- cypherpunks-legacy - lists.cpunks.org

Re: Machine readable form (was:RE: [DES] DES Key Recovery Project, Progress Report #7)
by Tobin Fricke 17 Dec '03

17 Dec '03

> This seems clear enough. If it's printed on paper, it's kosher for > export. But if we're really overt about it, we may goad the government > into attempting to control printed source code as well. That could > prove most interesting. Hmmm.. Printing out, say, PGP as a book where each page is a 2 dimensional bar code would be rather interesting. Then again, OCR works pretty well for normal text. A printed book or other printed material setting forth encryption source code is not itself subject to the EAR (see Sec. 734.3(b)(2)). However, notwithstanding Sec. 734.3(b)(2), encryption source code in electronic form or media (e.g., computer diskette or CD ROM) remains subject to the EAR (see Sec. 734.3(b)(3)). Does a barcode fall under "electronic form or media" or is it "printed material"? What about punched cards? (-: Tobin Fricke

1 0

Getting into MIT is impossible
by Anonymous 17 Dec '03

17 Dec '03

According to Rick Osborne: "I disagree and can speak from experience. I was denied admission to MIT even thought I had a 3.82 GPA, 1440 SAT (one try), and had taken 9 AP tests with two 5's, four 4's, two 3's, and one 2. As for being well-rounded, I was on several academic teams, sang in Chorus, acted and stage managed in Drama, and played Tennis." People get into MIT--or don't get into MIT--for lots of reasons. Most intelligent people apply to several schools, knowing that admissions practices are subject to the vagaries of reality. In my case, my SATs were about 1500, with some 800s in achievement tests. And the usual bullshit high school clubs, political offices, etc. etc. I was accepted by MIT, but not by Caltech. I didn't lose any sleep over the way things turned out. And I decided not to go to MIT, either. "The only thing I didn't have that the next MIT applicant had was money. I made the mistake of letting them know that I was dirt poor and would need full aid/grants/etc, and to quote "The Great Escape" it was "Zzzt! To the Russian front!"" My guess is that "other factors" were involved. I noted with some interest, but little surprise, that the guy claiming MIT required a 4.0 GPA and a 1600 combined SAT score could barely spell, and had major problems making a coherent point. Methinks this is why MIT rejected him, not his lack of a "1600." ">For what it's worth, I wanted to go to MIT my sophomore year in high >school, too "Lucky you. It had been a dream of mine since I was an annoying overachiever of 6. Sux to be white trash, I guess." MIT offered me a substantial economic aid package, in the form of loans, grants, and various campus jobs. What does this tell you? "MIT may be a great school, but they tend to be snooty assholes for the most part. (DISCLAIMER: Not all MIT grads/attendees are necessarily "snooty assholes", I'm just saying that I've yet to meet one that wasn't.) I've known about a dozen or so MIT grads, and only one of them was a snooty asshole, and it was a _she_, one of the first MIT women grads (and she was _very_ impressed by this). Most MIT grads are perfectly reasonable. Xanthar --

