November 2001 - cypherpunks-legacy

Re: Thoughts in proxy services.
by Trei, Peter 26 Nov '01

26 Nov '01

[Ryan replied on the list to a private email I sent him. I'm sending the original letter to provide context for his reply.] Peter Trei > ---------- > From: Trei, Peter > Sent: Wednesday, November 21, 2001 10:15 AM > To: 'Ryan Lackey' > Subject: RE: "quitting havenco", not quite! > > > > ---------- > From: Ryan Lackey[SMTP:ryan@havenco.com] > Sent: Tuesday, November 20, 2001 5:48 PM > To: Trei, Peter > Cc: 'cypherpunks(a)lne.com' > Subject: Re: "quitting havenco", not quite! > > > Ryan and the other HavenCo folks deserve *massive* kudos for this. > > (now, when is the HavenCo remailer going online? :-) > > The remailer has been up since 16 September 2001, and was announced to > this list among others. http://remailer.havenco.com/ > > Oops! (more kudos to you!) > > Followed by: (I have them for myself now, not commercial-grade yet) > * Anonymizing proxy on Sealand, cover general traffic as well as > havenco-destination traffic. Free and no ads to havenco-destination > sites; free and ads and rate-limiting to elsewhere, or subscription. > > Now that Safeweb is down, this would be really nice. A suggestion: > > Protecting traffic between the end-user and the proxy is as and > sometimes more important to the user as protecting the target > user from the target web site. > > Safeweb did this pretty well, using SSL between the user and > safeweb, and rewriting the URLs as encrypted strings. (There was > a javascript frame on the end users browser, but I'm sure you > know all that). Protecting the target URLs from observation is > almost as important as protecting the content. > > Thus, once Safeweb was going, an observer on the firewall > could find nothing except the volume of traffic between the > user and safeweb. > > Of course, safeweb went tits-up, so their economic model (they > were ad-supported) is questionable. > > There are a couple other systems out there that are similar; > www.the-cloak.com for one. > > I've a small list of links on this, if it would be helpful. For > example: http://www.jmarshall.com/tools/cgiproxy/ > > Peter

1 0

RE: Slashdot | McAfee Will Ignore FBI Spyware
by Trei, Peter 26 Nov '01

26 Nov '01

A few years ago I coined the term 'espionage-enabled' to describe the 'International' version of Lotus Notes, with it's blabbing 88 of 128 bits of encryption keys wrapped with an NSA supplied public key. I guess it's time to label another product. Peter Trei > ---------- > From: Jim Choate[SMTP:ravage@einstein.ssz.com] > Reply To: cypherpunks(a)einstein.ssz.com > Sent: Sunday, November 25, 2001 12:52 PM > To: hell(a)einstein.ssz.com; cypherpunks(a)einstein.ssz.com > Subject: Slashdot | McAfee Will Ignore FBI Spyware > > http://slashdot.org/yro/01/11/24/2324241.shtml > -- > > -- > ____________________________________________________________________ > > Day by day the Penguins are making me lose my mind. > > Bumper Sticker > > The Armadillo Group ,::////;::-. James Choate > Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com > www.ssz.com .', |||| `/( e\ 512-451-7087 > -====~~mm-'`-```-mm --'- > -------------------------------------------------------------------- >

1 0

RE: Denning's Geo-crypto
by Trei, Peter 26 Nov '01

26 Nov '01

Curious. 4-5 years ago Denning and another associate (I forget who, it's in the archives :-) tried to market an authentication scheme which purported to authenticate the location of a remote user using GPS. The idea was that the user's machine would pick up the aggregate analog GPS signal available at it's location (either the regular, non-classified version or the high-precision classified signals), and transmit it to the server, which would use it to work out the location of the user - a user who was located at 'Pentagon, third ring, fourth floor, Army segment' would be accorded different privilieges than one whose location decoded as 'Presidential Palace, Baghdad'. I and several other list subscribers pointed out numerous issues. Among them were: 1. GPS signals don't work well in buildings of substantial construction, and the chance of them working at all in a TEMPEST shielded building are about zip. 2. There are numerous DOS attacks available - the GPS signals are easily jammed. One amusing approach would be to use GPS test equipment to generate signals appropriate for a different location (eg, Pyongyang) and beam them at the site to be DOS'd. 4. Conversely, an attacker could use the same test equipment to make it look like he's in the Pentagon, when he's actually in Kandahar. 5. GPS is based on the relative time delays of signals from different satellites. Since network lag of hundreds of milliseconds must be accepted, anyone who can see the same set of satellites as the location to be spoofed can separate the signals from the different satellites, modify the lags appropriately, and remix to generate a spoofed analog signal. -------- I sent these concerns to Denning, who replied that she would address them only under NDA, which I declined to enter. This sounds an awful lot like old wine in new bottles. Many of the same concerns arise. Peter Trei Disclaimer: The above represents only my personal opinions. > ---------- > From: John Young[SMTP:jya@pipeline.com] > Sent: Thursday, November 22, 2001 2:06 PM > To: cypherpunks(a)lne.com > Subject: Denning's Geo-crypto > > Time Magazine, November 26, 2001: > > Denning's pioneering a new field she calls geo-encryption. > Working with industry, Denning has developed a way to keep > information undecipherable until it reaches its location, as > determined by GPS satellites. Move studios, for example, > have been afraid to release films digitally for the same reasons > record companies hate Napster: once loose on the Internet, > there's little to stop someone from posting the latest blockbuster > DVD on the Web for all to see and download. With Denning's > system, however, only subscribers in specified locations -- > such as movie theaters -- would be able to unscramble the > data. The technology works as well for national security > as it does for Harry Potter. Coded messages that the State > Department sends to its embassies, for example, could only > be deciphered in the embassy buildings themselves, greatly > reducing the risk of interception. > > For now, Denning says, terrorists "may want to bring down > the power grid or the finance system, but it's still easier to > blow up a building." If she's right, it's due in large part to her.

