- cypherpunks-legacy - lists.cpunks.org

Big Bother Inside Stickers at cpsr.org
by Dave Banisar 17 Dec '03

17 Dec '03

The Big Brother Inside Graphic files are now available at the CPSR Internet Archive - ftp/gopher cpsr.org /cpsr/privacy/crypto/clipper big_brother_inside_sticker.ps (postscript-change the size to fit your project) big_brother_inside_logo.gif (Color GIF - good startup/background screen) big_brother_inside_picts_info.txt (Info on the files) Have fun. Dave

2 1

ITAR vs. Diffie-Hellman Key Exchange?
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

In the discussions about people sniffing the net and the need for encrypted telnets, one problem that has come up is the ITAR hassles that make exporting Kerberos politically incorrect, though John Gilmore has gotten them to admit that the Kerberos bones is none of their businesss :-) However, is Diffie-Hellman exportable? After all, it's not crypto, it's *just* key exchange, and people can plug in their own triple-DES from the usual sources. It looks to me like it's probably legal, though if you were to then transmit the password by XORing with the login key or some such probably-unsafe behaviour it might not be. I had heard somebody say there would be an updated RSAREF version including Diffie-Hellman key exchange, though it's not in the package I just ftp'd from rsa.com. Is this correct, and is there a planned release date? Thanks; Bill # Bill Stewart AT&T Global Information Solutions, aka NCR Corp # 6870 Koll Center Parkway, Pleasanton CA, 94566 Phone 1-510-484-6204 fax-6399 # email bill.stewart(a)pleasantonca.ncr.com billstewart(a)attmail.com # ViaCrypt PGP Key IDs 384/C2AFCD 1024/9D6465

5 4

Re: AT&T stopped talking to me
by a2＠ah.com 17 Dec '03

17 Dec '03

I've had extensive experience with hardware vendors, and the behavior you describe is extreremely anomalous. It is just barely possible that your rep has quit, and his replacement hasn't picked up the slack yet. On just the basic problem of getting the data sheets, you might have better luck calling AT&T's literature department directly. This works very well if you have the part number of the data sheet, but just the part's id should get you the info. If the part is more than a few months past announcement, it's data sheet has probably been bound up with a whole lot of other data sheets and printed in some family book, which might be easier to ask for, and give you some alternates to consider. Or, you could ask some smiley friend ;+> to try to get the information for you. Buying the part shouldn't be as hard, they are required to sell to you. However, if you are experiencing politics, beware of such things as deliverly delays and a high percentage of bad parts in your shipment. Going through a distributor is probably enough to avoid most of these problems. So, when can I buy your gadget? -a2

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

Hmm I am sitting here watching Tekwar and the evil protagonist is releasing an all powerful meta virus... SHUTDOWN the Internet is the response of the Hero... Sheesh.... anon

1 0

RFC822 compliant, and already deployed hack for return addresses
by jpp＠markv.com 17 Dec '03

17 Dec '03

Go ahead, hit 'r' and see what you get. How many of you get the whole verbose reply-to field? j'

