December 2003 - cypherpunks-legacy

BOY, DID I GET A WRONG NUMBER!
by Joseph Schlesinger 17 Dec '03

17 Dec '03

Hello! For some inexplicable reason, I've been getting messages from you. Actually, I have received a HUGE bunch of messages both last Tuesday (2 Dec) and today (9 Dec). I don't consider myself very knowledgeable about the technical aspect of e-mail or computer networking, which is especially ironic, since it appears my name has been inserted as a BC (blind carbon) on messages sent to the Debian Development mailing lists & the ISS mailing lists. I've also received unsolicited information about software that will enable me to bulk e-mail 27 million U.S. households, special offers on fresh citrus fruits from Florida, a consumer survey from an exporter of sunglasses in China, & an invitation to visit some sort of XXX adult web site -- well, I don't even want to get into that one! Obviously, this looks like the work of some prankster. I've followed the proper procedures for getting "unsubscribed" from the Debian & ISS lists, but apparently the list managers of those organizations are unable to find me in their database. I think I know how this might have started. I'm in Chicago -- a Northwestern University alum -- & I e-mailed to a qualified list of students a message about my hobby. (I'm a 20-year barbershop singer & wanted to invite these individuals to one of our weekly chorus meetings.) It's possible that one of these students may have BC'ed me into some mailing lists as some kind of joke -- I don't know. In any event, if there's anything you want to know about barbershop harmony, get in touch with me & I'll answer your questions. If not, it's been nice hearing from you, but I'd appreciate being removed from your address book. Thanks for your help. Regards. --Joseph Schlesinger joseph_schlesinger(a)corp.mortonintl.com

1 0

A message with a key to be posted later
by Jonathan Wienke 17 Dec '03

17 Dec '03

-----BEGIN PGP MESSAGE----- Version: PGP for Business Security 5.5 pQQUWkSzhyh18H9mQJc7BcsnrhejW3+xsVHHVZ1EaJeJJh/KIR4uoCcPCnBfqru/ 5+z1CjJKYhyEq5+O6vgq3b/Z7cWteVrXdbH0rD12G7P/iFaeYVM3tztsINpjT48O vd53BlxGrjugMiWzfFg7wFXhfnyvkjKudLw09eBrivQBDE8C1VGpmx4XqarZR3Zx zYIK5n6NfgGHN1EFOw2mhPX/1OXnVoB1t1eIXm7NC3/Ym+U7WV1Qca+1/FAi+I2a 0mmKdEZIIXYALXztkDQiAz4qh0+d7KuhjQZVAS6HLyWztRXCOaG/uAHmyW9sf+y6 f1O6cBvrDPhNTHpM8QjNFgSBPmlLY9Kn6pR+WWfKLbAac19mSWudhsejUCqkYCuX ZZio7vzMxuws2h0x4hReGuX3awbcXtDX858VxGoAmO4moQIz8Ps0NA9z9SW73erT Hj42/fgmE6ZaX9vXubmMKVvfDm9U3KceePKEptEJQVDwsqUjSdIjbzShI/SDai20 sf6Fq7595f3dJ0BdUbqYZhWU3aHyZJMy+AhL/HAmYevUKnKVEPqaZpQMTtB5IbmN TEe76jDdJN7fQG35MkFjn0y4gsYeOqXZ3An/9dwOOWDpW0udXPl0NE/ZWqjE7Mo4 zAqAYzyosjkd283ZDy36s92581fXRLqf2WX0tbgiYWcSHVwRj4ZYDEXV2SEsK9rR BXii5TIENG6zJbU6Nk6FjcZXpcHc0vVQO77Qn7y0OfM+7eiy436PXHVo8J+QP9Ls HYEALbk2e7i4oA6eyEEJ1fQfY4voKZ4FlthqjyAqYu2vcAStXkdpMArXQ+ZqZHMK VwRn3Ov5UzN/4jSFRTuy3x8DgZV8plwpp62cGJiRvbCZH4sxdAyNHMsz7CEvl+Nf gxHaKcvN8cyEZmG0GUUauw13txJJ+TNzLqIYAMWliDQC8M03v4lMl4kNtnv9c8Rw /1LtZtnh2lYPvvjR1xqzD0hUC/A/PdiQjJtAIgEJr9di6SI9sUjd90+pSlMTs1ST dk11CDYzY6VcQvKGLpWGxSwAci7NAnLr9Ge2ZkMRmigR4Ilhe3mFqe4N+8CnS3sF 8OsO/ZoJta4PbguZH/qgI//ji1E+JBx2seUq6tdjNJRgm/I22+dfAHxiXMeC1fAp adrXPHy1ZRpeFOkurnI9ZofA5QnGuc4VlamlxqxqbGd2TmroKHDxM8w+HJ4zkv2I boYiemaPtMmmDShdLPL3klxiDYJJaiugEhic/dx6D5ZRyqVazEBM6OFxIbrxaEob /8hwQglmTEQwJgX0TKVwbtjd2ZCjtOjZQiZ6GPQPxHW+3C+DcokOCGMsT8TRSO9X 4TaGzQYUY1fNDLqyeltoDLDfB3Xhp8s7tMDIb7BgBa0lNkaO4stg =0JK4 -----END PGP MESSAGE----- Jonathan Wienke PGP Key Fingerprints: 7484 2FB7 7588 ACD1 3A8F 778A 7407 2928 3312 6597 8258 9A9E D9FA 4878 C245 D245 EAA7 0DCC "If ye love wealth greater than liberty, the tranquility of servitude greater than the animating contest for freedom, go home from us in peace. We seek not your counsel, nor your arms. Crouch down and lick the hand that feeds you. May your chains set lightly upon you; and may posterity forget that ye were our countrymen." -- Samuel Adams "Stupidity is the one arena of of human achievement where most people fulfill their potential." -- Jonathan Wienke Never sign a contract that contains the phrase "first-born child." RSA export-o-matic: print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

