Re: CDR: IP, forwarded posts, and copyright infringement

2001-01-11 Thread Bill Stewart

At 11:36 AM 1/10/01 -0600, Jim Choate replied to Declan's   post:
  (Hint: U.S. copyright law does not make mere possession or archiving
  an offense. Try distribution, performance, etc.)

Hint: WRONG.

Simply possessing a paperback book that has had its cover removed as a
sign of 'destroyed' status is in fact a crime. Used book stores that have
them in stock can be charged accordingly.

At 12:54 PM 1/10/01 -0500, Declan McCullagh wrote:
Anyway, Jim is conflating physical control over an instantiation of IP with 
the rights conferred by IP law. If someone copies Microsoft Word (or a Tom 
Clancy novel) onto a CDROM and gives it to me, I am not liable.

The paperback book example has nothing to do with intellectual property -
it's about real property, the dead-tree portion of the book that's left
when the bookstore mails the front cover back to the distributor 
for credit and claims the rest of the book has been destroyed.
Somebody, I think Jim, incorrectly said this was an issue about royalties,
which would be IP-related, but it's not - royalties are what the 
publisher pays the author when the book gets sold, while this is about
what the bookstore does or doesn't pay the wholesaler when the book
does or doesn't get sold.  (I'm not sure which legal rules cover it -
fraud, tort, conversion, maybe theft by the store, so possibly
possession of stolen property by the purchaser or other recipient.)

However, that doesn't mean Declan's correct :-)
Before the Digital Millenium Copyright Act, he probably would have been,
but the DMCA is a vague ill-defined mess of evil intentions that
are increasingly being expanded (or at least people are attempting to
expand them; how much holds up in court remains to be seen.)
The DeCSS cases are a relatively direct use.  The Scientology claims
against E-Bay for using electronic tools (their auction system) to
violate their intellectual property constraints (by helping
ex-Scientologists sell used E-Meters to people who haven't paid
the Church of Scientology for their trade secret religious materials)
is a way blatant stretch, but seem to have been enough to intimidate E-Bay.
Thanks! 
Bill
Bill Stewart, [EMAIL PROTECTED]
PGP Fingerprint D454 E202 CBC8 40BF  3C85 B884 0ABE 4639




Re: crypto implementation for small footprint devices

2001-01-11 Thread Eric Young

Eric Murray wrote:
 
 On Wed, Jan 10, 2001 at 07:59:13AM -0700, G Weijers wrote:
  On Tue, Jan 09, 2001 at 03:42:45PM -0800, Xiao, Peter wrote:
   Hi,
   I am currently looking for crypto implementation that can fit into small
   footprint (in the order of 50K or less) devices. Ideally, an SSL type of
   protocol meets my requirements but it is almost impossible to implement it
   within 50K even with selected cipher suites. So, I am looking for
   alternatives (either symmetric key or public key based). I was thinking
   about WTLS but looks like its implementation can not be significantly
   smaller than that of TLS since it is also based on Public Key cryptography
   (I am wondering how it fits into a cellphone). Can any one tell me what is
   the approximate size of the client implementation of WTLS. Also, would
   anyone send some pointers to me regarding what I am looking for.
 
  It's not the public-key operations themselves that use the space. I've
  managed to squeeze OAEP-formatted RSA encryption into less than
  20K. The public key was hard-wired, though. You probably want to stay
  away from ASN.1 formatted data if space is a concern.

I have been doing some work on this recently, and also have gotten good,
results, specifically, PKCS#1 RSA multi-prime on a Palm is 16.5k
(1024-2 17.63sec, 1024-3 9.6sec, palm IIIx (68xxx 20mhz)), or more
interestingly
18k on a Psion (ARM7 36mhz, 1024-3 private in 0.18sec and 1024-2 in 0.34sec).
I'm waiting for ARM (or SH3/4 or anything other than 68xxx) to take over
the world.  It make the choice of public key algorithm based on
CPU load less irrelevant when low end devices have this sort of grunt.

I am interested in knowing how small EC can be for both
public/private operations.  Any public information or peoples experiences?

 Unfortunately anything that uses X.509 (like SSL) will require it.
 It's possible to write small X.509/ASN.1 decoding packages.  One that I
 wrote for a small-device SSL package takes about 11k code (gcc on Intel
 PIII) and it's not very optimized- there's lots of room to squeeze it
 down farther than the original application required.

