Slashdot Mirror


New Encryption Bill in House

TDO writes "A new encryption bill has passed a sub committee. Next it will go to the main Judiciary Panel. It may also have to go through up to four more Panels before it goes to the floor. The bill would loosen restrictions on encyption that could be exported. Read the article here. "

43 comments

  1. More links on SAFE by Anonymous Coward · · Score: 0

    Here's a link to the full text.

    http://www.house.gov/lofgren/body4a.html

    I also found a link where they tell you how your representatives have voted with regards to encryption legislation.

    http://www.crypto.com/member/

  2. wow! by Anonymous Coward · · Score: 0

    now kiddie pornoagraphers, terrorists and drug dealers will be able to send messages throughout the world knowing that our law enforcement agencies will be powerless to decode them.

    fools!

  3. Clinton wants us to remain victims of crime! by Anonymous Coward · · Score: 0

    Clinton and his FBI lacky clearly want all USA citizens to remain the victims of credit card fraud. Free speech must threaten their obsessive need to gather power and silence dissent. Soon they may even label differing points of view as "conspiracy".

    Keep in mind that the typical thinking (and law abiding) German viewed Hitler's ideas concerning government and its role as protector of the civilized masses as reasonable... are we all that different than they?

    Gosh, the Bill of Rights must be a major pain to Janet, Louis, Bill and friends, eh?

  4. Lets all just use postcards! by Anonymous Coward · · Score: 0

    Hey, if we outlaw envelopes then the pornographers will be forced to past their pics to postcards. Gee! Great idea! Law enforcement can then presume that anyone who uses envelopes must be perpetrating a crime.

  5. Clinton wants us to remain victims of crime! by Anonymous Coward · · Score: 0

    I don't trust our government because I know they are every bit as fucked up as I am!

  6. Hey Al Gore! Help us!!!! by Anonymous Coward · · Score: 0

    Since Al Gore created the internet maybe he can also create some decent crypto policy.

    (After all what proud papa wants his babies to grow up to be a tool of "sneaky little power mongers who can remain effective only by peeking into other peoples mailboxes and listening to their cell phone calls" LEO?).

    Big Al, want to raise a ton of money for your campaign? May I suggest a platform which assumes that the masses have a "RIGHT" to talk to one another without Barney Fife intrusions?

    Al, if you will do this, I personally give you my word that I will donate $500 to your campaign. (HINT TO OTHER PRESIDENTIAL CANDIDATES, this offer extends to you too).

  7. Well personally I think ... by Anonymous Coward · · Score: 0

    Bill outta used encryption back when he was doing Monica, better late than never I guess.

  8. wow! -- sarcasm? by Anonymous Coward · · Score: 0

    yeah it was, no one has been responding to my sarcastic posts lately so i appreciate the attention.

    i realize that encryption is everywhere, right now, and that making the exports illegal only hurts US companies. that's about the gist of it.

    pornographers and terrorists (et al) are using it now, this law has zip effect on that.

  9. or envelopes! by Anonymous Coward · · Score: 0

    off topic, since the law has little to do with this, but an envelope is a lot easier and cheaper for law enforcement to get into than an encrypted directory.

    sgt. friday gets a warrant. enters paedophile's house, find linux a box with file /home/bgates/kiddiepron.tar.gz.enc -- what now? i assume you realize that "the people" would rather find a file cabinet full of envelopes and pictures --- it could get expensive finding out what's in that file.

  10. Here's where to find more good info on the bill by Anonymous Coward · · Score: 0

    If you check out our archive at computerprivacy.org you can listen/read/watch the testimony from the hearing this bill (HR850) had on March 4th.

  11. Unlimited free crypto? by Anonymous Coward · · Score: 0

    This seems to mean (read: I only read the article) any free crypto software can be exported without restrictions as long as it surfaces outside the US first. As soon as somebody publishes the crypto software on their FTP site outside the US, it is widely available everywhere in the world, and it follows that it can immediately be published in the US as well.

    The only remaining problem is, how can American developers of free crypto software disseminate their work. They may have to just contribute with their ideas and have a non-American type it in.

