December 2003 - cypherpunks-legacy

Re: European crypto export policy
by Martin Minow 17 Dec '03

17 Dec '03

At 02:39 +0100 1997.02.18, Ulf Möller wrote: >Swedish Datateknik 97-02 features an article about how COCOM/ Wassenaar >Arrangement effects Swedish crypto exports. > >I wonder if someone whose Swedish is better than mine could summarize >the article? It is at http://www.et.se/datateknik/arkiv/97-02/5.html > This is a sloppy and probably inaccurate translation. Martin Minow minow(a)apple.com Datateknik 97-02 97-01-30 EEC countries forbidden for Swedish crypto-export. The export control agreement that governs Sweden's export of sensitive high-technology even stops sale of encryption software to several EEC countries. Security-political considerations from cold war days are a serious barrier for integration in the EEC. In international regulation of high-technology commerce, crytographic equipment and crypto-software is either directly considered "war material" or counted as dual-use products -- i.e. products with both civil and military use. Twenty-eight industrial countries, including Sweden, stand behind the rules ... called "Wassenaar Agreement" after the suburb to Den Haag in the Netherlands where they were written. ... The Wassenaar Agreement is a continuation of COCOM (the West's embargo of high-technology to the Eastern block). After COCOM was lifted in 1993, there were discussions about what should be included in future controls. The USA, for example, would not accept Russian involvement while Russia exported weapons to Iran. Eventually, Russia and the other Eastern-Bloc countries accepted Wassenaar [this is probably a poor translation] and, today, 33 states are partners in the agreement, including even South Korea, Bulgaria, and Turkey. ... Encryption equipment is included in the group "information security" in the goods-list and regulations that control Swedish high-tech export. (SFS 1994:2060, lastest revision December 1996). [SFS is the national registry of all Swedish laws, proclamations, and similar.] This control includes essentially all digital encryption systems. Export may not take place without approval of the "Inspectorate for Strategic Products" (ISP) at the Foreign Office. Following the rules, a Swedish resident would break the law by carrying a portable computer with a "trivial encryption program (that is not commercially available)" on the ferry boat across Oresund to Denmark without a specific export license! A bank ATM card with an encrypted password can be carried, but not a "smarter" bank or ID card. While licenses are available, they require special testing. The product must be "strength-classified" which, in complicated cases, would be done by the the Defense Radio Service (FRA) [the Swedish equivalent to NSA]. Also, the destination land and the importer's technical knowledge will also be examined closely. For Swedish exporters to Europe, this is often experienced as a "terrorising bureaucracy." ''We who are major exporters of encryption equipment to telephone [service] operators in, for example, Germany, must let every delivery be individually examined by ISP despite the fact that the same products are often repeated,'' says Haakan Persson at Swedish AU-system. The explanation is that not every EU land fulfills the Wassanaar requirements. The point of the rules, explains Egon Svensson at ISP, is that we do not spread advanced technology to countries that have not had it previously. Thus, certain countries are excluded. For encryption equipment, only England, France, Holland, Sweden, Germany, and perhaps a few others, are considered to have sufficicent capacity and knowledge to be recipient countries. They say that the restrictions within EU are temporary, but there is no immediate sign that they will be eased. Author: Christer Akerman, christer.akerman(a)datateknik.se Original Copyright Datateknik ----- ps: the same issue of DataTeknik has a review of a Swedish biography of Arne Beurling, a Swedish cryptographer who broke a German World War II telegram (teletype?) encryption machine "Geheimschreiber T52a/b." After Germany occupied Norway, all German communication passed through neutral Swedish telegraph cables, and the Swedes didn't pass up the chance to sample the traffic. Breaking the code was described by David Kahn as "one of the great feats of crytoanalysis" of the Second World War. The book is Svenska kryptobedrifter" by Bengt Backman. Bonniers, ISBN 91-0-056229-7

1 0

Security alert!!!
by winsock＠rigel.cyberpass.net 17 Dec '03

17 Dec '03

WARNING: There's a rogue trojan horse out there on the internet known as the "stronghold web server". It's actually a hacked-up version of Apache with a backdoor, which allows hackers (or whoever knows the backdoor) to steal credit card numbers and other confidentil information on the Internet. Be careful! Always use encryption. Do not send confidential information (such as passwords and credit card numbers) to any site running the trojan horse "stronghold". In general, beware of "snake oil" security products and hacked-up versions of free software. Please repost this warning to all relevant computer security forums.

