- cypherpunks-legacy - lists.cpunks.org

KEE_pin
by John Young 17 Dec '03

17 Dec '03

The NYT reports today on the administration's new national security team and the formulation of policy to focus on international crime as a national security threat. Cited are thriving Russian black marketers selling hardware, software, and skills developed by the USSR; high-technology which has speeded communication and dissolved national borders; the diffusion of many enemies rather than a single superpower. The nature of crime has changed. No longer limited to drugs, terrorism and flight from justice, now there's money laundering, kidnapping, smuggling, credit card scams, even auto theft. It describes measures to combat this threat to all nations by cooperating and competing foreign affairs, intelligence and law-enforcement agencies around the world. None so trusting of each other. Some fund- and purpose-scrambling agencies klaxon that international crime is now as grave as nuclear proliferation and ethnic conflict. The three threats may merge, and new nations are at greatest peril. Which supports the administration's bulldogged clamp on crypto export limits: if we knew what they knew about rogue, ex-officials arranging their future with successors inside -- they need to communicate in private. What crypto will Perry, Deutch and consorts use to keep secrets among the few who know what we don't -- yet? Cryptanalysts, dissolve borders set by secret pacts. ----- KEE_pin

1 0

New York Area CPUNKS meet
by Marc J. Wohler 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The NewYork City area Cypherpunks will meet on the UpperWest Side of Manhattan. Date: Thursday 12/19/96 Time: 7:30 PM Place: The Club. Park Royal Hotel, 23 West 73rd Street. Between Columbus & Amsterdam Avenue. Subway stops: 72nd & Broadway #1 #9 #2 #3 (express stop) 72nd & Central Park West A or D trains Refreshments: BYOB & snacks. We can order out for dinner. All our welcome but please email me your intention to attend (if you have not already done so.) Marc -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMqsDk2eikzgqLB7pAQHxFgP9FbdXYo4qiubH9zBFW+CdQb5LZVxKAhWB EwfV+2EquVT94dokYMN9P0n26ZIozJejpXf44QLLgNPvWHqHB8Wult/U7zyVeVid 1YVRftVFnxPlBjkabH5yGR8efP7L2i5Ynh5X8I0jFy9G8Wfilxsg8QT8r+eYtDWB g/b4Wpr0/0w= =CIyV -----END PGP SIGNATURE-----

1 0

To all IETF attendees
by Lucky Green 17 Dec '03

17 Dec '03

Any Cypherpunks attending this weeks IETF meeting in San Jose are encouraged to send me some email if you want to get together. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://ourworld.compuserve.com/homepages/justforfun/prime.htm

1 0

Re: PICS is not censorship
by thad＠hammerhead.com 17 Dec '03

17 Dec '03

Lucky Green <shamrock(a)netcom.netcom.com> says: > ..Do you agree that sites that deliberately mislabel their > content, will eventually face legal action? If so, then PICS should not be > considered truly voluntary. I think that most of the PICS labels that are on web pages will be those generated by scripts from groups like RSACi. (http://www.rsac.org) These groups have contracts that require you to not lie when you fill out their questionnaires, and if you do lie, you are in breach of contract and should expect to be sued by them. These companies should create a cryptographic signature for their labels, I'm really surprised that RSACi doesn't do that yet; I don't know if other PICS labelers do. If you just make up your own PICS label, then I can't believe that you would have any problems saying whatever you want. Of course, it's likely that most of the Surfwatch type programs will have options to block all pages without a well-known label attached to it, and this will probably be the default in a couple of years. If this is the way it works out, then I'd consider this voluntary. I think that this is the way it will work out, too. thad -- Thaddeus Beier thad(a)hammerhead.com Visual Effects Supervisor 408) 287-6770 Hammerhead Productions http://www.got.net/people/thad

1 0

Re: PICS is not censorship
by thad＠hammerhead.com 17 Dec '03

17 Dec '03

tcmay(a)got.net ("Timothy C. May") sez > This is why I fear PICS. Democracy has run amok in the Western world, and > the various "herds" will vote to constrain the freedoms of other members of > the herd. > > My Prediction: If PICS is used voluntarily by more than 80% of Net users to > label their Web pages and their writings, etc., then less than 3 years > later PICS will be mandated in the United States and other such countries. PICS, or something like it, is the absolutely right response to calls for true Internet censorship. People agreeing to a language, a way of communicating, is a good thing. Did you object to HTML? TCP/IP? Other agreements that limited the way that people communicate? I don't think that PICS will be mandated any more than those two standards are mandated, perhaps I'm naive, but I think that the social conventions will work in this case. I suppose the a better solution would have been to have many competing private rating services, but PICS will work well, not put much load on the net, and is transparent and simple. I like it. thad -- Thaddeus Beier thad(a)hammerhead.com Visual Effects Supervisor 408) 287-6770 Hammerhead Productions http://www.got.net/people/thad

3 2

Re: PICS is not censorship
by Greg Broiles 17 Dec '03

17 Dec '03

At 08:37 PM 12/8/96 -0800, Lucky Green wrote: >>>> At 07:18 PM 12/8/96 -0800, Thaddeus J. Beier wrote: >I think that most of the PICS labels that are on web pages will be those >generated by scripts from groups like RSACi. (http://www.rsac.org) >These groups have contracts that require you to not lie when you fill out their >questionnaires, and if you do lie, you are in breach of contract and should expect >to be sued by them. So what is going to happen if I generate one of their tags from scratch without filling out their questionnaire? Are they going to sue me, claiming that they own an html tag? Can one own an html tag? "Owning" an html tag is oversimplifying things; but claiming that you've been rated a certain way by a certain group (if you haven't) could potentially create fraud, trademark, and (maybe) copyright problems - an easy analogy is to the "UL" and "Good Housekeeping" symbols displayed on some consumer goods. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

