- cypherpunks-legacy - lists.cpunks.org

Re: Another Motivation for the CDA (Federal Sentencing Guid
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 9:59 PM 3/8/96 -0800, Bill Stewart wrote: >The pizza guy was a thug, but twice as many third-strikers got >their third strike for marijuana as for all violent crimes combined. >I assume most of these had large quantities, possibly intended for sale, >and a number of them had real crimes as their previous felonies >rather than Prohibition-related offenses. But you can get legally >serious quantities of marijuana by just growing a couple of plants. I wonder how many of these drug dealers previous "real crimes" were related to using violence to protect their drug business, defense which would have used the courts and police had drug dealing been legal. ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

1 0

Re: V-chips, CC, and Motorcycle Helmets
by jf_avon＠citenet.net 17 Dec '03

17 Dec '03

"E. ALLEN SMITH" <EALLENSMITH(a)mbcl.rutgers.edu> wrote: > Has it? Currently, we've got the guys who deal with the public (the >politicians and the low-level bureaucrats) and the faceless drones (the rest >of the bureaucrats). The politicians can be protected, and already are to some >degree. The low-level bureaucrats aren't _that_ likely to be targeted by enough >people to make a difference, and the ones who go bad enough to do so can be >protected (or sacrificed, if that seems to be the way to keep the public >happy). The faceless drones can be even more faceless, and so very hard to >target. Just a question to you: What makes the faceless drones powerfull? JFA Over the clouds, the sun always shine. Public Key at http://w3.citenet.net/users/jf_avon Jean-Francois Avon <jf_avon(a)citenet.net> 2048 bits key ID:C58ADD0D 1996/03/01 fingerprint=52 96 45 E8 20 5A 8A 5E F8 7C C8 6F AE FE F8 91

1 0

Java and PGP
by wiz 17 Dec '03

17 Dec '03

With all the current discussion on Java encryption api's, it got me thinking. Would it be possible to write a Java applet that provides secure email? By secure, I mean that nobody but the intended recipient of a letter can read it. And that the reader knows who wrote it. That is, encryption and signing a la PGP. Using https you would download a Java applet from your mail server. Https is needed so that a MITM can not give you a fake applet. The applet will fetch your secring.pgp from the mail server. It will fetch your mail by POP3 from same server and decrypt any PGP mail using the pass phrase you enter in the applet window. Problem with this setup, your mail server administrator could give you a fake applet that sends your pass phrase back to him. That means that the applet must be verified anyhow, so maybe https doesn't really help. Anybody see a solution to this? If the applet viewer (such as Netscape 2.0) would show an MD5 sum of the applet, we could verify that with a third party. But it should be done automatically, like the way Netscape verifys https. <wiz(a)c2.org>

1 0

ANNOUNCE: NOISE.SYS v0.4.9-Beta /dev/random driver for DOS syste
by Deranged Mutant 17 Dec '03

17 Dec '03

The latest version of NOISE.SYS (0.4.9) should be available "real soon now" at ftp.elf.stuba.sk in the ??/security directory [I don't remember the exact path...]. It should also be available at the ftp.wimsey.com and ftp.funet.fi sites soon. NOISE.SYS is a /dev/random driver for DOS systems, similar to the random.c implementation for Linux and FreeBSD. It sets up two devices, "random" and "urandom" which return streams of crypto- quality random bytes based on fast timings from the keyboard IRQ, disk access, Windows 3.x message broadcasts, mouse movement, and cpu clock drift, with some experimental kluges to sample the audio card input [to be improved in future versions]. The raw samples are mixed using a polynomial function and then hashed using SHA-1. Entropy estimation is based on arithmetic coding schemes and how often samples recur, rather than on the sample deltas themselves. The source is included (in 386 assembler) and is relatively easy to modify and experiment with [plenty of comments and macros]. Rob. --- Send a blank message with the subject "send pgp-key" (not in quotes) to <WlkngOwl(a)unix.asb.com> for a copy of my PGP key.

