- cypherpunks-legacy - lists.cpunks.org

Re: A "Warning Banner" for Netscape Navigator? Good idea! Re: A "Warning Banner" for Netscape Navigator? Good idea!
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- tcmay(a)got.net (Timothy C. May) wrote: >Oh, I don't have their home page enabled. What I meant, but perhaps wasn't >clear about in my post, is that the commercials pop up in Yahoo, Infoseek, >Deja News, Excite, and so forth. (OK, so it is inaccurate to say "Netscape" >puts them in.) > >Some of the ads are intertwined with the command boxes of the particular >service, and thus may be hard to excise, but others seem to be separate. > >Any ideas? > >--Tim May A while back, someone on comp.infosystems.www.* posted patches to CERN httpd allowing the proxy server to filter out url's based on regexp matching. Thus you could update a regexp file as new ads appeared. It should be fairly easy to implement something similar under Netscape 2.x using plug-ins. Anyone interested in collaborating? Wilhelm Busch -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBML/FZIiUi5SQtQ3tAQHeAAgAmtp2fF9/UzHpDIz0pOXQqZ/0U+1/vMjR jenuLn17jkgQQXAl6e617ZKMJ4h+vV8QBOh78CPaK7omV9oJyNfDRQweDBWtiFRl uEzyeUoYwGoXxkUH5ANM8AW3GaBSiQ4TCDnwZlAsJ1pYYGRgJhMtdEwPnNVAXW+l l0uODlH+ENi8hGwsM683j7gGws0cc4JcH7Ou2U9zmLZ2gHrdQsWWdw70PjhdlK7e 26aY7EGfI9pTH69mHKV60Qxj2FmSCt1v6MeHjUwRupajCNTGcnsw3FllvRJc7lug cYPApS2ychZSszUwBqoBMvJpAUSpWk+x/RfQTDeo0wsCSvwc66mhWA== =DnEr -----END PGP SIGNATURE-----

2 1

Re: Getting a copy of the Jim Clark speech
by Frank Stuart 17 Dec '03

17 Dec '03

>If he has not clarified his position by tomorrow evening, I will set up some >web pages explaining the situation and decrying Netscape's apparent >position on key escrow (GAK). I have the quotes that L. McCarthy posted, >and Jeff Weinstein's response. I have not been able to get the article off >the server yet (possible all the cypherpunks downloading it?). Any other >documents I should include? I'm working on an "obnoxify" program to convert normal html documents into documents that look normal to non-netscape browsers, but are too painful to read with netscape (</BLINK>, <FONT SIZE=1>, etc.). I think tomorrow evening would be a good time to decide whether or not to distribute it. | (Douglas) Hofstadter's Law: Frank Stuart | It always takes longer than you expect, even fstuart(a)vetmed.auburn.edu | when you take into account Hofstadter's Law.

2 1

Re: "Got a subpoena?"
by alt＠iquest.net 17 Dec '03

17 Dec '03

At 06:57 PM 11/30/95 -0500, JHupp(a)Gensys.Com wrote: > And at that point, you shut down the remailer and log each and every >bounce. > > Now, they could get an order forcing you to run a remailer ~ but that >would open up a whole new can of worms i.e. can you be forced, under >court order, to commit a crime? That's not how they do it. They will tell you that unless you cooperate, you will be charged for the "crime" you have been committing. Where do you think confidential informants come from? They're just people who have been caught or set up by the cops, who are trying to save their own ass.

