December 2003 - cypherpunks-legacy

Re: Post Office to act as CA, creator of keys
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Are the people at C2Net really this clueless, or is this a joke? Greg Broiles <gbroiles(a)netbox.com> writes: ... > >Who in their right mind would *trust* the Post Office to act as a CA? > > Have been trying to think of a legitimate reason for the CA to generate keys, > instead of the end-user; haven't come up with one yet. ... To keep a copy, obviously. > The database description doesn't list the private keys among the data that > the Post Office plans to retain. Let me see if I follow the C2Net shill's logic: USPS generates my public/private pair of keys. USPS doesn't list the private keys as the data USPS plans to retain Therefore I can assume that they won't retain it. I guess this fits with everything else C2Net's been doing and saying. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

EU-summit Amsterdam 16-17 june
by tank 17 Dec '03

17 Dec '03

A HOT SUMMER IN AMSTERDAM On the 16th and 17th of June the Eurotop will take place in Amsterdam. During this gathering of European heads of state in the Nederlandsche Bank in Amsterdam work will be done on the creation of a single economic power. With the market as the key word social services will either be privatised or scrapped. Governing policies will be made behind closed doors by impenetrable power structures. This tiny group of national leaders will give all power to capitalism and at the same time all possibilities for democratic alternatives will be dismantled. This process will be helped along by increasing levels of control, both internal and at the external borders of Europe. The heads of state have big ideas for this European conference. They want to formulate the Treaty of Amsterdam, or Maastricht 2, a rewriting of the European Union treaty that was signed in 1992. In this treaty they want to abolish the right of veto for national cabinets and bring in new laws for foreign policy, judiciary and the police. The Eurotop is a blessing for Amsterdam's council. They will get the chance to rid the city of its image as a Sodom and Gomorrah full of slums, drugs and the sex industry and will instead be able to present the city as a respectable economically sound international city. In order to present this image to the government leaders and to ensure that the conference runs smoothly there will be thousands of extra police officers bought into Amsterdam and a large part of the city will be made into security zones. In these security zones people will be required to prove their identity and the streets will be 'cleared' of the homeless, illegal immigrants and other 'undisirable elements'. A view of the future perhaps? Fortunately there are a lot of people and organisations who are discontented with these plans and intend to show their disgust and carry out acts of resistance during the conference. People from other countries and cities are of course welcome. We have already planned a number of actions and events that will take place between the 12th and 17th of June. Here we have an incomplete list of events. These actions will be organised by a broad spectrum of progressive groups and individuals. Therefore each group is responsible for its own plans. The actions have been planned taking other groups and events into consideration, but it has been decided that there will be no 'central comitee' to organise everything. There will remain plenty of room for other spontaneous occurences. During the conference there will be a number of 'info points' in Amsterdam where people will be able to obtain information about what is happening. The addresses of these points is not available at this moment but can be obtained from our address after 1st May. We are unable to arrange sleeping places for everybody, you will have to do that yourself (or arrange thast people can come and stay with you!) Individual actions and initiatives are welcome, so that we will be able to show in all manner of ways that we are not happy with the current policies of the EU but want a different and more just world. It promises to be a long hot summer. AN INCOMPLETE LIST OF ACTIVITIES THAT WILL TAKE PLACE DURING THE EUROTOP IN AMSTERDAM. 14-6 Demonstration against unemployment, poverty and exploitation. From mid- April thousands of people will be marching to Amsterdam from various different countries. These marches will meet in Amsterrdam on the 14th as a demonstration against EU policy. 11-6/17-6 Top from the bottom. "Platform for another Europe', a collaboration of various progressive groups will be organising discussions, actions and theme days. This will be in the form of an alternative top with speakers from different countries. There will be workshops about unemployment, poverty, social injustice, feminist Europe, Europe and the south, Ecological Europe and so on. 15-6 Demonstration/Action at the Border Hostel. The Autonomous Centre will probably organise a cycle demonstration through the city which will end up at the prison for refugees in south east Amsterdam. Exact details of this action will be publicised later. 13-6/15-6 Chaos Days. Punks will be gathering in Amsterdam to turn the city upside down. 15-6 Demonstration at the Homomonument. A demonstration against the verdict of the European court that England is alloewd to make voluntary SM sexual practises illegal. This will take place under the slogan "Sexual diversity in Europe". Organised by Stichting Gala. 12-6/13-6 United Conference. The biggest NGO gathering of the European Year Against Racism. The themes of this will be "Fortress Europe", "Everyday racism" and "Institutional Racism", there will be speakers from various countries. This will be held in English. 16-6 Eurorave. LegalizE street party against the European drugs policy "and the other shit that they have got planned for us." 17-6 Euroblow A massive smoke-in at the Nederlandsche Bank as a protest against the European drugs policy. 17-6 Autonomous demonstration at the Nederlandsche Bank. Angry people wearing balaclavas in a tearing hurry to get to the Nederlandsche bank. Meeting point 14-00hours at the Dam.

