December 2003 - cypherpunks-legacy

AHHHHHHHHHHHHHHHHHH!!!!!!!
by Sentient Demon 17 Dec '03

17 Dec '03

hOW DO i GET OFF THIS LIST?!!!!!!!!!!

2 1

URGENT: Fri 10Jan 9:30AM Wash,DC: Karn appeals, come to the hearing!
by John Gilmore 17 Dec '03

17 Dec '03

[Friends of crypto freedom should definitely attend. The courtroom holds approximately 50 people, and we'd like to fill it. Show Judges Williams, Ginsburg and Rogers the importance of the case. This is the first time that a crypto export case has hit a Court of Appeals, and your rights are very much at stake here. If you're in the DC metropolitan area, come on out on Friday morning! Show Phil Karn you support him as he challenges the export controls. --John] RESEARCHER KARN APPEALS, SEEKING TO OVERTURN IRRATIONAL ENCRYPTION RULES "Books are OK to publish, floppies are not" policy Washington, January 8 - Laywers for researcher Philip R. Karn, Jr. will argue in court this Friday that Government restrictions on distribution of encryption software violate the First and Fifth Amendments of the Constitution, and are "arbitrary, capricious and invalid" regulations. This week's hearing, on January 10, 1997 at 9:30AM in the US Court of Appeals for the District of Columbia Circuit, is open to the public at 333 Constitution Avenue, Washington DC. The Government will argue that its rules are its own business, which courts should not oversee, and that it is legitimate to regulate free speech and publication when the government is uninterested in suppressing the content thereof. (The government actually has a strong interest in suppressing the public's ability to understand and deploy strong cryptography, but has managed to convince the district court of the opposite.) The lawsuit is complicated by the Government's introduction last month of new encryption regulations. President Clinton ordered on November 15 that the regulations be moved from the State Department to the Commerce Department. Over Christmas, the Clinton Administration published its new Commerce Department regulations, which are effectively identical to the State Department regulations, and put them into immediate effect. Mr. Karn's case only named the State Department. In an unusual switch, the Government is arguing that it should be able to replace the State Department with the Commerce Department as a defendant, in the hope of keeping the case alive. (Most defendants would be happy to have the case disappear. The State Department appears to be hoping they will get a better decision in this case than in related cases.) The State Department regulations at issue were struck down in December by Judge Marilyn Hall Patel in a similar case brought by Professor Daniel Bernstein in San Francisco. Judge Patel called the regulations a "paradigm of standardless discretion" which required Americans to get licenses from the government to publish information and software about encryption. No court has yet ruled on the new Commerce Department regulations, which include the same provisions that were declared unconstitutional. "This case clearly raises an issue of fundamental importance to cryptographers and computer programmers generally," said Kenneth Bass, lead attorney in the case. "The fundamental issue is how the courts will treat computer programs. Books are entitled to the full protection of the First Amendment, but the trial judge in this case decided that source code on a diskette does not enjoy that same protection. Programmers immediately recognize the utter irrationality of this distinction. We now will see whether the appeals courts will also see it that way." "Phil Karn's case illustrates both the irrationality of the encryption rules and the depths of the bureaucratic mazes which protect them," said John Gilmore, co-founder of the Electronic Frontier Foundation, which backed the suit. "The idea that the First Amendment protects the author of a book, but not the author of an identical floppy disk, is ridiculous. All books, magazines, and newspapers are written on computers today before print publication, and many are also published online. Yet here we have Government lawyers not only defending their right to regulate machine-readable publication, but also arguing that the courts are not permitted to re-examine the issue. Their argument amounts to `Trust us with your fundamental liberties'. Unfortunately, a decade of NSA actions have amply demonstrated that they are happy to sacrifice fundamental liberties when it gives them an edge in some classified spy program. Unless there's a clear and present danger to our nation's physical security (which we have seen no evidence of), our citizens' right to speak and publish freely is much more important to American national