- cypherpunks-legacy - lists.cpunks.org

Interactive Week exclusive - Clinton Admin. to announce new Crypto regs. this PM
by Will Rodger 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Something you might find interesting.... By Will Rodger Washington Bureau Cheif Inter@ctive Week The US government will announce later today that will soon lift controls on technology crucial to doing business over the Internet, White House advisor Ira Magaziner said yesterday evening. Under plans expected to be outlined at a noontime press briefing today, the federal government will require that producers of specialized, narrowly focused data scrambling products submit only to one-time government approval before they sell powerful encryption products abroad. Current policy requires case-by-case approval in most instances. "Basically it will say that for basic financial and electronic applications there will be no export restrictions and no requirement for key recovery," Magaziner said. US Undersecretary of Commerce William Reinsch is expected to give details of the plan. Reinsch could not be reached for comment. Computer industry executives and public interest groups said the new arrangement, though far short of deregulating all encryption, was a step in the right direction. "This is evidence that the administration acknowledges that manufacturers of foreign encryption products do exist," said Peter Harter, public policy counsel at Netscape Communications Corp. "Their policy has put American industry in the back seat and now were trying to catch up." David Banisar, policy analyst at the Washington-based Electronic Privacy Information Center, called the move a "small step forward." Nonetheless, "it still doesnt reach the needs for secure e-mail or other purposes," he said. Computer software and hardware eligible for decontrol under the proposed regulations must fit several criteria, said Kawika Daguio, a public affairs specialist with the American Bankers Association who helped hammer out an agreement for the new regulations. .Though products designed for use by the general public may be unlimited in the strength of the encryption techniques they employ, they must also be strictly limited in use, he said. Software written for home banking, for instance, must be usable only for bank transactions and not easily modified for general use. Most programs handed out by banks for PC banking at home fit that criteria, he said. Programs that use the industry SET standard for credit card purchases over the Internet should easily meet Commerce Department criteria, too, since the SET standard encrypts only those data essential to making online purchases; the limited uses of the standard render it all but useless for general use. Visa, MasterCard and American Express developed the standard. "Id expect programs written with SET to get very rapid approval - within weeks," Daguio said. In addition, US companies will have leeway to export any kind of encryption to any bank as long as that encryption is used only for legitimate, internal bank functions. Products designed for merchant-to-merchant transactions without a bank in between would still be subject to stricter controls, including use of weak software routines that make decoding by law enforcement easy, or deposit of decoding keys with law enforcement bodies prior to export. Commerce Department regulations will spell out details this month or next, Daguio said. Though more sweeping in nature than past government regulations, the US banking industry has long enjoyed more freedom to use powerful encryption technologies abroad than other industries. Successive administrations have granted banks that leeway since by definition they must have greater safeguards over employee behavior than all but a handful of industries. In addition, financial applications have long been easier to design for export since they typically require encryption of only a few standard data fields. If sufficiently limited in design, the reasoning goes, they pose no threat to law enforcement concerned about smugglers or terrorists who may want to evade detection by law enforcement. The government and the computer industry have for years been locked in disputes over the relative importance of encryption technologies and their potential for misuse. Since encryption encodes sensitive information like credit card numbers, voice traffic over public networks and anything else that can be converted into an electronic stream of ones and zeroes, proponents of electronic commerce have insisted the technology must be widely deployed to assure the security of computer networks worldwide. Absent US encryption exports, they claim, American companies will soon lose their leadership role in a technology crucial to the countrys competitiveness. Federal officials, on the other hand, have said export of the technology threatens global security, since terrorists and criminals in outlaw states like Libya and North Korea could easily use the technology to defeat wiretaps and data searches increasingly prized by law enforcement and national security agencies. In response, they demand that exports of powerful encryption include so-called key recovery - a method by which law enforcement can gain access to the encryption keys used to encode messages. Many public interest groups have condemned the plans, however, saying such a transfer of power to law enforcement threatens to usher in an era of ubiquitous and illegal eavesdropping. Several bills pending in Congress would do away with nearly all controls. Reinsch was expected to testify at congressional hearings on one of the bills this morning. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBM3HngkcByjT5n+LZAQHL+Af/WdDoOuORps0gkZQmI4B6mgY63HeTzKZH kW19knlqU6SMC/GSdFrZLiWZhkDec2/wLzq57wdzlPjdPd+5wCvTYWmJAX68Kf6b 9g6cm3AbhZSKmaOtUtwOmUwAtuS5DPaGiPejAc9716K0/U9+0YBNKMZ/qVYAhrLc yR4yxLqpXd68zhirYIxtjHcB1fDzRO6F91stxvvDsg2bg2pPvLidWOBoknMZmCQt ALV5Z1yuik6tNOIPx+4ty7kWMMIQ0E3DqVKPxVAbFchCTohcee55U6Pmg3pbYtVg rrhYr4W8s/juv/9JrVa99+usyt/ohe+N3HcYtJ5WVLF2ED3UT/YDBg== =Q3/z -----END PGP SIGNATURE-----

