- cypherpunks-legacy - lists.cpunks.org

Judge orders man to obtain permission to file suits [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > JUDGE CLAMPS DOWN ON FLORIDA MAN FOR FILING TOO MANY LAWSUITS > > AP > 25-OCT-97 > > > MIAMI (AP) Enough is enough. Chief U.S. District Judge Edward Davis > said he is tired of reading "rambling, incomprehensible diatribes" > directed at everyone from Elizabeth Dole to William Rehnquist. > > So Davis has ordered Robert Parker of Deerfield Beach to get his > written permission before filing any more lawsuits. Parker has filed > at least 85 federal suits in 10 years. > > In dismissing the latest batch of 11 suits, Davis said Parker has > argued that "three presidents, the chief justice of the Supreme Court, > the CIA, the FBI, the 11th Circuit Court of Appeals, every judge and > magistrate in this district, as well as numerous executives of the > American Red Cross and related entities engaged in a massive civil and > criminal conspiracy to deprive Parker of employment, his marriage, > access to the federal courts and, indeed, his very life." > > Parker's displeasure apparently stems from his five-year employment > with the Red Cross until 1972, and an executive's alleged remark to > his next employer that he was fired for stealing. > > "The bottom line is that this district has expended enough of its > scarce resources administering the same complaint from Parker," Davis > wrote Thursday. > > Parker's home telephone number is not listed and he could not be > reached for comment.

1 0

Compuserve going after corporate customers [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > COMPUSERVE SETS ITS SIGHTS ON CORPORATE INTERNET USERS > > InfoWorld > 25-OCT-97 > By Rebecca Sykes > > > > CompuServe last week announced an online product targeted at business > Internet users. > > The offering, called C from CompuServe, will combine CompuServe's > features, such as its forums, in new ways to appeal to Internet-savvy > business users who require different functions from the Web than > consumers, according to Bob Kington, executive producer of CSi, the > company's online service. > > The Internet "is great for surfers; it's not good for busy business > people," Kington said. Business people "want to get on, get their > information, and get off [of the Internet]." > > C for CompuServe will assist them in doing so by packaging > CompuServe's assets in new ways. Instead of following the model of > CSi, the company's current online offering that gives paying > subscribers full access to all forums and other CompuServe resources, > C will offer access on three levels. > > * The Guest level will provide free, read-only access to CompuServe's > 500 forums to all Web users. Guest-level users also will have access > to forums' reciprocal links to thousands of Web sites selected for > their relevance to the forums' topics. > > * The Member level will operate on a pay-per-transaction basis to > provide access to hundreds of research databases. Users enter their > credit-card information online once and then are charged small amounts > for functions they perform. > > * The Subscriber level will offer three options. One will feature full > interactive access to forums, including posting and receiving > messages, and will cost less than $10 per month. The other two > options, which will each be priced quite a bit lower, are a > subscription to integrated e-mail, voice mail, fax, and pager services > and a subscription to Computing Pro, a value-added service for > computing professionals. > > The service, free to current CSi users, will be available by year's > end. > > Asked whether CompuServe was acting prematurely given the impending > acquisition by America Online of its online assets, Steve Conway, > CompuServe vice president of corporate communications, said it was > just moving ahead with plans it had before AOL made its bid. > > CompuServe Inc., in Columbus, Ohio, can be reached at (614) 457-8600. > America Online Inc., in Dulles, Va., can be reached at (703) 448-8700. > > > Rebecca Sykes is a Boston correspondent for the IDG News Service, an > InfoWorld affiliate. > > Article Dated 24-OCT-97 > > COPYRIGHT 1997 InfoWorld Publishing Company

1 0

Elliptic Curves
by semprini＠theschool.com 17 Dec '03

17 Dec '03

Can anyone point me to some good documentation on elliptic curves as applies to cryptography? I'm interested in finding some good documentation from which I would be able to learn how to use elliptic curves in creating a public/private key system. I have mainly been studying symmetric systems and would like to move on to asymmetric systems. Any help would be appreciated. --Dylan

