July 2001 - cypherpunks-legacy

Uwaga Wirus!
by System antywirusowy 26 Jul '01

26 Jul '01

Wiadomo¶æ od: "=?ISO-8859-2?Q?Iwona=20S=B3odka?="<islodka(a)evip.com.pl> o temacie: karty IV 2001 zosta³a odrzucona przez system pocztowy. Istnia³o niebezpieczñstwo i¿ przesy³ane pliki mog± zawieraæ wirusy. Z powa¿aniem: automat antywirusowy.

1 0

Valenti: Music is for the ear. It's like words. Movies are not
by Alfred Qaeda 26 Jul '01

26 Jul '01

>"We're dealing with vastly disparate art forms," said Jack Valenti, president of the Motion Picture Association of America. "Music is for the ear. It's like words. Movies are not."< Valenti is scum. *Dumbass* scum. But you knew that. >Pending bills by Lieberman and Rep. Steven Israel, D-N.Y., would prohibit as an "unfair or deceptive" practice, under regulations enforced by the Federal Trade Commission, the targeted marketing to minors of adult-oriented media products. Critics say the bill is unconstitutional.< Lieberman/Israel are scum giving Jews a bad name. Well, East Coasters, anyway. Oh shit, we have Feinstein. Oh well. Where's Buford when you really need him? http://ap.tbo.com/ap/breaking/MGA3Y90JLPC.html

1 0

Re: Weird message from someone named "NIPC"
by John Ashcroft's Powerful Penis of Punishment 26 Jul '01

26 Jul '01

Oh, well, depending on how Tim might have cut and pasted, this quote: # Agents are advised to seek out means of forcing these persons out of # the public debate. ...could well have been Lou Freeh's directive. Good night.

1 0

Uwaga Wirus!
by System antywirusowy 26 Jul '01

26 Jul '01

Wiadomo¶æ od: "=?ISO-8859-2?Q?Iwona=20S=B3odka?="<islodka(a)evip.com.pl> o temacie: karty IV 2001 zosta³a odrzucona przez system pocztowy. Istnia³o niebezpieczñstwo i¿ przesy³ane pliki mog± zawieraæ wirusy. Z powa¿aniem: automat antywirusowy.

1 0

Re: Weird message from someone named"NIPC"
by John Ashcroft's Persecuting Penis 26 Jul '01

26 Jul '01

Previously: Tim May wrote: # # I really cannot imagine why I am getting these SirCam messages # from some government agency named "NIPC," unless for some reason # my e-mail address is in their address book. How could that happen? SlowBrain wrote: # # I don't know... I do now. It's in the CERT advisory: http://www.cert.org/advisories/CA-2001-22.html # # W32/Sircam includes its own SMTP client capabilities, which it # uses to propagate via email. It determines its recipient list # by recursively searching for email addresses contained in all # *.wab (Windows Address Book) files in the %SYSTEM% folder. # # Additionally, it searches the folders referred to by # # HKEY_CURRENT_USER\Software\Microsoft\Windows\ # CurrentVersion\Explorer\Shell Folders\Cache # # HKEY_CURRENT_USER\Software\Microsoft\Windows\ # CurrentVersion\Explorer\Shell Folders\Desktop # # for files containing email addresses. All they had to have done was pull up a WWW page with your address on it. An NIPC computer, an FBI (NIPC) agent investigating "terrorists". Not too surprising Tim "they need killing" May was addressed. Tim has certainly gotten a lot of SirCams! It's like an HTML WWW bug gift to Tim, to see all the companies who were pulling him up.

1 0

Re: Weird message from someone named "NIPC"
by John Ashcroft's Persecuting Penis 26 Jul '01

26 Jul '01

Declan, I finally realized what you were talking about when you wrote this: DM wrote: # # [Vatis'] reported comments are a little, well, unusual. This was apparently what you were referring to: Tim May receives NIPC internal notes: # # Michael Vatis, deputy assistant director and chief of the Federal # Bureau of Investigation's National Infrastructure Protection Center # (NIPC) created February 26, 1998, told the Senate Judiciary # Subcommittee on Terrorism, Technology and Government Information June # 29 that 'crypto anarchists" see Washington's computers as "the final # exam, the ultimate challenge, the enemy which must be destroyed." # Agents are advised to seek out means of forcing these persons out of # the public debate. Notice the closing quotes on Vatis's testimony. I immediately read and attributed that last sentence to another voice. We are looking at an FBI agent's internal notes, recounting events. Who said this: # Agents are advised to seek out means of forcing these persons out of # the public debate. General Ashcroft, of course. Here, I'll combine it with the smoking gun: # Agents are advised to seek out means of forcing these crypto # anarchists out of the public debate. NIPC has been tasked to # assist in the take-down of a high-profile hacker terrorist at # the DefCon conference next week in Las Vegas. The take-down is # being planned for maximal public impact, as per AG Ashcroft's # memo of 24JUN01. Full assistance will be provided by NIPC. Plain # clothes agents will be at the conference to render assistance. Oh my gawd, he's a "terrorist"!!! ---- All that boring traffic Tim got.net, that is what most traffic is: boring. Don't believe my "traffic analysis"? Ask Tim what the SMTP headers say. You've got a major story on your hands. Don't look a gift horse in the mouth. Sat in your lap. Why didn't cypherpunks think of this virus? I guess we're not predatory, like the DOJ. "Watch carefully those you lend power to." ---Newt Gingrich

