December 2003 - cypherpunks-legacy

Re: church of crypto anarchy (Re: Taxing Churches for their views? Bad idea. (fwd)) (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 6 Nov 1997 08:52:15 GMT > From: Adam Back <aba(a)dcs.ex.ac.uk> > Subject: Re: church of crypto anarchy (Re: Taxing Churches for their views? Bad idea. (fwd)) (fwd) > Jim Choate <ravage(a)ssz.com> writes: > > Adam Back <aba(a)dcs.ex.ac.uk> > > > Seems to me that the distinction that churches are exempt from taxes > > > partly hinges on their non-profit, or not-for-profit status. > > > > No, it stems from the fundamental democratic axiom of seperation of church > > and state. If the churches pay taxes they aren't seperate. > > I pay taxes, I am separated from the state. Do you hold US citizenship? If so then, no, your assertion of seperation from the state is incorrect. It's that pesky "We the people..." thing. If you want to be considered seperate from the US *AND* you don't want to pay US taxes then renounce your US citizenship and move to another country *OR* figure out a way to become your own 1 person church. Like it or not that's the way it works. > > If the state supports churches they aren't seperate. > > If the state doesn't tax churches they are subsidizing them relative > to other sorts of organisations. This is surely a form of support. Subsidize means to pay, the government does not pay as a rule pay the churches anything, that would violate the seperation clause as well. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

WINDOWS *.PWL program
by �ukasz Bromirski 17 Dec '03

17 Dec '03

Two years ago, you've posted an Windows 95 *.PWL cracking program. However, it was severly broken in our news group. Could you post me personally a full-working copy of it (as an e-mail) or a source (full) of this program? I'll be glad to see it. Thanx in advance. -- ### ### ### ### ## ###### £ukasz Bromirski # # # # # # # # ## # #### e-mail: szopen(a)gazeta.pl # # # # # # # ### # ## tel. (+48) 022 699 48 00 # #### # ### # # # ## # #### Agora-Gazeta Sp. z o.o. ###### ####### ### ## ###### Dzia³ Telekomunikacji

1 0

Clarifying the Language
by Mixmaster 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- TruthPastor wrote: >Jim Burnes wrote: >> On Wed, 5 Nov 1997, Anonymous wrote: >> > Churches, like governments, corporations, or any other organized >> > entity, have some wonderful people in them, doing wonderful things. >> > The problem, as always, is what our founding fathers realized--these >> > types of organizations/structures tend to grow and attain power which >> > is then used for the purpose of self-sustained growth (survival). >> > Humanity tends to evolve, while organized humanity tends to de-volve. >> > Biped humans, walking upright, form organizations which move toward >> > becoming quadrapeds dragging large clubs. > >> Ha! This is pretty interesting. Rather than the typical cypherpunk >> approach of eliminating such inefficient and corrupting methods as >> income taxation and tax exemption we are playing by their game. Pathetic, isn't it? > Taxation and exemptions are, conceptually, no different than a >tribal agreement that those who bring home the deer will share >with those who guard the campsite, and that the shaman who keeps >the evil spirits at bay has to do neither. The important word in this sentence is "agreement". If the American taxpayer does not agree with how his tax money is being used, does he not have the right to demand that it be used in an appropriate way? If his demands go unanswered, does he not have the right to refuse to continue paying? If the American taxpayer does not like substandard education, abortion, weapons manufacturing, destructive environmental legislation, and so forth, why should she be forced to pay for it? The simple fact is that taxation in America has ceased to be an agreement, and has devolved into extortion with the threat of jail/forfeiture for "non-compliance". >> The whole of [Orwell's] warning to society was that by systematically >> altering the language, you alter the things that can be discussed. > > I believe that half of the disagreements on the cypherpunks list, >and the vast majority of disagreements in the world in general, are >the result of disputes over semantics, rather than beliefs. If one were to break down the anti-Income Tax argument to its most basic level, it would be that the government does not have the right to extort money from its citizens to promote agendas which are destructive of the citizens' persons and property. Basic Common Sense (TM). Nerthus -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQEVAwUBNGHX9uFWwZe05jcJAQGj8AgAhPmUFgdrB5Wf5TYARJs7BovxFd+irLSA DlSehEMQfzergb3hsl90rW+HFxlw01CueQrkZpCKlRoHUxeoj3vimgpXBJRwjFDE ky2qhCSlFcjXEtqB6IBvPkzqd7lUK/lpv7VQzgsUrz6kS97l566sQTSILzF10mN2 NUT2CawCaU+69ZzR+oNwe6V8Yf1CWygIDYKnOiSpwRYsB6AV0kZcb5RKIYfDnNe7 FFjLsbg6L7LhQvvHHcs8CRkzjwo70sDI6kLOdUJvWPhyzuf4laam8L+tguTxrA96 2TUsMuG6Hi3WJVcUkabkx8J4D6yy3Pqep/scSgaqvwAr6VFJBh+KLg== =32Dc -----END PGP SIGNATURE-----

