August 2001 - cypherpunks-legacy

OPT: Inferno: Fw: Risks of the Passport Single Signon Protocol (fwd)
by Jim Choate 06 Aug '01

06 Aug '01

---------- Forwarded message ---------- Date: Mon, 6 Aug 2001 17:48:57 -0400 From: Any Mouse Subject: Inferno: Fw: Risks of the Passport Single Signon Protocol ----- Original Message ----- From: <aleph1(a)securityfocus.com> To: <secpapers(a)securityfocus.com> Cc: <www-mobile-code(a)securityfocus.com> Sent: Monday, August 06, 2001 4:49 PM Subject: Risks of the Passport Single Signon Protocol > Risks of the Passport Single Signon Protocol > by David P. Kormann and Aviel D. Rubin > > Passport is a protocol that enables users to sign onto many different > merchants' web pages by authenticating themselves only once to a common > server. This is important because users tend to pick poor (guessable) user > names and passwords and to repeat them at different sites. Passport is > notable as it is being very widely deployed by Microsoft. At the time of this > writing, Passport boasts 40 million consumers and more than 400 > authentications per second on average. We examine the Passport single signon > protocol, and identify several risks and attacks. We discuss a flaw that we > discovered in the interaction of Passport and Netscape browsers that leaves > a user logged in while informing him that he has successfully logged out. > Finally, we suggest several areas of improvement. > > http://avirubin.com/passport.html > > -- > Elias Levy > SecurityFocus.com > http://www.securityfocus.com/ > Si vis pacem, para bellum

1 0

On OPRAH??? I made $2,000/4 WEEKS! Did YOU?
by Julie 06 Aug '01

06 Aug '01

Will You Live BELOW POVERTY LEVEL? ATTENTION: You have received this message because you have recently posted to my FFA pages, belong to the same safelists, clubs, email lists, or have emailed me with your business opportunity. If you believe that you have received this in error I sincerely apologize. Per the proposed H.R. 3113 Unsolicited Electronic Mail Act of 2000, further transmissions to you by me may be stopped at no cost to you by forwarding this email to REMOVE at: homebusinesssuccess37087(a)yahoo.com Thank you! It is no longer possible to work for 30 or 40 years and retire comfortably. Recently published research and studies show us that that the overwhelming majority of seniors are now, TODAY, LIVING BELOW POVERTY LEVEL. Are YOU willing to live that way after YEARS OF HARD WORK? Retire Quickly is a 100% debt-free company in 70+ countries. A solid company with strong growth worldwide. Excellent representative/customer retention rate to date. Excellent tax benefits. Let Retire Quickly Corporation teach you how to quickly and effectively reduce and/or eliminate personal/business debt, protect your assets, and plan for your future needs with their flagship proprietary eCourse, "How to Retire Quickly." The lesson on debt-free living alone will save most people hundreds of thousands of dollars in their lifetimes. Great educational value at $49.95 and tax deductible(US). NEW Global VISA PayCard with all new enrollments. No more waiting for checks to arrive or post. Immediate access to your money wherever VISA is accepted, thousands of locations worldwide. All bonuses and commissions are paid in US$'s. Fantastic for all International Reps! Complete website within seconds of enrolling as customer or representative. Tremendous income potential. Very low retail/rep start up costs. Fully automated system with great tools to build your business. Training provided. eCourse is also available immediately as a stand-alone product for our retail customers. Visit my website http://www.retirequickly.com/64904. Enroll for your FREE 3 Day Trial. Be sure to order my FREE gift to you, "Seven Secrets to Earning $100,000 From Home" without obligation. What do you have to lose? Thanks for your time! Julie Mills 615-444-4487 (Central)

1 0

Slashdot | Sklyarov Released On $50,000 Bail
by Jim Choate 06 Aug '01

06 Aug '01

http://slashdot.org/yro/01/08/06/1941228.shtml -- -- ____________________________________________________________________ natsugusa ya...tsuwamonodomo ga...yume no ato summer grass...those mighty warriors'...dream-tracks Matsuo Basho The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

CNN.com - California victims can't sue gunmakers - August 6, 2001
by Jim Choate 06 Aug '01

06 Aug '01

http://www.cnn.com/2001/LAW/08/06/california.guns.ap/index.html -- -- ____________________________________________________________________ natsugusa ya...tsuwamonodomo ga...yume no ato summer grass...those mighty warriors'...dream-tracks Matsuo Basho The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Vinge's 'True Names' Classic To Be Reissued
by Matthew Gaylor 06 Aug '01

