November 2002 - cypherpunks-legacy

Short story?
by Adam Shostack 23 Nov '02

23 Nov '02

I'm trying to remember details (author, title) of a short story that I read once. Its main feature, or the one that's standing out in my mind, is the obsessive hacker who studies a target to figure out his password, at which he only has one guess. The zinger is that the very security concious target has selected that password as a booby trap, and there's a second password which our hacker doesn't have. Does this ring a bell for anyone? Adam -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Re: TIA presentation
by jya＠pipeline.com 23 Nov '02

23 Nov '02

These remarks in the House on November 22, 2002: Mr. INSLEE. Mr. Speaker, today the United States Congress will send to the desk of the President of the United States for his signature, the Homeland Security bill. This bill will create the Department of Homeland Security, an agency charged with safeguarding Americans and the American way of life. When enacting this bill, we must be careful not stray into invading American's privacy when using the regulatory tools provided for in this bill. I refer specifically to the vague authorizations in this bill that would give this new Federal agency broad authority to push the privacy envelope. Section 201, paragraph 14, charges the Under Secretary for Information Analysis and Infrastructure with the responsibility of establishing a secure communications and information technology infrastructure that specifically authorizes the use of `Data-mining.'' Since ``Data-mining'' has no statutory definition, I am concerned that we have not adequately established that the Department of Homeland Security does not have the green light to adopt an all encompassing program that invades the privacy of every American without their permission or knowledge. We were recently notified that former Rear Admiral John Poindexter is developing a Total Information Awareness program to monitor the everyday transactions of Americans. We cannot allow this to happen. I do not believe that this statutory language is meant to allow the Federal Government to obtain whatever list, public, private, or commercial, to profile Americans. It is clear that the American public does reject this approach, as they soundly voiced their outrage for other privacy-eroding proposals such as the FBI's ``Carnivore'' system, and the Department of Justice ``TIPS'' program. It is vital that this body adopt standards to define such terms as ``data-mining,'' and to do so early in the 108th Congress. I thank the Speaker. Mr. ARMEY. Mr. Speaker, I am proud that the House is today sending H.R. 5005, the Homeland Security Act of 2002 to the President. It is an important step forward in the defense of the nation. I would like to take this opportunity to discuss a few items of interest in the bill as amended by the Senate. First, Mr. Speaker, I would like to address the privacy concerns that have been raised recently about provisions in the Homeland Security bill. Le me be clear. This bill does not in any way authorize the Department of Defense program knows as ``Total Information Awareness.'' It does not authorize, fund or move into the Department anything like it. In fact, this bill provides unique statutory protections that will ensure the Department of Homeland Security could never undertake such a program. Section 892 of our bill prohibits the sharing of any information that would undermine the statutory and constitutional protections of citizens. We also create a privacy officer, the first ever established by statute, whose sole mission will be to ensure that programs like TIA never get off the ground in this Department. Our bill contains provisions that discontinue two programs that raise the very concerns that TIA has raised. We stop Operation TIPS, and ensure that nobody will use this bill as an excuse to implement a National ID card. So the legislative intent of this bill is unmistakable. This department must protect the civil liberties that we all cherish. I would like to further make it clear that references in the bill to data-mining are intended solely to authorize the use of advanced techniques to sift through existing intelligence data, not to open a new method of intruding lawful, everyday transactions of American citizens. ----- House debate and version of the bill on November 22, 2002: http://cryptome.org/hr5005.txt Nothing in the debate precludes another bill authorizing what the HSA allegedly doesn't, either openly or secretly. See in particular the House report on 2003 funding authorization for intelligence: http://cryptome.org/hr107-789.txt