3 2

Re: overview.htm (fwd)
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Nurdane Oksas <oksas(a)asimov.montclair.edu> writes: > On Mon, 27 Jan 1997, Dale Thorn wrote: > > > Nurdane Oksas wrote: > > > On Sun, 26 Jan 1997, Dale Thorn wrote: > > > > Nurdane Oksas wrote: > > > > > On Sun, 26 Jan 1997, Igor Chudov @ home wrote: > > > > > > Nurdane Oksas wrote: > > > > > > > i think it's good also to exercise outdoors as well as your > > > > > > > indoor nordictrack machines..sun and air is esp. necessary; > > > > > > > > but remember, tanning will kill ya. > > > > > > > Yes it will; Not a fan of tanning myself...it also causes lot > > > > > of skin problems, have seen women age too soon tanning; > > > > > we don't go outside naked here in NorthEast...do remember; > > > > > > The real babes in So. Cal. go to tanning salons. That way the evenly- > > > > distributed tan looks best with, say, a pure white bikini. You can > > > > go to the beach, of course, and hang out with the hoi polloi, but > > > > it's mostly kids with pimples and stuff. > > > > > i don't see why she would wear a bikini if she already is tan. > > > She just goes to show off right??? California is know for > > > very beautiful girls ... I like the pale look :) > > > > There are two really major beaches in the L.A. area that I know of. > > One is Bolsa Chica, several miles long, north of Huntington Beach, > > which attracts most of the young'uns south of L.A., and Zuma in the > > northmost points of Malibu, which gets a lot of Valley people > > (fer sure). To quote the L.A. Weekly of a few years ago, in a > > "Best of L.A." review, "Why do all those hot young girls go to Zuma? > > Because that's where all the hot young boys are." > > I see. > > > But the real babes don't go there. They get skates and nifty little > > costumes and zip up and down the boardwalks in Santa Monica and > > Pacific Palisades mostly, in case some hot producer/director should > > happen along. > > I see. > Why is a mere "I see" classified as cypherpunks-flames??? Stop picking on girls, Sandy. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

4 6

Meet-in-the-middle attack
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

The main difference between Tim Maya and shit is that shit smells better. __[I]__ o-o' __oOo__(-)_oOo__ Tim Maya V

1 0

Re: Child Porn
by Lucky Green 17 Dec '03

17 Dec '03

At 04:48 AM 1/29/97 +0000, Vipul Ved Prakash wrote: >(Forward) >*** NY student charged with sending child sex photos over Internet > >Nathaniel Levy, a psychology major at New York State University, was >charged Wednesday with using the Internet to transmit photos of >infants having sex with adults, the New York state attorney general >said. This is hilarious, given the fact that San Francisco State University's psychology department has what probably amounts to the largest collection of child pornography on the planet. Their collection also includes primary sources on any other type of kink you can imagine. And some that no sane person ever could imagine. [You have to be at least working on a PhD to access the collection.] -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://www.mersenne.org/prime.htm

