- cypherpunks-legacy - lists.cpunks.org

Re: PGP hole
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

> 2.3a, and most likely earlier versions as well. Apparently, it is possible > to insert cleartext within a signed message and still receive a good sig > message upon verification. Interested parties are referred to alt.security. > pgp for a rather lengthy thread on this subject. I haven't seen anything I think this was posted as a bug of 2.3 long time ago to alt.security.pgp. I thought the bug was already fixed... Hadmut

1 0

He's dead Jim (Chomsky)
by nobody＠cass156.ucsd.edu 17 Dec '03

17 Dec '03

Amazing, absolutely amazing! Perhaps we should stop reading Chomsky (if we ever did) and read James A. Donald--he obviously has not only a grasp of what it is people *really* mean, but also has the spurious arguments to back himself up! The Chomsky quote of the day: > In my opinion, not only mainstream intellectuals but also others > who produce a constant stream of lies, distortion, racist screeds, > etc., should be permitted freedom of speech. The state should not > have the power to stop them. The same freedom extends to > hypocrites, like faculty senates who choose one particularly and > usually quite marginal example because career and power interests > are served thereby, while ignoring vastly more significant and > awful cases because the opposite is true. And Congress, of which > the same is correct. In this, James A. Donald finds: >To put this in its proper context, Chomsky also believes >in socialism, in the sense of the "people" controlling the >means of production, distribution, and supply, and in >particular, the "people" running the mass media. What? Non sequitur! No where in Chomsky's quote do we find any remote resemblance of a reference to mass media; neither to production, distribution, nor to supply (nor to economics of any kind). If I had to piece this together, Mr. Donald erroneously finds the quote: "The state should not have the power to stop them" to mean that Mr. Chomsky is advocating that the "people" *should.* Mr. Donald continues: >In my previous writings on this thread I have shown >examples where Chomsky carefully chooses words so as to >convince us that freedom of speech is not freedom, and >that control of speech is freedom. Wrong again. In his previous writings, James A. Donald *tried to show* that Chomsky "chooses words so as to convince us that freedom of speech is not freedom, and that control of speech is freedom." Unfortunately (or fortunately, depending on one's personal bias), Mr. Donald's "arguments" were nothing more than simple speculations which lacked cohesiveness. He continues: >You will notice that Chomsky has carefully expressed >himself in the manner that is least likely to make us feel >favorable to freedom of speech. [snip] No, what I *have* noticed is that obviously Chomsky "has carefully expressed himself in the manner that is least likely to make" James A. Donald feel favorable to freedom of speech. I have no problem with the manner in which Chomsky has expressed himself--then again, I also see that Chomsky's quote is directed at more than one issue. Continuing... >The intended effect is to make us feel that such "extreme" >freedom of speech is a bit excessive and not really >necessary or desirable. > >In the above quote Chomsky implies that freedom of speech >is divisible -- he implies that we can suppress wicked, >obnoxious, and obviously false ideas, without closing down >everyone's ability to communicate political thought. Unfortunately, I think that James A. Donald is again missing the point. Let me help...it is just those "extreme" views which must be protected. Chomsky does imply that freedom of speech is divisible, but he also implies that freedom of speech *should not be.* Furthermore, Chomsky neither states nor insinuates that "we"--and I assume that James A. Donald is refering to "the people"--can "suppress wicked, obnoxious, and obviously false ideas" of any kind! What he does say is that those persons who form the power structure of this country--the mainstream intellectuals and the state--have the power to suppress ideas and speech. (Remember, Chomsky says "should not," instead of "does not" in reference to the state's power.) >Let us also look at the examples he gives of people abusing >freedom of speech. Notice that every example that he gives >are powerful and priviledged people who plainly need no >protection, never the weak and vulnerable silenced by the >powerful and arrogant: > >> hypocrites, like faculty senates who choose one >> particularly and usually quite marginal example because >> career and power interests are served thereby, while >> ignoring vastly more significant and awful cases because >> the opposite is true. And Congress, of which the same is >> correct. > > >Let me give a counter example to Chomksy's implied argument >that it is safe to silence dissidents, and that dissidents >are powerful and priviledged servants of capitalism. That's really an amusing twist of logic: 1) I have never heard anyone call a hypocrite a dissident, and 2) I have never heard Congress being referred to as a bunch of dissidents! Because Chomsky refers to faculty senates and Congress, James A. Donald automatically assumes that Chomsky views them as dissidents. A more logical approach would be to hunt for what role both faculty senates and Congress play in Chomsky's quote--i.e. the role of hypocrites who *are extended* freedom of speech, as opposed to racists and other ideological unsavories who "should be permitted" freedom of speech but are not. Chomsky does not call these people dissidents, just as he does not call mainstream intellectuals dissidents; none of these groups, because they are powerful, privileged, and *mainstream*, may qualify as dissident. Furthermore, how in any way, shape or form, can it be safe to silence dissidents if they are powerful and privileged! ^^^^^^^^ ^^^^^^^^^^ >I did not see this quote: I am relying on Todd for the >accuracy of this quote, but I have seen plenty of similar >hypocritical smears against liberty by Chomsky. The above >piece of catty nastiness is classic Chomsky, and I could >easily dig up a dozen similar examples of the kind of >support that he gives liberty. Apparently, Mr. Donald did not *read* this quote as well. It would be quite, quite horrifying to have James A. Donald "dig up a dozen similar examples." Quite, quite horrifying. >Is he a fool, or is he a monster? My question exactly. For those interested in what Chomsky really has to say, good or bad, ftp to the Chomsky archives at: ftp.cs.cmu.edu (128.2.206.173) user/cap/chomsky/ (note that there is no slash at the beginning of the pathname). On the Web: http://www.contrib.andrew.cmu.edu:/usr/tp0x/chomsky.html _/_/_/ _/_/_/ _/ _/ _/_/_/ _/ _/ I detest what you write, _/ _/ _/ _/ _/ _/ _/_/ _/ but I would give my life _/_/_/ _/ _/ _/ _/ _/_/_/ _/ _/ _/ to make it possible for _/ _/ _/ _/ _/ _/ _/_/_/_/ _/ you to continue to write. _/_/_/ _/_/_/ _/_/_/ _/_/_/ _/ _/ _/_/_/ --Voltaire _/ (in a letter to M. le Riche)

