December 2003 - cypherpunks-legacy

Re: PICS is not censorship
by Lucky Green 17 Dec '03

17 Dec '03

At 07:18 PM 12/8/96 -0800, Thaddeus J. Beier wrote: >I think that most of the PICS labels that are on web pages will be those >generated by scripts from groups like RSACi. (http://www.rsac.org) >These groups have contracts that require you to not lie when you fill out their >questionnaires, and if you do lie, you are in breach of contract and should expect >to be sued by them. So what is going to happen if I generate one of their tags from scratch without filling out their questionnaire? Are they going to sue me, claiming that they own an html tag? Can one own an html tag? -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://ourworld.compuserve.com/homepages/justforfun/prime.htm

1 0

Re: PICS is not censorship
by thad＠hammerhead.com 17 Dec '03

17 Dec '03

tcmay(a)got.net ("Timothy C. May") sez > This is why I fear PICS. Democracy has run amok in the Western world, and > the various "herds" will vote to constrain the freedoms of other members of > the herd. > > My Prediction: If PICS is used voluntarily by more than 80% of Net users to > label their Web pages and their writings, etc., then less than 3 years > later PICS will be mandated in the United States and other such countries. PICS, or something like it, is the absolutely right response to calls for true Internet censorship. People agreeing to a language, a way of communicating, is a good thing. Did you object to HTML? TCP/IP? Other agreements that limited the way that people communicate? I don't think that PICS will be mandated any more than those two standards are mandated, perhaps I'm naive, but I think that the social conventions will work in this case. I suppose the a better solution would have been to have many competing private rating services, but PICS will work well, not put much load on the net, and is transparent and simple. I like it. thad -- Thaddeus Beier thad(a)hammerhead.com Visual Effects Supervisor 408) 287-6770 Hammerhead Productions http://www.got.net/people/thad

3 2

Re: PICS is not censorship
by Greg Broiles 17 Dec '03

17 Dec '03

At 08:37 PM 12/8/96 -0800, Lucky Green wrote: >>>> At 07:18 PM 12/8/96 -0800, Thaddeus J. Beier wrote: >I think that most of the PICS labels that are on web pages will be those >generated by scripts from groups like RSACi. (http://www.rsac.org) >These groups have contracts that require you to not lie when you fill out their >questionnaires, and if you do lie, you are in breach of contract and should expect >to be sued by them. So what is going to happen if I generate one of their tags from scratch without filling out their questionnaire? Are they going to sue me, claiming that they own an html tag? Can one own an html tag? "Owning" an html tag is oversimplifying things; but claiming that you've been rated a certain way by a certain group (if you haven't) could potentially create fraud, trademark, and (maybe) copyright problems - an easy analogy is to the "UL" and "Good Housekeeping" symbols displayed on some consumer goods. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

1 0

Protect against physical theft of the harddisk ??
by Pavel Korensky 17 Dec '03

17 Dec '03

Hello, I have one problem which I would like to consult with you. I need to protect the data on the computer harddisk against physical theft. Current situation: Computer with several harddisks - approx. 9 GB. On this computer, the following OS are used: Linux, DOS, Windows NT. The data on this computer must be accessible from all operating systems. Encryption of files must be transparent to user and encryption algorithm must be "strong". Because I am not able to find any disk encryption software which is able to run on all these platforms, I decided to use the following temporary solution: Add one more computer with Linux OS. On this computer, there will be only a small root partition with necessary Linux components. All other disk space will be encrypted with IDEA, using the /dev/loop. This machine will be some kind of secure file server. On the second machine, where the user works, there will be partitions with operating systems, necessary utilities and the TCP/IP stack for DOS/Windows, NT and Linux. The data and application disks will be mounted via NFS and user will work with files from file server. The computers will be interconnected with Fast Ethernet. This mini-network is NOT connected to the Internet, so the NFS (in)security should not be a problem. Also, both computers will be placed in the same room (distance approx. 3 m), so there should be no problem with tapping/data capturing on the Fast Ethernet connection. I have the following questions. Can anybody see some major security hole in this system ? How fast will be this system ? Anybody has any idea if there is some more sophisticated solution for this problem ? Anybody heard about some strong disk encryption which is able to rund under Windows NT, Linux and DOS ? It seems that the Win NT are the major problem. I am not able to find any disk encryption for NT. Anybody is able to port Secure File System to Windows NT ? I am trying to port this program under Linux, but I am not the NT system programmer. Thanx for any comments, help, ideas etc. Best regards PavelK -- **************************************************************************** * Pavel Korensky (pavelk(a)dator3.anet.cz) * * DATOR3 Ltd., Modranska 1895/17, 143 00 Prague 4, Czech Republic * * PGP key fingerprint: 00 65 5A B3 70 20 F1 54 D3 B3 E4 3E F8 A3 5E 7C * ****************************************************************************

