- cypherpunks-legacy - lists.cpunks.org

No Subject
by Piotr Kunio 17 Dec '03

17 Dec '03

unsunscribe

3 2

Re: Does John Gilmore...
by George A. Stathis 17 Dec '03

17 Dec '03

At 08:04 ìì 17/11/1996 -0500, Black Unicorn wrote: >> Given that the free market rule is "he who has the money makes the >> rules", please explain how anything less than "subsidized speech" (as >> you put it) is anything close to free speech? >> >> [For those who's assumptions rule their perception: I am *not* arguing >> that all speech should be subsidized. I am merely pointing out that >> the organization that is spending the money to broadcast is >> controlling the speech, hence it is *not* free speech in terms of >> freedom or cost.] >Again, you confuse free speech with free broadcast. Well, I propose a solution to this problem: I don't mind paying fees in fact, if the prices are reasonable. For instance THIS text was _paid_ for, since I pay my Internet provider a certain amount of money every month. It would be unthinkable, however, that my Internet Provider would mess around with THIS text, or with ANY opinion of mine (I am sure you agree). Now, a mailing list has _some_ similarities to the services of an Internet provider, except (usually) the _cost_. I am sure Mr. Gilmore would be more than happy to be _paid_ for the (faulty) services he provides (to his list-members), since e.g. 1900 members times $1 per 2 months (shall we say) would earn him (shall we say) 950 dollars a month; Not much perhaps in some countries, but enough in most places as compensation for the services he provides. The problem with Mr. Gilmore (apart from being an asshole) is really that he is rather a thick-minded proponent of censorship of his list's 'eccentric' members, that such subtleties don't even cross his mind. >Forward complaints to : European Association of Envelope Manufactures >Finger for Public Key Gutenbergstrasse 21;Postfach;CH-3001;Bern >Vote Monarchist Switzerland "Heaven is a place policed by the English, cheered-up by the the Greeks, and organized by the Germans. Hell is a place organized by the Greeks, policed by the Germans, and cheered-up by the English." ...And what have the noble Swiss got to with this shit? They are the bankers for both! :-) Regards George

2 1

No Subject
by Bovine Remailer 17 Dec '03

17 Dec '03

The report estimated no such thing..its an urban myth. Give me a citation for the statistic from the report. On Sun, 17 Nov 1996, blanc wrote: > From: Dr.Dimitri Vulis KOTM [cut] > dv: I don't think John Gilmore's sexual practices are *that* bizarre. > The Kinsey report estimates that 10% of the population shares his > practices. > > bw: I guess you think you're talking to someone who gives a flip.

