- cypherpunks-legacy - lists.cpunks.org

CDR: Vint Cerf, ISOC Dictator and the CIA/NSC Man on the ICANN Board, Says Security Crucial to Internet's Future (fwd)
by !Dr. Joe Baptista 03 Nov '00

03 Nov '00

COMPUTERGRAM INTERNATIONAL: NOVEMBER 03 2000 + Vint Cerf Says Security Crucial to Internet's Future Vinton Cerf, one of the few men who can claim to be credited with being the "father of the internet", yesterday warned that security needs to tighten up in most areas if the internet is to fully achieve its potential. Cerf, WorldCom Inc's senior vice president of internet architecture and technology, made his plea for tighter security at the Compsec2000 International conference in London, UK yesterday. Cerf, who is perhaps best known as the co-designer of the web's TCP/IP protocols, outlined numerous areas where security could be improved. He named cryptographic technology, network security, host security and internet-enabled appliances among the main candidates where improvements are needed. First on Cerf's hit list is the problem of cryptography. Cerf pointed to the need for a universally adopted non-proprietary standard. While the US National Institute of Standards and Technology (NIST) has now accepted the Rijndael algorithm of Belgian researchers Vincent Rijmen and Joan Daemen as its sole candidate for standardization, the search for alternative standards in both Japan and Europe threatens the possibility of a unified approach, he said. Cerf also criticized the slow rate of adoption of public key infrastructure (PKI) in the public and cross enterprise arenas, and argued strongly for the separation of identification and authentication. Identity, he said, should just be a means of declaring oneself for validation. Registering should not itself confer authority. That should be left to individual entities based on their own database rather than centralizing all knowledge of individuals. Cerf said there is a also a need for multiple public and private keys to avoid people using others' public keys as identifiers. He also argued that global verification standards may need to relinquished in favor of using different methods for individuals, enterprises and governments. In terms of network security, Cerf said the internet protocol security (IPSec) standard is well specified, giving hosts the chance to defend themselves, but there is still a need to adopt a common key distribution process and firewalls that defend against internal threats. He also said there is a need for end-to-end encryption in VPNs in order to prevent any danger from packet leaks into other networks. Host security is also critical, especially in a world of increasingly distributed systems. Cerf said internal firewalls within operating systems may be needed to overcome their inherent security weaknesses. He also advocated mutual and continuous authentication between devices to prevent hijacking of IP addresses and active monitoring, for instance for virus detection and trojan horse signatures. Within the distributed world, internet-enabled appliances, such as the much-hyped internet refrigerator, are likely to form the next target for hackers, he said. As such, he said that authentication is needed for secure device control from the net to stop, say, the kid next door reprogramming your house while you are away. The profusion of such devices, enabled by putting IP into hardware, will also quickly put a strain on IP address space, he said. .............................................................. Michael Sondow ================================================================= INTERNATIONAL CONGRESS OF INDEPENDENT INTERNET USERS http://www.iciiu.org (ICIIU) iciiu(a)iciiu.org Tel(718)846-7482 Fax(603)754-8927 =================================================================

1 0

CDR: psst! wanna buy some anonymity, meester?
by R. A. Hettinga 03 Nov '00

03 Nov '00

--- begin forwarded text

3 2

None
by Bill Twort 03 Nov '00

03 Nov '00

1 0

CDR: Soft Money for Green Medea Benjamin
by Bill Stewart 03 Nov '00

03 Nov '00

The SF Bay Guardian, 11/1/00, pg.23, has a big ad for Green senatorial candidate Medea Benjamin, paid for by "Philip H. Wilkie and the Green Party of California" "Not authorized by any candidate or candidate committee". Friends, this is _soft_money_, right here in San Francisco, and it's a good example of the kind of thing many campaign finance "reform" proposals would ban - and why the First Amendment is a better campaign finance law that the ones we're using today. I highly respect Medea - she's strong, principled, and has guts. She's done a lot of election monitoring around the world. She needs to learn some reality about economics, and why economic rights are critical parts of human rights, but that's the usual Green problem. :-) I happened to catch the news the other night, where the bipartisan debate between Dianne Feinstein (boo, hiss!) and Republican Tom Campbell (who opposes the Drug War) got upstaged by Medea's protests outside KRON (or whichever TV-monopoly station it was). It was a class act, particularly when she and Campbell hugged each other after both talking to the crowd. Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

