December 2003 - cypherpunks-legacy

Re: Dale defends free society from the NSApunks
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

:Date: Fri, 20 Dec 1996 14:10:11 -0800 :From: Rich Graves <rcgraves(a)disposable.com> :Stop bashing Dale, you ADL/CFR/NSA thought police, you. I can recognize sarcasm! You're on the list! Yes, THE list! Yours from NSA.

2 1

Re: Credentials without Identity--Race Bits
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

:From: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) :Why is the fascist United State of America considered a "civilized :country"? It lets in the refuse of the earth to offer them the opportunity of a better life? With little guarantee thay will repay the offer?

1 0

RE: Securing ActiveX.
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

> Armenians are murderous cowards. They killed over 2 million Moslems in > this century alone - mostly women and children. I note that along with this racist generalisation you decided to post the following rant: >As usual, Timmy May spouts racist, anti-Semitic shit. As usual, he has >no idea what he's talking about. So what else is new... As well as a number of other rants along those lines. There is little difference between over generalisations of the kind you made above and, for example, discriminating against someone on the basis of race, colour, religion etc. Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

2 1

Re: Proof that "cypher punks" have complete degenerated...
by geeman＠best.com 17 Dec '03

17 Dec '03

At 09:08 AM 12/19/96 -0800, you wrote: >geeman(a)best.com wrote: >> It wasn't worth commenting on. >> Appending data after the ctrl-Z as stego? >> Not even worth a letter to the ed! > >> Dr.Dimitri Vulis KOTM wrote: >> > No one even commented on the latest Dr. Dobbs issue. > >After seeing the initial post, I ran out to get a copy, but they were >all gone. I find it hard to believe that appending data to a file is >considered stego, even by a commercial publication such as Dr. Dobb's. >Can anyone confirm this? > Well, there it is, indeed. I couldn't friggin believe it, since I've written for them and usually the stuff's pretty good. A program to append data after a text file's ctrl-Z EOF byte. If you _really_ want it secure, crypt it with the compiler's PRNG. ;)

1 0

Re: Credentials without Identity--Race Bits
by Three Blind Mice 17 Dec '03

17 Dec '03

On Fri, 20 Dec 1996, Vangelis wrote: > Bill Stewart wrote: > > I've heard that in less civilized parts of the world you're actually > > required to carry government-issued ID cards to walk down the street > > or fly on airplanes. > > Umm.. tried to get on a flight without having ID lately? Doesn't work - > against policy. Anti-terrorism policy and all.. it's for your own > safety, of course. But my dear Vangelis, that's exactly what Bill is talking about. --3bmice

1 0

Reflections on the Bernstein ruling
by Greg Broiles 17 Dec '03

17 Dec '03

(Please keep in mind that I'm not a lawyer yet, and that my comments are intended only as the reflections of an amateur and are intended as discussion fodder, not legal advice.) Folks seem to be very excited about Judge Patel's ruling in the Bernstein case - and with good reason. It was, for example, a first-page above-the-fold item in both of the Bay Area's legal newspapers today. Unfortunately, most of the media reports have done a poor job of interpreting the ruling, and it's easy to draw bad conclusions from erratic news reports about the case. The decision is available online <http://www.eff.org/pub/Legal/Cases/Bernstein_v_DoS/Legal/961206.decision> thanks to the folks at EFF. I thought list members might appreciate a summary of the decision and its potential effects. 1. What the ruling said In brief, Judge Patel ruled that Category XIII(b) (the category which refers to cryptographic equipment/software) is unconstitutional because it functions as a prior restraint upon speech without providing important procedural safeguards which are required when a prior restraint scheme is put into place. She ruled that the "technical data" provision of the ITAR is also unconstitutional when it refers to technical data about Category XIII(b) items because of the lack of procedural safeguards. Mopping up other points raised by the suit, Judge Patel ruled that the term "defense article" as defined in 22 CFR 120.6 should be read to elide the phrase "or technical data"; and that when interpreted that way, the terms "defense article", "defense service", and "technical data" are not unconstitutionally vague. She also ruled that the term "export" is not unconstitutionally vague, and writes (in 'dicta', which is legalese for "offhand comment", e.g., without precedential value but interesting as a hint re what's going on in the judge's mind) that placing software on an "Internet site" which can be accessed from a foreign country is an export for ITAR purposes. She also ruled that the "fundamental research in science and engineering" (120.11(8)) and "general scientific, mathematical, or engineering principles" (120.10(5)) exceptions to the definition of "technical data" are void because they are too vague. As far as I can tell, they are thus no longer available to potential ITAR defendants. 2. What the ruling didn't say Judge Patel declined to address the merits of two of Bernstein's arguments: that cryptographic software is independently worthy of First Amendment protection as a tool which enables confidential speech and privacy, and that the ITAR scheme violates the Administrative Procedure Act. She also refused to grant Bernstein a preliminary injunction which would have prohibited the US Government from prosecuting him for teaching his class this spring, because her ruling means that his proposed activities are not (for now) illegal. The opinion also narrowly fails to say whether or not Category XIII(b) is content-based or content-neutral; but reaches its conclusion by pointing out that such a determination isn't necessary, because even if XIII(b) is content-neutral, it is still unconstitutional. (* My reading of the opinion diverges from the EFF's, as reported in their 12/17 press release, on this point. I think my interpretation is correct. YMMV.) 3. What the ruling means Some messages that I've seen have suggested that her ruling means that the ITAR does not apply to crypto of any kind; or that crypto can now be exported in, variously, the Ninth Circuit, or Northern California, or Berkeley. Strictly speaking, Judge Patel's ruling is not binding precedent in any court. The doctrine of "stare decisis", which says that courts should not disturb existing precedent, suggests that other district courts in the Northern District of California will follow Judge Patel's ruling, at least until the Ninth Circuit addresses the issue (in this case or a different one). But "stare decisis" is a policy statement, not law; and, as the decision in _Karn v. Dept of State_ makes clear (by ruling that the First Amendment does not prevent applying Category XIII(b) to source code), district courts around the country are free to disagree with each other and issue contradictory or incompatible opinions. (I'm interested in any analysis which would suggest that her ruling is binding on the ND CA courts for reasons other than stare decisis; I'm not aware of other grounds, but I don't know everything, either. Comments?) Further, Judge Patel's ruling yesterday is dependent upon her earlier ruling which held that source code is speech for First Amendment purposes. That ruling has not yet been reviewed at the appellate level, and is not uncontroversial nor universally accepted. If another court disagrees with that ruling, Judge Patel's otherwise convincing reasoning in this case (which says that the lack of procedural safeguards for this prior-restraint scheme is unconstitutional) is irrelevant - because without speech, the First Amendment (and its hostility to prior restraint) isn't applicable. It's also significant because her earlier ruling said that source code is speech - and her reasoning for reaching that result does not apply to object code or executables. It's also unclear that Judge Patel's ruling is enough to make export of crypto source legal by people/organizations located even in the Northern District of CA. Venue is proper, in an ITAR case, in any jurisdiction which the defense articles have moved through. (18 USC 3237(a); _US v. Durrani_ 659 F.Supp 1177, 1182 (D. Conn, 1987); an easy analogy is to the _US v. Thomas_ "Amateur Action" case, where Tennessee venue was proper for prosecution of California defendants who sent porn into Tennessee.) So it's at least arguable that the feds could simply bring an ITAR prosecution in another district, if exported crypto flowed through that district. (But I don't think they can do so against Dan Bernstein because of "res judicata", a doctrine which says that once two parties have fully litigated an issue, they cannot come back to the same court - or a different one - and ask to relitigate the same issue.) So while the ruling has considerable historical, cultural, and symbolic significance, it's dangerous to assume that it means that export restrictions on crypto are dead. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