2 1

No Subject
by Secret Squirrel 17 Dec '03

17 Dec '03

Date: Wed, 7 May 1997 From: Graham-John Bullers <real(a)freenet.edmonton.ab.ca> To: lucifer Anonymous Remailer <lucifer(a)dhp.com> Cc: cypherpunks(a)toad.com Subject: Re: PGP I think Vulis needs each of us to send ten copies of this back to him. On Tue, 6 May 1997, lucifer Anonymous Remailer wrote: > Tim C[retin] Mayflower styles his facial hair to look more > like Graham-John Bullers. > > ,,, > -ooO(o o)Ooo- Tim C[retin] Mayflower > (_) > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Graham-John Bullers Modulator of alt.2600.modulated ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ email : real(a)freenet.edmonton.ab.ca : ab756(a)freenet.toronto.on.ca ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ http://www.freenet.edmonton.ab.ca/~real/index.html ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

3 2

CORBA Security beta from IONA
by Martin Janzen 17 Dec '03

17 Dec '03

I just received the latest "IonaSphere" newsletter from IONA, makers of the Orbix Object Request Broker (ORB), and noticed this item which may be of interest to some of the people on this list: I28-B> IONA announces beta of CORBA Security Implementation =========================================================== OrbixSecurity enables organizations to deploy their mission-critical distributed systems on multiple platforms securely. It is tightly integrated with IONA's leading object request broker Orbix and facilitates the creation of CORBA level 1 secure distributed component-based applications. In parallel with the development of OrbixSecurity, IONA is also working on a secure socket layer (SSL v3.0) solution. SSL will be bundled in the company's Orbix/OTM enterprise suite of object development and management tools, also scheduled for the third quarter. SSL security offers authentication (based on X.509 certificates) and encryption (based on public and session key technologies). Subsequent to the initial general availability of OrbixSecurity in the third quarter of 1997, IONA will be working towards level 2 security support (which deals mostly with the definition and administration of security policies and domains) via product extensions and third party integrations. Availability The OrbixSecurity beta is available immediately on the Sun Solaris and Windows NT platforms. To participate in the beta program send an e-mail to beta(a)iona.com For more information see http://www.iona.com/Press/PR/security.html (Standard disclaimers: I don't work for these guys, get paid by them, etc...) -- Martin Janzen janzen(a)idacom.hp.com

1 0

toner
by 53365743＠prodigy.com 17 Dec '03

17 Dec '03

(For all your Printer/Fax/Copier Supplies) BENCHMARK PRINT SUPPLY 5579-B Chamblee Dunwoody Rd #371 Atlanta GA 30338 (770)512-0083 PLEASE FORWARD TO YOUR OFFICE SUPPLY MANAGER As of 4/1/97 our new, laser printer cartridge, prices are as follows: HEWLETT PACKARD Series 2,3=$59 Series 2P=$54 (After $10 Rebate) Series 4,4M,4 Plus =$79 Series 3SI/4SI=$85 Series 4L=$54 (After $10 Rebate) Series 5L=$50 (After $10 Rebate) Series 5P=$79 (After $10 Rebate) Series 4V=$100 (After $10 Rebate) Series 5SI= $135 (After $25 Rebate) Fax FX1/FX2=$59 (After $10 Rebate) Deskjet/Inkjet= Please call for $$. IBM/LEXMARK: Optra 4019/4029/4039=$125 EPSON: Models 7000/1500=$100 (After $15 Rebate) CANON FAX/PC'S: 700,770,5000,7000=$59 (After $10 Rebate) PC Copier 6re/7/11=$69 (After $10 Rebate) PC Copier 320=$79 (After $10 Rebate) FOR OTHER PRINTER/FAX/COPIER SUPPLIES NOT LISTED ABOVE PLEASE CALL. - All major credit cards accepted. - Corporate term accounts available with approved credit. - Our office hours are 10-6 E.S.T. - Sorry but e-mail orders or inquiries are not accepted at this time TO BE REMOVED FROM OUR LIST CLICK ON BLUE BELOW AND IN THE HEADER TYPE "REMOVE". click here mailto:capital@answerme.com

