a country where chaste kisses -- a tepid buss on the cheek! -- are chopped out of television broadcasts, what's a poor government censor to do when images from alt.binaries.pictures.erotica.pornstar flow through Malaysian cyberspace? The answer may lie in the history books. North of Singapore, south of Thailand, straddling the South China Sea, Malaysia was settled by the British in 1795. The country won its independence in 1957, but an internal Communist uprising quickly destablized the young government. Then, on May 13, 1969, members of a Chinese political party took to the streets of Kuala Lumpur to celebrate a strong showing in a parliamentary election. Malay-Chinese riots flared for four days and hundreds died. The government responded by taking extreme measures to reduce ethnic friction, echoes of which exist today in draconian laws punishing people (such as newspaper editors) who "incite" racial tension. In this atmosphere, Prime Minister Mahathir prospered. Once a critic of autocratic government, he dismantled the formerly independent judiciary after a court threatened his grip on power in 1987. His other censor-happy feats include once banning the Wall Street Journal and the Far East Economic Review. No viable opposition party exists. Lim Guan Eng, an opposition leader, is being tried for sedition. Local newspapers are uniformly pro-government. Issues of Western magazines with articles critical of Mahathir somehow never make it to newsstands. Malaysian netizens have a ready answer for these criticisms of their country. To them, Malaysia may not be ready for the kind of freedoms the West enjoys. "Most Asians see Westerners as being too liberal with too many things," a Chinese manager at a technology firm told me. The country's perception of liberty, I begin to understand, is seen through the lens of communist threats and the May 13 racial riots. With freedom, perhaps, comes instability, uncertainty... chaos. That's why Mahathir is faced with an exquisitely delicate balancing act: providing enough freedom to attract Western companies and American-educated workers accustomed to it, while meeting the demands of powerful Islamic fundamentalists who would put Senator Exon to shame. "The pornography laws exist. They will just extend these laws to the Net," says Chen. The rain has slowed to a light patter. We're almost ready to return to his office, across the street, where a score of 20-somethings work late into the night. He concludes: "Malaysia is Muslim. They have to do it -- they have no choice. They know there is no foolproof control, but they have to do it anyway." My next visit is to the office of Dr. Mohamed Awang Lah, the head of Jaring, the only other licensed and government-approved Internet provider in Malaysia. Like asiapac.net, Jaring is owned by the state. (Three illicit providers, however, apparently exist.) "We block about a hundred web sites, otherwise people complain," Awang Lah tells me. This, then, is the balancing act: "If we are too open, people complain. If we are too closed, people complain." This is an epiphany for me: the Notorious 100, presumably the same web sites blocked by the government of Singapore! It's a token gesture, not too much, not too little. In a lot of ways, it's a far better solution than the U.S. Congress's ham-handed Communications Decency Act, now on the Supreme Court's calendar. "The government will not regulate the Internet," Awang Lah says. "The only part we don't like, that is not acceptable to the culture, to the religion, is pornography... There are also some restrictions on religious content. But there is no intention to regulate the free flow of discussion." (Except for anti-Islam or anti-Mahathir criticisms, I'd wager.) Still, Malaysia seems to follow a pattern of strict laws and lax enforcement. Sure, sexually explicit materials may be banned by law. But just a block from my hotel in downtown Kuala Lumpur, I was able to buy three porn videos -- two American, one Japanese -- for 50 ringgit, or U.S. $7 each, from a sidewalk vendor. Perhaps there's some hope for the Net after all. ###

1 0

Re: The Science Generations
by Ryan Russell/SYBASE 17 Dec '03

17 Dec '03

If I may offer another opinion... I ran a BBS for about three years straight off of floppies on an Apple ][+, without any hardware failures or disk problems. Ryan ---------- Previous Message ---------- To: frantz cc: cypherpunks From: dthorn @ gte.net (Dale Thorn) @ smtp Date: 12/06/96 07:48:16 PM Subject: Re: The Science Generations Bill Frantz wrote: > At 1:12 AM 12/6/96 -0800, Dale Thorn wrote: > >I would guess that those who became and remained successful technically > >(as opposed to becoming "business people") were using HP computers and > >such in the 1970s. I for one was a heavy user then, and PETs, Apples, > >Radio Shack, etc. computers weren't reliable enough for serious work. > I guess those people using VisiCalc on the Apple ][ weren't doing serious > work :-). (Also the many small businesses using these early machines for > AR, Accounting etc.) Me, I was doing OS programming on IBM 370s. Let's talk about some real data processing. dBase II on CP/M computers (or certain proprietary hardware with adaptor cards), circa 1980-1982, would be a good example. If you had the right stuff, say, an HP-120 or HP-125, or even an 80 series with the adaptor, and HP floppy drives, you could process all day long for (years?) with scarcely a hitch. You try to put something like that on an Apple II with Apple floppies (using whatever software was available), and you couldn't do the job. The machine and/or drives would quit in a few days, if not the first day, and might even erase your diskettes in the process (a common occurrence in those days). In early 1985, just for fun, I had an HP-71 pocket computer hooked up to a LaserJet printer and a couple of HP portable floppies, and printed my store's databases on it. Multiple indexes, thousands of records, each index printed complete every day in separate copies for each salesman. I wouldn't dream of trying that with an IBM or Apple floppy system. Hard disks? I *never* heard of an HP microcomputer hard disk crash in those days, short of dropping the computer onto the floor while writing a file. We used to pull the wall plugs on our HP's while writing to a file, with no bad effect. Try that on an IBM or Apple circa <= 1985. Computer hardware? One thing I enjoyed doing for customers was pulling a RAM card out of an HP-86 while it was running a program, then forcing the card back into the slot. Usually pulling the card had no effect, then, putting it back in would generally reset the program. Surge protectors? Never sold one. Not needed with HP's then. An Apple II (like the other toy computers from 1975 to 1982) was a hobbyist computer, which required frequent cleaning and scrubbing internally to keep it running. A pencil eraser was a common tool... And let's not forget Apple and IBM attitudes: When I had HP's, if I ever needed service, HP did it themselves, professionally (using static mats etc.) and promptly. You wouldn't find Apple or IBM offering to repair their own microcomputers in those days (or ever). For good reason! Cost of service? HP's contracts were usually 3% to 5% of the item cost per year, compared to the "industry standard" of 15%. Not a bad deal.

1 0