4 3

Re: Dale defends free society from the NSApunks (was Re: Encryption ?
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Graham-John Bullers <real(a)freenet.edmonton.ab.ca> writes: > Problem with sex? No, thank you, Graham. Stick you alt.2600.moderated (an even lamer forum than thew "cypher punks" mailing list, if you can imagine that). > > http://www.freenet.edmonton.ab.ca/~real/index.html > > : real(a)freenet.edmonton.ab.ca > Graham-John Bullers email > : ab756(a)freenet.toronto.on.ca --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

RE: Reflections on the Bernstein ruling
by Blake Coverett 17 Dec '03

17 Dec '03

Greg Broiles wrote: > In brief, Judge Patel ruled that Category XIII(b) (the category which > refers to cryptographic equipment/software) is unconstitutional because it > functions as a prior restraint upon speech without providing important > procedural safeguards which are required when a prior restraint scheme is > put into place. She ruled that the "technical data" provision of the ITAR > is also unconstitutional when it refers to technical data about Category > XIII(b) items because of the lack of procedural safeguards. I'm not even remotely a lawyer, but I have to disagree with the second sentence above. As I read it Judge Patel believes that the technical data provisions are also unconstitutional but can not rule that way because United States v. Edler, 579 F.2d 516 (9th Cir. 1978) is the law in the 9th circuit. The relevant quote is: While this court is inclined to agree, despite revisions to the ITAR since 1984 and especially in light of Freedman and FW/PBS, Edler remains the law of this Circuit and this court is bound by its holding.[13] Moreover, Edler was reaffirmed, albeit in cursory fashion, by the Ninth Circuit in 1989. United States v. Posey, 864 F.2d 1487, 1496 (9th Cir. 1989). If the Ninth-Circuit wants to reconsider those opinions it is free to do so, but that decision is theirs to make. Happily she does go on to say that because she has ruled that Category XIII(b) is unconstitutional that the technical data provisions for items relating to XIII(b) are unenforceable. regards, -Blake

1 0

Re: Ebonics
by Matthew J. Miszewski 17 Dec '03

17 Dec '03

At 11:29 AM 12/20/96 -0800, Timothy C. May wrote: (snip) >De honks be chimin.' Code be fly! I's huffa be gots to be sizing, bitch. >PGP 3 be dope, nuffin but bad! > >I be axing you if it be outa honkeyland or outa Afrika? Dat bitch Reno be >sayin' it be 'legal be usin' dope 'warez. Day be hos. Jesus Tim. You're letting your lilly white show. -feeling-oppressed-by-every-law-in-existance-white-boy Matt

8 8

Re: Pretty Lousy Privacy
by camcc＠abraxis.com 17 Dec '03

17 Dec '03

At 06:19 AM 12/19/96 -0800, you wrote: :John H West wrote: :> Are Dr DVT & Ray Arachelian the same pair who relentlessly :> spammed the Net about three years ago. [snip] How soon can we expect Turkish and Armenian language modules for this beta? What is status vis-a-vis export? Thanks for the effort. Cordially, Alec PGP Fingerprint: Type bits/keyID Date User ID pub 1024/41207EE5 1996/04/08 Alec McCrackin <camcc(a)abraxis.com> Key fingerprint = 09 13 E1 CB B3 0C 88 D9 D7 D4 10 F0 06 7D DF 31

5 10