3 2

NSA lobbying for Clipper in Europe
by baum＠newton.apple.com 17 Dec '03

17 Dec '03

from sci.crypt... The following article was printed on page 10 of the UK's `Independent on Sunday' (13th Feb 1994). It would seem that the tentacles are spreading. For those who haven't read it, James Bamford's book `The Puzzle Palace' contains a fascinating history of the incestuous relationship between the NSA and Britain's GCHQ. No official UK opposition can be expected. Follow-ups to talk.politics.crypto please. ---------------------------------------------------------------- How America Plans to bug the electronic age BIG BROTHER JOINS SCRAMBLE FOR DATA By Leonard Doyle A high-ranking official of the National Security Agency, America's largest and most secretive intelligence arm, is in London with the task of selling the 16 governments of the European Union and European Free Trade Association on the virtues of a controversial electronic scrambling technology. The Clinton administration hopes that the encryption devices will become the global standard for anyone wanting privacy while using cellular phones, computer networks and fax transmissions. They have a serious drawback for anyone looking for total privacy, however. The devices have a built-in `back-door' that will allow spy agencies to listen in on all communications, or read faxes and electronic mail. Spy agencies in the US and Europe, with nearly 50 years' experience of advanced technology in surveillance of citizens, suspected criminals and foreign governments, have been concerned for some time about developments that have put sophisticated encryption devices within reach of many. The agencies want to ensure that they are not left behind by the rapid advances in high technology which have made telephone scramblers and the mathematical codes used to encrypt computer and fax data relatively cheap and easy to use. The governments fear that electronic eavesdropping will be set back decades if and when terrorists, money-launderers, drug traffickers and unfriendly governments gain widespread access to the technology. The NSA is concerned that, despite the $30bn (UK Pounds 21bn) a year it spends monitoring global communications, it cannot keep pace with technological change and the massive spread of encryption codes. The NSA official, James Hearn, who until recently was the deputy director for information security at NSA's sprawling headquarters near Washington DC, is heading up a `liaison office' in London with a colleague, Clint Brooks, according to reliable sources in the computer security community on both sides of the Atlantic. The US Embassy in London issued a pro forma denial about Hearn's presence yesterday, saying: "There's nobody by that name here." Mr Hearn is well known, however, to UK and European officials at the cutting edge of efforts to control the spread of highly sophisticated scrambling devices. These encryption codes, developed by private software companies, are putting communication beyond easy reach of the NSA, Britain's GCHQ at Cheltenham and France's DGSE, to name but a few `Big Ear' agencies. As a response, the US has developed an encoding device for telephones and computers known as the `Clipper Chip', with a `back door' that will allow spy agencies armed with special electronic keys to eavesdrop. When the Clinton administration decided to press ahead with the controversial coding devices last week, the computer industry and privacy campaigners reacted with outrage. "It's like trying to order people to use only resealable envelopes for correspondence, so that no communication can ever be private again," said David Bannisar of Computer Professionals for Social Responsibility. Big computer companies, including IBM and Apple, are bitterly opposed to the new monitoring devices. But AT&T, the US telephone company, which is fast establishing itself in Europe, will put the eavesdropping technology into the telephone scrambling devices it sells in high street shops for about UK Pounds 800 each. The US is keen to ensure that similar electronic monitoring technology becomes standard in the rest of the industrialised world. The NSA's Mr Hearn has the task of persuading governments that the controversial Clipper Chip for telephones and a technology called Tessera, for computer modems, is quickly adopted, despite mounting opposition. The US, European Commission and four European Union countries - Britain, Germany, France and the Netherlands - are already deciding how to administer the dawning electronic age of `information highways' which will bring an explosion in the use of hi-tech in everyday lives. A consultant to the European Commission who has worked on the new encryption standards claims that those who object to US efforts to regulate the market for encryption are `politically naive'. "Whether we like it or not, the authorities will want to listen in on our communications," he said. "The Americans are to be admired for being up front about it, when other countries are doing the same thing anyway." Experts in the field of information security often speak of physical boundaries that now define the world being replaced by electronic boundaries. In this Orwellian world, which is at most five years away, people will be issued with so-called `smartcards' with microchips that can store their entire personal history. The identity cards will be a passport for ordinary citizens, used to store health records, for personal banking, paying for travel and for identity checks at borders. In the same way, companies and even countries will be expected to use technology like the encryption Clipper Chip for date transmissions. "We are defining our new electronic world - which will become increasingly important in a borderless Europe," the EU security consultant said. ************************************************** * Allen J. Baum tel. (408)974-3385 * * Apple Computer, 20525 Mariani Ave, MS 305-3B * * Cupertino, CA 95014 baum(a)apple.com * **************************************************

