November 2001 - cypherpunks-legacy

Re: Risks of belief in identities
by Anonymous 21 Nov '01

21 Nov '01

>From: "Peter G. Neumann" <neumann(a)csl.sri.com> >Subject: Risks of belief in identities > >For those of you who might believe that national ID cards might be a good >idea, check out the December 2001 *Commun.ACM* Inside Risks column by me >and Lauren Weinstein, previewed on my Web site > http://www.csl.sri.com/neumann/insiderisks.html The criticisms in this essay have nothing to do with national ID cards per se. The points have nothing to do with the cards being national, with them proving ID, or with them being in the form of a card for that matter. What the essay really argues against is any attempt to prove that someone has been checked for a certain property by showing a document. Documents can be forged, biometrics are imperfect, and the employees who issue the documents can be bribed. By this argument, we should have no driver's licenses, credit cards, or paper cash for that matter. Everything stuffed into your wallet is useless. Any one of those items could be forged or could have been given to you improperly. But we find them to be useful anyway. In actuality, no one in politics is seriously pushing for a national ID card. However they are talking about having an air travel card which would allow holders to go through an expedited security check. Neumann's arguments apply just as strongly against such a card (which need not have ID printed on it at all), further proving that he is not in fact opposing a national ID card but any kind of carried credential.

2 1

Re: The United States of America vs. The Left Coast
by Steve Schear 21 Nov '01

21 Nov '01

At 01:33 PM 11/21/2001 -0800, you wrote: >Oregon refuses to ignore basic constitutional rights for the sake of the >war on terrorism: > >"Portland police have refused a U.S. Justice Department request for help >in interviewing Middle Eastern immigrants as part of its sweeping >terrorism investigation, saying it would violate state law." > >"Arabs and Muslims have expressed outrage at the U.S. Justice Department's >plan to interview the 5,000 men, who are not suspected of any crimes. The >list is comprised of men ages 18 to 33 who entered the United States since >January 1, 2000, from countries that have been linked to the hijackers in >the September 11 attacks or were waystations for the terrorist >organization, al Qaeda." > >[...] > >http://www.cnn.com/2001/LAW/11/21/inv.portland.police.questioning.ap/index.… > > >Oregon does battle with Ashcroft over physician-assisted suicide laws: > >"The judge said his order "nullifies giving any legal effect" to >Ashcroft's directive -- in other words, doctors should not fear legal >repercussions if they follow the Oregon law." > >"Ashcroft's order prompted the court challenge, with Oregon officials >saying the government was trying to strip the state of its right to govern >the practice of medicine" > >[...] > >http://www.cnn.com/2001/LAW/11/21/assistedsuicide.hearing.ap/index.html > > >DEA feds declare war on Californians: > >"Unable to find Osama bin Laden or dismantle al Qaeda, the Bush >administration has attacked an easier target -- the 960 mostly AIDS and >cancer patients of the Los Angeles Cannabis Resource Center." > >"The basis for the raid is the long-standing state-vs.federal government >dispute over who has say over drug laws. In 1996, California voters >approved Proposition 215, which gave patients the right to possess medical >marijuana. The federal government has refused to recognize the law in >California and eight other states and Washington, D.C., which have passed >similar medical-marijuana measures. Last May, the U.S. Supreme Court ruled >against the reopening of an Oakland club, a decision cited in last weeks >search warrant." I can't see any constitutional basis for the FDA (or much of the FAA or FCC regulations for that matter). Perhaps not regulating California marijuana clinics impacts marijuana clinics in other states: empty Commerce Clause justification. steve

2 1

Re: The United States of America vs. The Left Coast
by Tim May 21 Nov '01

21 Nov '01

On Wednesday, November 21, 2001, at 05:41 PM, Meyer Wolfsheim wrote: > On Wed, 21 Nov 2001, Steve Schear wrote: > >> I can't see any constitutional basis for the FDA (or much of the FAA >> or FCC >> regulations for that matter). Perhaps not regulating California >> marijuana >> clinics impacts marijuana clinics in other states: empty Commerce >> Clause >> justification. > > Question to the lawyerly-types: > > What would happen if California passed a law making seizure of marijuana > plants from an approved medical marijuana facility a criminal offense? > > The local sheriff's department should then be responsible for preventing > such criminal raids by the DEA, and the agents involved should be > arrested > and prosecuted. > > How would this play out, both on the street and in the courts? > Much the same thing as when governors in the past (and legislatures) said that there laws about race-mixing took precedence over Yankee laws *requiring* race-mixing. Namely, the troops were called in to assert the power of the Washingtonians over the states. Ditto for troops enforcing school busing. And in the New Regime of suspension of detention without trial, sneak and peak raids without warrants, torture (proposed by some Zionist shysters), and untrained-for-police-work soldiers waving M-16s at the proles, expect things to be much, much worse. --Tim May "A democracy cannot exist as a permanent form of government. It can only exist until the voters discover that they can vote themselves money from the Public Treasury. From that moment on, the majority always votes for the candidate promising the most benefits from the Public Treasury with the result that a democracy always collapses over loose fiscal policy always followed by dictatorship." --Alexander Fraser Tyler