3 2

RE: PGP hole
by Jonathan Adams 17 Dec '03

17 Dec '03

Alan Barret <barrett(a)daisy.ee.und.ac.za> wrote to Cypherpunks: > > Yes, this was a deliberate design decision, most probably > > so the same code could be used to parse --- BEGIN PGP > > ENCRYPTED MESSAGE --- and --- BEGIN PGP SIGNATURE ---. However, > > this is a _huge_ security hole, as it allows the nearly-undetectable > > modification of PGP-signed messages. > > It's nowhere near undetectable. When you ask pgp to check the > signature, pgp writes the signed message to a file (or to stdout), > and that output does not include the {header/junk/extra stuff} > between the BEGIN line and the blank line. The problem is, if you are using an interface to PGP, most of the time they use PGP in batchmode to check the signature, and they don't let you see the output. This means people go "Check the signature", PGP says "Good signature found", and they think that it has never been modified. This is a security hole. Not everyone uses PGP to do everything from the command line. Plus, using lines with only a tab in them, it's possible to add seperated paragraphs and "normal-looking" text. > I don't like this bug/feature, but I don't see it as a serious > security problem for users who are aware of it. I do think it > could be a problem for users who are not aware of it, and who > incorrectly assume that the "good signature" message means that > the {header/junk/extra stuff} was part of the signed material. > > --apb (Alan Barrett) Here's an example: -----BEGIN PGP SIGNED MESSAGE----- Note that this paragraph was added *AFTER* this message was digitally signed. Note also that the line above this paragraph contains *1* tab. Using this, it's possible to add as much stuff to the beginning of a clearsigned message as you want, with it looking completely natural, and checking fine. This *IS* a security hole. This para was also added later. Test message My public key follows, after this signed message: -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLowcCDidu+MSuAG5AQFpgQP7B1K5uKAQBEdmAxuNGJAvl97GWYlU9miv HbBQbkPo5C6BsbaJvbzxplZE2YN98bWO2IhMOJdNfywaCuWnQFJGcRcZiGvDqyqc 0vQj0qhy37KPBp1CjrEf76neCjyOL4bWtz+BrF9tru8O7olGv61fGASpkpjL46Zg bFtb8UP0kV4= =D3M0 -----END PGP SIGNATURE----- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.1 mQCVAy5s+KsAAAEEAMp5v1Q/6kqmN3ZFejiBrK1rAgCH0jM/QUHXSbf2wkCCeE4g Slzp93pIhez6EJasdJFdp/QafO3nTKFjZ9ZZTClnPeMFjlATuJoA/gLsPuoRgRxv 2n9UWkw1eNg8cprfdK/C4oO53Sd4DxrctBHW1enVFMB4TeuLqzidu+MSuAG5AEYg AAAAAAAAAAO0J0pvbmF0aGFuIFcuIEFkYW1zIDxqb25hZGFtc0BuZXRjb20uY29t PokAdQMFEC5s+Qw2D9BFC0YeTQEBETAC/1+fw55S1hMBCv5vMOlGlbVSYcaf9QFz 6RnJG4hDXzVPii/PxZf9w5sXraZr39a/OW09sMPdszLlyPfR8zsihd4j4qCnLAjI v16XKU1ft85DEHjpwQFhWnYNCFSeGX5VU4kAlQMFEC5s+O84nbvjErgBuQEBXRYD /Ave3Uoc3GRfv/995Yz0RQDUmi4JRzo749dVtXBatODo1vr2209+fHVGu+IZtRx2 WCUKY9YSQr95XJuqxFsfBpdQ6pAyxov5kfecrE2uDrBqlQBCs4IAnMnZeE5FD1Cd d28qEO2sKAimqJjtcJNvYOr7aL2AFKjXqP1B+wD3Lnn+ =Cqf1 -----END PGP PUBLIC KEY BLOCK-----