1 0

Re: Weird message from someone named "NIPC"
by Triffid Master 26 Jul '01

26 Jul '01

[ My PSINet email is history. ] Tim May wrote: # # I really cannot imagine why I am getting these SirCam messages # from some government agency named "NIPC," unless for some reason # my e-mail address is in their address book. How could that happen? I don't know, but I just got my first two mailings from some poor sap, and it has the same intro. "I send you this file in order to have your advice" I emailed the person to let them know, asked if they've visited my URL or anything. Gave them the CERT URL. Again: http://www.cert.org/advisories/CA-2001-22.html ---- Tim May wrote: # It must be bogus.This does not seem plausible, that they would # send me something, so I expect a hoax. No, it's real, and screamingly funny!!! I received an executable ".xls.pif" version of a spreadsheet called "2000 taxes". From viewing *hundreds* of these using "strings" as part of previous email monitoring duties, I can tell just by looking at it that it's the real thing. (If that showed anything interesting, I transferred it to a PeeCee for further inspection.) If anyone actually wants to run the "win32 executable", email me for it. Check it out: # Salary # David-AMD # Lori-Dell # Federal # Withholding # PAYROLL # GMAC-Home Loan # Bank One - Home Improvement # HOUSE INTEREST # Silver Lake-Time Share-2nd Home # HOUSE - REAL ESTATE TAX # GMAC # Amount # Taxes Paid @ Time of Withdrawal! # Hartford was rolled to Dell-1099R: # 1099R Shows Distribution Code "H" in Box 7 as rolled over. # 401k WITHDRAWAL DELL # INTEREST INCOME # Bank One # Bank of America # CHARITY GIFTS # Goodwill # CAPITAL GAINS/LOSSES # See Etrade Info My experience says it is real. ---- Tim May wrote: # # PC has been tasked to assist in the take-down of a high-profile # hacker terrorist at the DefCon conference next week in Las Vegas. # # The take-down is being planned for maximal public impact, as # per AG Ashcroft's memo of 24JUN01. Full assistance will be # provided by NIPC. Plain clothes agents will be at the conference # to render assistance. Holy Shit, Batman!!! Too bad it didn't get out earlier! Let me know if you want the whole thing put up on WWW.

2 1

Re: Salon: The real enemies of the poor
by Faustine 25 Jul '01

25 Jul '01

Jim wrote: >One article expressing one persons opinions >49 articles expressing 49 peoples opinions. Yeah, I know it was a bit of a tangent. But read any one of them at random and I'll bet you'll come across a lot of things you didn't already know. And rather than taking one side "globalism is good" or "globalism is bad" (like the Salon piece), the ones I've read give plenty of justification for pros and cons of all kinds. The real enemy of the poor is complacency. ~Faustine. On Tue, 24 Jul 2001, Faustine wrote: > But there's no real meat here--it's the kind of thing that tells you just > enough to make you feel like you know what you're talking about, but > doesn't go nearly deep enough to be worth anything. > > So what's on my summer reading list? The Institute for National Strategic > Studies and the National Defense University just came out with a > monstrously long (1124 pp.)two-volume compendium of essays: "The Global > Century: Globalization and National Security" that explores the > implications of globalism in 49 essays from every angle you can think of by > a collection of genuine heavy hitters. I think I'll certainly be better >off for having invested the time in reading it. > > here's a link to the pdf: > > http://www.ndu.edu/inss/books/GlobalCentury/globcencont.html

3 2

Antigen found W32/Sircam-A (Sophos) virus
by ANTIGEN_BAMBI 25 Jul '01

25 Jul '01

Antigen for Exchange found MEDIDAS-PESOS-PRESIONES.xls.lnk infected with W32/Sircam-A (Sophos) virus. The file is currently Removed. The message, "CDR: MEDIDAS-PESOS-PRESIONES", was sent from Benicio Molina Delgado and was discovered in IMC Queues\Inbound located at Cognex/Natick/BAMBI.

