December 2003 - cypherpunks-legacy

"Secret Power" by Nicky Hager
by Ernest Hua 17 Dec '03

17 Dec '03

I'm sorry about violating etiquette, but it appears that I'm stuck with 14 extra copies of this book, and I really would like to get them off my hands. If you are interested in buying a copy, please let me know. Otherwise, sorry about this spam. Ern

1 0

Welcome to hip-announce
by Majordomo＠asterix.xs4all.nl 17 Dec '03

17 Dec '03

-- Welcome to the hip-announce mailing list! If you ever want to remove yourself from this mailing list, you can send mail to "Majordomo(a)asterix.xs4all.nl" with the following command in the body of your email message: unsubscribe hip-announce cypherpunks(a)toad.com Here's the general information for the list you've subscribed to, in case you don't already have it: [Last updated on: Fri Dec 13 20:30:42 1996] Welcome to HIP announce! This mailinglist will only be used for regular announcements about major developments in the preparation for Hacking In Progress 1997. Only the list-owner will post to this list and it will be guaranteed low-volume. Up-to-date information about the HIP can be found at our website http://www.hip97.nl Please report any problems to info(a)hip97.nl See you at the HIP! Maurice Wessling

1 0

PART-TIME EXECUTIVE INCOME
by sue＠liame.com 17 Dec '03

17 Dec '03

Please put REMOVE in the subject and press reply if you do not wish to receive mail from us again. ********************************************************** PART-TIME EXECUTIVE INCOME WORKING 5-20 HOURS PER WEEK AT YOUR OWN PACE. NEW DIVISION OF A MAJOR (NASDAQ) 93 YEAR OLD PHARMACEUTICAL COMPANY, SEEKS TWO PROFESSIONALS PART-TIME OR FULL-TIME FROM WHEREVER YOU ARE, FOR EXPANSION IN THE UNITED STATES, MEXICO, ASIA, ETC. STOCK OPTIONS ON TOP OF THE MOST LUCRATIVE PAY PLAN IN THE INDUSTRY. FOR FREE AUDIO, CALL OUR 24 HOUR RECORDED MESSAGE NOW. THEN YOU CAN HEAR WHY TOP ENTREPRENEURS, MEDICAL, AS WELL AS, BUSINESS PROFESSIONALS ARE DIVERSIFYING THROUGH US. 24 HR. MESSAGE 1-800-404-9151

1 0

Re: Newt's phone calls
by azur＠netcom.com 17 Dec '03

17 Dec '03

>> The take on this that we won't hear is: "This is outrageous! Why don't >> cell-phones offer encryption to ensure our privacy?" > > Cell-phone encryption is 'essential' for 'important' people. > However, it is 'dangerous' in the hands of the 'citizens' (translate >that >to mean 'schmucks'). > The government doesn't object to crack-dealers having cryptography >capabilities, they just want to make sure that those crack-dealers >work for the CIA (freelancers need not apply). > >Toto When I worked at Cylink we developed a product, called SecureCell which combined a standard analog cellphone (NEC I think) and a version of our SecurePhone. Despite the fact that it could thwart any but the most well funded eavesdropping we only sold a handfull. It was quite pricy (about $6,000) and required a small suitcase to tote, but even so only a few gov't agencies (mostly diplomatic) and execs thought it was worth the trouble. One problem facing such devices are the interruptions caused by cell-to-cell handoffs. These can occur even when stationary. SecureCell, I believe, used off-the-shelf line modems. I've read newer modem technologies (Spectrum and AT&T) have pretty much solved this problem. There's no reason Eric Blossom's phone encryptor can't be readily adapted to cellular to offer a secure and more reasonably priced cellular encryptor. PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Steve Schear | Internet: azur(a)netcom.com Lamarr Labs | Voice: 1-702-658-2654 7075 West Gowan Road | Fax: 1-702-658-2673 Suite 2148 | Las Vegas, NV 89129 | --------------------------------------------------------------------- Internet and Wireless Development 1935 will go down in history! For the first time a civilized nation has full gun registration! Our streets will be safer, our police more efficient, and the world will follow our lead in the future! --Adolf Hitler

