- cypherpunks-legacy - lists.cpunks.org

Crypto and Wassenaar Meeting
by John Young 17 Dec '03

17 Dec '03

DEPARTMENT OF COMMERCE Transportation and Related Equipment Technical Advisory Committee; Partially Closed Meeting A meeting of the Transportation and Related Equipment Technical Advisory Committee will be held March 18, 1997, 9 a.m., in the Herbert C. Hoover Building, Room 1617M(2), 14th Street between Constitution & Pennsylvania Avenues, NW., Washington, DC. The Committee advises the Office of the Assistant Secretary for Export Administration with respect to technical questions that affect the level of export controls applicable to transportation and related equipment or technology. General Session 1. Opening remarks by the Chairman. 2. Presentation of public papers or comments. 3. Report on the status of the Wassenaar Arrangement: implementation, List Review schedule, and reporting status. 4. Report on the status of the encryption regulations. 5. Update on the Missile Technology Control Regime. 6. Discussion of commercial communications satellite and ``hot section'' technology regulations, in particular the status of the fuels issue. Closed Session 7. Discussion of matters properly classified under Executive Order 12958, dealing with the U.S. export control program and strategic criteria related thereto. The General Session of the meeting will be open to the public and a limited number of seats will be available. To the extent time permits, members of the public may present oral statements to the Committee. Written statements may be submitted at any time before or after the meeting.

1 0

Prologue
by Bubba Rom Dos 17 Dec '03

17 Dec '03

1 0

ISP Services Will Never Be The Same Again!
by darrington＠debtfree.com 17 Dec '03

17 Dec '03

Hello Team Members, The following is a new company offering Internet services on the Web.It's free to sign up for the pre-launch. You are not obligated to become a member it is simply designed to allow you to make a descision on the package when the complete details are released in March. I think it's a nice way to find people interested in this MLM Internet service concept. When someone signs up under you you receive an e-mail telling you they signed up for more info in March. Check out the Web site when you have time. ************** Pre-Launch************Free To Join************** Get in line now, and earn from others that line up after you. Pre-Launch on one of the most exciting Internet Service firms to come along this decade is just around the corner (March '97). Free Web promotion site during Pre-Launch. No cost to enroll in Pre-Launch. Everything to gain ... nothing to lose! Take the time to check this out before your friends tell you they have already joined for no cost: http://ivcs.com/1stfamily/2078.html It is really working.... I just signed up three new members in the last 10 minutes.... Go for it.... Dean F. Arrington

1 0

Re: Market Failures, Monocultures, and Dead Kids (Oh My!)
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Mac Norton <mnorton(a)cavern.uark.edu> writes: > > On Mon, 17 Mar 1997, Timothy C. May wrote: > > > At 5:48 PM -0600 3/17/97, Igor Chudov @ home wrote: > > >do you also oppose mandatory liability insurance? > > > > Yes. > > And do you also oppose financial responsibility requirements > for obtaining the privilege of operating an automobile on > public roads? > MacN Dunno about Akransas (that's where Uark.edu is, ain't it). Your state is the home state of the muerderer Bill KKKlinton. You should commit suicide at once. But in the more civilized states, like New York or California, if you have an accident and your (good) car is totalled, then one of these three things will happen: * The other driver, who's at fault, has fled. You sue your own insurance company. * The other driver has minimal insurance and no assets. You sue your own insurance company (and the other guy). * You don't carry the appropriate insurance with your own insurance company and have no chance to recover much. Things would be much easier for everyone, including the drivers and the insueres, if the mandatory liability insurance was abolished and evryone delt with their own insurer - who would then try to recover damages from the other party if they had assets. The only people who benefits from the existing system are state bureaucrats. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

(fwd) CarlMStarrsimulationExperiment
by ichudov＠galstar.com 17 Dec '03

17 Dec '03

Path: mercury.galstar.com!not-for-mail From: ichudov(a)galstar.com (Igor Chudov) Newsgroups: ok.general Subject: CarlMStarrsimulationExperiment Date: 16 Mar 1997 00:36:32 GMT Organization: Bool Sheet Software Lines: 24 Message-ID: <5gffag$3gb(a)mercury.galstar.com> Reply-To: ichudov(a)algebra.com (Igor Chudov) NNTP-Posting-Host: galaxy.galstar.com X-No-Archive: yes X-Newsreader: TIN [UNIX 1.3 950824BETA PL0] joe was pulled off a major drug case in the wiretapping of my phone i expect a jealous husband to tap my phone on in gardner ks on and the aftermath info need not lead to indictments or arrest call me or write me your info is worth money also it will help stop wiretap authourity from expanding i will give you your reward as soon as i accept your infomation and we agree what that reward is it could be a trade a car cash etc i have nothing to hide i know what i did and @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ No, the above was NOT written by me, nor by carl starrs. It was generated by a perl script, which emulates writing styles of different people. The way it does it is by keeping track of pairs of words and their most frequently used subsequent words. It reads articles (or any text really) written by the target person, builds the style tables, and then geenrates the "most likely" text. Carl starrs was a good target for two reasons, one of which is that he does not use punctuation. KIBO RULES!!! CLONING MADE EASY!!!