1 0

Protect against physical theft of the harddisk ??
by Pavel Korensky 17 Dec '03

17 Dec '03

Hello, I have one problem which I would like to consult with you. I need to protect the data on the computer harddisk against physical theft. Current situation: Computer with several harddisks - approx. 9 GB. On this computer, the following OS are used: Linux, DOS, Windows NT. The data on this computer must be accessible from all operating systems. Encryption of files must be transparent to user and encryption algorithm must be "strong". Because I am not able to find any disk encryption software which is able to run on all these platforms, I decided to use the following temporary solution: Add one more computer with Linux OS. On this computer, there will be only a small root partition with necessary Linux components. All other disk space will be encrypted with IDEA, using the /dev/loop. This machine will be some kind of secure file server. On the second machine, where the user works, there will be partitions with operating systems, necessary utilities and the TCP/IP stack for DOS/Windows, NT and Linux. The data and application disks will be mounted via NFS and user will work with files from file server. The computers will be interconnected with Fast Ethernet. This mini-network is NOT connected to the Internet, so the NFS (in)security should not be a problem. Also, both computers will be placed in the same room (distance approx. 3 m), so there should be no problem with tapping/data capturing on the Fast Ethernet connection. I have the following questions. Can anybody see some major security hole in this system ? How fast will be this system ? Anybody has any idea if there is some more sophisticated solution for this problem ? Anybody heard about some strong disk encryption which is able to rund under Windows NT, Linux and DOS ? It seems that the Win NT are the major problem. I am not able to find any disk encryption for NT. Anybody is able to port Secure File System to Windows NT ? I am trying to port this program under Linux, but I am not the NT system programmer. Thanx for any comments, help, ideas etc. Best regards PavelK -- **************************************************************************** * Pavel Korensky (pavelk(a)dator3.anet.cz) * * DATOR3 Ltd., Modranska 1895/17, 143 00 Prague 4, Czech Republic * * PGP key fingerprint: 00 65 5A B3 70 20 F1 54 D3 B3 E4 3E F8 A3 5E 7C * ****************************************************************************

1 0

Re: Please post Eudora PGP plugin URL
by Alan Olsen 17 Dec '03

17 Dec '03

At 03:52 PM 12/8/96 -0800, Lucky Green wrote: >>If you want to be automatically notified of new versions, send e-mail to >>gt6525c(a)prism.gatech.edu with the subject of "eppi news", and the following >>message body: > >Just FYI, while the plugin is still available, email to this address has >been bouncing for weeks. It is therefore impossible to submit bug reports >or subscribe to the EPPI mailing list. If somebody on this list knows the >current address of the EPPI author, please post it. The current address of the author of the Eudora plug-in is Damon Gallaty <dgal(a)cad.gatech.edu>. I have been coorisponding with him on a couple of odd problems with the software. (Implemenation issues more than bugs.) He has been very responsive. (In fact, I need to send him another bug report tonight about failing to deal with line wrap in signatures.) So far the set of plug-ins have been very useful. I have been pretty happy with it so far. (It does have the problem of not word wrapping before applying the PGP sig and defaulting to the last key if you do not set one in config.txt.) All in all, worth the download. --- | "Spam is the Devil's toothpaste!" - stuart(a)teleport.com | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0

OECD crypto policy draft guidelines
by Robin Whittle 17 Dec '03

17 Dec '03

There is an ad-hoc group of government representatives (called an "expert group" actually) working on an OECD set of cryptography policy guidelines. They have a big five day meeting coming up starting 12 December in Paris. A September draft of their guidelines was leaked and put on a WWW site in Austria: http://www.quintessenz.at/Netzteil/OECD/index.html as a Word 6 file. I got it, turned it into HTML and put it on my site with comments. http://www.ozemail.com.au/~firstpr Recently, someone from the OECD crypto secretariat emailed me indicating they had read my comments and found them reasonably constructive. I have since added more comments, which I emailed to the secretariate person. If anyone has something constructive to convey to them, email me and I will put you in touch with them. I understand there will be an article on the debate in the next weekly edition of The European newspaper. The people at Quintessenz apparently have a later draft which they are scanning and will put up on their site ASAP. - Robin . Robin Whittle . . http://www.ozemail.com.au/~firstpr firstpr(a)ozemail.com.au . . 11 Miller St. Heidelberg Heights 3081 Melbourne Australia . . Ph +61-3-9459-2889 Fax +61-3-9458-1736 . . Consumer advocacy in telecommunications, especially privacy . . . . First Principles - Research and expression - music, . . music industry, telecommunications . . human factors in technology adoption. . . . Real World Interfaces - Hardware and software, especially . . for music .

1 0

Re: PICS is not censorship
by Lucky Green 17 Dec '03

17 Dec '03

At 09:15 PM 12/7/96 -0800, Thaddeus J. Beier wrote: >I don't think that PICS will be mandated any more than those two standards >are mandated, perhaps I'm naive, but I think that the social conventions >will work in this case. Let's put the question if something like PICS will be mandated aside for the moment. Do you agree that sites that deliberately mislabel their content, will eventually face legal action? If so, then PICS should not be considered truly voluntary. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://ourworld.compuserve.com/homepages/justforfun/prime.htm

3 2