Being Sovereign
"Since I entered politics, I have chiefly had men's views confided to me privately. Some of the biggest men in the U.S., in the field of commerce and manufacturing, are afraid of somebody, are afraid of something. They know that there is a power somewhere so organized, so subtle, so watchful, so interlocked, so complete, so pervasive, that they had better not speak above a whisper in condemnation of it."
- Woodrow Wilson, The New Freedom, 1913
It is time to discuss communications. You should have private communications. If you want to be free, if you want to exert your full potential as a sovereign, you must be able to converse in privacy.
The history of privacy is closely tied to the history of sovereignty. When individuals have found ways to communicate with greater privacy, they have been able to build more, do more, and preserve more of their property and freedom than ever before.
Much of that history of privacy is the history of codes. The study of codes is called cryptology - the study of that which is hidden. It is more commonly referred to as cryptography - hidden writing.
Cryptography has two components. The first is hiding information so that it cannot be found or decoded and understood. The second is decoding the hidden writing so that the intended recipient may read and understand it. Of course, this second aspect of cryptography is also used for the purpose of decoding the hidden writing so that it may be seen and understood by third parties.
Written language has always conferred power on its users. The power of understanding the words of others, including those recently or long dead, is a tremendous tool. Owing to the power of this tool, writing was not always widespread. Often, priests or scribes would jealously guard their power of written communication, forming temples and guilds and putting to death those "unauthorized" persons who dared to learn their secrets. Fortunately, early civilizations such as the Sumerian discovered the opportunities of having literacy be very widespread. More knowledge understood by more people led to innovations and prosperity.
However, the dissemination of literacy also carries with it some difficulties. With widespread understanding of the written word, privacy becomes more difficult. To safeguard their communications, people began to take up writing in code. Famously, men such as Leonardo da Vinci would write backward to disguise their words.
Julius Caesar devised a method of writing out his messages in perfect squares, reading from top to bottom from one column to the next, then carefully transcribing the letters into the normal right to left horizontal orientation. His officers, upon receiving a message of apparent gibberish would immediately count the characters and obtain the square root. (For example, a message of 100 characters would fit into a ten by ten matrix.) Filling the matrix from left to right and top to bottom with the characters from the message, the officer would then read the words that appeared from top to bottom in the leftmost column, and continue reading one column after another until the message was complete.
In the Seventeenth Century, the practice of code writing became more sophisticated, with letter transpositions, alphabet substitutions, the use of numbers to represent letters, and even the adoption of binary encipherment. Mathematics became increasingly important to the cryptographer as various mathematical operations were used to encipher and decipher messages. By World War II, these codes were very complex, often involving machines such as the Nemesis encoding machine for both enciphering and deciphering messages. Digital computers were developed at a staggering pace prior to and during the war in order to mimic the deciphering abilities of enemy coding machines.
Again famously, Japan's naval codes were broken by the American military prior to the outbreak of hostilities in 1941. In his excellent book on this subject Day of Deceit, Robert Stinnett, a contemporary author explains that the Roosevelt Administration used its knowledge of Japanese naval codes to monitor the progress of the Japanese government toward war, prompting this behavior with one provocation after another until the Japanese were determined to attack. Then, by deceiving the nation and the military, the aircraft carriers of the US Navy's Pacific Fleet were carefully sent away from Pearl Harbor whose forces were otherwise deliberately positioned to maximize the damage from the attack. With ships and aircraft lined up and various early warnings either misdirected or ignored, the deaths of thousands of American service men and women became the direct responsibility of president Roosevelt.
Since World War II, math has played an ever larger role. In the 1970s, Ralph Merkle and others invented public key cryptography. Using pairs of very large prime numbers, public key cryptography allows anyone with the public key of a key pair to generate an enciphered message. The message can then be deciphered only by the person who possesses the secret key of the pair.
Public key cryptography works with a number of algorithms. The earliest and most famous of these is the RSA algorithm. RSA stands for the first letters of the last names of the inventors: Ron Rivest, Adi Shamir, Leonard Adleman. More recently, other algorithms such as Diffie/Helman, DSS, Twofish, and IDEA have become available. Phil Zimmerman decided in the late 1990s to package some of these powerful algorithms into a software application called "Pretty Good Privacy." The software has taken the world by storm.
Originally a DOS command line application, PGP has developed into a powerful application for Windows, Macintosh, or Linux operating systems. It has been taken up by the open source community which has developed OpenPGP and GnuPG as open source alternatives, though sometimes without access to copywritten or patented algorithms (e.g., the IDEA algorithm).
PGP is available here. GnuPG is available here. There is also an international site here.
