- cypherpunks-legacy - lists.cpunks.org

Re: CJR returned to sender
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:10 AM 10/27/95 -0400, "Josh M. Osborne" <stripes(a)va.pubnix.com> wrote: > They may help spread the word about >how foolish the ITAR is, and that is their only real value (well >aside from entertainment). US News & World Report, October 16, 1995, page 28, has a short article on the shirt in their Washington Whispers column :-) It's not totally accurate, but it talks about how the Feds oppose export of "simple but powerful computer programs that can be used to encrypt electronic communications. Computer buffs and private security experts say such restrictions are a threat to privacy - as well as an absurd anachronism, since the programs are already widely available. To underscore the point, one disgruntled citizen is now offering for sale over the Internet (http://colossus.net/ wepinsto/wshome.html) a T-shirt emblazoned with an encryption program known as RSA" and a bit more about the shirt and issues (and Don's refund offer to anyone arrested for wearing it) >However I think it is a good idea to slowly approch the dividing >line between exportable and non-exportable. Wouldn't it be nice >to be able to hold up the shirt and say "this is exportable", and >then scan it & save it onto a floppy and then say "this is not" >(assuming that a floppy of the shirt is denyed CJ) when arguing >with someone about how arbatary the export laws are? Obviously the next revision of the shirt should have a pocket for the optional non-exportable floppy disk :-) #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #---

1 0

Re: MD5 weakness ? [was Re: Netscape Logic Bomb detailed by IETF]
by Bill Stewart 17 Dec '03

17 Dec '03

>>As to weaknesses, I seem to remember that someone managed to forge a >>modification to a program used to observe networks on a Sun so that it >>had the same MD5 checksum as the official trusted version. But whether >>this is real is not strictly the issue. There was a program that forged CRC checksums that came out a couple years back, letting you create a Trojan Horse and modify it to match Unix "sum" checksums by adding junk to the end. I'd be extremely surprised if anyone did this with MD5; CRCs are invertable, and generally short enough to brute-force as well. #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #---

1 0

Fuck them all. Lock and load. Rock and roll. / Re: Liberals and their tacit
by The Real Guy 17 Dec '03

17 Dec '03

Tim May wrote: > >> It's war. Too late for a public relations campaign so that some future > >> Congress will slightly relax their laws. > >> And in a war, gotta break some eggs. > Perhaps if it were J. Edgar Hoover doing this instead of Democrat Louis > Freeh, we wouldn't see "nominal" liberal Ron Dellums, amongst so many > others, standing shoulder to shoulder with the fascists. (Not that I ever > though Dellums was anything other than a fascist, mind you.) > Perhaps if it were former CIA director George Bush pushing this (in his > alternate universe second term) there would be more outrage from liberals. > I'm beginning to think Federal Bureau of Inquisition Director Unfreeh must, > as rumors have long had it, have the goods on Janet Reno and Bill Clinton. > Left to our imagination what these items may be. I know for a fact that the Spooks had nothing to do with Richard Nixon recording every dirty deal that took place in the White House. I know for a fact that they certainly wouldn't use all that criminal information for blackmail. I know for a fact that they wouldn't spy on politicians and major financial figures, or take advantage of nefariously gained information in order to increase their money and power. People who smoke dope, dodge the draft, commit adultery, and perform financial fraud while govenor get to be elected President all the time, and nobody ever tries to 'control' them, or manipulate them in any way. I know all of this because I'm The Real Guy, "I used to be The Bad Lie until I got caught cheating at golf and was nominated for the Presidency."

1 0

Brit conference asks for more cyberspace violations
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- *** Fraudbusters seek fresh angles as cybercrime grows Crimebusters must devise more ingenious ways of combating fraud and will need new international policing powers to stem a rising tide of high-tech economic crime, experts say. Delegates at an economic crime conference in Cambridge, England, this week complained they lacked the tools and power to take the fight to the organized criminals whose only barrier was the speed of their modems. Culprits were hard to pin down, said Rosalind Wright, head of Britain's Serious Fraud Office. It was harder still to "swat the fly-by-nights," she said. See http://www.infobeat.com/stories/cgi/story.cgi?id=4974072-ff5 ______________________________________________________________________ "attila" 1024/C20B6905/23 D0 FA 7F 6A 8F 60 66 BC AF AE 56 98 C0 D7 B0 -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQCVAwUBNB9t9704kQrCC2kFAQGLEQP/Xo9+l5MV3KE3X1X7hCdJpaWr8gprctKR jIm2k+2RwHIVBT9IzQ0s/VEWI+8ftO43b18qlYYdbyiSGCPnJsoZtXOmivTTdcg3 U8FAJNTrbILZ4lcTYbxsAUm0U12xc4flOjK16UWzKrI3gli8Y/YPO2hMbxkBcH6P aknorOx6BpY= =1+3N -----END PGP SIGNATURE-----

