- cypherpunks-legacy - lists.cpunks.org

Re: Report on UN conference on Internet and racism
by Mikhael Frieden 17 Dec '03

17 Dec '03

At 06:53 PM 11/18/97 -0600, William H. Geiger III wrote: >-----BEGIN PGP SIGNED MESSAGE----- >I think that there is plenty of case law of extending constutional >protections to non-citizens. One that comes to mind were the rulings >against California inwhich the courts ruled the they were obligated to >provide schooling and social services to illegal aliens (a really fucked >rulling IMNSHO but if some good can come out of it no sense not making use >of it). In a much more fundamental sense, if they were not given constitutional protections they really could be rounded up and bussed across the border. -=-=- The 2nd guarantees all the rest.

16 29

Re: Statistical analysis of anonymous databases
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 15:53 5/31/96, David Wagner wrote: >How about a simple non-technical solution? Each patient picks a >random pseudonym; the database is keyed off that pseudonym, and the >person's True Name(tm) never appears in the database. Patients >should remember their pseudonym (or write it down); then they can >add information to the database. In medical research, third party audit, i.e., the Department of Health and Human Services, is often required. A simple pseudonym picked by the patient won't do. Disclaimer: My opinions are my own, not those of my employer. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

2 1

Re: [Off-Topic] "Curfews"
by Deranged Mutant 17 Dec '03

17 Dec '03

On 31 May 96 at 19:08, Timothy C. May wrote: > This is off-topic for the list, but I want to share it anyway. It touches > on issues of increasing police surveillance, and also touches on the issue Not really too off topic at all, considering the surveillance state and GAK relate very much to what we're doing here. An aside: at the University I used to attend, there were field trips to this small museum on the campus by elementary school children, who apparently regarded the motion detectors for the automatic doors as being cameras which they'd happily wave hello to. Images of Huxley's Brave New World intermingled with Warhol's 15-minutes-of-fame stewed up with Orwell here.... > of "age credentials" (in the sense that how else is a cop who stops a young > person for "curfew violation" to determine if a violation has occurred when > most 14- and 15-year-olds carry no driver's licenses?) Since when are we now to carry ID everywhere. And of course the local police will (as usual) be selective about who they stop to ask about directions. Also note that a reasonable exception will be for kids to go to work or school-related activities (institutional), but nothing non-institutional such as a party at a friend's house (drugs or no drugs), band practice, etc. etc. > The "curfew" meme is spreading quickly, with Clinton calling for a federal > curfew, at least in cities, and Dole trying to outdo him with even more > draconian curfew laws. Many communities already have them, including San > Jose, New Orleans, and other large cities. And my own community, Santa Cruz > County, ironically begins a curfew program on Saturday, tomorrow. Some communities here in Long Island have them. Others have fought them, and I think a couple of attempts were struck down by courts. Also a blurb in the local papers about police not wanting the curfew here, believing it to be a waste of their time or unnecessary... (I'll have to dig the article up; I only rememebr it wasn't reassuring.) [..] > (Some purists claim that children are exempted from normal constitutional > protections, such as the right of free association, the right to be free > from unwarranted searches and seizures, the right of free speech, etc. > Especially this comes up in debates about rights in public schools (speech, > locker searches, movements are controlled, etc.). But I think a public A problem indeed. Children grow up used to the surveillance society and don't mind it when they become adults. Imagine a whole generation coming of age being told they are "criminals". Things will be very "interesting" (in the Chinese fortune cookie sense) during the next 10-20 years... > As I said, should such curfews become widespread, children will of course > need forms of age identification, and this opens yet another door for > universal I.D. cards. And for "travel papers." ...or they'll stay at home and net surf. Beware the Four (or six?) Horsemen... Rob. --- No-frills sig. Befriend my mail filter by sending a message with the subject "send help" Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0

Re: Statistical analysis of anonymous databases
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 0:56 6/1/96, Alan Horowitz wrote: >> In medical research, third party audit, i.e., the Department of Health and >> Human Services, is often required. A simple pseudonym picked by the patient >> won't do. > > It's not clear to me that the second sentence follows from the first. HSS needs to verify that the researcher didn't just make up the data. The Department therefore has to be able to audit the results of the study by contacting a small subset of the participants directly. How can the Department contact the participants if they are known only under their nyms? No, pseudonymous remailers are not a valid answer. All this has to be done without requiring any type of email/Internet access. US Mail only. Disclaimer: My opinions are my own, not those of my employer. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

