December 2003 - cypherpunks-legacy

Netscape Security Flaw is a Feature
by Tim May 17 Dec '03

17 Dec '03

Many of us have been watching the CNN reports--headline reports at that--that all past and current versions of Netscape on all platforms have reportedly carried the bug that allows any Web site being hit by Netscape to examine files on the user's hard disk. (A demonstration by the Danish team was compelling. CNN-FN generated a text file, placed it on their hard disk, and accessed the Danish site. Moments later, the Danes read back the text file. Over and over for more examples. They _could have been_ the NSA Web site, and the files could have been history files, passphrase files, etc. History files are common, and give captured kestrokes, of course.) But how could such a massive, massive flaw have gone undiscovered for so long? The answer, "It's a feature, not a bug." According to Netscape spokesmen, this feature was added to the kernel of Mosaic, then Navigator, in 1993, as part of the Clipper Key Recovery Program. As James Clarke put it an interview tonight on MSNBC, "Dorothy Denning asked us to insert the "remote read" capabilities to ensure that the legitimate needs of law enforcement are met. No person cruising the Web has any expectation of privacy, as even Declan McCullagh has pointed out." Marc Rotenberg commented, "Privacy at the individual user level is unimportant, just so long as a Privacy Ombudsman can decide on the legitimate needs of law enforcement." Meanwhile, Microsoft has acknowledge that all lines to its Redmond site are clogged by people dumping Navigator and trying to download Explorer. --Tim May There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

5 6

Andrew Shapiro on privacy rights in The Nation
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Thu, 12 Jun 1997 21:08:37 -0700 (PDT) From: Declan McCullagh <declan(a)well.com> To: fight-censorship-announce(a)vorlon.mit.edu Subject: Andrew Shapiro on privacy rights in The Nation [Andrew is too modest perhaps to mention that his article is the cover story in the most recent issue of The Nation. --Declan] ---------- Forwarded message ---------- Date: Mon, 9 Jun 1997 02:52:22 -0500 From: Andrew Shapiro <ashapiro(a)interport.net> To: declan(a)well.com Subject: Re: FC: Mr. Gates goes to Washington, from The Netly News Declan: Interesting piece. I made a somewhat similar point about how the "siliconaires" (nice coinage) are manipuating the crypto debate at the expense of those making pure privacy arguments. This was in an article focusing mostly on a slightly different topic: this idea of the "market for privacy." Knowing your faith in markets, I doubt we'll agree on this one, but you may find my critique interesting -- and worth mentioning to the list. Given the news on P3 and OPS, the "market solution" will no doubt be discussed at the FTC hearing this week. See http://www.thenation.com/issue/970623/0623shap.htm Best, Andrew Andrew L. Shapiro Fellow, The Twentieth Century Fund Contributing Editor, The Nation 41 East 70th Street New York, NY 10021 ashapiro(a)interport.net work: +1 212 452 7725

1 0

Re: Flag Burning...
by Peter Trei 17 Dec '03

17 Dec '03

"RS" writes: I'm curious as to why you feel the need to conceal your identity. > When it comes down to flag burning, It really bothers me that we allow our > symbol of freedom to be burned. It's more than a flag and a right. It's a > symbol of the freedom we have. To allow someone to publicly burn a flag is > essentially displaying our freedom being burned. It's a symbol, not the thing symbolized. You are confusing the map with the country. Burning the flag is a statement by the burner that they feel that the symbol has become empty, and the freedom which the flag symbolizes is gone or has been compromised in some manner. It's clearly a form of political speech. True, It's a very strong statement, but strong political speech has been protected by the Constitution (at least up till now). > Bush was a veteran, and Clinton was not. I take it the ones who are > writing on this subject about how we should have the "freedom" to burn the > flag have never served in the military or for our country. You are mistaken - some of the people opposing your viewpoint have stated that they are veterans. > Being a veteran myself, I find it very distateful to allow anyone on our > soil to be allowed to "BURN" our symbol of freedom. Think about the flag > for a moment and what it really stands for. Does it not stand for freedom > and liberty? It does *stand* for freedom and liberty, but only as long those values really exist. It *is* *not* freedom and libery in it's own right. When what the flag symbolizes is gone, it becomes just a piece of cloth. Burning this cloth draws attention to the loss. It is a dramatic statement, but under certain circumstances an appropriate one. > Sorry, I just had to let this out. I stand behind Bush on this one. Don't > burn the flag unless you would like to live under another flag! Thank you for your opinion. You are of course free to express it. And I, and other thoughtful, freedom-loving Americans can oppose it. Think about this: Would you rather people did not burn the flag because: 1. They'll be thrown in the slammer if they do. 2. The revere the values for which it stands, and will not descrate a meaningful symbol of these values. In (2), we can look at the (very rare) individuals who *do* burn the flag, and determine for ourselves if they have a valid point to convey. In (1), we'll never know. For Congress to deny the freedom to burn the flag is a desecration of what the flag stands for - a descration of the flag by the government itself. Peter Trei trei(a)process.com Disclaimer: I represent only myself in this article.