06 Aug '01

************************* Vinge's 'True Names' classic to be reissued August 2, 2001 ************************* Vernor Vinge's classic scifi novel True Names is being reissued by Tor Books in True Names and the Opening of the Cyberspace Frontier," a collection of stories and essays by computer scientists, due out in December. A movie may be in the works. http://www.tor.com/ http://www.kurzweilai.net/email/newsRedirect.html?newsID=394&m=190 ### ************************************************************************** Subscribe to Freematt's Alerts: Pro-Individual Rights Issues Send a blank message to: freematt(a)coil.com with the words subscribe FA on the subject line. List is private and moderated (7-30 messages per week) Matthew Gaylor, (614) 313-5722 ICQ: 106212065 Archived at http://groups.yahoo.com/group/fa/ **************************************************************************

1 0

OPT: Cipher attack delivers heavy blow to WLAN security (fwd)
by Jim Choate 06 Aug '01

06 Aug '01

---------- Forwarded message ---------- Date: Mon, 6 Aug 2001 01:18:30 -0400 From: Monty Solomon <monty(a)roscom.com> To: undisclosed-recipients: ; Subject: Cipher attack delivers heavy blow to WLAN security Cipher attack delivers heavy blow to WLAN security By Patrick Mannion EE Times (08/04/01, 12:49 p.m. EST) MANHASSET, N.Y. - A new report dashes any remaining illusions that 802.11-based (Wi-Fi) wireless local-area networks are in any way secure. The paper, written by three of the world's foremost cryptographers, describes a devastating attack on the RC4 cipher, on which the WLAN wired-equivalent privacy (WEP) encryption scheme is based. The passive network attack takes advantage of several weaknesses in the key-scheduling algorithm of RC4 and allows almost anyone with a WLAN-enabled laptop and some readily available "promiscuous" network software to retrieve a network's key - thereby gaining full user access - in less than 15 minutes. http://www.eetimes.com/story/OEG20010803S0082 --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

Apollo 11 - For all mankind
by Jim Choate 06 Aug '01

06 Aug '01

Note the commentary about changing the budget to prevent other flags from being planted... http://www.harmonize.com/swdroundup/Apollo11.htm -- -- ____________________________________________________________________ natsugusa ya...tsuwamonodomo ga...yume no ato summer grass...those mighty warriors'...dream-tracks Matsuo Basho The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

3 2

Information & Communications Technology Law Journal ONLINE
by Faustine 06 Aug '01