1 0

Add your agent or company listings to your existing website!
by news＠propertyline.com 21 Nov '01

21 Nov '01

Learn More About Property Line: http://www.propertyline.com To unsubscribe from this list, go to http://www.propertyline.com/promo/unsubscribe.php?email=cypherpunks@einstei…. Add your agent or company listings to your existing website! Place your personal or company listings and photos on your website. Free. Keep your listings updated and current on your website. Free. No gimmicks. No mid-game rule changes. No kidding around. Here's how it works: 1. Go to http://www.propertyline.com and get a password. Click on Sign Up. 2. After you have your password, click on Add / Edit Listings and enter your listings into Property Line's database. 3. Click on Listing Display Classic to get your special line of code for your listings or your company's listings. 4. Email the line of code to your webmaster to paste into your site. (Your code is always available on Property Line under your password.) That's it. Property Line's Listing Display Classic delivers a special piece of programming that retrieves your listings from the Property Line site and displays them in a summary format on your site. Each listing has a one-click detail photo report. New listings? Add them to Property Line and they will update automatically on your site. Free. Listing Display Classic is designed to fit into a variety of site designs. Listing Display Classic is absolutely free - now AND in the future. No mid-game rule changes here. If you're looking for a listing display that matches your site exactly, try Listing Display Pro. Pro lets you choose custom colors and fonts and even gives you a search engine on your site for your listings. Listing Display Pro is $20 month for individual agent sites or $50 a month for company sites. http://www.propertyline.com (c)2001 Property Line International, Inc. All Rights Reserved.

1 0

Re: Pricing Mojo, Integrating PGP, TAZ, and D.C. Cypherpunks
by Anonymous 21 Nov '01

21 Nov '01

David Molnar wrote: > On Tue, 20 Nov 2001, Anonymous wrote: > > > than using your Visa card because only the seller learns your address > > rather than a centralized agency that knows all of your purchases. > > But it's hardly worth it. > > A friend of mine was considering a business plan for physical remailer+ > "infomediary" for a class project a year or two ago. Precisely to get > around this problem. Sell learns the remailer's address. More than a few > remailers and you can chain them, etc. etc. Unfortunately U.S. postal regulations require identification when you rent a mail box, public or private. See http://www.ftc.gov/bcp/conline/audio/private_mail_box.htm: Recent amendments to postal regulations will make it harder for criminals to victimize innocent consumers by using mail drops. Anyone renting a box from a commercial mail-receiving agency such as Mail Boxers, Etc., Parcel Post, and Postnet will be required to provide two forms of ID, one being a photo ID. It won't do much good to chain them if each one in the chain has your ID on file. Granted you can use fake ID but that would be breaking the law, raising the costs considerably.

3 2

Re: The United States of America vs. The Left Coast
by Mark Henderson 21 Nov '01

21 Nov '01

On Wed, Nov 21, 2001 at 01:33:57PM -0800, Meyer Wolfsheim wrote: > Oregon refuses to ignore basic constitutional rights for the sake of the > war on terrorism I lived in Portland about ten years back. Nice place. Almost makes me want to move back. > Hmm. Anyone see Redmond as the capital of the Independent States of the > Pacific Coast? It seems like you might be advocating break-up of the United States. Might be sedition. Off to the electric chair with you for thinking bad thoughts... perhaps after a few hours of torture. Don't worry too much, with luck they'll let you off if you sign a loyalty oath. This country has become a very scary place. --- Mark Henderson, mch(a)squirrel.com, mch(a)informationanarchy.org "Heilir fsir. Heilar asynjur. Heil sja in fjvln}ta fold." - Sigrdrmfumal OpenPGP/GnuPG keys available at http://www.squirrel.com/pgpkeys.asc

2 1

AMERICAN LANGUAGE CENTER
by ALC 21 Nov '01

21 Nov '01

Центр Американского Английского ----------------------------------------------------------------------- Call Now! Звоните Cейчас. Visit Today! Приходите Сегодня. 156-00-00, 159-57-34, 274-22-15 ----------------------------------------------------------------------- Английский разговорный с преподавателями из США МЫШЛЕНИЕ, ПРОИЗНОШЕНИЕ, СТИЛЬ РЕЧИ ----------------------------------------------------------------------- Эксклюзивная авторская методика Все стадии обучения : от нуля до высшего ПРИЕМЛЕМЫЕ ЦЕНЫ плюс ВЫСШЕЕ КАЧЕСТВО LOWEST CHARGES plus HIGHEST GRATIFICATION ----------------------------------------------------------------------- Moscow, Russia ------------------------------------- To unsubscribe, please click or copy and paste the following address into your browser: http://em5000.com/unsub.php?client=twisted_solo&listname=alc_b&email=cypher…