PGP makes use of two approaches to encipherment. It also allows messages to be deciphered. Finally, it allows the sender of a message to sign either a clear text message or an enciphered message so that his signature may be digitally verified.
The simplest PGP encryption scheme is also common to the algorithm Twofish. A password is used to encipher the message. The decipherment is only possible to other persons who know the password. A password can be up to 254 characters, can contain letters, numbers, upper or lower case characters, and even symbols. Essentially, anything in the ASCII character set. So, merely guessing the password can be cumbersome, even for an advanced computer.
The more complex PGP approach to encipherment uses the public key of the recipient to encode the cipher text. The recipient then uses his private key (which is itself secured with a password) to decrypt the message.
Message signing works by using the private key to generate a digital signature. The signature is then verified using the public key.
These ideas are not as complicated as they may seem. Although the DOS version of PGP had some limitations, mostly due to the command line interface of DOS itself, several "front end" software applications were developed which provided a graphical user interface for PGP. Upgrades to PGP adopted the graphical user interface, and all of the open source versions use a graphical interface. So, today it is very simply a matter of downloading the software and using it like other applications.
There are even "plug ins" which work with familiar e-mail programs such as Outlook and Eudora, although these plug-ins often contain limitations about the configuration of PGP keys. (A PGP key may, but need not, include an e-mail address, a photograph, and other information about the user who generated the public key. Some e-mail plug-ins won't encrypt messages except to keys that show an e-mail address identical to the e-mail address of the message recipient. This "safety" feature can prevent valid keys from being used for encryption, and may prevent a user from decrypting messages if he hasn't updated the e-mail addresses for a particular key.)
Since PGP is available in a free version and since the open source applications are free, it is not costly to gain security for your e-mail communications. How secure is it? "Pretty good" is the answer. Assuming you use the 4096-bit keystream feature, and assuming your password is of an appropriate length and complexity, and assuming you use appropriate methods to keep virus and trojan software from your computer, you can generate cipher text that would take the fastest known computers tens of millions of years to decipher. Many fast computer processors working in parallel may be able to decipher messages within a shorter time, though very few people have access to that kind of computing capability.
Which has led to the bear traps. A friend of mine from Wyoming likes to say, "There's always free meat in a bear trap." Well, the Mossad and the NSA have probably set up "free" online e-mail services with encryption systems that work well enough to fool most people, but which are not truly safeguarding your information from either the NSA or other security services.
For various reasons, we believe it is possible that SAFe-mail is a system with backdoors operated by the Mossad. If so, then the information users are sending and receiving would not be secret from the Israeli government, and may be traded by the Mossad for other intelligence information. We have relied on third party analyses and information in identifying this possibility, which we do not state is certain.
Similarly, we have what we regard as reliable information that MailVault was probably developed with coding assistance from NSA operatives who may have been involved in the demise of the Laissez Faire City project. In particular, in 1999, Michael van Notten traveled to Costa Rica for the International Society for Individual Liberty conference held there that year. He learned of MailVault and had then-LFC City Clerk "Jack Freeman" provide him with an account. We learned subsequently that Freeman was reading all of Michael's message traffic. At one point, Freeman replied to a message sent by Michael to yours truly. When confronted, Freeman admitted he had been reading the message traffic and asserted that if Michael wanted privacy he would have changed his password.
We have since been informed that "Jack Freeman" was an alias of Chris Eyerman or Christian Eyerman, a matter confirmed by several sources. We believe Eyerman was a close associate of John Landgraf, and for various reasons we believe Landgraf had close ties to government intelligence agencies. At a 2002 conference in Aspen, Landgraf made statements about these contacts and connections. Eyerman and Landgraf were co-chairs for the next session of that same conference in 2003.
Update: We have subsequently been told by Christian Eyerman (or Chris Eyerman) that he was not the only person to go by the name "Jack Freeman." It is an interesting counter-claim, and notably fails to address the situation with Michael's MailVault account.
So while MailVault and SAFe-mail purport to provide encrypted communications for users, we are not confident in their privacy services. We suggest they may not be the best online privacy messaging services available.
Two other examples would seem to be much better. One is Hushmail.com which uses the Open PGP protocols for their system. Various privacy experts have validated these protocols and we believe Hushmail is a good service which you can use with some confidence. However, because encryption keys are kept by the Hushmail server, a certain amount of trust enters into the equation. It is conceivable that Hushmail messages could be compromised as a result of court orders, though the safeguarding of user passwords may make this difficult.
The other better alternative is Seagold.net. The Seagold system uses password encryption, so that there is no private key stored on the Seamail server. This alternative makes it much more difficult for encrypted messages to be decoded.
Both Hushmail and Seagold have encrypted interfaces. That means that instead of the http you see https, and there is 124-bit encryption or greater in all communications to and from the server. We're familiar with some of the people involved in each of these business operations, and therefore feel confident that their software is safe to use.
