- cypherpunks-legacy - lists.cpunks.org

17 Dec '03

November 22, 1993 Chief, Office of Policy National Security Agency/Central Security Service Fort George Meade, MD 20755-6000 Reference: SENSOR FUSION Dear Sir or Madam: This is a request under the Freedom of Information Act [5 U.S.C. € 552(a)] on behalf of my client, Mr. John Gilmore. I write to request a copy of all agency records or portions thereof, in electronic or other form, which pertain, relate, or refer to sensor fusion. "Sensor fusion" is the activity or process of "fusing" or merging information from a variety of different sensors to produce a more informative product. For instance, merging radar data with intercepted radio transmissions and adding in satellite pictures may reveal a concentration of metal (from radar data) that coincides with a site that is transmitting communications. This request includes, but is not limited to: electronic records such as software for performing sensor fusion; all documentation for such software; documentation about equipment used for sensor fusion; and records about agency use of sensor fusion. If the requested records are not in the possession of your agency, or if other agencies may also possess such records, I ask that you forward this request to any agency that you believe may have records responsive to this request, and inform me of such action. Such agencies may include the NRO and the CIA. In the alternative, I ask that you inform me of other agencies that you believe possess and control such records. As you know, the FOIA provides that an agency must make an initial determination of whether to comply with a FOIA request within ten working days of receiving the request. Your own regulations provide that Ò[t]he Chief, Office of Policy, shall notify the requester of his determination within 10 working days of his receipt of the request.Ó [32 C.F.R. € 299.4(b)]. If the records that you possess were originated or classified by another organization, I ask that your organization declassify them (if needed) and release them to me, as provided in the FOIA, within the statutory time limits. If there is a conflict between the statutory time limits and some regulation or policy that requires you refer the records, the statutory requirement takes precedence over any Executive-branch regulation, policy or practice. As you know, the FOIA provides that no more than an additional 10 working days be taken for such consultation. 5 U.S.C. € 552(a)(6)(B). If you do refer documents to any other agency, and they are not provided within the time limits, we intend to litigate on this point. We also remind you that the long-standing rule that the FOIA "makes no distinction between records maintained in manual and computer storage systems," Yeager v. D.E.A., 678 F.2d 315, 321 (D.C.Cir. 1982), has recently been amplified in Armstrong v. E.O.P., No 93-5002 (D.C. Cir., Aug. 13, 1993). Any paper print- outs of electronic records, such as e-mail, must include all information in the electronic record. Assuming that there would be no loss of releasable information, such as written comments made on paper print-outs, we therefore ask you to release all responsive electronic records in electronic, i.e., machine-readable, form. As you know, the FOIA provides that even if some requested material is properly exempted from mandatory disclosure, all segregable portions must be released. [5 U.S.C. € 552(b)] If any or all material covered by this request is withheld, please inform me of the specific exemptions that are being claimed, and mark all deletions to indicate the exemption(s) being claimed to authorize each individual withholding. If the (b)(3) exemption is claimed, please indicate the relevant withholding statute(s). In addition, I ask that your agency exercise its discretion to release information that may be technically exempt. As you know, the Attorney General on October 4, 1993, directed that agencies should administer the FOIA under a presumption of disclosure, and that information which need not be withheld should not be. Please do not delay processing because of uncertainty about the request. I have reasonably described the records sought. If you have any questions regarding this request, please telephone me at the above number, and we can discuss your questions. I also request that fees be waived because Mr. Gilmore is deemed a media requester by your agency for FOIA purposes. Should there be any problem in this regard, Mr. Gilmore promises to pay up to $1000 in fees, and you should therefore begin processing of this request without fee-related delays. As provided under the FOIA, I will expect a reply within ten (10) working days. Sincerely, Lee Tien Attorney at Law On behalf of Mr. John Gilmore rom owner-cypherpunks Mon Nov 29 13:27:25 1993 Received: by toad.com id AA14244; Mon, 29 Nov 93 13:12:26 PST Received: by toad.com id AA14124; Mon, 29 Nov 93 13:09:31 PST From: gnu (John Gilmore) Return-Path: <gnu> Received: from localhost by toad.com id AA14120; Mon, 29 Nov 93 13:09:28 PST Message-Id: <9311292109.AA14120(a)toad.com> To: cypherpunks Subject: NSA FOIA: Public Domain Classified Records Date: Mon, 29 Nov 93 13:09:27 -0800 November 23, 1993 Chief, Office of Policy National Security Agency/Central Security Service Fort George Meade, MD 20755-6000 ATTN: FOIA request Reference: PUBLIC DOMAIN CLASSIFIED RECORDS Dear Sir or Madam: This is a request under the Freedom of Information Act [5 U.S.C. € 552(a)] on behalf of my client, Mr. John Gilmore. I write to request a copy of all agency records or portions thereof, in electronic or other form, which pertain, relate, or refer to documents which are formally designated as "classified" by the U.S. Government but which are known by NSA