The Pirate Bay is going on a road trip through Europe, one they hope to end today in a former NATO bunker. After a move from Sweden to the Ukraine, The Pirate Bay has now arrived at CyberBunker, an ISP that can provide them with a facility that can resist a nuclear attack as well as electromagnetic pulse bombs.

After being chased by various anti-piracy groups, The Pirate Bay returned a few hours ago. “Nobody puts The Pirate Bay in a corner,” they say on their frontpage, referencing Patrick Swayze’s famous line in Dirty Dancing. Not in a corner, no, but what about a bunker?

Torrent Freak: The Pirate Bay Relocates to a Nuclear Bunker

(via Alterati)

In the context of all the good advancing copyright law can do for us as we move further into the twenty-first century (see “How creativity is being strangled by the law“), I almost shed a tear for Americans this afternoon because of these two bills being rushed into action:

House vote on illegal images sweeps in Wi-Fi, Web sites

The U.S. House of Representatives on Wednesday overwhelmingly approved a bill saying that anyone offering an open Wi-Fi connection to the public must report illegal images including “obscene” cartoons and drawings–or face fines of up to $300,000.

That broad definition would cover individuals, coffee shops, libraries, hotels, and even some government agencies that provide Wi-Fi. It also sweeps in social-networking sites, domain name registrars, Internet service providers, and e-mail service providers such as Hotmail and Gmail, and it may require that the complete contents of the user’s account be retained for subsequent police inspection. [cont.]

Download A Song–Lose Your Loan

Page 411 of this 747-page bill is “Section 494(A): CAMPUS-BASED DIGITAL THEFT PREVENTION” wherein the bill’s meaning takes a serious detour from its title. To prevent college students from illegally accessing copyrighted material, the section says all schools shall (when you see the word “shall” in a law, it’s a requirement, not a suggestion):

1) Have “a plan for offering alternatives to illegal downloading or peer-to-peer distribution of intellectual property”
and
2) Have “a plan to explore technology based deterrents to prevent such illegal activity.”

The craziest thing about this is that noncompliant schools would lose all their federal funding, for all their students. No more Pell Grants. No more federal financial aid. No more student loans. This is not just draconian punishment for students who break the law, this punishes all students at that institution even if they did nothing!

Beyond that, both requirements actually work against the point of the bill itself–implementation would likely raise school fees. [cont.]

I won’t name names, but recently I helped out a friend occultist in California review Canadian cities to expatriate to. I sent him a bunch of info on crime, lifestyle, popular job markets, and some ethnic/religious backgrounds to the cities to help him decide which was more his flavour.

As we move into an era where identity exists more and more online, and who knows as more transhuman technologies become more mainstream over the next decade. Copyright, essentially communications in general, has become the quiet battleground in the American government. Because these Draconian laws benefit not only the corporations down there, but the right-wing zealous nuts who want the world safe for their Sears-inspired Christian regime, might I suggest you, too, look at moving abroad rather than putting up with the weird Fourth Reich that is bubbling and brewing.

For those of you not caring or fighting your government before it swelters and your personal freedoms are abandoned in favour of a “safe, secure Christian state,” please feel free to inquire with any of us Canadian occultists about which cities might be welcome to you. There’s always South America, Asia, or Europe if you’re thinking more exotic, and I have friends that are always flying down to South Africa to work.

For those of you that decide to fight on your native soil, kudos to you. To the rest of you, if you don’t feel it’s your battle, the world is your oyster. America is not the end-all, be-all of the human experience.

Just a friendly word from Fell. And if there is any interest, perhaps I should put together an Guide to Canada for American Counterculture Expats. Aforementioned Californian seemed to appreciate it and is checking out his city of choice this winter. And I know we’re not exactly 100% sovereign from the U.S.’s influence, but things are nowhere near the psycho state that is growing down there. =]

EDIT — A bit of a perception/context update for the SAFE Act, via the good boys at Ars Technica:

Despite hyperbole to the contrary, the SAFE Act that passed the House yesterday won’t force local coffee shops, libraries, and home users to monitor their network connections for child porn.

I’m sitting in front of a sound stage in the middle of a horse pasture watching robotic kids shift and rotate to electronic music. A computer thumps out crunchy, mechanical melodies over the funky beats oozing from turntables. Neon drawings float under the black light from the plywood dance floor. Off to the side of the stage, a guy sits cross-legged and meditates. I’ve been up since 6:30 in the morning, it’s 2:30 at night now, I’m freezing, and have no plans of going to bed. Fatigue has given way to fascination. I feel great.
Read the rest of this entry »

There was a time when the name R.U. Sirius was synonymous with cyberculture. His seminal magazine Mondo 2000 predated Wired, and was even more enthusiastic in its wow-gosh sexification of the new geek order. Articles predicting a slick future of nanotech parties and smart drugs were mixed in with batches of fearful predictions of terrorism, economic collapse, draconian copyright enforcement, increased surveillance and invasive advertising. But Sirius didn’t stop there: After the collapse of Mondo, he went on to write for magazines like 21C, Salon and Disinformation, and edited Getting It. He created the Revolution Party, a non-ideological anti-authoritarian political organization (“If even the alternative parties like Libertarian and Green seem a bit rigid to you, consider joining us”), and campaigned for Presidency of the United States. His latest project, The Thresher, is a political magazine.