CDR: Zero Knowledge changes business model (press release)
by Declan McCullagh 03 Nov '00

03 Nov '00

>From: kcory(a)redwhistle.com >To: declan(a)well.com >Date: Tue, 31 Oct 2000 06:55:11 -0800 >Subject: Zero-Knowledge Introduces Managed Privacy Services for Businesses > > > >Hi Declan, >Today, Zero-Knowledge Systems is introducing its Managed Privacy >Services (MPS) offering to solve the privacy challenges >that businesses face in today's privacy-conscious business >environment. > >Privacy is good business. Companies in every industry are >realizing they must institute the proper privacy policies, >practices and infrastructures in order to succeed in >today's digital economy. Zero-Knowledge Managed Privacy >Services provides the tools and strategies that enable >business to establish private customer relationships and >earn consumer trust while ensuring legislative compliance >and mitigating risk. > >As companies have become aware of the privacy risks and >legislative hurdles facing them, many have turned to Zero- >Knowledge for advice and solutions, and the MPS offering is >the natural response to companies' needs for comprehensive >privacy solutions. > >I've included the press release about MPS below. If you >have any questions about Zero-Knowledge's Managed Privacy >Services offering or would like to set up a conversation >with Zero-Knowledge President Austin Hill, please give me a >call at 503-552-3749. > >Best regards, >Kristy Cory >503-552-3749 > >ZERO-KNOWLEDGE SYSTEMS INTRODUCES MANAGED PRIVACY SERVICES >TO SOLVE THE PRIVACY CHALLENGES OF BUSINESSES > > >Montreal -- October 31, 2000 -- Zero-Knowledge(R) Systems, >the leading developer of privacy solutions, today >introduced its new Managed Privacy Services(TM) offering to >solve the privacy challenges of businesses and enable >enterprise to thrive in a privacy-conscious climate. >Delivering a unique combination of technology, policy and >strategy expertise, Zero-Knowledge Managed Privacy Services >(MPS) enables clients to turn privacy into a competitive >advantage by leveraging rich data resources while building >stronger and more profitable relationships with customers, >employees and partners. MPS is based on responsible and >ethical information management in accordance with relevant >legislation and industry standards. > >"Privacy is good business -- and Zero-Knowledge Systems is >the company that can deliver continued privacy value to >companies that want to succeed in today's digital economy," >said Austin Hill, president of Zero-Knowledge >Systems. "Through expert professional services and >technological solutions, Zero-Knowledge Systems works with >companies to leverage and develop the rich data resources >they need, while ensuring that their customers' personal >information will not be abused, misused or sold without >their permission." > >Employing a broad toolkit of privacy-enhancing technologies >that control and protect data, MPS brings privacy-based >services to a variety of markets for the first time. These >include: financial services, health care, wireless, >marketing, CRM and hosted solutions (ASPs). > >The Managed Privacy Services Process >Zero-Knowledge MPS fuses sophisticated infrastructure >design, advanced cryptographic systems and world-class >privacy expertise to deliver strong privacy integration to >a wide variety of business processes and system designs. >Following a period of assessment and design, MPS culminates >in the deployment of a tailored privacy layer that >integrates seamlessly with the client's existing enterprise >applications. > >* ASSESS AND ADVISE -- Managed Privacy Services begins with >a thorough assessment of each client's data storage and >usage patterns, as well as their business objectives. From >this assessment, recommendations are made regarding areas >where data can be better utilized through the addition of a >strong privacy layer, and areas of potential privacy risk >are identified. > >* DESIGN AND IMPLEMENT -- The assessment stage provides the >framework for all aspects of the infrastructure design, and >determines which Zero-Knowledge privacy technologies are >best suited to the client's needs. The result is a solution >that not only secures and protects the client's data, but >also allows for a wider array of data-driven activities. >Professional systems integration ensures that all the >client's