December 2003 - cypherpunks-legacy

Re: Rejection policy of the Cypherpunks mailing list
by aga 17 Dec '03

17 Dec '03

On Tue, 28 Jan 1997, Dale Thorn wrote: > aga wrote: > > On Tue, 28 Jan 1997, Dale Thorn wrote: > > > aga wrote: > > > > On Tue, 28 Jan 1997, Dale Thorn wrote: > > > > > Igor Chudov @ home wrote: > > > > > > Dale Thorn wrote: > > > > > > > > But seriously, I was just telling the folks over the weekend, if I > > > > > had my hand on the button, a lot of people would die very quickly. > > > > > As in The Day The Earth Stood Still, a single act of aggression would > > > > > suffice to be immediately terminated. > > > > No trial, huh? > > Good question. The law we have right now already assumes that there > are situations where a criminal will not go peacefully, if at all. > In some countries (years ago?) such as England, bobbies were known > to not carry firearms for ordinary street duty. Am I right? But > here in the USA, that would be unthinkable. > > So my proposal doesn't eliminate the responsibility portion of law > enforcement. I'd say, if a target were eliminated thru negligence, > malfeasance, or other wrongdoing under "color of law" or whatever, > let the courts handle that as they do now. > Just who is doing the eliminating? > My suggestion would give the law enforcers the ability to dispense > the first level of justice expeditiously, which they cannot accomplish > now due to all of the red tape and the corrupt legal system (lawyers > specialize in getting chronic offenders off, particularly "traffic" > offenses). By transferring a major portion of the bureaucracy to > the pencil pushers, we can free up the street cops to do what they > do best, namely bust or eliminate criminals. > Cops can never be trusted to "dispense justice," and half of the cops are themselves criminals in what they do. Most cops steal evidence and lie like crazy in Court. All they want is a conviction, and it mattters not how it is obtained. > I dare say that the downside of this is much less pleasant than the > virtual anarchy (in the bad sense) we suffer now. If the police get > out of control, A.P. will arrive just in time to plug a few of those > holes, so to speak. Ideally, future robotics should be able to > provide something like Gort (sp?) to take the place of human officers, > given advances in the kind of pattern matching needed to deter > aggression and the like. Those who don't make it past the robots, > well, the rest of us can learn to behave, and we'll be much better > off when we do. > I would trust robots more than humanoids.

1 0

Re: Getting into MIT is impossible
by Rick Osborne 17 Dec '03

17 Dec '03

At 06:45 AM 1/29/97 +0100, Anonymous (Xanthar) wrote: >Most intelligent people apply to several schools, knowing that >admissions practices are subject to the vagaries of reality. If you are implying that I was not intelligent enough to apply to more than one school, then you are mistaken. MIT was the *only* school out of the six I applied to (including CMU, CalTech, GaTech) that turned me down. >My guess is that "other factors" were involved. I'm sure that was probably true. I'm just saying that I doubt the admissions process is as Financial-Aid-blind as they would have us believe. >MIT offered me a substantial economic aid package, in the form of loans, >grants, and various campus jobs. What does this tell you? It tells me that you're a better man than I, I guess. I'm sorry if I sound bitter, but one does not work for a goal for over a decade of his life, get rejected for it, and then just "forget it". Anyone who tells you otherwise needs to see a therapist. _________ o s b o r n e @ g a t e w a y . g r u m m a n . c o m _________ Don't have awk? Use this simple sh emulation: #!/bin/sh echo 'Awk bailing out!' >&2 exit 2

1 0

exporting stego
by Syntel 17 Dec '03

17 Dec '03

Just a quickie, Does the present ITAR / DoC regulations cover the export of Steganography programs? thanks Steveo

1 0

Re: PGP Key Preview...
by Ed Falk 17 Dec '03

17 Dec '03

> is there a way to preview the contents of a received public key, > without adding it automatically to the public key ring? Trivial. Just have pgp look at the file without giving it any commands. I.e. instead of pgp -ka <filename> do pgp <filename> Pgp will examine the file, tell you it contains keys, show them to you and then ask if you want to add them to your keyring. This is the way I normally add keys, just because I like to look at *any* file before I add it to any system.