1 0

Media Advisory: GAK on Dec 5
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Reposted for background on the Netscape $5m IOUNSA for its insecure future: Note that Messrs. Clark and Andreeson can't sell their stock until two years post IPO. ------------------ Nov. 6, 1995 Contact: Anne Enright Shepherd (301) 975-4858 anne.shepherd(a)nist.gov MEDIA ADVISORY U.S. GOVERNMENT SEEKS PUBLIC COMMENT ON DRAFT EXPORT CRITERIA FOR KEY ESCROW ENCRYPTION Revised proposed export criteria for software encryption products using a key escrow mechanism are now available for public review. Public comment will be solicited at a Dec. 5 meeting to be held at the Commerce Department's National Institute of Standards and Technology. Key escrow encryption is part of the Clinton Administration's initiative to promote the use of strong techniques to protect the privacy of data and voice transmissions by companies, government agencies and others without compromising the government's ability to carry out lawful electronic surveillance and to execute search warrants for electronically stored communications. The exportability criteria being proposed are for an expedited licensing review process for software key escrow encryption products with keys up to 64 bits long. The U.S. Interagency Working Group on Encryption and Telecommunications, a body that develops recommendations on Administration encryption policies, solicits additional public comment on the revised criteria. Since the Clinton Administration's Aug. 17, 1995, announcement of proposed liberalization of export control procedures for key escrow software products with key lengths up to 64 bits, the working group has met with representatives of computer hardware and software manufacturers, industry trade associations and others interested in providing strong security for electronic data and transmissions. Based on comments received to date from industry, the criteria have been revised to better reflect commercial interests while balancing the needs of law enforcement and national security. These criteria do not replace or supersede any other licensing processes or criteria. Export applications for other types of products will use the existing licensing process. The Dec. 5 meeting, to be held from 9 a.m. to 5 p.m. at NIST in Gaithersburg, Md., is free and open to the public. Representatives from the interagency encryption working group will discuss the draft criteria and answer related questions. Those interested in attending the workshop can register before Nov. 30 by sending their name, organization, postal address, phone, fax number and e-mail address to Elaine Frye of NIST by fax: (301) 948-1784 or e-mail: elaine.frye(a)nist.gov. For additional information, call (301) 975-2819. Once public comments are received and the export criteria are given any necessary clarifications, the Department of State is expected to issue guidance incorporating the criteria in early 1996. Products will be reviewed by the State Department to verify that they satisfy the final criteria. Products meeting the criteria will be transferred to the Commodity Control List administered by the Commerce Department's Bureau of Export Administration, where they can be exported under a general license. The revised proposed export criteria are available on the World Wide Web at http://csrc.ncsl.nist.gov/keyescrow/. Reporters may also request a copy from Anne Enright Shepherd at NIST, (301) 975-2762, fax: (301) 926-1630, or e-mail: anne.shepherd(a)nist.gov. ------------------- Meeting Announcement Draft 64-bit Software Key Escrow Encryption Export Criteria On December 5, 1995, the Commerce Department's National Institute of Standards and Technology (NIST) will sponsor a meeting to discuss proposed exportability criteria (11/95 version) for 64-bit software key escrow encryption. This meeting continues the industry- government dialog of an earlier NIST-sponsored meeting held in September. At that meeting, officials of the U.S. Interagency Working Group on Encryption and Telecommunications (IWG/ET) met with industry representatives and other interested parties to discuss an initial draft of these criteria. In response to comments received, the criteria have been revised with the intent of achieving commercial acceptance within the flexibility permitted by law enforcement and national security constraints. Changes to the proposed criteria have been made, and a new draft is now available for public review and comment. At the upcoming meeting, representatives from the IWG/ET will discuss the draft criteria and answer related questions. Time will follow for industry representatives and other interested parties to comment on the criteria. Also, breakout sessions will be held to discuss each criterion in greater detail. At a minimum, Government representatives are scheduled to attend from the Office of Science and Technology Policy, National Security Council, the U.S. Department of State, the U.S. Department of Justice, the U.S. Department of Commerce, the National Security Agency, and the Federal Bureau of Investigation. The meeting will be held on Tuesday, December 5, 1995 from 9:00 a.m. to 5:00 p.m. at NIST in Gaithersburg, Maryland in the Red Auditorium of the Administration Building. Please register via e-mail (to "elaine.frye(a)nist.gov") or via fax (301-948-1784) before November 30, 1995. To register, please provide: 1) your name, 2) organization, 3) postal address, 4) phone, 5) fax number and 6) e-mail address. Alternatively, walk-up registration will be available on-site the day of the meeting. Directions from Washington, DC: from the Beltway (I-495) take I-270 North to Exit 10 (Clopper Road). At the first traffic light (Bureau Drive), turn left into the main entrance to NIST. Follow signs to the Administration Building parking lot. The receptionist at the entrance to the Administration Building can provide directions to the Red Auditorium. If you would like to make a presentation with your comments on the