Similar experiences here, we have an ASN.1 encoder/decoder in 8k.
I have not tries the really complex stuff yet,
like SET (and hopefully never will :-).  It is nice to have an ASN.1 encoder
this small but rather obviously it requires a bit of work per
ASN.1 data type.

eric (who has a day job at [EMAIL PROTECTED])




Re: crypto implementation for small footprint devices

2001-01-11 Thread Rich Salz

 Encoding ASN.1 really eats space though, because of the nested nature
 of complex ASN.1... unless you do some tricks like I did in US patent
 6,111,660.

It sure looks like the Umich LDAP library is prior art which invalidates
most, if not all, of the independant claims.  (At least 1 and 6, which
are the key ones.)  This library was documented in RFC 1823, published
in August 1995.
/r$




RE: Nader wants global U.N. Net-regulation body; Nader photos

2001-01-11 Thread Phillip H. Zakas


I respectfully submit to you:

1.  Ralph does not represent me or my own views.
2.  His 1960's views of the industrial society view of government, a nation
and corporations do not, imho, apply to the internet or information society.
3.  Number 1 and 2 are worth mentioning again :)

I do agree with you that in general most people are concerned with their own
day-to-day lives and cannot or don't care to understand how decisions made
in Europe or in Washington, DC regarding the internet do, or could, affect
themselves or those they know. I don't know how to solve this problem, but
my own observation is the media is quite capable of whipping people into a
frenzy (perhaps as a distraction to the daily chore of worrying about
whether there is enough or not there is enough jelly in the pantry).  I
certainly don't believe an 'egalitarian elitist' (is there such a thing?)
like Ralph can solve our problems.  Observations:

- in the case of standards and practices, corporations will charge through
and push standards and practices which enable the growth of their revenues.
In their perception they are filling the voids standards bodies and
legislative bodies leave open.  Shame on standards bodies for taking so long
to approve protocols, and creating the kind of research and peer review
environment which rivals even mathematics research (which involves years.)
Shame on legislative bodies who do not try to fully understand our new
society and rush to pass laws which are awkward and unworkable.
Corporations innovate and want to move forward; waiting years for peer
review is not realistic for many standards (I'm referring especially to
layer 4 protocols and above in the case of the ip stack).  Imagine if
Napster had waited for the RIAA to come around to a new way of music
distribution...or waited for the IETF to come up with a peer-reviewed method
of peer-to-peer file sharing.  In many ways Napster acted like a corporation
(albeit with a different motivation).
- corporations and lobbying groups represent not a single entity (the
corporation), but a group of people who are employed by the company and the
shareholders of the company.  Perhaps this is the .1% of the people you are
referring to.  Few things motivate people as much as money does.  Oh, and
free music is also apparently a great motivator.
- for the rest of us not necessarily motivated by money the key method of
influence is participation.  Participation through corporations (change from
within is sometimes not difficult to achieve); participation as a
significant contributer to a movement or project (linux for example); or
participation by creating a new kind of application which drives change.

Anyway i'm frightened that people who are supposed to get it (dyson, nader,
etc.) and don't are making the decisions.  At least with a corporation you
can buy shares, go to a shareholder meeting and speak your mind.  How do you
reverse poor judgement in an individual?
pz
btw I certainly don't think I get it any more than anyone else...I've just
not heard anyone who has presented a world view that makes sense from top to
bottom (maybe there is no comprehensive world view).

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Tom
Sent: Thursday, January 11, 2001 6:44 AM
To: Phillip H. Zakas
Cc: [EMAIL PROTECTED]
Subject: Re: Nader wants global U.N. Net-regulation body; Nader photos



"Phillip H. Zakas" wrote:

 Not to worry.  Ralph is only momentarily distracted.  Just wait for the
new
 administration to start chopping down thousand-year-old forests (and
 squishing some photogenic "poster animal" in the process).


as a matter of fact, he DOES have a point. consumers have become the
weaker part of the market food chain because they are not organized and
because they ARE sheep. they'll cry murder every time you steal
something from them, but never actually do something, and the few who do
are too isolated to be even noticed.
corporations, on the other hand, have been far more intelligent. from
MPAA/RIAA straight to WTO they understood that lobby groups can increase
their influence greatly and turn the playing field to their advantage.
it's only fair to reply in kind and organize the consumers. or rather:
the 0.1% of them who give a damn.





