- cypherpunks-legacy - lists.cpunks.org

Re: do NOT escrow communications keys (Re: What's really in PGP 5.5?)
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Adam Back wrote: >About the only example of email in transit being considered storage >was a USENET article years ago by someone who considered it a kewl >hack that he had some games or something else which was in breach of >policy in his account and rumor went around that the admin was having >a purge. He tarred, gzipped & uuencoded the lot and emailed it to >himself down a _long_ ! fowarding path. It came back to him around 3 >days later after the purge. That's the kind of thing I mean when I >say you don't consider email storage. Sometimes you can use this trick to get around storage limitations at your ISP. Often mail in the spool file doesn't get added up for the disk quota. When you hit your limit, just e-mail yourself a bunch of megabyte messages. Sysadmins tend not to like this. Monty Cantsin Editor in Chief Smile Magazine http://www.neoism.org/squares/smile_index.html http://www.neoism.org/squares/cantsin_10.html -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBND5t8JaWtjSmRH/5AQFf9wf/TQMiQH4wJXO3Xx/borwAobWIlKQCGmVQ BnflPYg5pDvHOc+vppprb/f5HLZ78p1WaOY9l7vc+aJ97NC346UQAzS8kGyr6WP7 YmHmWRx576CV8EsLWjMZFYB6fZXvvMQd6VGUPC9IKC9Zum2BV1GCUSxGIHFpwNDp ElfqFFlFdVqfh30XEi2e/XK7UKh6bzYMHgfHTEjv+FqV1grXpGlwDHQfWvPMv4s8 ZEO8XM7Sh6DOXEMnrZkKJ0dl9cW8FjphEeYbkePV9oPVuCqC8HF6gzFfGLtWMK6E nj7iuv1QoQPagk4nwogHRUjhuuFg0aDcHieDR7T1HivFReB5fZIHYQ== =HCXe -----END PGP SIGNATURE-----

2 1

No Subject
by Anonymous 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Anonymous wrote: >> (untransferable signatures) > >This is also a good idea, but it needs more work, too. There is a >big education problem here. People barely understand the >implications of regular digital signatures. Now you are throwing >this new kind in, which guarantee the message came from another >person, but aren't binding. What happens when an employee receives a >message from a supplier signed with that kind of signature? Can he >make a decision on that basis, or not? > >In paper business correspondence, there is no such distinction. A >signed letter is transferable. Go beyond this and business will be >scratching its heads. It's a solution looking for a problem. How about arbitration? Two parties may wish to make an agreement to be judged by an arbitrator of their choosing. In certain cases, the State can be expected to intervene. If only the arbitrator knows the signatures to be valid, the State has no fair basis on which to make an intervention. Monty Cantsin Editor in Chief Smile Magazine http://www.neoism.org/squares/smile_index.html http://www.neoism.org/squares/cantsin_10.html -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBND5vYpaWtjSmRH/5AQGzygf/TdMgevKLw87e6ZtJ6++pyrOKliu/OunT Z4uxcWzDGPEcyNchhOsb6B+NSOehcgvqIhxs4NNTJqMVICiJCBhBTZlsQt7bW6kq Ayz62YWFZZeMcYbsP87FmuGLxsyh/wW2Nh/s80J9obS6vn7HQJBUp/Ox7Ho9RPIp bdijOAw6nxtPt0SWcr38F8XVj/XpqA768nn5uWwdtd2aCAIQf7uLE7poZLVL7+UQ VMiHlgsRIlcHEakNbCExrBTuyCzyoKo5LY+PPzlLCTC93rzXyPIdO8Ain6p49qa5 i/7z+WbT8powUsmwj5BEfPSKOo1CcuHfdAUgeSI4JawfhqYJAnzpRg== =m09K -----END PGP SIGNATURE-----

2 1

SSZ & T1 upgrade
by Jim Choate 17 Dec '03

17 Dec '03

Hi, Just a quick note to update you on the status of the T1 upgrade. It's going to take us a few weeks longer to get resources in place than we expected but there is some good news. It turns out that SWBT can provide us a 2-year contract on a full T1 for <$1500 setup and $350 a month. If we go for 5 years there is no install fee and the fee is $250 a month. We are currently discussing various issues with our current customers, examining our personal finances, and our market share potential in our area for which contract to go for. I currently have a 2-year contract on the present equipment location. The potential for purchasing the property will also be discussed. We can purchase a T1/T3 Linux compliant card that will mimic a NIC for less than $700. So, it looks like we can do a complete upgrade to a T1 for less than $3k. Provided we don't get in some sort of grid lock we hope to have something setup and going within the next few weeks. It is my personal desire to have something in place and fully functioning no later than Thanksgiving. But then again, I would have already signed the contract in order to get it going by Halloween. Alas, I am not the last word anymore - the down side to business partners. Even if both my current business partners decide they want out I can say that I will have resources in place by Christmas to have us to a T1. So, irrespective of what is decided the T1 will happen. We will be keeping the ISDN as a backup and transient dial-in for users. If you have any questions please direct them to 'consulting(a)ssz.com'. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