1 0

Fwd: [fc] list of papers accepted to FC'03
by R. A. Hettinga 23 Nov '02

23 Nov '02

--- begin forwarded text

5 4

CodeCon 2003 Call for Papers
by Len Sassaman 23 Nov '02

23 Nov '02

CodeCon 2.0 February 22-24, 2003 Club NV San Francisco CA, USA www.codecon.info Call For Papers CodeCon is the premier showcase of active hacker projects. It is an excellent opportunity for developers to demonstrate their work, and for coding hackers to find out about what's going on in their community. All presentations must be accompanied by functional applications, ideally open source. Presenters must be one of the active developers of the code in question. We emphasize that demonstrations be of *working* code, and reproducible by other people. Throughout the event, we will have several kiosks and local servers available for demonstration purposes. CodeCon strongly encourages presenters from non-commercial and academic backgrounds to attend for the purposes of collaboration and the sharing of knowledge by providing free registration to workshop presenters and discounted registration to full-time students. We hereby solicit papers and demonstrations. * Papers and proposals due: December 15, 2002 * Authors notified: January 1, 2003 * Demonstration materials due: January 15, 2003 The focus of CodeCon is on working applications which: * enhance individual power and liberty * can be discussed freely, either by virtue of being open source or having a published protocol, and preferably free of intellectual property restrictions * are generally useful, either directly to a large number of users, or as an example of technology applicable to a larger audience * demonstrate novelty in technical approaches, security assumptions, and end-user functionality Possible topics include, but are by no means restricted to: * development tools - languages, debuggers, version control * file sharing systems - swarming distribution, distributed search * community-based web sites - forums, weblogs, personals * security products - mail encryption, intrusion detection, firewalls Presentations will be a 45 minutes long, with 15 minutes allocated for Q&A. Overruns will be truncated. Submission details: Submissions are being accepted immediately. Acceptance dates are September 1, November 1, and December 15. On each acceptance date, submissions will be either accepted, rejected, or deferred to the next acceptance date. The conference language is English. All submissions should be accompanied by source code or an application. When possible, we would prefer that the application be available for interactive use during the workshop, either on a presenter-provided demonstration machine or one of the conference kiosks. Ideally, demonstrations should be usable by attendees with 802.11b connected devices either via a web interface, or locally on Windows, UNIX-like, or MacOS platforms. Cross-platform applications are most desirable. Please not that our venue is 21+. To submit, send mail to submissions(a)codecon.info including the following information: * Project name * url of project home page * tagline - one sentence or less summing up what the project does * names of presenter(s) and urls of their home pages, if they have any * one-paragraph bios of presenters (optional) * project history, no more than a few sentences * what will be done in the project demo * major achievement(s) so far * claim(s) to fame, if any * future plans Conference Producers and co-chairs: Bram Cohen, Len Sassaman Program Committee: * Tina Bird, Counterpane * Bram Cohen, BitTorrent * Roger Dingledine, The Free Haven Project * Jered Floyd, Permabit * Paul Holman, The Shmoo Group * Ben Laurie, The Apache Foundation * Don Marti, Linux Journal * Jordan Ritter, Cloudmark * Len Sassaman, Nomen Abditum Services * Rodney Thayer, The Tillerman Group * Jamie Zawinski, DNA Lounge Sponsorship: If your organization is interested in sponsoring CodeCon, we would love to hear from you. In particular, we are looking for sponsors for social meals and parties on any of the three days of the conference, as well as sponsors of the conference as a whole, prizes or awards for quality presentations, scholarships for qualified applicants, and assistance with transportation or accommodation for presenters with limited resources. If you might be interested in sponsoring any of these aspects, please contact the conference organizers at codecon-admin(a)codecon.info. Press policy: CodeCon strives to be a conference for developers, with strong audience participation. As such, we need to limit the number of complimentary passes for non-developer attendees. Press passes are limited to one pass per publication, and must be approved prior to the registration deadline (to be announced later). If you are a member of the press, and interested in covering CodeCon, please contact us early by sending email to press(a)codecon.info. Members of the press who do not receive press-passes are welcome to participate as regular conference attendees. Questions: If you have questions about CodeCon, or would like to contact the organizers, please mail codecon-admin(a)codecon.info. Please note this address is only for questions and administrative requests, and not for workshop presentation submissions. --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

The same email address for life.
by Adam＠LifeName 23 Nov '02

23 Nov '02

You are receiving this email either because, you have sent me an email in the past, or you have requested new product information from one of our marketing partners. If this is not the case, PLEASE accept my sincerest apologies. If you do not request further information below, I will permanently remove your email from my list. Wherever you live, wherever you work, however you do your computing, and however any of those things might change through the course of your life, LifeName gives you the convenience and security of having one single email address throughout your entire life. To find out more about LifeName you may go to www.lifename.com. To request additional information and offers from LifeName please email mailto:info@lifename.com

1 0

Re: Microsoft on Darknet
by Anonymous 23 Nov '02

23 Nov '02

On Thu, 21 Nov 2002 16:59:43 -0800, "James A. Donald" <jamesd(a)echeque.com> wrote: <snip> > >We should get an anonymous micropayment system working, >interconvertible to real money, or real e-gold, then apply it >to such applications as mixmasters and darknet. > >Allegedly yodel is such a system, but yodel is connected to >e-rand, which is connected to some people who fail to inspire >me with confidence. Can you fill in some details or supply a reference as to why those behind the e-rand fail to inspire confidence? R. J.