1 0

CNN's "Ian Goddard Plot"
by freematt＠coil.com 17 Dec '03

17 Dec '03

From: Ian Goddard <igoddard(a)netkonnect.net> Subject: CNN's "Ian Goddard Plot" _________________________________________________ ( free to forward & copy nonprofit with attribute ) ------------------------------------------------- CNN's IAN GODDARD TWA 800 "PLOT" (c) 1997 Ian Williams Goddard I've tried to decisively extricate myself from my TWA 800 inquiry, but it seems that CNN and the gov't don't want me to go. CNN is spreading gross misinformation on television, indicating that I said my inquiry into TWA 800 was part of a "sham" and a "plot." That is FALSE!! I've always promoted what I believe, and now I believe promoting the Navy-missile theory was a big mistake! I believe that the evidence is not sufficient to blame the Navy and I wish to move away from that and all areas of conspiracy inquiry forever. But I never said my inquiries were a "plot" or a "sham." Christine Negroni with CNN contacted me a few days ago to ask about my change of direction, I did not contact her. CNN reports now suggest that I said my conspiracy inquiry was part of a "plot" (a secret scheme) to do damage to the government's reputation. That's 100% FALSE !! My only crime is honesty. I'm honest enough to admit, as I have for months, that my inquiry into TWA 800 was an effort to identify untruth in the government. I have a fact-based bias against government, I'm a libertarian. My webpage was entitled "Anti-Authoritarian Journal," identifying my bias up front, unlike most sources. Such up-front honesty is NOT a "plot," as CNN attempts to portray it. The fact is that anything that is labeled what it is up front is by definition NOT a plot. I'd say CNN has a bias for the gov't line, however, does CNN label its journalism "Authoritarian Journalism?" No. WITNESSES NOT MY FAULT I did not invent nor am I to blame for the fact that 150+ witnesses reported having seen something fly upwards and explode at the spot TWA 800 was. That there were such wit- nesses, up to 154, has been widely reported in the media. CNN just reported in reference to me: Joe Lychner of Houston, who lost his wife and two daughters in the crash, told CNN that Goddard and Salinger owe an explana- tion to the American public. The basis of the missile theory are the witnesses, and I did not invent the witnesses. If anyone owes America an explanation for the missile theory I think it's the wit- nesses, not me. All I did was report what they said and commit the error of theorizing that maybe that fiery thing shooting up was a Navy missile and the Navy is covering it up. I also did not invent the Navy-missile theory. My explanation for that theory is that the Navy is known to have many missiles and is known to be off- shore where the plane crashed. However, an inventory showed that all Navy missiles were accounted for... OK fine, I'm ready to move on, but it seems they aren't: National Transportation and Safety Board spokesman Peter Goelz told CNN that my re-reporting of witness accounts and theorizing that the Navy was at fault has done "real damage" and "caused innumerable people great agony." Wow! It seems I'm a human monster of immense proportions. I am sorry for that, yet it would seem that the fault lies in part and primarily with the major media for ever having reported the witness accounts in the first place. I then made the mistake of suggesting that the Navy may have been at fault and is covering it up, which I now see as a mistake, for I could be wrong and if I'm wrong I've impugned the reputations of America's finest, which is something I should not and do not now want to do, and for which having done in the past, I am very sorry. I don't know what happened to TWA 800, and at this point I don't care! I just want to be left alone and no longer harassed by the major media and others over the TWA 800 case. I'm sorry I thought the Navy did it. It was a mistaken thought. I'm sorry my thoughts have "caused innumerable people great agony." I'm a humani- tarian and have been a vegetarian for 19 years because I want NOT to cause suffering to any living being. CNN's "SECRET SCHEME" THEORY I've never published anything I thought was false. I even published errata notices when required. All claims I've made were meticulously referenced so that readers could check up on what I said for themselves. Providing not just referenced information and ideas but all the links necessary to access the larger body of information about the case is what made my reports so popular and what made this little guy the focus of world news. My plan has been to end my "war on the Establishment." Wanting to move on from conspiracy theory and set a new course, I asked Doctor David Stern, who hosts the DEEP TIMES webpage, to remove my conspiracy reports. However, due to CNN's misleading charges that I've admitted to having been engaged in a "plot" and thus that I will- fully attempted to mislead people to believe what I knew to be false, I have requested that David Stern temporarily replace all my reports so that people can judge for themselves if I was the liar CNN suggests. It will take David some time to get the reports back up, but when they are up you can access them directly at: http://www.copi.com/articles/Goddard or indirectly at: http://www.copi.com/articles/. Please check the first site within the next few days. _____________________________________________ Ian Goddard, now at <igoddard(a)netkonnect.net> ************************************************************************** Subscribe to Freematt's Alerts: Pro-Individual Rights Issues Send a blank message to: freematt(a)coil.com with the words subscribe FA on the subject line. List is private and moderated (7-30 messages per week) Matthew Gaylor,1933 E. Dublin-Granville Rd.,#176, Columbus, OH 43229 Archived at http://www.reference.com/cgi-bin/pn/listarch?list=FA@coil.com **************************************************************************