1 0

Unleashing Micro Viruses on Networks (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Hi, Forwarded message: > Date: Wed, 11 Jun 1997 13:57:00 -0400 > From: John Young <jya(a)pipeline.com> > Subject: Unleashing Micro Viruses on Networks > 6-11-97, Janes' Defence Weekly: > Thumbnail-sized micro-robots, known as `microbots', will > also be unleashed by micro-air vehicles and naval guns. These > parasites will creep into electronic equipment, attach > themselves, and keep themselves alive by draining generator > power. > > Once the electronics system's energy is depleted, the fully > charged microscopic vermin will search for a new victim. > > The main problem will be that they are too small to carry > identification equipment and so they infect indiscriminately. > As such, they must be deployed far away from allied > equipment. > > However, packages of microbots can be destroyed remotely > as allies prepare to invade enemy territory. Check out: Bug Park James P. Hogan ISBN 0-671-87773-9 $22.00 hardbound ____________________________________________________________________ | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Open NNTP servers and logging
by stephen_albert＠alpha.c2.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- A little while back there were some very helpful posts about getting started wit open NNTP servers. Since my regular site runs kinda slow in the news department I've been having fun poking around and seeing about getting more current. Then it dawned on me. People keep logs. Presumably routine logging would point right back at my ISP, and from there it'd be not too hard to pin down me specifically. No, I don't think anyone is particularly *likely* to do that, but why take chances? So...anyone know of open NNTP servers that *don't* keep logs? Or some other way around the problem? Thanks! Stephen "extra! extra! read all about it!" Albert stephen_albert(a)alpha.c2.org <*> PGP key on request and on servers -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMQYTNEimCtQtWVIdAQG/rQf/SnfVuv+fopypvTwKH9dm/4YPvwsgOjCG 5TBe0/wctyzVOEHoXiP3J/wagLrrvsuy8Xb3bRDWvJA+JoP5GOVh9RYG86ROG4Lf NIh1jKWG/FYotBYDclhROzv6+Fm4+7JXrbdVdPUTq5WwIHrmHeTMdkHv58WcJzOs PEvrpFUmTPswkIZbdyzrCz4P3GxsoUtu79Fe3QZNO83Jdwy8sIWFwGDvGq+WhJ3T 8/FLbJ2HLLqrXYYM4KYUSLShGvFyFqf/inZ9Ajbnx0p1hEXqR+/XZzyROEBdJWvJ PAIJA6ZiEeLeTXWD0jH1XlMElKAD7QYeJ2p9OcwhHabtEvgf7uIxSQ== =q/sb -----END PGP SIGNATURE-----

1 0

Re: [CNN] Stolen Laptops and lame 'solution'
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In <199706112341.QAA05443(a)mat.wcs.net>, on 06/11/97 at 05:22 PM, "Raymond Mereniuk" <raymond(a)wcs.net> said: >I assume most notebooks which are recovered are found to be in the hands >of a buyer rather than the person responsible for the actual theft. >But, the eventual buyer is indirectly responsible for the initial theft >of the notebook. How is the buyer responsible even indirectly? Someone puts an add in the paper NEC Laptop $1,500. I go and check it out and buy it. Should it be my respocibility to call NEC over in Japan and find out if it was reported stolen (if they even keep such records). Should I have to call the manufacture every time I buy a some used equipment? Perhaps I should have a background check done before I buy anything. If anyone is responcible for the theft other than the theif is the person who was so carless with their equipment. - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBM59KoY9Co1n+aLhhAQEbLgP/f4DJARITmE0TH2A+unxHpXxLCOllQqCC rUOATCG215sy6hK4Wy9a3k9AP3T4nAG/JpzAjK0n6Dw4poJLpZXE2PvjU3JGA2bH vIXSjsBdecksFVFHwJyCKJTbds+TuUKwfRepyMRlhmg8cuJqh34XC037WRxPeE7s dk9fdmyr1wA= =XwvD -----END PGP SIGNATURE-----