officials to be outside direct government control, in the possession of persons not presently employed by the U.S. government, available to the public in libraries, or otherwise in the public domain, whether within or outside the United States. This request also includes all agency records which were previously classified but are no longer classified or had their classification level downgraded if the fact that the records were outside direct government control, in the possession of persons not presently employed by the U.S. government, available to the public in libraries, or otherwise in the public domain, whether within or outside the United States, was a factor in declassification or downgrading. To help you understand the nature of this request, I refer you to Mr. Gilmore's earlier request for Military Cryptanalysis by William Friedman and Military Cryptanalytics by Friedman and Lambros Callimahos. As you know, your agency initially denied Mr. Gilmore's request for Parts III and IV of the Friedman treatise on the ground that they were classified, but later released these records after Mr. Gilmore proved that Parts III and IV were available to the general public. Mr. Michael Smith, Chief, Office of Policy, informed the court and Mr. Gilmore that NSA officials had known for many years that these records had entered the public domain, but that he himself was unaware of this fact, and thus chose not to disclose them at the time of Mr. Gilmore's request. This request is intended to reach any other such records (still classified) and any records for which downgrading or declassification was ordered if the presence of the records outside direct government control was relevant to the downgrading or declassification determination. Although Mr. Gilmore does not by this request seek the already-released portions of Military Cryptanalysis by William Friedman and Military Cryptanalytics by Friedman and Lambros Callimahos, he does by this request seek any records that pertain to whether the unreleased portions of Part III of Military Cryptanalytics by Friedman and Lambros Callimahos are known by NSA officials to be outside direct government control, in the possession of persons not presently employed by the U.S. government, available to the public in libraries, or otherwise in the public domain, whether within or outside the United States. This request is also intended to trigger declassification review of all records responsive to this request. Mr. Gilmore would also like a list of all records responsive to this request if such a list can be provided in advance of the records themselves. As you know, the FOIA provides that an agency must make an initial determination of whether to comply with a FOIA request within ten working days of receiving the request. Your own regulations provide that Ò[t]he Chief, Office of Policy, shall notify the requester of his determination within 10 working days of his receipt of the request.Ó [32 C.F.R. € 299.4(b)]. If the records that you possess were originated or classified by another organization, I ask that your organization declassify its. If there is a conflict between the statutory time limits and some regulation or policy that requires you refer the records, the statutory requirement takes precedence over any Executive-branch regulation, policy or practice. As you know, the FOIA provides that no more than an additional 10 working days be taken for such consultation. 5 U.S.C. € 552(a)(6)(B). If you do refer documents to any other agency, and they are not provided within the time limits, we intend to litigate on this point. We also remind you that the long-standing rule that the FOIA "makes no distinction between records maintained in manual and computer storage systems," Yeager v. D.E.A., 678 F.2d 315, 321 (D.C.Cir. 1982), has recently been amplified in Armstrong v. E.O.P., No 93-5002 (D.C. Cir., Aug. 13, 1993). Any paper print- outs of electronic records, such as e-mail, must include all information in the electronic record. Assuming that there would be no loss of releasable information, such as written comments made on paper print-outs, we therefore ask you to release all responsive electronic records in electronic, i.e., machine-readable, form. As you know, the FOIA provides that even if some requested material is properly exempted from mandatory disclosure, all segregable portions must be released. [5 U.S.C. € 552(b)] If any or all material covered by this request is withheld, please inform me of the specific exemptions that are being claimed, and mark all deletions to indicate the exemption(s) being claimed to authorize each individual withholding. If the (b)(3) exemption is claimed, please indicate the relevant withholding statute(s). In addition, I ask that your agency exercise its discretion to release information that may be technically exempt. As you know, the Attorney General on October 4, 1993, directed that agencies should administer the FOIA under a presumption of disclosure, and that information which need not be withheld should not be. Please do not delay processing because of uncertainty about the request. I have reasonably described the records sought. If you have any questions regarding this request, please telephone me at the above number, and we can discuss your questions. I also request that fees be waived because Mr. Gilmore is deemed a media requester by your agency for FOIA purposes. Should there be any problem in this regard, Mr. Gilmore promises to pay up to $1000 in fees, and you should therefore begin processing of this request without fee-related delays. As provided under the FOIA, I will expect a reply within ten (10) working days. Sincerely, Lee Tien Attorney at Law On behalf of Mr. John Gilmore

