January 2002 - cypherpunks-legacy

Deconstructing Dan Klein.
by mattd 03 Jan '02

03 Jan '02

>>Dan Klein has written a nice book titled "Reputation" which I frequently recommend. Looks at some of these examples in detail from a self- regulatory, free-market perspective. -Declan Daniel Klein is an Associate Professor of Economics. He received his Ph.D. (1990) from New York University. He taught at the University of California,< More self-regulatory and free market states being unavailable? > Irvine, before joining Santa Clara's faculty in 1996. He teaches courses in the principles of economics, public policy issues, and game theory. His research interests lie in public policy issues (especially road transportation) I wonder if he's done any study of the buying up of LA's tramcar net and its destruction by autoimmobile industry? >> American economic history<< Should know of differing US currencies in the past,possible BUMs/e-cash future. >> game theory, and the intersection of economics with moral and political philosophy.<< Something Tim and declan seem woefully ignorant of. Professor Klein is the coauthor of Curb Rights: A Foundation for Free Enterprise in Urban Transit,< Yes,but what does he think of jim bells plans for car thieves? >>editor of Reputation: Studies in the Voluntary Elicitation of Good Conduct,<< I hope he considers the APster plan 9 for negative reputations,soon,real soon. >>and editor of What Do Economists Contribute?<< The few that are using physics modeling contribute something.At 1st glance Klein looks like a smarter D.Friedman,thats not saying much,I know,but I'm on permanent vacation.

1 0

Applied Digital pushes microchip to plant in foreigners for tracking
by Jei 03 Jan '02

