[comp.binaries.ibm.pc.d] PKZIP `export version'

djm@castle.ed.ac.uk (D Murphy) (08/25/90)

Whatever would anyone want that for ? Can't they get hold of real versions ?

This sounds like some moron in the State Department saying `its my ball and
youre not playing with it'. 

Is the only difference between the two that the US/Canada one has the ability
to encrypt the company-serial number data into a zipfile for the 
authentication check (since this was the only bit in the readme file which
had `US/Canada only' on it) ?

Now, I'm about to register for this thing (any *idea* how much profit the
banks make out of sending a cheque in another currency ? - lots) but I 
really think that if I'm to pay more for the software than those in the US
(given the bank ripoff) I should at least get the same package.

Murff...

ts@uwasa.fi (Timo Salmi LASK) (08/26/90)

In article <5941@castle.ed.ac.uk> djm@castle.ed.ac.uk (D Murphy) writes:
>Whatever would anyone want that for ? Can't they get hold of real versions ?

This was discussed at some length when pkz110.exe came about, and it
was decided (between Keith Petersen and myself mainly) that we do
not want to be judges of (even stupid) US export stipulations. 
Therefore I acquired the European version, and renamed it
pkz110eu.exe, and put it up for download from chyde.uwasa.fi, whence
it thus originates.  We didn't like this, but didn't want to
compromise the net, either. 

>This sounds like some moron in the State Department saying `its my ball and
>youre not playing with it'. 

Right O, but as I said it wasn't for us to make a crusade against
this ridiculous stipulation which leaks like a sieve, anyway.  Many
European BBSes seem to have the US version. 

>Is the only difference between the two that the US/Canada one has the ability
>to encrypt the company-serial number data into a zipfile for the 
>authentication check (since this was the only bit in the readme file which
>had `US/Canada only' on it)
 
No, there is a bit more to it.  The whole encryption system.

>Now, I'm about to register for this thing (any *idea* how much profit the
>banks make out of sending a cheque in another currency ? - lots) but I 
>really think that if I'm to pay more for the software than those in the US
>(given the bank ripoff) I should at least get the same package.

Wishful thinking, on your part, I am afraid.  You won't get the same
package just by registering (unless you buy in in the US or Canada
and don't stress you nationality).  (I am a registered user myself,
and was sent the export version).

...................................................................
Prof. Timo Salmi        (Moderating at anon. ftp site 128.214.12.3)
School of Business Studies, University of Vaasa, SF-65101, Finland
Internet: ts@chyde.uwasa.fi Funet: gado::salmi Bitnet: salmi@finfun

bobmon@iuvax.cs.indiana.edu (RAMontante) (08/26/90)

...so, somebody in Belgium obtains, from some Flemish BBS, a U.S.
version of pkzip that includes all the encryption; really likes it, and
sends the registration across the Atlantic.  What happens?  Does Katz
send the money back and say it cannot be registered?  I'd say that the
Belgian has at that point satisfied all ethical and legal obligations by
the attempt to register.  (Yes, I'm sure the U.S. State Dept.  could
say this Belgian has violated U.S. law.  Awww...  there goes that
vacation to New York.)

Enquiring minds are just idly curious what would happen!

(p.s.  No, I'm not picking on Belgians.  I just chose a random European
country.)

ts@uwasa.fi (Timo Salmi LASK) (08/27/90)

In article <55342@iuvax.cs.indiana.edu> bobmon@iuvax.cs.indiana.edu (RAMontante) writes:
>...so, somebody in Belgium obtains, from some Flemish BBS, a U.S.
>version of pkzip that includes all the encryption; really likes it, and
>sends the registration across the Atlantic.  What happens?  Does Katz
>send the money back and say it cannot be registered?  I'd say that the
:
>Enquiring minds are just idly curious what would happen!

Here we go again, but what the heck :-).  If we take this line of
thinking, the Flemish BBS shouldn't have the US version in the first
place.  But in reality it does, and there is very little that US
officials could do about that.  But if the distrubution would take
place on InterNet....                  (I've decided on prudence.)

...................................................................
Prof. Timo Salmi        (Moderating at anon. ftp site 128.214.12.3)
School of Business Studies, University of Vaasa, SF-65101, Finland
Internet: ts@chyde.uwasa.fi Funet: gado::salmi Bitnet: salmi@finfun

dww@stl.stc.co.uk (David Wright) (08/28/90)

In article <5941@castle.ed.ac.uk> djm@castle.ed.ac.uk (D Murphy) writes:
#Whatever would anyone want that for ? Can't they get hold of real versions ?

I have pkzip110 (ie the orig version) here  -  not sure exactly what route it
came by.   Shall I post it to eunet.sources?  

The only restriction it appears to have is that if you register from
outside the US you cannot be granted the 'digital signature' key with which
you can validate your archive and prove it was created by you.  This would
be a very useful feature for posted archives *iff* it was available
net-wide; as it isn't, its pretty useless.   Presumably if you did register
at an address outside the UK you'd be sent a version without the DES code
in it.   If you could get a source code version that might not be a problem
as you could just plug in the Finnish DES code to do the same thing.   We
do this with Kerberos, for example.   However PKZIP is not available in
source form.

By the way, I haven't registered PKZIP myself because I use ZOO; while not
quite such tight compression it is public-domain, and is available on lots
of systems, unlike PKZIP which is MS-DOS only.  So I don't know what one
would be sent if one registered from in Europe.

Regards,          "None shall be enslaved by poverty, ignorance or conformity"
        David Wright             STL, London Road, Harlow, Essex  CM17 9NA, UK
dww@stl.stc.co.uk  <or> ...uunet!mcsun!ukc!stl!dww  <or> PSI%234237100122::DWW
<or> /g=David/s=Wright/org=STC Technology Ltd/prmd=STC plc/admd=Gold 400/co=GB

hendricp@wanda.waiariki.ac.nz (Peter Hendricks) (09/03/90)

In article <5941@castle.ed.ac.uk>, djm@castle.ed.ac.uk (D Murphy) writes:
> Whatever would anyone want that for ? Can't they get hold of real versions ?

I'm surprised at all this.  The 'merican version of PKZIP has been floating
around New Zealand for quite some time.  Should be available from any BBS.
 
> This sounds like some moron in the State Department saying `its my ball and
> youre not playing with it'. 

Normal Govt. attitude, isn't it?
 
> Is the only difference between the two that the US/Canada one has the ability
> to encrypt the company-serial number data into a zipfile for the 
> authentication check (since this was the only bit in the readme file which
> had `US/Canada only' on it) ?

I understand that the full registered version allows you to encrypt the FILES
in the archive.  But only American companies can get the software key to this
feature.  Why then they had to make two different versions escapes me.
 
> Now, I'm about to register for this thing (any *idea* how much profit the
> banks make out of sending a cheque in another currency ? - lots) but I 

I suggest you buy travellers cheques and send them with your registration. 
There's only a 1% charge for this.

Peter