- cypherpunks-legacy - lists.cpunks.org

[RANT] Re: Why not PGP?
by Jim Ray 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: apteryx(a)super.zippo.com, cypherpunks(a)toad.com Date: Sat Oct 12 00:48:23 1996 Mark wrote: <snip> > Does this mean that exporting Private Idaho, PGPfront, WinPGP, etc. > would > be a violation of ITAR because they function only when combined with PGP > and contain "hooks" for using PGP? To the best of my understanding, "maybe, it depends" A lousy answer to a good question, and NOT legal advice of course. One of the big problems with regs. like ITAR (and others of questionable Constitutionality) is uncertainty. Certainty and simplicity would lead to less FUD, and hence less power on the part of regulators, so it's not in their interest to be definite or even rational. One of the things "it depends" on may be the time-proximity of an election, of course. Folks seem to have disturbingly short memories regarding governmental abuse these days. > I don't recall any restrictions on who could download these files from > their host sites. At least in the case of Private Idaho, which seems to be the standard for using & chaining remailers (with John Doe in a close second place) there seems to be no restriction. AFAIK, Joelm couldn't keep a program as nice and as widespread and as popular from getting exported no matter what he did. Joey Grasty tried (really!) to keep WinSock from getting exported, but it was overseas anyway, within days. [I didn't do it.] Is remailer software somehow different than remailer-using software under ITAR? Again, I don't know. <sigh> It is quite likely, IMO, that the next governmental attack on privacy will come on the chained, encrypted remailers, like WinSock, which I'm running as I type now. :) I am a strong believer in privacy, but only for peaceful and good purposes. Running a remailer, like running for office, is an experience that will change your outlook on things. I encourage doing both. As everyone knows, I would be likely to begin keeping logs and cooperate with law-enforcement (even the lying, "evidence" planting, biased assholes at B.A.T.F.) if I were to somehow discover violent abuse, like Mr. Bell's "assassination politics" scheme, going on inside WinSock. Presently, only a rejected message file is kept. With proper encryption and chaining, I am not sure how much good cooperation would do anyway, and I would be certain to take considerable pains to avoid compromising the privacy of legitimate users. OTOH, I would shut down, or go to jail for contempt, or both, rather than cooperate even one little bit in the enforcement of the failed, corrupting, tax-and-spend drugwar. I am sure that different remailer-operators all feel differently about the issue, and it is certainly a touchy one, but I am sure that some operators do agree with me. I will not initiate, or advocate, or abet violence in a failed attempt to achieve political or social goals, no matter who or what wants me to. I hope that abusers don't "ruin it for the rest of us." I would also hope (though it sometimes seems that no rational argument stands a chance) that those who are tempted by violent, simpleminded "solutions" would understand from recent and not-so-recent history that transforming jerks into martyrs is an incredibly simple way of cementing those jerks' policies *permanently* into law. There is no free political lunch -- peaceful change requires hard work and money. JMR One of the "legitimate concerns of law enforcement" seems to be that I was born innocent until proven guilty and not the other way around. -- me Defeat the Duopoly! Vote Harry & Jo http://www.HarryBrowne96.org/ ___________________________________________________________________ PGP id.E9BD6D35 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 I will generate a new (and bigger) PGP key-pair on election night. <mailto:jmr@shopmiami.com> http://www.shopmiami.com/prs/jimray ___________________________________________________________________ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMl8jHG1lp8bpvW01AQFWnwP+MhhHkTt9f3GbkjPlf+w7aZuzPMEt5xEi vMDSiu5cHjXeCFKZgVlb/8jXfin7hiGjoEEeeq0ntIb0POTKfbFUI/EB3nURrj8u aABvshBGVOfLNJzO/+6nqAgJeVMgyhjJYBkjWSvuJDHhphCfUtpyLKkvI3V8Ps4k h8ZHM2t95q8= =K6Lo -----END PGP SIGNATURE-----

1 0

Re: exporting signatures only/CAPI (was Re: Why not PGP?)
by azur＠netcom.com 17 Dec '03