    This legislation seems to only limit proprietary crypto software from spreading, and could give yet another boost to the Free Software Movement because the proprietary products would be forced to trail in the development by law.

    Marko

  12. Not True. by Anonymous Coward · · Score: 0

    This is slightly incorrect. Software can never be "exported" from the US/CANADA, even if it originated outside of the US first. This basically means you can't have a US Mirror site for foriegn software.

    Also it's not *just* the US/Canada with export regulations must of the big countries have export regs, it's just that all the popular crypto software originates in the US (PGP, IE, netscape) so we get all the attention.

    Jonathan (jc@jonathanclark.com)

  13. The problem isn't the crypto laws by Anonymous Coward · · Score: 0

    Why don't you set up a web site that offers free international downloads of crypto software? :) See if you get thrown in jail...

  14. Non-US Encryption. by Anonymous Coward · · Score: 0
    The problem with the existing law is that we can't export encryption software even if it originated offshore!

    This is an incredible headache. Debian has encryption packages, but you have to follow the links to non-US sites to get them. The source code (and executables), once imported, can't be reexported. That might make sense with physical munitions, but it's absolutely insane when you're talking about something published on the web.

    I'm the nominal Debian packager for Kerberos 5, but since I live in the US I can't publish these packages through Debian. In my spare time I've been putting together all of the packages for Kerberized Linux, but that's a major effort even when you can build on existing packaging. I hope to get my web site up by the end of the month... but until the law changes it too will have the annoying US/Canada nag page.

    BTW, the Linux community needs to pay close attention to this law. Micros~1 NT 5/2000 will contain Kerberos 5 (suitably embraced and extended, no doubt). Depending upon how the law is written, this could be a mechanism used to rid Micros~1 of those pesky comparisons between NT and Samba. Samba, you see, is nice but like all Linux systems it can't handle the strong user authentication...

    bgiles@coyotesong.com

  15. wow! by Anonymous Coward · · Score: 0

    I think that is being overly optimistic, since some people actually believe the bull the shovel so readily on this issue. :>>--

  16. Clinton wants us to remain victims of crime! by Anonymous Coward · · Score: 0

    Actually they usually are much more fucked up then the average shmoe, and many times they break more laws then the criminal they try to get, and sometimes they break even a more serious ones then the person they are trying to catch. Only they can give themselves "immunity", which didn't figure anywhere in the constitution, and which the founding fathers would have found distasteful, and illegal, and would have never allowed it in their time. they were getting rid off the King, and his men precisely, because the King, and his men was excepted from the laws, but we lemmings have let them bully us into making them somehow better, and able to break the law to do what they want, so much so that the biggest organized crime these days in us is IRS, FBI, NSA, CIA, not neccesarily in that order. :>>--

  17. Restricting the export of encryption is stupid. by Anonymous Coward · · Score: 0

    Trying to control the export of encryption is like trying to herd cats. In fact, all it could ever do is keep law abiding citizens from exporting it. Criminals don't care about the law anyway so what's going to stop them?

    -=^o.o^=

  18. paradigm by Anonymous Coward · · Score: 0

    sure they might legislate to not give the keys to the millitary or CIA but...... Who came up with escrow...... seeking to enhance the powers of law enforcement and security under the guise of a paradigm.....

  19. Everyone seems to be missing.... by Anonymous Coward · · Score: 0

    A very important point here.

    In the US it is already legal to buy any grade of crypto software you can get your hands on, with no key recovery built in.

    The FBI is a domestic ONLY agency in the US.

    This bill is about EXPORTING crypto.

    So what do the FBI security concers matter? They are in the US market only here, where strong crypto is already available.

    Unless I'm missing something there, this all seems very fish to me... What does the FBI care about what other countries use? Something about the whole set up feels very wrong...

  20. The problem isn't the crypto laws by Anonymous Coward · · Score: 0

    I always wondered how this works. Someone putting crypto software on an american ftp/web site isn't exporting - it is still within the u.s.
    Seems to me the person doing the download is the one who perform the export. Sure - you make it easy for them, but *you* don't do it. You could set up a message "This web site is for Americans only..."