03 Jan '02

---------- Forwarded message ---------- Date: Sat, 22 Dec 2001 08:59:21 +0100 From: Mario Profaca <Mario.Profaca(a)zg.tel.hr> Reply-To: spynews-owner(a)yahoogroups.com To: "[Spy News]" <spynews(a)yahoogroups.com> Subject: [Spy News] Applied Digital pushes microchip to plant in foreigners for tracking http://www.gopbi.com/partners/pbpost/epaper/editions/today/business_c312779d 0594902e00ee.html Palm Beach Post Thursday, December 20, 2001 Applied Digital pushes microchip to plant in foreigners for tracking By Deborah Circelli, Palm Beach Post Staff Writer PALM BEACH -- Today's security measures don't work very well, says Richard Sullivan, pointing to the Sept. 11 terror attacks on New York and Washington. He's says he's got a better idea: a microchip instead of a green card. Foreigners who pass through customs or immigration could be injected with the chip, allowing officials to monitor their activities better and keep terrorists out. "Man today is more than ever converging with technology," said Sullivan, who is CEO of the Palm Beach-based tech company Applied Digital Solutions (Nasdaq: ADSX, 45 cents). "I think the positives overwhelmingly overcome any small negatives. The government is more prepared, for the overall benefit of our citizens, to advocate some of these changes." Sullivan's company has high hopes for the implantable technology, which it unveiled Wednesday. Until now, the microchips -- called VeriChips -- have been used for tracking and identifying animals. Applied Digital has had a patent for such devices since 1999. The new technology would make Applied Digital the first company in the nation to sell microchips designed to be implanted in human beings. But privacy groups reacted with outrage Wednesday to Sullivan's idea for monitoring foreigners. America is not that desperate, one group said, citing a violation of "bodily integrity." "That is so unconstitutional," said Randall Marshall, legal director for the Miami chapter of the American Civil Liberties Union. "I can't imagine this surviving a constitutional challenge. It just simply goes way too far outside the realm of what we believe in as a society." Sullivan said the product will be marketed in January in South America while the company seeks approval in the United States from the Food and Drug Administration. Approval is expected in 18 months. A New Jersey surgeon who serves on the board of Owings, Md.-based Medical Advisory Systems, which is about to combine with a subsidiary of Applied Digital, injected himself with two of the VeriChips five days after the terror attacks. Richard Seelig inserted the chips in his forearm and hip as part of the clinical process Applied Digital will have to conduct to receive FDA approval, Sullivan said. Seelig, 55, referred all questions Wednesday to Sullivan but told the Los Angeles Times he felt compelled to have a secure form of identification after Sept. 11. "I was so compelled by what had happened," Seelig told the Times. "One of the potential applications suddenly jumped out -- the ability to have a secure form of identification -- and I felt I had to take the next step." The chips are about the size of a grain of rice and contain an identification number or other data, such as medical information, and a person's address and phone number. The chips have no internal power source. Their data can't be read without a scanner close at hand. The next generation of body chips -- one that transmits signals from a distance -- is several years away. The chip is the same as the one Applied Digital's subsidiary uses in more than 1 million animals, but the VeriChip can be used in humans with a pacemaker, artificial heart valves or orthopedic knee devices. If a patient needs help, a hospital can use a scanner to obtain information. In five years, Sullivan said he can see the chips being used in children, the elderly, prisoners, and by employers at facilities such as airports and nuclear plants. Society in general could use them instead of ATM or credit cards, he said. But Evan Hendricks, editor and publisher of Privacy Times, a Washington, D.C.-based newsletter, said it's one thing for an individual to choose to implant the device for medical purposes, but it's crossing the line when parents start putting them in their children or employers require them for employment. "This has been science fiction for most of our adult life, but now we see the technology allows it," Hendricks said. "The problem is that it is happening in a vacuum where there are not adequate privacy laws." /Los Angeles Times contributed to this story./ mailto:deborah_circelli@pbpost.com --- This mail, sent by Mario Profaca, is clean, certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.310 / Virus Database: 171 - Release Date: 19. 12. 01 ------------------------ Yahoo! Groups Sponsor ---------------------~--> Send FREE Holiday eCards from Yahoo! Greetings. http://us.click.yahoo.com/IgTaHA/ZQdDAA/ySSFAA/TySplB/TM ---------------------------------------------------------------------~-> =============================================================== SPY NEWS is OSINT newsletter and discussion list associated to Mario's Cyberspace Station http://mprofaca.cro.net/mainmenu.html =============================================================== *** FAIR USE NOTICE. This message contains copyrighted material whose use has not been specifically authorized by the copyright owner. Spy News is making it available without profit to SPY NEWS eGroup members who have expressed a prior interest in receiving the included information in their efforts to advance the understanding of intelligence and law enforcement organizations, their activities, methods, techniques, human rights, civil liberties, social justice and other intelligence related issues, for non-profit research and educational purposes only. We believe that this constitutes a 'fair use' of the copyrighted material as provided for in section 107 of the U.S. Copyright Law. If you wish to use this copyrighted material for purposes of your own that go beyond 'fair use,' you must obtain permission from the copyright owner. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------------------------------- SPY NEWS home page: http://groups.yahoo.com/group/spynews To change your subscription mode to Daily Digest (one message a day) send a blank message: mailto:spynews-digest@yahoogroups.com Please note that replying to THIS e-mail will not remove you from the mailing list. To unsubscribe SPYNEWS send a blank message: mailto:spynews-unsubscribe@yahoogroups.com Mario Profaca Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/

3 2

Help needled:2$ or B.U.Ms offer for best device advice in a warming world.
by mattd 03 Jan '02

03 Jan '02

NSW Senior Deputy Police Commissioner Ken Moroney yesterday confirmed that homemade bombs had been found. One of the devices is suspected of starting a fierce bushfire that raged near houses at West Pennant Hills, northwest of Sydney yesterday. A second device was found intact in the Galston area, also in the city's northwest, but it did not spark a fire there. Mr Moroney would not describe the devices in detail because of fears of copycat firebugs. as arsonists use home-made bombs to keep NSW under siege. Two devices have been found in devastated areas. One of them might have lit a fire that threatened hundreds of homes in Sydney's suburbs. Police fear there may be a number of serial arsonists at work and are hunting a motorcyclist suspected of setting fires in the Blue Mountains.

