Archive-name: net-privacy/part2 Last-modified: 1993/3/3 Version: 2.1   IDENTITY, PRIVACY, and ANONYMITY on the INTERNET ================================================  (c) 1993 L. Detweiler.  Not for commercial use except by permission from author, otherwise may be freely copied.  Not to be altered.  Please credit if quoted.  SUMMARY =======  Email and account privacy, anonymity, file encryption,  academic  computer policies, relevant legislation and references, EFF, and  other privacy and rights issues associated with use of the Internet and global networks in general.  (Search for <#.#> for exact section. Search for '_' (underline) for next section.)  PART 2 ====== (this file)  Resources ---------  <4.1> What UNIX programs are related to privacy? <4.2> How can I learn about or use cryptography? <4.3> What is the cypherpunks mailing list? <4.4> What are some privacy-related newsgroups?  FAQs? <4.5> What is internet Privacy Enhanced Mail (PEM)? <4.6> What are other Request For Comments (RFCs) related to privacy? <4.7> How can I run an anonymous remailer? <4.8> What are references on privacy in email? <4.9> What are some email, Usenet, and internet use policies? <4.10> What is the MIT ``CROSSLINK'' anonymous message TV program?  Miscellaneous -------------  <5.1> What is ``digital cash''? <5.2> What is a ``hacker'' or ``cracker''? <5.3> What is a ``cypherpunk''? <5.4> What is `steganography' and anonymous pools? <5.5> What is `security through obscurity'? <5.6> What are `identity daemons'? <5.7> What standards are needed to guard electronic privacy?  Issues ------  <6.1> What is the Electronic Frontier Foundation (EFF)? <6.2> Who are Computer Professionals for Social Responsibility (CPSR)? <6.3> What was `Operation Sun Devil' and the Steve Jackson Game case? <6.4> What is Integrated Services Digital Network (ISDN)? <6.5> What is the National Research and Education Network (NREN)? <6.6> What is the FBI's proposed Digital Telephony Act? <6.7> What other U.S. legislation is related to privacy on networks? <6.8> What are references on rights in cyberspace? <6.9> What is the Computers and Academic Freedom (CAF) archive?  Footnotes ---------  <7.1> What is the background behind the Internet? <7.2> How is Internet `anarchy' like the English language? <7.3> Most Wanted list <7.4> Change history   * * *   RESOURCES =========   _____ <4.1> What UNIX programs are related to privacy?    For more information, type `man [cmd]' or `apropos [keyword]' at the   UNIX shell prompt.      passwd - change password     finger - obtain information about a remote user     chfn   - change information about yourself obtainable by remote              users (sometimes `passwd -f')     chmod  - change the rights associated with a file or directory     umask  - (shell) change the default (on creation) file access              rights     ls     - list the rights associated with files and directories     xhost  - allow or disable access control of particular users to an              Xwindow server     last   - list the latest user logins on the system and their              originations     who    - list other users, login/idle times, originations     w      - list other users and what they are running     xhost  - access control list for X Window client use     xauth  - control X Window server authentication          .signature  - file in the home directory appended to USENET posts     .forward    - file used to forward email to other accounts     .Xauthority - file used for X Window server authentication keys     $SIGNATURE  - variable used for name in email and USENET postings    The 'tcpdump' packet-tracing program is loosely based on SMI's   "etherfind" although none of the etherfind code remains.  It was   originally written by Van Jacobson, Lawrence Berkeley Laboratory,   as part of an ongoing research project to investigate and improve   tcp and internet gateway performance.  A current version is   available via anonymous ftp from host ftp.ee.lbl.gov (currently at   address 128.3.254.68) file tcpdump.tar.Z (a compressed Unix tar   file). This program is subject to  the 'standard' Berkeley network   software copyright.  _____ <4.2> How can I learn about or use cryptography?    A general introduction to mostly theoretical cryptographic issues,   especially those frequently discussed in sci.crypt, is available   in FAQ form:    >  Compiled by:   >        cme@ellisun.sw.stratus.com (Carl Ellison)   >        Gwyn@BRL.MIL (Doug Gwyn)   >        smb@ulysses.att.com (Steven Bellovin)    NIST (U.S. National Institute for Standards and Technology)   publishes an introductory paper on cryptography, special   publication 800-2 ``Public-Key Cryptograhy'' by James Nechvatal   (April 1991).  Available via anonymous FTP from   csrc.ncsl.nist.gov (129.6.54.11), file pub/nistpubs/800-2.txt.    Also via available anonymous FTP from wimsey.bc.ca as crypt.txt.Z   in the crypto directory.  Covers technical mathematical aspects   of encryption such as number theory.    More general information can be found in a FAQ by Paul Fahn of RSA   Labortories via anonymous FTP from rsa.com in /pub/faq.ps.Z.  See   the `readme' file for information on the `tex' version.  Also   available as hardcopy for $20 from   RSA Laboratories, 100 Marine   Parkway, Redwood City, CA  94065.  Send questions to   faq-editor@rsa.com.    Phil Zimmerman's PGP (Pretty Good Privacy) public-domain package   for public key encryption is available at numerous sites, and is   in widespread use over the internet for general UNIX-based file   encryption (including email).  Consult the archie FTP database.    Also see the newsgroup alt.security.pgp.  Mailing list requests   to info-pgp-request@lucpul.it.luc.edu.    From the RIPEM FAQ by Marc VanHeyningen   <mvanheyn@whale.cs.indiana.edu> on news.answers:    > RIPEM is a program which performs Privacy Enhanced Mail (PEM)   > using the cryptographic techniques of RSA and DES.  It allows   > your electronic mail to have the properties of authentication   > (i.e. who sent it can be confirmed) and privacy (i.e. nobody can   > read it except the intended recipient.)   >    > RIPEM was written primarily by Mark Riordan   > <mrr@scss3.cl.msu.edu>. Most of the code is in the public domain,   > except for the RSA routines, which are a library called RSAREF   > licensed from RSA Data Security Inc.   >    > RIPEM is available via anonymous FTP to citizens and permanent   > residents in the U.S. from rsa.com; cd to rsaref/ and read the   > README file for info.   >    > RIPEM, as well as some other crypt stuff, has its `home site' on   > rpub.cl.msu.edu, which is open to non-anonymous FTP for users in   > the U.S. and Canada who are citizens or permanent residents.  To   > find out how to obtain access, ftp there, cd to pub/crypt/, and   > read the file GETTING_ACCESS.    Note: cryptography is generally not well integrated into email yet   and some system proficiency is required by users to utilize it.  _____ <4.3> What is the cypherpunks mailing list?    Eric Hughes <hughes@toad.com> runs the `cypherpunk' mailing list   dedicated to ``discussion about technological defenses for privacy   in the digital domain.''  Send email to   cypherpunks-request@toad.com to be added or subtracted from the   list. From the charter:    > The most important means to the defense of privacy is encryption.   > To encrypt is to indicate the desire for privacy.  But to encrypt   > with weak cryptography is to indicate not too much desire for   > privacy. Cypherpunks hope that all people desiring privacy will   > learn how best to defend it.  _____ <4.4> What are some privacy-related newsgroups?  FAQs?      Newsgroups   ==========    alt.comp.acad-freedom.news   alt.comp.acad-freedom.talk    --------------------------     Moderated and unmoderated issues related to academic freedom and     privacy at universities. Documented examples of violated     privacy in e.g. email.  Documented examples of `censorship' as     in e.g. limiting USENET groups local availability.    alt.cyberpunks   --------------     Virtual reality, (science) fiction by William Gibson and Bruce      Sterling, cyberpunk in the mainstream.     alt.hackers   -----------     USENET Network News Transfer Protocol (NNTP) posting mechanisms,      Simple Mail Transfer Protocol (SMTP), `obligatory hack' reports.    alt.privacy   -----------     General privacy issues involving taxpaying, licensing, social     security numbers, etc.      alt.security    comp.security.misc   ------------------     Computer related security issues.  FAQ in news.answers below.      alt.security.pgp   alt.security.ripem   ----------------     Dedicated to discussing public domain cryptographic software     packages: PGP, or ``Pretty Good Privacy'' Software developed by     Phil Zimmerman for public key encryption, and RIPEM by Mark     Riordan for public key and DES encryption.      comp.society.privacy   --------------------     Privacy issues associated with computer technologies.  Examples:     caller identification, social security numbers, credit     applications, mailing lists, etc.  Moderated.        comp.eff.news   comp.eff.talk   -------------     Moderated and unmoderated groups associated with the Electronic     Frontier Foundation started by Mitch Kapor for protecting civil     and constitutional rights in the electronic realm.      news.admin   news.admin.policy   -----------------     Concerns of news administrators.  NNTP standards and mechanisms.        news.lists   ----------     USENET traffic distributions.  Most frequent posters, most     voluminous groups, most active sites, etc.      sci.crypt   ---------     Considers scientific and social issues of cryptography.      Examples: legitimate use of PGP, public-key patents, DES,     cryptographic security, cypher breaking, etc.       FAQs   ====    FAQs or ``Frequently-Asked Questions'' are available in the   newsgroups *.answers or via anonymous FTP to pit-manager.mit.edu   [18.172.1.27] (also rtfm.mit.edu)  from the directory   /pub/usenet/news.answers/[x] where [x] is the archive name. This   FAQ is archived in the file `net-privacy'.   Others are:    network-info/part1     ------------------     Sources of information about the Internet and how to connect to     it, through the NSF or commercial vendors.      alt-security-faq   ----------------     Computer related security issues arising in alt.security and     comp.security.misc, mostly UNIX related.      ssn-privacy    -----------     Privacy issues associated with the use of the U.S. Social     Security number (SSN).      pdial   -----     Public dialup internet accounts list.      college-email/part1   -------------------     How to find email addresses for undergraduate and graduate     students, faculty and staff at various colleges and     universities.      ripem/faq   ---------     Information on RIPEM, a program for public key mail encryption     officially sanctioned by Public Key Partners Inc., the company     that owns patents on public key cryptography.      unix-faq/faq/part1   ------------------     Frequently-asked questions about UNIX, including information on     `finger' and terminal spying.    distributions/*   ---------------      Known geographic, university, and network distributions.  _____ <4.5> What is internet Privacy Enhanced Mail (PEM)?    Internet drafts on Privacy Enhanced Mail (PEM) describe a standard   under revision for six years delineating the official protocols for   email encryption.  The standard has only recently stabilized and   implementations are being developed.    - RFC-1421: ``Privacy Enhancement for Internet Electronic Mail:      Part I: Message Encryption and Authentication Procedures.'' J.     Linn <104-8456@mcimail.com>    - RFC-1422: ``Privacy Enhancement for Internet Electronic Mail: Part     II: Certificate-Based Key Management'' S. Kent <Kent@BBN.com>    - RFC-1424: ``Privacy Enhancement for Internet Electronic Mail:      Part IV: Key Certification and Related Services'' B. Kaliski     <burt@rsa.com>    - RFC-1423: ``Privacy Enhancement for Internet Electronic Mail: Part     III: Algorithms, Modes, and Identifiers'' D. Balenson     <belenson@tis.com>    Send email to pem-info@tis.com for more information.  See ``RFCs    related to privacy'' for information on how to obtain RFCs.    _____ <4.6> What are other Requests For Comments (RFCs) related to privacy?    RFC-822:  SMTP, Simple Mail Transfer Protocol   RFC-977:  NNTP, Network News Transfer Protocol   RFC-1036: Standard for interchange of network news messages   RFC-1208: Glossary of Networking Terms   RFC-1207: Answers to ``experienced Internet user'' questions   RFC-1206: Answers to ``new Internet user'' questions   RFC-1355: Privacy issues in Network Information center databases       RFC-1177 is ``FYI: Answers to commonly asked ``new internet user''    questions, and includes: basic terminology on the Internet (TCP/IP,   SMTP, FTP), internet  organizations such as IAB (Internet   Activities Board) and IETF  (Internet Enbgineering Task Force), and   a glossary of terms.  Also from ftp.eff.org:   /pub/internet-info/internet.q.    > RFCs can be obtained via FTP from NIC.DDN.MIL, with the pathname   > RFC:RFCnnnn.TXT or RFC:RFCnnnn.PS (where `nnnn' refers to the   > number of the RFC).  Login with FTP, username `anonymous' and   > password `guest'.  The NIC also provides an automatic mail   > service for those sites which cannot use FTP.  Address the   > request to SERVICE@NIC.DDN.MIL and in the subject field of the   > message indicate the RFC number, as in `Subject: RFC nnnn' (or   > `Subject: RFC nnnn.PS' for PostScript RFCs).   >   > RFCs can also be obtained via FTP from NIS.NSF.NET.  Using FTP,   > login with username `anonymous' and password `guest'; then   > connect to the RFC directory (`cd RFC').  The file name is of the   > form RFCnnnn.TXT-1 (where `nnnn' refers to the number of the   > RFC).  The NIS also provides an automatic mail service for those   > sites which cannot use FTP.  Address the request to   > NIS-INFO@NIS.NSF.NET and leave the subject field of the message   > blank.  The first line of the text of the message must be `SEND   > RFCnnnn.TXT-1', where nnnn is replaced by the RFC number.    _____ <4.7> How can I run an anonymous remailer?    Cypherpunk remailer source is at soda.berkeley.edu in the   /pub/cypherpunks directory.  It's written in PERL, and is   relatively easy to install (no administrative rights are required).   Karl Barrus  <elee9sf@menudo.uh.edu> has more information and   modifications. Also, most remailer operators mentioned above are   amenable to discussing features, problems, and helping new sites   become operational. Address all points in the section   ``responsibities of anonymous use'' in this document prior to   advertising your service.  You should be committed to the long-term   stability of the site and avoid running one surreptitiously.  _____ <4.8> What are references on privacy in email?     Brown, Bob. ``EMA Urges Users to Adopt Policy on E-mail Privacy.''     Network World (Oct 29, 1990), 7.44: 2.      