- cypherpunks-legacy - lists.cpunks.org

Re: PR
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Toto <toto(a)sk.sympatico.ca> writes: > So apparently, from this cop's point of view, my desire to save money > on computer peripherals is 'nasty' business, and I have to expect to > duck flying bullets so that he can attempt to administer the death > penalty to some kid stealing a car radio. The only person with any business administering the death penalty to the kid stealing a car radio is the car owner. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Microsoft Authenticode key security
by gbroiles-nospam＠netbox.com 17 Dec '03

17 Dec '03

Recent discussion on the cypherpunks list(s) talked about the feasibility of subverting Microsoft's security model by stealing their private key(s). The following snippet (originally sent to RISKS digest) might be of interest: >Date: Mon, 3 Mar 1997 19:23:15 -0800 >From: "Bob Atkinson (Exchange)" <bobatk(a)EXCHANGE.MICROSOFT.com> >Subject: Comments and corrections regarding Authenticode > >As the architect and primary implementor of the Authenticode code-signing >technology (boy, that'll get me mail :-) found in Internet Explorer 3 and in >Windows NT 4, I think my perhaps somewhat lengthy and clearly very biased >perspective on some recent articles might be of interest to others. >Bob Atkinson >[...] >For those curious: at the present time, the private keys with which >Microsoft signs code that it publishes are managed inside BBN SafeKeyper >boxes housed in a guarded steel and concrete bunker. Even were a SafeKeyper >to somehow be physically stolen, these cool little boxes have several >elaborate internal defenses designed to have the box destroy itself rather >than compromise its keys. As I understand things, a military variation on >the SafeKeyper technology is used as an integral part of launch control of >nuclear missiles on submarines in the US Navy. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

2 1

Re: This list
by Dale Thorn 17 Dec '03

17 Dec '03

Chris Melancon wrote: > I joined this list several weeks ago to learn more about encryption and > related topics. To the few posters who have passed on something useful, > thanks. To the 99.44% of you who are more interested in talking about > who is performing fellatio on who or slamming Timothy May from as many [snippo] > Consider me unsubscribed, and may those of you who work so hard to make > this list the useless crap it has turned out to be continue to suck as > much as you deserve. Ooh, poor baby. Don't let the door hit you in the ass on the way out.

1 0

Re: The Pro-CODE Bill could make things worse!
by Bill Stewart 17 Dec '03

17 Dec '03

At 06:44 AM 3/5/97 -0800, Greg Broiles wrote: >"Exports. The publisher or manufacturer of computer software or >hardware with encryption capabilities shall disclose (for reporting >purposes only) within 30 days after export to the Secretary such >information regarding a program's or product's encryption capabilities >as would be required for an individual license to export that program >or product." > >The former has no real force, as "findings" aren't enforceable, but are >intended for use by courts who are interpreting or construing a statute. >But I don't see a technical reason why the latter wouldn't be enforceable. >(Modulo the First Amendment, of course.) Can it be construed as a "taking"? (Or was that just an "excise tax", payable in intellectual property rather than in money?) Unless the information required for an individual license is substantially less under the New Regime than under the Ancien' Regime, they're asking for a lot of information - in the past, it's included source code, documentation, etc., as well as customer data. What restrictions are there on government use of this information apply? State governments, e.g. California, have a history of ripping off copyright and refusing to accept lawsuits against themselves - can the Feds do the same? Maybe they can't refuse to let you export any more, but can they threaten to publish your source code on http://www.dockmaster.mil/warez/ if you don't do what they want?.... # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