1 0

Illusional delusions
by AARG! Anonymous 03 Jan '02

03 Jan '02

The solution for money laundering is to remove the "money", as defined by the state, from the equation. Crypto removes the content from everyones's eyes except the two parties that communicate. That is what crypto can do. The moment one wants to convert some bits to state-money she is doomed. If you want to rely/convert at any point to the state-money you will become a money launderer/terrorist/whatever. There is simply no way around this. Paper cash is not a solution, since it is observable. Anything observable is not a solution. This is a fundamental problem - not unlike futile attempts to stop copying the content one can hear or see, or to invent foolproof watermarks. Instead, we need a new principle that will not include state-money in any form or shape. Thinking aloud ... this may be silly: Let's start from something that works - secret key message exchange, maybe enhanced with PK key exchange for the carefree. A person, by defintion, trusts itself, so currency known only to the two parties should be reasonably safe. Every pair of traders have their own currency. A disbalance (A owes B but C owes A) is resolved by creating new B-C currency. There is no anonymity, but the network is hardly connected and therefore reasonably safe. The system is hardly new but it was never done in software AFAIK. You never do business with someone whose reputation you can't instrument. But someone can start a business for reputation building. Again, hardly new. This doesn't enable global trade, but frankly I don't care. I don't gain much from it anyway. Going through a series of intermediaries to buy some fine Afghan pot is a small price to pay for getting out of the state's sight. In other words, with small transistors and digsigs there is no need for centralised money at all. No more mainframes, thank you. Big business will suffer, but somehow I don't feel sad. So, tell me, is this silly ?