1 0

REMAIL: simple digital postage
by Karl Lui Barrus 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >How willing are remailers to try this? Both Hal Finney and Karl >Barrus have code for remailers (Karl's is more recent, Hal's is in >wide use). Could their code be modified easily to accomodate a >primitive form of stamps? Well, I know that integrating a quick and dirty (not particularly cryptographically sophisticated) digital money system can be done in Hal's code, since thats what I did at elee6ue(a)rosebud.ee.uh.edu for quite a while. (Now elee6ue@rosebud has been restored to "ordinary" operation). And the one I recently wrote could be modified the same way - I just put it together to test cutmarks, automatically detecting pgp encryption, and latency delayed remailing. I was looking into a more efficient way to check the validity of cash, and making things bomb-proof, but sorta got sidetracked ;) The way I did it is to add to remail.pl, have the script search the header for a Digicash line (you use the pasting tokens as usual to place it in the header). The script extracted the "cash" and searched for it in a list maintained by the remailer. If found, then the remailing proceeded as usual, otherwise the message "Insufficient funds to deliver message" was sent along instead. The cash list is read into memory and rewritten out, minus the value just used. The cash strings I used were random characters, which looked like this (all starting with the character B): BU2j4yCJgtl8wO2KvsEIIttaSOt9zEfS7giqHwEuuh3bbuTGppoElILYeW09a BYnIA2EQSXEJQ65U8PM2nG07ilq7zCEFqaTBXDuzeEb6YjBgVWUGNm6GPA0zS BmgF0hscwOHICfLNcDefkPo8PSO1ou2NQ4ecMcIPiGDu5fUEz63Wjiosj0JSD and so forth. Now with magic money a more sophisticated system may be developed. Perhaps I will shift elee6ue@rosebud back to a pay-for-remail system, or do it at the mystery middle point of the remailer chain I'm experimenting with. Here is an extract of the additions to remail.pl I made to implement this: if (/^Digicash:/) { chop ; s/^.*: // ; # remove text before colon AND blank afterwards $payment = $_ ; } } # check validity of digital cash # open cash file and read it all in open(CASHLIST, "./digicash.list"); @listofcash = <CASHLIST>; close(CASHLIST); unlink "./digicash.list"; #open file, check cash for validity #if valid, don't write it back to the file open(CASHLIST, "> ./digicash.list"); $paidfor = "n"; while (@listofcash) { $validcash = shift @listofcash; chop $validcash; if ($validcash eq $payment) { $paidfor = "y"; next; } print CASHLIST $validcash, "\n"; } close(CASHLIST); -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLWGxcoOA7OpLWtYzAQHV2AP/T7o0N9qUE8XU/urPqx8pzL+h/Rvs2zbg 6Lky3vu2GoMXEUmVbtbB8xl4c20kvSz5ysSkQ3B8NYXhTdAtcrgH0J2Zd1YHdCKb xmh+rS4xLXuiO6T/j24XqiLOcq0YiF2F2ytzgM/mi03cxN6FMZrat+8vIqLrgjfg ZNVvBAR46to= =JDF6 -----END PGP SIGNATURE-----