Bairstow, Jeffrey. ``Who Reads your Electronic Mail?'' Electronic   Business  (June 11, 1990) 16 (11): 92.    ``Electronic Envelopes - the uncertainty of keeping e-mail private''   Scientific American, February 1993.    ftp.eff.org   ===========    /pub/eff/papers/email_privacy   ---     Article on the rights of email privacy. by Ruel T. Hernandez.    /pub/academic/law/privacy.email   ---     ``Computer Electronic Mail and Privacy'', an edited version of a     law school seminar paper by Ruel T. Hernadez.    /pub/eff/papers/email-privacy-biblio-2   ---     Compilation of bibliography on E-Mail and its privacy issues (part     2 of the work).  Compiled by Stacy B. Veeder (12/91).    /pub/eff/papers/email-privacy-research   ---     The author at Digital Research tried to formalize their employee     privacy policy on E-Mail.  The casesightings are divided into two     groups: US Constitutional law, and California law.    /pub/eff/papers/company-email   ---     Formulating a Company Policy on Access to and Disclosure of     Electronic Mail on Company Computer Systems by David R. Johnson     and John Podesta for the Electronic Mail Assocation    /pub/cud/alcor   ---     Information on Alcor Co., an e-mail privacy suit.    /pub/academic/law/privacy.email   ---     Email privacy search at Berkeley.  _____ <4.9> What are some email, Usenet, and internet use policies?    The Computer Policy and Critiques Archive is a collection of the   computer policies of many schools and networks, run by the   Computers and Academic Freedom group on the Electronic Frontier   Foundation FTP site. The collection also includes critiques of some   of the policies.    > If you have gopher, the archive is browsable with the command:   > gopher -p academic/policies gopher.eff.org   >    > The archive is also accessible via anonymous ftp and email. Ftp   > to ftp.eff.org (192.88.144.4). It is in directory   > `pub/academic/policies'. For email access, send email to   > archive-server@eff.org. Include the line:   >    > send acad-freedom/policies <filenames>   >    > where <filenames> is a list of the files that you want. File   > README is a detailed description of the items in the directory.   >    > For more information, to make contributions, or to report typos   > contact J.S. Greenfield (greeny@eff.org). Directory `widener'   > contains additional policies (but not critiques).     ftp.eff.org   ===========      /pub/cud/networks   ---     Acceptable Use Policies for various networks, including CompuServe     (file `compuserve'), NSFNET (file `nsfnet') with information on     research and commercial uses. See /pub/cud/networks/index.    /pub/cud/networks/email   ---     Policies from various sysadmins about how they handle the issue of     email privacy,  control, and abuse, compiled by T. Hooper      <hooper_ta@cc.curtin.edu.au>.      /pub/cud/schools/   ---     Computer use policies of a number of schools. See schools/Index     for a full list and description.       Commentary   ==========    /pub/academic/faq/policy.best   ---     Opinions on the best academic computer policies.     /pub/academic/faq/email.policies   ---     Do any universities treat email and computer files as private?    /pub/academic/faq/netnews.writing   ---     Policies on what users write on Usenet.    /pub/academic/faq/netnews.reading   ---     Policies on what users read on Usenet: should my university remove     (or restrict) Netnews newsgroups because some people find them     offensive?    /pub/academic/faq/policy   ---     What guidance is there for creating or evaluating a university's     academic computer policy?  ______ <4.10> What is the MIT ``CROSSLINK'' anonymous message TV program?    > CROSSLINK is an anonymous message system run on MIT Student   > Cable TV-36. It provides an anonymous medium through which MIT   > students can say those things they might otherwise find   > difficult, inconvenient or impossible to say in person.  It's   > also a way to send fun or totally random messages to your   > friends over the air.  It is similar to the anonymous message   > pages found in many college newspapers, except that it's   > electronic in nature and it's free.    Messages can be posted to the service via email.  For more   information send email to crosslink@athena.mit.edu.   MISCELLANEOUS =============  _____ <5.1> What is ``digital cash''?    With digital encryption and authentication technologies, the   possibility of a widespread digital cash system may someday be   realized.  A system utilizing codes sent between users and banks   (similar to today's checking system except entirely digital) may   be one approach.  The issues of cryptography, privacy, and   anonymity are closely associated with transfer of cash in an   economy.  See the article in Scientific American by David Chaum   (~Dec.1992).    An experimental digital bank is run by Karl Barrus   <elee9sf@Menudo.UH.EDU> based on suggestions by Hal Finney on the   cypherpunks mailing list.  To use the server send mail to   elee7h5@rosebud.ee.uh.edu message with the following text:      ::     command: help          user@host    where `user@host' is your email address.      _____ <5.2> What is a ``hacker'' or ``cracker''?    These terms arouse strong feelings by many on their meaning,   especially on the internet.  In the general news media in the past   a person who uses computers and networks to malicious ends (such as   breaking into systems) has been referred to as a hacker, but most   internet users prefer the term ``cracker'' for this.  Instead, a   ``hacker'' is perceived as a benign but intensely ambitious,   curious, and driven computer user who explores obscure areas of a   system, for example---something of a proud electronic pioneer and   patriot.  This is the sense intended in this document.  See also   the ``Hacker's Dictionary'' and the FAQ `alt-security-faq'.     _____ <5.3> What is a ``cypherpunk''?    From the charter of the cypherpunk mailing list:    > Cypherpunks assume privacy is a good thing and wish there were   > more of it.  Cypherpunks acknowledge that those who want privacy   > must create it for themselves and not expect governments,   > corporations, or other large, faceless organizations to grant   > them privacy out of beneficence.  Cypherpunks know that people   > have been creating their own privacy for centuries with whispers,   > envelopes, closed doors, and couriers.  Cypherpunks do not seek   > to prevent other people from speaking about their experiences or   > their opinions.    See information on the cypherpunk mailing list below.    See also the CryptoAnarchist Manifesto and the Cryptography Glossary   in soda.berkeley.edu:/pub/cypherpunks.  _____ <5.4> What is `steganography' and anonymous pools?    Closely associated with encryption is `steganography' or the   techniques for not only pursuing private (encrypted) communication   but concealing the very  existence of the communication itself.    Many new possibilities in this area are introduced with the   proliferation of computer technology.  For example, it is possible   to encode messages in the least-significant bits of images,   typically the most 'noisy'. In addition, when such an item is   posted in a public place (such as a newsgroup), virtually   untraceable  communication can take place between sender and   receiver.  For  steganographic communications in the electronic   realm one another possibility is setting up a mailing list where   individual messages get broadcast to the entire list and individual   users decode particular messages with their unique key.   