- cypherpunks-legacy - lists.cpunks.org

Re: SWAT: A Growth Industry
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Dan Veeneman wrote: > US News & World Report 11/17/97 > Everyone gets into the terrorism game > BY DAVID E. KAPLAN > >Congress...allocated more than a billion dollars in support ... > Even the toughest critics acknowledge that many of the new programs are > needed. For example, they agree that the training of local emergency > workers to deal with a chemical or biological attack is long overdue. Are these guys with the same government that ignores the fact that the development of antibiotic-resistant *natural* diseases due to the greed of the medical and pharmaceutical industries may well lead to more death and disaster than any terrorist threat?

1 0

Re: crypto for porno users
by Jay Campbell 17 Dec '03

17 Dec '03

> a) "no one on the net knows you're a dog" implies that police can > pose as a fellow porn producer or consumer and get away with it > more easily. > > b) strong crypto for communications between porn users encourages > them to speak more freely. When one of the two is a police officer > in disguise, that encourages the other (the suspect) to reveal more, > making the investigation proceed more quickly. Knowing that the > crypto is strong enough to keep government eavesdroppers out, the > sender is given a false sense of security -- is distracted from > thinking about the trustworthiness of the receiver while thinking > about the security of the channel itself. A common way to get around prostitution sting operations is to ask the lady to expose sensitive portions of her anatomy to prove her sincerity before the would-be customer commits to any transactions; this sort of thing is also becoming commonplace on the net for pornography or pirated software, too. Would-be trafficers often ask a prospective recipient for a small chunk of fresh files in advance, before passing back anything serious .. partially out of suspicion, mostly out of greed, but to the same end. A law enforcement team would be stepping onto shaky ground if they were forced to transfer illegal images/etc to a suspected trafficer before getting evidence from him. Entrapment is an ugly concept. >3. Encryption of porn would work against the kind of porn distribution > found on the alt.binary.pictures.erotic... newsgroups. Encryption > requires that recipients be identified. Not at all .. a porn distributor could generate a key pair, use part A to encode the images, and dessiminate part B thru a variety of outlets - publicly posted, sold, passed thru an informal network of like-minded netizens... >4. Personal file encryption encourages individuals dealing with porn to > encrypt and keep personal diaries which might contain evidence. > Since PGP is subject to brute force passphrase attacks, this gives > an attack which will open *some* of these diaries. Without the > encryption, the suspect is less likely to keep the diary in the > first place. This isn't a guaranteed opening into all such > diaries. There is no such guarantee possible. Rather, this > suggests that strong crypto has a chance to maximize the effective > "take" by LE forces. I would argue the exact opposite - strong crypto would tend to minimize the effective take, since there's no guarantee that /anything/ on a perp's system will be in the clear. I'll let someone else with a better background pound on the 'brute force' section. -- Jay Campbell edge(a)got.net - Operations Manager -=-=-=-=-=-=- Sense Networking, Santa Cruz Node Jay(a)Campbell.net got.net? PGP MIT KeyID 0xACAE1A89 "On the Information Superhighway, I'm the guy behind you in this morning's traffic jam leaning on his horn."