1 0

Re: Weird message from someone named "NIPC"
by Jim Windle 25 Jul '01

25 Jul '01

NIPC=National Infrastructure Protection Center -- On Wed, 25 Jul 2001 18:42:34 Tim May wrote: > >Cypherpunks, > >I've been getting anywhere from 10 to 30 "SirCam" worm messages a >day. The volume is now declining. Most have attached files containing >fragments of Microsoft Word documents, apparently extracted from the >disk drive of the sender. Most are the usual garbage people write to >each other, but some of the ones from corporations have been >interesting. And this one, assuming it is real, seems to have >orginated from within some department of the government called "NIPC." > >It must be bogus.This does not seem plausible, that they would send >me something, so I expect a hoax. > >The attached filed, with the message, is 926 K, so I'm only enclosing >a few tantalizing sections. > >I really cannot imagine why I am getting these SirCam messages from >some government agency named "NIPC," unless for some reason my e-mail >address is in their address book. How could that happen? > >(BTW, many of the SirCam messages have clock dates which are wrong. >This one is incorrectly dated "8/24/01".) > >At 2:39 PM -0400 8/24/01, NIPC Intern42 wrote: >------017B5BE9_Outlook_Express_message_boundary >Content-Type: text/plain; charset=ISO-8859-1 >Content-Transfer-Encoding: quoted-printable >Content-Disposition: message text > >Hi! How are you=3F > >I send you this file in order to have your advice > >See you later=2E Thanks > >------017B5BE9_Outlook_Express_message_boundary >Content-Type: application/mixed; name="DC TOOLZ.zip.bat" >Content-Transfer-Encoding: base64 >Content-Disposition: attachment; filename="DC TOOLZ.zip.bat" > > >The NIPC and FedCIRC have recently received information on attempts >to locate, obtain control of and plant new malicious code known as >"W32-Leaves.worm" on computers previously infected with the SubSeven >Trojan. > >The default ports for SubSeven to listen for network traffic are >16959/tcp and 27374/tcp, though the numbers can be changed. Full >descriptions and removal instructions of a number of SubSeven >variants can be found at various anti-virus firm Web sites, including >the following: > > > >A computer security unit within the U.S. Federal Bureau of >Investigation has detected a series of intrusions into U.S. >government networks under an investigation code named Moonlight Maze, >and the intrusions appear to have originated from Russia, an FBI >official told Congress this week. A spokesman for the Russian embassy >here today quoted the head of the press service for the Russian >foreign intelligence service, Nikita Rabusov, as saying the Russian >special services have "no relation whatsoever" to the theft of >information from computer networks of the U.S. federal agencies. > >"American specialists have failed to establish from where this >intrusion originated," the embassy official quoted Rabusov as saying >in an interview with the Russian news agency Itar-Tass. "They only >indicated that it comes from a software company said to be >reverse-engineering the products of leading American software >companies. Russian special services are not so stupid to undertake >such an operation, in case the necessity arises, directly from >Moscow." > >Please report computer crime to your local FBI office >(www.fbi.gov/contact/fo/fo.htm) or the NIPC, and to other appropriate >authorities. Incidents may be reported online at >www.nipc.gov/incident/cirr.htm. The NIPC Watch and Warning Unit also >can be reached at (202) 323-3204/3205/3206, or nipc.watch(a)fbi.gov. > >References to ECONCOM are to be deleted ASAP from all departmental >systems. SLAM DUNK cover to be vetted by NIPC for release to >journalists. Oakland and Monterey offices to coordinate. > > >Michael Vatis, deputy assistant director and chief of the Federal >Bureau of Investigation's National Infrastructure Protection Center >(NIPC) created February 26, 1998, told the Senate Judiciary >Subcommittee on Terrorism, Technology and Government Information June >29 that 'crypto anarchists" see Washington's computers as "the final >exam, the ultimate challenge, the enemy which must be destroyed." >Agents are advised to seek out means of forcing these persons out of >the public debate. > > >Internal Memorandum. The FRENZY Conference was a fantastic showing of >our capabilities for covert entry into target computers. PDs across >the country are asking how they can get their own CARNIVORE systems. >Here is one such request: > >"We've bought so many necessary items from vendors who attended the >last FRENZY Conference ... the Conference was definitely one of the >best I've attended. I was particularly impressed by how easy the >Carnivore system was to set up." > >Rick Smithman, Criminalistics Bureau Administrator, Lodi Police Department > > > >With this thought in mind, The Laissez Faire City Times interviewed >Ed Hertzog, editor of The Free Associator, an interesting e-zine that >wants to facilitate Digital Anarchy. This interview is a little >mirror of an underground, libertarian world, whose landmarks and >standard-bearers are John Perry Barlow and Neal Stephenson, Nicholas >Negroponte and Ayn Rand, Louis Rossetto and David Friedman. > > >NIPC has been tasked to assist in the take-down of a high-profile >hacker terrorist at the DefCon conference next week in Las Vegas. The >take-down is being planned for maximal public impact, as per AG >Ashcroft's memo of 24JUN01. Full assistance will be provided by NIPC. >Plain clothes agents will be at the conference to render assistance. > > Join 18 million Eudora users by signing up for a free Eudora Web-Mail account at http://www.eudoramail.com

1 0