1 0

Effective blockade on the Internet impossible (AP newswire)
by Felipe Rodriquez 17 Dec '03

17 Dec '03

This was was sent in Germany on tuesday, i got the translation today: "Effective blockade on the Internet impossible" Frankfurt/M, April 22 (AP) Effectively barring information of a certain kind from the Internet is not possible. That is the outcome of a week long blockade by Deutsche Forschungsnetz (DFN) of the Dutch Internet provider XS4ALL (meaning Access for All), which was lifted Monday evening. "It has been demonstrated that an effective blockade of illegal information has not been within the bounds of possibility" said DFN spokesman Klaus)Eckart Maass to AP news agency last Tuesday. Other Web servers, according to Mr Maass, have set up mirror sites of the online edition of the underground magazine "Radikal", published via XS4ALL, that is, it has been copied and been made accessible to the public. But this only served to put "Radikal" really in the picture. Besides, he had been faced with a flood of protest and abuse from the Internet, Mr Maass said. "Maintaining the blockade was not feasible." With their measure of 11 April, DFN responded to a letter from the Federal Criminal Investigation Department, pointing out the illegal contents of the magazine. Issue no. 154 of the radical left wing magazine contains a "Short Guide to hindering railway transports of all kinds" a manual describing how attacks can be made on the tracks on which the nuclear waste transports to Gorleben take place. On account of the Telecoms Bill, which received its second reading in the federal parliament on Friday, he is obliged to bar access to material on the Internet as soon as he learns of any illegal contents, Mr Maass explained, provided this is technically feasible. Protests from Serbia's opposition broadcasting station B92 As suppressing separate Web)pages is technically not possible, DFN cut off all access to the Dutch provider, which offers more than 6,000 different information sites among which those of Serbian opposition broadcasting station B92 and several others in the scientific field. "I cannot undertake anything that hampers scientific developments", said Mr Maass. Three DFN users complained they were no longer able to reach archeological and other information at XS4ALL. DFN, to which all German universities are connected, is used by about 500,000 users to obtain access to the Internet. Protests also came from B92, as the broadcasting station found its efforts to further the cause of democracy in Serbia thwarted by the blockade. In September of last year several commercial Internet providers had already blocked XS4ALL temporarily out of concern, so they said, that the measures taken by the law could take on such dimensions as would endanger their very existence. This action gave rise to fierce protests on the Internet, but also caused XS4ALL to remove issue 154 of "Radikal" from the server temporarily. It has not come to that during this recent blockade. Speaking out on the renewed blockade, XS4ALL said they were surprised, stating that censoring measures on the Internet had repeatedly proved to be counter productive. "As a provider we take the position that we cannot curtail freedom of opinion", XS4ALL spokesman Felipe Rodriquez-Svensson said. If there are doubts about the legitimacy of "Radikal" in the Netherlands, they should be settled in a Dutch court. -- XS4ALL Internet BV - Felipe Rodriquez-Svensson - finger felipe(a)xs4all.nl for Managing Director - - pub pgp-key 1024/A07C02F9

1 0

Re: The Net is Closing, the U.S. is becoming a Terror State
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

> > [I sent this several hours ago, and it has not appeared at my site. I am > > sending it again. My impression, based on the past some weeks, is that > > cyberpass.net is an unacceptable replacement for toad.com.] > > I have found that subscribing to cypherpunks(a)sirius.infonex.com (it's > majordomo) works just fine. Tim's message was delayed for a few hours. The impatient may want to subscrive to cypherpunks(a)algebra.com (also majordomo).