2 1

Re: Saving money
by Mix 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Harka wrote: >Do you really expect single mothers with 3 kids to have the time to >do it to the degree of being able to _freely choose_ their >employers?? Or even Joe Average, who just came out of College and has >$100 000 school-loan-debt? Certainly there are people who will give up their privacy rights for money. Some of them will not perceive it as a problem. Some will have put themselves into a bad situation where the money is worth more than their privacy. In almost all cases their problems do not exist outside their minds. The mother with 3 children did not get into that situation by accident. Certain choices and actions were taken that put her into that "bad" situation. ("Bad" in quotes because if one really really wants to have children, the situation may be preferable to the alternative.) The kid who borrows $100,000 and can't find a good job did not receive good advice. It is terribly important to recognize when people are in situations of their own creation if we wish to advise people in ways to avoid such situations or avoid them ourselves. >While I am glad for your achievements, you have not addressed my >point: all this doesn't apply to the larger mass of people. I completely disagree with this. Read "Your Money or Your Life" by Joe Dominguez and Vicki Robin. This book describes a method which anybody can use to make good decisions in managing their life. The purpose of the book is to teach ordinary people how to become independently wealthy. There are few people who would not benefit from this method and who are incapable of applying it. >You were fortunate enough to be in the right place at the right >time...one of the founding-members of a company in an industry, that >pays way more than average and thus brought you into the position, >that you're in now. Great...more power to you and I encourage >everybody to try the same. You should also look at "The Millionaire Next Door" by Thomas J. Stanley and William D. Danko. This is a study of millionaires in the United States. To quote from "Money" magazine: "To learn what today's millionaires have in common and how they accumulated their wealth, Stanley and Danko sent questionnaires to affluent Americans and conducted focus-group interviews. They learned that about two-thirds of those millionaires who still work are self-employed - versus one in ten for all Americans. The types of businesses they own tend to be mundane, such as welding and dry cleaning. The overwhelming majority aren't trust-fund babies; eight out of ten accumulated their riches themselves. Most are extremely frugal. Although their average net worth is $3.7 million, they generally live so modestly that even their neighbors don't have a clue about their wealth." The article has these five bullet points to recommend: "1. Live below your means. 2. Launch a savings and investing plan. 3. Take on debt sparingly. 4. Pay as little as possible to Uncle Sam. 5. Start your own business." Standard Ben Franklin stuff, but it works. >But if the available work-force exceeds the demand for it, such jobs >wouldn't pay nearly as much as they do right now. Hence, achieving >financial independence to the point of freely choosing employers >would become much harder again. Actually, it doesn't cost much to change employers. All you have to do is find an employer who will hire you. Mostly this is a question of time and effort. >But this is the reality for MOST people (outside of the >elite-industries) already! Especially if they start out with >student-loan-debts amounting to several ten thousands of dollars. >Add a family/kids to that and you tell me how easy a task it will be >to quickly become independently wealthy. (Some people will be able >to pull it off somehow, most people won't - - despite their wishes to >the contrary. Should they make their best effort? Absolutely! Will >everybody succeed? Absolutely not.) I agree most people will probably not pull it off, but that's too bad. The reason they won't pull it off is that they won't make their best effort. Sure, you can dig up people who appear to have really tried and then failed