Radius Hacks

2001-01-11 Thread Kaane One

Anyone know of any exploitable vulnerablilities in
Radius Server? I'm on a project and their looking into
deploying Radius, whereas I'm reccomending TACACS+...

TNKS

/kaan30n3

=
kaaneone
t3knikal op3rativ3
d3pt. of mystikal awareness and overstanding
777 ahknaton plc
luxor, egypt

__
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/




Newsletter from Bacalao.Net

2001-01-11 Thread BACALAO.NET

For Seafood offers, check out 

http://bacalao.net

This is a website where 

-producers
-traders
-importers
-exporters 

of seafood can offer their products to other seafood professionals

Try it out - it is totally free of charge. 

If you register account you will also be able to use your company logo and product 
pictures while posting at the tradeboard.

If you want to unsubscribe from this list, please go to http://bacalao.net
Click 'join mailinglist'
Type in your e-mail list
Click 'unsubscribe' - and you will be history..


Best regards,
BACALAO.NET




Best New Trade Show Display by Opera Portables, Inc. adv

2001-01-11 Thread opera
Title: 























































		
		
		
		
		Opera Portables, Inc. is offering "by invitation" visits 
		to our web site. Packed full of exciting projects and news, Opera is leading the 
		industry with displays that are as much eye-popping as they are eye catching.
		Winner of numerous industry awards, including Ernst  Young's Crescendo 
		Award, Exhibitor Show's Best New Product, Forty Under 40 and Emerging 30, Opera 
		Portables is a progressive young company with imagination and vision.
		If you use displays, you really owe it to yourself to check out our stuff! Go 
		to http://206.67.63.77/
		
		Opera Portables, Inc.
		All removes honored at http://206.67.63.77/removes.htm
		
		
		



universal bullshit decryptor

2001-01-11 Thread montag montag

Finally, a free service to see through linguistic
bullshit:

http://www.pornolize.com

Try your favourite web shit site, like
www.whitehouse.gov:

http://www.pornolize.com/cgi-bin/pornolize/pornolize.cgi?lang=enurl=http%3A%2F%2Fwww.whitehouse.gov



__
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/




sup

2001-01-11 Thread SGBvsLei

i saw ur name somewhere on a board,... u were talking about NORTON YOUR EYES 
ONLY,.. i was wondering if u knew where i could get the US version or if u 
could send,... thanx,...

   :)




subscibe mailinglist

2001-01-11 Thread dutch9






[MEETINGPUNKS] Jan 2001 Cypherpunks SF -- CRYPTO author Steven Levy, DVD/DeCSS, Martin Minow Remembered

2001-01-11 Thread Bill Stewart

From:  Dave Del Torto [EMAIL PROTECTED]
-

Greetings,

Cypherpunks/Meetingpunks Announcements for January 2001!

Every month they seem to doubt us and expect our early demise, but 
EVERY SECOND SATURDAY, rain or shine, we have ... wait for it ... 
that's right: a Cypherpunks Physical Meeting (that means you show 
up!) somewhere in the San Francisco Bay Area, and this coming Second 
Saturday is no different... no budget, no frills, no BS (just the way 
Martin would've liked it) we're not going away until the NSA does. 
Check out the complete scoop at:

  This Month in SF: http://cryptorights.org/cypherpunks/2001/0113-SF.html

  All Jan Meetings: http://cryptorights.org/cypherpunks/2001/01.html
   Admin/List Page: http://cryptorights.org/cypherpunks/meetingpunks.html
The Handy Shortcut: http://cryptorights.org/meetingpunks



January 2001/San Francisco Meeting Synopsis:


SF Bay Area Cypherpunks (80th Chairborne Regiment) 
January 2001 Physical Meeting Announcement

General Info:

DATE:   Saturday 13 January 2001
TIME:   1:00 - 6:00 PM (Pacific Time)
PLACE:  San Francisco Law Enforcement Regional Training Center
(San Francisco Police Academy)
 Room 102  (or follow the cribs)

  This is the First Cypherpunks Meeting of the Millennium!

