November 2000 - cypherpunks-legacy

CDR: Need Money? Aggressive lenders Say YES to Home Loans! 16863
by return61＠uole.com 20 Nov '00

20 Nov '00

1 0

Re: Public Key Infrastructure: An Artifact...
by obfuscation＠beta.freedom.net 20 Nov '00

20 Nov '00

Bram Cohen <bram(a)gawth.com> writes: > Unless that problem is fixed, man in the middle is hardly made more > difficult - for example, Mallory could break into some random machine on > the net and steal it's public key, then hijack local DNS and when someone > goes to amazon.com redirect them to amazon.hackeddomain.com, and then > proxy to amazon.com - now even SSL says the connection is safe. Are you sure that works? I would think the SSL client would do a connection to the URL the user typed, www.amazon.com, and check the name in the cert to see if it (approximately) matches. If some DNS redirection is done in the background so that amazon.com gets mapped to amazon.hackeddomain.com, the client will not be aware of this (will it?) and so it will still throw up a warning when it sees a cert for hackeddomain.com on a connection to amazon.com. Ob

2 1

CDR: Lo siento . . . por la feria SIMO
by moviles＠hispavista.com 20 Nov '00

20 Nov '00

Muy Sres. nuestros: Hemos recibido su amable correo-e. En los prsximos dmas nos pondremos en contacto con Vd. En estos momentos no podemos hacerlo debido de tantas demandas hemos recibido y a que estamos en al Feria S.I.M.O en Madrid (Stand n: 8086* Pabellon n: 8). No podemos presentar en estos dmas la lista de precios en nuestro WEB http://www.wapshop.es por la fuerte subida y la fluctuacisn de moneda (US $ = Dslar). Sentimos no poderles por estas circunstancias dar una respuesta mas favorable. Le contestaremos su noticia lo antes posible. Muy atentamente, WAPSHOP S.L. Dept. Informacisn http://www.wapshop.es ------------------------------------------------------------------------------------------------------------------- Si quiere borrarse de la lista ir a: http://dowjones.st/to/wapshop Atencion este servicio de remove es ofrecido por RemovingNet, que no es beneficiario de este email comercial. Este servicio es un servicio gratuito para facilitar las bajas de las listas de distribucion. If it wants to erase of the list to go a: http://dowjones.st/to/wapshop Attention east service of remove is offered by RemovingNet, that is not beneficiary of this commercial email. This service is a gratuitous service to facilitate the losses of the distribution lists.

1 0

CDR: Latest Stock Pick..."NRGE" - Buy Alert! 15493
by marketing24＠uole.com 20 Nov '00

20 Nov '00

1 0

CDR: NRGE - Buy Alert! 28926
by marketing21＠uole.com 20 Nov '00

20 Nov '00

1 0

CDR: The Window, Opportunity
by bcallu＠arabia.com 20 Nov '00

20 Nov '00

1 0

CDR: Re: Carnivore All-Consuming
by Steve Schear 20 Nov '00

20 Nov '00

At 06:21 PM 11/19/00 +0000, Jim Dixon wrote: >On Sat, 18 Nov 2000 George(a)orwellian.org wrote: > > > EPIC FOIA... > > > > http://www.latimes.com/wires/20001117/tCB00V0387.html > > > > WASHINGTON--The FBI's controversial e-mail surveillance tool, > > known as Carnivore, can retrieve all communications that go > > through an Internet service -far more than FBI officials have > > said it does -a recent test of its potential sweep found, > > according to bureau documents > > [snip] > >Carnivore is an NT-based PC. How could it conceivably process all >communications through even a mid-sized ISP? > >There are at least two problems: processing power and network >architecture. > >As regards the first, our customers, many of them smaller ISPs, >find it necessary to employ NT clusters to handle subsets of their >traffic (Usenet news, Web proxies, and so forth). So it is >difficult to believe that a single NT box could monitor their >entire traffic load. A PC, using off-the-shelf HW, is capable of filtering a full 100 Mbps link (144K packets/sec) as demonstrated by the BlackICE products http://www.networkice.com/html/blackice_sentry.html steve >As regards the second, most ISPs of any size have multiple PoPs >and multiple high-speed connections to other networks. It would >require incredible contortions to route all of their traffic to >one point for monitoring. And for the larger network, the bandwidth >into that single point would be unmanageable. > >The UK government proposed building something more sophisticated than >Carnivore. Consultants led them to believe that this was feasible, >and costed a solution. The UK ISP associations (the LINX and ISPA) >replied to their proposals by saying that (a) the proposals showed >no understanding of the technical structure of the Internet and >(b) their cost estimates were ridiculously low, even if the >Internet could be distorted sufficiently to be monitored in the >manner envisioned. > >As far as we can see, the UK government as an institution is not >capable of even understanding the Internet. They simply do not have >enough competent technical staff. They do have a lot of relatively >senior people who claim to be competent - and give bad advice, some >of which finds its way into legislation and programs of action. > >The overall capacity and the complexity of the Internet is increasing >at an explosive rate. For better or for worse, this far exceeds the >growth in any government's capability of monitoring Internet traffic.