1 0

Re: PDAs as alternatives to smart cards?
by Bill Stewart 17 Dec '03

17 Dec '03

At 04:49 PM 2/17/97 -0800, Steve Schear <azur(a)netcom.com> wrote: >With the widespread adoption of an industry standard IR link between PDA >type devices, networks and PCs might this not present an opportunity for >their use as more user-configurable and application agile financial and >communiation privacy instruments? PDAs are becoming somewhat widespread among technical and sales people, but there are a lot of different varieties and horsepowers, and some are generally programmable with near-free-ware while others aren't. Newtons have horsepower, but aren't that common; most of the others have 8086en or so, including the easily-programmable DOS HPs, the cool objecty Psion OS, a few different GeoWorks based systems (is Pilot one of those?), etc. Then there are a huge number of totally non-programmable Rolodex/Calendar widgets. Any of the interesting ones cost too much to go after the retail market, and they're owned by people who can use email. For the broad market you want a <=$10 device, and stores grumble if you charge more than $200 for a really complete reader system - which means smartcards. Perhaps once pager capability in PDAs becomes widespread and cheap, the retail/wholesale pharmaceutical trading set could get interested :-) # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

1 0

Re: The Science Generations, II
by drose＠azstarnet.com 17 Dec '03

17 Dec '03

My dear fellow: I suppose you missed the notion that, on the Internet, *some* folks know that you are a dog. P.S. You, Dimi, D. Thorn, Dimi, "Nurdane Oskas", Dimi, "Awaken to Me", Dimi,"World's Youngest Cypherpunk", Dimi, "Andre the Cypherpunk", Dimi, etc. etc. are to be commended if not appreciated for your efforts in ruining an amazingly good thing. See you in alt.baloney. Incidentally, do you habitually defecate (FYI, that's "to discharge feces from the bowels") in your own single-wide? (Son, that's a rhetorical question.) The very fact that you shamelessly and boneheadedly refuse to keep your head down after all of the damage that you and your lot have caused (with 1K+ lurkers "looking on") is worthy, certainly, of some serious consideration. Ia! Ia! Cthulhu Fhtagn! >drose(a)azstarnet.com wrote: >> >> With regard to chemicals, may I suggest a perusal of the PGI and PML lists >> (respectively, Pyrotechnics Guild Inc. and Pyrotechnics Mailing List)? > > Sounds like this is an on-topic post for the 'flames' list. > >Toto > > >

2 1

Re: Constitution and a Right to Privacy
by Alec 17 Dec '03

17 Dec '03

At 09:33 AM 2/18/97 -0800, you wrote: :Let's not start this. : :Tim wasn't arguing for or against abortion; he made no comments :about abortion. His comment was that the _argument_ used to "legalize" :abortion was unconvincing to him. : :If we are going to discuss privacy, that's fine. :It we are going to discuss abortion, there are better fora. : : :-- Marshall : :Warning: Objects in calendar are closer than they appear. Good for you!!!!! I appreciate your post. However, it smells like a Daleism. I revel in fora. (Had to think about that.) Nice sig too. Alec

1 0

Message-Id / mail2news gateways.
by das＠razor.engr.sgi.com 17 Dec '03

17 Dec '03

This is for all the volunteers who are working on setting up the distributed cypherpunks mailing lists. 1) Please preserver Message-Ids while resending messages. The Message-Id is intended to be unique to a message and can be used to reject duplicates. Usenet software in particular, detects duplicates by Message-Id. 2) In response to Igor's query, I would very much like at least on of the distributed lists to be set up such that messages sent there will *not* be gatewayed to Usenet. As I mentioned, I will not post to Usenet with my real email address, and if all lists get gatewayed to alt.cypherpunks, I have to set up fake email headers to mail to the lists also. If at least one of the lists can gaurantee that it won't be gatewayed to Usenet, I don't have to do that, and as a nice bonus, Prof. Froomkin can continue to be active on cypherpunks. This can be achieved by the list software adding an "X-Post-to-Usenet: No" or some similar header to every message it sends out. Also a header, such as X-List: should be set to indicate under which mailing list a message first entered the system. This will be worthless unless all the list servers honor these headers. Thanks. -- Anil Das

2 1

Security alert!!!
by winsock＠rigel.cyberpass.net 17 Dec '03

17 Dec '03

WARNING: There's a rogue trojan horse out there on the internet known as the "stronghold web server". It's actually a hacked-up version of Apache with a backdoor, which allows hackers (or whoever knows the backdoor) to steal credit card numbers and other confidentil information on the Internet. Be careful! Always use encryption. Do not send confidential information (such as passwords and credit card numbers) to any site running the trojan horse "stronghold". In general, beware of "snake oil" security products and hacked-up versions of free software. Please repost this warning to all relevant computer security forums.

2 1

FIPS 196
by John Young 17 Dec '03

17 Dec '03

NIST announced in the Federal Register today "that the Secretary of Commerce has approved a new standard, which will be published as FIPS Publication 196, Entity Authentication Using Public Key Cryptography." http://jya.com/fips196.txt (12K)

1 0

Re: The Science Generations, II
by drose＠azstarnet.com 17 Dec '03

17 Dec '03

To Toto, Dimi, D.Thorn, whomever, etc.: while I may appreciate being subscribed to a million and one lists that I never knew I needed (and so quick!--appreciate the service, dude) this address, like c-punks(a)toad.com, is going away *real * quick, so save your keystrokes.