5 4

Mueller badly needs Killing
by mattd 03 Jan '02

03 Jan '02

FBI Director Robert Mueller reports his bureau has no plans to investigate the chief suspect in the international anthrax mailings case. FBI Implicated in Anthrax Mailings Cover-up: Mueller Reports No Intention to Investigate Chief Suspect Sandpoint, ID FBI officials may be implicated in a conspiracy to impede justice in the anthrax mailings case, if not treasonous dereliction of duty, according to a growing number of scientists and consumer advocates. After officials cited the likeliest origin of the powdered anthrax was the U.S. Armys Dugway Proving Grounds in Utah, or its Ohio-based supplier and CIA-contractor, Battelle Memorial Instititue (BMI), FBI Director Robert Mueller announced the bureau has no intention of investigating anyone with, or formerly with, their chief suspectBMI. Just weeks ago, major progress in the FBIs investigation seemed forthcoming. The New York Times and Washington Post revealed that BMI, Dugways anthrax facility supplier and chief administrator had contracted with the CIA (in project Clear Vision) to produce, albeit illegally, the 1 trillion spore-per-gram strain of anthrax under investigation. BMI, while heading the U.S. militarys Joint Vaccine Acquisitions Program worth more than $1 billion in vaccine contracts, commissioned Americas top anthrax expert, William C. Patrick, III, to deliver a report on the powdered anthraxs prospects for being spread through the mail. Thus, by mid-December, the public, including health scientists urged to help federal officials identify suspects, realized that someone with high level security clearance, a black-op budget, access to the BMI/Dugway anthrax labs, and vaccine sales incentive, most likely took BMIs powdered anthrax, and prepared it for mailing from Trenton, NJ; St. Petersburg, FL; Atlanta, GA; and Malaysia. For the first time since the 1975 Frank Church congressional investigation of the CIA for illegally stockpiling anthrax and other biological weapons, the public learned that the CIA had been violating the international Geneva Accord moratorium on biological weapons developmenta revelation somewhat embarrassing to American diplomats engaged in the global War on Terrorism. The day before Christmas, an Op Ed piece in the Wall Street Journal additionally implicated BMI, and potentially the FBI, along with rogue elements within the CIA, in an international conspiracy to commit and cover-up the anthrax mailings crime. BMI and Bioport, a Michigan-based offshoot of Britains leading biological weapons organization at Porton Down, were previously reported to be collaborating on the manufacture and supply of Americas only anthrax vaccine. Dr. Robert C. Myers, Chief Operating Officer of BioPort, told a Senate Appropriations Committee in 1996 that he was part of a team of organizations, led by Battelle Memorial Institute . . . The Journal writer Edward Jay Epstein cited the testimony of U.S. Army bioweapons official David Franz concerning Americas reliance on British intelligence provided by Porton Down officials regarding the development and use of the powdered Ames strain of anthrax. Thus, the FBIs disregard of foreign suspects, especially Porton Down, with direct links to Bioport and BMIs anthrax vaccine, vaccine contracts, and BMIs and Dugways anthrax experiments, was criticized by Epstein as it was days earlier in the Washington Post. More evidence of the FBIs intentional ineptitude came from the Columbus Dispatch. Though the Washington Post reported that the FBI was allegedly pursuing the possibility that financial gain was the motive behind the anthrax mailings, and that two laboratories were especially implicated, that is, BMI and Dugway, a contradictory announcement was relayed the same day (Dec. 21, 2001) by Ohio Senator Mike DeWine. Based on an ABC News report concerning a BMI employee who had been under FBI investigation for an anthrax threat, FBI Director Robert Mueller had, according to The Dispatch, assured Senator DeWine that the bureau was not investigating, nor intending to investigate, anyone with, or formerly with, BMI. Currently then, the FBI has no intention of investigating its chief suspect, despite the grave likelihood that the remaining mystery will continue to exact massive economic and socio-political tolls. These proceedings have bewildered and even outraged many scientists and public health professionals from whom the FBI requested assistance. In defending the FBIs position, the Washington Post reported that the bureau only learned of a BMI-administered CIA defensive biowarfare contract involving the Ames-strain of anthrax in recent weeks. The CIA program was [allegedly] designed to develop defenses to a vaccine-resistant strain of anthrax reportedly created by the former Soviet Union, officials defended. CIA spokespersons expressed certainty that the anthrax used in the mailings did not come from their work. Taking the agency on its word, the powdered anthrax may not have