1 0

CATALOG OF CHINA PRODUCTS ON CD-ROM
by business_india＠indiatimes.com 21 Nov '01

21 Nov '01

1 0

Re: HOWTO Build a Nuclear Device
by Eric Cordian 21 Nov '01

21 Nov '01

Dr. Joe Baptista wrote: > hold on mr. expert. > you hold a sub critical mass in your hand and in a few days you end up > shitting out your guts, lose your hair and die. > so i assume the person who had the opportunity to hold such a critical > mass is now dead. where are you getting your info on what it feels > like? curious george here. The common fissionable isotopes are alpha emitters with half-lives measured in thousands of years. Their rate of decay is miniscule. Alpha radiation, which consists of helium nuclei, can be stopped by a sheet of paper. Plutonium-239, which has a half-life of about 24,000 years, is slightly warm to the touch. Fissionable isotopes with much longer half-lives do not noticibly differ from room temperature. Alpha emitters are life threatening only if ingested. No ones hair is falling out. Really. -- Eric Michael Cordian 0+ O:.T:.O:. Mathematical Munitions Division "Do What Thou Wilt Shall Be The Whole Of The Law"

2 1

thoughts on proxy services
by Ryan Lackey 21 Nov '01

21 Nov '01

[...suggestions on proxy services by Peter Trei...] (my thoughts follow; might as well post to the list as well since I'd love for someone else to provide this service vs. me; I care more about having it available than the eventual revenues it might bring. But I suspect I'll do it myself; comments from list people would be useful though. I would *love* to be surprised by a new and interesting security company or project doing worthwhile stuff which I myself would use, even if it's in competition with me.) (my goals: 100%+ cost recovery. simple design, implementation, and operation. minimal barriers to entry for anyone. security against demonstrated threats, and an explicit statement of what risks remain and maybe how to deal with them later.) I'm sure the issue of proxying, general traffic analysis protection, etc. has been discussed many times by people smarter than me, but this is my basic understanding: do you agree? If I can't find something much better, it would be tempting to write a brief summary paper; nothing really new, but this is an area where a clearly presented summary could be useful to designers. (I just deleted about 5 pages of an attempt to do this; it was just more confusing than it answered.) [...safeweb's failed revenue model, good technical model...] Yeah, the tricky part is making it pay. Since bandwidth is rather cheaper in bulk (especially since you can then peer more of it away), I figure cost per marginal Mbps is 95% of the previous. I have a serious surplus of outgoing traffic right now, as do most non-end-user sites; something which brought inbound traffic would make peering arrangements easier. Any traffic which would go to on-Sealand servers anyway is no marginal cost to me. Yet, it provides a substantial benefit to server operators; sure you're talking to a Sealand-hosted server, but which one? We have casinos, payment systems, but also some benign content. The benefit there is primarily some traffic analysis protection against outside parties; but you also gain some protection from HavenCo's customers learning your identity. At least with the population of sites we have now, I'm far more concerned about passive monitoring at the client's LAN or firewall than anything else. People will "pay" with time and money if a product solves an actual demonstrated problem; getting fired for looking at pr0n at work is one of those problems. An https:// url with maybe http accelerator cache inside the network and then displaying content in a frame is a first and very easy solution. An entirely server-side url rewriter is also possible; rewrite the html as sent with keyed hash urls or something, translate on the servers. But frame is first since it's simple, 100% server side, and secure. This also keeps crap out of IE's url history file, and I can do nocache-rewritting as well on the pages (will have to experiment with various browsers to see what that really does). With a couple of SSL accelerators, this should be fairly cheap to provide. I'll use that to determine usage patterns, bandwidth consumed, etc. I will add more general-interest servers on Sealand (both customers and free); and perhaps some kind of USENET service, file archive, discussion board, etc., which will provide a lot of benign cover traffic. One of the better arguments against using HavenCo for anything very sensitive is that even with crypto to the server, you'd be giving away your participation in an online casino or porn site or whatever; this will solve that. I can subsidize random people text-proxying, but I can't do porn or mp3. I could charge actual site owners to put their porn on Sealand (normal commercial hosting arrangement), possibly just as an actual mirror site, vs. moving their primary, to support HavenCo-proxy customers. An insignificant part of the overall porn market, but maybe a few of the ~50-100 *big* porn hosters will put a box there just for the 0.01% of customers who want to access via HavenCo; they then could get 50-100% of that market. With http accelerator caching, bandwidth prices would even be reasonable for them. I think this was where ZKS missed out with Freedom; cooperation with service providers to provide on-network anonymous services, assistance in making their services privacy-compliant, etc. could have made freedom.net actually contribute to the meaningful (products sold to businesses, not privacy hobbyists) bottom line. Oh well. We do this already with a "net-10" onsite to allow customer to customer traffic, infrastructure, etc., but making it transparent to the server operator and using a proxy in normal address space makes more sense, I think. The original motivation for using net-10 was to make accounting simpler, and to "fail secure" (since net-10 isn't routed); we have flows-based accounting as a possibility, and if you want fail-secure, net-10 is still a possibility. -- Ryan Lackey [RL7618 RL5931-RIPE] ryan(a)havenco.com CTO and Co-founder, HavenCo Ltd. +44 7970 633 277 the free world just milliseconds away http://www.havenco.com/ OpenPGP 4096: B8B8 3D95 F940 9760 C64B DE90 07AD BE07 D2E0 301F

1 0