- cypherpunks-legacy - lists.cpunks.org

Re: Secured RM ? (source)
by Adam Shostack 17 Dec '03

17 Dec '03

| | While we're here.. I havn't been able to find anyone on the planet who's | seen or heard of a linux un-remove, which makes testing my code very | tricky. If anyone can point me at it I'd apreciate it. Hell, if someone | can definitively say they've /seen/ such a thing it'd be nice. So far | i've found one person who insists that his system admins sisters | boyfriends cousin from Saint Petersburg has been using un-rm for unix for | years. *sigh* From comp.unix.questions FAQ: (http://www.cis.ohio-state.edu/hypertext/faq/usenet/unix-faq/faq/part3/faq-d…) MIT's Project Athena has produced a comprehensive delete/undelete/expunge/purge package, which can serve as a complete replacement for rm which allows file recovery. This package was posted to comp.sources.misc (volume 17, issue 023-026) -- "It is seldom that liberty of any kind is lost all at once." -Hume

2 1

"Strongly Voluntary" Key Escrow
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:18 PM 12/14/95, jim bell wrote: >I disagree. The issue is one that might be called "standing." Who, >exactly, is responsible to whom in such an arrangement. Let's suppose key >escrow (for keys for non-exported encryption devices) is REALLY VOLUNTARY. >In that case, the escrow agent's only legal responsibility is to the owner >of the encryption device. The government isn't a party to this voluntary >arrangement, and thus hasn't a complaint if the escrow agent refuses to comply. > >I could, for example, enter into a voluntary arrangement with an escrow >agent so that he would be obligated to erase the key no more nor less than 5 >days after he received it. If he did so 1 day after, and I needed the key, >he would have breached his obligation to ME, but not to the government. >Likewise, if he failed to erase the key, he would likewise be breaching his >agreement with me. I agree with this analysis. When key escrow was being debate in the summer of '94 here, I called this criterion the basis for a "strongly voluntary" system. Specifically, that one could have the bit bucket as an "escrow agent," with of course no retrieval by the government. Or one's lawyer, or one's spouse, or an offshore bank, and so on. All of these are "voluntary" key escrow (though I hate that misuse of the word "escrow") systems. None of them involve government certification, and there are few circumstances where I think "government certification" is even useful, let alone necessary. Any scheme in which the government interjects itself in what would not normally involve them can hardly be said to be strictly voluntary. --Tim May Views here are not the views of my Internet Service Provider or Government. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

Re: And the standard continues to lower...
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

On Fri, 15 Dec 1995, Peter Trei wrote: > This guy's home page is a hoot - he's into UFO contacts and dolphin > communication. > > After writing to him and getting back a description of his system, it's > clear that he's clueless. He seems to think that info sent to a vendor > using his system can't be sorted out from the gazillion other packets > on the Net. > > I described to him sniffer attacks, subverted routers, etal, and > reccomended some basic reading (Cheswick & Bellovin, Is this the two partners in crime from AT&T?? Cheswick & Bellovin?? I think that they're probably not all that reputable (or knowledgable) from what I've seen of their writings and contributions to the AT&T DSRP (Data Security Response Program) mailing list. (If they are the same people, I mean ...) > Kaufmann, Perlman, & Speciner, and Schneier). He said he'd > look into it. (Yes, I know there's plenty of other attacks, such as > OSPF spoofing, but I didn't describe them). > > I think we can educate this guy. Plenty of educating can probably be done, I think. Alice de 'nonymous ... <an455120(a)anon.penet.fi> ...just another one of those... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

1 0

Alien Abductees, Flat Earthers, and other Fringoids
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:37 PM 12/15/95, Giles Bowkett wrote: >Does anyone know of a mailing list organized around political issues >regarding electronic networks, virtual community, the changing roles of >the city and the corporation, and especially issues of class in a "wired" >world? > >Much thanx, pls pardon the spam. Don't mention it! After all, all right-thinking Cypherpunkz are intensely interested in these mailing lists you sent this to: abducted(a)hyperreal.com (many Cypherwonks are alien abductees!) flat-earth(a)zikzak.net (where the "edge" culture meets the edge of the Earth) email(a)fringeware.com (yes, we're at the fringe) So nice to know that we're lumped in with these folks. --Tim "Dr. Bob" May Views here are not the views of my Internet Service Provider or Government. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