3 3

Court TV
by Cindy Cohn 17 Dec '03

17 Dec '03

Court TV informs me that they will hold the tape of the argument until a decision is reached and will only show it afterwards. Also, they won't send us the whole thing, even after they've aired the segment, only the parts that make it into their program. Cindy ************************ Cindy A. Cohn McGlashan & Sarrail, P. C. 177 Bovet Road, 6th Floor San Mateo, CA 94402 (415) 341-2585 (tel) (415)341-1395 (fax) Cindy(a)McGlashan.com http://www.McGlashan.com

2 1

Why put up with KRAP?
by Adam Shostack 17 Dec '03

17 Dec '03

Why put up with KRAP? >[Network Associates] believes that although the Key Recovery Alliance >is not in itself a political organization, membership in it has >unintended political consequences that outweigh any technical benefits >we may receive. So, this piqued my interest. What technical benefits did NA receive from participating in KRAP? Did they get any? The press release says "may receive." All Newspeak aside, does this mean that there is a secret document promising the KRAP group something? (This is what remailers and brown paper envelopes were invented for. I'm sure John Young would be happy to scan in some KRAP promises.) If there is no secret document that comes out, we have to ask ourselves, why the alliance? Did these companies really see a market demand? Did the government make promises about size of contracts it would offer to companies that shipped them KRAP? (Perhaps this relates to farming subsidies...) If so, those companies would be well advised to talk to AT&T, whose promised contracts for shipping the TSD-1300 with Clipper in place of DES never materialized. Is there a plan for interoperable KRAP? Is this going to relate to interoperable SET, where competing impulses, competing comittees, and no clear threat model or design goal lead to a spec that isn't, and a need to go back to the drawing board? the simple fact is that cryptographic security is hard enough to achieve without trying to add in layers of KRAP. So why bother? Network Associates decided it wasn't worth it. This then, becomes an open call to the charter members of the KRAP: Apple, Atalla, Digital, Bull, HP, IBM, NCR, RSA, Sun, TIS, and UPS to explain what they're doing in KRAP, what they hope to achieve, and to follow Network Associates proud example, and get the hell out. I'll advise shareholders in any KRAP companyto ask that same question: Is there a reasonable ROI on the KRA, and why are you involved? The hall of shame is on the web: http://www.kra.org/roster.html -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Free Net Football Game
by return＠mail2.vspn.net 17 Dec '03