An   anonymous pool has been set up by Miron Cuperman   (miron@extropia.wimsey.com) for experiments.  Send email to   <pool0-request@extropia.wimsey.com>  with one of the following   commands in the subject line:      subscribe     unsubscribe     help  _____ <5.5> What is `security through obscurity'?    `Security through obscurity' refers to the attempt to gain   protection from system weaknesses by hiding sensitive information   or programs relating to them.  For example, a company may not make   public information on its software's encryption techniques to evade   `attacks' based on knowledge of it. Another example would be   concealing data on the existence of security holes or bugs in   operating systems.  Or, some reliance may be made on the fact that   some standard or mechanism with potential problems is serious   because they are ``not widely known'' or ``not widely used.'' This   argument is occasionally applied to mechanisms for email and Usenet   posting `forgery'. `Security through obscurity' is regarded as a   very feeble  technique at best and inappropriate and ineffective at   worst (also called the ``head-in-the-sand approach''). See the FAQ   for alt.security.        Some remarks of John Perry Barlow, cofounder of the Electronic   Frontier Foundation, directed to NSA agents at the First   International Symposium on National Security & National   Competitiveness held in McLean, Virginia  Dec. 1, 1992:    > Digitized information is very hard to stamp classified or keep   > contained. ... This stuff is incredibly leaky and volatile.  It's   > almost a life form in its ability to self-propagate.  If   > something hits the Net and it's something which people on there   > find interesting it will spread like a virus of the mind.  I   > believe you must simply accept the idea that we are moving into   > an environment where any information which is at all interesting   > to people is going to get out.  And there will be very little   > that you can do about it.  This is not a bad thing in my view,   > but you may differ...  _____ <5.6> What are `identity daemons'?      RFC-931 describes a protocol standard that allows UNIX programs to   query a remote user's login name after connection to a local   communication socket (a connection of this type is established   during FTP and TELNET sessions, for example).  The standard is not   widely supported, perhaps 10% of internet sites currently implement   it but the number is increasing.  The mechanism is detrimental to   anonymity.  Regular users cannot disable it but system   adminstrators can circumvent it.  This standard may represent a   trend toward greater authentication mechanisms.  _____ <5.7> What new standards are needed to guard electronic privacy?     Remailing/Posting   -----------------      - Stable, secure, protected, officially sanctioned and permitted,     publicly and privately operated anonymous servers and hubs.   - Official standards for encryption and anonymity in mail and USENET     postings.   - Truly anonymous protocols with source and destination information     obscured or absent and hidden routing mechanisms (chaining,     encrypted addresses, etc.)   - Standards for anonymous email addressing, embedding files, and     remailer site chaining.      General   -------      - Recognition of anonymity, cryptography, and related privacy     shields as legitimate, useful, desirable, and crucial by the     general public and their governments.   - Widespread use and implementation of these technologies      by systems designers into     hardware, software, and standards, implemented `securely,'     `seamlessly,' and `transparently'.   - General shift of use, dependence, and reliance to means other than     wiretapping and electronic surveillance by law enforcement     agencies.   - Publicity, retraction, and dissolution of laws and government     agencies opposed to privacy, replaced by structures dedicated to     strengthening and protecting it.   ISSUES ======  _____ <6.1> What is the Electronic Frontier Foundation (EFF)?    From ftp.eff.org:/pub/EFF/mission_statement:    > A new world is arising in the vast web of digital, electronic   > media which connect us.  Computer-based communication media like   > electronic mail and computer conferencing are becoming the basis   > of new forms of community.  These communities without a single,   > fixed geographical location comprise the first settlements on an   > electronic frontier.   >    > While well-established legal principles and cultural norms give   > structure and coherence to uses of conventional media like   > newspapers, books, and telephones, the new digital media do not   > so easily fit into existing frameworks.  Conflicts come about as   > the law struggles to define its application in a context where   > fundamental notions of speech, property, and place take   > profoundly new forms. People sense both the promise and the   > threat inherent in new computer and communications technologies,   > even as they struggle to master or simply cope with them in the   > workplace and the home.   >    > The Electronic Frontier Foundation has been established to help   > civilize the electronic frontier; to make it truly useful and   > beneficial not just to a technical elite, but to everyone; and to   > do this in a way which is in keeping with our society's highest   > traditions of the free and open flow of information and   > communication.      EFF was started by the multimillionaire Mitchell Kapor, founder of   Lotus software, and John Barlow, lyricist for the Grateful Dead   rock band.  A highly publicized endeavor of the organization   involved the legal defense of  Steve Jackson Games after an FBI   raid and an accompanying civil suit  (see section on ``Steve   Jackson Games'').  The foundation publishes EFF News (EFFector   Online) electronically, send requests to effnews-request@eff.org.      In a letter to Mitchell Kapor from the Chairman of the Subcommittee   with primary jurisdiction over telecommunications policy dated   November 5, 1991,  Representative  Edward J. Markey complemented   Mitchell Kapor on his ``insights on the development of a national   public information infrastructure'' which ``were appreciated greatly   by myself and the Members of the Subcommittee'' (complete text in    ftp.eff.com:/pub/pub-infra/1991-12):    > ...we need to pursue policies that encourage the Bell companies to   > work with other sectors of the communications industry to create   > a consumer-oriented, public information network. Please let me or   > my staff know what policies you and others in the computer   > industry believe would best serve the public interest in creating   > a reasonably priced, widely available network in which   > competition is open and innovation rewarded.  I also want to   > learn what lessons from the computer industry over the past ten   > to fifteen years should apply to the current debate on   > structuring the information and communications networks of the   > future....I ask your help in gaining input from the computer   > industry so that the Subcommittee can shape policies that will   > bring this spirit of innovation and entrepreneurship to the   > information services industry.      ftp.eff.org   ===========      /pub/eff/about-eff   ---     A file of basic information about EFF including goals, mission,     achievements, and current projects. Contains a membership form.    /pub/eff/mission-statement   ---     EFF mission statement.    /pub/eff/historical/founding-announcement   ---     EFF founding press release.    /pub/eff/historical/eff-history   ---     John Perry Barlow's ``Not Terribly Brief History of the EFF'' (July     10, 1990).  How EFF was conceived and founded, major legal cases,     and the organizational directions.    /pub/eff/historical/legal-case-summary   ---     EFF legal case summary.   _____ <6.2> Who are Computer Professionals for Social Responsibility (CPSR)?    The Computer Professionals for Social Responsibility have been   working to protect and promote electronic civil liberties issues   since ~1982.  The group has three offices (Palo Alto, Cambridge,   Washington, DC) and 20 chapters. It is involved in  litigation   against the FBI, The NSA, NIST, the Secret Service and other other   U.S. government agencies  to declassify and provide documentation   on issues such as Operation Sundevil, the FBI wiretap proposal,   NSA's interference in crypography, the breakup of the 2600 raid in   Arlington, Va in Nov 1992. Members speak frequently in front on   Congress, state legislators and public utility commissions to   testify on privacy, information policy, computer security, and   caller identification.    CPSR has created an extensive Internet Privacy library available   via FTP, Gopher, WAIS, and email at cpsr.org, currently comprising   the largest collection of privacy documents on the internet.  For   more information, anonymous FTP  cpsr.org:/cpsr/.     (Thanks to Dave Banisar <banisar@washofc.cpsr.org> for contributions   here.)  _____ <6.3> What was `Operation Sundevil' and the Steve Jackson Game case?    In the early 1990's a fear spread among U.S. law enforcement agencies   on the illicit activities of `hackers' and `phreakers' involved in   such activities as credit card fraud and long-distance call thievery.      (see ftp.eff.org:/pub/SJG/General_Information/EFFector1.04):    > `Operation Sundevil,' the Phoenix-inspired crackdown of May   > 8,1990, concentrated on telephone code-fraud and credit-card   > abuse, and followed this seizure plan with some success.    > [Bulletin Board Systems] went down all over America, terrifying   > the underground and swiftly depriving them of at least some of   > their criminal instruments.  It also saddled analysts with some   > 24,000 floppy disks, and confronted harried Justice Department   > prosecutors with the daunting challenge of a gigantic nationwide   > hacker show-trial involving highly technical issues in dozens of   > jurisdictions.    Massive `show-trials' never materialized, although isolated   instances of prosecution were pursued.  The movement reached a   crescendo in Texas with the highly publicized case of illegal   search and seizure involving the Steve Jackson Games company of   Austin Texas on March 1, 1990.  From the column GURPS' LABOUR LOST   by Bruce Sterling <bruces@well.sf.ca.us> in Fantasy and Science   Fiction Magazine:    > In an early morning raid with an unlawful and unconstitutional   > warrant, agents of the Secret Service conducted a search of the   > SJG office.  When they left they took a manuscript being prepared   > for publication, private electronic mail, and several computers,   > including the hardware and software of the SJG Computer Bulletin   > Board System.  Yet Jackson and his business were not only   > innocent of any crime, but never suspects in the first place.    > The raid had been staged on the unfounded suspicion that   > somewhere in Jackson's office there `might be' a document   > compromising the security of the 911 telephone system.    FBI agents involved in the seizure were named in a civil suit filed   on behalf of Steve Jackson Games by The Electronic Frontier   Foundation.  See information on EFF below.  From an article by Joe   Abernathy in the Houston Chronicle ~Feb 1, 1993:      > AUSTIN -- An electronic civil rights case against the Secret   > Service closed Thursday with a clear statement by federal   > District Judge Sam Sparks that the Service failed to conduct a   > proper investigation in a notorious computer crime crackdown,   > and went too far in retaining  custody of seized equipment.    >    > Secret Service Special Agent Timothy Foley of Chicago, who was in   > charge of three Austin computer search-and-seizures on March 1,   > 1990, that led to the lawsuit, stoically endured Spark's rebuke   > over the Service's poor investigation and abusive computer   > seizure policies.  While the Service has seized dozens of   > computers since the crackdown began in 1990, this is the first   > case to challenge the practice.    >    > Sparks grew visibly angry when it was established that the Austin   > science fiction magazine and game book publisher was never   > suspected of a crime, and that agents did not do even marginal   > research to establish a criminal connection between the firm and   > the suspected illegal activities of an employee, or to determine   > that the company was a publisher. Indeed, agents testified that   > they were not even trained in the Privacy Protection Act at the   > special Secret Service school on computer crime.    >    > "How long would it have taken you, Mr. Foley, to find out what   > Steve Jackson Games did, what it was?" asked Sparks. "An hour?    >    > "Was there any reason why, on March 2, you could not return to   > Steve Jackson Games a copy, in floppy disk form, of everything   > taken?    >    > "Did you read the article in Business Week magazine where it had   > a picture of Steve Jackson -- a law-abiding, tax-paying citizen   > -- saying he was a computer crime suspect?    >    > "Did it ever occur to you, Mr. Foley, that seizing this material   > could harm Steve Jackson economically?"    >    > Foley replied, "No, sir," but the judge offered his own answer.    >    > "You actually did, you just had no idea anybody would actually go   > out and hire a lawyer and sue you."    >    > More than $200,000 has been spent by the Electronic Frontier    > Foundation in bringing the case to trial. The EFF was founded by    > Mitchell Kapor amid a civil liberties movement sparked in large   > part by the Secret Service computer crime crackdown.      ftp.eff.org   ===========      /pub/cud/papers/sundevil   ---     A collection of information on Operation SunDevil by the Epic     nonprofit publishing project. Everything you wanted to know but     could never find.    /pub/cud/papers/sj-resp   ---     Steve Jackson's response to the charges against him.  _____ <6.4> What is Integrated Services Digital Network (ISDN)?    ISDN is a high-speed data communications standard that utilizes   existing copper telephone lines, and is a possible inexpensive and   intermediate alternative to laying fiber optic cable for phone   networks.  The speeds involved may be sufficient for audio and   video transmission applications.  G. V. der Leun in the file   ftp.eff.org: /pub/pub-infra/1991-11:    > Telecommunications in the United States is at a crossroads.  With   > the Regional Bell Operating Companies now free to provide   > content, the shape of the information networking is about to be   > irrevocably altered.  But will that network be the open,   > accessible, affordable network that the American public needs?    > You can help decide this question.   >    > The Electronic Frontier Foundation recently presented a plan to   > Congress calling for the immediate deployment of a national   > network based on existing ISDN technology, accessible to anyone   > with a telephone connection, and priced like local voice service.   >  We believe deployment of such a platform will spur the   > development of innovative new information services, and maximize   > freedom, competitiveness, and civil liberties throughout the   > nation.   >    > The EFF is testifying before Congress and the FCC; making   > presentations to public utility commisions from Massachusetts to   > California; and meeting with representatives from telephone   > companies, publishers, consumer advocates, and other stakeholders   > in the telecommunications policy debate.   >    > The EFF believes that participants on the Internet, as pioneers on   > the electronic frontier, need to have their voices heard at this   > critical moment.    To automatically receive a description of the platform and details,   send mail to archive-server@eff.org, with the following line:      send documents open-platform-overview    or send mail to eff@eff.org.  See also the Introduction to the EFF   Open Platform Proposal in ftp.eff.org:/pub/pub-infra/1991-02.       References   ==========    ``Digital Data On Demand.'' MacWorld, 2/82 (page 224).   ---     56Kbps vs. ISDN services and products. See comments by J. Powers     in ftp.eff.org:pub/pub-infra/1992-02.    ``Telephone Service That Rings of the Future.'' By Joshua Quittner.    Newsday, Tue, Jan 7 1992.   ---     Implications of ISDN for the masses, written in popular science     style.   John Perry Barlow (cofounder EFF). Regional telephone     companies (Ohio Bell).  ISDN as ``Technological Rorschach Test.''      Anecdotes about McDonald's,  Barbara Bush teleconferencing. See     complete text in ftp.eff.org:/pub/pub-infra/1992-01.        ftp.eff.org:/pub/pub-infra/   ---     Files 1991-11 through 1992-05 containing email from the EFF public     infrastructure group organized by month.  Opinions and facts on     the pros and cons of ISDN, Integrated Services Digital Network.      Uses of ISDN (phone video, audio, etc.)  Japanese model.     Alternatives to ISDN (HDSL, ADSL, fiber optics). Technical      specifications of ISDN, implementation details, cost issues,     political obstacles, (RBOC, Regional Bell Operating Companies or     `Baby Bells', e.g. NET, New England Telephone).  Influencing     development of future networks (e.g. ISDN and NREN, National     Research and Education  Network), encouraging competition (cable     TV systems). Press releases and news articles.  Letter from Rep.     E. J. Markey to M. Kapor.  _____ <6.5> What is the National Research and Education Network (NREN)?    The Nation Research and Education Network was introduced in   legislation cosponsored by Sen. A. Gore to promote high-speed data   network infrastructure augmenting the internet with up to 50 times   faster transmission rates.  The bill passed the House on November   20, 1991, the Senate on November 22, 1991, and was signed by the   President on December 9, 1991.    ftp.eff.org   ===========      /pub/EFF/legislation/nren-bill-text   ---     The complete text of the House-Senate compromise version of S.     272, the High-Performance Computing Act.    /pub/internet-info/gore.bill   ---     102nd congress 1st Session. Text of high performance computing     bill cosponsored by Sen. A. Gore.     /pub/EFF/legislation/gore-infrastructure-bill   ---     The text of S.2937, the Information Infrastructure and Technology     Act of 1992 introduced by Senator Gore to expand Federal efforts     to develop technologies for applications of high-performance     computing and high-speed networking, and to provide for a     coordinated Federal program to accelerate development and     deployment of an advanced information infrastructure.    U.S. SAID TO PLAY FAVORITES IN PROMOTING NATIONWIDE COMPUTER NETWORK   By John Markoff, N.Y. Times (~18 Dec 91).   ---     President Bush's legislation for natiowide computer data     `superhighway.'  IBM-MCI venture as monopoly destructive to fair     competition and  innovation?  National Science Foundation NSFnet.     complete text in  /pub/pub-infra/1991-12.    Commentary   ==========    /pub/academic/statements/nren.privacy.cpsr   ---     ``Proposed Privacy Guidelines for the NREN'' -- Statement of Marc     Rotenberg, Washington Director Computer Professionals for Social     Responsibility (CPSR).    /pub/internet-info/cisler.nren   ---     The National Research and Education Network: Two meetings Steve     Cisler, Senior Scientist Apple Computer Library December 17, 1990     Summary of meetings exploring educational issues of NREN by     diverse members of academia and industry.    /pub/internet-info/privatized.nren   ---     Feb. 14 1991 essay by M. Kapor advocating advantages of a private     National Public  Network, and specific recommendations for open     NREN policies encouraging  competition.     /pub/eff/papers/netproposition   ---     An FYI about the proposed NREN setup.  _____ <6.6> What is the FBI's proposed Digital Telephony Act?    ``Providers of electronic communication services and private branch   exchange operators shall provide within the United States   capability and capacity for the government to intercept wire and   electronic communications when authorized by law...''      From `BBS Legislative Watch: FBIs Wiretapping Proposal Thwarted' by   S. Steele in Boardwatch Magazine, Feb. 1993, p. 19-22:     > In a move that worried privacy experts, software manufacturers and   > telephone companies, the FBI proposed legislation to amend the   > Communications Act of 1934 to make it easier for the Bureau to   > perform electronic wiretapping. The proposed legislation,   > entitled 'Digital Telephony,' would have required communications   > service providers and hardware manufacturers to make their   > systems 'tappable' by providing 'back doors' through which law   > enforcement officers could intercept communications. Furthermore,   > this capability would have been provided undetectably, while the   > communications was in progress, exclusive of any communications   > between other parties, regardless of the mobility of the target   > of the FBI's investigation, and without degradation of service.   >     > ...under the proposal, the Department of Justice (DOJ) can keep   > communications products off the market if it determines that   > these products do not meet the DOJ's own ... guidelines. This   > [could] result in increased costs and reduced competitiveness for   > service providers and equipment manufacturers, since they will be   > unlikely to add any features that may result in a DOJ rejection   > of their entire product. ...the FBI proposal suggests that the   > cost of this wiretapping 'service' to the Bureau would have to be   > borne by the service provider itself...   >    > The Electronic Frontier Foundation organized a broad coalition of   > public interest and industry groups, from Computer Professionals   > for Social Responsibilty (CPSR) and the ACLU to AT&T and Sun   > Microsystems, to oppose the legislation. A white paper produced   > by the EFF and ratified by the coalition, entitled, `An Analysis   > of the FBI Digital Telephony Proposal,' was widely distributed   > throughout the Congress.  ... The Justice Department lobbied hard   > in the final days to get Congress to take up the bill before   > Congress adjourned, but the bill never ... found a Congressional   > sponsor (and was therefore never officially introduced). The FBI   > [may] reintroduce "Digital Telephony" when the 103rd Congress   > convenes in January.    