1 0

Ameritech announcement
by Brian D Williams 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Ameritech first in nation to detail plans to open local network Ameritech has become the first communications company in the nation to volunteer to open its local network to competitors. Ameritech today submitted tariffs to the Illinois Commerce Commission (ICC) that specify how it will open its local network to competitors in Illinois communities where it is the primary telephone company. If approved, the tariffs will go into effect when Ameritech is authorized to enter the long distance business. "We believe that our customers want and deserve the choices that only all-out communications competition can deliver," said Dick Brown, Ameritech vice chairman. "No court ordered us to do this. No regulators mandated that it must be done. Ameritech initiated the idea as a way to better serve our customers and we now have delivered a detailed blueprint for getting the job done." When the changes that Ameritech has proposed are implemented, a competitor, subject to regulatory approval, can use portions of the Ameritech network to provide local telephone service. Thus, the competing company on its own can provide all of the capabilities necessary to offer local communications services, or it can obtain from Ameritech the capabilities that are needed but which it chooses not to provide itself. "The positive regulatory environment in Illinois favorably positions this state and its citizens to lead the way on the information superhighway and to be among the first to reap the economic benefits of communications competition," said Doug Whitley, president of Ameritech Illinois. Specifically, Ameritech's Illinois Commerce Commission (ICC) filing proposes procedures, technical specifications and prices. It describes how competitors can: - - Obtain access to Ameritech's local distribution network in Illinois (the local loop) so that they can use the Ameritech links to reach customers' homes or offices. - - Purchase from Ameritech the local switching capability. - - Integrate their local switches and networks with the Ameritech network. The Ameritech filing also provides details of a process under which an Ameritech customer in Illinois can choose to have a single company handle local and long distance calls. Ameritech's quid pro quo for fully opening its local network to competitors is straightforward: Ameritech wants new regulations geared to a competitive marketplace and the freedom to provide long-distance services. When Ameritech's plan to fully open the local network to competitors is implemented, all-out competition, market-driven prices and accelerated innovation will shape communications marketplaces in the portions of Illinois the company serves. "Ameritech should be a full participant in the new communications world that is emerging. We want the flexibility to serve its customers as they want to be served," said Brown. "As customers' needs become more sophisticated and voice, data and video industries converge, opening access to all networks is necessary for a fully competitive communications marketplace." "The same rules should apply to all players -- providers of voice, video and data; long distance or local service," he said. -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLWJ0FtCcBnAsu2t1AQF3EAQAhqNcBIwBF1p8IxqwBWm/ZFui7KR8VWV9 bm1d6531kXoXt6wA7qaKqnZ8KvAfjCKxmEgBQ3OFCB9jYkyBB6/DRByNyb/agldS trTdUn48LZgsm4IP2Kr1O0Ds2J17droUS7bljNhrohjtCIoVY1UU8sOoefxMqlKG DRxjEEmCT58= =IMpJ -----END PGP SIGNATURE-----

1 0

Re: Pynchon as roadkill on the digital superhighway
by Cyrus Shaoul 17 Dec '03

17 Dec '03

Michael C. Berch writes: >> And as cool an author as Pynchon is, I suspect he is an amateur at the >> privacy business; anyone who would put their true residence address on >> their driver's license is obviously not paranoid enough to be serious >> about not being found. Pynchon may not be as stupid as that. Has anyone gone to check up on Mr. Vineland lately? Perhaps the address in the DMV computer is that of a fried chicken franchise in Lost Hills, CA! Just cause you have some data doesn't mean it's useful. [Gratuitous Blues Brothers reference to Wrigley Field inserted automagically.] ----------------------------------------------------------------- Cyrus Shaoul cyrus(a)ntthcs.ntt.jp NTT Human Interface Labs / Yokosuka TEL +81(0)468-59-4672 Visual Media Laboratory / Japan FAX +81(0)468-59-2829 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Finger cyrus(a)media.mit.edu for PGP public key, or use the server. Or get it all from my WWW Page: http://iikk.inter.net/ ________________________________________________________________

1 0

An out of country Remailer
by Rob P. Martin 17 Dec '03

17 Dec '03

I recently decided that running a remailer from this account might be a good idea. To help the over all good. It is "out of country" for most of you, so it will make one more hop that will be harder for LE to get at from wherever you are. But I also want to protect my account as much as possible, so I would like to ONLY remail to other remailers. (As they are much less likely to complain to my sysadmin than any other recipient) Does anyone have remailer software that could be easily changed to remail to a limited set of adresses? If so I would be interested in helping the cause, if not I probably will go back to being a "watcher" from the sidelines.. Rob PS. Did I really read that someone said that Canada was a Socialist country with limited free speach?

1 0