2 1

No Subject
by unknown＠example.com 17 Dec '03

17 Dec '03

yes -- Love, Qut(a)netcom.com

1 0

No Subject
by unknown＠example.com 17 Dec '03

17 Dec '03

gui is jw unix i ns

1 0

"The 666 Club"
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 1:27 AM 6/1/96, Deranged Mutant wrote: >On 23 May 96 at 7:46, Declan B. McCullagh wrote: >[..] >> More to the point, the left and the right come together on privacy issues. >> >> Remember the Christian Coalition's take on national ID cards? "Mark of >> the Beast!" (Does anyone have an original cite for this? I also recall >> the CC opposing Clipper...) > >There was actually a pretty good special on the 700-Club when Clipper >first came out (at least from a transcript posted on the comp.org.eff >newsgroup). > >Yep. They were against it. I saw a videotape of this episode of "The 700 Club," in November 1992. Pat Robertson and his co-anchor were worked up about (and against) Clipper. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Where does your data want to go today?
by David F. Ogren 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Me: > >Using a random IV also limits the effectiveness of using known > >headers for "known plaintext" attacks. Also note that a good block > > cipher isn't that vulnerable even to "known plaintext" attacks. Bill Frantz: > I don't think this is true given a brute force attack. Let me > assume DES-CBC as a specific system. Let us assume that the > plaintext is: > <snip> > The brute force system decrypts the first, and second blocks (8 > bytes each) of the cyphertext, XORs them, and compares the result > with "PKZIP2.1". If the comparison is equal it has the key. > > If we eliminated the header and just started with the compressed > data, then the brute force system would have to decrypt and > decompress enough of the data to run statistical tests. The cost of > the additional decryptions, decompression, and statistical tests > substantially raise the cost of the brute force attack. I will concede that having a known header, such as a PKZIP header, does weaken a crypto to certain degree, but I still believe that it is not a significant problem. Here's why: 1. If the best attack against the crypto system is to brute force attack (having to decrypt two blocks per key) I don't consider that a weakness. Assuming you are using IDEA or another 128 bit key algorithm and if everyone in the world owned two computers, each powerful enough to make a million attacks a second, and they all decided to cooperate in cracking your key it would still take (on average) until the next ice age to complete this attack. Admittedly DES wouldn't hold up nearly as well, but if you are using straight DES you have bigger concerns than the occaisional known plaintext attack. 2. Known plaintext is something that you have to assume that your enemy has at least occaisional access to. Lots of messages have known beginnings and endings. Sure it would be nice to reduce the amount of known plaintext, but I think there are much more significant concerns. 3. The disadvantages of not having the headers. The headers are there for a reason: to communicate that the following file is in a specific format. Without the headers, you have to use another secure channel to communicate what file type is being transmitted. Again, I concede that a crypto system would be more secure if no known plaintext was ever transmitted, such as compressed file headers. But this minor loss of security is nearly inescapable and also relatively insignificant. David F. Ogren ogren(a)concentric.net PGP Key ID: 0xC626E311 PGP Key Fingerprint: 24 23 CD 15 BF 8D D1 DE 81 71 84 C8 2C E0 4B 01 (public key available via server or by sending a message to ogren(a)concentric.net with a subject of GETPGPKEY) -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMa/qu/BB6nnGJuMRAQH8MAP/epcVGiS+9U1aWs1diuiVsMSjellYRjNm p9huFrzT9eaBrfVz0MI2yhZ8IWNctDWznQdmtcmdRKoFm5Knfu+vIyKH6oILplyB dgfPsSh3R/pJKXs2hD4q8PgE+laaTyFZyW1MqPbAjlKUS/T1w9bhL3lQnsrKZPf+ Qyxa19Vlya0= =sHIE -----END PGP SIGNATURE-----

1 0

Re: [Off-Topic] "Curfews"
by Brendon Macaraeg 17 Dec '03

17 Dec '03

hi Tim and all: Been lurking on this list for about a month and find it really interesting. I'm still working my way through the FAQ from the talk.politics.crypto newsgroup to get up to speed, but have been using PGP for about six months now. I've been toying with starting an anon-remailer as well....that Quickremail program looks cool...anyone install and run it yet? I think Tim's post relates to the idea that we're living in a society that finds it acceptable to monitor our movement of all sorts. Not just physical, but --for lack of a better word-- virtual as well. By that I mean, organizations both large and small have the means to track our purchases and activities --generally, any activity that is logged or leaves a data/paper trail says something about us and creates a virtual persona-- and using such info. to make inferrences about our lifestyles. Just the other day I had a heated talk with someone about drug tests in the workplace. She said they're fine. Frankly, I am against them. Take your jar and shove it. "Life, Liberty, and the Pursuit of Happiness" implies a right to privacy. That's why I started using PGP and want to make an effort to keep up on topics related to keeping my life private and shielded from those who would like otherwise. What will employers want to know next? What movies I rent? What books and magazines I read? What else do I do on my freetime that may or may not be "unacceptable"? I worry that our personal lives are becoming more and more regulated by government, regulation that allows employers and other institutions to rationalize their privacy-invading actions and that's why I too find Clinton's push for a state-instituted curfew disturbing as well. What next? Will my employer start telling me I have to be home by 11 p.m. so I can be a happier, more productive worker? -B At 07:08 PM 5/31/96 -0700, you wrote: > >As I said, should such curfews become widespread, children will of course >need forms of age identification, and this opens yet another door for >universal I.D. cards. And for "travel papers." > >Maybe it would be easier to just put a tattoo on their arms--especially as >the younger generation is so into tattoos these days. "Pappieren, bitte. >Macht schnell!" > > ===================================================== Brendon Macaraeg http://www.itp.tsoa.nyu.edu/~brendonm Finger macaragb(a)acf2.nyu.edu for my PGP Public Key

1 0

Cassidy's Sacremento Bee article.
by Robert Hettinga 17 Dec '03

17 Dec '03

As I said here before, cypherpunk (and DCSB founder) Peter Cassidy, who did an article in the last Wired on the Bernstein case, just did a story on the NSA's involvement in the digital telephony bill in this Sunday's Sacremento Bee. Pete says, > I spoke with an editor at the BEE. The story takes up most of the front > section of the FORUM section. Headline screams: > SILENT COUP IN CYBERSPACE > US Intelligence Agencies Threaten Businesses and Personal Privacy. Since this story is also supposed to hit the wires, it would be interesting if it goes anywhere else... Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "If they could 'just pass a few more laws', we would all be criminals." --Vinnie Moscaritolo The e$ Home Page: http://www.vmeng.com/rah/

1 0