4 4

Re: Newt's phone calls
by Bill Stewart 17 Dec '03

17 Dec '03

>>I just caught the news reports of Newt Gingrich's cell phone calls being >>taped by "a little old retired couple" with a scanner. These were then >>given to a congressman, who gave them to a newspaper. Eavesdropping on cellphones is illegal, since there's an expectation of privacy. I don't know if tapping the signalling channel is illegal - it's not eavesdropping on conversations, but it's giving you traffic analysis including locating your victim. Cordless phones don't offer an expectation of privacy, by some legal definition, so it's not illegal, and anyone can listen in with scanners, including police, unless there are state or local laws to the contrary It'd be interesting to test the legal status of digital spread-spectrum cordless phones, which claim on the box to offer privacy, but there probably aren't enough police forces with sufficiently advanced scanners to crack them to make it worth transmitting lots of bait "Yo, Bubba, I hear you've got 10 kilos of dope for sale!" "Yeah, it's $10/gram, I'll bring it by your house at 1234 Main Street." >>The take on this that we won't hear is: "This is outrageous! Why don't >>cell-phones offer encryption to ensure our privacy?" Analog callphones don't. (U.S.) Digital cellphones may offer encryption, though it's really dumbed-down encryption. It'll probably still keep out Beavis and Butthead, and maybe your local police, but not professionals. I've forgotten if the CAVE encryption on John Young's site is the US version, or if the standard we're graciously permitted by our government to use is a different one, but it's about that strength. Phil Karn wrote some time ago about the NSA's armtwisting that bullied the standards committee into coming up with the stuff. > There is a very basic reason that cell phones are not encrypted; > the government does not want them encrypted. Analog cellphones were doing well to work at all, and manufacturers and service providers didn't want to add the complexity of encryption, especially as a retrofit, so they got a law passed instead. Tapping cellphones is more trouble than tapping wired phones - they move around, and to tap them from the phone company end requires taps everywhere that you activate when you know where somebody is. On the other hand, if you can just scan for them, and crack the wimpy encryption, it's really a lot less work. And if you overhear other interesting conversations while pursuing a legally authorized wiretap, that was "good faith"... # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

10 12

Re: New US regs ban downloadable data-security software
by Bill Stewart 17 Dec '03

17 Dec '03

>> Therefore, it would seem that, as long as the security software on your ftp >> or WWW site is free of cost, it is OK to keep it there. Commercial >> security software, however, remains export-restricted. > I can't believe that there's no one taking advantage of this to make a >'shareware' version of their software available, and having available, >for export and sale, an 'enabler' to bring it to full functionality. In particular, if you allow free non-commercial evaluation of beta software, e.g. McAfee's virus protection software, that would probably qualify. It's interesting that they've structured their requirements to try to stay within the Constitutionally authorized powers (regulation of interstate and foreign commerce) while leaving out freeware which might lead to an annoying legal challenge. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

1 0

Re: Newt's phone calls
by Declan McCullagh 17 Dec '03

17 Dec '03

It's a gradual change, certainly. The Washinton Post hasn't mentied crypto in their exhaustive covering of the subject. But I maintain it's not that far beneath the radar. Watch the Lehrer Newhour (or whatever the hell it's called now) tonight, for instance. -Declan On Tue, 14 Jan 1997, Sean Roach wrote: > At 08:37 PM 1/13/97 -0500, Declan McCullagh wrote: > >Don't be too sure that crypto is that far beneath the radar. I spent > >Thursday through Saturday at an annual privacy conference for activists > >from around the country, and they understood the principles. Their > >voicemails were filling up with calls from reporters last Friday about the > >Gingrich incident, and I know they were talking crypto. > ... > Believe me, at least around here it is. > I am a college student studying computer science, and 80% of the people that > I talk to on a regular basis not only know how to play around with windows, > (and Netscape), but also at least a modicum of simple fixes to simple > problems, (such as unformatting a DOS disk). This is what I consider to be > bottom level for that 80%, however, very few of them know even as much about > cryptography as I do. And I barely know how to use PGP. > I have had Computer Science professors express ignorance as to what PGP is, > much less all of these others that I have learned about by hanging around here. > A few people know what crypto is, but most don't. > >