  The January 2001 Physical Meeting of the San Francisco Bay Area
  Cypherpunks will feature Steven Levy, author of the new 
  cypherpunk book "CRYPTO". If you haven't got your copy yet, buy one 
  and bring it to the meeting! We'll also spend some time catching up 
  with Cindy Cohn on the EFF's DVD/DeCSS case. At the end of 
  the meeting, we'll remember our departed friend Martin Minow 
  (who would have really enjoyed Steven's book).

  As always, this is an Open Meeting on US Soil and members of the
  Public are encouraged to attend, especially Martin's Friends and Family.


Meeting Agenda:  (all timings are approximate)

  "Our agenda is a widely-held secret."

  12:00 -  1:00 - Informal milling about, food  beverages.
   1:00 -  3:00 - General Meeting:
  HAL2001 Planning
  A Report from Burma!
  CryptoRights Foundation News
  MojoNation Update
  (Possible Mystery Ph.D.: Vna Tbyqoret)
   3:00 -  4:30 - Special Guest: Steven Levy, author of "CRYPTO"
   4:30 -  5:15 - Cindy Cohn, EFF: Update on the DVD/DeCSS Case
   5:15 -  6:00 - "Remembering Martin Minow"
   6:00 -  ?- Dinner at a nearby restaurant usually follows the
   meeting.

FULL INFO: http://cryptorights.org/cypherpunks/2001/0113-SF.html

. end here .




Thanks! 
Bill
Bill Stewart, [EMAIL PROTECTED]
PGP Fingerprint D454 E202 CBC8 40BF  3C85 B884 0ABE 4639




copy protecttion doesn't work (Re: MS Product Activation for Windows)

2001-01-11 Thread adam


Ray Dillinger wrote:
 But if Microsoft and its ilk do in fact successfully create systems
 that prevent "piracy", it won't be possible to be a hypocrite about
 it any more.  And with commercial software flatly refusing some
 kinds of use, perhaps a fair number of people who now *think* they
 are not doing any piracy will have to face some harsh facts.

Well I think the main reason no one bothered to write a license number
generator for win9x, win2k and the windows NT versions is because the
inconvenience factor is low right now -- most people have some license
numbers lying around.  People typically use the same code on all the
machines on their network just for convenience.

(Well probably someone has in fact written a crack for the different
windows versions, but my point is no one has an incentive to use such
work-arounds, because the copy protect code is not too much of a
nuisance).

The second they introduce this anti-piracy measure -- if they actually
go through with it -- the copy protect code check will be broken, with
a patch to disable it, or a program to generate licenses.  Everyone
will use it whether they paid for the windows CD, got it free with
their machine, or copied the OS.

So pretty much the only effect they'll have is to inconvenience their
users, and probably as Ray suggests make more people have negative
feelings about copy protection mechanisms because of the extra
inconvenience.

Adam




Two items

2001-01-11 Thread George

(via Wired)

http://www.theregister.co.uk/content/6/15982.html
#
#German police in Napster child porn probe By: Linda Harrison 
#in New York Posted: 10/01/2001 at 21:14 GMT
#
#German police have launched a probe into whether Napster is being 
#used to swap child porn on the Net.
#
#The investigation will also delve into other online file-swapping 
#services such as Gnutella and MyNapster, and hopes to determine 
#whether users have stored illegal material on their computers.



[ugh, comic relief]

http://www.nytimes.com/2001/01/11/nyregion/11STAT.html
#
#January 11, 2001 [snipped; NYS sued for more education funds for NYC]
#
#The New York State will soon require every graduate to pass
#college preparatory Regents exams in English, math, social studies
#and science.
#
#The Court of Appeals had earlier defined New York's constitutional
#right to a "sound basic education" as learning the competence
#to vote and serve on a jury.
#
#The plaintiffs, the Campaign for Fiscal Equity, argued that new
#Regents standards do include the cognitive skills to analyze 
#complex ballot propositions and weigh statistical and other 
#technical evidence in jury trials.
#
#But, the Campaign showed, the state does not appropriate enough
#money to meet those standards.
#
#The state's witnesses, paradoxically, denied that the state's
#own Regents standards were needed.
#
#After all, they said, jurors with trouble weighing complex
#evidence can always ask other jurors for help.
#
#Voters with only eighth-grade literacy can make up their minds
#by watching television advertisements.
#
#One state witness implied that New York City voters might be
#constitutionally entitled to less education than others, because
#the city has so many television outlets to inform the less
#literate.