business requirements are met, and guarantees the >final design will result in the most robust and flexible >system possible. > >* VERIFY AND MANAGE -- Zero-Knowledge is able to manage all >elements of the privacy infrastructure, allowing clients to >focus on their core competencies, and providing third-party >credibility to a client's privacy initiatives. Independent >audits ensure that the system deployed is in compliance >with stated policies, and that all controls are functioning >as per the design specifications. > >Zero-Knowledge is committed to deploying systems that are >transparent and accountable. In keeping with this policy, >MPS will incorporate third party verification and split >encryption key structures, as well as provide consumers >with access to white papers, independent auditors' reports >or other materials that assure a company is doing what it >claims. With MPS Zero-Knowledge strengthens its commitment >to building responsible systems that empower consumers to >control the disclosure and use of their personal >information, while still enabling businesses to thrive in a >data and relationship-driven marketplace. > >Zero-Knowledge Systems Leads Privacy Education >Zero-Knowledge Systems is also presenting the "Privacy by >Design: The Future of Privacy Compliance and Business" >conference sponsored by Royal Bank Financial Group, IBM, >Merrill Lynch, and PricewaterhouseCoopers. Incorporating >the privacy expertise of leading business, technology and >privacy figures, Privacy by Design will advise attendees on >how to develop, execute and market a successful privacy >strategy that will avoid regulatory breaches and >differentiate their business in the marketplace with a >demonstrable commitment to privacy. The conference will be >held at Le Chateau Montebello, Quebec from November 19 to >21, 2000. For more information on Privacy by Design, >including a detailed agenda, visit the conference Web site: >http://www.zeroknowledge.com/privacybydesign.html > >About Zero-Knowledge Systems, Inc. >Founded in 1997, Zero-Knowledge Systems >(http://www.zeroknowledge.com) is laying the digital >infrastructure for privacy-enabled communications and >commerce between individuals, companies, governments and >organizations. Zero-Knowledge creates products and services >that enable privacy through advanced mathematics, >cryptography and source code: the only reliable way to >ensure privacy. > >In December 1999, Zero-Knowledge launched Freedom(R), the >only privacy system that empowers Internet users to surf >the Web, send email, chat and post to newsgroups in total >privacy without having to trust third parties with their >personal information. Freedom can be downloaded at >http://www.freedom.net and Freedom source code is available >at http://opensource.zeroknowledge.com. In October 2000, >Zero-Knowledge launched its Managed Privacy Services(TM) >offering to provide expert consultation and privacy- >enhancing solutions that enable businesses to comply with >privacy legislation, maximize customer relationships and >build consumer trust without violating privacy. More >information about MPS can be found at >http://www.zeroknowledge.com/business. > >Journalists can visit the Zero-Knowledge pressroom at >http://www.zeroknowledge.com/media. > > (Freedom, Zero-Knowledge and Managed Privacy Services are >registered trademarks of Zero-Knowledge Systems, Inc. All >other names may be trademarks of their respective owners.) > >For more information >Dov Smith >Director of Public Relations >514.350.7553 >dov(a)zeroknowledge.com > >Kristy Cory >Red Whistle Communications >503.552.3749 >kcory(a)redwhistle.com > > > > > >

14 40

CDR: RE: Nader
by Trei, Peter 03 Nov '00

03 Nov '00

[much snippage] > ---------- > From: James A, Donald[SMTP:jamesd@echeque.com] > > The book "the millionaire next door" does provides plausible evidence that > > in their origins, millionaires are close to being a cross section of > America. > > The Forbes 400, listing the 400 most wealthy Americans, is on the newstands right now. While I don't have it at hand right now, the self-made men significantly outnumber those who inherited all or part of their wealth. The cut-off point this year is $725M. The list can be browsed at http://www.forbes.com/400richest/ , but doesn't include the self made vs inherited data (which is in the dead tree edition). Peter