2 1

CDR: Need Money? Aggressive lenders Say YES to Home Loans! 9803
by return60＠uole.com 20 Nov '00

20 Nov '00

1 0

CDR: RE: The cause of uncertainty in the election outcome.
by Ernest Hua 20 Nov '00

20 Nov '00

Well, that's not entirely true either. The judicial system is generally pragmatic, in the sense that they do not address issues not brought before the court. For instance, if someone commits a crime, a prosecutor must bring up charges. Yes, this concept seems rather obvious and trivial, but what it means is that it is very easy for the body of laws which affect any particular situation (e.g. Presidential election) to become contradictory and for the accepted practice to deviate significantly from what the law strictly allows. It's not necessarily a bad thing that the system works this way, but it's definitely a side effect, and most people don't want to fix what ain't broke. Clearly, the Florida situation demonstrates that something is likely broken. Ern -----Original Message----- X-Loop: openpgp.net From: James A. Donald [mailto:jamesd@echeque.com] Sent: Sunday, November 19, 2000 11:24 AM To: cypherpunks(a)cyberpass.net Subject: The cause of uncertainty in the election outcome. Because the vote is so close, the outcome depends entirely on a multitude of judgment calls about which votes count, and which are counted, and how they shall be counted. The normal procedure in England and the democracies descended from England, or imposed by English troops, is that the major parties reach agreement before and during the vote count, on how the votes shall be counted. In the US however, you have a multitude of laws, laws which contradicted each other, and contradicted actual practice. For example a lot of perfectly good absentee ballots that were presented by the military in accord with the usual military practice were rejected this time because they did not comply with the letter of the law, even though they complied with custom and practice. The cause of the uncertainty is judicial imperialism. It is often said that Americans are litigious,but the cause of this destructive litigation is judicial willingness to unpredictably overturn existing practice.

1 0

CDR: Re: Is this Reno/wiretap stat true?
by David Marshall 20 Nov '00

20 Nov '00

"James A. Donald" <jamesd(a)echeque.com> writes: > -- > > At 01:29 PM 11/19/2000 -0500, George(a)orwellian.org wrote: > > Found in Usenet: > > > > # I don't know if Reno is a traitor, but consider this: > > # Between 1992 and 1997, there were approximately 2,500 > > # national security wiretaps requested by the FBI. Only one > > # of these 2,500 requests was turned down: Wen Ho Lee's! And > > # this turndown took place while Wen Ho Lee was still > > # downloading nuclear secrets from Lost Alamos. > > > > True/False? > > > Any new, important and surprising fact reported on usenet without source or > explanation is almost certainly a lie. That's always good advice to go by. In this particular case, I recall hearing a claim that only one wiretap was turned down, and that one was to be exercised on Wen Ho Lee, but I don't recall the total number of requests. The source for this was the Rush Limbaugh Show, so make of it what you will. Not to defend the Butcher of Waco by any means, but we also don't know the circumstances surrounding the wiretap. Maybe it's true, though unlikely, that all the other wiretap requests had evidence behind them, while the one for Wen Ho Lee took the form "We think this guy is doing something bad. We don't know what, but he ate Dim Sum this morning, and we're worried that he might like more than just Chinese food." Of course, that's never stopped the government from approving wiretaps before. :)

1 0