come from their work, but their contractors work, that is, BMI. Critics claim this CIA defense is deceptive for at least two other reasons: 1) the Soviet Unions most potent anthrax was only half as concentrated as this new CIA/Battelle creation; and 2) it is an American/BritishAmes, Iowastrain prototype, not a Soviet creation, and not resembling anything available to Iraq or other countries favored by terrorists. This spoils the excuse the powdered anthrax was produced for any form of defense, including vaccines. Vaccines are developed to help guard against pre-existing threats, said Ingri Cassel, director of the national Vaccination Liberation associationa consumer education and advocacy group. This anthrax powder was illegally prepared, apparently for offensive military uses, sabotage, and even terrorism. You simply dont develop a new hyper-weaponized strain of anthrax powder for military defense, which implies preventive vaccinations against old Soviet threats, and then commission the top U.S. anthrax expert [William C. Patrick, III] to report on this new weapons capability and lethality from mailed delivery, unless thats how you foresee it being used, Ms. Cassel reasoned. Many people are pondering the suspicious Machiavellian-like targeting of the mass media and congressional Democrats (liberals) befitting the phrase the ends justifies the means. Multi-million dollar vaccine contracts, fast-tracked drug approvals, and frenzied consumer and legislative demand for costly, risky, and largely ineffective vaccines, antibiotics, and other high-priced preventives are the most obvious results of the anthrax mailings. Referring to the unprecedented silica-based, electro-statically charged, dry powdered form of hyper-concentrated anthrax sent through the mail to members of the media and Senators Daschle and Leahy, Dr. Horowitz concluded, It was the only form of anthrax that could be effectively spread, as it was, through the U.S. mail with such far reaching effects. Therefore, the primary suspects have been identified, their dubious histories are well known, and their motives are clear. Any further effort to impede this investigation places FBI director Mueller in the position of an enemy national, or a traitor to the American people he is sworn to protect. We need you to take this Govt modified Virus so we can protect you-FBI's magic lantern links/hirstory Magic Lantern - The FBI's viral key-logger -links (english) by mg reposted 12:14am Wed Jan 2 '02 (Modified on 3:21pm Wed Jan 2 '02) list of links to articles Please feel free to distribute this far and wide: Magic Lantern - The FBI's viral key-logger - The Latest - http://lists.jammed.com/ISN/2001/12/0037.html >[ISN] FBI confirms "Magic Lantern" project exists http://lists.jammed.com/ISN/2001/12/0039.html >[ISN] Infamous hacker group helps the Feds http://lists.jammed.com/ISN/2001/12/0043.html Re: [ISN] Infamous hacker group helps the Feds - cDc calls announcement "satire" http://lists.jammed.com/ISN/2001/12/0053.html Re: [ISN] Infamous hacker group helps the Feds http://lists.jammed.com/ISN/2001/12/0064.html [ISN] DIRT-Magic Lantern Firm Barred from Gov Work http://lists.jammed.com/ISN/2001/12/0063.html >FBI may be getting full benefit of Magic Lantern... from BadTrans.B [ISN] FBI surveillance bonanza in BadTrans.B worm http://www.politechbot.com/p-02955.html >From the "We don't need no stinkin' oversight" dept.: Politech: FBI refuses to tell Congress aide about "classified" Magic Lantern http://www.corpwatch.org/issues/PID.jsp?articleid=1108 >Homeland Security, Homeland Profits Technology Already in the Hands of Law Enforcement http://www.corpwatch.org/news/PND.jsp?articleid=1092 >FBI Software Records Each Keystroke http://www.corpwatch.org/news/PND.jsp?articleid=1009 >Software Firms Object to FBI Eavesdropping http://www.nytimes.com/2001/12/31/technology/ebusiness/31TECH.9.html > Scarfo, Phase 2: a.k.a. "Magic Lantern" CYBERSECURITY - Threat of Terrorism on U.S. Infrastructure (nytimes.com) What is Magic Lantern? http://www.msnbc.com/news/660096.asp?cp1=1 FBI software cracks encryption wall 'Magic Lantern' part of new 'Enhanced Carnivore Project' http://www.epic.org/privacy/carnivore/foia_documents.html EPIC Carnivore (and 'Enhanced Carnivore') FOIA Documents http://www.zdnet.com/zdnn/stories/news/0,4586,5099906,00.html >ZDNet News: FBI's magic revealed as old tricks http://www.washingtonpost.com/wp-dyn/articles/A3371-2001Nov22.html >FB I Is Building a 'Magic Lantern' (washingtonpost.com) http://www.washingtonpost.com/wp-dyn/articles/A1436-2001Nov22.html >FB I Develops Eavesdropping Tools (washingtonpost.com) McAfee sides with FBI against customers on "Magic Lantern" http://www.politechbot.com/p-02822.html >Declan McCullagh's Politech FBI reportedly creating "Magic Lantern" anti-crypto virus http://www.politechbot.com/p-02834.html >Declan McCullagh's Politech McAfee sides with FBI against customers on "Magic Lantern" http://www.factsquad.org/radio/2001-11-26.mp3 >The Spy in Your