proposed criteria, you are asked to contact Elaine Frye at NIST via e-mail at "elaine.frye(a)nist.gov" or via telephone on 301- 975-2819 by November 30, 1995. The number of presentations as well as their length may be limited. Presenters (and others wishing to distribute material) are asked to bring 250 (attendance estimate) copies of their presentations to the meeting. ----------------- Draft Software Key Escrow Encryption Export Criteria (11/95 version) Export control jurisdiction for a software key escrow encryption product that meets the following criteria, as determined by the U.S. Department of State after a one-time review, will be transferred to the U.S. Department of Commerce for export licensing. These criteria do not alter existing licensing practices applicable to other encryption products or modes. Vendors must still submit other encryption to the U.S. Department of State for review and export licensing, or jurisdiction transfer as appropriate. Vendors contemplating the development of encryption products are encouraged to discuss their export objectives with the U.S. Government. Key Escrow Feature 1. The key(s) required to decrypt the product's key escrow cryptographic functions' ciphertext shall be accessible through a key escrow feature. 2. The product's key escrow cryptographic functions shall be inoperable until the key(s) is escrowed in accordance with #3. 3. The product's key escrow cryptographic functions' key(s) shall be escrowed with escrow agent(s) certified by the U.S. Government, or certified by foreign governments with which the U.S. Government has formal agreements consistent with U.S. law enforcement and national security requirements. 4. The product's key escrow cryptographic functions' ciphertext shall contain, in an accessible format and with a reasonable frequency, the identity of the key escrow agent(s) and information sufficient for the escrow agent(s) to identify the key(s) required to decrypt the ciphertext. 5. The product's key escrow feature shall allow access to the key(s) needed to decrypt the product's ciphertext regardless of whether the product generated or received the ciphertext. 6. The product's key escrow feature shall allow for the recovery of multiple decryption keys during the period of authorized access without requiring repeated presentations of the access authorization to the key escrow agent(s). Key Length Feature 7. The product's key escrow cryptographic functions shall use an unclassified encryption algorithm with a key length not to exceed sixty-four (64) bits. 8. The product's key escrow cryptographic functions shall not provide the feature of multiple encryption (e.g., triple- DES). Interoperability Feature 9. The product's key escrow cryptographic functions shall interoperate only with key escrow cryptographic functions in products that meet these criteria, and shall not interoperate with the cryptographic functions of a product whose key escrow encryption function has been altered, bypassed, disabled, or otherwise rendered inoperative. Design, Implementation, and Operational Assurance 10. The product shall be resistant to anything that could disable or circumvent the attributes described in #1 through #9. ------------------ Background Paper Changes to the Criteria Based on Earlier Public Input The government presented draft criteria (9/95 version) for the export of software-based key escrow encryption at an open meeting at NIST on September 6-7, 1995. Meeting participants suggested several changes to the criteria; the government re-drafted the criteria as described below. Industry's ideas and words were included when possible and given serious consideration consistent with the protection of fundamental interests (e.g., privacy and national security). General changes to the document: The document was re-structured to make it clearer. After the introductory text, related criteria are grouped into the following categories: a. key escrow feature b. key length feature c. interoperability feature d. assurances Changes to the introductory text: The wording has been clarified, and additional words have been included to encourage vendors that are considering building non-escrowed encryption products to discuss their export objectives with the government. Changes to the criteria: The criteria presented at the September 6-7 meeting have been modified in the following ways: Old Criterion 1. Moved to #7; wording clarified. Old Criterion 2. Moved to #8; wording clarified. Old Criterion 3. Split into #1 and #2 since the original criterion had two major points in it (the requirements for key escrow, and the requirement on when the keys are first escrowed); wording clarified. Old Criterion 4. Wording clarified; the notion of accessibility to authorized entities was modified to explicitly state that the required information must be available with a reasonable frequency. Old Criterion 5. Moved to #10; wording clarified, and the example was deleted so that implementors were not misled to believe that the example given was the only way of satisfying that requirement. Old Criterion 6. Moved to #9; wording clarified, and applicability of this requirement was scoped to address interoperability between a product's key escrow mode and a non-key escrow product. Old Criterion 7. Moved to #5; wording clarified. Old Criterion 8. Moved to #6; wording clarified because the term "repeated involvement" was perceived as being too broad. Old Criterion 9. Deleted. Old Criterion 10. Moved to #3; wording clarified, and requirement modified to not preclude the escrow of key by agents in addition to those required by these criteria. Note: The September (and November) version of the criteria is available electronically at: "http://csrc.ncsl.nist.gov/keyescrow/" ***************************************************** Elaine Frye Computer Systems Laboratory, NIST Bldg. 225/Rm.B154 Gaithersburg, MD 20899-0001 Voice: 301/975-2819 Fax: 301/948-1784 *****************************************************

