January 2001 - cypherpunks-legacy

Photos of high-security George W. Bush inaugural preparations
by Declan McCullagh 15 Jan '01

15 Jan '01

This weekend I wandered along the National Mall; here are some photos of the preparations for the George W. Bush inauguration on Saturday: http://www.mccullagh.org/theme/2001-bush-inauguration-setup.html Note the high security in response to reports of protests planned: http://www.mccullagh.org/image/d30-5/inaugural-fence.html http://www.mccullagh.org/image/d30-5/capitol-building-fence.html A cop got out of his car to tell me not to take photos of police, when I was on a public sidewalk next to the Capitol building: http://www.mccullagh.org/image/d30-5/capitol-police.html Map of parade route and police checkpoints by the Mall: http://washingtonpost.com/wp-srv/metro/daily/jan01/parade.htm Washington Post article on protests, preparations: http://www.washingtonpost.com/wp-dyn/articles/A57682-2001Jan13.html Excerpt: "16 federal and local law enforcement agencies led by the Secret Service are taking unprecedented security steps. More officers than ever will be on duty -- at least 6,800 -- and it will be the first inaugural parade in American history for which those attending must pass through police checkpoints." -Declan

1 0

Aquecimento em sua casa !
by info＠giganetstore.com 15 Jan '01

15 Jan '01

Se pretender visualizar esta informação numa página do seu browser em formato HTML, basta clicar aqui. <http://www.giganetstore.com/dynamic/promotions/mails/aquecimento.htm> Aquecimento em sua casa ! O frio já começou a invadir as nossas casas, por isso a giganetstore.com <http://www.giganetstore.com/> propõe-lhe uma requintada gama de produtos de aquecimento que o vão defender deste inverno implacável. Deixe de tremer de frio e clique nos nossos aquecedores! Convector Turbo C78 <http://www.giganetstore.com/products/product.asp?channelId=0&CategoryId =0&subCategory=0&productId=95> <http://www.giganetstore.com/products/product.asp?channelId=0&CategoryId =0&subCategory=0&productId=95> Moulinex 12.40 ($) 61,85 (€) Poupe 5% Termoventilador EO 9.42 <http://www.giganetstore.com/products/product.asp?channelId=0&CategoryId =0&subCategory=0&productId=179> Moulinex 6.590 ($) 32,87 (€) Poupe 6% Irradiador a Óleo RU5 <http://www.giganetstore.com/products/product.asp?channelId=0&CategoryId =0&subCategory=0&productId=9154> Ufesa 7.990 ($) 39,85 (€) Poupe 6% Irradiador c/ Pés 995 <http://www.giganetstore.com/products/product.asp?channelId=0&CategoryId =0&subCategory=0&productId=9152> Ufesa 4.890 ($) 24,39 (€) Poupe 8% Irradiador c/ Pés 493 <http://www.giganetstore.com/products/product.asp?channelId=0&CategoryId =0&subCategory=0&ProductId=9153> Ufesa 5.490 ($) 27,38 (€) Poupe 8% Irradiador Parede DB4296 <http://www.giganetstore.com/products/product.asp?channelId=0&CategoryId =0&subCategory=0&productId=9149> Ufesa 5.390 ($) 26,89 (€) Poupe 8% Termoventilador VO3 <http://www.giganetstore.com/products/product.asp?channelId=0&CategoryId =0&subCategory=0&productId=180> Moulinex 7.590 ($) 26,89 (€) Poupe 8% Purificador de ar HR4342 <http://www.giganetstore.com/products/product.asp?channelId=0&CategoryId =0&subCategory=0&productId=235> Philips 37.900 ($) 189.04 (€) Poupe 5% Ar Condicionado <http://www.giganetstore.com/products/product.asp?channelId=0&CategoryId =0&subCategory=0&productId=8087> SH09 <http://www.giganetstore.com/products/product.asp?channelId=0&CategoryId =0&subCategory=0&productId=8087> Samsung 187.900 ($) 937,24 (€) Poupe 5% Para retirar o seu email desta mailing list deverá entrar no nosso site giganetstore.com <http://www.giganetstore.com> , ir à edição do seu registo e retirar a opção de receber informação acerca das nossas promoções e novos serviços.