1 0

Re: Privacy Software
by nobody＠neva.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Adam Back wrote: >Java isn't so bad. Just in time compilers are being shipped with >some browsers (netscape on some platforms). Sun now has native >bigint library (good for you know what, and exportable because they >haven't included the few lines required to implement public key >encryption with it). Okay, Java sounds pretty good. The native bigint library clinches it! >> While it may seem crazy to toss compatibility, it has some >> advantages. For instance, the only people who will use it are the >> hardcore types. I like the idea of an exclusive crypto system that >> only cool people who are fairly with it use. > >I think there would be advantages to always tunneling the encrypted >messages inside PGP, that way no snoops know you're using it, until >it's too late. Aside from political correctness issues, why not? It would also be nice to have an encrypted SMTP channel which happens to be riding on IPSEC. >> If the protocol doesn't accept multiple keys for a message it is >> slightly CAK/GAK resistent. And, it's a nice statement of intent. >> It's also nice to have tools which help you to behave securely >> without carefully thinking about it when you are using them. > >Forward secrecy is what you want for GAK resistance -- can't get much >more GAK hostile than burning your keys seconds after message >receipt. The more I think about the more the separation of authentication keys from communication keys seems like the way to go. If both parties can connect to each other's machines in real time, then a negotiated key which is discarded is great. More often everybody's offline, but that just means you have to publish many different communications keys, perhaps sorted by hours. (Given remailer lag you might have to keep communications keys around for a day or two after expiration, but that's not too bad.) >> The randseed.bin file has always bothered me. What we really want >> is some good sources of entropy in which we have tremendous >> confidence. > >What's wrong with the randseed.bin and the public and private key >rings is that they should all be encrypted with a key derived from >your passphrase. It's also complicated and hard to understand. The Right Thing (TM) is to simply solve the entropy problem correctly. >> >I wonder how good linux's /dev/urandom would be if MD5 becomes even >> >more suspect. >> >> Well, neither of these would be good for a one time pad, of course. > >Linux's /dev/random might not be bad. There is some real entropy in >key strokes and mouse movements, and they are quite conservative >about entropy estimation. You can easily make it more conservative >-- XOR together a load of it to derive a smaller key. The problem with computers generating entropy is that they are complicated machines which are designed to be deterministic. While it seems reasonable that keystrokes and mouse movements have some entropy, its hard to really convince yourself that there couldn't be patterns arising from the OS somehow. For example, maybe the sample times form weird patterns which are related to the scheduler. By all means this can be XORed in, but it seems dangerous to rely upon it if you are trying to be hardcore and use one time pads. >> It would be neat to have, say, three sources of hardware randomness >> and then XOR the result with the above pseudo random output. > >That'd be fine. Personally not being a hardware type, I am >suspicious of hardware RNGs.. I can't tell when they are going >wrong.. failure modes can be dangerous (whoops lead fell of geiger >tube), etc. Most plausible failure modes in hardware should be detectable with the usual tests for "randomness". >Software and computers are easier to understand. Provided you XOR >the lot together you should be fine though. Software and computers are highly complex devices and we don't truly understand every aspect of their operation. We can say it's unlikely that there are patterns in the bits they generate, but if we resorting to one time pads, it seems to me that the entropy question has to be nailed down completely. (Not that I have a good solution, yet. As you pointed out, one time pads consume a lot of entropy. It takes a long time to flip a coin 1.5 MB * 1024 bytes/MB * 8 bits/byte times!) Monty Cantsin Editor in Chief Smile Magazine http://www.neoism.org/squares/smile_index.html http://www.neoism.org/squares/cantsin_10.htm -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNGK7tpaWtjSmRH/5AQH1Rgf7BWVm8IsauXUry7vzL1Wiw/jlISKXO+q2 SWXOW0ce2jH1wKH+X3FbiONLYihzhp8UIvyn6FO7rVXHMdXoDXFVhrpyhbphcejM hokty69o1hQqLU9aX6z7OAA7Vjj2zKZXWc7U596UGkc0+G64qpJfh7kZoHY+Q332 uWMhEHu0AOnv9wGK9Fip4J4n/4jh/ob00VXXeTGG9peJ/AZBqtJMHV9tLW8Xu2EA Yc+zdUmk2jjSHvi2a/9u8NTsJapUVFiEaZ8+iQCZYeP8SG6oAsMmMb0rrCj1y+DK EtMt0rtC6jHGl8dag7zfZLpiIrl6mObMexbh5gAJ40Fb6Ei0HLbZ0g== =4BA0 -----END PGP SIGNATURE-----