anyway, but they are rare. You can easily see that most poor people are not making their best effort by studying how much money they spend on alcohol, tobacco, or other recreational substances. You can also study TV watching habits. Poor people watch a lot of TV instead of making themselves useful. >The truth is, that there are many people outside of Cypherpunks, who >get barely through life _despite_ making efforts. They may get enough >salary in their 9-5 job to maintain themselves to a degree, but not >nearly enough to have the complete freedom, that is the issue >here. And to say, "they get what they deserve" (if they don't have >the abundance of dollars/freedom) is rather narrowminded and >out-of-touch with most people's reality. Gee, I don't know about that. When I was in school there was tremendous peer pressure to not study, to not get good grades, to not program, to not study electronics, to not master calculus, etc. etc. etc. If those people end up poor, I have no hesitation in saying they deserve it - at the very least! >That may indeed work for some people, but the argument of >"self-discipline and sacrifice" usually goes overboard once people >_other than yourself_ are severely affected by that. "Sorry hun, you >can't have a new winter-coat. Mommy has to save enough money so that >she can choose the people she works for. And no...no christmas this >year either". I think I hear violins! ;-) In practice, these are very seldom the choices that are being made. Winter coats are available second hand for almost nothing. When I was a kid my parents made many of our presents by hand to save money. Christmas need not be expensive, and it's not clear that it is improved in any meaningful way by spending lots of money. People are perfectly capable of living economically and making good decisions, even when their children are involved. (In> is Tim May, quoted by Harka.) > In> If they won't make these spending tradeoffs and have not even a > In> buffer sufficient to carry them through a month or two or three, > In> I say screw them. >How about you adopting a person/family of your choice instead and >providing them with enough startup-money, so that they can at least >make an realistic effort to work towards a position of becoming >financially independent themselves? :) Uh, excuse me, but I didn't see Tim volunteering for Santa Claus duty. Why should he help out people who will, in all probability, fail to take his advice, squander any money he gives them, and resent him for his efforts? For that matter, why should he help out people who will be eternally grateful if he doesn't value that gratitude? And the claim that all that is needed is a little startup money is a standard lame excuse that has probably been used for millenia. Making excuses is not how the job gets done. >I suggest in return you reconsidering the myth, that a free market >means equal opportunities and thus quick self-reliance for everybody. The term "equal opportunities" is a curious one. A free market does mean that everybody has the equal opportunity to make agreements with each other. But, clearly some people will have more success making these agreements for reasons which are not under their control. Somebody might have parents who introduce them to the right people and show them the ropes, for instance. This is one reason why the free market does not eliminate the formation of elites. But, so what? Are we really going to claim that people shouldn't help their children to succeed? In the sense that I think you mean the term, "equal opportunities" are exceedingly undesirable. Monty Cantsin Editor in Chief Smile Magazine http://www.neoism.org/squares/smile_index.html http://www.neoism.org/squares/cantsin_10.htm -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNFIxl5aWtjSmRH/5AQFjQAf9GlFXsJQ1Iyii7Ch26a38Xi80Q1QMcbq4 rJPVzncFntQjfau99j6jUiNdsjk2Zr8XhLZtyP95yQX3VcaAmsyY7imXImWyH1uU r2OezEg5S9+e/mi7knTsOfzlYOBhKklMTprKo2K539g05B9xJCOqb8S9CyX9/Ie6 5ZH2gss2jANWM6cWsCmZ0nRtG3Rc1fKXJDl5DgsdceCzkVRGms6r7WMzvwUxTTFC wlaWUwjyUcnEK+cqnvsq4rBW/Bh4dvCwzUnEHbyckukO5wOsYxDFb9kuWaIufMJh ukvif/SP9SGzLsqpJ/Iv2pqdRL7B/C4DP+gFP1iODkaER0a7/wUR9A== =9Kt3 -----END PGP SIGNATURE-----