1 0

Re: Banning any subscriber
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

Geoff Dale wrote: >I'm not entirely against positive reputation systems, but they really need >to be implimented on the user end, or at least be user settings, as on the >extropians list. > >But the main problem with positive reputation systems is dealing with the >zero reputation newbies. I don't want to see these guys shut out. Positive reputations _must_ be implemented at the user level, to my way of thinking. Any system which centrally administers the reputations, as in approved reading lists or movies approved by the Catholics (does this still exist?) is not really what most of us want. Newbies are often desirable and often turn into valued contributors--sometimes from their very first posts. So I personally would not want to filter them out. The "Extropians" software, which many of us have mentioned here, allows this kind of flexibility. I hope Cypherpunks can get it soon. --Tim May -- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: by arrangement Note: I put time and money into writing this posting. I hope you enjoy it.

1 0

MISC: good news,bad news
by Brian D Williams 17 Dec '03

17 Dec '03

Well as they say first the good news... INFORMATION SERVICES INDUSTRY WANTS RBOCs FREED The regional Bell companies should be free to compete in long distance services, cable television programming and equipment manufacturing, a new study of information services executives said. The study, released today by The Marx Group of Wellesley, Mass., also said the information industry will grow faster and better serve customers as a result of increasing merger activity. The survey was commissioned by The Marx Group, an information services industry consulting and law firm. "This survey proves that a clear majority of information services executives believe that our industry will benefit from Bell company entry into these lines of business," Marx Group chairman Peter Marx said. Marx praised Monday's Supreme Court action leaving in place the Bell companies' ability to offer information services as "good news" for the information services provider industry. This survey demonstrates that the information services business community looks forward to the capital and technology, partnership opportunities and mass marketing capabilities the Bell companies bring to the table." Information services companies rely heavily on long-distance services and are extremely concerned about long-distance rates, the study pointed out. Small businesses were especially emphatic in their desire for the competitive pricing they expect to accompany Bell entry into long distance service, the study said. The survey included telephone interviews with executives from more than 300 information services companies. Some of the results are: 1. 72 percent favored Bell company participation in information services in their own territories, 21 percent unfavorable, 7 percent neutral; 2. 66 percent favored Bell company entry into long distance, 21 percent unfavorable, 13 percent neutral; 3. 69 percent favored allowing Bell company entry into cable TV, 15 percent unfavorable, 16 percent neutral; 4. 67 percent favored Bell company participation in equipment manufacturing, 13 percent unfavorable, 20 percent without opinion. The Marx Group commissioned Arlen Communications, an industry research firm in Bethesda, Md., to conduct the survey. For more information, contact The Marx Group at (617) 576-5730 or Arlen Communications at (301) 656-7940. ### Now for the bad news....