17 Dec '03

>Jim Bell <jimbell(a)pacifier.com> writes: >> At 08:49 AM 10/11/96 +0100, Adam Back wrote: >> > [...]. Microsoft's CAPI arrangement is that they will not >> > sign non-US CAPI compliant crypto modules (Examples of enforcement of >> > no-hooks interpretation). >> >> Does that fix the "export only the signature" problem (for the >> government)/opportunity (for the rest of us)? You know, present Microsoft >> with the software, don't tell them it's already out of the US, and they sign >> it. Export the signature only (who cares if this is legal!) and edit the >> international software to contain the signature. > >Export the lot, signature included :-) > >(I doubt exporting only the signature once the story came out would >offer you any more protection legally than exporting the software). > >As you say who cares if it's illegal: things get exported all the >time. > >The problem however, is finding a non-US site to hold the hot potato >once it has been exported. For example 128 bit Netscape beta was >exported a while ago. I don't see it on any non-US sites. This is >due to Netscape's licensing requirements, you need a license to be a >netscape distribution site, the license doesn't include the right to >mirror non-exportable versions on non-US sites. > That's one good application for remailers, and .warez newsgroups. at. >If the exported software is `PGP3.0 for CAPI' or whatever, I think it >should be fair to conclude it will be cheerfully mirrored by all, and >Phil Zimmermann won't be complaining. (PGPfone is on ftp.ox.ac.uk, >plus other places, for example.) So yes, I agree, for software with >appropriate distribution licenses. > >Another approach, which has been discussed lately is the use of a >patch to usurp Microsoft as the signatory for CAPI modules. I wonder >what Microsoft would say about an unauthorised patch, to fix an ITAR >induced `bug' in windows. Bill Gates doesn't sound pro-GAK. If they >aren't going to complain, perhaps such patches could be distributed >widely outside the US also. > >The new owner of the CAPI signatory key would need a good reputation, >and presumably a policy of signing any (non-GAKked) CAPI modules >signed by microsoft, and anything else that anyone wants signed. > An excellent suggestion.

6 6

[URGENT] Secure envelopes
by nobody＠replay.com 17 Dec '03

17 Dec '03

There's a rumor that Timmy C. Mayflower sells his dead relatives as fertilizer as they constitute the best shit in California.

1 0

Re: Why not PGP?
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Thu, 10 Oct 1996 13:40:31 -0800, jim bell wrote: >>I don't intend to submit my present or future private PGP keys for key >>escrow (Is that what's called GAK?). To protect myself against forgetting >>my private key (which has happened once already) I'll no doubt some day put >>it on a floppy and put the floppy in my bank safe deposit box. >You still have to "remember" that long, non-memorizable key, although >something like that can be written on paper and well-hidden and/or split up >into parts. It's only value is to decrypt that bank-stored floppy. It'd be only 256 bytes or 512 hex digits. If it was *that* important, you _could_ memorize it! After all, some monks memorized the entire Bible. I knew guys who had pi memorized to over 300 places.... # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # <cadams(a)acucobol.com> | send mail with subject "send PGPKEY" "That's our advantage at Microsoft; we set the standards and we can change them." --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)

1 0

Re: SPA sues C2, other ISPs and users
by Duncan Frissell 17 Dec '03

17 Dec '03

At 02:12 PM 10/11/96 -0700, Greg Broiles wrote: > >It's inappropriate to expect Sameer or any other C2 >employee/agent/representative to discuss the suit before they've had a >chance to find and meet with an attorney; in some circumstances it might >never be prudent for them to make a public statement about the suit. Is this good advice? When attacked, isn't it good to offer as strong a defense as possible including (but not limited to) verbal abuse, physical confrontations, countersuits, standing outside people's houses, picketing, letters, public appearances, urging other people to express their views, etc. What is lost by a complete defense. If you develop a nasty reputation, people eventually leave you alone. It doesn't even hurt you in court. See for example the new Milos Forman film "The People vs. Larry Flynt." In spite of Larry's tactics, Justice Rhenquist gave him the unanimous decision he wanted from the Supremes. DCF

1 0

Intel RICO Billed
by John Young 17 Dec '03

17 Dec '03

The Washington Post, October 12, 1996, p. A6. Clinton Approves Intelligence Spending Rise Bill Is Also Signed to Make Theft of Trade Secrets a Federal Crime President Clinton signed a bill yesterday that boosts intelligence agency spending and another that makes theft of trade secrets a federal crime. Clinton said he signed the 1997 Intelligence Authorization Act despite objections to three provisions, including one that establishes three new assistant directors of central intelligence under CIA Director John M. Deutch. Although the nation's intelligence budget is an official secret, it is reported to total about $30 billion for the 1997 fiscal year, up 4.9 percent from 1996. In a statement, Clinton said he would support Deutch in asking the next Congress to repeal the provision that created assistant directors for intelligence collection, analysis and administration. "I share his concern that these provisions will add another layer of positions requiring Senate confirmation" without a corresponding increase in the CIA director's authority to manage the intelligence agencies, Clinton said. The bill: + Gives the FBI power to subpoena local telephone records. + Authorizes the CIA and the National Security Agency to collect data on foreign citizens abroad for U.S. investigations. + Requires Senate confirmation of the CIA's general counsel. That is meant to prevent political influence over a position designed to block illegal covert operations. + Prohibits federal employment of senior intelligence officials for three years after their departure from government. It also prohibits the CIA from using American journalists as spies. But the restriction could be waived in extraordinary circumstances and the CIA still could have its agents pose as journalists. The bill would not prohibit journalists who choose to provide information from doing so. Clinton also signed into law the Economic Espionage Act of 1996, saying it strengthens protections against theft or misuse of proprietary business information. "It will help us crack down on acts like software piracy and copyright infringement that cost American businesses billions of dollars in lost revenues," he said. The law makes the theft of trade secrets a federal crime and provides financial penalties and prison sentences for specific acts of economic espionage. It also preserves the confidentiality of trade secrets in court proceedings. Clinton said the measure also eliminates gaps in the criminal laws that cover attacks against computers and the information they contain. [End]