1 0

AT&T "You Will" Sticker in Postscript
by Robert A. Hayden 17 Dec '03

17 Dec '03

Here's a uuencoded/gzipped version of the sticker posted earlier, but this on is in Postscript for easy printing. Enjoy (it's about 20k). --- begin 600 attstikr.ps.gz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a)&K5G.G'^6=D\M/K M)_E/_H"!ECU^>%\_DIP^'K_;>O&OV(5" ?-X_+M^@)-2@CJ36!N<WVVMS3^/ M/ZZ2Z*=I;?BG+Q^H\<?+LGX]KW]FZQ?'WZR"^S)HZKRA Z.?OKPKK?Q3_T&U MN+Q^!OUX9K2Y=D\__.^/X>7C=):_&FM,_/M XBJP#2=\Z.TO;^_S3]/+^/[8 M%'8;8'_\^/KGCSM^KQ^^_/3Q[?'Y]<]OCU9]]+_5__>OLD>&GZB'/LX_K!_) M/]6G_T?]_]\>)UV57/<KC"N$._6#[+[9_O_XYU?VQ./UT_Q9VI?_*GOP\4_S M.IC?7_E(W7_ZM,[_T]JZC0'=9U*)(a)WBLOXH8HA[.?".7#UPV;O^JPY8]I(;9 M(_M63A;K8#*_%OAUU39JK*VCSGPDQT>$*/DC?WI9_W^PGFJ\;8,UUG*(KV4Y M+#9#1-L,SM1J,FZ8"JF+W[_-7Z97GRZR)V[HXDIU7AT#];+^?_W=.LMNHORI M__25YI& B'[WNBQOI!K<FA_G:NKD Q\O.*):I?ZFU;\2K;ZBT?]_J^[?_"B_ M&KG]**Y)!S_*JDBJEV]<1;9/Y)+%IE+T_CLYD_]FF\1_H^9O5*&-X3>K_FSK M$BF1#R^K[FV3[_OK'^>/2C"_0])D0/ !^AA?SIHEE0F_9,L.BQ\@'W3Y +^L MEWDR"/_1O$P; WXO$S4T;@&P*E*:'O_\^+O'7Q[OG_N/;Q]Z:<.^/7RQ.P/2 M>"KDB.>_4PQJ_9;TOGMDOS5Z(W[+^K,/!FVFY$_^UY>/F\7]QX_CZS3+B(&V M8JJ)?WYE'U$CJS+:A\X/;_V?YM0A]#.??MGG?S%'U<\,KJ]+16%_P10HZ=CI M*.TT2*4UK^1ZJP4F7+,=U;B<MXXC7:G^.CH.BTSZ4,\QJTE]6P>T_//MQ]<_ M?Y+#A0^DPSC:@EI0M:M?TQ4@BJ9YE%4+ C+((5/_P:+^@TPLRS/^_;_7T)AE M>6-KJ%[AZ[(557K ^">R3.3K]\7V?;^L[^M,-.,*O:BVAXIY_UO^$\7VD'KM MU]\OYH_Y;\'QXWQ]'=<?S[X?\]\"^_'*E?Q]/L;^>/]MMC:4Y<7ZX_["CV5O MU\_S3OX6$G\\;03S-@+LN=L_TPU(=E=IYHVKYQ!H8%A_V/L:H-^#HP&)F91: M'<9N^ST8#4C@YK6!*K8!^CW<;8!^3PV)[34O+S;4HM2R<GN]UU"Y_E%OK]30 MIN(;Z/)U_2Y;%5 4@U)_(=H=DFQMM!JDO2PW,4LJ=:',I]BLZ,:R?)U*7V]D M)P![(]F27\C>%*P1?+_^2%%7O1-;[]=G-UA:V2O #V3+ZVO6;PUF*\5<-C1L MG\L?B!H;'+#!:F,WGR2[:T.EY']]H.BW'B@34B'_]::4RMC-&Q[ZO4 "BWR/ M0T3B5)3;JQP.:W?5J)8_5(!K++"'Y0Z%(ES SKLT"V) $&4#U=:@9EU^OB(G MALUBJL_%]IP:(IKW?GN5T"A** 3"B'HBA2-9%BA!]7Z6/5K8!]/ZP(0-MO;/ M<U12T>,K]4A):S0:'%F#RR8=I2:UT4,)OL1(6L@-+(:5I#@SZ96(%6ESSO1H MPAXIA2P,/4&L-/BE ZL*U87LD4(]PQ]63#KR@8XPP(&=[9]+]5"SC^S (R% M:M-HW6"YO5>@MOB:8X,GK(# 0OW)&5;#-L\)L?=4:K3&"FV89#T7U","D; J ML<%BFX(.X)M8*6$ 4ZR"_;!BTJFWZ5MK/#Y'G\NAHGJD,)F.+"C6IN-[W6## M"-4,HZ-B6;"2$T/)%#;?S(W$JD ,<ZE':FRU")X-(PEZCL_9,"K0C&B,"$P< M2UFV]_ @/1**[,ZR<;)AA!1YUQ6ET0 =?Z@4M-G%O_4,T&#Y,)*>1\T4E6,D MM@[D-4I-?J"D43!L>@-D$QMJ4 T5V+%0+"XHA8(U(+"GV0:!G!1RP0B1-Z)Y M'=@/:VPP1XWND&#->M2:]LB&2<,4$J<EA0DJ:MYNKSLDW/CW!J@F)M1@MRFB M?%Z]+JB0&@M2S&5S,J6)55ATV,/1>*[G[V'W3N4GJNM6#"P0-)M?N1% J2EC M3QB,F]\HP9?O#VI!8Z]E&!X&;<D:Y!@(;)C S7876<S(NA1.AT-$/=!M>D0/ M*D4M=F_%R6I+4I.>ZX *B1-C4>R>K>H9.5>FFO0<(U/,G$64FI5%=.+E1+J- M_@9[U.\LZ@?IAR:+]394=A9I]!<W61R C;%8%H<=&]WS7HZU$<7H8I'_T,DB M&&+,D<4)6>(LXNH@P_='%@GLT<ZB,B,VUA#+@NS2P%FCGG0&:SW^,,A:N0_" M(&O+]IR=M1IY[R-8HT$[,M;D^PDV+S5'[U0U2#]L&6ND1V4B:^1EZ-F$6*$9 MN66$&C)L^(4@#>=J$&(9U::@(4(_V'DV6%[P!YSECD'!5T>GP6BRS'U)=#(T MRQ(C[1.V#!N:OVI\W]A9U_Y31=.1 P-!J\D&&VC9+,(@V<#.V(/-/J-*+U9A M1#UD#>@&&\*,>E2S*;EC8NYB,22'O62O',0:/^<85@84-7HC!Q#%T>VEE:03 M0Q)&#7N7K=*K&.OE<5HB-1#:K1D-L;=LQ5@;/[0TE&E'"WW"O(I02!9L4.+7 M6(*QH..&RUC@"39KG+"LF3/J!Y.Q7#$6-99<LRL+!A4N22N&I?F<7M/R'_)U M6,7\I'J'X(2E?$]3MA ,1"N8#$O^7&59U)S K!TL6[$$RX.U :;K^X9_#P:8 M%L?**H03EN ',Z?/!<.R8CW36$(LF :6A2DDL+#B4DPOEA +I@7+@S\.%I4W M6:J.#CQ-"D<L@8%9&]-.K&+J%:0)9L_,A[" ;\42(L!L'/ITP!)VBGXP0UA" M+)@&AB<L(1;,$)80"^8QRG?&"F+!#"BFLZ'2([7&AB5$(a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a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a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a)GX.1L7NF.