1 0

Fwd: Re: Safety issue: 7.62 NATO == .308 Win NOT!!!
by JFA 15 Jan '01

15 Jan '01

Reply from a non CPunks friend: ==================BEGIN FORWARDED MESSAGE================== Hummmm ! I have loaded 7,62 and .308 cartridges in my L1A1 ( FN variant made by Lightgow ) and in my FR8 ( spanish bolt action carbine ) without any problems. One thing though ! When you reload a military brass, you should always, always, reduce your first (tests) charges of about 10%. Reason. The military brass is thicker, so there is less space (volume) in the cartridge to accomodate the powder. Not a problem when you are using BLC-2 or other similar powder, since the full charge that I was using was filling the cartridge up to the neck ( 52 grains of powder over a 125 grain softpoint bullet). So, if by mistake, a military brass would have mixed with my "federal" brass, I would have had a big mess on my reloading press.... and not in my face. I always used the same technique with all the calibers that I reload, and always developed powerfull but safe loads. Apart from an empty case volume, I do not see any problem using 7,62 or .308 ammo in the same rifle. After taking a look at the M1A1 rifle that blew up, and especially at the split shell and almost ejected primer, the only conclusion that I can come with is : a.. The wrong type of powder was used ( faster burning rate like pistol powder ) ; b.. Something was blocking the barrel ( pine needle, small rock, forgotten (!!!) cleaning cloth, etc ) preventing the bullet from exiting, and causing the pressure inside the barrel to exit through the weakest point of the rifle....OUCH ! c.. Looking at the primer, some extraordinary pressures develop in the barrell ! d.. So, if the barrel started splitting apart near the chamber, that would explain the split case ! Glad it wasn't my rifle...and my face ! Regards, ===================END FORWARDED MESSAGE===================

1 0

BOOST WINDOWS OPERATING SYSTEM!
by info1＠networkshosts.com 15 Jan '01

15 Jan '01

Dear Windows User, Now you can boost the reliability of ordinary Windows ME, 95 and 98 to nearly the level of Windows NT or 2000, Microsoft's professional and industrial version of Windows. The new WinFix 4.4 is a very effective way to improve the reliability of Windows, because it makes Windows fault-tolerant and self-repairing. And WinFix is very safe, because it operates completely independent of Windows. http://www4.newsalesjob.net/comph to find out more about WinFix, the safest, most effective way to keep you working, by keeping your PC working non-stop. Arlen Dixon, CEO Westwood Software Marketing * * * * * * * * * * * * * * * * * This announcement is being sent to PC users who asked to be kept informed about new developments in Windows(tm) technology. To be removed from our mailing list, go to the Email-us page OR To be removed mailto:remove@www4.newsalesjob.net?Subject=REMOVE

1 0

Bell Update
by John Young 15 Jan '01

15 Jan '01

According to the Jim Bell court docket of January 11: 1. Innocent victim Jim (via attorney Robert Leen) has made motions: 1a. To suppress (unknown what). 1b. To dismiss the indictment. 1c. To continue the trial date. 1d. To change venue. 1e. To represent himself. Though AUSA Robb has responded to these motions none have been ruled on, as far as I can tell. 2. Judge Jack E. Tanner (who replaced J. Kelly Arnold), has ordered a competency exam of Jim. 3. Jack has denied a Robb motion for Jim's handwriting sample until the competency report is submitted. 4. Jack has ordered that disovery materials not be shown to Jim until further notice from Jack, because, according to Robb, Jim stated he intends to publish such materials on the Internet. The discovery materials, according to Robb, contain "voluminous private information and personal addresses of various individuals." There is no indication at that the trial date of January 22, 2001, set in December, has changed, though the competency exam and other proceedings would appear to have affected that.

1 0

Highest Payout On The Net!!
by achamele0n＠toughsales.com 15 Jan '01

15 Jan '01

1 0

Voice over OTP during WW2.
by Trei, Peter 15 Jan '01

15 Jan '01

http://www.nsa.gov/wwii/papers/start_of_digital_revolution.htm Fascinating article at the NSA site about the heroic efforts to provide long-distance secure voice communications over radio. The good folks at Bell Labs essentially invented digitized, compressed voice, and encrypted it using synchronized pairs of records of random data at each end. Each terminal site had 55 *tons* of equipment! Apparently this astounding - and apparently successful - effort was mostly declassified back in '76, but I first heard about it in Stevenson's Cryptonomicon last year. A remarkable story. Peter Trei