(bad idea!) SLATTERY INTRODUCES BILL TO LIFT MFJ MANUFACTURING BAN Rep. Jim Slattery (D-Kansas) Sunday introduced a bill (H.R. 3609) that would lift the Modified Final Judgment (MFJ) restriction for Regional Bell Operating Companies (RBOCs).Staffers in Slattery's office said today the bill is virtually identical to H.R. 1527, which Slattery introduced in the 102nd Congress, with additional provisions concerning consumers with disabilities and joint network planning.The "Telecommunications Equipment Research and Manufacturing Competition Act of 1993" says that permitting the RBOCs, through their affiliates, to manufacture telecommunications equipment and customer premises equipment (CPE), universal access to advanced telecommunications services, continued economic growth and international competitiveness will be advanced.The bill would all the design, development and fabrication of equipment, as well as research with respect to such equipment. The bill includes the following provisions: -- The RBOCs could engage in manufacturing through separate affiliates; -- The Federal Communications Commission (FCC) would prescribe regulations to ensure RBOC compliance; -- A manufacturing subsidiary would be required to maintain separate books, records and accounts; -- RBOCs could sell, advertise, install and maintain telecommunications equipment and CPE after acquiring the equipment from their affiliates; -- Manufacturing affiliates would be required to conduct manufacturing within the United States; -- Manufacturing affiliates would be required to use component parts manufactured in the United States, with the following exception. Affiliates could use components manufactured outside the U.S. if they first make "good faith" efforts" to obtain parts manufactured within the U.S. and if the foreign components do not exceed 40 percent of the sales revenue derived from the equipment; -- Manufacturing affiliates would be allowed to use intellectual property created outside the U.S.; -- Manufacturing affiliates would be required to make equipment available without discrimination to all regulated local telephone exchange carriers; -- An RBOC and its manufacturing affiliates would be allowed to engage in close collaboration with any manufacturer during design and development of hardware or software; -- The FCC would prescribe regulations necessary to ensure that network services advances are accessible and usable by individuals whose access might be impeded by a disability or functional limitation, unless the costs would result in an undue burden or adverse competitive impact; -- Each RBOC would be required to engage in joint network planning and design with other regulated local exchange carriers operating in the same area of interest, except no participant in such planning would be allowed to delay the introduction of new technology or the deployment of facilities to provide telecommunications services. ### I particularly like the anti-NAFTA "All American" clause...... Brian Williams Cypherpatriot Extropian "Free The RBOC'S" "Nuke The Whales"

1 0

In Austin on 17th Dec - Want to meet Austin Cypherpunkers
by crunch＠netcom.com 17 Dec '03

17 Dec '03

Greetings all you Austin Cypherpunkers. I'll be making a trek into your area on the 17th of Dec to attend the HoHoCon. If anyone wants to exchange PGP keys, and has a Mac, then contact me as soon as possible and I can give you all the details. I'll be staying at the Austin North Hilton & Towers and Super 8 Motel, abd be arriving about 4 pm or so. Looking forward to meeting all you Austin Cypherpunkers. I am also looking to see if any rave is scheduled on the evening of the 18th, as I would like to get in some serious dancing while there. Cheers Cap'n Crunch