1 0

New Crypto Panel
by John Young 17 Dec '03

17 Dec '03

Federal Register, April 24, 1997: DEPARTMENT OF COMMERCE President's Export Council Subcommittee on Encryption; Notice of Establishment The Secretary of Commerce has determined that the establishment of the President's Export Council Subcommittee on Encryption is in the public interest in connection with the performance of duties imposed on the Department by law. The Subcommittee will advise the Secretary, through the Assistant Secretary for Export Administration, on matters pertinent to the implementation of an encryption policy that will support the growth of commerce while protecting the public safety and national security. The Subcommittee will consist of approximately 25 members to be appointed by the Secretary to assure a balanced representation among the exporting community and those Government agencies with a mandate to implement policy regarding encryption. The Subcommittee will function solely as an advisory body. Interested persons are invited to submit comments regarding the establishment of the Subcommittee to Lee Ann Carpenter, Committee Liaison Officer, OAS/EA/BXA, U.S. Department of Commerce, MS: 3886C, Washington, D.C., 20230. Telephone: 202-482-2583. FAX: 202-501-8024. Dated: April 18, 1997. Sue E. Eckert, Assistant Secretary for Export Administration.

2 1

[NTSEC] NT Displays Plain-Text Netware Passwords (fwd)
by Ray Arachelian 17 Dec '03

17 Dec '03

=====================================Kaos=Keraunos=Kybernetos============== .+.^.+.| Ray Arachelian | "If you're gonna die, die with your|./|\. ..\|/..|sunder(a)sundernet.com|boots on; If you're gonna try, just |/\|/\ <--*-->| ------------------ |stick around; Gonna cry? Just move along|\/|\/ ../|\..| "A toast to Odin, |you're gonna die, you're gonna die!" |.\|/. .+.v.+.|God of screwdrivers"| --Iron Maiden "Die With Your Boots on"|..... ======================== http://www.sundernet.com ========================= For with those which eternal lie, with strange eons even death may die. ---------- Forwarded message ---------- Date: Thu, 24 Apr 1997 01:37:49 -0500 From: Patrick Hayden <patrick.hayden(a)ibm.net> To: ntsecurity(a)iss.net Subject: [NTSEC] NT Displays Plain-Text Netware Passwords Windows NT 4.0, with Microsoft's Client Services for Netware, or Novell's IntraNetware Client for Windows NT, writes plain-text user-id and password information to PAGEFILE.SYS. The user-id and password apply to Netware, however, users commonly use the same logon information for both NT and Netware. It is possible to then recover the plain-text information by using a disk editor. Tests have been performed (with more pending) on these systems: Windows NT Workstation 4.0 w/SP1 and IntraNetware Client for NT (970214) Pent. 133 Laptop 24MB RAM 50MB PAGEFILE.SYS Windows NT Workstation 4.0 w/SP1 and Microsoft Client Services for Netware Dual Pent 166 64MB RAM 80MB PAGEFILE.SYS Novell Netware 4.11 Server 1. Set /MAXMEM=12 in BOOT.INI so as to force swapping. 2. Load NT; Authenticate to NT and Netware (I used the same ID and Password for both systems.); Verify connection by mapping a drive. 3. To ensure that sufficient swapping takes place, run a large program (this forces the user-id and password information stored in RAM to be placed into PAGEFILE.SYS.) 4. Exit NT; Boot to DOS; diskedit PAGEFILE.SYS 5. Search for one of the following strings (do NOT include the "" items): IntraNetware Client: NWUserName="user-id" WlMprNotifyPassword="password" "UserName" (if the username is alone, the password will follow very closely) Client Services for Netware nwcs"password" (the password is all CAPS and will immediately follow nwcs) In a "real-life" environment, most likely there will be enough swapping on the system that setting the /MAXMEM switch will be unnecessary. The switch is only to help confirm that this hole exits. If anyone has any knowledge of this, please post it to the list. Patrick Hayden Security Consultant Ernst & Young, LLP patrick.hayden(a)ibm.net