1 0

Re: Libel/slander & crypto relevancy (fwd)
by Greg Broiles 17 Dec '03

17 Dec '03

At 10:42 AM 1/28/97 -0600, Jim Choate: >> From: Greg Broiles <gbroiles(a)netbox.com> >> Civil actions against people doing "graffiti" are only interesting where >> the defendant has assets worth suing for. This economic dimension >> substantially limits the number of suits which will be brought. > >Thank you for agreeing with my thesis that the legal industry is one >driven by monetary gain and not justice. It is the one major problem >with law today, it ignores those who are not 'worth it'. Justice is >supposed to be blind and until that happens there can be no true >liberty. Law should be involved in rights and wrongs and not 'how much >money do I need to buy that villa in Spain'. Um, I was making the reciprocal of your point - that people with no assets have a special *advantage* with respect to civil suits, they're able to get away with a fair amount of misbehavior because it's not cost-effective for plaintiffs to sue them. If you're a defendant, being ignored as not 'worth it' is a good thing, not a bad thing. >There is also the aspect of 'reputation' of the organization which was >defamed. This will become even more critical to good business over the >Internet in the future than it is now. Now the only really important >'reputation' that one has to worry about is their credit report. I disagree strongly here. Think about the reputations of Odwalla and Sizzler and (Burger King? can't remember) after their E. Coli problems. Think about the reputation of Radio Shack for making mostly crappy products. Think about the reputation of some ISP's (Netcom, AOL) for continuing to charge people's credit cards for months after a cancellation. Reputation has many dimensions beyond credit reports. > Another aspect of this >that keeps coming up is one of 'big' corporations with 'lots' of money, >this monotonicity in legal thought is the reason I refer to the 'legal >industry' and not 'legal profession'. Currently the main force driving >law is how much money is available. Expansions of liberty simply can't >happen in this environment because there is no mechanism to protect >'little' organizations or persons without 'lots' of cash. This problem is >one that is not being addressed by anyone, most especialy lawyers who >will loose income which they aren't apt to do voluntarily. I agree that people get screwed because they can't afford to litigate or they can't afford a [good] attorney. But I think that the economic dimension to litigation is not necessarily all bad - if litigation were costless, what would prevent people from suing over essentially negligible disputes? I think it's good for people to stop and ask themselves "Is this dispute really worth fighting over?" The relatively high cost of litigation is a way to ration access to a relatively expensive resource, e.g., the courts. If litigants don't pay that cost, then taxpayers will. (And shifting more costs to losing litigants makes it easier, not harder, to be effectively judgment-proof by having few assets.) >> Criminal prosecutions for defamation (in the case of "graffiti") are still >> unlikely - a much more straightforward charge would be unauthorized access >> to a computer or some flavor of fraud, depending on the facts. > >This would be hard to do in the situation such as a mailing list because >the parties would have 'authorized access' and it does not include the issue >of inside parties nor 'web bbs's' where parties can enter comments and >other statements in a 'authorized' manner. There are mechanisms to use >computers for abuse of other parties besides hacking. I don't think that that web BBS or mailing list messages alone will lead to much criminal liability for defamation because I think it's difficult to do a lot of harm in that medium. BBS's have existed for 20+ years now - and how many online defamation cases have we seen? Maybe 10, total. Off the top of my head the only ones I remember are _Cubby v. Compuserve_ and _Stratton-Oakmont_, but there are probably others. Still, we're seeing what, at best one reported case for every 2 years? Online defamation liability exists, but I don't think there's ever going to be an avalanche of cases, simply because the damage involved tends to be relatively small compared to the monetary and emotional costs of litigation. >The point is that if joe-six-pack isn't secure in knowing that his views >and expression are not protected from abuse he won't use it. We all loose >in that case. But Joe Sixpack's lack of protection from abuse is also Joe Sixpack's protection from prosecution when he hasn't done anything wrong. Look at how pissed off some people are when Sandy moderates the list - imagine how much worse it would be if prosecutors were sifting through the list, identifying messages they thought were "over the line" with respect to defamation and then prosecuting the wrongdoers. Yow. Some people would be facing three-strikes minimums based on a single day's messages. :) I much prefer a world where we can engage in spirited debate without being afraid of prosecution (or civil suits) over a world where a tiny misstep means jail or litigation. You're of course free to want something else, but it's hard for me to see the logic behind arguing against private moderation but in favor of significant state regulation. Look at the way that big corporations use SLAPP suits to pick on Ma and Pa Kettle now, and imagine what big corporations could do if it was easier to create criminal liability for defamation. I think your proposed strengthening of defamation rules will prove to hurt the "little guys", not help them. >In this example, if party A makes a statement and then B changes it and >then re-distributes it as original comments by A then there is a problem >irrespective of the monetary worth of A or B. Digital signatures in and of >themselves won't help this from happening unless it is required to include >the full text and signature of any quote in any subsequent use of that >material otherwise the quote and the digital signature are out of sync and >therefore worthless. But people who receive the message unsigned know they're getting an unsigned message (or know that it was signed by the quoter, but not the quoted author) and can make the appropriate assumptions about the truth of the attributions, and adjust their assessment of the veracity of the quoter if it turns out that the quoter is a liar, or if someone challenges the quoter to produce a signed version of the statement and they cannot. We seem to have survived OK so far without special rules to punish people for lying - why do we need special ones for the Net? -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

1 0

Re: [noise] RE: Shave the Whales
by Toto 17 Dec '03

17 Dec '03

Dale Thorn wrote: > > Mullen, Patrick wrote: > > Is there a way we can keep the caricatures w/out getting the rest of the > > message > > w/ these postings? I like the ASCII art, but... > > BTW, some of the recent ones are pretty amazing: a bat, a scorpion, > a cow, etc. Maybe we could have the original cypherpunks list saved as an historical ASCII arts treasure. Toto