1 0

Re: Please post Eudora PGP plugin URL
by Alan Olsen 17 Dec '03

17 Dec '03

At 03:52 PM 12/8/96 -0800, Lucky Green wrote: >>If you want to be automatically notified of new versions, send e-mail to >>gt6525c(a)prism.gatech.edu with the subject of "eppi news", and the following >>message body: > >Just FYI, while the plugin is still available, email to this address has >been bouncing for weeks. It is therefore impossible to submit bug reports >or subscribe to the EPPI mailing list. If somebody on this list knows the >current address of the EPPI author, please post it. The current address of the author of the Eudora plug-in is Damon Gallaty <dgal(a)cad.gatech.edu>. I have been coorisponding with him on a couple of odd problems with the software. (Implemenation issues more than bugs.) He has been very responsive. (In fact, I need to send him another bug report tonight about failing to deal with line wrap in signatures.) So far the set of plug-ins have been very useful. I have been pretty happy with it so far. (It does have the problem of not word wrapping before applying the PGP sig and defaulting to the last key if you do not set one in config.txt.) All in all, worth the download. --- | "Spam is the Devil's toothpaste!" - stuart(a)teleport.com | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{'alpha'} = '<alias(a)alpha.c2.org> alpha pgp'; $remailer{'nymrod'} = '<nymrod(a)nym.jpunix.com> alpha pgp'; $remailer{"lead"} = "<mix(a)zifi.genetics.utah.edu> cpunk mix pgp hash latent cut ek"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"lucifer"} = "<lucifer(a)dhp.com> cpunk mix pgp hash latent cut ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash latent cut ek"; $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp pgponly hash cut ksub reord"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"balls"} = "<remailer(a)huge.cajones.com> cpunk pgp hash latent cut ek"; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp pgponly hash latent cut ek"; $remailer{"middle"} = "<middleman(a)jpunix.com> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"dustbin"} = "<dustman(a)athensnet.com> cpunk pgp hash latent cut ek mix reord middle ?"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"death"} = "<x(a)deathsdoor.com> cpunk pgp hash latent post"; $remailer{"reno"} = "<middleman(a)cyberpass.net> cpunk mix pgp hash middle latent cut ek reord ?"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix) (weasel squirrel) The alpha and nymrod nymservers are down due to abuse. However, you can use the nym or weasel (newnym style) nymservers. The cyber nymserver is quite reliable for outgoing mail (which is what's measured here), but is exhibiting serious reliability problems for incoming mail. The squirrel and winsock remailers accept PGP encrypted mail only. 403 Permission denied errors have been caused by a flaky disk on the Berkeley WWW server. This seems to be fixed now. The penet remailer is closed. Last update: Mon 9 Dec 96 6:45:04 PST remailer email address history latency uptime ----------------------------------------------------------------------- cyber alias(a)alias.cyberpass.net +***+**+*+** 32:58 99.98% jam remailer(a)cypherpunks.ca ************ 14:36 99.97% nym config(a)nym.alias.net ####***#*### :48 99.97% lucifer lucifer(a)dhp.com ++++++++++++ 38:32 99.96% lead mix(a)zifi.genetics.utah.edu +++*+++-++-+ 1:00:18 99.93% middle middleman(a)jpunix.com -.---------- 4:01:26 99.93% reno middleman(a)cyberpass.net -.--------- 3:15:16 99.74% squirrel mix(a)squirrel.owl.de --+++-+++++ 1:40:17 99.68% dustbin dustman(a)athensnet.com __.-+++-++++ 7:14:49 99.66% weasel config(a)weasel.owl.de --+++-+++-+ 1:39:24 99.50% haystack haystack(a)holy.cow.net #** **#*#**+ 4:58 99.42% replay remailer(a)replay.com +**** *-- -* 1:22:47 99.41% exon remailer(a)remailer.nl.com #*#***#+#### 6:25 99.29% extropia remail(a)miron.vip.best.com -- -- .. -- 9:05:48 94.66% winsock winsock(a)rigel.cyberpass.net - - ----- 3:43:35 93.66% balls remailer(a)huge.cajones.com #**** 1:37:33 74.17% mix mixmaster(a)remail.obscura.com ._.--++-. 8:37:03 71.73% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