1 0

<nettime> okay, out on the street...
by molly hankwitz 03 Nov '00

03 Nov '00

Every Sunday in 2000 after Thanksgiving Day, the Surveillance Camera Players will lead a Surveillance Camera Outdoor Walking Tour (or SCOWT for short) of a neighborhood in New York City. Three different SCOWTS have been scheduled; others may follow in 2001. Each SCOWT includes a general introduction to the emerging surveillance society as well as a choice selection of video cameras that surveill public space. $10 donation per each person. Each tour lasts about 90 minutes and is undertaken rain or shine. No reservations needed. Call 212 561 0106 for more information. SCP web site: http://www.notbored.org/the-scp.html e-mail: notbored(a)panix.com Sunday 26 November 2000: SCOWT #1 Times Square and Turtle Bay. Meet south side of Duffy Square, on 46th Street between Broadway and Seventh Avenue. 2 pm sharp. Sunday 3 December 2000: SCOWT #2 Fifth Avenue. Meet on Fifth Avenue, at the intersection with 46th Street, northwest corner. 2 pm sharp. Sunday 10 December 2000: SCOWT #3 City Hall and Washington Square Park. Meet on Broadway (next to City Hall) at the stairs leading down to the N/R subway. 2 pm sharp. Sunday 17 December 2000: SCOWT #1 Times Square and Turtle Bay. Meet south side of Duffy Square, on 46th Street between Broadway and Seventh Avenue. 2 pm sharp. Sunday 24 December 2000: SCOWT #2 Fifth Avenue. Meet on Fifth Avenue, at the intersection with 46th Street, northwest corner. 2 pm sharp. Sunday 31 December 2000: SCOWT #3 City Hall and Washington Square Park. Meet on Broadway (next to City Hall) at the stairs leading down to the N/R subway. 2 pm sharp. mh:>) ----- End forwarded message ----- # distributed via <nettime>: no commercial use without permission # <nettime> is a moderated mailing list for net criticism, # collaborative text filtering and cultural politics of the nets # more info: majordomo(a)bbs.thing.net and "info nettime-l" in the msg body # archive: http://www.nettime.org contact: nettime(a)bbs.thing.net --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

<nettime> okay, out on the street...
by molly hankwitz 03 Nov '00

03 Nov '00

Every Sunday in 2000 after Thanksgiving Day, the Surveillance Camera Players will lead a Surveillance Camera Outdoor Walking Tour (or SCOWT for short) of a neighborhood in New York City. Three different SCOWTS have been scheduled; others may follow in 2001. Each SCOWT includes a general introduction to the emerging surveillance society as well as a choice selection of video cameras that surveill public space. $10 donation per each person. Each tour lasts about 90 minutes and is undertaken rain or shine. No reservations needed. Call 212 561 0106 for more information. SCP web site: http://www.notbored.org/the-scp.html e-mail: notbored(a)panix.com Sunday 26 November 2000: SCOWT #1 Times Square and Turtle Bay. Meet south side of Duffy Square, on 46th Street between Broadway and Seventh Avenue. 2 pm sharp. Sunday 3 December 2000: SCOWT #2 Fifth Avenue. Meet on Fifth Avenue, at the intersection with 46th Street, northwest corner. 2 pm sharp. Sunday 10 December 2000: SCOWT #3 City Hall and Washington Square Park. Meet on Broadway (next to City Hall) at the stairs leading down to the N/R subway. 2 pm sharp. Sunday 17 December 2000: SCOWT #1 Times Square and Turtle Bay. Meet south side of Duffy Square, on 46th Street between Broadway and Seventh Avenue. 2 pm sharp. Sunday 24 December 2000: SCOWT #2 Fifth Avenue. Meet on Fifth Avenue, at the intersection with 46th Street, northwest corner. 2 pm sharp. Sunday 31 December 2000: SCOWT #3 City Hall and Washington Square Park. Meet on Broadway (next to City Hall) at the stairs leading down to the N/R subway. 2 pm sharp. mh:>) ----- End forwarded message ----- # distributed via <nettime>: no commercial use without permission # <nettime> is a moderated mailing list for net criticism, # collaborative text filtering and cultural politics of the nets # more info: majordomo(a)bbs.thing.net and "info nettime-l" in the msg body # archive: http://www.nettime.org contact: nettime(a)bbs.thing.net --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