1 0

Re: Last nail for US crypto export policy?
by Ed Falk 17 Dec '03

17 Dec '03

> I just ran out of asswipe. > Does anyone have any RSA Data Security, Inc. stock they'd like to > sell? Now, now. I don't think RSADSI had any illusions of 40-bit keys being secure; they just wanted to find out just *how* insecure they were. I suspect that this crack will *benefit* RSADSI, and the rest of the crypto community, by helping to convince the feds to ease up.

1 0

Re: Libel & the 1st Amendment
by Huge Cajones Remailer 17 Dec '03

17 Dec '03

At 10:46 AM 1/29/1997, Declan McCullagh wrote: > * Many 1st Amendment experts don't believe in the legal concept of > libel. It is, they say, a rich man's game -- if I'm libeled by the > NYT, I'm probably not going t be able to sue them, but Donald Trump > can. Moreover, if I don't have the resources to sue but the > statement is libelous, it creates a *presumption* in the minds of > the readers that the article is certainly true. (If it were not, I > would have sued, right?) The wealthy also use libel suits to suppress dissent. Greg's point that poor people aren't worth suing is only true if the motivation is financial. Often it is not. Conveniently, many of those whose silence is desired are among the petty bourgeouis and have a net worth of roughly $50,000. Enough to make the suit appear legitimate, but not enough to allow the target to brush off the legal fees, if they win the case. Consider also the artificial distinction between private and public figures. It is easier for a private figure to sue for libel. Yet, the most influential people in the country are private figures. Reporters must tread very carefully when covering the activities of these people. Thus, we hear little of them. It would be interesting to know when libel law was first introduced to the United States. Does anybody know? John Peter Zenger

1 0

Re: Best Computer School?
by Patrick May 17 Dec '03

17 Dec '03

Rick Osborne writes: > At 12:32 PM 1/28/97 -0500, Derek Atkins wrote: > >This is really exagerating. You do not need a 4.0, 1600, etc. to be > >admitted to MIT. Sure, you need good grades, but a 3.6 average and > >1350-1400 SAT scores is perfectly adequate to be admitted to MIT. > > I disagree and can speak from experience. I was denied admission to MIT > even thought I had a 3.82 GPA, 1440 SAT (one try), and had taken 9 AP tests > with two 5's, four 4's, two 3's, and one 2. As for being well-rounded, I > was on several academic teams, sang in Chorus, acted and stage managed in > Drama, and played Tennis. I have a degree from MIT and got in with marks only slightly higher than these. My verbal SAT was actually higher than my math. > The only thing I didn't have that the next MIT applicant had was money. I > made the mistake of letting them know that I was dirt poor and would need > full aid/grants/etc, and to quote "The Great Escape" it was "Zzzt! To the > Russian front!" This is an incorrect conclusion. I'm replying publicly to your message because I would hate for a kid with ability and little or no money to give up on getting into MIT without trying. I grew up on a small farm in Maine and got zero financial help for college from my folks. The financial aid people at Tech assured me that, if I were admitted, they would come up with a package of grants, scholarships, and loans to make the nut. With me working through school, they did. I've just finished retiring the $45k+ debt. > MIT may be a great school, but they tend to be snooty assholes for the most > part. (DISCLAIMER: Not all MIT grads/attendees are necessarily "snooty > assholes", I'm just saying that I've yet to meet one that wasn't.) I've been accused of being an asshole on more than one occasion (although never snooty). I think it's more a matter of temperament than anything Tech did to me, though. Regards, pjm

1 0

Complying with the EAR [was: More Circumventing the ITAR]
by Michael Paul Johnson 17 Dec '03