1 0

Re: Protocols for Insurance to Maintain Privacy
by Anonymous 17 Dec '03

17 Dec '03

Two ways to tell if the person has had the test: A) The company performing the test keeps track of everyone who has had it. This could be by some biometric ID, perhaps even a DNA fingerprint. B) The company performing the test marks people who have had it. They could have a harmless radioactive tracer injected. This would degrade after a while but it could be used to see if the test had been taken within some time interval. Both of these require that all companies able to issue the test cooperate and that there is no black market source of testing.

2 1

[news] U.S. cyberterrorism report hit on encryption stance
by Vipul Ved Prakash 17 Dec '03

17 Dec '03

*** U.S. cyberterrorism report hit on encryption stance The U.S. commission on critical infrastructure was criticized Wednesday for endorsing the Clinton administration's policy requiring government access to all private computer data. Sen. Patrick Leahy said key questions had been raised about costs and feasibility of so-called key recovery systems. "Until those significant questions are ... answered, we should be cautious in adopting grand key recovery encryption schemes that may exacerbate system vulnerabilities," Leahy said. The commission's report warned key telephone, power, water and financial systems were increasingly vulnerable to computer attack. For story http://www.infobeat.com/stories/cgi/story.cgi?id=5804555-b01

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

I have your GAK. Mail me your CAK and we'll trade.