CDR: California bars free speech of those cutting deals on votes
by Tim May 03 Nov '00

03 Nov '00

California has "shut down"--through a threatening letter--a site which matches up folks who are willing to say they'll vote for Nader in states where Gore is sure to win if other folks who had hoped to vote for Nader will instead vote for Gore in order to help him in swing states. (Sounds complicated. But it's really simple. "I'll scratch your back if you scratch mine." No money is changing hands, no actual "ballots" are being traded.) The Web site doing this is/was: http://www.voteswap2000.com/ The article on California's actions is: http://dailynews.yahoo.com/h/nm/20001031/wr/campaign_traders_dc_1.html BTW, I just "expressed my preference" at the site: http://Winchell.com/NaderTrader/default.asp No doubt I am even now more of a speech criminal. I wonder if a raid is imminent. --Tim May -- ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 831-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, "Cyphernomicon" | black markets, collapse of governments.

8 14

CDR: Re: The Market for Privacy
by matthew gream 03 Nov '00

03 Nov '00

Tim May wrote: >Fact is, most people don't think they need security. Most people don't even >think they need backups. Until their hard disk crashes. And so on. It's a >tough sell in either case. There are similarities to conventional society where people don't think that they need to save money for retirement, until they find themselves old, without much to live on, and expect the state to look after them. So maybe some privacy technologies need to be forced into use, through some means - maybe even the social consciences (even if only for self interest) of technologists -- people don't always know what is good for them until its too late (that will offend some people, but it is a hard to deny fact). My thinking is that sometimes in general it is possible to see that certain technologies are going to develop, but not see their exact manifestation. A good example of this is the Internet - people saw the "information highway" coming, but did not see that it would be "the Internet" or WWW - some of these technologies hit mass penetration, only after which it becomes apparent that they are deficient - for instance, the immaturity of WWW as an information structuring medium viz. SGML, hypermedia technologies and so on. What I am leading into is - perhaps ZKS will die, and perhaps what will happen is that other commercial needs will drive forward a mass penetration of something like smart card hosted identity management systems, used for banking, health care and a plethora of other situations which are more relevant to the daily life of most people. But, perhaps using this infrastructure, ZKS like and other privacy systems can operate. Perhaps I am a skeptic, but I see millions of people who have an immediate need for banking, healthcare, mobile phones and other operations before they have a need for identity management - it is an important, but yet still obscure, thing. So I see something like a smartcard hosted identity management system, which can be a platform for ZKS (and others?) to build upon for a myriad of other applications. The other area where I thought that ZKS could get a "leg on", is with providing privacy infrastructure for digital exchanges and negotiation systems. Could freed0m be good basis for providing anonymity and trusted virtual networks over potentially insecure physical networks ? That's relatively lightly thought through speculation on my behalf. Lucky Green wrote: >It appears that ZKS is yet another company that fell prey to the >DigiCash >"we know better than the market what the market wants" syndrome. What a >shame, really. In my opinion the basic technologies look good, but the commercial front end hasn't found a good home yet, maybe ZKS will stumble along for a while until it finds a better place for itself to fit. It seems as though the market will be there, but perhaps the volume is too small at the moment. Best regards, Matthew Gream. _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com.

1 0