ftp.eff.org   ===========      /pub/eff/legislation/fbi-wiretap-bill   /pub/EFF/legislation/new-fbi-wiretap-bill   ---     A bill to ensure the continuing access of law enforcement to the     content of wire and electronic communications when authorized by     law and for other purposes. Version 2 of the bill after FBI     changes in response to public response.    /pub/cud/law/hr3515   ---     House of Rep bill 3515, Telecommunications Law.    Commentary   ==========      /pub/eff/papers/eff-fbi-analysis   ---     The EFF-sponsored analysis of the FBI's Digital Telephony proposal.    /pub/eff/papers/ecpa.layman   ---     The Electronic Communications Privacy Act of 1986: A Layman's View.    /pub/eff/papers/nightline-wire   ---     Transcript of ABC's Nightline of May 22, 1992, on the FBI,     Privacy, and Proposed Wire-Tapping Legislation. Featured are Marc     Rotenberg of the CPSR and William Sessions, Director of the FBI.    /pub/eff/papers/edwards_letter   ---     A letter from the Director of the Secret Service to US Rep. Don     Edwards, D-California, in response to questions raised by     Edwards' Subcommittee. This copy came from Computer Professionals     for Social Responsibility in Washington, D.C.    /pub/eff/papers/fbi.systems   ---     A description of how information is stored on the FBI's computer     systems.   _____ <6.7> What other U.S. legislation is related to privacy?    ftp.eff.org   ===========      /pub/cud/law/<state>     ---     State computer crime laws:                                   AL, AK, AZ, CA, CO, CT, DE, FL, GA,                                   HI, IA, ID, IL, IN, MD, MN, NC, NJ,                                   NM, NY, OR, TX, VT, VA, WA, WI, WV.    /pub/cud/law/<country>   ---     Current computer crime laws for: The United States (federal     code), Canada, Ghana, and Great Britain.    /pub/cud/law/bill.s.618   ---     Senate bill 618, addressing registration of encryption keys with     the government.    /pub/cud/law/improve   ---     Improvement of Information Access bill.    /pub/cud/law/monitoring   ---     Senate bill 516; concerning abuses of electronic monitoring in the     workplace.    /pub/cud/law/us.e-privacy   ---     Title 18, relating to computer crime & email privacy.    /pub/academic/law/privacy.electronic.bill   ---     The text of Simon's electronic privacy bill, S. 516. ``To prevent     potential abuses of electronic monitoring in the workplace.''  _____ <6.8> What are references on rights in cyberspace?    ftp.eff.org   ===========    /pub/cud/papers/const.in.cyberspace   ---     Laurence Tribe's keynote address at the first Conference on     Computers, Freedom, & Privacy. `The Constitution in Cyberspace'    /pub/cud/papers/denning   ---     Paper presented to 13th Nat'l Comp Security Conf ``Concerning     Hackers Who Break into Computer Systems'' by Dorothy E Denning.    /pub/cud/papers/privacy   ---     ``Computer Privacy vs First and Fourth Amendment Rights'' by     Michael S. Borella    /pub/cud/papers/rights-of-expr   ---     Rights of Expression in Cyberspace by R. E. Baird    /pub/academic/eff.rights   ---     Bill of Rights' meaning in the Electronic Frontier.  _____ <6.9> What is the Computers and Academic Freedom (CAF) archive?    The CAF Archive is an electronic library of information about   computers and academic freedom. run by the Computers and Academic   Freedom group on the Electronic Frontier Foundation FTP site.      > If you have gopher, the archive is browsable with the command:   >   gopher -p academic gopher.eff.org   >    > It is available via anonymous ftp to ftp.eff.org (192.88.144.4) in   > directory `pub/academic'. It is also available via email. For   > information on email access send email to archive-server@eff.org.   > In the body of your note include the lines `help' and `index'.   >    > For more information, to make contributions, or to report typos   > contact J.S. Greenfield (greeny@eff.org).    ftp.eff.org   ===========      /pub/academic/statements/caf-statement   ---     Codifies the application of academic freedom to academic     computers, reflecting seven months of on-line discussion about     computers and academic freedom.  Covers free expression, due     process, privacy, and user participation.    /pub/academic/books   ---     Directory of book references related to Computers and Academic     Freedom or mentioned in the CAF discussion. The file books/README     is a bibliography.    /pub/academic/faq/archive   ---     List of files available on the Computers and Academic Freedom     archive.    /pub/academic/news   ---     Directory of all issues of the Computers and Academic Freedom     News. A full list of abstracts is available in file `abstracts'.     The special best-of-the-month issues are named with their month,     for example, `June'.   FOOTNOTES =========   _____ <7.1> What is the background behind the Internet?     The article ``Internet'' in Fantasy and Science Fiction by Bruce   Sterling <bruces@well.sf.ca.us> contains general and nontechnical   introductory notes on origins of the Internet, including the role   of the RAND corporation, the goal of network resilience in face of   nuclear attack, MIT, UCLA, ARPANET, TCP/IP, NSF, NREN, etc.:    > ARPANET itself formally expired in 1989, a happy victim of its    > own overwhelming success.  Its users scarcely noticed, for   > ARPANET's  functions not only continued but steadily improved.    > The use of  TCP/IP standards for computer networking is now   > global.  In 1971, a  mere twenty-one years ago, there were only   > four nodes in the  ARPANET  network.  Today there are tens of   > thousands of  nodes in  the Internet,  scattered over forty-two   > countries, with more coming  on-line every day.   Three million,   > possibly four million people use  this gigantic   > mother-of-all-computer-networks.      >    > The Internet is especially popular among scientists, and is    > probably the most important scientific instrument of the late    > twentieth century.   The  powerful, sophisticated access that it    > provides to specialized data and personal communication  has sped   > up the pace of scientific research enormously.     >    > The Internet's pace of growth in the early 1990s is  spectacular,    > almost ferocious.  It is spreading faster than cellular phones,   > faster  than fax machines.  Last year the Internet was growing at   > a rate of  twenty percent a *month.*  The number of `host'   > machines with direct  connection to TCP/IP has been doubling   > every year since  1988.   The Internet is moving out of  its   > original base in military and  research institutions,  into   > elementary and high schools, as well as into  public libraries   > and the commercial sector.    References   ==========    Bowers, K., T. LaQuey, J. Reynolds, K. Roubicek, M. Stahl, and A.   Yuan, ``Where to Start - A Bibliography of General Internetworking   Information'' (RFC-1175), CNRI, U Texas, ISI, BBN, SRI, Mitre,   August 1990.    The Whole Internet Catalog & User's Guide by Ed Krol.  (1992)   O'Reilly  and Associates, Inc.   ---     A clear, non-jargonized introduction to the  intimidating business     of network literacy written in humorous style.    Krol, E., ``The Hitchhikers Guide to the Internet'' (RFC-1118),   University of Illinois Urbana, September 1989.    ``The User's Directory to Computer Networks'', by Tracy LaQuey.    The Matrix: Computer Networks and Conferencing Systems Worldwide.    by John Quarterman.  