17 Dec '03

On Tue, 28 Jan 1997, Mark Rosen wrote: > I'm curious as to exactly what the ITAR/EAR/Whatever says specifically > about "unrestricted FTP sites." My program, Kremlin, is available for You should check the exact text yourself, but the way I read the EAR, you are not "exporting" strong cryptographic software without a license (exept to Canada, which needs no license) if you do things "such as" (1) have the guests to your site acknowledge that the EAR restricts export, (2) have the guests affirm that they can legally get the software (proper citizenship or residency & location), and (3) "check the address of the destination computer to see if it is in the USA" or Canada. The last one, I interpret rather loosely to mean that if the guest's email address domain isn't one commonly used in the USA or Canada, then I deny access. We all know that not all .com addresses are North American, but chances are really good that if the address ends in .ru, then the destination machine is probably not in North America. This is not a perfect way to prevent export, of course, but it is what the regulations say, as I read them. For a pointer to the regulations and to my access request form and crypto site, see http://www.sni.net/~mpj/crypto.htm Disclaimer: I am not a lawyer, and most lawyers don't even understand this stuff, so you read and act on it at your own risk. This is just my best effort to comply with the law without sacrificing my right to publish. > download at the web page below. On my web page, I have some stuff in bold > print that informs about the ITAR and tells people to go away if they're > not from the US or Canada. Does this count as an unrestricted FTP site? Is there any reason why people have to look at your warning before reading your warning? At my site, the ftp site itself is in a hidden directory that changes names often enough that people can't successfully link to the restricted files for very long without going through my warning page. Indeed, my site can't be navigated and indexed properly by web search robots. At your site, it is extremely likely that someone would find your software without ever seeing your warning. Indeed, your software is on another server with another interface. I think that your site counts as unrestricted. > Also, back to the question of registration numbers. A registration number > is just a string of letters and numbers, and is essentially the same as a > friendly letter; it contains no cryptographic code. For all anyone knows, I > could just be charging for pseudo-random numbers, again, nothing of > cryptographic significance. Is it illegal for me to mail someone outside of > the US or Canada a registration code? Thanks for any help. The registration code is legally equivalent to the registered software that it unlocks. Sending the registration code to France, for example, would be likely to be considered the same as sending the registered software to France (in violation of the laws of both countries). Now if the "unregistered" software is weak (i. e. crippled key length) without the registration code, you need not worry about posting it publicly and without restriction, as long as you don't export the registration code (except to Canada) without a license. I do this with Quicrypt (ftp://ftp.csn.net/mpj/qcrypt11.zip) BTW, I posted krem104.zip at my site. Please let me know if I mangled it in the process... http://www.sni.net/~mpj/crypto.htm Michael Paul Johnson Opinions herein are not necessarily Exabyte's. Work: mpj(a)exabyte.com http://www.exabyte.com Personal: mpj(a)csn.net http://www.csn.net/~mpj BBS 303-772-1062

1 0

Re: East German Collapse (Was: Fighting the cybercensor
by Duncan Frissell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 10:53 AM 1/29/97 -0500, Declan McCullagh wrote: >I disagree. Where does this money "escape" to? Do you spend it on rent, >pizza, a new stereo? Hmm... These are all meatspace transactions and can >be taxed. Money that escapes into Cyberspace just remains there in much the same way that money that escapes offshore today just stays there. It is not usually repatriated. Offshore funds accumulate offshore and earn interest and dividends there. If the onshore owners need their offshore money they do not, repeat do not, repatriate it. They borrow it instead and pay it back with (deductible) interest expatriating more money. The same practice can be followed in cyberspace. Stateless funds (whether Offshore or in Cyberspace) can be used to: 1) Pay salaries 2) Make loans 3) Buy digital goods and services (telecoms, entertainment, etc.) 4) Pay school fees 5) Pay for travel 6) Pay for mail order goods (customs duties will fade) Individuals can also easily support their lifestyles with Offshore or Cyberspace funds by using stateless credit cards and taking cash from ATM machines using stateless ATM cards. You can certainly use offshore or cyberspacial funds to pay the rent on your flat in Montreux overlooking Lake Geneva and not too many taxes will be applied to that transaction. Accumulating vast wealth (even if it is only represented as bits) can be very fun as well. DCF -----BEGIN PGP SIGNATURE----- Version: 4.5 iQCVAgUBMu+HMIVO4r4sgSPhAQGf4wQA3V8f21i8fYK7S4BkhGyFE2/5hWgPgpSH mShQ3tDu8aK9O6OV4e3OdXdl3+Ack9cGWKBEeS8sL9UscYJ96NmURgsZp5rx/nJS S51C05IS/mxFlW1BusS2UvyZBBI321/gwyLysexWcxaLjpieKTfW3eZe9cm+1Kb7 n9cXvTMlF8A= =mnFh -----END PGP SIGNATURE-----

1 0

Re: Last nail for US crypto export policy?
by Toto 17 Dec '03

17 Dec '03

Ed Falk wrote: > Toto wrote: > > I just ran out of asswipe. > I suspect that this crack will *benefit* RSADSI, and the rest of the > crypto community Ed, You're not 'outing' me, are you? Toto

1 0