1 0

GAK Flap Happening at a Good Time--Journalists Read!
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 8:43 AM 12/1/95, Leslie Todd Masco wrote: >I've been told that many media-types go to the archives whenever c'punks >make the news. How much of an effect do y'all think it'll have if they >can't do it with Netscape? Even better, let's see the journalists get the story first-hand. I hope the media types reading now will attend the December 5th (I think...details should be available) gathering on "key escrow" in Washington. D.C. This should be a fiery meeting, especially if the Netscape reps (I assume someone from Netscape will be attending, given their central role in the all-important Web world) either denounce GAK or support GAK. Frankly, and my thanks again to Sameer for bringing this to our attention, this flap over Jim Clark's GAK-supporting remarks could not have come at a better time: the issue of GAK will not be ignored. --Tim May Views here are not the views of my Internet Service Provider or Government. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

Re: Barring access to Netscape
by cactus＠hks.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On Fri, 1 Dec 1995, Ed Carp wrote: > I believe that Netscape uses "Mozilla" as their keyword when > exchanging browser-specific information. An interesting side-effect: It seems that the Microsoft browser also sends "Mozilla". - -- Todd Masco | "life without caution/ the only worth living / love for a man/ cactus(a)hks.net | love for a woman/ love for the facts/ protectless" - A Rich Cactus' Homepage - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBML9iryoZzwIn1bdtAQHrkwF5AQ/6ldj1MG7JA05l7wOJw5MebvCvGEok zTfJg30NjNK8MLStXz2fGuDhMMs2ZIHJ =VVSJ -----END PGP SIGNATURE-----

1 0

nsa and netscape (fwd)
by Charles Gimon 17 Dec '03

17 Dec '03

Forwarded message: > From: "Bob Bruen, MIT Lab for Nuclear Science" <BRUEN(a)mitlns.mit.edu> > > The following came from a government source. I thought it might be of > interest. > Bob > -------------------------------------------------------------------------- > > At yesterdays FNC (Federal Networking Council) meeting it was > mentioned in passing that NSA has given Netscape a grant of $5 Million > (yes $5M) to beef up the security features of Netscape. More info will > be forthcoming on this. > I found my way to http://www.fnc.gov, but the most recent documents that they had online were about three weeks old. I, too, am curious what the source for this was.

1 0

Re: GAK, Netscape, CyberDog, and you.
by rah＠shipwright.com 17 Dec '03

17 Dec '03

At 12:45 PM 12/1/95, Rich Salz wrote: >And my god, >five lists this time, at least some of which have over a thousand readers? Ouch! Actually, semper.fi has many times that many readers... ;-). Rich, you must be the *only* person, (besides myself), who's subscribed to *all* of those lists. I think if you check it out, that post was germaine to every single one of the lists in question. However, I'm sorry to bury you in a snowstorm. Getting 6 copies of the same thing must have pissed you off, and for that, I apologise. Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA (617) 958-3971 "Reality is not optional." --Thomas Sowell The NEW(!) e$ Home Page: http://thumper.vmeng.com/pub/rah/ >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