2 1

NSAscape
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

http://home.netscape.com/info/security-doc.html NETSCAPE PRODUCTS WITH FORTEZZA Netscape is now offering client and server products with FORTEZZA, hardware-enhanced security services originally developed by the U.S. government. Netscape's offerings include Netscape Navigator 3.01 with FORTEZZA, Netscape Enterprise Server 2.01 with FORTEZZA, and Netscape Proxy Server 2.0 with FORTEZZA - each of which provides a unique web-based solution by integrating FORTEZZA security features in a commercially available, off-the-shelf package. Netscape's products work with the FORTEZZA Crypto Card, a hardware-based security token, to provide cryptographic services such as data confidentiality, user authentication, and data integrity. Support for FORTEZZA has been added to the Secure Sockets Layer (SSL) protocol, which provides a straightforward way to add encryption features to existing applications and network infrastructures. SSL is application protocol independent and provides the following benefits: encryption capabilities for client and server communication that restrict unwanted access to the network authentication that uses certificates and digital signatures to verify the identity of parties in information exchanges and transactions data integrity that allows the receiver of data to check that it has not been modified in transit Netscape products with FORTEZZA support the use of FORTEZZA with SSL as an enhanced alternative to software-based cryptographic mechanisms. The FORTEZZA Crypto Card is a major component of the MISSI program, a network security initiative led by the National Security Agency in partnership with industry and standards organizations. MISSI's goal is to distribute an evolving set of solutions that provide secure interoperability in a network security framework based on common security standards and protocols. In addition, Netscape is working with information security specialist Litronic and others to develop, integrate, and support the FORTEZZA cryptographic interface. Litronic offers its FORTEZZA PC Crypto Card and PCMCIA Card Readers/Writers for use with the new Netscape products with FORTEZZA. Litronic is based in Costa Mesa, California and offers the software and hardware tools that organizations need to easily integrate hardware-strength cryptography into existing applications. Netscape products with FORTEZZA are currently available and can be ordered from Netscape Government Sales. You may contact a sales representative for product information and pricing at 415/937-3678. FORTEZZA Crypto Cards and PCMCIA Card Readers/Writers must be purchased separately. MORE ABOUT THESE PRODUCTS Data Sheet: NETSCAPE PRODUCTS WITH FORTEZZA TECHNICAL SUPPORT USEFUL LINKS

2 1

cypherpunks - passing mention [FYI] [sci-fi]
by Jim Choate 17 Dec '03

17 Dec '03

Informational/Entertainment content only: Minimal crypto relevance but in Allen Steele's book Tranquillity Alternative (ISBN 0-441-00433-4) which concerns a alternate-history of the space program there is mention of 'cypherpunks' made in reference to cracking double-key encrypted passwords on Le Matrix. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

John Young, stegonym
by Zooko Journeyman 17 Dec '03

17 Dec '03

Most pseudonym users cope with the possibility that Mallet will hate what they say by ensuring that he can't figure out their True Name. JY is the next step-- Mallet can't figure out what he is saying, or if it is serious, so J remains safe. Z P.S. Sorry to blow your cover, there, John... P.P.S. Of course "True Name" is a confusing, abused concept. There are three possible ideas-- (A): given a name "N", people can map from N to your physical body, thus exposing you to the risk of extortion, assassination, etc., or (B): given an individual "I", people can find a name "M" such that they are sure I is the brain directly behind M. Alternately, (C): given a name "O" and a name "P", people can be sure that the brain directly behind O is not also the brain directly behind P. Both N and M and occasionally are sometimes thought of as "True Names". (B) and (C) can sometimes be desirable, but unfortunately most implementations of (B) and/or (C) imply (A). (A) is never desirable. P.P.P.S. TCM is the opposite (regressive?)-- he goes out of his way to give a clear impression, to Mallet as well as to friends and strangers, that he is dangerous, violent, racist, homophobic, bigoted, emotionally disturbed, and irrational. We know better, but unfortunately not everyone is so perceptive. P.P.P.P.S. I know TCM likes discussing the True Name concepts when he is in a good mood, but I hereby promise not to give him the satisfaction of conversation until he writes 100 times on the blackboard "I am not a threat to myself, my neighbors, or the authorities.".

1 0

Quote from Mao
by Jean-Francois Avon 17 Dec '03

17 Dec '03

===== forwarded from the Canadian Firearms Digest mailing list ==== >"Political power grows out of the barrel of a gun" > - Mao Which is why the Liberals only want the state to have guns. - -keith Keith P. de Solla, P.Eng - NFA Field Officer kdesolla(a)cyberus.ca http://www.cyberus.ca/~kdesolla/eohc.htm -- Jean-Francois Avon, Pierrefonds(Montreal) QC Canada DePompadour, Societe d'Importation Ltee Finest of Limoges porcelain and crystal JFA Technologies, R&D consultants physicists and engineers, LabView programing. PGP encryption keys at: http://w3.citenet.net/users/jf_avon http://bs.mit.edu:8001/pks-toplev.html ID# C58ADD0D : 529645E8205A8A5E F87CC86FAEFEF891 ID# 5B51964D : 152ACCBCD4A481B0 254011193237822C