security than any top-secret program." Civil libertarians have long argued that encryption should be widely deployed on the Internet and throughout society to protect privacy, prove the authenticity of transactions, and improve computer security. Industry has argued that the restrictions hobble them in building secure products, both for U.S. and worldwide use, risking America's current dominant position in computer and communications technology. Government officials in the FBI and NSA argue that the technology is too dangerous to permit citizens to use it, because it provides privacy to criminals as well as ordinary citizens. Background on the case Mr. Philip Karn is an engineer with a wide and varied background in radio and wire communications. He has given many years of volunteer work in the amateur radio service, amateur satellite service, and in the Internet community. He is the author of the freely available "KA9Q" internet software for DOS machines, which forms the basis of many amateur radio experiments as well as several successful commercial products. He has written and given away various cryptographic software, including one of the world's fastest versions of the Data Encryption Standard (DES). Phil also did the initial research into encrypting Internet traffic at the packet level. Mr. Karn's home page is at http://www.qualcomm.com/people/pkarn/ . In 1994, author Bruce Schneier published _Applied Cryptography_, a best-selling encryption textbook which included some fifty pages of encryption source code listings, including very strong algorithms such as "Triple-DES". As an civil libertarian, Mr. Karn asked the State Department whether the book could be exported; they replied that it was in the public domain and could therefore be exported. Mr. Karn then created a floppy disk containing the source code from the book, and asked if the floppy could be exported. The State Department determined in May 1994 that the floppy was a munition. Mr. Karn would need to register as an arms dealer to be able to export the disk. After several administrative appeals, Mr. Karn filed suit in September 1995. The suit asks a court to declare that the decision was invalid because the distinction between publication on paper and publication on floppies has no rational basis, and because the decision violates Mr. Karn's right to publish the floppy. Judge Charles R. Richey dismissed the case in a strongly-worded 36-page opinion. "The plaintiff, in an effort to export a computer diskette for profit, raises administrative law and meritless constitutional claims because he and others have not been able to persuade the Congress and the Executive Branch that the technology at issue does not endanger the national security. This is a "political question" for the two elected branches under Articles I and II of the Constitution." Mr. Karn, whose effort was motivated by concern for civil rights rather than profit, appealed. This week's hearing is the first public hearing in his appeal case. The regulations at issue in the case, which prevent American researchers and companies from exporting cryptographic software and hardware, are a relic of the Cold War. The secretive National Security Agency has built up an arcane web of complex and confusing laws, regulations, standards, and secret interpretations for years. These are used to force, persuade, or confuse individuals, companies, and government departments into making it easy for NSA to wiretap and decode all kinds of communications. Their tendrils reach deep into the White House, into numerous Federal agencies, and into the Congressional Intelligence Committees. In recent years this web is unraveling in the face of increasing visibility, vocal public disagreement with the spy agency's goals, commercial and political pressure, and judicial scrutiny. ABOUT THE ATTORNEYS Lead counsel on the case are Kenneth C. Bass III and Thomas J. Cooper of the Washington law firm of Venable, Baetjer, Howard & Civiletti, who are offering their services pro bono. ABOUT THE ELECTRONIC FRONTIER FOUNDATION The Electronic Frontier Foundation (EFF) is a nonprofit civil liberties organization working in the public interest to protect privacy, free expression, and access to online resources and information. EFF is funding the expenses in Mr. Karn's case. The full text of the lawsuit and other paperwork filed in the case is available from Phil Karn's web site at: http://www.qualcomm.com/people/pkarn/export/index.html SOURCE: Electronic Frontier Foundation CONTACT: Ken Bass, lead attorney, +1 202 962 4890, kbass(a)venable.com; or Shari Steele, EFF Staff Attorney, +1 301 375 8856, ssteele(a)eff.org; or John Gilmore, EFF Board Member, +1 415 221 6524, gnu(a)toad.com