2 1

Re: Office of the Secretary of Defense vs the First Amendment (fwd)
by John Young 17 Dec '03

17 Dec '03

Jim choate wrote: >Lawyers = bottem feeding scum suckers > >They're the ones who get us in these kinds of messes. You may be right for all others, and you may be kidding, but in the case (!) of world-beloved Michael Froomkin, he's the sweetest, kindest, most caring, funniest lawyer professor qua human on the orb, in the dying galaxy, ever. Visit his web page for irrefutable confirmation that he is the real thing in earthbound angels of legal humor. http://www.law.miami.edu/~froomkin/ Best of all, he has no e-mail address. [This is a pitifully low-bartered bar-prohibited ad]

2 1

Re: PGP Employee on MKR
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Harka wrote: >Implying, that the freedom of an (average) person does not get >infringed by (privacy-intrusive) policies "because they can always >choose a different company" is IMHO plainly incorrect and out of >day-to-day reality for most people. (Also note, that I am not saying >companies don't have the right to have such policies) It sounds like everybody is in agreement, then. Companies have the right to ask their employees to give up some privacy, time, and effort. You are arguing that many employees will opt to give up their privacy rights because that choice is preferable to the others they perceive. Because there is a large number of such people, it is likely that large numbers of people will become accustomed to giving up their privacy and will be sympathetic when other people are forced to give up their privacy. Where there may be some disagreement is whether the solution is to pass even more laws that restrict what choices people may make or to pursue other solutions. Given that the governments of the world are the source of nearly all privacy problems, it seems unlikely that an appeal to government is likely to be productive. Monty Cantsin Editor in Chief Smile Magazine http://www.neoism.org/squares/smile_index.html http://www.neoism.org/squares/cantsin_10.htm -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNFIjYJaWtjSmRH/5AQHm7gf+NswjBZyddLueZ66LbSw3YA2xcf5U8PLz v8dZaB2RjFqI7GCS8xXKY+fOg7OQ31sy6OR7yOOpHRoeAB5OU1vqR9lAKQwUX26C pp+ROMKT+TRCj1uLaCdSqgCq8I4Hg8TFWHxuVM81si8sgZGDMTD72EmXY32Av9na 8CtQu+vFx7OZiKZeoDl30TkoR3O/bnb9X4KIBNm5TTn2Fld6HL3c/iy1tSGuETnS zLWSUvxqAm761wv/W73A9GAlQpOd+4DiT/rav0HIUcDrhGpGWeEhDgs5l9w6HQ9w U2GbdiWFb74lrGS0pvPAvzfp7cZeWvODUKD/2Zk57YThhlQjIWuvFQ== =Ghfd -----END PGP SIGNATURE-----

1 0

Forwarded mail...
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Sat, 25 Oct 1997 21:15:11 +0200 (MET DST) > From: nobody(a)REPLAY.COM (Anonymous) > Subject: Re: PGP Employee on MKR > It sounds like everybody is in agreement, then. Companies have the > right to ask their employees to give up some privacy, time, and > effort. > Given that the governments of the world are the source of nearly all > privacy problems, it seems unlikely that an appeal to government is > likely to be productive. > > Monty Cantsin > Editor in Chief > Smile Magazine Monty, without a doubt that is the stupidest thing you have ever said on this list. If a company makes your employment contingent on something you don't like, change jobs. DON'T need laws, don't want laws that get involved in this. This is *STRICTLY* a civil contract issue between the two parties, PERIOD. Why is it that so many people start discussions regarding social issues and then meander into government issues, or visa versa, without ANY recognition of their schizophrenia? Personaly, I blame it on spin doctors like yourself. At least I have the satisfaction knowing that in no way am I contributing to putting food on your table, making your car payments, or paying off your drug dealer... ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

DISCOUNT ADVERTISING SOURCES! $1 PER PAPER!
by pnwood＠earth.we-deliver.net 17 Dec '03