1 0

Hyperlinks case settles at door of court
by Bill Stewart 17 Dec '03

17 Dec '03

>The Shetland Times case has been settled - links will be permitted with >certain conditions > >See http://www.shetland-news.co.uk/headline/97nov/settled/settled.html And it was even settled reasonably, and without setting new bad UK case law. (For those who don't remember the case, the Shetland News and Shetland Times are Scottish newspapers with web pages. The News was linking from its page to some of the Times's stories without pointing out that the stories were in their competitor's paper, and the Times sued them. In the settlement they agree that the News may link to the Times's pages, and that they'll only do so with visible indications that they're doing so.) Thanks! Bill Bill Stewart, stewarts(a)ix.netcom.com Regular Key PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

Re: Key Signing
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Bill Stewart wrote: > I'm not sure how comfortable I am signing a key which has the > private keys made public - so I signed it, and revoked it, > and you're welcome to the signed revocation certificate :-) > > The keyserver says it accepted the certificate, but doesn't > find it when I query it for the key, but then it did that to me > earlier today, so I'm not sure if it's there or not. > (It's the server at http://www.pgp.com/keyserver/pks-lookup.cgi .) > > The KeyID was 0x61C747B1 - 512-bit RSA The PGP Keyserver could not find the key when accessed from the PGP web site (Find a Public Key), but when requesting it from inside PGP 5.0, it retrieved the key, revoking the key on my secret key ring, in the process. Necessarily Knott, ME (Although it _may_ be me, since I have not signed the message... Or is it the other way around? This is getting confusing.)

1 0

http relay script
by Niels Provos 17 Dec '03

17 Dec '03

Hi! I am sure this was discussed already. Is there meanwhile a http relay cgi script out there which could be packaged with the common http daemons (like cern, apache or ncsa) ? The use of that is obvious: every new web server could be used as anonymizer and thus proxies would have a hard time to filter all those sites in censorship countries. Greetings Niels Provos =8) - PHYSnet Rechnerverbund PGP V2.6 Public key via finger or key server Niels Provos Universitaet Hamburg WWW: http://www.physnet.uni-hamburg.de/provos/ Jungiusstrasse 9 E-Mail: provos(a)wserver.physnet.uni-hamburg.de Germany 20355 Hamburg Tel.: +49 40 4123-2504 Fax: -6571

1 0

Developing Non-Commercial Products with the PGPsdk!
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Mime-Version: 1.0 Date: Thu, 13 Nov 1997 17:23:46 -0800 To: mac crypto list <mac-crypto(a)vmeng.com> From: Vinnie Moscaritolo <vinnie(a)vmeng.com> Subject: Developing Non-Commercial Products with the PGPsdk! Sender: <mac-crypto(a)vmeng.com> Precedence: Bulk Status: U --- begin forwarded text Date: Thu, 13 Nov 1997 17:22:04 -0800 To: vinnie(a)vmeng.com From: Vinnie Moscaritolo <vinnie(a)pgp.com> Subject: Developing Non-Commercial Products with the PGPsdk Cc: Bcc: X-Attachments: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Attention: freeware and non-commercial developers. PGP would like to encourage the development and deployment of PGP Secured freeware or other non-commercial products and will grant you a licence to develop to the PGPsdk and distribute the PGPsdk shared libraries with your non-commercial application. We have added a special section for freeware or non-commercial developers to the PGPsdk website http://www.pgp.com/sdk/ Shareware developers take note: PGP hasn't forgoten about you. we are working on a licence agreement forS hareware or small developers too. Stay Tunned! ________________________________________________________________________ _ PGP Developer Support main: 415.572.0430 Pretty Good Privacy, Inc. 2121 S. El Camino Real <sdkinfo(a)pgp.com> http://www.pgp.com/sdk/ San Mateo, CA 94403 DH Key: http://keys.pgp.com:11371/pks/lookup?op=get&search=0xE12C71C1 ________________________________________________________________________ __ -----BEGIN PGP SIGNATURE----- Version: PGP for Business Security 5.5 iQA/AwUBNGunuIjx9Q4HClz/EQKWRACfXp9rkKs+OFu5jnl3Y3nXdn2WqIcAoOFr /+NBznWGPMHC/mPIP6ZUfCE6 =Mv4V -----END PGP SIGNATURE----- --- end forwarded text Vinnie Moscaritolo http://www.vmeng.com/vinnie/ Fingerprint: 3F903472C3AF622D5D918D9BD8B100090B3EF042 "You can get a lot more with a smile and a gun then a smile, alone." - Al Capone --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0