Computer? (.mp3) from Fact Squad Radio http://www.politechbot.com/p-02837.html Declan McCullagh's Politech Has McAfee sided with FBI on "Magic Lantern" detection? http://www.ct.heise.de/newsticker/data/wst-26.11.01-001/ >Spokesman for NAI in Germany disputes the Washington Post article from the German news site "Heise Online" http://www.politechbot.com/p-02839.html >Declan McCullagh's Politech McAfee replies -- by denying any FBI contacts of any sort http://www.interesting-people.org/ob/htsearch?config=lists_elistx_com &restrict=%2Finteresting-people%2F&method=and&sort=score&words=%22magi c+lantern%22 >"Magic Lantern" Discussion from Dave Farber's Interesting-People elist http://www.politechbot.com/cgi-bin/politech.cgi?name=mcafee >Declan McCullagh's Politech Background on McAfee/NAI http://www.wired.com/news/conflict/0,2100,48648,00.html >Wired News Summary 'Lantern' Backdoor Flap Rages, By Declan McCullagh http://www.politechbot.com/p-02840.html >Declan McCullagh's Politech AP's Ted Bridis replies to McAfee: "I stand by my reporting" http://www.politechbot.com/p-02846.html >Declan McCullagh's Politech McAfee broadens denial: No contact with government of any sort http://www.theregister.co.uk/content/55/23057.html >AV vendors split over FBI Trojan snoops http://www.politechbot.com/p-02851.html >Declan McCullagh's Politech Symantec pledges to acquiese to FBI backdoor demands http://www.politechbot.com/cgi-bin/politech.cgi?name=lantern >Politech Summary re: "Magic Lantern" http://www.theregister.co.uk/content/6/23150.html >FBI 'Magic Lantern' reality check (original article picked up by ISN, below) http://lists.jammed.com/ISN/2001/12/0015.html >[ISN] Magic Lantern reality check http://news.cnet.com/news/0-1003-200-7944351.html?tag=rltdnws >FBI snoop tool old hat for hackers http://www.zdnet.com/zdnn/stories/comment/0,5859,2829781,00.html >Warn ing - The FBI knows what you're typing http://www.zdnet.com/zdnn/stories/news/0,4586,5100528,00.html >Antivir us firms: FBI loophole is out of line http://dailynews.yahoo.com/h/nm/20011210/tc/attack_tech_dc.html Antiv irus Firms Say They Won't Create FBI Loophole http://www.politechbot.com/p-02914.html >Politech: Symantec, McAfee backpedal furiously on espionage enabled-software http://www.politechbot.com/p-02918.html >Politech: More on Symantec, McAfee, loopholes, and espionage-enabled 'ware http://news.cnet.com/news/0-1003-200-8134814.html?tag=rltdnws >Antivir us firms balk at FBI loophole Existence of Magic Lantern Confirmed by FBI <http://news.cnet.com/news/0-1003-200-8160201.html?tag=mn_hd>FBI confirms "Magic Lantern" project exists http://www.zdnet.com/zdnn/stories/news/0,4586,5100652,00.html >FBI confirms Net spying tool exists http://www.vnunet.com/News/1127639 Infamous hacker group helps the Feds [this one may be nothing more than humor or hoax... on the other hand, the related article: http://www.vnunet.com/News/87346 >Back Orifice just a phantom seems (at first glance) to be consistent with other articles regarding BO2K.] Magic Lantern's Closest Relatives? http://news.zdnet.co.uk/story/0,,t269-s2072609,00.html>ZDNet: Back Orifice 2.0 http://pcrev.com/articles/trojan/pindex.shtml >Back Orifice (incorrectly referred to in this article as "Back Office") and other trojans http://www.vnunet.com/News/87346 >Back Orifice just a phantom http://www.codexdatasystems.com/ >D.I.R.T. - A prototype for Magic Lantern? http://www.theregister.co.uk/content/4/19480.html >Or is D.I.R.T. a S.C.A.M? http://cryptome.org/dirty-secrets2.htm >Dirty Secrets 2 - Data Interception by Remote Transmission http://jya.com/DIRT-spy.htm >D.I.R.T. being used to grab PGP keys as early as 1998 http://www.keylogger.net/ >Ghost - A Software Keylogger http://www.keykatcher.com/ >KEYKatcher - Hardware Keyloggers Can we trust LEAs? http://www.politechbot.com/p-00624.html>Illegal LAPD wiretaps -- for shame! by John Gilmore http://www.politechbot.com/p-00628.html>More on LAPD and illegal wiretaps http://speakout.com/activism/opinions/4377-1.html >Will the Government Know What You Type? http://www.onmagazine.com/on-mag/reviews/article/0,9985,12609,00.html >The Privacy Snatchers http://www.epic.org/privacy/wiretap/ The Electronic Privacy Information Center's extensive resources on wiretapping cases http://cryptome.org/dirty-secrets.htm >US Ambassador on Corruption Within Security Forces http://www.msnbc.com/news/646793.asp?cp1=1 First, brand all the children... By Brock N. Meeks Potential ways to detect (or protect against) Magic Lantern? http://spycop.com >Spycop http://www.geocities.com/SiliconValley/Hills/8839/utils.html >Hook Protect or PC Security Guard Warning: This page contains a possible "web bug" per Bugnosis http://www.stiller.com >Integrity Master from Stiller Research http://www.openantivirus.org/ OpenAntiVirus Project http://www.gnupg.org/ GnuPG (The GNU Privacy Guard) http://www.jetico.com Jetico's BestCrypt http://www.evidence-eliminator.com/go.shtml?A660528 Evidence Eliminator www.indymedia.org/front.php3?article_id=...