Digital Press: Bedford, MA. (1990)     ---     Massive and highly technical compendium detailing the     mind-boggling scope and  complexity of global internetworks.    ``!%@:: A Directory of Electronic Mail Addressing and Networks'' by   Donnalyn Frey and Rick Adams.          The Internet Companion, by Tracy LaQuey with Jeanne C. Ryer (1992)     Addison Wesley.    ---     ``Evangelical'' etiquette guide to the Internet featuring      anecdotal tales of life-changing Internet experiences.  Foreword     by  Senator Al Gore.    Zen and the Art of the Internet: A Beginner's Guide by Brendan P.    Kehoe (1992)  Prentice Hall.    ---     Brief but useful Internet guide with  plenty of good advice on     useful databases.     See also ftp.eff.com:/pub/internet-info/.  (Thanks to Bruce Sterling   <bruces@well.sf.ca.us> for contributions here.)     General   =======    Cunningham, Scott and Alan L. Porter. ``Communication Networks: A   dozen  ways they'll change our lives.'' The Futurist 26, 1   (January-February,  1992): 19-22.    Brian Kahin, ed., BUILDING INFORMATION INFRASTRUCTURE (New York:    McGraw-Hill, 1992) ISBN# 0-390-03083-X   ---     Essays on information infrastructure.  Policy and design issues,     research and NREN, future visions, information markets.  See     table  of contents in ftp.eff.org:/pub/pub-infra/1992-03.    Shapard, Jeffrey. ``Observations on Cross-Cultural Electronic    Networking.'' Whole Earth Review (Winter) 1990: 32-35.    Varley, Pamela. ``Electronic Democracy.'' Technology Review    (November/December, 1991): 43-51.  ______ <7.2> How Internet `anarchy' like the English language?    According to Bruce Sterling <bruces@well.sf.ca.us>:    > The Internet's `anarchy' may seem strange or even unnatural,  but   > it makes a certain deep and basic sense.  It's rather like the    > `anarchy' of the English language.  Nobody rents English, and   > nobody  owns English.    As an English-speaking person, it's up   > to you to learn  how to speak English properly  and make whatever   > use you please  of it (though the government provides certain   > subsidies to help you  learn to read and write a bit).     > Otherwise, everybody just sort of  pitches in, and somehow the   > thing evolves on its own, and somehow  turns out workable.  And   > interesting.   Fascinating, even.   Though a lot  of people earn   > their living from using and exploiting  and teaching  English,   > `English' as an institution is public property, a public good.     > Much the same goes for the Internet.   Would English  be improved   > if  the `The English Language, Inc.'  had a board of directors   > and a chief  executive officer, or a President and a Congress?     > There'd probably be  a lot fewer new words in English, and a lot   > fewer new ideas.     _____ <7.3> Most Wanted list    Hopefully you have benefitted from this creation, compilation, and   condensation of information from various sources regarding privacy,   identity, and anonymity on the internet.  The author is committed   to keeping this up-to-date and strengthening it, but this can only   be effective with your feedback.  In particular, the following   items are sought:      - Short summaries of RFC documents and other references listed,     esp. CPSR files.   - More data on the specific uses and penetration of RFC-931.   - Internet traffic statistics.  How much is email?  How much     USENET?  What are the costs involved?   - Famous or obscure examples of compromised privacy     on the internet.         - FTP site for the code (NOT the code) to turn the .plan file into a                 named pipe for sensing/reacting to remote `fingers'.   - Knowledge on the `promiscuous' mode of receipt or transmission      on network  cards.   - Details on the infamous experiment where a scientist resubmitted      previously accepted papers to a prominent journal with new and     unknown authors that were subsequently rejected.   - X Windows, EFF, CPSR FAQhood in news.answers.      Commerical use of this document is negotiable and is a way for the   author to recoup from a significant time investment. Email feedback   to ld231782@longs.lance.colostate.edu.  Please note where you saw   this (which newsgroup, etc.).  _____ <7.4> Change history    3/3/93 v2.1 (current)          CPSR pointer, new UNIX mode examples, digital telephony act,     Steve Jackson incident, additions/ reorganization to     anonymity section, part 3.  Note: v2.0 post to sci.crypt,     alt.privacy, news.answers, alt.answers, sci.answers was cancelled     by J. Kamens because of incorrect subject line.        2/14/93 v2.0      Major revisions.  New section for X Windows.  Some email privacy     items reorganized to network security section.  New sections for     email liability issues, anonymity history and responsibilities.      Split into three files.  Many new sources added, particularly     from EFF and CAF in new `issues' part. `commentary' from      news.admin.policy.  21 day automated posting starts.    2/3/93 v1.0      More newsgroups & FAQs added.  More `Most Wanted'.  Posted to     news.answers.  Future monthly posting to sci.crypt, alt.privacy.    2/1/93 v0.3        Formatted to 72 columns for quoting etc. `miscellaneous,'     `resources' sections added with cypherpunk servers and use     warnings.  More UNIX examples (`ls' and `chmod').  Posted to     alt.privacy, comp.society.privacy.      1/29/93 v0.2          `Identity' and `Privacy' sections added.  `Anonymity' expanded.     Remailer addresses removed due to lack of information and     instability.  Posted to sci.crypt.      1/25/93 v0.1        Originally posted to the cypherpunks mailing list on 1/25/93 as a     call to organize a list of anonymous servers.      email ld231782@longs.lance.colostate.edu for earlier versions.   * * *  SEE ALSO ========  Part 1 (previous file) ------  <1.1> What is `identity' on the internet? <1.2> Why is identity (un)important on the internet? <1.3> How does my email address (not) identify me and my background? <1.4> How can I find out more about somebody from their email address? <1.5> Why is identification (un)stable on the internet?  <1.6> What is the future of identification on the internet?  <2.1> What is `privacy' on the internet? <2.2> Why is privacy (un)important on the internet? <2.3> How (in)secure are internet networks? <2.4> How (in)secure is my account? <2.5> How (in)secure are my files and directories? <2.6> How (in)secure is X Windows? <2.7> How (in)secure is my email? <2.8> How am I (not) liable for my email and postings? <2.9> How do I provide more/less information to others on my identity? <2.10> Who is my sysadmin?  What does s/he know about me? <2.11> Why is privacy (un)stable on the internet? <2.12> What is the future of privacy on the internet?  <3.1> What is `anonymity' on the internet? <3.2> Why is `anonymity' (un)important on the internet? <3.3> How can anonymity be protected on the internet? <3.4> What is `anonymous mail'? <3.5> What is `anonymous posting'? <3.6> Why is anonymity (un)stable on the internet? <3.7> What is the future of anonymity on the internet?  Part 3 (next file) ------  <8.1> What are some known anonymous remailing and posting sites? <8.2> What are the responsibilities associated with anonymity? <8.3> How do I `kill' anonymous postings? <8.4> What is the history behind anonymous posting servers? <8.5> What is the value of anonymity? <8.6> Should anonymous posting to all groups be allowed? <8.7> What should system operators do with anonymous postings? <8.8> What is going on with anon.penet.fi maintained by J. Helsingius?   * * *