17 Dec '03

UTILIZE THIS VALUABLE INFORMATION AND IT WILL PAY FOR ITSELF MANY TIMES OVER! ***Nationwide Newspapers V2.0 TM*** Powerful New Reference Software - The First of its Kind, Classified Advertising Tool! - Electronic Directory of over 3,600 newspapers! - Sources for Over 6,000 newspapers! - Daily, Weekly, Shoppers, Community Papers and More! - Find Hard to Reach People to Respond to Your Offer! - Advertise by City, State, Regionally, or Nationwide! - Statewide and Network Advertising, Including Pricing! - Discount Advertising Less Than $1 Per Paper! - Powerful Tool for Building Huge Downlines! - Save Time and Money with Network Advertising, 1 Call, 1 Payment & you're in 100's of Papers with Millions of Readers, at a Big Discount Over Individual Rates! SPECIAL FEATURE- Built in Sort Tool Enables Sorts by State, City, Circulation, Phone Number & More! PROOF IS IN THE RESULTS!- Here's just a few: "This program is fantastic. It allows you to target your audience specifically or sweep whole states and regions of the US. I have had tremendous success with this product and would recommend it to anyone who advertises. It saves time and money. What could be better!" --Winston James, Phoenix AZ "I never believed in those success stories...never believed I would be one of them...using your program, in just one month, I took in over $7,000. This program provides cost effective time saving advertising sources that generate sales and leads. I recommend it to anyone in business." --Ryan Tedeschi, Newport Beach CA SPECIAL BONUS- Wholesale Rights! Act now and we will include information on how you could purchase this software at low wholesale prices. You can then market this powerful product any way you wish and earn big profits! ABOUT OUR COMPANY: We're a privately held corporation that specializes in Information Publishing, Marketing, Software Design, and creative tools for the Entrepreneur of the 90's. We have no doubt that this information can and will be a valuable asset to your business. It's the perfect product, at the perfect time, at the perfect price. We've seen similar information costing 100's of dollars. Companies charge these high fees because they know that people who understand the value of the information will easily pay for it. Our products are more advanced and we make them affordable. They say that information is power, well we look forward to supplying you with all the power you need for years to come! PRICE: We are currently charging $49. This is only a test price and will soon be lifted. TO ORDER:Click on this direct link and follow ordering instructions. http://www.primemarket.com/natnews1.html $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ WE VALUE YOUR BUSINESS VISIT OUR WEBSITE AT http://www.primemarket.com FOR MONEY MAKING BUSINESS TOOLS THAT YOU CAN USE OR SELL. NEW ITEMS BEING ADDED OFTEN $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ *To be removed simply hit reply and send.