1 0

FC97 Final Call for Papers
by R.Hirschfeld＠cwi.nl 17 Dec '03

17 Dec '03

Financial Cryptography '97 February 24-28 1997, Anguilla, BWI FINAL CALL FOR PAPERS General Information: Financial Cryptography '97 (FC97) is a new conference on the security of digital financial transactions. The first meeting will be held on the island of Anguilla in the British West Indies on February 24-28, 1997. FC97 aims to bring together persons involved in both the financial and data security fields to foster cooperation and exchange of ideas. Original papers are solicited on all aspects of financial data security and digital commerce in general, including Anonymous Payments Fungibility Authentication Home Banking Communication Security Identification Conditional Access Implementations Copyright Protection Loss Tolerance Credit/Debit Cards Loyalty Mechanisms Currency Exchange Legal Aspects Digital Cash Micropayments Digital Receipts Network Payments Digital Signatures Privacy Issues Economic Implications Regulatory Issues Electronic Funds Transfer Smart Cards Electronic Purses Standards Electronic Voting Tamper Resistance Electronic Wallets Transferability Instructions for Authors: Send a cover letter and 9 copies of an extended abstract to be received by November 29, 1996 to the Program Chair at the address given below. The extended abstract should start with the title and an abstract followed by a succinct statement appropriate for a non-specialist reader specifying the subject addressed, its background, the main achievements, and their significance to financial data security. Submissions are limited to 15 single-spaced pages of 12pt type. Notification of acceptance or rejection will be sent to authors no later than January 17, 1997. Authors of accepted papers must guarantee that their paper will be presented at the conference. Proceedings: Proceedings of the conference will be published online in the Journal of Internet Banking and Commerce. Instructions and deadlines for submission of final papers will be sent along with notification of acceptance. Stipends: A very limited number of stipends may be available to those unable to obtain funding to attend the conference. Students whose papers are accepted and who will present the paper themselves are encouraged to apply if such assistance is needed. Requests for stipends should be addressed to one of the General Chairs. Registration: Conference registration and information on travel, hotels, and Anguilla itself is available at URL http://www.offshore.com.ai/fc97/. Workshop: A workshop, intended for anyone with commercial software development experience who wants hands-on familiarity with the issues and technology of financial cryptography, is planned in conjunction with FC97, to be held during the week preceding the conference. For further information, please contact one of the General Chairs. Send Submissions to: Rafael Hirschfeld FC97 Program Chair CWI Kruislaan 413 1098 SJ Amsterdam The Netherlands email: ray(a)cwi.nl phone: +31 20 592 4169 fax: +31 20 592 4199 Program Committee: Matthew Franklin, AT&T Laboratories--Research, Murray Hill, NJ, USA Michael Froomkin, U. Miami School of Law, Coral Gables, FL, USA Rafael Hirschfeld, CWI, Amsterdam, The Netherlands Arjen Lenstra, Citibank, New York, NY, USA Mark Manasse, Digital Equipment Corporation, Palo Alto, CA, USA Kevin McCurley, Sandia Laboratories, Albuquerque, NM, USA Charles Merrill, McCarter & English, Newark, NJ, USA Clifford Neuman, Information Sciences Institute, Marina del Rey, CA, USA Sholom Rosen, Citibank, New York, NY, USA Israel Sendrovic, Federal Reserve Bank of New York, New York, NY, USA General Chairs: Robert Hettinga, Shipwright, Boston, MA, USA email: rah(a)shipwright.com Vincent Cate, Offshore Information Services, Anguilla, BWI email: vince(a)offshore.com.ai Conference, Exhibits, and Sponsorship Manager: Julie Rackliffe, Boston, MA, USA email: rackliffe(a)tcm.org Workshop Leader: Ian Goldberg, Berkeley, CA, USA email: iang(a)cs.berkeley.edu Financial Cryptography '97 is held in cooperation with the International Association for Cryptologic Research. Those interested in becoming a sponsor of FC97 or in purchasing exhibit space, please contact the Exhibits and Sponsorship Manager. A copy of this call for papers as well as other information about the conference will be available at URL http://www.cwi.nl/conferences/FC97.

1 0

BayLISA: Randal Schwartz, Just Another Convicted Perl Hacker (fwd)
by Rich Graves 17 Dec '03

17 Dec '03

This should be QUITE entertaining. -rich ---------- Forwarded message ---------- Date: 17 Nov 1996 19:03:17 -0500 From: Laura de Leon <deleon(a)cat.hpl.hp.com> Newsgroups: ba.announce Subject: BayLISA: Randal Schwartz, Just Another Convicted Perl Hacker The BayLISA group meets monthly to discuss topics of interest to systems and network administrators. The meetings are free and open to the public. BayLISA holds monthly meetings on the third Thursday of each month at 7:30 PM PST. We meet at Cisco building J in San Jose, on Tasman Drive near First street. (This is across the street from the room we met in at Cisco last month). See www.baylisa.org for more information. The meetings are also broadcast via MBONE. NOTE: AS OF OCTOBER, WE HAVE MOVED TO CISCO. This is a new location. Thanks very much to Synopsys for hosting us. Schedule -------- November 21 Randal Schwartz: Just Another Convicted Perl Hacker This talk will describe how the speaker became a felon in the process of doing his job as a systems administrator in the well-publicized Oregon v. Schwartz case (victim: Intel). It will include some points about Oregon's current law and the implications of this case on the computer community. There will be a special focus on how to make sure this doesn't happen to you. There will be copies of Randal's new PERL book available if you would like to get one signed. BayLISA Board Elections & member meeting before the regular meeting At 7:00, Elections for the BayLISA board will be held. We encourage all members to vote. If you aren't a member, this is a good time to join (see our Web site) December 19 Our Holiday meeting-- Join us to share goodies and computer horror stories, as well as descriptions of stupid computer tricks. There will be a prize for best story. This is a very informal meeting, and will not be broadcast on the MBONE. January 16 Brent Chapman, Containment Zones (firewalls to keep people in) February 20 Standards efforts and how they will effect you March 20 Paul Vixie [Schedule subject to change] For further information on BayLISA, check out our web site: http://www.baylisa.org/ To get further information on the meeting location, you can also ftp it from ftp.baylisa.org:/location For any other information, please send email to: info(a)baylisa.org If you have any questions, please contact me or the info alias listed above.