1 0

Re: EU-FBI Wiretap Pact and CALEA (Digital Telephony)
by Toto 17 Dec '03

17 Dec '03

jim bell wrote: > > At 02:25 AM 3/3/97 -0800, Tim May wrote: > >So, either the reporters here have it wrong, by implying CALEA and the > >joint U.S.-U.K. agreeement applies to _e-mail_, or in fact CALEA is being > >seen as applicable to e-mail. If the latter, then things are in much, much > >worse shape than many of us feared. > > > >If this interpretation is upheld by the courts, we are in a state of war. > >--Tim May > > Indeed, we are. Notice also that there appears to be no illusion that > these kind of bills are being done due to public demand: News on this > subject is essentially nil, particularly in the mainstream news media. When one begins adding up all of the ways in which the country is being regulated and legislated 'outside' of the influence of the voters, then it becomes apparent that we acually live in a demon-mockracy. It makes for great news when some 'little guy' manages to 'slip one by' Big Brother, but the reality is that the court system is ruled by money and power. As in the example stated above, much of the legislation proffered by those elected bears little resemblence to issues that are of genuine concern to the electorate. Any issues that the government can't ramrod through using the methods above become matters of 'National Security'. The 'law of the land' then ceases to apply, as 'Emergecy Measures' and secretive regulatory agencies write the law with no voting and a single stroke of the pen. The government even has the power to negate the ability of the individual or group to act in their own interest simply by making laws and regulations vague and/or complicated enough that it is unfeasible to act simply because of the time, energy, and funds required to do so--not to mention the 'risk' involved. Through use of regulatory approval, or witholding of such, the government has the ability to influence the fast-moving course of various areas of technology. Does anyone here want to make large investments in a product that they 'may or may not' be able to sell? This forum has members in all areas of expertise surrounding crypto issues, but can anyone state, unequivocally, all of the finer points surrounding legislation, regulation, etc., in this area? (Even if you think you 'can' legally do this-or-that, are you going to do so if told by the government that you can't and will be subject to prosecution and/or financial loss?) Do you expect for the laws to apply equally to all in areas of major government interest? Some companies are 'approved' for export, while, on very questionable legal basis, others are 'denied' approval. Do you expect this type of gladhanded regulatory approach to be any different for CypherPunks remailers, versus military Onion Routers? When some remailer operator is 'set-up' by the Right Reverend G. Stooge on a pornography bust, or by G.I.Joe on a terrorism bust, do you expect the target to be a CypherPunk or a Vice-Admiral? The fact of the matter is, the government is fully capable of burying the facts on any area of interest they wish, under cover of defending us from the 'bad guys' lurking in the bushes, and once every four years they step into the limelight to decide who gets to spend the next four years passing another mountain of legislation that, inch by inch, eats away at the rights and freedoms that are theoretically guaranteed by the Constitution. One has to wonder just how many times in history a vote in favor of restricting the privacy and rights of citizens was gained by trading off a vote affecting 'hog futures'. -- Toto http://bureau42.base.org/public/xenix/xenbody.html

1 0

Re: toad
by Dale Thorn 17 Dec '03

17 Dec '03

Igor Chudov @ home wrote: > Dale Thorn wrote: > [about gilmore] > > I didn't mean he shouldn't read them, although if he did, it might > > be a first! I meant that if the messages pass thru him before any- > > one else gets to see them, well, better check them carefully... > i suggest that you write a script that checks on everybody, including > myself. it should basically subscribe to all mailing lists and store > checksums with hostnames indexed by message-id. I would if I could. You know how I love to produce those charts with [STATS] in the header. I'm a heavy user of difference-utility programs and personal "cooks" on the daytime job, but my problem here is I don't run a real O/S (I have Win95), and so getting the mail into a parseable format is prohibitively time-consuming. If the c-punks were a real threat to national security or something (what a hoot that would be!), you can be sure there'd be a lineup at the O/S utility window to get whatever traffic analysis s/w was available. Right now I do my part the hard way, i.e., hunt, peck, and hope the Windows system doesn't crash every 25 messages, which is its usual. Maybe IBM's are better - I use HP.

1 0

Re:Vebis radio jokes
by Ray Arachelian 17 Dec '03

17 Dec '03

On Wed, 5 Mar 1997, Vebis wrote: > Hmmmm, Tastes like chicken! Uh huh, huh Vebis, that was like kwel! Heh heh, heh heh! Do it again! So like Vebis, how did it feel to score with a male german sheppard? I bet you swallowed, huh huh, huh, 'cause you said "Tastes like chicken!" heh heh, heh heh, heh heh... > Vebis KOTM > Vebis and Buttmunch BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps =====================================Kaos=Keraunos=Kybernetos============== .+.^.+.| Ray Arachelian | "If you're gonna die, die with your|./|\. ..\|/..|sunder(a)sundernet.com|boots on; If you're gonna try, just |/\|/\ <--*-->| ------------------ |stick around; Gonna cry? Just move along|\/|\/ ../|\..| "A toast to Odin, |you're gonna die, you're gonna die!" |.\|/. .+.v.+.|God of screwdrivers"| --Iron Maiden "Die With Your Boots on"|..... ======================== http://www.sundernet.com ========================= For with those which eternal lie, with strange eons even death may die.