1 0

Cuban Security Conference
by Ross Anderson 17 Dec '03

17 Dec '03

Mr Guevara of the Cuban embassy in London asked me to post this announcement. Pass it on. CALL FOR PAPERS INFORMATICS 96 International Conference Center Pabexpo, Havana, Cuba March 4-9, 1996 INCLUDING 3rd Ibero-American Seminar on Protection against Computer Viruses and Security of Information Technologies * Antivirus and protection software * Security of information technologies, including - diagnostic and security plans - risk analysis, contingency and recovery plans - technical aspects: identification and authentication, cryptography, security models - security organisation and management, security policy, information sorting, training of users and authentication - security evaluation - integration of security systems - audit trail * Experience Chairman of the organising committee: Jose Bidot Pelaez, Chairman, National Committee for Data Protection AND 1st International Seminar on Information Audit * Information audit in business and financial management * Information audit and current technology * Tools for information audit * Controls and risks in information systems * Information audit for information systems Chairman of the organising committee: Fransisco Deiros, President, Information Audit Group, National Committee of Informatics Papers should be sent to the convention secretariat: Lic. Nancy Batard Najarro INFORMATICS 96 Executive Secretary Palacio de las Convenciones Apartado 16046, La Habana, Cuba Tel: +537 33-1466 / 20-6850 Fax: +537 33-1657 / 33-1708 Email: infor96(a)cenisi.cu

1 0

Re: Important Digital Cash Question...
by rah＠shipwright.com 17 Dec '03

17 Dec '03

>What's the right name to use for the Banker? I've been using "Nick", >after Nick Leeson; any other suggestions? How about "Pip", J. Pierpont Morgan's childhood nickname. OK, OK, I'll sit down now... Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Shipwright Development Corporation, 44 Farquhar Street, Boston, MA 02131 USA (617) 323-7923 "Reality is not optional." --Thomas Sowell >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

Re: Digicash will not fly (not)
by Dave Farber 17 Dec '03

17 Dec '03

> >What sort of charges do Visa/Mastercard impose upon merchants? I >thought it was 3%; if so, I would suspect that this is the level of >"off-the-top" skim that the market will sustain, and DigiCash should >probably use a similar rate. > >-- >Mike Gebis gebis(a)ecn.purdue.edu Corporate Operating Systems Still Suck > Pricing is usally set so it includes the 3%. Cash prices are usually by agreement the same as credit card. Will Digicash be an extra %age or will the credit card agreements be changed Else it is 3% plus digicash for those goods that offer the credit card option

1 0

Re: Digicash will not fly (not)
by Michael J Gebis 17 Dec '03

17 Dec '03

> >While Chaum is a brilliant cryptographer, he is an incompetent businessman > >He has demonstrated this in numerous ways. > >The latest being "Cash" where the bank skims off 4% to 10% every time. > >No one is going to use digicash under these kinds of terms and > >conditions. > Doesn't just about everyone do precisely this when they pay sales tax? > Every time a buck arrives or departs a hand one pays a tax yet the > system (you and I)continues accepting these terms albeit painfully. Theoretically, when I pay sales tax I get something in return (better roads, nicer schools, improved NSA wiretaping, and other government services.) With digicash, you're paying for the use of the money itself. What sort of charges do Visa/Mastercard impose upon merchants? I thought it was 3%; if so, I would suspect that this is the level of "off-the-top" skim that the market will sustain, and DigiCash should probably use a similar rate. -- Mike Gebis gebis(a)ecn.purdue.edu Corporate Operating Systems Still Suck

2 1

Re: S. 1284 To Amend (C) Act
by msprague＠owens.ridgecrest.ca.us 17 Dec '03

17 Dec '03

"Tom Bell" <BELL(a)odo.law.udayton.edu wrote: >The 9/28/95 Congression Report states that Senators Hatch and Leahy >have introduced a bill to amend the Copyright Act in accord with the >suggestions of the recent White Paper on the National Information >Infrastructure. In relevant part, S. 1284: 1) makes transmission of copies a >type of publication (and thus potentially a means of infringing a >copyright); and 2) prohibits the importation, manufacture, or >distribution of any device the primary purpose of which is to >deactivate any technological protections that prevent or inhibit the >violation of copyrights. What occurs to me is that PGP could be considered a "device" to obscure contents of data therby preventing the determination of a copyright violation. (delitia) > >Tom W. Bell >Assistant Professor >Law and Technology Program >UD Law School >bell(a)odo.law.udayton.edu > >PGP fingerprint: >78 06 76 AC 32 38 A6 4C B3 81 F4 1E 2E 27 AC 71 > > >

2 1

DOD_com
by John Young 17 Dec '03

17 Dec '03

10-30-95. Wash Rag: "Pentagon Plans More Espionage. Business Fronts Abroad Would Expand Efforts Of a Unified Service." The Defense Department has merged its separate covert intelligence operations and plans to expand its espionage abroad, starting with establishment of phony businesses overseas as cover, and has formed the Defense HUMINT (Human Intelligence) Service, or DHS. Under the fiscal 1996 intelligence authorization bill, the DHS has been given a trial period of three years to carry on commercial activities "to provide cover security to intelligence collection activities undertaken abroad." The authority "to provide bona fide commercial cover," was so that DHS's covert operatives could "withstand detailed investigation by hostile foreign intelligence services as well as domestic scrutiny." ... scandal of the Army's Yellow Fruit op ... CIA case officers are working with DHS on the cover companies abroad; cooperation is needed because in recent years military spies overseas inadvertently had set up relations with foreigners known to be double agents. Sen. Bob Kerrey called on CIA Director John M. Deutch to "develop his human collectors, planning 10 or more years in advance for their peak usefulness," a reference to placing them abroad under deep cover for use in future crises. DOD_com (8 kb)

1 0