3 2

[Humor] Dogs and Computers
by Toto 17 Dec '03

17 Dec '03

The Top 20 Reasons Dogs Don't Use Computers [20] Can't stick their heads out of Windows '95. [19] Fetch command not available on all platforms. [18] Hard to read the monitor with your head cocked to one side. [17] Too difficult to "mark" every website they visit. [16] Can't help attacking the screen when they hear "You've Got Mail." [15] Fire hydrant icon simply frustrating. [14] Involuntary tail wagging is dead giveaway they're browsing www.pethouse.com instead of working. [13] Keep bruising noses trying to catch that MPEG frisbee. [12] Not at all fooled by Chuckwagon Screen Saver. [11] Still trying to come up with an "emoticon" that signifies tail-wagging. [10] Oh, but they WILL... with the introduction of the Microsoft Opposable Thumb. [09] Three words: Carpal Paw Syndrome [08] 'Cause dogs ain't GEEKS! Now, cats, on the other hand... [07] Barking in next cube keeps activating YOUR voice recognition software. [06] SmellU-SmellMe still in beta test. [05] SIT and STAY were hard enough, GREP and AWK are out of the question! [04] Saliva-coated mouse gets mighty difficult to manuever. [03] Annoyed by lack of newsgroup, alt.pictures.master's.leg. [02] Butt-sniffing more direct and less deceiving than online chat rooms. and the Number 1 Reason Dogs Don't Use Computers... [01] TrO{gO DsA[M,bN HyAqR4tDc TgrOo TgYPmE WeIjTyH P;AzWqS,. | ,@ __|-. ,_~o/ \/ | Through the router, off the switch, |/ | down the cable, nothing but net. / > | ' ` | The @Home slam dunk | __________________|

1 0

Isn't this like a bad idea?
by Lile Elam 17 Dec '03

17 Dec '03

Hi folks, Selling email addresses seems to me to be a bad idea. Wouldn't it be better to have people sign up instead of this? I mean, it looks like this is for spammers. Who can I contact about this abuse? thanks, -lile >From mick3(a)concentric.net Wed Mar 19 21:18:24 1997 Date: Thu, 20 Mar 1997 00:17:18 -0500 (EST) Comments: Authenticated sender is <mick3(a)pop3.concentric.net> From: "mick3(a)concentric.net" <mick3(a)concentric.net> To: you(a)concentric.net Subject: 1 MIO e-mail addresses for sale Hello, and sorry to bug you... If you are not a business owner, we apologize. For Sale: 1 MILLION E-MAIL ADDRESSES FOR $95.00 or 2million for $ 155.00 - or 3 million for $ 195.00 Available on 3.5" disk or e-mail download. These are fresh lists, no BS...plain ASCI format, one per line. This is a one time mailing, you will not be contacted again. Send check or money order to: YMR - ADDRESS LIST P.O. Box 654 Marysville, Ca 95901 ( please specify, if you want 3.5" disk or have it sent via e-mail as *.zip file) Questions? call Mick at (916) 741-2622 TO BE PROMTLY REMOVED, TYPE "REMOVE"