1 0

Re: Child Porn
by Lucky Green 17 Dec '03

17 Dec '03

At 04:48 AM 1/29/97 +0000, Vipul Ved Prakash wrote: >(Forward) >*** NY student charged with sending child sex photos over Internet > >Nathaniel Levy, a psychology major at New York State University, was >charged Wednesday with using the Internet to transmit photos of >infants having sex with adults, the New York state attorney general >said. This is hilarious, given the fact that San Francisco State University's psychology department has what probably amounts to the largest collection of child pornography on the planet. Their collection also includes primary sources on any other type of kink you can imagine. And some that no sane person ever could imagine. [You have to be at least working on a PhD to access the collection.] -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://www.mersenne.org/prime.htm

1 0

Re: More Circumventing the ITAR
by Anil Das 17 Dec '03

17 Dec '03

Mark Rosen wrote: > > I'm curious as to exactly what the ITAR/EAR/Whatever says specifically > about "unrestricted FTP sites." My program, Kremlin, is available for > download at the web page below. On my web page, I have some stuff in bold > print that informs about the ITAR and tells people to go away if they're > not from the US or Canada. Does this count as an unrestricted FTP site? > It's not all that much different from what MIT has up for PGP. What you need to do to provide FTP access to crypto software is spelled out in the EAR regulations. Here is a summary. I am not a lawyer. 1) Users (downloaders) should be asked to answer some questions to indicate that: They are aware of the crypto export regulations. They and their computers are in the US/Canada. They intend to follow the the crypto export regulations and not export the software they download. They are US persons as defined in the EAR regulations. 2) The server should check that the client site requesting the download is in the US or Canada. In other words, just displaying a warning is not enough. > Also, back to the question of registration numbers. A registration number > is just a string of letters and numbers, and is essentially the same as a > friendly letter; it contains no cryptographic code. For all anyone knows, I > could just be charging for pseudo-random numbers, again, nothing of > cryptographic significance. Is it illegal for me to mail someone outside of > the US or Canada a registration code? Thanks for any help. I wouldn't try to circumvent the regulations by trying to follow the letter of the law while ignoring its spirit. You don't have to be convicted of a crime to make life a lot difficult. Ask Phil Zimmerman, who never even uploaded pgp to the Internet. -- Anil Das