2 1

FC97 Final Call for Papers
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Sender: e$(a)thumper.vmeng.com Reply-To: R.Hirschfeld(a)cwi.nl Precedence: Bulk Date: Mon, 18 Nov 1996 11:46:13 +0100 From: R.Hirschfeld(a)cwi.nl To: Multiple recipients of <e$(a)thumper.vmeng.com> Subject: FC97 Final Call for Papers Financial Cryptography '97 February 24-28 1997, Anguilla, BWI FINAL CALL FOR PAPERS General Information: Financial Cryptography '97 (FC97) is a new conference on the security of digital financial transactions. The first meeting will be held on the island of Anguilla in the British West Indies on February 24-28, 1997. FC97 aims to bring together persons involved in both the financial and data security fields to foster cooperation and exchange of ideas. Original papers are solicited on all aspects of financial data security and digital commerce in general, including Anonymous Payments Fungibility Authentication Home Banking Communication Security Identification Conditional Access Implementations Copyright Protection Loss Tolerance Credit/Debit Cards Loyalty Mechanisms Currency Exchange Legal Aspects Digital Cash Micropayments Digital Receipts Network Payments Digital Signatures Privacy Issues Economic Implications Regulatory Issues Electronic Funds Transfer Smart Cards Electronic Purses Standards Electronic Voting Tamper Resistance Electronic Wallets Transferability Instructions for Authors: Send a cover letter and 9 copies of an extended abstract to be received by November 29, 1996 to the Program Chair at the address given below. The extended abstract should start with the title and an abstract followed by a succinct statement appropriate for a non-specialist reader specifying the subject addressed, its background, the main achievements, and their significance to financial data security. Submissions are limited to 15 single-spaced pages of 12pt type. Notification of acceptance or rejection will be sent to authors no later than January 17, 1997. Authors of accepted papers must guarantee that their paper will be presented at the conference. Proceedings: Proceedings of the conference will be published online in the Journal of Internet Banking and Commerce. Instructions and deadlines for submission of final papers will be sent along with notification of acceptance. Stipends: A very limited number of stipends may be available to those unable to obtain funding to attend the conference. Students whose papers are accepted and who will present the paper themselves are encouraged to apply if such assistance is needed. Requests for stipends should be addressed to one of the General Chairs. Registration: Conference registration and information on travel, hotels, and Anguilla itself is available at URL http://www.offshore.com.ai/fc97/. Workshop: A workshop, intended for anyone with commercial software development experience who wants hands-on familiarity with the issues and technology of financial cryptography, is planned in conjunction with FC97, to be held during the week preceding the conference. For further information, please contact one of the General Chairs. Send Submissions to: Rafael Hirschfeld FC97 Program Chair CWI Kruislaan 413 1098 SJ Amsterdam The Netherlands email: ray(a)cwi.nl phone: +31 20 592 4169 fax: +31 20 592 4199 Program Committee: Matthew Franklin, AT&T Laboratories--Research, Murray Hill, NJ, USA Michael Froomkin, U. Miami School of Law, Coral Gables, FL, USA Rafael Hirschfeld, CWI, Amsterdam, The Netherlands Arjen Lenstra, Citibank, New York, NY, USA Mark Manasse, Digital Equipment Corporation, Palo Alto, CA, USA Kevin McCurley, Sandia Laboratories, Albuquerque, NM, USA Charles Merrill, McCarter & English, Newark, NJ, USA Clifford Neuman, Information Sciences Institute, Marina del Rey, CA, USA Sholom Rosen, Citibank, New York, NY, USA Israel Sendrovic, Federal Reserve Bank of New York, New York, NY, USA General Chairs: Robert Hettinga, Shipwright, Boston, MA, USA email: rah(a)shipwright.com Vincent Cate, Offshore Information Services, Anguilla, BWI email: vince(a)offshore.com.ai Conference, Exhibits, and Sponsorship Manager: Julie Rackliffe, Boston, MA, USA email: rackliffe(a)tcm.org Workshop Leader: Ian Goldberg, Berkeley, CA, USA email: iang(a)cs.berkeley.edu Financial Cryptography '97 is held in cooperation with the International Association for Cryptologic Research. Those interested in becoming a sponsor of FC97 or in purchasing exhibit space, please contact the Exhibits and Sponsorship Manager. A copy of this call for papers as well as other information about the conference will be available at URL http://www.cwi.nl/conferences/FC97. --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.vmeng.com/rah/