C'MON N' GIVE 'EM HELL, NET-NERDS!!!!
by lindat＠iquest.net 17 Dec '03

17 Dec '03

They asked for it: "To secure Net communications, the government will need to have access to private data exchanges using what is known as a key escrow security system," -Netscape Communications chairman Jim Clark, arguing for a security system called key escrow that would require you to give the government access to your private messages. Source: STAMPER'S NEWS NUGGETS (1) SPAM THE SIGN Netscape has a webpage at www.netscape.com. There is a "toys" area and any message you leave in that area goes to an ELECTRONIC MARQUEE SIGN at Netscape that all the employees can see. SPAM THAT SIGN. (2) SPAM NETSCAPE Here's where the EMAIL BLITZ should go (extra points for creativity): info(a)netscape.com General information admgr(a)netscape.com Netscape site advertising sales x_cbug(a)netscape.com Bug reports from X Window users win_cbug(a)netscape.com Bug reports from Windows users mac_cbug(a)netscape.com Bug reports from Macintosh users hr(a)netscape.com Netscape Human Resources department training(a)netscape.com Netscape Training programs information admgr(a)netscape.com Netscape site advertising sales and Sponsor program information proprietor(a)netscape.com Netscape electronic store feedback editor(a)netscape.com Feedback about Netscape's Net site ssl-talk-request(a)netscape.com E-mail list for Secure Sockets Layer protocol discussion standards(a)netscape.com Questions about Netscape's open-standards activities nswinapi-talk-request(a)netscape.com E-mail list for users of the Windows Netscape Server API CORPORATE HEADQUARTERS ------------------------------------------------------------- NETSCAPE COMMUNICATIONS CORPORATION 501 E. Middlefield Rd. Mountain View, CA 94043 415/528-2555 Product and sales information (7:00 a.m. to 5:00 p.m. PST) 415/254-1900 Executive offices 415/528-4124 Fax http://www.netscape.com ATLANTA Netscape Communications Corporation 1850 Parkway Pl. Suite 420 Marietta, GA 30067 CHICAGO Netscape Communications Corporation 2159 N. Seminary Chicago, IL 60614 DALLAS Netscape Communications Corporation 17304 North Preston Road Suite 800 Dallas, Texas 75252 NEW YORK Netscape Communications Corporation 599 Lexington Ave. Suite 2300 New York, NY 10022 NORTHWEST Netscape Communications Corporation 501 Middlefield Rd. Mountain View, CA 94043 SOUTHWEST Netscape Communications Corporation 111 N. Sepulveda Blvd. Manhattan Beach, CA 90266 WASHINGTON, D.C. Netscape Communications Corporation 6701 Democracy Blvd. Suite 300 Bethesda, MD 20817 THANKS AND A HAT TIP TO HELEN AT E.PLURIBUS FOR GETTING ALL THE ADDRESSES!!!!!!!! Kind regards, *********************** V ************************* DEATH TO THE NEW WORLD ORDER **************************************************** Linda Thompson American Justice Federation Home of AEN News & news videos, "Waco, the Big Lie," "America Under Siege" 3850 S. Emerson Ave. Indianapolis, IN 46203 Telephone: (317) 780-5200 Fax: (317) 780-5209 Internet: lindat(a)iquest.net ************************************************** Remember Waco. The Murderers are still free. *************************************************** The Army is going to courtmartial Spc. Michael New for not wearing a U.N. uniform, but the Army won't courtmartial the members of the 160th and 158th Special Operations, 82nd Airborne, Ft. Hood Cav Members, and 10thMountain Division members who helped MURDER CHILDREN at Waco. What's wrong with this picture?

2 1

Cyberspace Inc & Robber Baron Age
by James M. Cobb 17 Dec '03

17 Dec '03

Friend, 11 29 95 Computer underground Digest carries the complete text of Rick Moore's article, Cyberspace Inc and the Robber Baron Age, an analysis of PFF's "Magna Carta" scheduled to appear in the print journal, The Information Soci- ety. Here's a sample: Instead of an infrastructure for public communications -- like the current Internet, or the American highway system -- cyber- space would be developed as a corporate owned monopoly -- priced at whatever the traffic will bear. Instead of providing a "space" in which citizens are free to speak and associate (like Internet), cyberspace would become a profit-machine and propaganda channel for media conglomerates. PFF's manifesto is a formula for neo-feudalism in the "Know- ledge Age" -- it is a charter for what could aptly be dubbed "Cyberspace Inc". The most recent issues of CuD can be obtained from http://www.soci.niu.edu/~cudigest Cordially, Jim

1 0