1 0

Re: Libel/slander & crypto relevancy (fwd)
by Greg Broiles 17 Dec '03

17 Dec '03

At 10:42 AM 1/28/97 -0600, Jim Choate: >> From: Greg Broiles <gbroiles(a)netbox.com> >> Civil actions against people doing "graffiti" are only interesting where >> the defendant has assets worth suing for. This economic dimension >> substantially limits the number of suits which will be brought. > >Thank you for agreeing with my thesis that the legal industry is one >driven by monetary gain and not justice. It is the one major problem >with law today, it ignores those who are not 'worth it'. Justice is >supposed to be blind and until that happens there can be no true >liberty. Law should be involved in rights and wrongs and not 'how much >money do I need to buy that villa in Spain'. Um, I was making the reciprocal of your point - that people with no assets have a special *advantage* with respect to civil suits, they're able to get away with a fair amount of misbehavior because it's not cost-effective for plaintiffs to sue them. If you're a defendant, being ignored as not 'worth it' is a good thing, not a bad thing. >There is also the aspect of 'reputation' of the organization which was >defamed. This will become even more critical to good business over the >Internet in the future than it is now. Now the only really important >'reputation' that one has to worry about is their credit report. I disagree strongly here. Think about the reputations of Odwalla and Sizzler and (Burger King? can't remember) after their E. Coli problems. Think about the reputation of Radio Shack for making mostly crappy products. Think about the reputation of some ISP's (Netcom, AOL) for continuing to charge people's credit cards for months after a cancellation. Reputation has many dimensions beyond credit reports. > Another aspect of this >that keeps coming up is one of 'big' corporations with 'lots' of money, >this monotonicity in legal thought is the reason I refer to the 'legal >industry' and not 'legal profession'. Currently the main force driving >law is how much money is available. Expansions of liberty simply can't >happen in this environment because there is no mechanism to protect >'little' organizations or persons without 'lots' of cash. This problem is >one that is not being addressed by anyone, most especialy lawyers who >will loose income which they aren't apt to do voluntarily. I agree that people get screwed because they can't afford to litigate or they can't afford a [good] attorney. But I think that the economic dimension to litigation is not necessarily all bad - if litigation were costless, what would prevent people from suing over essentially negligible disputes? I think it's good for people to stop and ask themselves "Is this dispute really worth fighting over?" The relatively high cost of litigation is a way to ration access to a relatively expensive resource, e.g., the courts. If litigants don't pay that cost, then taxpayers will. (And shifting more costs to losing litigants makes it easier, not harder, to be effectively judgment-proof by having few assets.) >> Criminal prosecutions for defamation (in the case of "graffiti") are still >> unlikely - a much more straightforward charge would be unauthorized access >> to a computer or some flavor of fraud, depending on the facts. > >This would be hard to do in the situation such as a mailing list because >the parties would have 'authorized access' and it does not include the issue >of inside parties nor 'web bbs's' where parties can enter comments and >other statements in a 'authorized' manner. There are mechanisms to use >computers for abuse of other parties besides hacking. I don't think that that web BBS or mailing list messages alone will lead to much criminal liability for defamation because I think it's difficult to do a lot of harm in that medium. BBS's have existed for 20+ years now - and how many online defamation cases have we seen? Maybe 10, total. Off the top of my head the only ones I remember are _Cubby v. Compuserve_ and _Stratton-Oakmont_, but there are probably others. Still, we're seeing what, at best one reported case for every 2 years? Online defamation liability exists, but I don't think there's ever going to be an avalanche of cases, simply because the damage involved tends to be relatively small compared to the monetary and emotional costs of litigation. >The point is that if joe-six-pack isn't secure in knowing that his views >and expression are not protected from abuse he won't use it. We all loose >in that case. But Joe Sixpack's lack of protection from abuse is also Joe Sixpack's protection from prosecution when he hasn't done anything wrong. Look at how pissed off some people are when Sandy moderates the list - imagine how much worse it would be if prosecutors were sifting through the list, identifying messages they thought were "over the line" with respect to defamation and then prosecuting the wrongdoers. Yow. Some people would be facing three-strikes minimums based on a single day's messages. :) I much prefer a world where we can engage in spirited debate without being afraid of prosecution (or civil suits) over a world where a tiny misstep means jail or litigation. You're of course free to want something else, but it's hard for me to see the logic behind arguing against private moderation but in favor of significant state regulation. Look at the way that big corporations use SLAPP suits to pick on Ma and Pa Kettle now, and imagine what big corporations could do if it was easier to create criminal liability for defamation. I think your proposed strengthening of defamation rules will prove to hurt the "little guys", not help them. >In this example, if party A makes a statement and then B changes it and >then re-distributes it as original comments by A then there is a problem >irrespective of the monetary worth of A or B. Digital signatures in and of >themselves won't help this from happening unless it is required to include >the full text and signature of any quote in any subsequent use of that >material otherwise the quote and the digital signature are out of sync and >therefore worthless. But people who receive the message unsigned know they're getting an unsigned message (or know that it was signed by the quoter, but not the quoted author) and can make the appropriate assumptions about the truth of the attributions, and adjust their assessment of the veracity of the quoter if it turns out that the quoter is a liar, or if someone challenges the quoter to produce a signed version of the statement and they cannot. We seem to have survived OK so far without special rules to punish people for lying - why do we need special ones for the Net? -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

1 0