1 0

How to eliminate someone, using bits + witchhunt
by Major Variola (ret) 22 Nov '02

22 Nov '02

Insert a picture of a nude boy into their Powerpoint... http://www.chron.com/cs/CDA/story.hts/metropolitan/1672981 Nov. 22, 2002, 8:47AM Porn shows up in businessman's slide show Associated Press FORT WORTH -- A North Texas businessman has been jailed after co-workers reported an image of child pornography showed up on a screen as he gave a computer slide presentation recently. James Andrew Smith of Denton was in the Mansfield Jail under $300,000 bond after he was charged with two counts of possessing child pornography and one charge of promoting child pornography. Exel Inc. co-workers told police Smith had just completed a PowerPoint presentation on Sept. 4 when he tried to open another document on his laptop computer. The co-workers said a photograph of a nude young boy appeared on the screen. Exel Inc. is a logistics company in Fort Worth. According to the police report, Smith told Exel officials that a computer virus had caused the image to appear. Nevertheless, police said Excel officials fired Smith and contacted police the following week after a search of his laptop found pornographic photos of children that appeared to have been e-mailed to others. Police seized the computer, as well as disks containing child pornography and a folder with 65 pages of printed pictures of child pornography that Exel officials had found in Smith's desk, the report stated. Smith is also pastor of Landmark Baptist Church in Sanger. His wife, Julie Smith, said they have been married for 13 years and have two children. "He's never hurt our children. As far as I know he's never hurt anyone's children," she said. "He has always taken very good care of me and our children. Anything we needed or wanted, he worked and I got it." She said the congregation at the Sanger church was told Wednesday night that her husband was resigning immediately, but was not told why. He had been pastor of the church for 3 1/2 years. -------- Morals: Don't use your work laptop for personal stuff Encrypt your naughty bits Don't use email clients that display pictures automatically A virus that quietly downloads alt.bin.taboo will be very funny.

2 1

[Burbclaves + Brinworld] Geek 'Vigilantes' Monitor Border
by Major Variola (ret) 22 Nov '02

22 Nov '02

Geek 'Vigilantes' Monitor Border By Michelle Delio | Also by this reporter Page 1 of 1 02:00 AM Nov. 22, 2002 PT A group of tech-savvy ranchers in Arizona is using military technology to monitor and apprehend illegal immigrants crossing the border from Mexico into the United States. Members of the group have spiked their land with thousands of motion sensors. They also use infrared tracking devices, global positioning systems, night vision goggles, radar and other gear to survey movement near the border. http://wired.com/news/politics/0,1283,56523,00.html

1 0

Re: Microsoft on Darknet
by Major Variola (ret) 22 Nov '02

22 Nov '02

At 04:59 PM 11/21/02 -0800, James A. Donald wrote: > -- >According to Microsoft, > >http://crypto.stanford.edu/DRM2002/darknet5.doc > >Darknet is being undermined by free riders. They attribute this to 2 things: most are on 56Kbps, and legal harassment of large sharers is possible. I suspect it is mostly that broadband isn't too common yet.

1 0

Re: Worm Klez.E immunity
by Dave Emery 22 Nov '02

22 Nov '02

On Thu, Nov 21, 2002 at 02:47:24PM -0600, tcmay wrote: > Content-Type: application/octet-stream; > name=RPOUDOMI.TXT > Content-Transfer-Encoding: base64 > Content-ID: <Y14n4PtOj> > Who are all these people with Hispanic names anyway ? Doesn't look like a list of arab terrorists to me.... -- Dave Emery N1PRE, die(a)die.com DIE Consulting, Weston, Mass. PGP fingerprint = 2047/4D7B08D1 DE 6E E1 CC 1F 1D 96 E2 5D 27 BD B0 24 88 C3 18

2 1