2 1

SSA Privacy Forum 6.16.97
by Dave Banisar 17 Dec '03

17 Dec '03

Social Security Administration Forum Privacy and Customer Service in the Electronic Age Monday, June 16, 1997 Georgetown U. Law Center Moot Court Room 600 New Jersey Ave. NW Washington D.C. 20001 Agenda: WELCOME 12-12:15 pm Welcome by Marc Rotenberg, Director, Electronic Privacy Information Center and Professor, Georgetown Law University Introduction of Dr. John J. Callahan, Acting Commissioner of the Social Security Administration PANEL #1 PRIVACY EXPERTS AND CONSUMER ADVOCATES 12:15-1:15 pm Leslie Byrne, Special Assistant to the President, and Director, U.S. Office of Consumer Affairs Harry Hammitt, Editor and Publisher, Access Report Newsletter Evan Hendricks, Editor and Publisher, Privacy Times and Chairman, U.S. Privacy Council Sally Katzen, Director, Office of Information and Regulatory Affairs, Office of Management and Budget Deirdre Mulligan, Staff Counsel, Center for Democracy and Technology PANEL #2 COMPUTER TECHNOLOGY EXPERTS 1:30-2:15 pm Edward G. Amoroso, Technical Manager, AT&T Laboratories Michael Angelo, Principal Member, Technology Staff, Compaq Corporation Dorothy E. Denning, Professor of Computer Science, Georgetown University David P. Jablon, Software Engineer and Cryptographic Specialist, Integrity Sciences, Inc. George Spix, Chief Architect Consumer Platforms Division, Microsoft Corporation PANEL #3 INTERNET COMMERCE, BANKING AND FINANCIAL PLANNING EXPERTS 2:30-3:15 pm Mark Greene, Vice President, Electronic Payments and Certification, IBM Internet Division Russ Housely, Chief Scientist, Spyrus, Inc. Charles Merrill, Partner, McCarter & English Law Firm Jahan Moreh, Chief Security Architect, Open Horizon, Inc. PUBLIC COMMENT PERIOD - 3:15 pm Members of public who have registered may speak for 4 minutes. The panel may ask questions following each individual's testimony, if desired. CLOSING REMARKS - 4:30 pm For more information and directions, see: http://www.ssa.gov/forums/washingtondc.htm More information on EPIC is available at http://www.epic.org/

1 0

Andrew Shapiro on privacy rights in The Nation
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Thu, 12 Jun 1997 21:08:37 -0700 (PDT) From: Declan McCullagh <declan(a)well.com> To: fight-censorship-announce(a)vorlon.mit.edu Subject: Andrew Shapiro on privacy rights in The Nation [Andrew is too modest perhaps to mention that his article is the cover story in the most recent issue of The Nation. --Declan] ---------- Forwarded message ---------- Date: Mon, 9 Jun 1997 02:52:22 -0500 From: Andrew Shapiro <ashapiro(a)interport.net> To: declan(a)well.com Subject: Re: FC: Mr. Gates goes to Washington, from The Netly News Declan: Interesting piece. I made a somewhat similar point about how the "siliconaires" (nice coinage) are manipuating the crypto debate at the expense of those making pure privacy arguments. This was in an article focusing mostly on a slightly different topic: this idea of the "market for privacy." Knowing your faith in markets, I doubt we'll agree on this one, but you may find my critique interesting -- and worth mentioning to the list. Given the news on P3 and OPS, the "market solution" will no doubt be discussed at the FTC hearing this week. See http://www.thenation.com/issue/970623/0623shap.htm Best, Andrew Andrew L. Shapiro Fellow, The Twentieth Century Fund Contributing Editor, The Nation 41 East 70th Street New York, NY 10021 ashapiro(a)interport.net work: +1 212 452 7725

1 0

No Subject
by Mix 17 Dec '03

17 Dec '03

Tim C. Maya likes to lick the semen-shit mixture that accumulates in the crack of his mother's ass. /_/\/\ \_\ / /_/ \ \_\/\ \ Tim C. Maya \_\/

2 1