17 Dec '03

http://www.vspn.net is the WEB site of an all new FREE multiplayer football game for the internet. http://www.vspn.net/DownloadArea.htm for download. Play the wide receiver, quarterback, or fullback while others from all over the world play their positions. All in real-time 3D first person perspective. And it's FREE for the remainder of the beta test period. You like football? You like games? You'll LOVE VSPN. No need to reply as this is the only notice we will be sending.

1 0

"Kids Safe" calls for mandatory blocking sw; op-ed on summit (fwd)
by Anonymous 17 Dec '03

17 Dec '03

>What a pipe dream, as one dies another is born. Good point. They'll probably never learn.

1 0

[MORE] Re: A Pretty Good Story
by Lynne L. Harrison 17 Dec '03

17 Dec '03

NETWORK ASSOCIATES DISAVOWS KEY RECOVERY TIE Citing unintended political consequences, Network Associates - the new owner of PGP - has withdrawn from the Key Recovery Alliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . http://www.wired.com/news/news/email/other/technology/story/9010.html *************************************************************************** Lynne L. Harrison, Esq. | "It isn't pollution that's harming the Poughkeepsie, New York | environment. It's the impurities in mailto:lharrison@dueprocess.com | our air and water that are doing it." http://www.dueprocess.com | - Dan Quayle *************************************************************************** DISCLAIMER: I am not your attorney; you are not my client. Accordingly, the above is *NOT* legal advice.

1 0

Re: Remailer Trivia / Re: Singapore & Freedom (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: Jeff Barber <jeffb(a)issl.atl.hp.com> > Subject: Re: Remailer Trivia / Re: Singapore & Freedom (fwd) > Date: Tue, 9 Dec 1997 08:40:46 -0500 (EST) > Jim Choate writes: > > > To the best of my knowledge no phone company anywhere > > will allow a customer to purchase service without identifying themselves to > > the phone company. Please let me know if there is such a beast somewhere. > > Go to your nearest convenience store. It's got something called a > pay phone. Just cough up a quarter, no ID required. Really? I don't think so. ____________________________________________________________________ | | | | | We built your fort. We will not have it used against us. | | | | John Wayne - Allegheny Uprising | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Re: Crypto Law Survey updated
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Jyri Kaljundi wrote: > On Mon, 8 Dec 1997, Bert-Jaap Koops wrote: > > http://cwis.kub.nl/~frw/people/koops/lawsurvy.htm > Where did you get the information that: "permit from the Ministry of > Foreign Affairs is required for export and for transit through Estonia." ? > I find it pretty hard to believe, because our company as probably the > leading security software reseller has imported and exported every kind of > crypto software to and from Estonia and done transit through Estonia. Or > could someone point me to the source of the sentence in your crypto law > survey? Jyri, There will be some people knocking on your door at 4 a.m. to take you downtown and explain it to you. FearMonger