1 0

Re: poverty traps (Re: Sa (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: harka(a)nycmetro.com > Date: 25 Oct 1997 16:09:58 EDT > Subject: Re: poverty traps (Re: Sa > Although my statement was deliberately somewhat exaggerated, it is > not that far from reality for quite a few people I know. > > A real-life example: > Is she to be called "stupid" and "selfish" because she's poor > despite her efforts??? > > I don't think so. She, btw., is not the only person I know > struggeling in this manner from one month into the next, barely > being able to even catch up on bills. I know quite few people in that sort of situation. > Neither does she have a free choice of employers. There is only one > board of education in the City. Changing for a private school would > come with (at least a temporary) pay-cut, that she obviously can't > afford. I must disagree there. She has the qualifications to obtain employment in may corporations and such. As a matter of fact, unless she happens to be inequivicaly wedded to live in her current abode have her send me her resume. I will be quite happy to submit it to the H/R department at Tivoli (an IBM company I admit) for a position in our training department (last time I checked they had like 90 positions they wanted to fill globaly). I can guarantee the cost of living is somewhat lower than NY here in Texas and her pay will most likely be higher than current. There is also the opportunity for global travel if she is interested and were to get hired. Sending out resumes is cheap, about $.40 a company. > Therefore: > > Since she isn't the only person I can think of, who is in such a > position, the argument formerly known as "If 'ya don't like the > company-policy [employing GAK/CAK] just leave and work for > somebody else" may now be called: "Ad Acta". Obviously this is open to alternate interpretation depending upon to what lengths the party is willing to go to change their life. Skills are what you sell not a particular job title or duty set. Complacency and despondancy can be opportunity killers. [I have attached my 'long' .sig both to include the Tivoli address and to aggravate those who bitch about the length of my 'short' .sig] "Reality is observer dependant" \ \ \\///// | | (.) (.) ===========================oOO==(_)==OOo========================== James Choate Tivoli Systems, Inc. The Armadillo Group Senior Engineer SOHO - Internet - Technology 9442 Capitol of Texas Highway North 608 E. 48th. Suite 500 Austin, TX 78751 Austin, TX 78759 Email: jchoate(a)tivoli.com Email: ravage(a)ssz.com Phone: 512-436-8893 Phone: 512-451-7087 Fax: 512-345-2784 Fax: n/a WWW: www.tivoli.com WWW: www.ssz.com Modem: n/a Modem: 512-451-7009 Pager: n/a Pager: n/a Cellular: n/a Cellular: n/a =================================================================== Political ideal: The Constitution says "Congress shall make no law..." & What happened to the 9th & 10th Amendments? Philosophy: Pantheism - the belief that everything is divine, that God is not seperate but totaly identified with the cosmos, and that God does not possess personality or transcendence. Favorite Cartoon - Danger Mouse & Mighty Mouse (the original) =================================================================== The end of our exploring will be to arrive at where we started, and to know the place for the first time. T.S. Eliot =================================================================== Adopt, adapt, improvise! Anonymous =================================================================== For a succesful technology, reality must take precedence over public relations, for nature cannot be fooled. Richard Feynman =================================================================== Sometimes it is said that man cannot be trusted with the government of himself. Can he, then, be trusted with the government of others? Or have we found angels in the forms of kings to govern him? Let history answer this question. Thomas Jefferson, 1st Inaugural Addr =================================================================== The Chinese icon for crisis consists of the icons for danger and opportunity. An observation by J. Choate =================================================================== You are What you do When it counts The Masao