cypherpunks-e list problem - blank subject lines
by Jim Choate 17 Dec '03

17 Dec '03

Hi, The remailer software used for the cypherpunks-j and cypherpunks-e mailing lists does not accept empty subject: lines. Until they can arrange a work-around it would behoove authors to be shure to include something in the subject: line of the header. FYI. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: PGP CAKware & IETF controlled Open-PGP standard
by William Allen Simpson 17 Dec '03

17 Dec '03

I'm getting a bit tired of the rants on this topic to the Open-PGP list. Yes, there are problems, but the whole purpose of IETF review is to find solutions to problems. The PGP staff have some ideas on how business message recovery can be done. It seems there is a business need. It seems that they have thought about it, and made some effort toward implementation. What annoys me is that the PGP formats are now supposed to be "open", yet no proposed formats for this new "feature" have been documented for our review, and other folks' suggestions for a better K-of-N mechanism have been ignored. We don't even have the current formats. When will the PGP 5.0 internet-draft be ready for review? There is already a PGP 5.0 separation between signing and communication keys; why not have separate message storage keys? Why not have a K-of-N system for BMR? Why have a communication enforcement filter, when the only usage is supposed to be for recovering archival storage? Let us decide _what_ the goals are, _how_ to solve the problems, and _then_ decide the protocol details and formats to match the solution. WSimpson(a)UMich.edu Key fingerprint = 17 40 5E 67 15 6F 31 26 DD 0D B9 9B 6A 15 2C 32

1 0

Re: 6502 ML programming (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 10 Oct 1997 21:18:16 -0700 > From: Jonathan Wienke <JonWienk(a)ix.netcom.com> > Subject: Re: 6502 ML programming > for my 128! Unfortunately, nobody seems to publish such a book for PC's, > but I digress.) Actualy there are several sources for schematics and such for PC's. As to the basic BIOS functions and such, plenty of PC assembly books go into that to some detail. The one I use and refer to is: IBM PC Assembler Language and Programming Peter Abel ISBN 0-13-448143-7 Some other references you might want to get from IBM (800-426-7282) are: PC Hardware Maintenance Service (PC, XT, AT, PPC) Part No. 6280087 $244.00 PC Hardware Maintenance Reference Part No. 6280088 $187.00 Hardware Interface Technical Reference Part No. 85F1646 $63.00 BIOS Interface Technical Reference Part No. 04G3283 $55.00 Note: contact your BIOS manufacturer and they should be more than willing to sell you the technical manual for their BIOS. They ain't cheap. Also contact: Annabooks 11848 Barnardo Plaza Ct., #102 San Diego, CA 92128-2417 619-673-0870 800-462-1042 619-673-1432 fax IBM Technical Directory PO Box 2009 Racine, WI 53404 414-633-8108 800-426-7282 ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Building the Surveillance State
by Tim May 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I predict that nearly every company which enforces the PGP 5.5 corporate snoopware will in fact routinely convert every incoming and outgoing message to plaintext for searching by keywords, topics, etc. This would be analogous to every phone call, incoming and outgoing, being recorded. Except that instead of having security people _listen_ to each recording, the messages can be glanced at quickly, marked for further review, compiled into dossiers, or searched for the keywords of interest to the security people. (Please note that I am not saying such phone call or e-mail monitoring is illegal, or should be illegal. A property owner is free to define his own policies for how he uses his own property. This includes company phones, company computers, and even the time of employees while they are on his premises. The issues are not the legality or ethicality of such recordings and monitorings, but the dangers. And whether people such as ourselves should help build or deploy such surveillance capabilitities. Or work for companies with such surveillance policies.) I further predict that this will actually _increase_ the amount of e-mail surveillance being done. Whereas today it is of course easy for companies to surveil unencrypted employee mail, I doubt that most of them do. But the adoption of snoopware like PGP 5.5 will raise the consciousness of company security people. "Hmmhh, maybe we ought to buy some of those e-mail keyword analyzers and combine them with our new purchase of PGP 5.5? If our employees are encrypting, we'd better keep tabs on them." By building in such easily-enforceable snooping capabilities, and by building in such things as the ability to reject even _incoming_ e-mail which has failed to encrypt to the corporate key (as I understand the product), this greatly moves us toward a surveillance era. Is this what "Pretty Good Privacy" really stands for? - --Tim May The Feds have shown their hand: they want a ban on domestic cryptography - ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^2,976,221 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway." -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBND+11FK3AvrfAt9qEQKOZQCdFRS6Ogl3da7TDFxmFF7E9kE16RsAoPaG iFjXzww6H5c1no3iYGvL6BGD =wt4J -----END PGP SIGNATURE-----