2 1

lambda 3.01 - Your Customs Officer is Watching You
by Jerome Thorel 17 Dec '03

17 Dec '03

lambda 3.01 contents: --> CDA countdown : The Supreme Court Has Some Clues on Knocking Down the CDA --> New in Cyberspace: The Frontiers Are Back! Your Customs Officer Is Watching You --> Crypto Update : France and the OECD * * * * * THE SUPREME COURT HAS SOME CLUES ON KNOCKING DOWN THE CDA Well before the U.S. Supreme Court hears arguments on the constitutionality of the CDA, David Sobel, EPIC's legal counsel, reminded the electronic community that the Court handed down a decisive decision two years ago. Excerpts from the EPIC Alert 4.04 newsletter herewith: --- begin fwd message --- To avoid potential criminal liability under the CDA's "indecency" provision, information providers would, in effect, be required to verify the identities and ages of all recipients of material that might be deemed inappropriate for children. If upheld, the statutory regime would thus result in the creation of "registration records" for tens of thousands of Internet sites, containing detailed descriptions of information accessed by particular recipients. These records would be accessible to law enforcement agencies and prosecutors investigating alleged violations of the statute. Such a regime would constitute a gross violation of Americans' rights to access information privately and anonymously. Two years ago, the Supreme Court upheld the right to anonymous speech in McIntyre v. Ohio Elections Commission. EPIC believes that the Court's rationale in that case applies with even greater force to the Internet "indecency" provisions now under review. The Court noted in McIntyre that: " The decision in favor of anonymity may be motivated by fear of economic or official retaliation, by concern about social ostracism, or merely by a desire to preserve as much of one's privacy as possible. ... "Anonymity is a shield from the tyranny of the majority. It thus exemplifies the purpose behind the Bill of Rights, and of the First Amendment in particular: to protect unpopular individuals from retaliation -- and their ideas from suppression -- at the hand of an intolerant society." Whether the millions of individuals visiting sites on the Internet are seeking information on teenage pregnancy, AIDS and other sexually transmitted diseases, classic works of literature or avant-garde poetry, they enjoy a Constitutional right to do so privately and anonymously. The Communications Decency Act seeks to destroy that right. If upheld, the CDA would render the Internet not only the most censored communications medium, but also the most heavily monitored. "EPIC is confident that upon review of the legislation and its impact upon free speech and privacy rights in emerging electronic media, the Supreme Court will affirm the lower court decision invalidating the CDA as fundamentally at odds with the Constitution." --- end fwd message --- The EPIC said that following the oral argument, the Reno v. ACLU plaintiffs and lawyers will hold a news conference to offer in-depth analysis and commentary (approximately 11:30 a.m. ET). The event will be cybercast live via RealAudio on the World Wide Web. Links to the cybercast will be available at: http://www.epic.org/cda/ and http://www.aclu.org/issues/cyber/trial/appeal.html * * * * * YOUR CUSTOMS OFFICER IS WATCHING YOU New in Cyberspace: The Frontiers Are Back! On March 6, the French security agency SCSSI gave its approval for a secured payment protocol called C-SET, or Chip-Secured Electronic Transaction. After one look at this European version of the US standard of SET, which will be completed this year, one might ask: "Why bother?" Your customs officer might well reply: "For me!" C-SET re-draws the boarders of the real world in cyberspace -- where national boundaries were scheduled to have been given up forever. Moreover, the system could easily be used to escrow private communications, because encrypted messages will be transmitted to a third party in order for police to have a lawful access to its secret key. The Intelligence Newsletter (http://www.indigo-net.com/intel.html) first reported in its Feb. 26 edition that C-SET could be used as a national shield for controlling money transfers, and thus be used as an intermediary between the law enforcement agencies, the vendor and the buyer. French security officials agreed to accept C-SET because it is compatible with future trusted third-party systems, dedicated to assuring national governments that all encrypted communications will be key-escrowed. "The French Finance Ministry has not yet decided to apply taxes and duties for online transactions, but C-SET is the adequate system to do that", says Claude Meggle, director of security at the French Groupement des Cartes Bancaires (a consortium of 200 French banks), the main architect of C-SET. "It is a way for national states to keep their sovereignty, without hindering international commerce". In France and other European countries, credit cards are so-called "smart cards." Embedded with microchips, it is a more secure way to authenticate -- and identify -- the buyer than a hand-written signature. The GCB was not fully satisfied by the SET standard, which "provides only software security as it doesn't include a smart card," the Intelligence Review reported. "As a result, the 'certificate' which enables a customer to be identified when making an electronic purchase is stored on his hard disk. This exposes it to all types of attack, and makes the system less than 'portable' -- the certificate is linked to the computer and not the person. The C-SET is exactly the opposite," the newsletter added. Hardware is needed to use C-SET; a PIN-number pad manufactured by state-owned Bull's smart card division CP8 will be sold for less than 500 FF (US$100), Meggle told lambda bulletin. When the users are connected to a virtual mall, they'll have to type their 4-digits secret code (as it is today with bank cards), and the transaction will be transferred to a distant server owned by the bank. Thus this go-between server will be based in the country where a user has his or her bank account, and the same bank plays the role of a TTP. The user's privacy and anonymity will be protected, but only from the merchant's point of view. Banks-turned-TTPs will have to keep records of all transactional data for law-enforcement purposes. Recently, officials at the main money laundering agencies of industrialised countries met to discuss the problems caused by the Internet. C-SET could be one way to keep money transfers under the close eye of the law. The European Commission agreed to the system being tested as a possible future standard, and all major European countries have plans to test it in the near future (from Germany to Belgium, UK, Spain, etc.) It is no surprise that the SCSSI, one of the most conservative cryptography agencies in the world -- which considers the US technology lead on encryption as a national threat -- first refused to allow C-SET to encrypt a part of the transaction. The TTP compatibility was seen as a necessary condition for approval. Meggli said the encrypted material uses a DES-based 56-bit key, while a RSA public-key system (1024-bit length) is used for transmission. As Meggle acknowledged, this PIN-pad based identification system could be also used as a way to identify users that send encrypted messages in private communications. The TTPs will have to keep a record of connections -- as all banks are doing today to officially fight fraud -- and give a user's private key to police authorities if called upon to do so. * * * * * CRYPTO UPDATES * French officials at the SCSSI and the prime minister's office are worried that aspects of the government's crypto policy may be regarded by the European Commission in Brussels as an obstacle to common market principles. The government's law outlining a TTP key-recovery system, voted by the legislature last summer, has yet to be enacted by ministerial decree. An initial version of the decree (see lambda 2.13) stated that only French employees (of companies held with a majority of French capital) would be allowed to act as a TTP in the country. Whether the law would violate rules concerning the free flow of capital and workers in the European Union is uncertain. However the French government has something in its favor (for better or for worse) regarding possible anti-competitive practices in this area: The EC is prohibited from making decisions that may overlap with issues of national security. * Meanwhile, the Paris-based OECD is to publish its guidelines on international cryptography procedures (lawful access, condition of TTP systems, etc.) at the end of March. The report has been approved by both the OECD expert group and division committee with slight changes in the wording, and now needs only the endorsement of the OECD Council of Ministers. ---- A report by Jerome Thorel <jt(a)freenix.fr> English rewriting: Ken N. Cukier <100736.3602(a)CompuServe.COM> lambda archives --> www.freenix.fr/netizen ---- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Jerome Thorel Planete Internet Journalist, Paris Editor / Redac chef thorel(a)netpress.fr 191 av A. Briand, 94230 Cachan Tel: 33 1 49085833 - fax-31 www.planete-internet.com