2 1

LD and reputation
by Black Unicorn 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -> To: hughes(a)ah.com (Eric Hughes) From: plaz(a)netcom.com (Geoff Dale) Subject: Re: Banning any subscriber I said: >>I personally disagree with censorship. It would be impossible to enforce >>anyway. A move of this type would simply drive Detweiler to use the >>Cypherpunk remailers which would be harder to detect. Then what do we do? >>Stop accepting mail from our own remailers? Eric replied: >Basically, yes, except for signed letters from previously >authenticated pseudonyms. This is a simple form of a positive >reputation system. A kill fill is a negative reputation--'not that >person'. A positive reputation rejects all but a particular set of >identities. I'm sorry, I didn't realize that you wanted to erect a barrier against anonymous newbies, such as "wonderer" and "Dark Unicorn" were recently. You know, Detweiler might get a new account under a new name, better seal the list to only postings from "previously authenticated" accounts too. Then we'd be all happy and safe from the dreaded Detweiler. <- Why am I always an example? :( What needs to be addressed, is what this list is. Is it private in the sense that we exclude anyone? Are we in a position to regulate disruptive posters? Frankly, LD's posts simply take a lot of space and time. I could care less if LD is a reputable person. Just so long as he is not disruptive. Frankly, he could be a moron (yes yes, I know...) and I still wouldn't mind because correcting his mistakes is part of what this group is all about (to me anyhow). We were all newbies once, even if it was before this list was around. That says to me that if we want to promote cryptographically literate users with this group, we simply cannot exclude. Even a bloody twelve year old might be obnoxious at first, but who knows what we might spur into him/her? Could it not be that we might foster a loyal supporter of cryptography in this twelve year old? At the same time, we must deal with disruptive elements. LD isn't posting for any real constructive purpose. Even he knows it. Perhaps he is having fun, but it is at our expense. Fine. 1> Ignore it (this never works, as we are proving even now) 2> Address it (this just encourages him) 3> Remove it. (ethical questions abound). If the problem is to prevent disruption without excluding it seems to me that you have to use a negative reputation system. A system that gives everyone a chance, without disrupting unduly. Why not a probatory check? Every member of the list is given the chance to contribute constructively, newbie or not. If and when our example newbie user gets out of hand, his/her messages are to be moderated. This cuts down on the man power required to moderate the entire list and still gives newbie user the opportunity to reform. I'm not sure if we can find a willing moderator, but it seems to be a system that would cut down dramatically the LD type problems. Frankly, the traffic on this list is excessively high. (I'm as guilty as anyone I'm afraid.) I can deal with high and valuable traffic, not high and disruptive traffic. Eric -> Authentication, in this context, can take many forms. It could be as simple as sending a key to the mailing list server. It could be developed to require someone to vouch for the pseudonym. It could require a sponsor who would read and repost until a separate reputation develops. The point is to put a bound on the noise from disrupters both inadvertent and intentional, not to completely prevent noise. <- I agree, but prior authentication is a little excessive no? - -uni- (Dark) -----BEGIN PGP SIGNATURE----- Version: 2.3 iQCVAgUBLPqJcxibHbaiMfO5AQEyFQP9FEypBg25aPS/RPZTfaChsORrRrApgcKc L0DUoYkaySZFIemI6a/vtNbN6jnSlJ/0MY50Z9PnFNhnTX2MsvPK9eibSkpQdMrt hC53ZnTn9NbW9p6gMrfWEKFuTCPg92KEa3CXDOhZznI4LBBMoj7FCUkes+eT6cyp p//99+WPW1g= =1xby -----END PGP SIGNATURE-----

1 0

Re: Crypto Anarchy, the Government, and the National Information Infrastructure (fwd)
by Brian Beker 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On Mon, 29 Nov 1993, Timothy C. May wrote: > To a "women need not apply" on-line consulting situation? To > a cyberspatial version of the "old boy's network" that Gloria Allred and > her feminista compadres are constantly filing lawsuits against? ^^^^^^^^^ Shouldn't that be commadres? Brian -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLPpp9CJejrfgN5yJAQEx+AP/ZxOvT3O/POw6lrDZDt08HFxa7wD6UUR1 thz8FaP8opsPsg7EC/iv1ZEml26BhpxgzGSnzeG2NzH9qRMxFik7fJ4XzkMECS5l Af5jJxeeV+iJeqk6lSpYFGcA1YqgAqM7c4XNhA3YGYGUqJ9we2mkujJZ0THJyjMA bXBKqGqIz7E= =YFTM -----END PGP SIGNATURE-----

1 0

Need a ride to hohocon?
by stig＠netcom.com 17 Dec '03

17 Dec '03

I'm planning to drive from Portland to Austin for HoHo Con...via San Francisco...and I'm looking for people to split the gas. We can all sleep in my van for free, so that saves on expenses in Austin and I have a great stereo to make the miles go by... Takers? Stig ;; __________________________________________________________________________ ;; Stig(a)netcom.com netcom.com:/pub/stig/00-PGP-KEY ;; It's hard to be cutting-edge at your own pace... 32 DF B9 19 AE 28 D1 7A ;; Bullet-proof code cannot stand up to teflon bugs. A3 9D 0B 1A 33 13 4D 7F