But The Thresher is a print magazine. Sirius hardly goes online anymore, except for research. The truth is, the Godfather of GeekChic has moved on.
Read the rest of this entry »

As government surveillance increases, many people are turning to encryption to protect their privacy. After the 9/11 attacks, many governments have expanded their surveillance powers, including the United States, Canada and the United Kingdom. Snoopers may not understand encrypted communications.

Encryption codes a message so that it cannot be understood by anyone other than the intended recipient. This can be done by talking in code over the telephone or by mathematically encrypting data over the Internet. Strong encryption usually refers to virtually unbreakable military-strength data encryption. It is used outside of the military primarily for private messaging, securing purchases online, online identity verification, and transmitting sensitive doctor-patient information.

PGP (Pretty Good Privacy) is the standard for Internet encryption. PGP works by creating both a public key and a private key. The public key is available to anyone, while the private key is kept a secret. The public key is used to encrypt a message and the private key is then used to decode it. PGP’s security comes from the difficulty in factoring very large numbers. Until a more efficient way to factor numbers is found, cracking a PGP encrypted message is virtually impossible. It is frequently pointed out that ‘pretty good’ is an understatement about the privacy offered by PGP. The only way an outside party could decrypt a message would be to somehow acquire the private key from the user or try every possible key (which would take about 100 million years with modern technology according to MIT mathematician Roger Schroeppel). For more information on PGP security read the PGP Attacks FAQ.

New Legislative Powers

In the United Kingdom the Regulation of Investigatory Powers Act (RIP) of 2000 makes it a crime to withhold encryption keys from the government (punishable by up to seven years jail). The United States has a history of trying to limit civilian use of military-strength encryption. Legislation was proposed to require government back doors be built into encryption software during the Clinton administration. These proposals failed due to commercial opposition and protests that encryption bans simply would not work. Public outrage over post-9/11 legislation, ostensibly for “homeland defense”, has created greater awareness of encryption techniques. Government and law enforcement agencies, consequently, have a renewed interest in limiting access of encryption to the general public.

Encryption’s opponents contend that sacrificing some privacy is necessary to insure national security. “[Encryption makers] have as much at risk as we have at risk as a nation, and they should understand that as a matter of citizenship, they have an obligation [to provide the government back door access to encryption products],” Sen. Judd Gregg (R-New Hampshire) said in a floor speech after the 9/11 attacks. Gregg was pursuing legislation that would require government backdoors to be built into all encryption software, but suddenly changed his mind according to Wired News.

The Clipper Chip

Strong encryption’s security is compromised by the backdoor system proposed during the mid-1990s. The system, known as the Clipper Chip would transmit keys to law enforcement agencies so that they could acquire keys to unlock encrypted messages. Unfortunately, when the government’s copy of a key is transmitted to “key banks” it risks being intercepted. Additionally, key banks themselves could become targets of terrorist hackers. See the Clipper section of the RSA’s Cryptography FAQ for more information. The material that terrorists could possibly intercept through government backdoors includes credit card numbers that could be used to fund terrorist acts and personal information that could be used for identity theft. “Having a good, strong crypto infrastructure in our country is part of what we need to combat terrorism,” PGP creator Philip Zimmermann told Reuters news agency.

In addition to the security issues presented by government backdoors is the question as to whether backdoors would do any good for law enforcement agencies. “. . . It [a law banning strong crypto] doesn’t prevent terrorists from getting their crypto from somewhere else,” James Lewis (director for the Technology and Public Policy Program at the Center for Strategic and International Studies, Washington DC) pointed out in a Zdnet News interview.

DoJ v Zimmerman and PGP

The controversy began in 1991 when Philip Zimmerman created PGP. The software was capable of encrypting files and e-mails through the use of state of the art patented encryption algorithms. Zimmerman’s friend Kelly Goen distributed the software by uploading it from his laptop to various Internet newsgroups and dial-up bulletin board systems from pay phones with an acoustic coupler. Steve Levy’s book Crypto (New York: Penguin Putnam, 2001) reveals that Goen was very caught up in the drama of distributing the software. Levy quotes computer activist Jim Warren saying Goen “. . . wanted to get as many copies scattered as widely as possible around the nation before the government could get an injunction to stop him.”

Even though Goen was careful to only upload the software to US-based software, Zimmerman spent the next five years involved in a legal battle with the US Department of Justice for violating export regulations on encryption software. In spite of this (or because of it) PGP became the standard for encrypting electronic data. In 1996 the Justice Department dropped the case and PGP was sold to Network Associates who is trying to sell the rights to another company.