3 2

[ADMINISTRATIVIUM] ZKP
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Timothy C. Mayo is not only as queer as a three dollar bill, but he is also into having sex with children. (((> /< ( / ((({{{{{:< Timothy C. Mayo \ \<

2 1

Re: Untraceable Contract Killings
by Blanc 17 Dec '03

17 Dec '03

Vladimir Z. Nuri wrote: >[yadda, yadda, yadda] (yawn) then Truth Monger wrote: >Of course, Bell did ADD a significant wrinkle, and deserves credit >for his contributions. May and Bell. Names that will be >remembered. ......................................................................... L.D.: Still whining after all these years. .. Blanc

1 0

Flag Burning...
by RS 17 Dec '03

17 Dec '03

When it comes down to flag burning, It really bothers me that we allow our symbol of freedom to be burned. It's more than a flag and a right. It's a symbol of the freedom we have. To allow someone to publicly burn a flag is essentially displaying our freedom being burned. Bush was a veteran, and Clinton was not. I take it the ones who are writing on this subject about how we should have the "freedom" to burn the flag have never served in the military or for our country. Being a veteran myself, I find it very distateful to allow anyone on our soil to be allowed to "BURN" our symbol of freedom. Think about the flag for a moment and what it really stands for. Does it not stand for freedom and liberty? Sorry, I just had to let this out. I stand behind Bush on this one. Don't burn the flag unless you would like to live under another flag!

10 9

Re: Untraceable Contract Killings
by Blanc 17 Dec '03

17 Dec '03

Vladimir Z. Nuri wrote: >[yadda, yadda, yadda] (yawn) then Truth Monger wrote: >Of course, Bell did ADD a significant wrinkle, and deserves credit >for his contributions. May and Bell. Names that will be >remembered. ......................................................................... L.D.: Still whining after all these years. .. Blanc

1 0

crypto page
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Sender: mac-crypto(a)thumper.vmeng.com Reply-To: Vinnie Moscaritolo <vinnie(a)webstuff.apple.com> Mime-Version: 1.0 Precedence: Bulk Date: Fri, 13 Jun 1997 13:15:56 -0700 From: Vinnie Moscaritolo <vinnie(a)webstuff.apple.com> To: Multiple recipients of <mac-crypto(a)thumper.vmeng.com> Subject: crypto page I am starting to create a crypto resource page (soon to be part of mac crypto) it is at http://www.vmeng.com/vinnie/crypto.html Its a first crack... if you have any (even obvious) additions I would appreciate them. Vinnie Moscaritolo That Crypto Guy at Apple... http://www.vmeng.com/vinnie/ Fingerprint: 4FA3298150E404F2782501876EA2146A --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Re: [Noise, California only] Good deal on ISDN access
by dshipman＠ewol.com 17 Dec '03

17 Dec '03

At 05:55 AM 6/11/97 +0200, you wrote: >Lucky Green sez: > >> Given that a good number of people on this list live in CA, this might be >> of interest to you. It certainly was to me. PacBell is selling flat rate 2B >> ISDN Internet access at $50/month. Plus the regular home ISDN fees, but >> this is still much cheaper than what I paid before. You might want to think >> hard before you buy at new 56k modem that in all likelihood won't be able >> to give you 56k anyway. And no analog modem will ever give you 128kbps. > >But don't they still charge you a penny a minute? That adds up fast, and >would probably cost you more than your $50 internet access fees. Plus the >cost of ISDN service... All told, you're looking at $150 or so per month. > >When for $150 you can get a brand spanking new 56K modem, and pay $20-30 a >month. Not as fast, but a much better price/performance ratio. > > GTE in SRQ charges a flat (no installation charge or per minute on a 36 month contract) rate of $54.00 plus any long distance calls I make on the SPID. My ISP charges $34.00 for a total of $88.00 and I am connected 125/175 hours a month. Early on, I found a definite need for a separate line ($19.00) to support my habit and when I installed ISDN that line was removed. Net cost for a *true* observed 3X speed increase, FAX, and voice com is $69.00 a month. A BitSURFER Pro TA cost $360.00 and replaced a 28.8 modem. As soon as my ISP gets around to it (and figures out what to charge), the wires get twisted and the 3X increase should double. Those who buy a "56k" modem are in for a disappointment. No POPS in the US supports more than 53k and many run at *much* less due to cross talk problems. Also, your ISP will have to choose one of the two available "standards" (X2 or 56Kflex) with no assurance that when the 56k dust settles you will still have compatible equipment. Those who live in ATL or are PAC Bell customers should examine the possibilities of ADSL which is supposed to roll out in both areas, sometime in the last quarter. Bell South plans to offer ADSL the first quarter of next year and DMT appears to be winning the "standards" battle with CAP for ASDL protocol. I've not seen any cost information but presume that the increased bandwidth will result in higher charges than ISDN. Unfortunately, here in the swamps of southwest FL, ADSL will not be an option for several years. DLS ------------------------------------------------ That field hath eyen, and the wood hath ears. Geoffrey Chaucer. 1328-1400. (From the text of Tyrwhitt.) Line 1524.

1 0

nym.alias.net back!!!!!!
by Arunas Norvaisa 17 Dec '03

17 Dec '03

there will be no comments from my stupid self. Hoorah!!! quote ===== >From lcs Remailer Administrator <mix-admin(a)nym.alias.net> Organization mail2news(a)nym.alias.net Date 14 Jun 1997 04:27:52 -0000 Newsgroups alt.privacy.anon-server Message-ID <19970614042752.18952.qmail(a)nym.alias.net> As of tonight, the alias.net domain seems to have been restored by the Internic. While negative lookups on the domain name may still be cached for 24 hours or so, nym.alias.net should soon be fully accessible within a day if it is not already. This down time has been fairly disastrous, but I suppose there is a brighter side--chances are the all nym.alias.net addresses have been cleared from spam databases, so as the remailer comes back on line, people should see less unsolicited mail than they used to. unquote ======= -- greetz... Arunas Norvaisa - little guy, The Masses Inc. <mailto:arunas@post1.com> with subject: 'send key' to get PGP key PGP for idiots page <http://www.a-vip.com/an> and a mirror site <http://www.post1.com/~arunas> IBM: Insultingly Boring Microcomputers

1 0