1 0

Crypto: Systems & Application Developers Wanted
by SPYRUS 17 Dec '03

17 Dec '03

SPYRUS, the leading provider of cryptographic tokens (PC cards & Smart Cards), with associated systems and applications software, is looking for engineers with the following qualifications to work with our Secure Applications Group in San Jose, CA: * 5 or more years experience in systems and applications software design and implementation in C and C++. Assembler experience desired. * Minimum 3 years experience with Windows development including device drivers and VxD's, using Microsoft and Borland compilers, NuMega tools, etc. Windows MFC, NT kernel, and Unix (any versions) experience desirable. Mac experience a plus. * Cryptographic and other security software expertise highly desirable. Gregg Weissman SPYRUS San Jose, CA Voice: 408-432-8180 x225 Fax: 408-432-8415 email ASCII resume to: gweissman(a)spyrus.com - or - msutherland(a)spyrus.com see the SPYRUS page at http://www.spyrus.com

3 2

WW II Crypto. History
by Richard Pekelney 17 Dec '03

17 Dec '03

Folks, Those interested in WW II Cryptolographic History should check out: www.maritime.org/ecm2.shtml I have just updated this site to include more information on the ECM Mark II, aka SIGABA, aka CSP-889. This was the primary high level US cipher system from 1941 - 1959 or so when it was gradualy retired because it was too slow. The web site now includes a history of the machine, textual description of its algorithm, photographs, and a Java program (with source) that emulates the machine in detail. Comments and suggestions for the site are greatfully accepted at pekelney(a)rspeng.com. I am also seeking help improving the UI if anyone is very Java literate and wants to help. I do not regularly monitor cypherpunks because of its incredibly high volume of traffic. Thanks, rich -- Richard Pekelney Internet: pekelney(a)rspeng.com Phone: 1-415-563-5928 Fax: 1-415-563-5787