=8';[$TKMG I#* B/ A%&.Z/IY61#X?1 CD\+:LW+& M@TV< %6%M1+P853NI9P5 9%M9[QK&P%J:(QEP44 7!12"8!! ;&JL#I^/(%8 MC/"U*EP$[F*$R[&JY&>S?"RT>XC#C5&%+1\H! A,>X,; 1]&2"!;&$8U,_HF M1G3TY4@A0 O$B!.JA:833982",@,:J1A0.%, $=<PMB9"&@HH(T01X(08A2 M)*&,>H1'-14E8; T[[6BW83 0@F+MFR4&-@M,W@G0F!0:O<'G"P1H8EAUV#\ M2%L^%TL4Q',2@A"E6$(0HA1!:.!FQ,>2X4RX-;O%C=QI+[>_4XHE!!$LM?L6 MM&:I-0F!A1*O;M[%$5*:G0T^2HS0@C%<*R'?H.WV37"-G9,0."BU>['R.$(0 MHA1+"/R45/@PWZOGNPG!-99T"I8F! %*#2N3[B7$!RWE/O0)+&E"D, 2$4+6 MCH3@+DM\T'HIG0G)\&%>LV+E$]OQBV5)8\=ZN$T&X*"4LP=#A ;:[V]]E'86 M3X0&]KUWT*)FZYIB7D(0HA1'2-#]:U9*+NRLA&R#%B\%VBC%$@*#4KLKH),E M*R%(9,E)"!R49G1&8[!3*1"0P-*$^[-60A"B%$L(&*4:P4MBB<TB42S1GH"3 M$#@HE<==42^AF3(0*@2O"K"$FY=V0A"B%$L(')2:W0$+$BIIT,:R)"-=E8L0 M."C-N/4SXYHW2 A"E"R$ECT#82<$=UFR#5HKI5A"P&["26$)=_HTH8[\;!]+ M480@4W5)5*C92LE"*,?*.P="$&9IH/PD@=A9"8&#4LUN8EIB"$&(4BPASZ = MJ 08IL"(UD<(D!)EKJ2P=" $(4JQA. N2T0(&*6&#848EE M1,<'K8\E&1!O M0MC!D5(Q$(4$ @V?('VLK#\L^A !P&MT2Y-")($.@\->C)((@(M"*H$8C&1V M6!LB< >C8GM>#%<P:O:&W1@=**02 !<%1J#<AI"? *2RX"*0@E%];-B-4;G- M"F*,P(@**&D"L1@%"0"C4&V:G54^%AB!:O.GQ!B#D4F@V2,7;HPJO*%K"F"$ M.X!' N"BD$H 7!12"4 J"S$887ZMF.,QTK/) FL> E!B%(L(;C+4HKX,8/3 M3P@LE 0FO,5B1^FPT2Q1LFG."-44H; X6B7NCJID!4R DU<\TTW5^N;J&J^> MEI^4<+S26K"+[64/*/_?V^,*;Q?R=]G>XP)9+7C^41IE%V%(I;Q?TW<D# [* ME(Q*E ?LN9-E"%">,#<BQ+*^PCF:,A(NT+P<P$ZB;"%<\,2!:,HXCXTF84BE M' +;11GS^ZZ![:7L SN6<HV:_32PF_T$@A]L3GDXOEX#VTK911@8Q1)'\V6P MDR@["-<L5IL$=H>95$E@'RB["/O QB7HD;(/['P_TQ"F[ ,;EYAY$0DV)SQL M[Z^!;25L QOO8-%CJ>*4KX(=PS)=Y)9&V0=VM_G3>1E#V47X"MA6PK\(V$DL M<[!KU&PLKT\!\*\'-D5K#H0AE?(5L*V47813P;;%;!LR(^1X-U\#;"=E%^%G M@6W=\C$ITTF[7Q[L*,H^/SN6<HOZ92-<L7V1:#\[&FP;93Q-IG*WJZ\%=DMF M)(DR6_"-G! D@NLD!"%*?D+%0@3@*BN^K<-VR[_.NBM8020+>+!;G9ZJ0K&1 M%&Q.#<-53%C#<I]DPO2S8MFWP5(;UN(_MGRU84NZQ[6&(=3EV(8A%0NCX1%3 M9V:X"S(/^QQ:3FBX8CDX7(_L78YM&,R6+0WWVPZ.OV$(=3FV8<<0R<4>4SH$ MG_BKV-]OQ\XF2T\:([^-]V3:],FK1Z)GM 2C+(S#@L)X3H#9Q;6'54(/>SP( M/@444D[;AQX)Q_L,V!<F*[;/\542:1;><XCL^KAO"%M[7H$+O-3WX'D P6_& M&/ AC05IKZU8'L!^*FM<*GV*/D$D2[TQUDYCD/<H]SUH?$Y#I; UY!G=IS&6 M;:%I!4%E,VP^Q5QPBYI#T%'CE,I0[)4IJ&3!DB0YL U AE?L>]V01<D4_R6J M0,VRQUL;^^#F7YX84Z[+VN@\6\#G[PL(B#DSQ8ROE?D*Q@<._5%L"@N;#=O. MB!'S@<W18NS(8;>/:,_[DY*"16OSP$SBTB/)?[UX^._V\BKR3'^![![9!X-_ MO"1)5!&].[R/,6P1PT1-V?5LL$4'F/+C@:9B9&SU>ZK,)E78V:+PO'?<.7L( M#E9R_WLE(,Y)"^QD2G$\X^=GQ>!DN3I!>J<C8Q:I:6*D](\*3[D6[#!/3SV' MN*[K8XO8<-6R<VS29LF=XQ0L7 U6<@593-B0P-R:V(9:/#U6XR&O8HYO2$Z: MO##G+@*(,>R&_N1/Z)&8[1Z<-&Q^C1:>F?;00[Q@0IWIDUV5V?,+)NL([&GG MZ6%I&VNQUM#:<_ / =5U#"2HGA=;#R7(LC,%;GINFNWH^C0<J>:CX:DXY_X\ M<@!;S2V$\9'L5;/!WMKKJF+LR2F[:"+9"UK(6.EXOX<XTQK&#V+78_:&=_RD M9O=XHK??-%P65"IPM\&+7\NE!PYQ>BQ O \I8J?I*VY-4 4"SFA%,\F A[O' M#4\533W@"'8@96$7U=P8JPX0\#Y,Y[1T#=P8/>*?>]?]*1H=:D@!BW76I-TI MERT;K!(V8&VXKE*;&L^:GTH4>;X_BS]&(3-7< '2%?$$@\JS@4W1XG!@2W9S M85. L>[(+:(/+7@RCA%7LLA)0+%(&PR3=-@QO:7$^C4%!L,5J[Y9=O"9D<M* M"0'I4-?GK?R%3"(HI[7GE.:I>PX>IZJ(L)@I$Z05Y 9[NFR50%0=K7)=+I6U MV55/3WM?CY)<&(9A2ST#[)HLA[*Z?67#>E;MR=VVGA63;06)/I \O2(+N$A' M<VU4E&ULPW#TG64.OWQ XE!*;Z.[VE"Q;9JH42U+._8)#>6+ V2;_CAC3' > MU4H:-?:PW"+%4C=5L7,L@BM!/?80+'KB&_W.J0LNSO6DX;B<*&H,^TAIR;![ MB95A!>F31X_$Y#+^6<(D<!J;$#\T%"L8^I'[UP5FU<G01BDM9 PK([)1%BYC M!U?FL)BY7R38)!J?:AC1WE&]?1'%YF #'SQ.)^'0QKC.7"%'RPP:$]"\I4=9 MK/%WK+!+#*')H$..5E+B6@FN1\5^)L0*L VGBL>S"T_H-"9@+GA@/!19MQFW MPA:J+UPQ6$<(MO(-D<B0F 9\VA)UU6I*BK_*(P'OKLS]*>^M#>575TL0,!4B MT'!^PSUVKR#9K#!@\J2<JF6XM6IB-=^PD,48,/C) 83897O4CI\Q\@<L#5YB MS2@UM[6&9N>T(8!#1?1'1Z*@,=698VPK"JN\$1W>JA*D9-T\N+/>/QE_A@-U M65:FK+ X-T5%Y])%#)X1/(@(^Z@JGK(7Z[Q7%UOU7%TW\Y;G?R7(8JLQ6@P^ MC++[-LE:^52[+K%+BMR<LIFG$?S760J6\@<.1X BU[6GADH^1$I/(^9J_& A M/=Z&C;5\"4E-7 $ZIJ',KE,4\:H&WUB[M/4#V:6-S%,/F\#<7_:QV,&5J$-" M3H3/&SFPU+JVQ2Z;6XCQ6)_14.QVM(#LXE;AU88<#5=R^5698)O+@F$+XLEI MB4MJ7BS6( ,CNR /!