Yabba-Dabba-Doo!




More on G3s

2001-01-11 Thread Tim May


[Sent this morning, 1/11, to algebra.com address. Not received as of 
11 hours later. So am sending out to cyberpass.net address.]


At 1:12 PM +0100 1/11/01, Tom wrote:
Jim Choate wrote:
  Up until then I thought I did too...I"m not so sure any more.

  It's not a clone of the HK G3 as it was explained to me, it was apparently
  used as an interim weapon when the German Army dropped the HK G3 as a
  standard issue weapon a few years ago (ala G11). Maybe FAL, they're
  selling a 'G1' rifle that uses caseless ammo? Though I can't find a
  reference to any such rifle. Maybe it was CETME you do see their gun
  pushed as the 'G3' (the HK is a 'clone' or derived weapon from the Spanish
  gun).

a friend of mine was an officer in the german army until very recently
(he decided to get a real job :) ) - give me 24 hours and I'll tell you
exactly what the past and current standard issue weapons are and what
kind of ammo they fire.

On Choate's point above, it is not FAL (a rifle, but I assume Choate 
must mean the maker of the FAL, Fabrique Nationale, now owned by 
another company, IIRC) who are making a caseless ammo rifle. Rather, 
it is in fact H-K. The G11 has been in development for close to 30 
years now.

(H-K are _also_ owned by another company. Last I heard, a British 
company bought H-K, though the factories and design groups remain in 
Germany.)

Most NATO countries have now adopted some variant of the 5.56 mm 
cartridge, in either M-16-type variants or in bullpup designs like 
the excellent Steyr AUG or the newer HK G36 (with a civilian model, 
the SL8). Neither the caseless ammo of the H-K G11 not the 
flechette-firing prototypes are getting wide acceptance.

And as relates to Choate's "I was right" point, repeated again 
recently, the G3 in use by the German army was most definitely a 7.62 
mm, i.e., a .308 Winchester. It was _not_ the 5.56 mm variant, at 
least not for wide use. (I say this because quibblers like Choate 
like to find examples where _someone_ used a 5.56 mm and then say 
"See, I was RIGHT!")

--Tim May

-- 
Timothy C. May [EMAIL PROTECTED]Corralitos, California
Political: Co-founder Cypherpunks/crypto anarchy/Cyphernomicon
Technical: physics/soft errors/Smalltalk/Squeak/agents/games/Go
Personal: b.1951/UCSB/Intel '74-'86/retired/investor/motorcycles/guns




Add photos to your account and save.

2001-01-11 Thread MarketPlaceNews
Title: PhotoPoint MarketPlace News - Add photos to your account and save









	
		
	
		
		
	
	
		
	
	
		
		
		
			


			
			



	
		
		When you add 15 photos to your albums before January
		15th, you'll save $10 on your next MarketPlace purchase.
		More info
		Once you've added your photos,
		there are LOTS of great things you can do:
	
	
		
		
	
		
		
		
			




	
		
		Arrange your family photos into albums, add captions, and then send out email invitations to your loved ones.
	
	
		

	
		
		Order prints of your favorite pictures, send them as postcards, or put them on mugs or T-shirts to create a unique and personal gift.
	
	
		
	
	
		
		Make one-minute movies with up to 24 photos from your albums.
	
	
		
	
	
		
		Send personalized e-greetings to your friends.
	
	
		
	
	
		
		Display your favorite photos with our wide selection of frames.
	


			
		
		
		
		



			
		
		
		
	
	
		
		
	
		
	
	
		
		
		
			


			
			



	
		
		Showing off your holiday photos has never been so much fun.  Not only can you make a unique photo movie using up to 24 of your digital images, now you can add a favorite holiday song.  Find out how easy it is.
		
	
	

			
		
		
	

	

			
			If you don't want to receive MarketPlace News in the future
please unsubscribe here.



 



I SEE YOUR FUTURE...

2001-01-11 Thread TruthEye Astrology

Most accurate, scientific readings ever!

http://www.trutheye.com

See for yourself what everyone's talking about.  TruthEye Horoscopes are the first 
ever to combine classic astrology with scientific precision.

Special introductory price: Only $7.00

http://www.trutheye.com