So, if you have difficulty with PGP or its open source variants, and if you wish to have someone else do the work for you, Hushmail and Seagold both offer alternatives that are easy to use and not very costly. In both cases, most users will find Hushmail's servers to be in another jurisdiction and most users will find the same of Seagold.net. Thus jurisdictional arbitrage helps you safeguard your data from prying eyes. However, it is always a difficulty when you rely on someone else.
As a result, some of our clients have developed elaborate coding systems of their own. These use random number sets, one time pads, hashes, salting, enciphered password lists, and other tools of the trade to generate various types of messages.
Which leads to the next mantra: shred, burn, stir. When you receive and decode a message, the clear text is stored either on a web server (in the case of Hushmail or similar) or on your own computer. Simply deleting the saved message may not be enough. Computer systems "delete" files by renaming them so that the operating system knows the space is available. But, the available space may still contain clear text information you don't want seen. Various tools, including PGP itself, offer to write over the free space on your computer with random characters. Doing so three or five or fifteen times is generally adequate to safeguard your privacy.
In the world of paper communications, we use a mechanical shredder to turn papers into confetti. We then burn the resulting confetti. We then stir the resulting ash into our compost heap. Why?
The shredded material can be re-assembled. You may recall the Iran hostage crisis of 1979. Iranian "students" took over the American embassy in Teheran. The embassy staff had shredded documents in order to preserve diplomatic and spy communications. Some of the shredding was taking place as the embassy was being overrun. However, the shredded documents were laboriously pieced back together over the next several months and years. Secrets were revealed. Some of these secrets presumably involved human intelligence agents and informants, some of whom may have come to harm as a result.
Why stir? Various tools exist for reading ashes. When paper is burned, the ink and toner used to print on the paper is also burned. However, neither the paper nor the ink nor the toner is fully destroyed. You can try this experiment yourself at home. Simply print a few pages of text. Then burn the pages in a fire place or on a charcoal grill. Make sure you do so where there is not much wind. You'll want to handle the ash carefully, but you should be able to see the printed letters still visible on the page. They may be shrunken, distorted, or faded, but they will often be legible.
Only when you have shredded, burned, and stirred, can you be reasonable certain that the information is gone. When the molecules of paper and ink have returned to their component elements and been randomized, it is very unlikely that the information you've destroyed can be re-assembled.
While the topic of private communications is of tremendous interest and we could go on at considerable length, there is only one further thought we'd like to offer. Hide in plain sight.
Our first introduction to this idea was provided by a sibling. He suggested that a great "hiding place" was the garbage can we each had in our rooms. By putting papers or magazines at the bottom of the garbage can, or beneath its lining, and then putting various items on top including used facial tissue, he discouraged anyone from looking closely at the contents.
If you encrypt only those private communications that are truly interesting to you, then you are tipping your hand. To the extent that you can encourage your friends and correspondents to use encryption, use it for everything. Even ordinary messages should be encrypted. Say "hello, how's the weather" and encrypt that message. By encrypting a full range of messages, and making it your ordinary practice, you do several things. First, you gain experience with encrypting and decrypting message traffic. That's good all by itself. Second, you hide your important messages in a tremendous litter of other encrypted communications. Third, by increasing the number of encrypted messages being transmitted on the Internet, you make the job of those espionage agencies much harder. They have to devote resources to deciphering everything you read and write, rather than just the things you care most about. So, you greatly enhance your privacy and the privacy of others.
The same approach should be used for shredding. When you use PGP wipe or other tools to repeatedly over-write data on your hard drive one time, you have created a sort of anomaly. Your hard drive is now in an unusual configuration, for you. Only the files with working file names are readable. All the deleted files are gone, having been overwritten repeatedly with random characters. If you do so routinely, then your drive is not in an unusual configuration. Plus, you never know when the drive will be compromised or your home or office invaded by security personnel or industrial spies or thieves determined to get at your private data.
When you shred papers, throw in some bulk mail adverts. Shred, burn, and stir, including newspapers and old magazines as well as important documents. That way, if the burning gets postponed and the confetti is seized, it would be much harder to assemble a useful document.
In future reports, we plan to discuss other secure communications.
You'll notice that the web sites for the companies link from the company names; the web site stock reports for the companies link in each case from the Canada dollar value; the Yahoo summary for each company links from the US$ value. There is also something of a tiny arbitrage opportunity involved in the current stock prices in US versus Canadian currency and the exchange rates shown here: XE amounting to about US$0.015 for PTM.
As is evident from the foregoing table, the investor who took our advice on 30 August 2004 and bought 1,000 shares of each stock is worse off by C$60.