(#SF$6-S<[87,$\,H 0U&;K7ALDY--X/S<QLG4]CVD0 MPD$4&5S(,'5(78!3;J\'2?8A/7)%W+O0$%D2]MB\^[2WW9JO;4;D_"7P4JX" M[T+FZ>D*Z &E5E6!WD2MON'F&L3GC139?E6A"K<N9W:4KS#&Q(\N^=E7]F<S MO*Q#]QS<7:^JB^NU>/OL:$B&X6/ K99G!%E\2CNS.\75[HRC)TT>XQ> ,1SP M-CS5\+RQ>JKQ7]F>L_C9LN2%NH,ET*#<,79++8O-[3-G'8MFJUL$.KSRB_5H M0$N(a)UB.#N48!RTTF(KN0JY5HV.1>@+VW<.RNW"N2=]"HUW'O>CTXPOBQZ1[Q MPR304-[N)UJYTAZ '^6.#=A9H=FWJHVM9Q&35_M4]SAQ]T^S+K?%N.D8\)H4 MF63IE.+DBT2XTO"PI'-XFPRR:YN7F9D7F!)C^^6"=3$!\(SN$$/E) &5F;K9 M2%W 94JHI"5[9<&$2^ZTIA6!#-;0'MO!/[(YF$F#.669Y4U%OYNE$;7NO]R0 M9[3G5$%FQEN_2KRE"JM9CC/8!ZD*N(R&R)<8A;RSKO5N^22?BX#$K%X1DZ*7 M.BEF,<E>"=9 #>8)]MOQU!5Q=#&;'-5+(a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a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a)/68X.9S0/562Z$I"Z?'8]QHSH9*^#/48UH 0"0PU$E/AI;4LI#-5?3?P5 M2T*QK3 IHY/48$HQM9X\I2*'BY6JDD.L3XO51IYL$3W%C]H]?T]@S1[*C++K MC2D]L.@-4N)Z<]J7[5RA^CJ@)\%U+D3.&F4@4EJ!H5C#5;T"S_FBW'6<T[8[ M&C,=!4NH?=5:&LEI^7<2='DV1[-=VJU2J[0FSWLL/ZS)IB+#54TV%1E"0;C8 MB$V*9IL6DESJC(a)IRQ6[Y)._47$JUNAJJS^\H9/"PX%W-3BKME)F:O$_MN<9H M"6BR:RH_*#)<U>30)E1Q-9H,D9I<HTG.ML,"X_SD<C/NF=;U [,V8N$S;-%G M'I^]*WIK+1+<%^FV@BW*Y*+&JO<8DPV;7+CK/)!Z0.R^1TA1(7;;RZVHZA#A M#/<VPXOZKH6\K4=)QZD3LJ-WM0%#;\C 8>7%\%1-:@-WIVK3AXS1&UN/G'H4 MJS=38.%7Q=R\9-6WIU9C3$T\R?9RH;NU (O89\_L4;+<B>RO-J]YQ>Y*KG#M MJ:'8U>ZH5;)P,1\B^6ZQ"(L@J,BTCCIT=R0(S_"QS0C[K8$+UPV^DN!\U68[ M PF01>;-.M;[6*9?C36][L<E:"X"DK.PK3(0,JI3L_S2JR.KY""T;>H8>[BO M1M<<A(=(?@X=RK/:1<5&A#Q#N=!)J)GY0@/KQ1@#-#5T&VC;$.$-?/4A@A"H M?9+2]$9,J[?LI=).P-*11KXK.@ +%[J 99_K<\@G7(&.(%R=/?@0&8PTZI39 M(S=#]3X-%L<3T"76(,M:CANPPY0$7(_A58]""A,OU5!S/":L\>J/1\MTGD1M MXP+8Z::,G4GGAY.$P;85+[ EMD?@E7_M8@JR0,M)$@L[9]R@R]<Q0?!#F#Q4 M+PAH'MEJ]J-Z) #UGF<EF'DCKK-]WD@IY2:I'O%SH0Z )\KQJWTG6&Z7*[R: M#4T3(Q=.!PS4(a)3GD3NE8A#.1YS_OFY,B9]+!&QGUH5Q#6;5P6ES3AJ1CGL0\ M" .G^LGI1-"2(KHTS[-N7XP.^CH("#VTV KR,+9,Z55&&0RVE:BVK@4P,<_[ MB7I1L*0E>K]8I$<GR@M@1^U;5FW )KV>'7 ^20_7M.-R=U>+[)&MX&UHT^!R MU?.8O>S[!^%I4[S%HJ7+7KQ4[XYFK.Y!Q=2"3TT"SGJADU &/KKQ\VZON:43 M=RH4OU4_:GR 5VQH?.H!(?V@T7WU$'SJ62W!,A"<YV:SB(K6%=Q9Q]I8BZ8< M.I@;BESA_$8GH YZ5E!-EM&G:(:>5>>#WL=9I,?B6RQ37+VG?5J?GI448ZN8 MU^:R0_4QW8/KF53H*;\2APSN^*7L&=W>%,]#YT7N7)L2?1+J=BD5L>?:4K4A M6L9G>)N>DJK2/P@H8(/5EPJ'H1LQ[[UFH?J,;L*9+=6%6NR9F;79AB+L8D_J M.E2H<BGDU6O3TJ<C7]#E:<E>3H6\6D<S>Y9F>[,/V>:E(,7D"HFW,F8%A<GH MOJ.2786>8]TCROA96'&W85_@B)$OD/G"#]>RSEICOI5V!Y:Z=$ZE>T:(]?85 MSM'E,)Y1'S+U]L6X"P&O'(4U&XI7.JSB)5,^L:!@CCHG].;!&+$5354;&U?, MGU:$I9PQ+SCLP4S?E/.120UY&[YS_]K7NQ(L-CN#'4ZAHIVZ'M* USAR75'7 MS&+T3]UVQJ69I_3(,USR,I6U/#7#Y:LMUU.#+16"KY?KU9ZMJL%G-[_T/0-_ M_7ZJ @FZ99E8R"3H^OWBA4MH(JV!P#*P&G&OS8<5?EZ4MNGH=!U:EG"73^KJ M,7C+>>&OHZ$';,=J(>*ILD) >^VQ!E:I]R4MSR0T%E4GN#C66[3O;,!>QL M9/AA1U69!E9=3VQ^43Z[H !L! _?ME3/&"](%*/1&)W*H'JL)>'(;SQI+;A0 M6><@?G GF\Y02#J3;99T4+:F1=>/"M^9E[GU9DT6FS:'\FNM=6ORO0!@4M&R M0V#<=4ZVBNC)J2&11=ZV$&K(-M=7Z$B5J (+.NGE^?*;+>QS)2,JJOR5YXJ0 M]/QLD9!6'7TV*RG[,'E]YG B3G<89HZ4CV#-NH"]#M=%@EB%B^U1B**KX2*5 MM1"KT56KGG6_B%6JXFHDXJN64$TN[A):-64W$RN?EC)\NI]V+.]:@5^T\FE4 M[#8U&3[J$HY;+!H-*?\($PB:V=B6IOUKC"?I>]@ZTQF]%;6!2"6,NJ,N3SBV MX/P>KL:+4@-1T9(#AZ0*]LHDE6- K\+HLHK@++Z(5O(P20G6>4&'+&WGP3EL M( +<*/#A0FS-)7XEM?RZU$:]\$LQ_+;/*Q,CWZZ?B%V*QF"1^?P!R*YOJ5ZZ M5_2R&3$<B&9A>Y CYA^O4BQ&,]LG5LR7ADBTC^W*AKX4UX94RE?BV4E)NQ!O MR-1R7KBD9TJM]$M/)YS2L&F)".#(C_&QS=-0I_A1%NGM9S[U"#64IP2B7(/2 M56_<NBJ !&\_.<86>&]7 S!'<:(:Z$%-X@]>91FR[1BMB=K3OW7598HW\I1 M%$V0;1XRI2$A@$L*Z[^G[:^%L&F87ND3=09+Y6+WK=O>HT=Z\V3:*>C4F(K] ML,3-X1:?