1 0

Re: [ADMINISTRATIVIUM] Sphere packings
by nobody＠replay.com 17 Dec '03

17 Dec '03

Timmy Maypole the self-admitted child molester possesses a rudimentary dick less than one inch long, half the size of his mother's clitoris, that barely makes a fistful. Thereby hangs the root of this Jew-hating sissy's sick fixation on little boys and Usenet forgeries. <<<< o(0-0)o -ooO-(_) Ooo-- Timmy Maypole

1 0

SSL Insecurity
by Rick Osborne 17 Dec '03

17 Dec '03

A while back, someone posted an article on the insecurity of Netscape's implementation of SSL. Can someone send me back that article, or a few pointers as to where I can find related information? Thanks, Rick Rick Osborne / osborne(a)gateway.grumman.com / Northrop Grumman Corporation ------------------------------------------------------------------------- "Get that finger out of your ear! You don't know where that finger's been!"

3 2

PGP 2.6.3i
by AaronH4321＠aol.com 17 Dec '03

17 Dec '03

Thanks, I have been meaning to ask someone about that. It is billed as the International Version. I see it all over the place, except MIT. Is there anyway this could be a weakened version? How can this be checked? And if it isn't released by Phil or MIT how can it be called PGP? Aaron.

1 0

REMINDER: C2Net Party: January 24th
by sameer 17 Dec '03

17 Dec '03

http://www.c2.net/party/ C2NET is having a party January 24th at 654 Mission St. San Francisco assorted snacks, a cash bar and live music by WEIRD BLINKING LIGHTS with dj accompaniment by DJ FLINT and DJ PINNIPED will be present for your enjoyment Festivities begin at 8PM We hope to see you there --- Directions: >From the West or North: Take Oak Street East. Turn left on Laguna. Turn right on Fell. Fell crosses Market and becomes 10th Street. Merge left within one block of Market. Turn left on Mission. >From the East: Take Hwy 80 West across the Bay Bridge. Take the first exit on the left (Harrison Street exit) Turn left on Harrison. Turn right on 3rd Street. Turn right on Mission. >From the South: Take Hwy 280 North. Follow 280 to its end at 4th & King Streets. Follow King Street to its end at 3rd Street. Turn left on 3rd. Turn right on Mission. >From BART: Take BART to the Montgomery station Walk south on New Montgomery Street Turn right on Mission. Parking: There is a commercial parking lot across the street on Mission and another one on the corner of 3rd and Mission.

1 0

NEW RELEASE: Universal Data Cryptography Module V2.0
by DataETRsch＠aol.com 17 Dec '03

17 Dec '03

Hello, Greetings! I am Jeremy K. Yu-Ramos, president of DataET Research, Data Engineering Technologies. I am sending you this message to let you know that DataET Research has recently initiated the distribution of UDCM, Universal Data Cryptography Module. UDCM implements a revolutionarily new, extremely advanced and sophisticated, digital data encryption algorithm named IMDMP, Integrated Mathematical Data Manipulation and Positioning. Extensive research shows that IMDMP is more advanced than DES, RSA, IDEA, and PGP. UDCM (the IMDMP algorithm)... o Is a royalty-free Windows DLL module featuring advanced cryptography. o Contains more than 140 procedures and functions. o Is a very cost-effective size of only 57 kilobytes. o Implements the IMDMP encryption algorithm. o Is more advanced than all of the industry standard encryption algorithms. o Allows encryption keys as large as 256 bytes (2048 bits). o Includes 18 sub-algorithms. o Processes all forms of binary and ASCII files. o Allows multiple encryption layer levels. o Has absolutely no back-doors or magical keys. o Does not store encryption keys in files. o Processes files as large as 2,147,483,390 bytes. o Has a 100% data preservation rating. o Includes Y2K compliant time and date locking features. o Has NCSC compliant data cleaning and wiping capabilities. o Includes file specific unique encryption features. o Includes file authentication guard features. o Includes unique encryption signaturing features. o Includes data importance and sensitivity stamping features. UDCM can be accessed through programs developed with popular application and database programming languages and environments such as: C, C++, Visual Basic, PowerBuilder, Delphi, OOP Pascal, Turbo Pascal, SmallTalk, dBase, Paradox, Access, Sybase, Oracle, etc. DataET Research has released a shareware version of UDCM named UDCM V2.0. To download UDCM V2.0 for free, please go to: http://members.aol.com/dataetrsch/udcm.html. I hope you will consider applying UDCM in the software you develop. Thank-you very much for your time. Sincerely, Jeremy K.Yu-Ramos President DataET Research Data Engineering Technologies

1 0

SafePassage
by Ares GodOfWar 17 Dec '03

17 Dec '03

does anyone happen to have a copy of safepassage, the web proxy layin around??? i am in a big bind & i need it ;]

1 0

New Release: Universal Data Cryptography Module V2.0
by DataETRsch＠aol.com 17 Dec '03