1 0

PGP seminar at New York University 3/27/97
by Subir Grewal 17 Dec '03

17 Dec '03

Computer Advocacy @ New York University and NYU's Academic Computing Facility (ACF) present a seminar on Pretty Good Privacy as a part of Computer Awareness Week on Thursday, March 27 at 12:00 pm (noon). Ilya Slavin of the Computer Advocacy and Tim O'Connor of the ACF will discuss the reasons for using encryption tools, give a brief background of the algorithms behind the face of PGP and analyze their strengths, and demonstrate ways to incorporate PGP into popular tools such as Pine and Tin. A key signing session will follow. If you are new to PGP or just want your key signed by a few more people and happen to be in New York City at the time, please come! All are invited. Refreshments will be served. For more information, see http://www.nyu.edu/pages/advocacy/awareness/

1 0

ONK?: SANS Network Security Digest?
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: ploshin(a)pop.tiac.net Date: Thu, 20 Mar 1997 11:39:22 -0500 To: Robert Hettinga <rah(a)shipwright.com> From: Pete Loshin <pete(a)loshin.com> Subject: Re: DCSB: Stewart Baker on Clinton Administration Crypto Policy and Digital Commerce Mime-Version: 1.0 Bob, just a quick question, have you heard/seen anything on this: | The SANS Network Security Digest | | Contributing Editors: | | Michele Crabb, Matt Bishop, Steve Bellovin, Rob Kolstad | | Gene Spaford, Marcus Ranum, Gene Schultz, Dorothy Denning | ----A Resource for Computer and Network Security Professionals--- It's an $80/yr e-mail newsletter; there are a lot of recognizable names there, but the thing isn't digitally signed. Also, isn't it "Spafford"? Anyway, anything you know would be appreciated, and if you don't know anything, could you ask around (e.g., some of the likelier mailing lists which I no longer subscribe to.) <snip> Thanks, -pl /-------------------------\ | Pete Loshin | | BYTE | | 24 Hartwell Ave | | Lexington, MA 02173 | | vox +1 617/860-6830 | | fax +1 617/860-6522 | | pete(a)loshin.com | \-------------------------/ --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "Never attribute to conspiracy what can be explained by stupidity." -- Jerry Pournelle The e$ Home Page: http://www.shipwright.com/rah/

3 2