/1"$(\5NM&!%$=#1:)Q*A2V4Q-P;U4ZHF$1E; 17=G:WW4# ;"AY M>7V]=5\](&\/+,Z]Z_#9<QY2:@#ATG+=K#S@C0ZF%IEV?@Z!'0=?N>O<%C]* ML8XU*]!)B<PJ<8#7>\0=X\/M9[S$C'-%R0IRJ;%#ARA*1TIZNQ'F^3;;H0(X MCQNEF'11*[OM3)]*F(ZG#U2(M4NY84"DAEB?DI\=XV1%IU8]<Z?&^C[;]TZH M[.I^YQA=4X1G]@_F(TI_N$+6V?&VM]R8.;+,?G_?LK^7R:?[Z<IFWR/BE[CI M"J?]44&799\ TH]X)N\<1X4Q?!&M2^&,9R8Q1]>(XGJ4[_:(]MH$779W58\$ MO\A-/5@;M=8&(__OI#=,;6K4(WTZC.L-71)HTYOH]+/4H.^M@.:MY--;=XI' M^Y>.'BE]*6WZXE(7L.B+Q?'49T9RXQ2+OO@.//K!;F$T)TS*:]_5 ]WCK'UF M/N17N0PXN3C'LPHI73H)99N6R(D0W;ZGK_3#O&RS,]3"-"<#./2#W_[F4H]R MOW!Q5TCTE_5Q&--\C*$(( 26YK'GV$_34>7X0?ZLAD0L:[$_+)GX,YOXT8FP MBI]7\)YBQ,^\D&OBK[+S#9VFUSK$C/ZK]?R>OK^65"0HRL^^6_">-T2KGE/. M_\36'-PWR)B:Z />47H2LA*^681=#WJZ"+?+CM>L#&#H2?*H#RV.8QI*JJ13 M?8T>>?TH""<,M&; Q3RVGQM+T6S)K'?T^=3BU)!I1JQ'S<T[_OC]M8*7+J#% M\60Q;'R55%G,S 07O(\\-DGG=D[$G9V(:'MT]TB5TJ,F.]XC;KNC=G#I$;_< M)J1'O"'3SGAK:"RV6"087>;1/_/VW-QPF[FW,J7:[.#HO[PH-B?(_*Y3"G<7 MQ0%[I/2G#]BA4WF'6_I#Z@.>@HE1^D/J Q'ZXRAZK_1G_JLMCD-2_ ^P.*Z. MP90D/5*-=\_0(W,^*QQ'AKZ*'N%\)K)GI%;=.M_O3)>-G=<N'U],W@7D[O&0 MHC>FV@"+H27IC6E^X*K>F&H#:?9'X#ZVOB"H,FUV%>?%JAVMVH8E!,#D%]UY ML818,$-80@28"Q-S[ZAAQR_@XON-8@KX1$9%HJU&% _4\1O?4G3J<"?4>$>G MP()#YZCN9=BBP\5N&:[7IB5FO6%1#0T)I&-"%R8=(8&;XTQ# O&8B#(F_^AV M#21XAG7TY1_%3 "G]+. Z\*3"DWUV*M7 9-*=V>H #O$?6O:!H_)2%&+_!GG MLB^E>E[*8TM*VHE)AS5SM;A:Z(0FLR0/N\@]32W 8RY&MF41M* 09RX4-ZU/ M+< R+5=75@%PT^L7"8,VKL&KMWCZS,A1+PRU&(Y7IAW48B;7+W46H?*/SYQ% MM!^9I\XBP7S(J)/.SYA%@ID;=Q)TG0TY*/IF$2K0=9A%!-V%<4D=GNUH[?H0 MKPZ4G*L"H"+E!(LWQ@V6G:Q+6V/@*;I57>U1'G8:=+4]!GI>\QSVRZ,^<U09 M3A[UW(<,C?HZ)CX"5P*\J:Y??G7NO[7V!X?/6#K$7QUOBE/BUZ/_5R/^UIS[ M74OT]NI82][)BBWO$.6=W#U19VO(*_8RLY8*^Q6*7U]5'#/Z^YBD>'C&J<R4 MXXO)6?67:_N!8?2%1_S#N6B7H/2'#-AUP[\*UT^0ZU=&J,&8>GSQTO(=+I1U MNGQ6-*JG=.JP28S3:K&3U ,GH:QBM\8'KHY^&O59RNB?4DWM4];]?]6%'S_+ MW<!=L?/CB^,=HY^=;ZFZ)O;,<D.E*?8Y<IGUM+!/1H&H6^<?8\]F.0HH=*>D M%(@4MV#A(.L@AZOB-J4-5\5M2AN8N)? Z4+?><C3\<7004KG@1V(* R4I=JC MV/(I-I]3&__I@A6@1G6UH53C[W7]"B-)*60%R.-/,?Z'HH!.AQZNI)K%QFI] MJ8S!<]FY_;!R-\=*$USB3)6F+UIC2SD+1FMR%F<,2%'O"A[8ABM:G+ K&C)N MXL0N^+4WEMVB(a)?!.\12UZPX16$2I 'BP,).8O0,9TK#(!Y=/?O?.@V MUKM) M.NK<;'7%[,*=@<J?@ZM2PO*%PAQK+BDUEF.P5G/K.Y@K/&74LM )WZ@B)5GB MG0?"[E/W92A+P]R*IQN&BABI0H(=\DH5/&*MPQE1>?>K3= -#5HEI3HQ/]LI MI:@PA\]"5KA7LAR_/]SH=;"0II1R1\,S.]O?XLF?U3>:VU MC2AO-E22)\7+ MU=6&KA8'[)C[,P*3U&@Y=H>+F,,-7]9Q!^<3&-[Q5F?'RQ46HZ'3)6UH7JT2 MM=VRI^XY=HKTP(a)F6J-WA.W=GV YX]]U^I>S)0NJC+AEJ<*1E%%%C3>+4.'*/ MZ2J#B;8X\/($7;J +@BB,Q$=$P2^SOW7"-99]XX2LWP5\)35<;J!R04\74Q2 M>=;]44-#XE*P"A\,>$5P@MT!51>SN8 WC1H!/\6>\8N>EFY6]52 J_M;(+-? M9)<,.!AGT#UA5%&Z@&8^I+HA#TLVJRH+>&C0JN%D:I:[F77!>+8OTIX?3<F0 M9\>+<0YQ2+H\D4SI@GA,L9H= [0E4K$#C3U2E]DUV .ZC*Q%%7"8DJ6^4B7& M%YS*>4,I42RV9AE:E@!V6&57QN17(\ <\ D_=VDVO^E43X9=()'P( !@HI[Q M%4_+:P%0MDKG$(#2=,#ZZ[&FX\I^OP)TS.QW1=5L+UO=U$0QMBA &9["\$XZ M\ !JB]9P2=*EP+DLQD37[_5T_9FQ0^RPU<M@9"3J CBQ=8^<\5O8@5WH#IH* MIYXZ8K%<4\T?\"O>(;R#*8UZL=QL.*G+%)2IG9A"\F3WR8$/70 <4QSX4/4= M)X=*]JS">Q"*?4=44!TM/5W/[A[P?SF6XE&'X NC$K/28KQ'55;(XY<CZ._S MS>A139;C]VM# P[2MK#<(( W"BD:*,73]Q.>SC"_N/;/T5#O* F>W-#3>G2K 8H;$#^.:;/WSN7S[,G^'_ ECQ_:U8F0$ end ____ Robert A. Hayden <=> hayden(a)krypton.mankato.msus.edu \ /__ -=-=-=-=- <=> -=-=-=-=- \/ / Finger for Geek Code Info <=> I do not necessarily speak for the \/ Finger for PGP Public Key <=> City of Mankato or anyone else -=-=-=-=-=-=-=- (GEEK CODE 2.1) GJ/CM d- H-- s-:++>s-:+ g+ p? au+ a- w++ v* C++(++++) UL++++$ P+>++ L++$ 3- E---- N+++ K+++ W M+ V-- -po+(---)>$ Y++ t+ 5+++ j R+++$ G- tv+ b+ D+ B--- e+>++(*) u** h* f r-->+++ !n y++**