1 0

Re: Another Motivation for the CDA (Federal Sentencing Guid
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- jamesd(a)echeque.com wrote: > In theory one would expect the law to have this unjust effect, > but in practice most of the poster boys that people give as > examples of the injustice of this law are folk that one would > like to see taken behind a barn and shot out of hand. Three strikes you're fried eh? Dont even bother cutting off their hands - straight to old sparky thats what I say! In theory one would expect the law to deter folk from committing crimes, but in practice folk (a) don't expect to get caught which means there aint no deterrent, or (b) the folk don't consider the crime to be serious, eg. smoking pot. Mutant Rob wrote: > Bill Stewart wrote: > [..] > > And the guys who just got busted for having fertilizer, diesel oil, > > and drugs on their farm had a whole three ounces of marijuana and > > personal-use quantities of crank. Maybe they were planning to blow up > > buildings rather than stumps; but the Feds are trying to paint them > > as max evil just to build up their case. > > Perhaps they were going to use the fertilizer for the grass and the > heating oil to keep warm (or to keep the plants warm). It's possible... Yeah, but it don't go off by itself, it needs a big kick. Did they find any dynamite or other real explosives? I doubt it. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMUGAOSoZzwIn1bdtAQH73gGAhV1UF2rU4lYz2Dc1jEi+GnYIds6aDOsX ymKYkdjoDo6+z4ypYbLJsOq9eM6es/AS =TvUJ -----END PGP SIGNATURE-----

1 0

Re: [ Death of MOSS? ]
by Housley, Russ 17 Dec '03

17 Dec '03

Jim: >> And if you look at what I've said previously, it is my firm belief >>that if we are to succeed in giving users a truly interoperable secure >>email standard, then said standard must be fully and completely >>integrated into MIME and do everything it does in the proper MIME way, >>as opposed to just being security grafted on. > >Allow me to make a contentious statement: > > MOSS is the only secure email protocol integrated with MIME. > >You see, integrated to me means that the base is security aware. MIME is >only security aware when the security multiparts are used. In all other >cases, MIME is not security aware. > >The use of the application content-type with experimentally defined >subtypes gives the appearance of MIME being security aware, but it >provides nothing more than a mechanism for carrying a protected object. >In addition, the fact that the security service itself must do a callback >in order to support recursive services, unlike MOSS which uses the >security multiparts framework and thus lets MIME do all the work it was >designed to do, further supports my position. Jim, in what way does the end user distinguish between the MOSS-like integration and the S/MIME-and-MSP-like integration? It seems to me that a good user agent implementation provides the same services to the user. Russ

1 0

Re: FCC & Internet phones
by tbyfield＠panix.com 17 Dec '03

17 Dec '03

At 12:47 PM 3/9/96, Mutant Rob wrote: >Yes... but the Internet is not like HAM radio. The FCC has no >jurisdiction outside the US, and it would cause various problems >for them to try to regulate the use of IPhone or how ISPs operate. Question of how practical enforcement would be haven't been big in a lot of the legislation we've seen coming out of various capitals, so I doubt the situation for bureaucratic rule-mongering would be much different. The WP article said that has ACTA has "asked the [FCC] to stop this kind of communications and study how to regulate it," probably--and not surprisingly --in that order. It looks like another case of trying to saddle ISPs with impossible enforcement burdens, though in this case one that a lot of ISPs might not mind so much, given the bandwidth that netphone usage eats up (cf. xs4all, I hear, has forbidden users to run CU-SeeMe). Q: Is it practically possible to find netphone traffic on a generic network at any level above the source and target addresses? Ted

1 0

Why the phone companies are going after Internet phones?
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

I suspect that the below bit of information may explain why the phone companies are going after regulation of the Internet phone market. -Allen ----------------- Reuters New Media [...] _ Friday March 8 6:04 PM EST _ Firms to Offer Computer to Telephone System [...] NEW YORK (Reuter) - Two New Jersey companies said Friday they have developed technology that will allow voice conversations via the Internet between users of computers and ordinary telephones. The two companies, VocalTec Inc. of Northvale, and Dialogic Corp. of Parsippany, said they expect the system to be available in the next few months. The company said the computer-to-telephone connection, known as the Internet Phone Telephony Gateway, will allow computer users to place calls to normal local, long-distance or international telephone users. Internet-based phone communication presents a low-cost alternative to traditional telephone communications handled by local and long-distance carriers. It enables callers to combine the low cost of Internet connections, the convenience of initiating calls from either PCs or telephones, and the ability to communicate with anybody with a telephone via the public switched telephone network. However, the Internet poses technical problems such as variable voice quality and momentary speaking delays that preclude, at least for now, any widespread replacement of existing phone networks by Internet telephone communications. VocalTec chairman Elon Ganor said the software provides the conversational quality of a good cellular phone connection, but the quality may vary depending on the sophistication of the Internet access company providing the local connections. He said the Internet telephone gateway is expected to be available as a complete system in the second quarter of this year. [...] The product will be available to third party product developers to incorporate into their own products. Ganor said the products will be sold through Dialogic and Vocaltec's existing networks of resellers, system integrators and direct channels. VocalTec said the Internet Phone Telephony Gateway will enable new applications that use the Internet as a low-cost network for computer-to-telephone and phone-to-phone calls. Calls to wireline and cellular phones are possible. The system is comprised of a PC running Windows 95 and the VocalTec gateway software and a Dialogic computer telephone adapter card and linked to the telephone network and the Internet through a 28.8 kilobit or faster modem connection. The new software complements the company's existing Internet telephone software, which currently can only connect one personal computer user to another. ``The availability of the Internet as an open, global information network has generated considerable interest from our customers,'' said Bob Heymann, vice president of business development at Dialogic. ``The Internet Telephony Gateway will enable (resellers) and systems integrators to offer innovative applications such as international 'hop off' and Internet-based customer service,'' he said. Dialogic is a leading maker of add-on computer hardware circuit boards that enable computers to function as telephones. [...] VocalTec is headquartered in Herzliya, Israel and has U.S. offices in Northvale, N.J. It went public Feb. 7, 1996.