1 0

Re: The Net is Closing, the U.S. is becoming a Terror State
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Tim May <tcmay(a)got.net> writes: > cyberpass.net is an unacceptable replacement for toad.com.] Why, because your Cocksucker pal John Gilmore can't pull plugs? > We're in a terror state when the War on Drugs, the War on Pornography, the > War on Terrorism, the War on Guns, and the War on Unlicensed Cryptography > makes us all criminals. I've been saying this for some time now. Any ideas where to emigrate to? --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Re: Do government employees have freedom of speech?
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Tim May <tcmay(a)got.net> writes: > At 8:53 PM -0800 4/23/97, Bill Frantz wrote: > >I guess I have to defend my view. In general, people on this list believe > >that freedom of speech includes the freedom to lie. (I seem to remember > >having an exchange with Tim on the subject of truth in commercial speech a > >year or so ago.) > > I don't recall that. In any case, I am not arguing that the government has > any responsibility to stop lying, per se, I am saying that _employees_ of > the U.S. Justice or Treasury or State or Defense Departments are no more > free to "say whatever they wish" as employees of Apple or Intel or Sun are. Employees of C2Net don't mind. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Crypto moves forward: Commerce Dept panel and SAFE markup
by Declan McCullagh 17 Dec '03

17 Dec '03

X-POP3-Rcpt: declan(a)relay.pathfinder.com X-Sender: declan(a)mail.pathfinder.com Mime-Version: 1.0 Date: Thu, 24 Apr 1997 18:17:09 -0400 To: fight-censorship-announce(a)vorlon.mit.edu From: Declan McCullagh <declan(a)well.com> Subject: FC: Crypto moves forward: Commerce Dept panel and SAFE markup Sender: owner-fight-censorship-announce(a)vorlon.mit.edu Reply-To: declan(a)well.com X-FC-URL: Fight-Censorship is at http://www.eff.org/~declan/fc/ Encryption is again bubbling to the surface of Washington politics. Today the Department of Commerce announced that it was creating a new committee to advise it on crypto-issues. A department official told me it would be composed of "businesses that export encryption," and interested parties have 15 working days to file comments. A way for the White House to split industry opposition and persuade high tech firms to buy into key escrow? Hmm... On the Hill, crypto legislation that would lift export controls is about to advance farther than ever before. (Last fall, Sen. Exon killed any chance that pro-crypto legislation had in the 104th Congress.) Rep. Bob Goodlatte's crypto bill (SAFE) will move to subcommittee markup next Tuesday at 2 pm in Rayburn 2237. After the full committee reports the bill, it moves to the international relations committee. Sen. Conrad Burns also would like to move forward with his Pro-CODE bill in May. Problem is, Goodlatte's SAFE bill, which has about 70 cosponsors, does more than just relax export controls and prohibit mandatory key escrow. It also creates new criminal penalties for using encryption to further a criminal act. Now, some say that it's innocuous -- and a good tradeoff for getting export controls lifted -- but I'm not convinced. When encryption is widespread and present in telephones, radios, cell phones, wireless modems, web browsers, televisions, and maybe light switches, *any use* of any electronic appliance will involve encryption. (Who wants a hacker playing with your toaster?) Remember that Maryland bill that would criminalize sending "annoying" or "harassing" email? If the Goodlatte bill became law, Marylanders who signed their messages with PGP or telnetted to local ISPs could be slammed with an all-expenses-paid trip to the Federal pen for five years. In other words, SAFE would turn state misdemeanors into Federal felonies. This is not good. A coalition of groups is sending a letter to Goodlatte tomorrow supporting the bill but expressing concern over the criminalization provision. Interested in signing on? Email David Sobel: sobel(a)epic.org. -Declan ***************** Security and Freedom Through Encryption (SAFE) Act (Introduced in the House) `Sec. 2805. Unlawful use of encryption in furtherance of a criminal act `Any person who willfully uses encryption in furtherance of the commission of a criminal offense for which the person may be prosecuted in a court of competent jurisdiction-- `(1) in the case of a first offense under this section, shall be imprisoned for not more than 5 years, or fined in the amount set forth in this title, or both; and `(2) in the case of a second or subsequent offense under this section, shall be imprisoned for not more than 10 years, or fined in the amount set forth in this title, or both.'. ***************** Federal Register, April 24, 1997: DEPARTMENT OF COMMERCE President's Export Council Subcommittee on Encryption; Notice of Establishment The Secretary of Commerce has determined that the establishment of the President's Export Council Subcommittee on Encryption is in the public interest in connection with the performance of duties imposed on the Department by law. The Subcommittee will advise the Secretary, through the Assistant Secretary for Export Administration, on matters pertinent to the implementation of an encryption policy that will support the growth of commerce while protecting the public safety and national security. The Subcommittee will consist of approximately 25 members to be appointed by the Secretary to assure a balanced representation among the exporting community and those Government agencies with a mandate to implement policy regarding encryption. The Subcommittee will function solely as an advisory body. Interested persons are invited to submit comments regarding the establishment of the Subcommittee to Lee Ann Carpenter, Committee Liaison Officer, OAS/EA/BXA, U.S. Department of Commerce, MS: 3886C, Washington, D.C., 20230. Telephone: 202-482-2583. FAX: 202-501-8024. Dated: April 18, 1997. Sue E. Eckert, Assistant Secretary for Export Administration. [Thanks to JYA. --Declan] ------------------------- Time Inc. The Netly News Network Washington Correspondent http://netlynews.com/ -------------------------------------------------------------------------- This list is public. To join fight-censorship-announce, send "subscribe fight-censorship-announce" to majordomo(a)vorlon.mit.edu. More information is at http://www.eff.org/~declan/fc/