1 0

Orthogonality and Disaster Recovery
by Tim May 17 Dec '03

17 Dec '03

One of the themes of modern computing I strongly support is that of "orthogonality," or clean functionality. A browser should not also try to be a money management program. A word processor should not also try to be an accounting program. Failure to observe this rule of thumb has led to spreadsheets which can run MPEG movies in spreadsheet cells (I'm not kidding), and to Web browsers which take 20 MB of free memory to run reliably because they also contain mediocre news readers, mediocre mailers, and lots of bloatware cruft. The move toward modular decomposition is supported in functional and object-oriented languages (like Java and C++) and in modern operating systems. Much of the strenght of Unix has obviously come from the philosophy that a function or utility should do some small set of things well and cleanly, with chaining of these clean tools to accomplish more complicated tasks. A crypto program like PGP is intended to encrypt messages between a sender and a recipient, or to provide authentication through signatures, or to encrypt files on a storage medium. These are the classic, well-documented, oft-discussed functions of crypto. Look in textbooks under "crypto" and there won't be much talk of how to supply MIS with emergency backdoors, or ways to monitor employees. If properly modularized and orthogonalized (so to speak), such crypto programs can then be used as building blocks for other tasks, like remailers, data havens, and so on. But there is a growing tendency, as seen in the bloatware examples of browsers and spreadsheets mentioned above, to throw in all kinds of "wish list" and "wouldn't it be nice" stuff. PGP is headed for bloatware. ("It's not just a crypto program, it's also a tax preparation and disaster planning program!") I'm quite certain that the Security and MIS directors at various companies asked PGP, Inc. to include message recovery features. Not so much to handle the very rare (almost nonexistent) cases where a piece of mail sent at some time in the past has to be recovered because Alice was hit by a truck, or similiar unlikely events (*), but because Security and MIS folks would like the option of "monitoring" e-mail traffic. (* I have heard no plausible scenarios under which transient communications, which are presumably stored in the form composed (plaintext) on the sender's machine or in the for received and read (also in plaintext) on the receiver's machine, need to be recovered from the *transit* state. We know why the FBI wants access to communications keys--because access to the transit state is what they get when they wiretap or sniff a communications line--but there is no plausbile explanation of why a company would not simply ask Alice for the plaintext, or ask Bob if for some reason Alice is unavailable. The idea someone floated, that he needs to go in and decrypt his employee's mail in emergencies is far-fetched.) But are such bloatware crypto programs even good for disaster recovery? I say they are not. I say e-mail will be a tiny, tiny portion of the recovery strategy if Alice gets hit by a truck, for example. Far more important will be recovery of her hard disk and related files. (No, I am _not_ proposing anything be added to PGP to deal with this disaster planning. Nor am I proposing that PGP enforce plaintext storage, or anything else for that matter. These are all matters _orthogonal_ to the basic function of a crypto program, and a crypto program cannot enforce crypto hygiene any more than a spreadsheet can enforce good tax planning hygiene.) I am also not terribly interested in convoluted, byzantine schemes for building "CDR" and such into crypto programs, as some are proposing. Again, this is trying to make a crypto program into a disaster preparation product, and trying to (partly) solve backup and disaster problems best solved in other ways. Not something PGP should worry about (either the program or the company). "What if Alice forgets her key?" (Loses her private key, forgets her passphrase, whatever.) A very real concern. A concern I have myself. I won't say how I deal with it, for security reasons, but it ain't something I expect PGP, Inc. to solve _for_ me. Nor is my solution, whatever it is, a step toward GAKking of keys, or any kind of building of an infrastructure for surveillance. In fact, this was my point a while back about how a diversity of approaches to disaster planning, to key insurance measures, makes the imposition of mandatory key escrow or Government Message Recovery (GMR) very difficult. The very chaos helps. "Let a thousand flowers bloom." And it turns out that the "what if Alice forgets her key?" scenario is very poorly dealt with by PGP 5.5 (unless the corporation actually _does_ keeps a copy of the private key generated for or by Alice...something supporters of CMR says is not the case. Whether it _can_ or _will_ be the case is another issue.) So, disaster planning, for dealing with crashed disks, dead employees, malicious employees (who, for example, encrypt their disks and then leave the company), and general failures to backup work product, etc., these examples of disaster planning issues are NOT dealt with in any important way by PGP 5.5. Nor should any communications security program try to be this kind program. Keep it simple, stupid. This kind of bloatware is a fig leaf for security, and very probably introduces major new security flaws. (I've discussed at length the issues of just who will be reading the CMR messages. It's very unlikely such CMR messages will simply be archived away for that rare day when someone's old messages need to be "recovered" for the reasons usually given...in fact, as I have been arguing, I can't imagine companies even bothering to get some transient piece of e-mail sent 2 years earlier by Alice to Bob. They don't archive phone calls, and these are every bit as likely to be "critical" in some sense as old e-mail messages are.) As this relates to PGP, it just ain't their problem to try to answer the demands of control freaks in corporate MIS departments that backdoors be built into crypto products. (Call it snoopware, call it surveillance software, call it CMR. But what it really is a backdoor built into a crypto system. And one thing we know from several decades of crypto work is that backdoors are holes in security. Given that these backdoors apparently have little use in any real disaster situations, they represent a serious dilution of security for little or nothing gained.) PGP, Inc. should stick to its core business, and not try to build in snoopware backdoors for control freak MIS managers. If it is claimed that corporate America is demanding these backdoors, our industry and community then faces a major educational battle. If this battle is lost, as it may already be, then the same reasons for corporations to insist on "emergency access" (which of course won't be very "emergency" oriented, as actually used in corporations) will be seen by many to apply to government as well. "What have you got to hide?" Keep it simple, stupid. That makes for efficiency, functionality, and easier product development. And it doesn't build the case for government to later demand message recovery. --Tim May The Feds have shown their hand: they want a ban on domestic cryptography ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^2,976,221 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

3 2