3 2

Address -- Invalid (was Re: message to USSA Senate) (fwd)
by alexandr＠win.tue.nl 17 Dec '03

17 Dec '03

I really don't know what this is all about!!!! This is one of the messages that I seemed to have sent...... I can give you about Apparently-To: vice.president(a)whitehouse.gov, first.lady(a)whitehouse.gov, Bclinton(a)Washington.DC, feedback(a)www.whitehouse.gov, Senator_Stevens(a)stevens.senate.gov, email(a)murkowski.senate.gov, sessions(a)wrldnet.net, senator(a)shelby.senate.gov, senator(a)bumpers.senate.gov, info(a)kyl.senate.gov, Senator_McCain(a)mccain.senate.gov, senator(a)boxer.senate.gov, senator(a)feinstein.senate.gov, sen_dodd(a)dodd.senate.gov, senator_lieberman(a)lieberman.senate.gov, senator(a)biden.senate.gov, bob_graham(a)graham.senate.gov, connie(a)mack.senate.gov, senator_coverdell(a)coverdell.senate.gov, senator(a)inouye.senate.gov, tom_harkin(a)harkin.senate.gov, chuck_grassley(a)grassley.senate.gov, larry_craig(a)craig.senate.gov, dirk_kempthorne(a)kempthorne.senate.gov, senator(a)moseley-braun.senate.gov, lugar(a)iquest.net, wendell_ford(a)ford.senate.gov, senator(a)mcconnell.senate.gov, senator(a)breaux.senate.gov, senator(a)kennedy.senate.gov, john_kerry(a)kerry.senate.gov, senator(a)mikulski.senate.gov, senator(a)sarbanes.senate.gov, Olympia(a)snowe.senate.gov, senator(a)levin.senate.gov, michigan(a)abraham.senate.gov, mail_grams(a)grams.senate.gov, senator(a)wellstone.senate.gov, john_ashcroft(a)ashcroft.senate.gov, kit_bond(a)bond.senate.gov, senator(a)cochran.senate.gov, max(a)baucus.senate.gov, conrad_burns(a)burns.senate.gov, senator(a)faircloth.senate.gov, jesse_helms(a)helms.senate.gov, senator(a)conrad.senate.gov, senator(a)dorgan.senate.gov, email(a)hagel96.com, bob(a)kerrey.senate.gov, mailbox(a)gregg.senate.gov, opinion(a)smith.senate.gov, frank_lautenberg(a)lautenberg.senate.gov, torricel(a)torricelli.com, Senator_Bingaman(a)bingaman.senate.gov, senator_domenici(a)domenici.senate.gov, senator(a)bryan.senate.gov, senator_reid(a)reid.senate.gov, senator_al(a)damato.senate.gov, senator(a)dpm.senate.gov, senator_dewine(a)dewine.senate.gov, senator_glenn(a)glenn.senate.gov, senator(a)nickles.senate.gov, senator(a)wyden.senate.gov, senator(a)santorum.senate.gov, senator_specter(a)specter.senate.gov, senator_chafee(a)chafee.senate.gov, reed(a)collegehill.com, senator(a)thurmond.senate.gov, senator(a)hollings.senate.gov, tom_daschle(a)daschle.senate.gov, senator_thompson(a)thompson.senate.gov, senator_frist(a)frist.senate.gov, senator(a)hutchison.senate.gov, senator(a)bennett.senate.gov, senator_hatch(a)hatch.senate.gov, senator_robb(a)robb.senate.gov, senator(a)warner.senate.gov, senator_leahy(a)leahy.senate.gov, vermont(a)jeffords.senate.gov, senator_murray(a)murray.senate.gov, Senator_Gorton(a)gorton.senate.gov, russell_feingold(a)feingold.senate.gov, senator_kohl(a)kohl.senate.gov, senator_byrd(a)byrd.senate.gov, senator(a)rockefeller.senate.gov, mike(a)enzi.senate.gov, craig(a)thomas.senate.gov names who got this message from the gang of cypherpunks. What is this ???? Forwarded message: > From home(a)collegehill.com Tue Feb 18 15:05:24 1997 > Message-Id: <3.0.32.19970218100100.00731388(a)pop03.ca.us.ibm.net> > Precedence: bulk > X-Sender: chill03(a)pop03.ca.us.ibm.net > X-Mailer: Windows Eudora Pro Version 3.0 (32) > Date: Tue, 18 Feb 1997 10:03:05 -0500 > To: alexandr(a)win.tue.nl > From: College Hill Internet <home(a)collegehill.com> > Subject: Address -- Invalid (was Re: message to USSA Senate) > Mime-Version: 1.0 > Content-Type: text/plain; charset="us-ascii" > > At 12:45 AM 2/18/97 PST, you wrote: > >All files on the Senate's computers will be deleted by our > >gang of cypherpunks dedicated to the eradication of your systems. > > > > I'm furious! Now I get about 10 messages every 15 minutes of mail delivered and lots of other trash. Who 's got the courage to admit this crime ?

1 0