1 0

DCSB: Chuck Wade; New Authentication Services--A pending train wreck?
by R. A. Hettinga 26 Nov '01

26 Nov '01

--- begin forwarded text

1 0

New Federal Patriot Act Turns Retailers into Spies
by Duncan Frissell 26 Nov '01

26 Nov '01

************ The Boston Globe http://www.boston.com/ New Federal Patriot Act Turns Retailers into Spies against Customers By Scott Bernard Nelson, The Boston Globe Nov 20, 2001 2:18 AM Nov. 18 --Ordinary businesses, from bicycle shops to bookstores to bowling alleys, are being pressed into service on the home front in the war on terrorism. ************ One problem with these horror stories -- this has been the law for circa 20 years. See IRS Form 8300: http://ftp.fedworld.gov/pub/irs-pdf/f8300.pdf I forget when these rules were enacted but I do remember writing about them in the middle 1980s. DCF

1 0

CP archive problem?
by Steve Schear 26 Nov '01

26 Nov '01

I've been trying to access http://www.inet-one.com for two days and have getting DNS errors. Anyone else on @home with the same trouble? Might be a good time to switch to alternate root servers. steve

5 6

DNA Testing
by IDC DNA Labs 26 Nov '01

26 Nov '01

1 0

[광고] CYPHERPUNKS님에 보내는 전자공문
by info 26 Nov '01

26 Nov '01

Untitled Document 동아대학교 지식자원개발센터 우 602-103 부산광역시부산진구 부전1동 266-2 3F / 전화(051)817-4464 ■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ 문서번호 지식 2001제1-0001호 시행일자 2001. 11 (경유) 수신 : 교육대상 및 업체 참조 : http://www.donga-it.com 선 결 지 시 접수 일자 시간 결 재 공 람 번호 처리과 담당자 제목 : 동아대학교 지식자원개발 센터의 IT 교육 안내 1. 급변하는 정보 사회에서 지적인 전문가 양성을 위해 최선을 다하는 동아대학교 지식자원개발센터는 디지털 시대에 발맞춰 IT관련 인재육성에 중점을 두고 전 직원 및 강사진들은 빠른 교육정보와 함께 산업체가 바라는 실무교육과 이론교육을 실시 하고 있으며 기존 전문 인력에도 재교육에 힘쓰고 있습니다. 2.IT교육과정 계획안을 공고하오니 많은 관심과 협조 부탁드립니다. 가. IT 교육과정 안내 과 정 명 교 육 내 용 교 육 기 간 ASP.NET(C#) Windows 2000 Server/IIS, MS-SQL 2000 Server, JavaScript&Active Server Page, ASP.NET&C#, RP(Real Project) 4개월(480시간) 10:00 ~ 17:00 웹프로그래밍 Windows 2000 Server, MS-SQL 2000 Server, Java Beginning Programming, Java Web-Server Programming, RP(Real Project) 4개월(240시간) 09:00 ~ 12:00 13:30 ~ 16:30 PC 정비사 PC분해조립, H/W고장 진단수리, 레지스트리 설정, 윈도우 구조, 설치복구, S/W고장 진단수리, 하드디스크 관리, 멀티 OS부팅, 시스템 보안, Error 해결 2개월(120시간) 19:00 ~ 22:00 웹페이지 전문가 Html, CSS & JavaScript, WebEditer, Photoshop, Windows 2000 Server, ASP/SQL, 실전 웹사이트구축 3개월(180시간) 19:00 ~ 22:00 P C T 운영체제(OS), 한글97, Excel, PowerPoint, 네트워크 통신, 컴퓨터 상식 1개월(75시간) 09:00 ~ 11:50 12:50 ~ 14:40 14:50 ~ 17:40 나. 특징 및 특전 - 동아대학교 재학생 및 졸업생 10%할인 - Real Project를 통하여 실무 지도 - 동아대학교 총장명의 수료증 지급(수료 합격자) - 수강자에 한하여 평생 On-Line 교육서비스(무료) - 체계적인 강좌와 최첨단 교육시설 - 관련업체와 Join 및 취업알선 - 팀 단위 작업내용을 CD 제공 - 프로젝트는 Center Server에서 3개월간 운영지원 다. 업체에 통보 - 교육과정에 Real Project 과정이 있어 실제로 업체로부터 의뢰를 받아 웹사이트를 제작하고 있습니다. 웹사이트 제작이 필요하신 분들은 사이트에 들어 오셔서 RP 신청서 양식을 다운 받아 가시기 바랍니다. - 사이트 제작시 센터 서버에서 3개월간 운영 지원하여 드립니다. ※ 문의처 ☏ 051)817-4464, 온라인 수강신청 : http://www.donga-it.com, E-mail : webmaster(a)donga-it.com 동아대학교 지식자원개발센터 서면교육장

1 0

Anonymizing Scam
by mattd 26 Nov '01

26 Nov '01

In defence of john,Its only reasonable to accuse anyone and everyone at anytime of being an agent.Housekeeping chore. Crypto is becoming a totally redundant backwater in a world where people act like cryptoanarchy won. "We dont need no stinkin crypto! We're gonna take over the world, we're gonna do it early enough to knock off for happy hour."

1 0

remove
by Ignacio.Lazaro＠quierotv.com 26 Nov '01

26 Nov '01

1 0