1 0

CP flix
by Incognito Innominatus 02 Jan '02

02 Jan '02

At 09:35 AM 1/2/02 -0500, Trei, Peter wrote: >> Nomen Nescio[SMTP:nobody@dizum.com] wrote: >> >> There was once an effort here to list CP relevent prose. >> How about a list of CP relevent moving pictures (and why >> relevent)? >> >> Enemy of the State ---for surveillance and conspiracy >> GATTACA ---for biometrics, identity fraud, surveillance >> >> more? >> >Why has no one mentioned '1984'? I've only seen the >1956 version with Edmond O'Brien, not the 1984 version >with John Hurt. > >If we're going to proceed down the 'state as evil' axis, >there's a rich vein of content, such as 'Brazil', 'The >President's Analyst' (very funny, and highly >reccomended), and many others. I was specifically trying to avoid such mentally-unnourishing but visually tasty scifi candy as "Matrix" etc. Mostly Choate polluted the list, what a surprise. 1984, because of the televisors and surveillance is ok; Brazil (although brilliant) isn't CP though fantastic in many other respects. If I'm wrong, its because it been years, and I welcome correction.

1 0

Fiat justitia et ruat caelum
by An Metet 02 Jan '02

02 Jan '02

At 12:24 PM 1/2/02 -0800, keyser-soze(a)hushmail.com wrote: >You'll notice that all the governemnt's terrorism fervor is focused on foreigners. I can't wait till a new crop of Timmy McVeighs spring up to make federal workers pay for contributing to restrictions on our liberties. > >"Fiat justitia et ruat caelum" (Let justice be done though the heavens fall.) --legal maxim originating with the Senate of Rome. > _When the Sky Falls_ is an excellent movie.

2 1

internet privacy protection
by Joseph Assenza 02 Jan '02

02 Jan '02

1 0

Re: End-to-end encrypting US GSM phones?
by Ryan Lackey 02 Jan '02

02 Jan '02

I'm unclear why Lucky dislikes the Sectra Tiger (www.sectra.se) the key management is not what I'd like, but seems designed specifically for hierarchical military or corporate organizations, which is the only viable market for a EUR 2500 encrypting cellphone. I think the most cost-effective voice crypto solution today is a bluetooth-enabled cellphone, a bluetooth-enabled PocketPC (ipaq) with fast ARM, and then conventional encrypted-voice software (such as speak-freely) running over PPP over bluetooth. It would be fairly easy to develop a belt or briefcase cellphone, handheld PDA with audio I/O via headset worn on the belt or held in the hand (or, using an Ericsson headset, stored in a briefcase as well), . System cost USD 1000 or less, entirely COTS consumer hardware and open-source software, and you get a free normal GSM cellphone, high-spec PDA (==ecash terminal), and equivalent ease of use to the very best cellphone (as you would be using a headset, carrying the phone and processor separately). If you're concerned about rf monitoring on the local bluetooth side, you could substitute a wired headset/microphone; if you're concerned about the general unavailability of bluetooth-enabled fast PDAs, you could with an ease of use penalty use IrDA. I don't believe a dragonball could do viable voice crypto (especially compression), at least without a coprocessor card, but perhaps it could, and it certainly could support encrypted SMS. You could possibly use your own non-standard link protocol, vs. PPP, if you are concerned about latency, but it should be relatively easy to achieve 100-200ms latency on cell to cell communications. The benefit of using software which exists on general purpose machines and TCP/IP over the link is of course that normal desktops could be used as secure phone terminals as well, and I think there really isn't much demand for voice crypto in the marketplace, outside the military and defense-mandated commercial contractor use. When audio I/O-enabled PDAs, bluetooth cellphones, etc. are widely deployed, perhaps this will change (plus, bluetooth or 802.11b PDAs could serve as cordless phones with IP-IP or VoIP calling when in range of a legitimate or borrowed network). I've used speak-freely on a unix laptop for years, using IP transport of opportunity, and with a good headset/microphone, it seems to meet my needs for secure voice. The other reason for using PPP-Voice is to abuse cell providers; in the UK, for instance, I have a GBP 75/month unlimited-calling phone (UK numbers); I could easily use this to dial in to a UK-based phone with HSCSD and a fast IP connection at 14.4kbps, and then use IP-IP or a VoIP bridge to get cheaper or free international calling; encrypted by default to the gateway, and possibly to the other end if supported. -- Ryan Lackey [RL7618 RL5931-RIPE] ryan(a)havenco.com CTO and Co-founder, HavenCo Ltd. +44 7970 633 277 the free world just milliseconds away http://www.havenco.com/ OpenPGP 4096: B8B8 3D95 F940 9760 C64B DE90 07AD BE07 D2E0 301F