1 0

Cypherpunks meetings in other cities (S
by LAURENN%smtpgate＠earth.wri.org 17 Dec '03

17 Dec '03

Greetings... Adam and I would love to join y'all in New York on October 8, but we'll be in Boulder, Colorado celebrating my 25th birthday. Anyone up for lunch at Old Chicago's on Pearl Street mall on Saturday, October 8? If memory serves, they have a great view and more beers to sample than most any other location in the Mid-West. -- LaurenN(a)wri.org P.S. Adam will still be reachable at adam(a)bwh.harvard.edu, but I'll be receiving mail at lnowlin(a)igc.apc.org from Oct.6-11. I won't be able rlogin to laurenn(a)wri.org.

1 0

RC4
by gnu 17 Dec '03

17 Dec '03

> SECRET FORMULA POSTED TO INTERNET > The RSA encryption software RC4 owned by RSA Data Security, Inc., has been > anonymously and illegally posted to electronic bulletin boards on the > Internet, perhaps compromising the software's long-term effectiveness. (New > York Times 9/17/94 p.17) There was nothing obviously illegal about the posting, as far as I can tell from the outside. In private conversations over the years with Jim Bidzos, President of RSA Data Security, he told me that RC4 was held as a trade secret by RSA. When I pressed him about why, rather than patenting it and revealing the algorithm to the public, he said it was a "business decision". Revelation or publication of a trade secret is not illegal; trade secrets are protected by contracts, not laws. At worst, RSA has the right to sue somebody who signed a contract with RSA, if such a company disclosed RSA's source code. But it's more likely that the revelation was done by someone who never had a contract with RSA, by reverse-engineering from widely available object code. In that case, RSA is unlikely to have a legal leg to stand on. U.S. case law on reverse-engineering is spotty but tends to support the right to examine copyrighted software in order to glean uncopyrightable information (such as algorithms or interface definitions) from it. And there's no evidence that the reverse- engineering even happened under U.S. law; most countries are more permissive. Since RC4 was deliberately marketed as an "exportable" encryption algorithm, there are plenty of copies in countries all over the world. RSA would know whether the posted code's indentation style, block structure, variable names, and lack of comments matched their own source code, indicating that a source-code nondisclosure contract may have been violated. But they aren't saying, which probably means it didn't match. The lawyer-letter that RSA sent to the net was mere bluster, similar to other threatening letters that RSA has sent over the years. The revelation of RC4 could help, or hurt, its long-term effectiveness. RSA has always claimed that RC4 was secure if sufficiently long keys are used, and its inventor, Ron Rivest, is well known for building good ciphers. Revelation may actually encourage the use of the algorithm, if public scrutiny reveals its true strength. This could bring not only further fame to Ron Rivest, but also fortune to RSA, which owns a fast, copyrighted implementation of RC4, and has plenty of experience at selling cryptography to businesses. RSA is not used to operating like an ordinary software publisher, forced to actually compete with potential competitors rather than clubbing them with lawsuits. But it will have to learn that trick soon anyway. Its main patent will expire over the next decade, it never had international rights anyway, and it's squabbling with Cylink, its ex-partner in monopoly control of U.S. public key crypto. I think the company has a potential to leverage the customer base and cash flow from its patent into a strong competitive position in an open market. John Gilmore

1 0

Bill of Rights <fwd>
by Al Billings 17 Dec '03

17 Dec '03

Something that was forwarded to me... ---------- Forwarded message ---------- From: pod(a)lists.acs.ohio-state.edu Subject: POD E-Mail Bill of Rights Date: Tue, 20 Sep 1994 14:55:05 -0400 Subject: POD E-Mail Bill of Rights I'm enclosing a document put together by Frank Connolly at American University that is the most carefully articulated document establishing networking protocol I have come across. David Way ================ TEXT OF THE BILL FOLLOWS =============================== PREAMBLE In order to protect the rights and recognize the responsibilities of individuals and institutions, we, the members of the educational community, propose this Bill of Rights and Responsibilities for the Electronic Community of Learners. These principles are based on a recognition that the electronic community is a complex subsystem of the educational community founded on the values espoused by that community. As new technology modifies the system and further empowers individuals, new values and responsibilities will change this culture. As technology assumes an integral role in education and lifelong learning, technological empowerment of individuals and organizations becomes a requirement and right for students, faculty, staff, and institutions, bringing with it new levels of responsibility that individuals and institutions have to themselves and to other members of the educational community. ARTICLE I: INDIVIDUAL RIGHTS The original Bill of Rights explicitly recognized that all individuals have certain fundamental rights as members of the national community. In the same way, the citizens of the electronic community of learners have fundamental rights that empower them. Section 1. A citizen's access to computing and information resources shall not be denied or removed without just cause. Section 2. The right to access includes the right to appropriate training and tools required to effect access. Section 3. All citizens shall have the right to be informed about personal information that is being and has been collected about them, and have the right to review and correct that information,. Personal information about a citizen shall not be used for other than the expressed purpose of its collection without the explicit permission of that citizen. Section 4. The constitutional concept of freedom of speech applies to citizens of electronic communities. Section 5. All citizens of the electronic community of learners have ownership rights over their own intellectual works. ARTICLE II: INDIVIDUAL RESPONSIBILITIES Just as certain rights are given to each citizen of the electronic community of learners, each citizen is held accountable for his or her actions. The interplay of rights and responsibilities within each individual and within the community engenders the trust and intellectual freedom that form the heart of our society. This trust and freedom are grounded on each person's developing the skills necessary to be an active and contributing citizen of the electronic community. These skills include an awareness and knowledge about information technology and the uses of information and an understanding of the roles in the electronic community of learners. Section 1. It shall be each citizen's personal responsibility to actively pursue needed resources: to recognize when information is needed, and to be able to find, evaluate, and effectively use information. Section 2. It shall be each citizen's personal responsibility to recognize (attribute) and honor the intellectual property of others. Section 3. Since the electronic community of learners is based upon the integrity and authenticity of information, it shall be each citizen's personal responsibility to be aware of the potential for and possible effects of manipulating electronic information: to understand the fungible nature of electronic information; and to verify the integrity and authenticity, and assure the security of information that he or she compiles or uses. Section 4. Each citizen, as a member of the electronic community of learners, is responsible to all other citizens in that community: to respect and value the rights of privacy for all; to recognize and respect the diversity of the population and opinion in the community; to behave ethically; and to comply with legal restrictions regarding the use of information resources. Section 5. Each citizen, as a member of the electronic community of learners, is responsible to the community as a whole to understand what information technology resources are available, to recognize that the members of the community share them, and to refrain from acts that waste resources or prevent others from using them. ARTICLE III: RIGHTS OF EDUCATIONAL INSTITUTIONS Educational institutions have legal standing similar to that of individuals. Our society depends upon educational institutions to educate our citizens and advance the development of knowledge. However, in order to survive, educational institutions must attract financial and human resources. Therefore, society must grant these institutions the rights to the electronic resources and information necessary to accomplish their goals. Section 1. The access of an educational institutions to computing and information resources shall not be denied or removed without just cause. Section 2. Educational institutions in the electronic community of learners have ownership rights over the intellectual works they create. Section 3. Each educational institution has the authority to allocate resources in accordance with its unique institutional mission. ARTICLE IV: INSTITUTIONAL RESPONSIBILITIES Just as certain rights are assured to educational institutions in the electronic community of learners, so too each is held accountable for the appropriate exercise of those rights to foster the values of society and to carry out each institution's mission. This interplay of rights and responsibilities within the community fosters the creation and maintenance of an environment wherein trust and intellectual freedom are the foundation for individual and institutional growth and success. Section 1. The institutional members of the electronic community of learners have a responsibility to provide all members of their community with legally acquired computer resources (hardware, software, networks, data bases, etc.) in all instances where access to or use of the resources is an integral part of active participation in the electronic community of learners. Section 2. Institutions have a responsibility to develop, implement, and maintain security procedures to insure the integrity of individual and institutional files. Section 3. The institution shall treat electronically stored information as confidential. The institution shall treat all personal files as confidential, examining or disclosing the contents only when authorized by the owner of the information, approved by the appropriate institutional official, or required by local, state or federal law. Section 4. Institutions in the electronic community of learners shall train and support faculty, staff, and students to effectively use information technology. Training includes skills to use the resources, to be aware of the existence of data repositories and techniques for using them, and to understand the ethical and legal uses of the resources. August 1993 ************************************************************************ * * * Frank Connolly The American University * * FRANK@America .EDU 119 Clark Hall * * (202) 885-3164 Washington, D.C 20016 * * * **************************************** ******************************* David G. Way dgw2(a)cornell.edu 14 East Ave. Ithaca, NY 14853 (607) 255-2663 ========================= ED ======================= Ed Gillen NYS Education Department Office of Human Resources Management Room 528 EB 89 Washington Avenue Albany, NY 12234 (518) 474-1032 (518) 486-5631 FAX BITNET: egillen%sedofis(a)sed.bitnet INTERNET: egillen%sedofis(a)vm1.nysed.gov

3 2

Re: Mandatory Email verification
by macorp!moonlight!ken＠uu4.psi.com 17 Dec '03

17 Dec '03

I've been vaguely following the thread, which seems to be attempting to close a loophole in port 25. Assuming you succeeded, wouldn't a clever demon hacker simply find another way to forge messages? I have seen that any system a human can devise, another human can eventually break. This leads me to believe that eventually we will have to begin acting on our honor, and provide severe consequences for dishonorable behavior. I haven't finished working out what "honor" means in this social context. Ken