1 0

HP crypto-announcement and key recovery, from The Netly News
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Mon, 18 Nov 1996 09:03:25 -0800 (PST) From: Declan McCullagh <declan(a)well.com> To: fight-censorship(a)vorlon.mit.edu Subject: HP crypto-announcement and key recovery, from The Netly News The Netly News http://netlynews.com/ November 18, 1996 Under Lock And Key Recovery By Declan McCullagh (declan(a)well.com) As a non-event, it was a rather well-attended one. This morning Hewlett-Packard Co. threw a press conference in Washington, DC to announce that it had vaulted the Federal government's export restriction hurdles by including "key recovery" technology in its encryption products. At least that's what the press release said. The reality is somewhat less exciting: HP's announcement is crypto-vaporware. "We're not making any specific announcements of products today," admitted Doug McGowan, HP development director. HP's move comes after competitors such as IBM and DEC stole the limelight last month by being the first to buy into the Clinton administration's latest key escrow scheme which would allow U.S. law enforcement agencies to locate copies of the private keys used to encode files and communications. The company's announcement follows a presidential executive order signed last Friday codifying the administration's "key recovery" proposal unveiled in October, which the White House hopes will splinter an industry previously united in opposition to Federal regulations governing encryption exports. HP responded by flying CEO Lew Platt into town today to announce a product using plug-in hardware or software "activation tokens" that can vary by country -- but Platt admitted that the tokens don't exist yet. Rather, he admitted, it's only a product with "a security framework built into it" that currently uses woefully-insecure 40-bit DES encryption. Eventually, HP hopes to export crypto that's stronger, but the company declined to discuss details. Dave Banisar, a policy analyst at EPIC, says such a system would be "worse" than current policy. "It's got this new detection system in it that requires monitoring of your crypto use and program use to determine what the national government says is correct," he says. The "key recovery" technology HP licensing is likely to come from Trusted Information Systems Inc., a company founded by former NSAers that still enjoys close ties to the spook community. TIS's Commercial Key Escrow uses the 56-bit Data Encryption Standard and so was cleared for export on January 18, 1996. "This is the first step toward implementing key recovery. That's a policy that's just not going to solve the privacy problem for Internet users," says Alan Davidson, staff counsel for the Center for Democracy and Technology. "This is the first step on that road toward building key recovery for the world. It's a very dangerous thing." Clinton's executive order is carefully crafted to counter the three strategies that crypto privacy proponents have devised to kill the export rules: the public relations, the judicial and the legislative approaches. Netizens, privacy advocates and high-tech firms rightfully blasted the old export policy, which classified crypto as a "munition," as a relic of the cold war -- a sentiment with which even The New York Times agreed. So Clinton has reclassified it as a non-munition, yet the change is in name only: Netscape browsers remain subject to export controls. Several lawsuits are challenging the constitutionality of the old export regulations. So Clinton's executive order contains language that EFF's John Gilmore says is designed "to evade the current lawsuits" by taking aim at some of the legal arguments. Administration officials spent an unhappy summer on Capitol Hill being grilled by senators who were considering legislation to lift the crypto export embargo. So Clinton carefully crafted his announcement to defuse some of the reasons to pass this legislation when Congress returns in January. In other words, the White House has been able to answer or deflect many issues that netizens have raised in favor of strong encryption. But another argument may not be as easy to counter. Patrick Ball is a senior program associate at the American Association for the Advancement of Science who has traveled the globe teaching human rights workers how to protect themselves from oppressive governments. The stamps on his passport read like a who's who of censor-happy regimes: El Salvador, Ethiopia, Haiti, Guatemala, South Africa and Turkey. "I have done PGP training in every country I've worked in," says Ball. To Ball, the debate over crypto isn't about civil rights or businesses losing export dollars, but over something much more fundamental: human rights. He says: "Why do security police grab people and torture them? To get their information. If you build an information management system that concentrates information from dozens of people, you've made that dozens of times more attractive. You've focused the repressive regime's attention on the hard disk. And hard disks put up no resistance to torture. You need to give the hard disk a way to resist. That's cryptography." And that's a winning argument. ###