1 0

write to SPA re: suit against C2 et. al.
by the prisoner 17 Dec '03

17 Dec '03

If you haven't read it yet, read the press release on their page at www.spa.org, and see how they'd like to 1. impose prior restraint on speech, and 2. turn ISPs into little police organizations, doing SPA's will. I think it's time for a little outrage. ============================================================================ SPA Contacts Mailing Addresses: 1730 M St. NW, Suite 700 Washington, DC 20036-4510 tel: (202) 452-1600 fax: (202) 223-8756 Anti-Piracy Hotline: (800) 388-7478 Fax On Demand Service: (800) 637-6823 57 Rue Pierre Charron 75008 Paris France tél: 33-(1) 45-63-02-02 Fax: 33-(1) 45-63-02-31 President Ken Wasch, ext. 310, kwasch(a)spa.org Arnita Grose, Executive Assistant, ext. 309, agrose(a)spa.org Anti-Piracy Sandra Sellers, VP of Intellectual Property Education and Enforcement, ext. 311, ssellers(a)spa.org Peter Beruk, Director of Domestic Anti-Piracy, ext. 314, pberuk(a)spa.org Joshua Bauchner, Litigation Coordinator, ext. 323, jbauchner(a)spa.org Shevon Desai, International Coordinator, Latin America, ext. 348, sdesai(a)spa.org Michael Flynn, Litigation Assistant, ext. 366, mflynn(a)spa.org Francine Foster, International Public Relations Coordinator, ext. 394, ffoster(a)spa.org Elisha Lawrence, Director of Asia/Pacific Anti-Piracy, ext. 378, elawrence(a)spa.org Jim Nyberg, Litigation Coordinator, ext. 315, jnyberg(a)spa.org Rudolfo Orjales, Director of Latin American Anti-Piracy, ext. 375, rorjales(a)spa.org Rebecca Sills, International Coordinator, Europe, ext. 344, rsills(a)spa.org Monica Slade, CPC Assistant, ext. 344, mslade(a)spa.org Communications Kathleen Rakestraw, Communications Manager, ext. 321, krakestraw(a)spa.org Cheryl Benson, Graphic Designer, ext. 355, cbenson(a)spa.org Daniel Coonley, Senior Graphic Designer, ext. 350, dcoonley(a)spa.org Conferences Tina Hochberg, Director of Conferences, ext. 318, thochberg(a)spa.org Rebecca Howland, CSM Marketing Coordinator, ext. 367, bhowland(a)spa.org, csminfo(a)spa.org Nadia Kader, Meetings Assistant, ext. 339, nkader(a)spa.org Maria Santos, Meeting Planner, ext.328 msantos(a)spa.org Finance/Administration Tom Meldrum, Vice President of Finance and Administration, ext. 324, tmedrum(a)spa.org Julie Maynard, Accounts Receivable Accountant, ext. 331, jmaynard(a)spa.org Dawn DeVillasana, Marketing Specialist, ext. 388, ddevillasana @spa.org Debra McGinnis, Accounting Manager, ext. 351, dmcginnis(a)spa.org Andrey Drachenko, Fulfillment Clerk, ext. 353, adrachenko(a)spa.org Jim Hassert, Director of Information Services, ext. 340, jhassert(a)spa.org, Sandy Meadows, Fulfillment Coordinator, ext. 341, smeadows(a)spa.org Natasha Soldatchenkova, Fulfillment Assistant, ext. 333, natashas(a)spa.org Katrina Hunt, Office/Personnel Manager, ext. 312, kstyles(a)spa.org Kia Williams, Receptionist, ext. 300, kwilliams(a)spa.org Government Affairs David Byer, Director of Government Affairs, ext. 325, dbyer(a)spa.org Jonathon Agmon, Government Affairs Legal Advisor for Intellectual Property and Trade Policy, ext. 325, dbyer(a)spa.org Erika Barnes, Public Policy Coordinator, ext. 335, ebarnes(a)spa.org Letreze Gooding, Government Affairs Assistant, ext. 362, lgooding(a)spa.org Melinda Griffith, State Policy Manager, ext. 337, mgriffith(a)spa.org David LeDuc, Government Affairs Assistant, ext. 352, dleduc(a)spa.org Mark Nebergall, Vice President and Counsel, ext. 319, mnebergall(a)spa.org Mark Traphagen, Vice President and Counsel, ext. 322, mtraphagen(a)spa.org Marketing Kay Heiberg, Marketing Manager, ext. 361, kheiberg(a)spa.org Barbara Young, Marketing Coordinator, ext. 326, byoung(a)spa.org Membership Services Glenn Ochsenreiter, VP Marketing and Membership Services, ext. 327, glenno(a)spa.org Mandy Braun Strum, Consumer Section Manager, ext. 313, mbstrum(a)spa.org Sue Kamp, Director, Education Section, ext. 354, skamp(a)spa.org Daniel Gonzalez, Web Assistant, ext. 377, dgonzalez(a)spa.org, Alexis H. Tatem, MPC Marketing Manager, ext. 330, atatem(a)spa.org, mpcinfo(a)spa.org Sara White, Special Projects Manager, ext. 343, swhite(a)spa.org Marnel Williams, Sections Administrative Assistant, ext. 369, mwilliams(a)spa.org Jeffrey Espiritu, Membership Coordinator, ext. 338, jespiritu(a)spa.org Anika Valentine, Membership/Marketing Adminstrator, ext. 317, avalentine(a)spa.org Public Relations David Phelps, Director of Public Relations, ext. 320 dphelps(a)spa.org Loni Singer, Public Relations Assistant, ext. 353, lsinger(a)spa.org Research James Sanders, Director of Research, ext 373, jsanders(a)spa.org Anne Griffith, Research Analyst, Business Section Manager, ext. 360, agriffith(a)spa.org Lainie Tompkins, Research Analyst, ext. 316, ltompkins(a)spa.org SPA EUROPE Gérard Gabella, Managing Director Viviane Coisy, Manager of Anti-Piracy/Public Policy Eric Daubie, Manager of Business Development Perry de Gastines, Manager of Business Development

1 0

Re: Crypto AG - Secret GAK Partner ?
by John Young 17 Dec '03

17 Dec '03

>>This is nothing new. But how about faxing the article to John Young, so >>we all may benefit? > >There is no need to. They have an archive at http://www.spiegel.de/archiv/ >(you have to register before you can use it). The article was in >Der Spiegel 36/1996. We have put the Spiegel German text at: http://jya.com/cryptoag.htm Our German-to-English translation program choked on the crypto-lingo arcana. C'punk German linguists could surely translate "Crypto-Geschaftsfuhrer." Maybe Bob Newman with Motorola can at least verify his quotes.

1 0