3 2

Censorware battle heats up; CyberSitter blacklist now public
by Declan McCullagh 17 Dec '03

17 Dec '03

X-POP3-Rcpt: declan(a)relay.pathfinder.com X-Sender: declan(a)mail.pathfinder.com Mime-Version: 1.0 Date: Thu, 24 Apr 1997 18:43:35 -0400 To: fight-censorship-announce(a)vorlon.mit.edu From: Declan McCullagh <declan(a)well.com> Subject: FC: Censorware battle heats up; CyberSitter blacklist now public Sender: owner-fight-censorship-announce(a)vorlon.mit.edu Reply-To: declan(a)well.com X-FC-URL: Fight-Censorship is at http://www.eff.org/~declan/fc/ You probably know about Brian Milburn. The irascible and foul-mouthed president of Solid Oak Software, which sells CyberSitter censorware, Milburn is best known for threatening journalists with criminal prosecutions, blocking the web sites of his critics, and calling writers a "trickle of piss." He's so obnoxious that even his fellow censorware vendors distance themselves from him. One of my articles about his exploits is at: http://cgi.pathfinder.com/netly/editorial/0,1012,453,00.html Now he's on the warpath again. His latest target: one Bennett Haselton, a college student and outspoken critic of CyberSitter's blocking policies. (Milburn blocks the National Organization for Women and New York's echo.com, among other university sites and Internet providers.) Haseleton earlier this week posted a short DOS program that decrypts CyberSitter's secret blacklist. Milburn was enraged. He accused Hasleton of various crimes and today demanded that Haselton stop *linking* to CyberSitter's pages. Read on for more... -Declan ********* >Return-path: <bennett(a)www.media3.net> >Date: Thu, 24 Apr 1997 09:59:10 -0700 >From: Brian Milburn <bmilburn(a)solidoak.com> >Subject: Demand letter >X-Sender: Brian Milburn >To: bennett(a)peacefire.org >Organization: Solid Oak Software, Inc. > >The following is a copy of a certified letter mailed to you on April 24, 1997. > >------------------------------ > >Bennett Haselton >Vanderbuilt University >Box 1161, Station B >Nashville, TN 37235 > >Re: www.peacefire.org > > >Dear Mr. Haselton: > >Please let this letter serve as notice of the following: > >1. You have posted a program on your web site called "CYBERsitter filter file >codebreaker". This program illegally modifies and decodes data and source >code >protected by U.S. and International intellectual property laws. > >This program performs this action without permission of the copyright owner. We demand >that this program be removed immediately. > >2. You have placed links on your web site to various locations on servers owned and >operated by Solid Oak Software, Inc., a private corporation. These include, but are >not limited to, HTTP links, FTP links, and e-mail links and private e-mail addresses. > >You have done this without permission of Solid Oak Software, Inc. Further use of >these links to our private facilities will be viewed as trespassing and intentional >harassment. We demand that these links be removed immediately. > >Your failure to comply with these demands immediately upon receipt of this letter will >be met with appropriate action. > > >Sincerely, >Brian Milburn, President >Solid Oak Software, Inc. > > > >____________________________________________ > >Brian Milburn >Solid Oak Software,Inc. - Santa Barbara, CA >bmilburn(a)solidoak.com - CIS: 74774,551 >http://www.solidoak.com - CIS: "GO SOLIDOAK" > *********** http://www.wired.com/news/politics/story/3355.html Teen Offers Way to Crack Blocking Software by Rebecca Vesely 3:03pm 23.Apr.97.PDT A Tennessee college student has posted a software program on the Web that can be used to decrypt a list of sites blocked by the prominent blocking