OECD crypto policy draft guidelines
by Robin Whittle 17 Dec '03

17 Dec '03

There is an ad-hoc group of government representatives (called an "expert group" actually) working on an OECD set of cryptography policy guidelines. They have a big five day meeting coming up starting 12 December in Paris. A September draft of their guidelines was leaked and put on a WWW site in Austria: http://www.quintessenz.at/Netzteil/OECD/index.html as a Word 6 file. I got it, turned it into HTML and put it on my site with comments. http://www.ozemail.com.au/~firstpr Recently, someone from the OECD crypto secretariat emailed me indicating they had read my comments and found them reasonably constructive. I have since added more comments, which I emailed to the secretariate person. If anyone has something constructive to convey to them, email me and I will put you in touch with them. I understand there will be an article on the debate in the next weekly edition of The European newspaper. The people at Quintessenz apparently have a later draft which they are scanning and will put up on their site ASAP. - Robin . Robin Whittle . . http://www.ozemail.com.au/~firstpr firstpr(a)ozemail.com.au . . 11 Miller St. Heidelberg Heights 3081 Melbourne Australia . . Ph +61-3-9459-2889 Fax +61-3-9458-1736 . . Consumer advocacy in telecommunications, especially privacy . . . . First Principles - Research and expression - music, . . music industry, telecommunications . . human factors in technology adoption. . . . Real World Interfaces - Hardware and software, especially . . for music .

1 0

[Fwd: take me off the list]
by Rosario Family 17 Dec '03

17 Dec '03

me too samiam(a)coqui.net To: cypherpunks(a)toad.com Subject: take me off the list From: Bryondp(a)aol.com Date: Sun, 8 Dec 1996 19:47:48 -0500 Sender: owner-cypherpunks(a)toad.com take me off the list