  21. Everyone seems to be missing.... by Anonymous Coward · · Score: 0

    And the CIA never goes after people inside the US.

    Right.

    You seem to have trouble distinguishing reality from fantasy, myself...

  22. Judiciary Comittee by Threed · · Score: 1

    Nothing good ever came out of the House Judiciary Comittee, and the few good things that come out of other comittees (and state governments) always get clotheslined at the kneecaps by McCullum & Co.

    This is the same bunch of losers that headed up a sense of the house resolution that read something to the effect of "Marijuana is a dangerous and addictive drug", smacked D.C. voters across the tender bits by not letting them count the votes for one of their ballot initiatives, and I'm pretty sure they're the ones that started the whole Monica/Clinton investigation.

    The Judiciary Comittee should be disbanded.

    --Threed

  23. Text of Bill? by Phil+Gregory · · Score: 1

    Does anyone have a link to the text of the bill? This would be useful material for a research paper I'm doing on exporting encryption.


    --Phil (My English teacher is probably going to regret letting us pick our own subjects...:)

    --
    355/113 -- Not the famous irrational number PI, but an incredible simulation!
  24. I wish there were details by tjones · · Score: 1

    Just tried to get a peek at what's on your site, can't get in from my .gov workstation. :)

    I've got to get out of this place.

  25. The problem isn't the crypto laws by Jason+Earl · · Score: 1

    Checkout ftp://ftp.replay.com

    It's safely offshore, and has all the crypto you could possibly want.

  26. This bill is only good for large businesses by David+Jao · · Score: 1
    Here is a Wired News article with a few more details on this bill. According to the EFF, the bill actually does nothing for individuals who want to write software. This includes most free software projects.

    Any step towards loosening restrictions is a good one, but this bill does not address the concerns that the free software community cares most about.

  27. I wish there were details by Kiwi · · Score: 1
    I have a free program that I wish I didn't have to restrict access to. The article in question is vague about this--will it allow people who make crypto software to make their program available on a web page in the us without having to play the "Are you a US citizen" games.

    Frankly, I doubt it. I think most people with programs like this will not go to the bother of filling out 15 government forms.

    - Sam Trenholme

    --

    The secret to enjoying Slashdot is to realize that it should not be taken too seriously.

  28. I wish there were details by Kiwi · · Score: 1

    If you continue to have problems, send me a private mail affirming that you are a US citizen, and I will give you a temporary 1-hour password, or will try to resolve things at my end if you give the ip of the address you are trying to access my software from.

    - Sam Trenholme

    --

    The secret to enjoying Slashdot is to realize that it should not be taken too seriously.

  29. they already can by edgy · · Score: 1

    they already can. only the honest kiddie porn and foreign spies will no longer be able to send messages since they don't want to break crypto export rules.

  30. The problem isn't the crypto laws by fishbowl · · Score: 1

    It's the widespread obedience of them.

    --
    -fb Everything not expressly forbidden is now mandatory.
  31. The problem isn't the crypto laws by fishbowl · · Score: 1

    Exactly, there aren't 275 million people doing
    exactly this. Therefore, civil disobedience is
    risky. There are too many people obeying the rules. Making too much noise about it.

    --
    -fb Everything not expressly forbidden is now mandatory.
  32. crypto need examples by ptor · · Score: 1

    Let's see how many examples of "they shoulda used some kind of encryption" we can come up with...

    Newt Gingrich probably wishes that he was using at least a digital cell phone with minimal encryption when he got scannered down in Florida some years back. He was discussing with GOP leaders how to dodge an ethics charge over a course he taught. It was a mild scandal, both for the political content of the call and for the accusations of illegal (wireless) wiretapping.

    I think one of the British royals had an analog cordless phone conversation with his girlfriend taped too. It showed up in the tabloids.

    Then there's the Reagan administration's email trail that came up during the Iran/Contra hearings. I think I recall this coming up when Ollie North was in front of congress.

    There were the break-ins of liberal/left organizations in the US, where nothing was taken except the disks and address lists. The Central America group at least.

    ...The best argument for crypto I've seen, is in the user feedback section of Zimmerman's site:
    http://www.nai.com/products/security/phil/phil-l etters.asp . There, someone from a human rights group talks about police trying to get information.