1 0

Re: U.S. State Dept criticizes Chinese net-censorship
by jf_avon＠citenet.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Paul said: >examples set for him by those who are his mentors. If man turns >predatory, it is because he found that set of behaviors best suit his >needs of the moment - otherwise he would seek other ways of fullfilling >those needs. >Hence - we are not rational creatures. Well, I do not agree with that statement. Even if most individuals are not acting on rational basis, it does not mean that Man is not a rational animal. Man exercise thought and reason in a volitional manner. Wether he decides or not to do it is another thing. So many peoples *actively* avoid thinking and yet, it is the only way they could survive if it were not of others... In a sense, they are free-riders. To think and use reason requires efforts. I guess that they just do not like exercising... Regards JFA -----BEGIN PGP SIGNATURE----- Version: 2.6.2i iQEVAwUBMUHk4siycyXFit0NAQG9rwgAngIpFTTbaJXBG+u3fiLPdMhDl9VOTHAW nIxuRZ1AkMbXZbJXYeY97C0BLxMt7PqQInDUL0eW68GwAt2F7LqUuhdKh64QXwi+ 7jHas+/RCDj/CkxifHZv67uNPuIb7k0mDH8hHumsF0rUXT93P8yNWAMeL6z7dBnG M2vapstNpxwhmX+u9La3smoGDQniJ2XkQ7VDIcM9rfDrIl1Z3lmuzmpxn+HuxMJm i38fbmBuouL7WtxRhv0F8qVdz05O21+3tn7L303UWS21ffw8Su970gvHwDr6F0HU vLmpN6zv/s1mgqF7gTAb5GUizmH2vwjgR7/5kzH7GViKl4ZI5cY1EA== =JmUo -----END PGP SIGNATURE----- Public Key at http://w3.citenet.net/users/jf_avon Jean-Francois Avon <jf_avon(a)citenet.net> 2048 bits key ID:C58ADD0D 1996/03/01 fingerprint=52 96 45 E8 20 5A 8A 5E F8 7C C8 6F AE FE F8 91

1 0

Re: SurfWatch
by stevenw＠best.com 17 Dec '03

17 Dec '03

>> I predict that 6 months after the first internet rating system is widely >> deployed, the largest use of search engines such as altavista will be to >> look for pages with the most "naughty" ratings. Perhaps such services will >> allow text searches for free, but charge for searches based on the rating >> tag... >> -- >> Jeff Weinstein - Electronic Munitions Specialist >> Netscape Communication Corporation >> jsw(a)netscape.com - http://home.netscape.com/people/jsw >> Any opinions expressed above are mine. In the mid-eighties in the UK they adopted the idea of a red triangle continuously displayed on the screen of movies shown on TV that were considered to have more than the normal share of wobbly pink bits, airborne blood, etc. Viewing figures for obscure 70's French movies shown at 1:30am soared as all the horny geeks sat through two hours of forest/eating/traffic or whatever scenes waiting for the 7 seconds of nudity. I'm sure that far more children saw these movies than would have without the government sponsored red flag with the words "Get It Here" being waved like crazy as the movie rolled. ------------------------------------------------------------------------- Steven Weller | "The Internet, of course, is more | than just a place to find pictures | of people having sex with dogs." stevenw(a)best.com | -- Time Magazine, 3 July 1995

2 1