1 0

Dead Man's Stick
by Black Unicorn 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -> From: "Alan (Miburi-san) Wexelblat" <wex(a)media.mit.edu> To: cypherpunks(a)toad.com Subject: Give me your password- OR ELSE! It seems like it would be relatively simple to program in a sort of dead-man switch at the time of creation of the secret key. [...] As you can imagine, there are increasing levels of personal security you might employ. For example, using the duress phrase might be set up to change the pass-phrase to something *you* don't know but which is known by a trusted other party (wife, mother, agent/lawyer, etc.). Knowing this phrase doesn't help them since that phrase can't access your secret until *after* you've given the duress phrase and the software has disabled your normal access phrase. <- The problem with the duress phrase seems to be this: One would use such a phrase when physical site security had been compromised no? Let's assume government types (which seems to be the hint I get when you suggest the alternate pass phrase being held by your lawyer. It's fairly easy to duplicate the key and stick it somewhere on a floppy and try the passwords extracted from you via rubber hose method on the copy rather than the original. In fact, if people being to use duress codes, it seems that this would become standard practice, if it's not already. In as far as the idea behind a duress code is to keep you from being beaten repeatedly by making it impossible for you to decode the information alone, copying the encrypted key defeats this method. :( - -> - --Alan Wexelblat, Reality Hacker, Author, and Cyberspace Bard Media Lab - Advanced Human Interface Group wex(a)media.mit.edu Voice: 617-258-9168, Pager: 617-945-1842 PUBLIC KEY available by request "To pleasure!" "To passion!" "To paradise!" "To pain!" "Tonight!" <- -----BEGIN PGP SIGNATURE----- Version: 2.3 iQCVAgUBLPmWBhibHbaiMfO5AQEQuQQApDtaIxVjjZvdUYD9Jl6FZGdq62SpPM+y KMqsIvSOhPOK2kOsoAyLuIN4+bXVUyTHiAkYX/ye2q2gqj9yrOLvkGyH6yak5YFi xoOCYx6qGScHeoqwpJKoRTTwUjAo79ZmXupA+ylX527eQDILwZJa+W+wSln/rXhG zajsBTeG/mw= =B4y+ -----END PGP SIGNATURE-----

1 0

Book Info Needed
by an4914＠anon.penet.fi 17 Dec '03

17 Dec '03

Could anyone who has specific information (ISBN, Publisher, [US] Price) on either or both of these books *please* e-mail or post to cypherpunks? Applied Cryptography, Schneier(sp?) Virtual Light, Gibson Thanks in advance... ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

1 0

The Cure
by an32951＠anon.penet.fi 17 Dec '03

17 Dec '03

Amount of e-mail from the Cypherpunks list at 11am, Mon/29: 22 Number of pieces concerning one cretin: 14. The best filter would be a filter of no response. By feeding a puny little ego simple enough to need nothing more than acknowledgement to rejoice in its lost sense of self, its incentive is continually renewed. Remember, this is some wretch who has clearly been shunted aside by all the humans it has ever encountered, probably for the same reasons it haunts us here. All it wants is to be the center of attention, and having succeeded, it will not go away. And so, a suggestion: How about an undetermined period of time during which everyone simply agrees not to answer anything it says? Undetermined because it'll just show up again once it knows people will talk about it again. It craves fame. It resents what it perceives to be the fame of the better-known members of this list to be. It is jealous of that fame, and wants some for itself. It is sick and ugly, small and unintelligent, resentful of its underdeveloped brain and the fact that everyone he looks up to instantly recognizes his stupidity. And now it has found a way to get those very people to acknowledge it, discuss it, feel threatened by it. It is used to rejection, so the endless repeats of it mean nothing. And then even less in the face of the warm glow at the center of the Cypherpunks collective attention. It's techniques are working, and only because the members of this list are obliging it. This is the first and the last word I'll ever write about about it. If we all did that, it would go away. Coerr ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

1 0