06 Aug '01

Information & Communications Technology Law Journal www.tandf.co.uk/journals/carfax/13600834.html You can browse the table of contents for all back issues--and order them online with a credit card or through your local university/interlibrary loan. The free trial issue isn't too shabby either: the special topic is "Artificial Intelligence and the Law". ~Faustine. *** The full list of back issues is on their site, here's a sample for the undermotivated: Information & Communications Technology Law Volume 8 Number 3 October 1999 ARTICLES The Singapore E-Commerce Code Assafa Endeshaw 189 Internet Banking: The Digital Voyage of Banking and Money in Cyberspace Sofia Giannakoudi 205 CASE NOTES Germany: Decisions of Berlin and Munich Courts on whether the exhaustion of the distribution right under Art. 4 lit. c Software Directive ('69c No. 3 Copyright Act) can be limited to distribution as OEM-versions or as updates Andreas Raubenheimer 245 RECENT DEVELOPMENTS Germany: Domain registration in Germany (www.xxx.de)Policy of DENIC for German Top Level Domains .de Andreas Raubenheimer 247 title page and contents, volume 8 249 Information & Communications Technology Law VOLUME 8 NUMBER 2 JUNE 1999 SPECIAL ISSUE: NETWORKED SERVICES Guest Editors: David Slee & John B. Hobson Editorial David Slee & John B. Hobson 125 ARTICLES Substantive Issues of Copyright Protection in a Networked Environment Stanley Lai 127 Control of Inventions in a Networked World Howard C. Anawalt 141 On Using Animations in Court Ajit Narayanan, Gareth Penny, Sharon Hibbin, Shara K. Lochun & Wendy Milne 151 Customizing the Presentation of Legal Documents over the World Wide Web C. A. Royles & T. J. M. Bench-Capon 165 BOOK REVIEW 175 Information & Communications Technology Law VOLUME 8 NUMBER 1 MARCH 1999 ARTICLES Computer Misuse Law in Singapore Assafa Endeshaw 5 A Survey of Computer Crime Legislation in the United States John M. Conley & Robert M. Bryan 35 Record Newspapers, Legal Notice Laws and Digital Technology Solutions Shannon E. Martin 59 The Data Protection Bill 1998: a comparative examination David Slee 71 BOOK REVIEW 111 Information & Communications Technology Law Volume 7 Number 3 OCTOBER 1998 LAW, COMPUTERS AND ARTIFICIAL INTELLIGENCE SPECIAL ISSUE: FORMAL MODELS OF LEGAL TIME Guest Editors: Antonio A. Martino & Ephraim Nissan Guest Editorial A. A. Martino 165 Guest Editorial E. Nissan 167 PART I: APPROACHES BASED ON TEMPORAL LOGIC Time in Automated Legal Reasoning L. Vila & H. Yoshino 173 Representing Temporal Knowledge in Legal Discourse B. Knight, J. Ma & E. Nissan 199 Representation of Temporal Knowledge in Events: the formalism, and its potential for legal narratives G. P. Zarri 213 PART II: APPROACHES BASED ON PETRI NETS Temporal Structure and Enablement Representation for Mutual Wills: a Petri net approach D. Y. Farook & E. Nissan 243 Time Petri Nets for Modelling Civil Litigation R. Valette & B. Pradin-Chizalviel 269 TITLE PAGE AND CONTENTS, VOLUME 7 281 Information & Communications Technology Law VOLUME 7 NUMBER 2 JUNE 1998 ARTICLES Supranational Investigation after Amsterdam, The Corpus Juris and Agenda 2000 W. A. Tupman 85 WWW: World Wide Web or Wild Wild West? Fixing the Fenceposts on the Final Frontier: domain names, intellectual property paradigms and current disputes over the governance of the Internet Robin Mackenzie 103 Making a Case for Case Frames Radboud Winkels & Henk de Bruijn 117 Computing Rich Semantic Models of Text in Legal Domains Wai K. Yeap 135 Crime and Technology: new rules in a new world Hedieh Nasheri & Timothy J. OHearn 145 Information & Communications Technology Law VOLUME 7 NUMBER 1 MARCH1998 ARTICLES The Proper Law for Electronic Commerce Assafa Endeshaw 5 A Critique of the Latent Damage Expert System David McClelland 15 NATIONAL REPORT The Law Relating to Computer Misuse in the Republic of Ireland Julianne OLeary 31 CASE NOTES Increasing Importance of Hardware Locks (Dongles) in Recent German Case Law Andreas Raubenheimer 51 Recent Developments in Germany: jurisdiction of courts in case of acts of unfair competition committed on the Internet Andreas Raubenheimer 70 Criminal Prosecution Through Public Prosecutors Against Online Services, Internet Providers and Individuals Andreas Raubenheimer 71 Information & Communications Technology Law VOLUME 6 NUMBER 3 OCTOBER 1997 ARTICLES Pornography and the Possible Criminal Liability of Internet Service Providers Under the Obscene Publication(s) and Protection of Children Act Terry Palfrey 187 >From Law to DiaLaw: Why Legal Justification Should be Modelled as a Dialogue Arno R. Lodder 201 Supporting the Legal Practitioner: LKBS or Web? Ronald Leenes & Jvrgen Svensson 217 An Architecture for Legal Information Retrieval using Task Models Luuk Matthijssen 229 NATIONAL REPORT The Law on Computer Crime in Italy Giancarlo Taddei Elmi 249 BOOK REVIEW 267 TITLE PAGE AND CONTENTS, VOLUME 6 271 Information & Communications Technology Law VOLUME 6 NUMBER 2 JUNE 1997 SPECIAL NUMBER Multimedia Products and the Law Guest Editor: John Conley EDITORIAL John Conley 99 ARTICLES Modelling Legal Documents as Graphs T. J. M. Bench-Capon, P. E. S. Dunne & G. Staniford 103 Downloading, Information Filtering and Copyright Erich Schweighofer 121 Fair Use in the Context of a Global Network - is a copyright grab really going on? James J. Marcellino & Melise Blakeslee 137 Fair Use for Faculty-created Multimedia Laura N. Gasaway 153 BOOK REVIEWS 175 Information & Communications Technology Law VOLUME 6 NUMBER 1 MARCH 1997 ARTICLES Intellectual Property Implications of Multimedia Products: a case study John M. Conley & Kelli Bemelmans 3 Processing Personal Data and the Data Protection Directive David I. Bainbridge 17 LASER: a system to retrieve UK employment law cases Mohammad Ali Montazeri, Trevor J. M. Bench-Capon & Alison E. Adam 41 LEGISLATION Electronic Communication and the Defamation Act 1996: clarity or confusion? Lesley Dolding & Sheila Dziobon 55 CASE NOTE Revisiting the 'Shrinkwrap Licence': ProCD Inc. v. Zeidenberg John T. Cross 71 REVIEW ARTICLE Good Technology? Music and the challenge of technology towards the fin de sihcle Steve Greenfield & Guy Osborn 77 BOOK REVIEWS 87 NEWS ITEM 91 Information & Communications Technology Law VOLUME 5 NUMBER 3 OCTOBER 1996 ARTICLES Council of Europe Activities Related to Information Technology, Data Protection and Computer Crime Peter Csonka 177 Policing the Transmission of Pornographic Material Terry Palfrey 197 Technologically Augmented Litigation-systematic revolution Frederic I. Lederer 215 A Hybrid Legal Decision-support System Using Both Rule-based and Case-based Reasoning Kamalendu Pal & John A. Campbell 227 CASE NOTE Using Personal Data after R v. Brown David I. Bainbridge 247 BOOK REVIEWS 253 TITLE-PAGE AND CONTENTS, VOLUME 5 259 Information & Communications Technology Law VOLUME 5 NUMBER 2 JUNE 1996 SPECIAL NUMBER Information Technology, Intellectual Property Rights and the Uruguay Round Guest Editor: Rohini Acharya EDITORIAL New Technologies and Intellectual Property Rights: the next frontier Rohini Acharya 91 ARTICLES Towards a Unifying Law: international copyright conventions, the GATT TRIPs Agreement and related EC regulations Craig R. Karpe 95 The Compulsory Licensing of Intellectual Property Rights and Computers: recent developments in UK, EC and international law David L. Perrott 111 The TRIPs Agreement and Information Technologies: implications for developing countries Carlos M. Correa 133 Intellectual Property Rights and Information Technology: the impact of the Uruguay Round on developing countries Rohini Acharya 149 BOOK REVIEWS 167 Information & Communications Technology Law VOLUME 5 NUMBER 1 MARCH 1996 ARTICLES Controlling Computer Crime in Germany Sigmund P. Martin 5 Computerizing Criminal Law: problems of evidence, liabilitiy and mens rea Mervyn E. Bennun 29 Lord Woolf and Information Technology Lynn Henderson 45 Fundamentals of Representation I: a traditional philosophy Brian Carr 57 CASE NOTES Making and Sale of Collections of Readings by Educational Institutions in Australia Kamal Puri 69 Munich Court of Appeals Prohibits Circumvention of Software Copyright Protection (Dongle, Hardware Lock) Yet Again Andreas Raubenheimer 75