PGP is available for all major operating systems and is easy to use. It has also spawned a non-patented clone called GPG (Gnu Privacy Guard). Zimmerman now working for HushMail, a free Web-based e-mail service with built-in PGP encryption.

Encryption: A Guide to Possibilities

If backdoors in software or RIP-esque key on demand laws become an international standard, there are ways to get around them. One-time pads and deniable encryption such as steganography would still be able ensure privacy.

Rubberhose: Rubberhose is a UNIX-clone software package from the United Kingdom. Rubberhose allows users to hide data on their hard drives. According to the Rubberhose site: “If someone grabs your Rubberhose-encrypted hard drive, he or she will know there is encrypted material on it, but not how much — thus allowing you to hide the existence of some of your data.” This is advantageous in the RIP-model. If a corrupt government seizes a hard drive, it would be possible for the user to only give away the keys to certain non-offensive data (such as a file named “Mom’s Secret Cookie Recipe”). Of course, this would be of little use in the backdoor model because use of encryption without backdoors would be illegal.

Steganography: Steganography is the practice of secretly embedding data into other data so that it doesn’t appear that communication has occurred. This could be done non-technically, for example, by using code words in the classified ads section of a newspaper. Software such as OutGuess hides messages in seemingly random portions of other files such as images or sounds. According to the OutGuess site: “OutGuess preserves statistics based on frequency counts. As a result, no known statistical test is able to detect the presence of steganographic content.” The drawback is that the recipient must have a key to unlock the hidden information, and that key must somehow be transmitted. One of the major advantages is that a message can be posted in public if the recipient knows what to look for, thus making it difficult for others to detect that communication has even occurred. Your recipient could agree, for example, to communicate through popular files on the Gnutella network. Imagine a group of hackers communicating through Britney Spears publicity photos.

One-time Pads: One-time pads are a form of un-breakable encryption through the use of random numbers. In a plain text message, a different random number represents each character each time it is used. Only someone with the key can decipher it because all possible values for the random numbers are equal. The only way to break this code would be to acquire a copy of the key. The problem is that two parties communicating through this method must have a secure way to transmit keys. The other problem is that the key can be longer than the message itself. The advantage to this method is that it does not require a computer, only a way to generate random numbers.

Whether it’s an embarrassing note about your sex life or your secret recipe for banana pudding, everyone has something they would rather other people not see. The recent increases in government-permitted surveillance make encryption useful to everyone, not just paranoid nuts.

More:

PGP International

The home of Pretty Good Privacy, the de-facto standard for Internet-enabled digital encryption. Features news, manuals and downloads.

Electronic Frontier Foundation
“The Electronic Frontier Foundation (EFF) was created to defend our rights to think, speak, and share our ideas, thoughts, and needs using new technologies, such as the Internet and the World Wide Web. EFF is the first to identify threats to our basic rights online and to advocate on behalf of free expression in the digital age.”

Philip Zimmerman

Philip Zimmerman created PGP. This site includes his PGP writings, Senate testimony, news, consultancy services and an extensive links collection.

RSA Cryptography FAQ
RSA Laboratories have created an extensive FAQ on cryptography’s history, the major cryptosystems, techniques and applications, and real-world cases. Highly recommended.

One-time Pad FAQ

A quick guide to one-time pads, explaining how this cryptosystem works, distribution methods and sources of randomness.

GnuPG
An open source encryption standard. The site includes an extensive FAQ, the GNU Privacy Handbook and more. “GnuPG stands for GNU Privacy Guard and is GNU’s tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC 2440.”

HushMail
Free encrypted Web-based e-mail. “HushMail eliminates the risk of leaving unencrypted files on Web servers. HushMail messages, and their attachments, are encrypted using OpenPGP standard algorithms.”

Freenet Project
Freenet is a peer-to-peer (P2P) publishing network that enables you to publish encrypted documents. Ian Clarke’s system has been used by grassroots political groups and individuals to publish controversial information.

Rubberhose
“Rubberhose transparently and deniably encrypts disk data, minimising the effectiveness of warrants, coersive interrogations and other compulsive mechanims, such as U.K RIP legislation. Rubberhose differs from conventional disk encryption systems in that it has an advanced modular architecture, self-test suite, is more secure, portable, utilises information hiding (steganography/deniable cryptography), works with any file system and has source freely available.”

OutGuess
“OutGuess is a universal steganographic tool that allows the insertion of hidden information into the redundant bits of data sources. The nature of the data source is irrelevant to the core of OutGuess. The program relies on data specific handlers that will extract redundant bits and write them back after modification. In this version the PNM and JPEG image formats are supported.”

(This article originally appeared at http://www.disinfo.com/archive/pages/dossier/id2007/pg1/ January 31, 2002)