    Personally, I've had my email snooped by an unethical sysadmin once.

    Other examples?

  33. I wish there were details by TDO · · Score: 1

    Well, what I got from the article was that if a given country already allowed encryption A to be exported from their country, then the US would allow encryption A to be exported into their country. This of course could potentially cause more head aches for developers like yourself, since you would have to say something like: "If you are in the UK, France, Japan, or the US, feel free to download..." Maintaining a list of countries where export was possible would be a pain.

    ---

    --

    ---
    "To know recursion, you must first know recursion."
  34. Isn't this a repeat? by ToastyKen · · Score: 1

    Didn't this get posted a few weeks ago:
    "Clueful Crypto Legislation"

  35. you should be glad you stayed anonymous.... by paulzilla · · Score: 1

    Oh no, the NSA and other law enforcement and security agencies will never be able to decrypt messages sent by technical laypersons using exported encryption software. I'm sure that even if this bill is passed with wording that allows strong encryption software to be exported out of the US, which this bill wouldn't allow anyway, my dear anonymous coward, there will in all likelyhood still be NSA/CIA meddling/tracking going on. Perhaps users of encryption software overseas will be wary of encryption technology exported from the US, thinking that the exported software will have backdoors which allow for a key to be easily reconstructed or a message to be easily decrypted with a special key. Many feel this way about the technology which is currently exported: the US won't give out its strong encryption because it wasn't to be able to spy on other countries. I wouldn't be surprised if that suspicion was extended to exported string encryption. In any case, only a moron, whether pedophile, terrorist, drug dealer, soccermom, or middle aged white male, assumes that a message he or she sends will be impossible to decrypt if intercepted, regardless of the software he or she is using.

  36. They can do it anyway. Import is legal by arivanov · · Score: 1

    While it is illegal to export it is not illegal to import encryption in the US.

    So all they have to do is purchase OpenBSD and set up a VPN. 384 bit blowfish (effective key length above 96 bit).

    --
    Baker's Law: Misery no longer loves company. Nowadays it insists on it
    http://www.sigsegv.cx/
  37. Read the full text of the bill, you idiot by arivanov · · Score: 1

    See subj:
    Absolutely incorrect.

    --
    Baker's Law: Misery no longer loves company. Nowadays it insists on it
    http://www.sigsegv.cx/
  38. Hey Al Gore! Help us!!!! by SalsaDoom · · Score: 1

    haha =)

    Fuck all gore!
    let BILL GATES save us!
    we can make us a unbreakable 2bit encryption!

    --
    "Computers will never truly be free until the last windows user is strangled with the entrails of the last mac user."
  39. wow! by Todd+Knarr · · Score: 1

    I'm going to be optimistic and assume this is sarcasm.

  40. Non-US Encryption. by RinkRat · · Score: 1

    Okey-dokey. I understand that we are not allowed to send really strong encryption off the US shores. But here's my question: Why does this matter? Are there no strong encryption programs that exists outside of the US mindshare? Surely, there are other programs just as strong that exist oursite of US lines, not beholden to idiotic US laws. Right?

    --
    RinkRat
  41. Key Escrow by Industrial+Disease · · Score: 1

    IIRC, another important aspect of this version of SAFE is that it prevents the government from imposing Key Escrow requirements on encryption software. I presume that this provision is still intact.

    --
    Weblogging Considered Harmful:
  42. Not true by Taral · · Score: 1

    Software requires a 15-day review, and it only happens once. In fact, only the MODULE that does the encryption needs verification... I intend to take full advantage of this if this bill goes through.

    It's a first step, anyway. You know the saying about the rock rolling down a hill...

    --
    Taral

    WARN_(accel)("msg null; should hang here to be win compatible\n");
    -- WINE source code

  43. Darn... by RobinHood · · Score: 1

    You know, as a Canadian in the business of Cryptography, it's a lot better if we can sell to international customers and you guys can't. After all, your cryptographic software is *so* much more advanced than ours... :) HA ha!

    Just jokin' - we support this bill, trust me.