1 0

Re: Remailer Trivia / Re: Singapore & Freedom
by Charlie Comsec 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Jim Choate <ravage(a)ssz.com> wrote: > > I find it interesting that most of the people who refer to anonymous > > posters as "hiding behind" or "hiding behind the skirts of" something > > usually have unlisted telephone numbers when you try to do a search > > for them. <g> I wonder why "hiding behind" an unlisted telephone number > > is considered acceptable but having an "unlisted" e-mail address is not > > considered acceptable? > > > > BTW, do you "hide behind" clothes when you walk on the street? If so, why? > > Got something to hide? Huh? COWARD!!!! <g> > > Public anonymity and having an unlisted phone number are not even the same > thing. An unlisted phone number is to reduce public exposure, anonymity is > to enhance public exposure and secure plausible deniability. To have an > analogous situation you would need to use a *listed* phone number registered > to anonymous in such a way that ANI displayed the number but any directory > search resulted in anonymous w/ no address or other tracing info even for > the phone company. To the best of my knowledge no phone company anywhere > will allow a customer to purchase service without identifying themselves to > the phone company. Please let me know if there is such a beast somewhere. That analogy is faulty. The issue is the (claimed) need to provide an e-mail address when communicating via usenet, or some other public forum. Since the chosen communications medium is usenet (or a public mailing list like this), you can reply to me via that same medium. An e-mail address is only required if I want E-MAIL replies in response to my post. So, in that regard, a telephone number would fall into the same category. I'd only feel obliged to include a phone number in my posts if I wanted people to contact me via TELEPHONE. Sending anonymous e-mail to a person is more analogous to sending snail mail without a return address. It would be a form of one-way communications, unlike an anonymous PUBLIC post where a public reply is still possible. If you want to use the telephone analogy, then what you're talking about is akin to a pay phone that's not traceable back to an individual. ANI or caller ID would show the number of the pay phone itself, just like anonymous e-mail from a remailer shows the return address of the remailer rather than the sender. (For the majority of internet users, calling someone anonymously on a payphone is probably simpler than figuring out how to use a remailer, so the convenience of being able to call anonymously FROM HOME is not really required.) BTW, while this post does contain a replyable e-mail address, I'm not soliciting e-mail replies and I can't even guarantee that a reply to my return address would reach me, due to the uncertainty of 'nym reply blocks these days. For all anyone knows, all return e-mail could be forwarded to /dev/null@somewhere. > Generaly people wear clothes because it is convenient and required by social > mores and legal statute. Exactly. And yet many on usenet would deny that same CONVENIENCE to anonymous usenet posters. Sure, anonymous posting can be "abused" just as people can conceal illegal weapons under their clothing. But the answer to that is not to require public nudity just to protect against "clothing abuse". I guess a better analogy would be a nudist colony where both nudity and clothing are acceptable. And the de facto censors of anonymous posts would turn Usenet into a nudist colony where clothing was FORBIDDEN, or at least where the wearers of clothing were ridiculed and insulted. > Put your money where you mouth is, send your bank acct. no. & PIN to the > list....come on, you can trust US. As I'd tell someone (if I were posting anonymously) "you go first". <g> A couple of times an anonymous poster has offered "if you want my e-mail address, give me your home phone number and I'll phone you and give it to you". Strange, but I've never seen such an offer accepted. <g> - --- Finger <comsec(a)nym.alias.net> for PGP public key (Key ID=19BE8B0D) -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBNI1CDQbp0h8ZvosNAQGFaAf/RrBdyP7JwwLkoudJ/tgS5dUMx+uOxZ1q 29AfX7rVAARcjJeA+6+a+uScPiy0mr9j8faL8+Qd78/jbKiqDRlZoJykrCfievUW /iklLAAI7aU09ctFlFO0ys2qk5CSOEf1UYpWlZu++L47r5A7OwXhAKhJ86Szhg+M LjYHg71dPUgrqLyDTyA7ldsAbFmXE7WyLbWD1y5AeURzOOV4kXlYGMkjduNIZwyj MrQ27L+NiG8+ruQ1eBIdqxtGiieVqzjQk83uLQRBEphiac+I+S7GHTAGo5YvlkSQ SudLPKR+G9UAFMVyRZklwMkmawPifwKYZIVL0ZiMeI/EkWWyPZrhkQ== =Lw+P -----END PGP SIGNATURE-----

1 0