3 2

Foreign Terrorist List (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: >From owner-travel-advisories(a)stolaf.edu Sat Oct 11 04:19:58 1997 Date: Thu, 9 Oct 1997 11:00:03 -0400 From: owner-travel-advisories <owner-travel-advisories(a)stolaf.edu> Subject: Foreign Terrorist List Sender: Wally Doerge <76702.1202(a)compuserve.com> To: travel-advisories(a)stolaf.edu Message-ID: <199710091103_MC2-235E-2001(a)compuserve.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Precedence: bulk STATE DEPARTMENT TRAVEL INFORMATION - Foreign Terrorist List ============================================================ Publication of List of Foreign Terrorist Organizations - Public Announcement October 8, 1997 U.S. DEPARTMENT OF STATE Office of the Spokesman The Secretary of State has designated as foreign terrorist organizations thirty organizations that engage in terrorist activity that threatens the security of United States nationals or the national security of the United States, pursuant to the Anti-Terrorism and Effective Death Penalty Act of 1996 (P.L. 104-132). Designation as a foreign terrorist organization carries legal consequences for persons who aid these organizations, for the organizations funds, and for representatives and members who seek to enter the United States. The list of foreign terrorist organizations was published in the Federal Register on October 8, 1997. The Department of State has no specific information regarding threats to U.S. citizens at this time as a result of the designation of foreign terrorist organizations, but believes some of the groups may consider changing their attitude toward targeting U.S. interests in reaction to their designation. American citizens traveling abroad should always seek to minimize their risks by being aware of their surroundings and exercising caution as to their activities. U.S. citizens planning to travel abroad should consult the Department of State's country-specific Travel Warnings, Consular Information Sheets, and regional travel brochures. This Public Announcement expires on January 8, 1998. ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- The "travel-advisories(a)stolaf.edu" mailing list is the official Internet and BITNET distribution point for the U.S. State Department Travel Warnings and Consular Information Sheets. To unsubscribe, send a message containing the word "unsubscribe" to: travel-advisories-request(a)stolaf.edu Archives of past "travel-advisories" postings are available at the URL: "http://www.stolaf.edu/network/travel-advisories.html" or via Gopher: gopher.stolaf.edu, Internet Resources/US-State-Department-Travel-Advisories

1 0

James A. Michner [non-crypto]
by Jim Choate 17 Dec '03

17 Dec '03

Hi, Thought some of you might care to know that James A. Michner the Pulitzer prize winning author who lives here in Austin, Tx. has decided to take himself off the kidney dialysis machine that has been keeping him alive. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Is Adam Back falling for one of Minitru's tricks?
by Zooko Journeyman 17 Dec '03

17 Dec '03

Dammit Adam. I respect your opinion and your knowlege about these issues, but I think that you've been fooled by Minitru's machinations. Minitru would _like_ for the world's businessmen to be presented with a choice between "brittle" crypto-- private keys held solely by owners, plaintext available solely to recipient, where every forgotten password, missed keystroke or disgruntled saboteur means the company loses valuable data permanently-- or GAKked crypto where these problems of brittleness are solved by Big Brother paternally providing backups when you find yourself in need. In reality neither of these is an acceptable alternative for serious use of strong crypto in business. Escrow is a valuable business concept, which was invented by businessmen centuries ago and has been used ever since because it provides significant value to the participants who voluntarily enter into the escrow contracts. In the context of the information age and crypto, escrow will be one of the basic building blocks of the new era, both for basic business purposes-- serving the same purpose that escrow has always served but with heightened importance to pseudonymous, global commerce-- and for building cryptosystems which are robust in the context of data being shared among many people (e.g. a company). The issue is not how many people are given access to your keys or your data. The issue is whether you maintain your right to control who those people are (including, but not limited to, your right to decide that you will be the only person with access), or whether others with delusions of grandeur and obedient police forces can compel you or trick you into giving them access. Don't let Minitru continue to confuse the issue-- you'll be left with nothing but false alternatives. Escrow is good and necessary and inevitable-- ask any businessman. GAK is not escrow. Escrow is not GAK. Regards, Zooko

2 1