1 0

Re: Govt. key escrow justification
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Adam Back wrote: > This is scary stuff... Clipper VI (or whatever number we're up to) in > the making. Expect a fresh onslaught of government master key > attempts from the US government based on this info war initiative. > Michael Wilson <0005514706(a)MCIMAIL.COM> forwards: > > In its formal recommendations, the commission urged the government to > > speed up pilot programs on key recovery, promote efforts to plan for > > implementing large-scale key recovery systems and encourage > > private-sector key recovery efforts. > And there it is, they now want to encourage private sector key > recovery. Now why would they want to do that, if they don't plan to > use it as an infrastructure. > Building central control in _anything_ is asking for trouble > in info war terms. Everything should be as distributed as possible, > to minimise scope of an attacker who compromises keys. InfoWar goes on all the time amongst the Heavy Hitters in governement and commerce. It's called politics and money. Scenario I: Bill Gate$ reads an article where US Federal LEA's are bragging to insider politicians about their history of using their snooping and InfoWar capacities to financially disrupt 'bad' governments and corporations. Bill Gate$ then hands his company's secret keys over to the government because he trusts them to settle their dispute with him in court, instead of just 'grabbing' his money via his secret keys. Scenario II: Bill Gate$ gives his company's secret keys to Lucky Green, who runs toward the site of the Cypherpunks physical meeting, shouting, "Party time! Party time!" BillyG walks back to the limo, muttering, "That Lucky sure has a good sense of humor...I hope!" > Law enforcement with the master keys to the whole country is a huge > risk. Some law enforcement key custodian will simply be bribed or > coerced for the key, and then they really will have an info war risk. The only thing security levels do is determine the end cost of compromising security. Do you have to bribe/coerce a janitor or an executive? > > Asked by the subcommittee's chairman, Jon Kyl, an Arizona Republican, > > if those controls should be mandated, Marsh responded: "We think > > businessmen will find it in their best interest to incorporate these > > controls. ... Of course, in due time, that may be an option if they > > are not willing to accept them." Voluntary-Mandatory == Volmundatory ? GAK, GMR, ATP (Access to Toilet Plungers)...Cookies, Identity Tracking... What is going on is quite simply a battle for access to information. InoWar! Everybody wants access to the information of others, and to deny others access to their own information. Information is power, and power is kept by keeping the keys to that information. Corporations want to play footsie with the Government when it comes to getting access to all information and communications that pass through the self-defined borders of the Corporate Electromagnetic Curtain, but want to avoid being subject to total control within the borders of the Government's own self-defined ElectroMagnetic Curtain. The issues of power and control are the same as they have always been, but the Battle of the Bulge is now the Battle of the Byte. Government, Corporations, Organizations, Individuals...the players will be the same as in MeatSpace, and so will the issues and underlying concepts and ideals. Those seeking power and control will use the same tried-and-true methods, such as Divide and Conquer. "We don't want no 'nigger' data passing through our website. <---> We don't want no 'racist' data passing through our website." Chorus: <everybody sings together> "THERE OUGHT TO BE A LAW!" The Government wants to seize contol of ElectroMagnetic Reality by appointing themselves as our Electronic Protectors. Corporations are fighting to use the new technologies to protect themselves, cutting the Government out of the power loop. Individuals _should_ be trying to do the same. Government has declared Crypto munitions for the same reason they increasingly declare Guns to be 'government-munitions'. Those who have no power to protect themselves are vulnerable to those who have _reserved_ that power for themselves. Crypto or Guns...it's all about power and control of CyberSpace and MeatSpace. MunitionsMonger

1 0

BXA mtg in DC, 12/9/97
by Greg Broiles 17 Dec '03

17 Dec '03

In late September, I attended a meeting of the BXA's Regulations & Procedures Technical Advisory Committee in Portland (OR), where there was some discussion of crypto export control regulations, plans for changes to those regs, etc. There will be another meeting of that group on 12/9/97 at 9 AM in the (Herbert C., not J. Edgar) Hoover Building, Room 3884, between Pennsylvania & Constitution Avenues, NW, in Washington DC. The agenda is: 1. Opening remarks by the Chairperson. 2. Presentation of papers or comments by the public. 3. Update on the encryption regulation. 4. Update on the Wassenaar Arrangement implementation regulation. 5. Discussion on the "deemed export" issue. 6. Discussion on the Enhanced Proliferation Control Initiative and the continued publication of Entities of Concern. 7. Update on the Automated Export System. 8. Discussion on efforts to conform the Foreign Trade Statistics Regulations and the Export Administration Regulations on export clearance requirements. [Closed session] 9. Discussion of matters properly classified under Executive Order 19958, dealing with U.S. export control program and strategic criteria related thereto. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | Export jobs, not crypto. http://www.io.com/~gbroiles | http://www.parrhesia.com

4 3