4 3

Re: Electronic Revolution and Guerilla Warfare?
by merriman＠metronet.com 17 Dec '03

17 Dec '03

> Under these conditions, all that can be done is sustain heavy >casualties while waging guerrilla warfare. Hope that truth, justice & >the american way will prevail, but don't expect to live to see it >happen. If the government really is monitoring everything, using van >eck etc, fighting is very difficult. The US army has learned to bring >massive force on a relatively precise point. The US army is not good >at dealing with small bands of highly mobile snipers, guerrillas, etc. >Witness Bosnia, where we won't even venture, v. Iraq. The Iraqis had >a large tank force, were fighting in the open, and got their butts >kicked. > > The Bosnians make good use of cover, use small, 'easily' >transportable weapons (topping out at 120mm mortars, which are barely >carryable by one person in good shape. 80 is better). Most of the >Northeast would be good terrain, as would the Rockies. The midwest, >which is where the facists in Gov't are probably from, is too flat & >open for unconventional warfare. > You're right about the mountainous areas being fairly easy to guerrilla from; ditto the *major* urban areas due to their population densities. We've got borders that couldn't be effectively closed - and held that way - without an expenditure that would surely break any government over the long run. Relatively minor urban areas (say, under half-million population) would be fairly easily monitored and controlled. >| What problems would those willing to fight such government oppression be >| likely to face? How to deal with those problems? How to organize and >| exchange personnel/information? How to not get caught? How to avoid >| detection? What means/methods of, um, dissonance against such a government >| would be more/less effective? Under what various permutations of >| electronic/physical bushwhacking would the process be successful or not? >| Duration? Other than the obvious crypto/cyber/military disciplines, what >| other professions or specialized knowledge would be useful under what >| conditions? What blatantly obvious thing(s) have I left out? > > Exchange of information would have to be limited; read up on >direction finding hardware. You would want small groups working to >disrupt & demoralize those who are being oppressive. > > You would want to use HFREF guns, EMPT bombs, cable cutting, >jamming, and lots of other EW that most people know very little about. >Check out Winn Schwartau's Information Warfare for a primer. > Communications would be a pure bitch without some kind of web-of-trust similar to PGP's. Ditto personnel or other underground transfers. The first few years of the movement would see incredible caualties, either by way of death or captures, until the participants learned that it was "for-real". Acts of violence and sabotage would be sparse at first, because that kind of knowledge isn't particularly needed or wanted these days. In a large country, and as large as such a government would have to be, simple physical sabotage and destruction wouldn't cut it. There would *have* to be people working on the command/control/communications side, logistics, etc, as well: getting some phreak to go in an turn the local Baby Bell substation's circuit into a pretzel, for example; or hacking an order for supplies so as to leave out something important, but not *critical*, so as to irritate/demoralize. As many miles of train track as we have in this country, and considering how much of our food and raw materials still travel by rail, it wouldn't be terribly difficult to randomly de-spike some of the rail and wait for a train to catch it wrong - particularly on a curve. Killing of low- and mid-level government officials (the upper level ones would have some degree of security/protection) would become a new "sport" - one has to wonder how many folks would be willing to be tax collectors if the survival rate for them was, say, 6 months. If the military got dragged in to helping the government (almost a necessity) it wouldn't take long before Billy Bob from Lubbock caught on that the same kind of harm he was causing Mrs. O'leary in Chicago was probably happening to *his* momma by someone from Seattle. > The main skill you have left out is oration/propaganda. Its >the Patrick Henrys and Sam Adams who made the revolution happen. >Without them, Washington wouldn't have had volunteers for his army. >Note that this is a tough area to work in today. There are so many >people trying skillfully to manipulate opinion that its tough to come >across well. > As noted, propaganda/PR would become *very* important - I doubt such a government could maintain any kind of pretense that things weren't going wrong for them. Key though, would have to be honesty on the part of the revolutionists - they wouldn't be likely to win friends and influence enemies if they lied as badly, and often, as such a government would have to. Other skills/occupations that I've thought of that would help would be things like engineers (who would know better how to take down a bridge than a civil engineer?), burglar alarm folks (obvious reasons), and so on - in short, the kinds of folks that have to deal with abstract concepts in a creative way. Most valuable of all would be the folks that had as much diverse theoretical knowledge as possible, with practical experience to temper it. Someone with military experience and knowledge of computer systems, crypto, electricity/electronics, mechanical/civil engineering, chemistry (at least, "practical" kind, like home-brew ordnance), military tactics and strategy, logistics, communications, planning and organization, medicine (say, knowing how much Jimson weed juice to add to a 5-gallon coffee urn to make a guard force bonkers), and of course, a healthy dose of suspicion/paranoia. Someone with all these attributes, plus a taste for action/adventure/war/crime stories and a good memory for their details, would likely be worth his/her weight in C-4. Dave Merriman - - - - - - - - - - - - - - - - - - - - - - - - - - Finger merriman(a)metronet.com for PGP/RIPEM public keys and fingerprints. Unencrypted Email may be ignored without notice to sender. PGP preferred. Remember: It is not enough to _obey_ Big Brother; you must also learn to *love* Big Brother.

1 0

Re: Electronic Revolution and Guerilla Warfare?
by Adam Shostack 17 Dec '03

17 Dec '03

David K. Merriman wrote: | > national identity medium (card, wristband, etc) in place and mandatory. | > travel, currency, and information transfer restrictions (ie, no more "How | to build a Backpack Nuke" or "How to hack the Tax Gestapo central | computers" books :-) Under these conditions, all that can be done is sustain heavy casualties while waging guerrilla warfare. Hope that truth, justice & the american way will prevail, but don't expect to live to see it happen. If the government really is monitoring everything, using van eck etc, fighting is very difficult. The US army has learned to bring massive force on a relatively precise point. The US army is not good at dealing with small bands of highly mobile snipers, guerrillas, etc. Witness Bosnia, where we won't even venture, v. Iraq. The Iraqis had a large tank force, were fighting in the open, and got their butts kicked. The Bosnians make good use of cover, use small, 'easily' transportable weapons (topping out at 120mm mortars, which are barely carryable by one person in good shape. 80 is better). Most of the Northeast would be good terrain, as would the Rockies. The midwest, which is where the facists in Gov't are probably from, is too flat & open for unconventional warfare. | What problems would those willing to fight such government oppression be | likely to face? How to deal with those problems? How to organize and | exchange personnel/information? How to not get caught? How to avoid | detection? What means/methods of, um, dissonance against such a government | would be more/less effective? Under what various permutations of | electronic/physical bushwhacking would the process be successful or not? | Duration? Other than the obvious crypto/cyber/military disciplines, what | other professions or specialized knowledge would be useful under what | conditions? What blatantly obvious thing(s) have I left out? Exchange of information would have to be limited; read up on direction finding hardware. You would want small groups working to disrupt & demoralize those who are being oppressive. You would want to use HFREF guns, EMPT bombs, cable cutting, jamming, and lots of other EW that most people know very little about. Check out Winn Schwartau's Information Warfare for a primer. The main skill you have left out is oration/propaganda. Its the Patrick Henrys and Sam Adams who made the revolution happen. Without them, Washington wouldn't have had volunteers for his army. Note that this is a tough area to work in today. There are so many people trying skillfully to manipulate opinion that its tough to come across well. Cypherpunks write memes! Adam

2 1