1 0

POC_ket
by John Young 17 Dec '03

17 Dec '03

WaJo reports today on IBM's tiny pocket computer that transmits data through the body -- to another body or to a device such as a telephone. Invented by Tom Zimmerman, formerly of the Media Lab, it can tell "anything you touch who you are." Being shown at Comdex. The body as a token. How to crack a human? Grab and squeeze out a pass phrase. ----- http://jya.com/pocket.txt POC_ket

3 2

Re: Cypherpunks State of Emergency
by Greg Broiles 17 Dec '03

17 Dec '03

At 06:51 PM 11/16/96 -0800, Tim May wrote: >And sabotaging the GAK scheme in more devious ways remains an option. I see several "leverage" points here: The cards can use either a "dongle" model, similar to that used in ordinary copy protection, which has to date been a big failure - or they can use an "on-card processor" model, where the card does the actual crypto processing. This will be tough to break using the traditional cracking techniques, but will also be expensive. And card distribution can be either weak or strict; if it's a weak model (e.g., cards are sold at Fry's or 7-11 :) or are otherwise easy to come by) it'll be tough to control their distribution and export. It's a little easier to control the export of chips than to control the export of software, but neither is easy. And strict distribution will cost an enormous amount of time and money as some agency or another is deputized or created to check credentials, keep records, issue keycards, charge fees, and so forth. If cards are easy to come by, requiring them won't be much of a deterrent to the use of strong crypto; the people the government is supposedly trying to keep from using crypto (terrorists, spies, etc) are already accustomed to keeping and purchasing things which are forbidden. If cards are difficult to come by, that's a big hole waiting for someone to fill with software crypto, or software tricks to get around the hardware requirements. One bug/feature I suspect we'll see will be the inclusion of the keycard's ID in every message that it signs, facilitating detection of unauthorized use and traffic analysis. Without this, the scheme seems entirely futile. (Which is not to say that the US Government hasn't done some futile things :), but ..) Another likely feature is an expiration date, such that the cards stop working after X months and the owner must go to the Bureau of Crypto Control and show his/her credentials and exchange the old card for a new one. Of course, if you've got outstanding warrants or haven't filed your taxes or are in arrears for child support or are a "foreign person" or have been saying illegal/controversial things with your crypto card, well, perhaps you won't feel like going down to the BCC after all. So they're going to have to find a way to make the cards easy/cheap enough to get that many people will adopt them; but they have to be expensive/difficult enough to get that people won't want to "lose" them, lest they fall into the hands of the wrong people. And that seems like a difficult task, especially if opponents of the scheme continue to provide cheap/free software-only solutions. And, as always, folks not subject to the US export regulations won't need to fuss with all of this regulatory bullshit, and can produce strong software-only crypto, or drop-in replacements for the "policy chips" which are distributed without government control. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

1 0

BIS_sez
by John Young 17 Dec '03

17 Dec '03

11-18-96. FiTi: "Electronic money threat to central banks" A report issued today by the BIS says that innovations such as "electronic purses" or "digital cash" used over the Internet could erode central banks' income. "However, if issuance of e-money is limited to banks, the regulatory framework already in place can be extended to cover the new products, but competition and innovation might be more limited." ----- http://jya.com/bissez.txt BIS_sez

1 0