1 0

"Space War"
by Jim Windle 06 Aug '01

06 Aug '01

This weeks New York Times Sunday magazine has an article about "space war". With some interesting comments regarding surveillance, GPS, ASAT and NMD as well as the following line from an Air Force colonel which seems very indicative of the current thinking in Washington: "increasingly the problem is not another superpower, but a guy with a credit card" http://www.nytimes.com/2001/08/05/magazine/05SPACEWARS.html Jim Windle Join 18 million Eudora users by signing up for a free Eudora Web-Mail account at http://www.eudoramail.com

4 5

Re: Traceable Infrastructure is as vulnerable as traceable messages.
by nobody＠mailtraq.net 06 Aug '01

06 Aug '01

Ray Dillinger wrote: > Instead, they will attack the weakest point -- trying to drive > remailer operators out of business and thus destroy the > infrastructure you need. That is the threat model I'm concerned > about, and given that network monitoring is now automatable and > cheap, it is entirely do-able. Some people think this is happening now. Since the remailers don't do an authenticated handshake when they hand off traffic, an active attacker could simulate the receiving remailer. The sender thinks the message is sent and the receiver never knows it didn't arrive. Your threat model doesn't mean messages can't be sent, though. It just means messages between remailers have to travel over "sneaker net". A 20GB tape carries 1,953,125 messages. Let's say the senders will pay $0.10/each to have them carried over a damaged zone. That comes to $195,312.50. At 140g, that's $1,377.89/g, or over 20 times the value by weight of cocaine. Not only that, when you lose a mule you don't lose the commodity because it's just information. The managers just send another copy over. The problem is a little harder than the remailer problem. The links have greater latency, and each remailer won't be able to advertise its existence, so you need more sophisticated trust mechanisms. Similar problems have been solved before. There have been numerous illegal lotteries, for example. (See "The Autobiography of Malcolm X" for one.) These lotteries are amazing - these guys didn't even have strong authentication and they were (and are) able to handle large sums of money with virtually no complaints. One thing that can't be stopped right now is an underground newspaper. The editors can just sign each issue with gpg and distribute it on diskette. An easy way to solve your problem is to pay a fee to the editors to include encrypted messages. People have to give their friends the entire thing or they will be passing along unauthenticated copies.

1 0