1 0

Malaysian Netropolis and Net-regs, from The Netly News
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Mon, 9 Dec 1996 09:15:12 -0800 (PST) From: Declan McCullagh <declan(a)well.com> To: fight-censorship(a)vorlon.mit.edu Subject: Malaysian Netropolis and Net-regs, from The Netly News The Netly News December 9, 1996 http://netlynews.com/ The Malaysian Solution By Declan McCullagh (declan(a)well.com) My first thought when I arrived in Kuala Lumpur was that it was dirty, at least compared to whisper-clean Singapore, where I had just been. Yet the city was fully alive -- not just with hawker stalls but with a newfound sense of optimism. That's because Malaysia, long a sleepy jungle backwater, is carefully preparing an area just south of the capital to be the Asian technology center, a no-taxes-here free trade zone, the place to be for all things cyber. It will be patterned after Penang, an island off Malaysia's northwest coast that's home to one of the largest collections of chip manufacturers in the world. The way Prime Minister Mahathir Mohamad describes it, fiber will line the streets of the $8 billion "Multimedia Super Corridor" and dollars will flow into the coffers of Western businesses that settle here. Malaysia is busy crafting a Netropolis. Dr. Tommi Chen, the CEO of asiapac.net, explains the government's plan to me over satay and bowls of chee cheong fun. We're waiting out the monsoon rain in one of the countless Malay-Chinese eateries in Petaling Jaya, a town about 15 miles from the capital, Kuala Lumpur. "This region is exploding," he says. "Everyone is competing to be the information-technology hub. The government is trying to attract the best to create another Silicon Valley." Sun Microsystems, Ernst & Young and Microsoft have already announced plans to shift Asian operations to this tropical city. That influx will doubtless be hastened in February when intellectual property and digital signature laws are set to be introduced. To attract firms, the government is unabashedly pro-business. "I think Malaysia will leapfrog other countries in the region as a business center," Chen says. "The prime minister and the deputy prime minister championed the Internet themselves." Yet just like everywhere else that embraces rapid datafication, a Net connection brings with it overseas ideas and values that alarm authorities in this strict Islamic state, which still refuses to sign the International Declaration of Human Rights and has a police force that can indefinitely detain individuals deemed a threat to national security. In a country where chaste kisses -- a tepid buss on the cheek! -- are chopped out of television broadcasts, what's a poor government censor to do when images from alt.binaries.pictures.erotica.pornstar flow through Malaysian cyberspace? The answer may lie in the history books. North of Singapore, south of Thailand, straddling the South China Sea, Malaysia was settled by the British in 1795. The country won its independence in 1957, but an internal Communist uprising quickly destablized the young government. Then, on May 13, 1969, members of a Chinese political party took to the streets of Kuala Lumpur to celebrate a strong showing in a parliamentary election. Malay-Chinese riots flared for four days and hundreds died. The government responded by taking extreme measures to reduce ethnic friction, echoes of which exist today in draconian laws punishing people (such as newspaper editors) who "incite" racial tension. In this atmosphere, Prime Minister Mahathir prospered. Once a critic of autocratic government, he dismantled the formerly independent judiciary after a court threatened his grip on power in 1987. His other censor-happy feats include once banning the Wall Street Journal and the Far East Economic Review. No viable opposition party exists. Lim Guan Eng, an opposition leader, is being tried for sedition. Local newspapers are uniformly pro-government. Issues of Western magazines with articles critical of Mahathir somehow never make it to newsstands. Malaysian netizens have a ready answer for these criticisms of their country. To them, Malaysia may not be ready for the kind of freedoms the West enjoys. "Most Asians see Westerners as being too liberal with too many things," a Chinese manager at a technology firm told me. The country's perception of liberty, I begin to understand, is seen through the lens of communist threats and the May 13 racial riots. With freedom, perhaps, comes instability, uncertainty... chaos. That's why Mahathir is faced with an exquisitely delicate balancing act: providing enough freedom to attract Western companies and American-educated workers accustomed to it, while meeting the demands of powerful Islamic fundamentalists who would put Senator Exon to shame. "The pornography laws exist. They will just extend these laws to the Net," says Chen. The rain has slowed to a light patter. We're almost ready to return to his office, across the street, where a score of 20-somethings work late into the night. He concludes: "Malaysia is Muslim. They have to do it -- they have no choice. They know there is no foolproof control, but they have to do it anyway." My next visit is to the office of Dr. Mohamed Awang Lah, the head of Jaring, the only other licensed and government-approved Internet provider in Malaysia. Like asiapac.net, Jaring is owned by the state. (Three illicit providers, however, apparently exist.) "We block about a hundred web sites, otherwise people complain," Awang Lah tells me. This, then, is the balancing act: "If we are too open, people complain. If we are too closed, people complain." This is an epiphany for me: the Notorious 100, presumably the same web sites blocked by the government of Singapore! It's a token gesture, not too much, not too little. In a lot of ways, it's a far better solution than the U.S. Congress's ham-handed Communications Decency Act, now on the Supreme Court's calendar. "The government will not regulate the Internet," Awang Lah says. "The only part we don't like, that is not acceptable to the culture, to the religion, is pornography... There are also some restrictions on religious content. But there is no intention to regulate the free flow of discussion." (Except for anti-Islam or anti-Mahathir criticisms, I'd wager.) Still, Malaysia seems to follow a pattern of strict laws and lax enforcement. Sure, sexually explicit materials may be banned by law. But just a block from my hotel in downtown Kuala Lumpur, I was able to buy three porn videos -- two American, one Japanese -- for 50 ringgit, or U.S. $7 each, from a sidewalk vendor. Perhaps there's some hope for the Net after all. ###

1 0

Mykotronx update
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

Remember Mykotronx, makers of the Clipper Chip? Apparently, they were bought in 1995 by Rainbow Technologies, http://www.rnbo.com/, who make dongles and crypto accelerator boards. Some quotes from their web page: http://www.rnbo.com/mykoweb/geninfo.htm Headquarted in Torrance, California, Mykotronx employs approximately 110 people. The company was founded in 1979 as Myko Enterprises; it incorporated and became Mykotronx, Inc. in 1987. In 1995, Mykotronx became a part of Rainbow Technologies Inc. (NASDAQ: RNBO), a world leader for intellectual property protection. .... Anticipating higher production volumes, in October 1995, Mykotronx opened a new facility that has dramatically enhanced its capacity for testing and programming cryptographic microprocessors. The facility expands annual programming and test capability to more than 1.2 million devices, with potential expansion to 5 million units. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk # (If this is posted to cypherpunks, I'm currently lurking from fcpunx, # so please Cc: me on replies. Thanks.)

2 1