4 3

w00w00 --AOL msgr gets buffer overflowed
by Anonymous 02 Jan '02

02 Jan '02

New Hole Could Hurt AOL Messenger http://www.washingtonpost.com/wp-dyn/articles/A52687-2002Jan2.html By D. Ian Hopper AP Technology Writer Wednesday, January 2, 2002; 3:09 PM WASHINGTON A security hole in AOL Time Warner's Instant Messenger program used by millions of users worldwide can let a hacker take full control of a victim's computer, according to security researchers and the company. An AOL spokesman said the problem will be fixed soon, and users won't have to download anything. "We have identified the issue and have developed a resolution that should be deployed in the next day or two," AOL's Andrew Weinstein said. "To our knowledge, this issue has not affected any users." The problem affects newest versions as well as many earlier iterations of AOL's Instant Messenger program. Discovered by a loose team of international researchers called 'w00w00,' the hole is a "buffer overflow," like the problem recently found in Microsoft's Windows XP. By sending a stream of junk messages to the program, a hacker can overwhelm the software and make the victim's computer run any commands the hacker wants. "You could do just about anything, (you could) delete files on the computer or take over the machine," w00w00 founder Matt Conover said. Conover said w00w00 has over 30 active members from 14 states and nine countries. Until AOL's fix is released, Conover said, Instant Messenger users should restrict incoming messages to friends on their "Buddy List." "It will at least keep someone from attacking you at random," Conover said, but it wouldn't help if the attack code is added to a virus that propagates without the victim's knowledge. AOL said it has not given its users any advice in the interim. Conover said the group found the problem several weeks ago, but didn't contact AOL until after Christmas. The group didn't get any response from AOL through an e-mail during the holiday week, he said, so w00w00 released details and a program that takes advantage of it to public security mailing lists less than a week later. The program released by w00w00 remotely shuts down a person's Instant Messenger program, but could be modified to do more sinister things. That practice is under scrutiny by security professionals. While some independent researchers argue for a "full disclosure" policy and say software vendors are trying to cover up their mistakes, many companies say users are better protected if the company has time to react. Russ Cooper, who moderates a popular security mailing list and works for security firm TruSecure, said Conover's actions are irresponsible. "I think it's better to provide details of the exploit and then let other people write the actual code," Cooper said. "Unfortunately, these are fundamentally naive people with a very childish view of the world." Cooper said he let Conover send the information out through his mailing list, but only did so after noticing it was released through other channels as well. Conover said w00w00 set a New Year's deadline for sentimental reasons, because it was the anniversary of the group's last major security release. He defended the disclosure of the attack program. "This is the approach that w00w00 has historically taken to the problem," he said. "For us it means providing all the information we have available to the security community." AOL's Weinstein said the company would have appreciated more warning. "We'd encourage any software programmer that discovers a vulnerability to bring it to our attention prior to releasing it," Weinstein said.

1 0