1 0

Re: Newt's phone calls
by John Young 17 Dec '03

17 Dec '03

Omnipoint has a full-page ad in the New York Times today which capitalizes on Newt's lack of privacy and claims that its spread spectrum phone would have protected him with with encryption and digital technology superior to cellular: http://www.omnipoint.com Nokia, for one, touts its use of the CAVE encryption in its latest unit, although its not clear which version. The CAVE algorithm and implementation is now at: http://www.replay.com/mirror/cave/ News may be forthcoming about CAVE -- which, to remind, is an acronym for Caller Authentication and Voice Encryption. It has apparently gone through several versions -- whether getting progressively stronger or weaker is a question soon to be answered authentically?

1 0

Social Security/CommerceNet/PitneyBowes try digital signature W-2's
by John Gilmore 17 Dec '03

17 Dec '03

Date: Tue, 14 Jan 97 10:06:55 EST From: John.T.Sabo(a)ssa.gov Message-Id: <9700148532.AA853265294(a)ccsmtpgw2.ssa.gov> To: members(a)lists.Commerce.Net Subject: Test Opportuity for CommerceNet Member Small Companies +----------------------------------------------------------------------+ This message was addressed to: members(a)lists.commerce.net +----------------------------------------------------------------------+ To CommerceNet Members Who Are Small Employers: CommerceNet member companies who are small employers (approximately 30 employees) are invited to participate this month with the Social Security Administration and PitneyBowes, Inc. in an important proof-of-concept project in which the Social Security Administration will accept digitally-signed W-2 and W-3 data via the Internet, with PitneyBowes issuing test software and public key certificates to participating employers. (I mentioned this test at the December CommerceNet Members' meeting.) Participation will require completion of a field test agreement with SSA, submission of a request for certification by PitneyBowes, and installation of software on a Windows PC which will enable the generation of a signature key pair as well as software which will generate, sign and transmit the wage data to Social Security. The software also produces W-2 paper forms for distribution to employees. If a company already uses a software product to create W-2's, the output file can be used for this test. (Please note that the test is not designed to evaluate all aspects of public key cryptography - for example, no certification practice statement has been developed.) If you are interested in participating in this important public/private sector test of digital signature wage reporting, please contact me as soon as possible and I'll arrange for Mr. Chuck Liptz, SSA's Project Manager, to contact you immediately to provide additional details. (Chuck can also be reached directly at (410) 965-7057 or <chuck.liptz(a)ssa.gov>. John Sabo Social Security Administration (410) 965-1550 ---------------------------------------------------------------------------- James M. Galvin galvin(a)commerce.net CommerceNet +1 410.203.2707 3209-A Corporate Court FAX +1 410.203.2709 Ellicott City, MD 21042 http://www.commerce.net/ http://www.eff.org/blueribbon http://www.eff.org/goldkey

2 1

Re: Newt's phone calls
by Sean Roach 17 Dec '03

17 Dec '03

At 08:37 PM 1/13/97 -0500, Declan McCullagh wrote: >Don't be too sure that crypto is that far beneath the radar. I spent >Thursday through Saturday at an annual privacy conference for activists >from around the country, and they understood the principles. Their >voicemails were filling up with calls from reporters last Friday about the >Gingrich incident, and I know they were talking crypto. ... Believe me, at least around here it is. I am a college student studying computer science, and 80% of the people that I talk to on a regular basis not only know how to play around with windows, (and Netscape), but also at least a modicum of simple fixes to simple problems, (such as unformatting a DOS disk). This is what I consider to be bottom level for that 80%, however, very few of them know even as much about cryptography as I do. And I barely know how to use PGP. I have had Computer Science professors express ignorance as to what PGP is, much less all of these others that I have learned about by hanging around here. A few people know what crypto is, but most don't.

1 0