Re: "Strongly Voluntary" Key Escrow
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 9:10 12/15/95 -0500, Jim Ray wrote: >"Government Key Certification" might be an OK compromise-term compared >to "key escrow," but we should [IMNSHO] continue to stick to "GAK." As >you know, I prefered the term "FUCKED," but now we must be "decent" in >our communications. <sigh> I suggest Forced Key Deposit (FKD) (when some non-governmental entity e.g. an employer forces you to send copies of your keys to some depository), and Voluntary Key Deposit (VKD), when you chose to deposit a copy of your key with some third party. I love the way GAK sounds, so I support it even the whole concept is really FUCKED. Whenever I hear, "Government Key Certification", I think of digital signatures, not communication privacy. ----------------------------------------------------------------- Bill Frantz Periwinkle -- Computer Consulting (408)356-8506 16345 Englewood Ave. frantz(a)netcom.com Los Gatos, CA 95032, USA

2 1

Status of Apple proposal for wireless NII Band
by tkalil＠ARPA.MIL 17 Dec '03

17 Dec '03

The Administration sent a letter to the FCC asking that they move forward on the Apple and WinForum petitions. The Administration's reasons for supporting the allocation are given below. The full filing is on the NTIA server at http://www.ntia.doc.gov >> >> >> November 2, 1995 >> >> The Honorable Reed Hundt >> Chairman >> Federal Communications Commission >> 1919 M Street, N.W. >> Washington, D.C. 20554 >> >> Re: RM 8648, RM 8653 >> >> Dear Chairman Hundt: >> >> This letter addresses the petitions for rulemaking filed >> before the Commission in May 1995 by the Wireless Information >> Networks Forum (WINForum) and Apple Computer Company, Inc.[1] >> Those petitions request the allocation of certain spectrum in the >> 5 GHz band and the adoption of service rules for shared >> nonlicensed personal radio network devices. Both the WINForum >> Shared Unlicensed Personal Radio Network (SUPERnet) devices and >> the Apple National Information Infrastructure (NII) Band devices >> would allow operation of nonlicensed, high-speed, wireless >> networks with multimedia capabilities. NTIA believes that these >> new wireless technologies have the potential to enhance education >> and other community services. Implementation of these networks >> and the feasibility of spectrum sharing between the proposed >> devices and Federal users should thus be fully explored by the >> Commission. We therefore recommend that the Commission proceed >> with a Notice of Proposed Rulemaking (NPRM) so that the policy >> and technical issues raised by the petitions may be addressed. >> >> NTIA serves as the principal adviser to the President on >> telecommunications and information issues, including the >> Administration's NII and Global Information Infrastructure >> initiatives. In addition, as Federal spectrum manager, NTIA >> shares with the Commission jurisdiction over the frequency bands >> under discussion in the petitions. NTIA believes that the >> proposed WINForum and Apple devices could provide an important >> means of nonlicensed wireless access to the NII. Wireless >> networks can be more affordable than wired networks. Schools, >> hospitals, businesses, and others would thus have convenient >> access to communications networks with voice, video, data, and >> graphics capabilities without the expense and disruption that >> installing wired systems would require. >> >> As you know, the President and Vice President have launched >> an important initiative to connect all of our classrooms, >> libraries, hospitals, and clinics to the NII by the year 2000. >> This initiative, which promotes expanded access to computers, >> teacher training, and the development of compelling educational >> applications, has the potential to revolutionize our educational >> system, changing the way teachers teach and students learn. >> Students will be able to collaborate with their peers around the >> world, search digital libraries, use remote scientific >> instruments, and take "field trips" to on-line museums. As >> President Clinton said in a recent speech, "[e]very child in >> America deserves the chance to get the high-tech know-how to >> unlock the promises of the 21st Century." >> >> For this reason, the Administration strongly supports >> spectrum policies that will promote affordable, high-bandwidth >> wireless computer networks. Wireless networks, and nonlicensed >> networks in particular, can be a cost-effective approach for the >> countless schools in our Nation that need connections to the NII >> to enhance learning opportunities and provide young Americans >> with the skills they will need in the future. Wireless networks >> may be an important option for schools because they often face >> limited budgets and are prevented from entering the Information >> Age by inadequate wiring. Furthermore, the proposed devices >> could allow more students to have network access directly at >> their desks in their classrooms instead of in computer labs in >> other rooms. >> >> Other users will benefit from nonlicensed wireless networks >> as well. Small businesses that lack adequate wiring and that >> cannot afford access to wired networks could have affordable, >> convenient wireless access to multimedia networks. Such access >> could enhance productivity and efficiency. Health care providers >> would have the ability to transmit patient data, such as x-rays >> and MRI images, video recordings, medical charts, and other >> records, which would dramatically improve the efficiency of >> medical staff and ease the group diagnosis of medical cases. >> Moreover, NTIA believes nonlicensed wireless components of the >> NII will provide significant opportunities for innovators and >> small companies to make contributions to the overall mix of >> products and services available through the NII.[2] >> > ********************************************************************* Thomas Kalil Director to the National Economic Council The White House Washington, DC 20500 (p) (202) 456-2802 (f) (202) 456-2223 "What do we want? Bandwidth! When do we want it? Now!" *********************************************************************