17 Dec '03

Hello, Greetings! I am Jeremy K. Yu-Ramos, president of DataET Research, Data Engineering Technologies. I am sending you this message to let you know that DataET Research has recently initiated the distribution of UDCM, Universal Data Cryptography Module. UDCM implements a revolutionarily new, extremely advanced and sophisticated, digital data encryption algorithm named IMDMP, Integrated Mathematical Data Manipulation and Positioning. Extensive research shows that IMDMP is more advanced than DES, RSA, IDEA, and PGP. UDCM (the IMDMP algorithm)... o Is a royalty-free Windows DLL module featuring advanced cryptography. o Contains more than 140 procedures and functions. o Is a very cost-effective size of only 57 kilobytes. o Implements the IMDMP encryption algorithm. o Is more advanced than all of the industry standard encryption algorithms. o Allows encryption keys as large as 256 bytes (2048 bits). o Includes 18 sub-algorithms. o Processes all forms of binary and ASCII files. o Allows multiple encryption layer levels. o Has absolutely no back-doors or magical keys. o Does not store encryption keys in files. o Processes files as large as 2,147,483,390 bytes. o Has a 100% data preservation rating. o Includes Y2K compliant time and date locking features. o Has NCSC compliant data cleaning and wiping capabilities. o Includes file specific unique encryption features. o Includes file authentication guard features. o Includes unique encryption signaturing features. o Includes data importance and sensitivity stamping features. UDCM can be accessed through programs developed with popular application and database programming languages and environments such as: C, C++, Visual Basic, PowerBuilder, Delphi, OOP Pascal, Turbo Pascal, SmallTalk, dBase, Paradox, Access, Sybase, Oracle, etc. DataET Research has released a shareware version of UDCM named UDCM V2.0. To download UDCM V2.0 for free, please go to: http://members.aol.com/dataetrsch/udcm.html. I hope you will consider applying UDCM in the software you develop. Thank-you very much for your time. Sincerely, Jeremy K.Yu-Ramos President DataET Research Data Engineering Technologies

3 2

IW-D Report
by John Young 17 Dec '03

17 Dec '03

We've digtized the 200-page "Information Warfare- Defense" report by the Defense Science Board. http://jya.com/iwd.htm It's quite informative about large-scale planning for coping with the threats of information age -- encryption among many other political, economic, technical and legal issues. There is overlap with the NRC cryptography report on prospects for technological fixes to security, but this report envisions a much more comprehensive plan. (William Ware served on both panels; Stewart Baker on the IW-D.) Comparison to threat models of the Center for Disease Control, FEMA and the National Drug Intelligence Center is provocative (Appendix D). Well worth reading for a preview of the next century's opportunities for wealth, power and infamy. ----- REPORT OF THE DEFENSE SCIENCE BOARD TASK FORCE ON INFORMATION WARFARE - DEFENSE (IW-D) November 1996 TABLE OF CONTENTS EXECUTIVE SUMMARY 1.0 INTRODUCTION 2.0 ENVIRONMENT 2.1 Growing Dependency, Growing Risk 2.2 Information Warfare 2.3 The Infrastructure 2.4 Threat 3.0 OBSERVATIONS 4.0 WHAT SHOULD WE DEFEND? 5.0 HOW SHOULD WE DEFEND? 5.1 Procedures, Processes and Mechanisms 5.2 Strategy 6.0 RECOMMENDATIONS 6.1 Designate an Accountable IW Focal Point 6.2 Organize for IW-D 6.2.1 Establish a Center for Intelligence Indications and Warning, Current Intelligence, and Threat Assessments 6.2.2 Establish a Center for IW-D Operations 6.2.3 Establish a Center for IW-D Planning and Coordination 6.2.4 Establish a Joint Office for System, Network and Infrastructure Design 6.2.5 Establish a Red Team for Independent Assessments 6.3 Increase Awareness 6.4 Assess Infrastructure Dependencies and Vulnerabilities 6.5 Define Threat Conditions and Responses 6.6 Assess IW-D Readiness 6.7 "Raise the Bar" with High Pay-Off, Low-Cost Items 6.8 Establish and Maintain a Minimum Essential Information Infrastructure 6.9 Focus the R&D 6.10 Staff for Success 6.11 Resolve the Legal Issues 6.12 Participate Fully in Critical Infrastructure Protection 6.13 Provide the Resources 7.0 SUMMARY APPENDIX A: Threat Assessment APPENDIX B: National Intelligence Exploitation Architecture APPENDIX C: A Taxonomy for Information Warfare? APPENDIX D: Organizational Models D.1 Centers for Disease Control and Prevention D.2 Federal Emergency Management Agency Federal Response Plan D.3 National Drug Intelligence Center APPENDIX E: Think Pieces E.1 Information Infrastructure Assurance Principles E.2 "Raise the Bar" Exercise APPENDIX F: Technology Issues APPENDIX G: List of Acronyms APPENDIX H: Glossary

1 0