1 0

Re: New York Times report on FC97
by Dale Thorn 17 Dec '03

17 Dec '03

Timothy C. May wrote: > This is my view as well. > I welcome the clarifications Vince Cate has provided, and I wish him well > in Anguilla. And I welcome, as always, the various comments of Black > Unicorn about the offshore investment and offshore tax avoidance market. [snip] > At least here in sunny California (it ain't subtropical, but it's warm > enough for me most days) I can sit on my mountaintop and rant as much as I > want without fear that I'll be invited to leave. And only one of my assault > rifles was ever registered to me, courtesy of the fascist Dianne Fineswine > and her commie sympathizer friends. [Serious thought] Some people I know have found a haven they swear by in Costa Rica. Apparently you don't have to be rich to live there.

2 1

Re: Speech
by Trevor Goodchild 17 Dec '03

17 Dec '03

On Thu, 6 Mar 1997, Dr.Dimitri Vulis KOTM wrote: > Homosexual Charles Platt <cp(a)panix.com> writes: > <garbage> > > Dmitri Vulis was kicked off my ISP many months ago for allowing > > multiple logins under his user name and password, presumably so t > > that his friends at Brighton Beach could share his account without > > paying the $10 per month for email+Usenet. At the very least, this > >indicates a certain... um ... lack of class. > > <more garbage> > > This isa lie with no basis in reality whatsoever. > > I'm glad that CHarles Platt and other homosexuals are dying from AIDS. > > --- > > Dr.Dimitri Vulis KOTM > Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013,14.4Kbp Oh, my dear Doctor, I do regret that I have forgotten to inform you that last year, shortly after our sweet night together where you gave such good head and let me inside your sweet, though untight ass, that I have tested HIV positive. I hope this doesn't inconvenience you much, and send my regards to your sweet wife, whom I remember having a much tighter anus than your own - no offense, but she is much tighter. I hope this doesn't influence your feelings about me, and I hope that next time you drop by my home in Fire Island that you bring her along to share our bed. Oh, and next time I want you to stay the whole weekend; one night stands are fun, but waking up in an empty bed is not my idea of a good lay. With love, -- Trevor. --- Trevor Goodchild

1 0

Terrorist Use of WMD
by John Young 17 Dec '03

17 Dec '03

The President's February 27 report to Congress on "Threats of Terrorist Use of Weapons of Mass Destruction" proposes: New or enhanced technical capabilities needed to counter increasingly sophisticated terrorist organizations include the ability to intercept advanced telecommunications, with a primary focus on wireless and satellite-based systems; improved tracking and physical surveillance technologies for weapons, explosives, etc.; automatic language translation and text/key word recognition; and technology to support surreptitious entry. Current research and development funding is not adequate. Additional funding is needed to continue work on an indepth chemical characterization of foreign explosives and for continued development of contraband detection technology. Additional funding would accelerate development in a number of key technologies, particularly communications interception, tracking, covert communications, and surreptitious access. These technologies are critical to the support of counterterrorism investigations, especially WMD- related threats. See the full report on specific threats and countermeasures: http://jya.com/cr022797.txt (294K) The report was mandated by the "The National Defense Authorization Act for Fiscal Year 1997": http://jya.com/ndatoc.htm (70K toc; 1.5M full act) It correlates with "The Antiterrorism Act of 1996": http://jya.com/pl104-132.txt (358K) The Senate "Intelligence Committee Report 1995-96": http://jya.com/sr105-1.htm (135K) The "Intelligence Authorization Act for 1997": http://jya.com/pl104-293.txt (85K) And "Executive Order 13010--Critical Infrastructure Protection": http://jya.com/eo13010.txt (20K)

1 0