1 0

authenticating Real Life(tm) [was: More on G3s]
by Tom 15 Jan '01

15 Jan '01

ok, let's try to tackle this problem seriously, for the crypto value (or lack thereof): Jim Choate wrote: > > > What makes 'your friend' an authority? > > > > he had the weapon in question in hand pretty much every day for several > > years. > > Yeah, says who? Does your friend even exist? Even if he does how does one > go about proving his assertions? And why should we trust whatever > 'reference' he passes us to? that is a different problem that has, in fact, been answered by me below. > Again, you're asking for 'trust' based on authority. How would one go > about 'authenticating' who you are? If I 'trusted' you why would I want to > authenticate you? you will have to trust something. then you use that something to verify something else, that is what: > > web-of-trust. means. > > Which doesn't work since I don't already know you. If I have trust why am > I using the encryption? How do I know that the key you gave Fred, and that > Fred then gave me is the key you gave Fred or the key Fred gave me? see above. or check what web-of-trust means. for for this problem, we have the following steps (in no specific order): 1.) verify that my friend is an authority on the issue 2.) verify that my friend actually exists 3.) verify the information exchange between you and and my friend everything else is parts of that. for example, my person only enters the picture as a middle man between you and my friend. if you trust me (which you don't) then I can make steps 1 and 2 for you and all that's left is to make sure that you receive the correct information from me, which could be solved by signing the mail cryptographically. since you don't trust me, you will have to either establish trust to me, or proceed to verify these steps on your own. > > I will authenticate my friend by having a face-to-face > > meeting. > > Really? This is based upon your assumption that the person you are meeting > is the person who you think you are. But how do you know a MITM attack > wasn't executed prior to your first meeting? Have you known this person > for many years, intimitely involved in their life? If you only know them > from the occassional party, or weekend football game then you could be > scammed. I've known this person for over 10 years. I'm pretty confident that any attempts to replace him with someone else in such a way as to fool me would be several orders of magnitude more expensive than the gain is worth. how you do this depends mostly on your threat-model. for this example, the threat is small - it's not like any TLA would throw a couple million dollars at this in order to fool you, right? ergo I can assume that a replacement by someone who can fool me for several hours is extremely unlikely. > > you can authenticate my words via PGP if you want to, I can > > sign the mail. > > Which means nothing, your PGP key is no more trustworthy than your words. dumb jim. :) it's not meant to be any more trustworthy than my words. in fact, it's sole purpose (in this case) is to ensure that my words are really my words. it's part of step 3 above. > > now as to how to authenticate whether or not my friend is what I claim > > he is - well, I'm sure he has the appropriate documents that could be > > checked for forgery, etc. if you insist (and pay the costs) that could > > surely be arranged. > > Which again proves nothing. I have no way to tie a packet of documents to > a person, even if they had a photograph on them. Even if they were stamped > with an official seal. The only way they would prove anything is if I > authenticated not only their source but the process by which they were > generated. if they are stamped with an official seal (which in the case of the military I'm quite sure they are) then you can be sure that any of 3 cases is true: a) they are valid b) the government (or other place of origin of the seals) is in on the conspiracy c) a forger with more skill than your forgery-detection method is in on the conspiracy in the case of a question about ammunition, both b) and c) are highly unlikely. again, you have applied the highest possible threat model to a case where even a medium one would be paranoia. > Bottem line, there is no fundamentally functional authentication protocol. > They all require a level of trust that is not appropriate if one is > already concerned enought to use encryption. wrong. we can solve your problem IF you present us with a list of those things that you DO trust. from there on, trust can be extended. e.g. if you trust your own eyes, then visiting both Tim and me can assure you that there are two DIFFERENT entities claiming to be Tim and Tom. you can then verify whether they really are what they claim, the method of verification again depending on what instances you trust. for example, if you trust the german government to keep correct records, you could check those on me (birth certificate, etc) to verify that I am who I claim to be. you have also got to take the threat model into account. in the worst case, there is no trust because you're living in The Matrix and what you see with your own eyes doesn't even exist. in the end, trust and verification aren't binary if you meet real life. you can never be 100% sure that I am who I claim to be. however, you can gradually increase your verification/trust factor by any of the processes outlined above and/or an unlimited number of other ones.

1 0

Introducing a New Trading System 13 January 2001
by FBA systems 15 Jan '01

15 Jan '01

1 0

Highest Payout On The Net!!
by achameloen＠toughsales.com 15 Jan '01

15 Jan '01

1 0