1 0

RES_ist
by John Young 17 Dec '03

17 Dec '03

12-15-95. NYPaper, crypto-bizarrely: "Extremist Army Group at War With U.S. Policy." It is not known how large the underground group is but the Special Forces acknowledge the group's existence and says that it was not in violation of any regulations. Its newsletter, The Resister, available on the Internet, said it favored "strict constitutionalism, isolationism, laissez-faire capitalism, individual rights, limited government and republicanism," and opposed "statism, liberalism, tribalism, socialism, collectivism, internationalism, democracy, altruism, pull politics and the New World Order." RES_ist (10 kb)

1 0

Re: Motorola Secure Phone
by David E. Smith 17 Dec '03

17 Dec '03

At 04:34 PM 12/15/95 -0800, you wrote: > My AT&T 900 (or is it 9000?) MHz digital cordless phone says >the same thing. I figure it uses a weak cryptosystem. There is >something about key setup when you return the handset to the base. > (The phone was $200, FWIW) That just refers to the fact that it is no longer legal to sell scanners that can listen in to that range. The same is true of the 800 MHz band (used for a lot of cellular phone traffic). Ah, I love my really old scanner that isn't bound by such limitations... (BTW, a couple of years ago Nuts & Volts ran an article with information on a program and some toys that let a laptop computer, properly wired into a cell phone, act as a cell scanner. Never did wire it up, but it looked like fun ;) ObCrypto: um, if you can find it, let me know :) ----- David E. Smith, c/o Southeast Missouri State University 1210 Towers South, Cape Girardeau MO USA 63701-4745, +1(573)339-3814 PGP ID 0x92732139, homepage http://www.midwest.net/scribers/dsmith/ Dec15-Jan15: (618)244-3340/2209 Perkins, Mt Vernon IL 62864Quote: "If I wanted thrills and danger and lots of rampant violence, I coulda been a postal worker!" -- Ben, "Sensational Spider-Man"

1 0

Re: Is ths legal?.. (fwd)
by Jay Holovacs 17 Dec '03

17 Dec '03

This is the reference I couldn't find for my previous post. It would seem to have some relevance here Electronic Communications Privacy Act of 1986 (ECPA) (18 U.S.C. ss 2510 et seq.). "It shall not be unlawful under this chapter for an operator of a switchboard, or an officer, employee, or agent of a provider of wire *or electronic* communication service, whose facilities are used in the trans- mission of a wire communication, to intercept, disclose, or use that communication in the normal course of his employment while engaged in any activity which is a necessary incident to the rendition of his service or to the protection of the rights or property of the provider of that service, except that a provider of wire communication service to the public shall not utilize service observing or random monitoring except for mechanical or service quality control checks." 18 USC section 2510(2)(a)(i). Doesn't seem to leave much room for snooping on contents of messages. Jay Holovacs <holovacs(a)ios.com> PGP Key fingerprint = AC 29 C8 7A E4 2D 07 27 AE CA 99 4A F6 59 87 90 (KEY id 1024/80E4AA05) email me for key

2 3

Re: PAY-OFF TIME FOR BUG-BUSTERS, NETSCAPE PLEDGES "DOGFIGHT"
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

On Mon, 11 Dec 1995, Michael Coates wrote: > PAY-OFF TIME FOR BUG-BUSTERS, NETSCAPE PLEDGES "DOGFIGHT" > Netscape Communications has awarded two software sleuths $1,000 each for > finding security gaps in its Netscape Navigator 2.0 software. The company > also awarded gifts to 50 other contestants in its "Bugs Bounty" program for > identifying non-security problems. (Wall Street Journal 11 Dec 95 B7) Can anyone tell me whether Ian Goldberg and David Wagner got their $25,000 from Netscape for finding the HUGE security flaws in Netscape's existing product line?? I can't remember whether they got anything or not ... (Sorry, but I've been away from the list. One of those, "fate of the Free World hangs in the balance" thingies ... ;-) Have Netscape and AT&T shown some holiday goodwill, or are they still engaged in their felonious freeloading foolishness? Alice de 'nonymous ... <an455120(a)anon.penet.fi> ...just another one of those... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

2 1