software Cybersitter. The company that makes the program is furious, and an attorney versed in Net law says the student could face legal action. Bennett Haselton, co-founder of the teen Web site Peacefire, on Monday posted a program that he wrote specifically to crack the "filter file" that comes with Cybersitter. The 18-year-old junior at Vanderbilt University says it took him two days to write the software. The filter file is frequently updated by Solid Oak Software, the company that owns Cybersitter, but was taken offline Tuesday by the company. "He is violating every intellectual property law ever written," said Solid Oak president Brian Milburn. "It costs us tens of thousands of dollars to maintain that list. It's none of his business what is on that list or what we do with it." Milburn would not say whether the company planned to take legal action, but did say that Solid Oak "does not condone any kind of crime." A recent list of sites blocked by Cybersitter - pulled before the company took the filter file offline - was posted anonymously to Declan McCullagh's fight-censorship email discussion list Monday. The decrypted file shows that while most of the sites blocked by Cybersitter are pornographic in nature, a number are not. Among the sites blocked by Cybersitter on Monday were Cyborganic Gardens; the National Organization for Women; the Gay and Lesbian Alliance Against Defamation; several regional ISPs; Peacefire; the Ethical Spectacle, which has criticized Solid Oak's blocking practices; and the chocolatier Godiva. "I think they are misrepresenting their product," Haselton said. "It's not just the fact that they are blocking Peacefire, it's that they are violating truth-in-advertising practices." Solid Oak says it blocks sites that focus on "topics such as adult or sexual issues, illegal activities, bigotry, racism, drugs, or pornography...." This is not Haselton's first run-in with Solid Oak. In December, he posted a list of Web sites blocked by Cybersitter, which at the time included The Well and Mother Jones magazine. Haselton maintained that he got the partial list by surfing the Web with Cybersitter installed on his computer. Solid Oak threatened to sue, saying that Haselton had cracked into their computers to get the list, and also threatened to block Peacefire's ISP, Media3. The company never acted on the threats. But Haselton could now face prosecution for violating copyright laws. He maintains that he skirted the law because he did not post the list of blocked sites, just information on how to access the list. He also noted that he accessed the Cybersitter list using an old version of the software that does not carry a copyright warning. However, one lawyer said she wasn't sure Haselton's reasoning will hold up if the case goes to court. "[Solid Oak] went to the trouble of compiling the list. From a competitive standpoint, someone else could use Haselton's software to get the list and start their own blocking software company," said Shari Steele, staff counsel for the Electronic Frontier Foundation. "There is an ownership interest here." Steele said that although someone who used the list for competitive purposes would be more likely to face legal ramifications than Haselton, it is not out of the realm of possibility that a court would side with Solid Oak. ------------------------- Time Inc. The Netly News Network Washington Correspondent http://netlynews.com/ -------------------------------------------------------------------------- This list is public. To join fight-censorship-announce, send "subscribe fight-censorship-announce" to majordomo(a)vorlon.mit.edu. More information is at http://www.eff.org/~declan/fc/

1 0