December 2002 - cypherpunks-legacy

Re: Gilmore's response
by Mike Rosing 13 Dec '02

13 Dec '02

On Fri, 13 Dec 2002, Adam Shostack wrote: > The response of the apparatchiks is to increase the penalties until > we're all cowed, like they did in the old war on drugs. As long as they are that successful, we don't have too much to worry about! Besides, the CIA ships more drugs into the US than all the other cartels combined. Hmmm... be an aparatchik and get all the drugs, guns and money you want, fight it and die in a torture chamber. Sounds like Iraq to me! And Columbia and Afghanistan and .... I think the problem is that the US governemnet is so used to dealing with totalitarian regiems it sets up all over the world that the bureaucrats figured they might as well set one up in the US too. Might work, for a while. Might be a good reason they hired Kisenger to burry the facts. Patience, persistence, truth, Dr. mike

1 0

Re: Gilmore's response
by Major Variola (ret) 13 Dec '02

13 Dec '02

> From: Steve Schear <schear(a)attbi.com> > I have a possible trip coming up soon. I intend to have my tickets > purchased by a third party and fly under an assumed name (maybe Tyler > Durden ;-) I will carry no ID on my person. Perhaps there is now a need to > have large numbers of refusnik travelers assume the same "nom de avion" > identity. Sort of like the Killroy in WW II. Dare you to do this with your Groucho glasses on :-)

1 0

Gilmore's response
by Adam Shostack 13 Dec '02

13 Dec '02

Gilmore's legal response to secret laws, etc. http://cryptome.org/gilmore-v-usa-god.htm -- "It is seldom that liberty of any kind is lost all at once." -Hume

2 1

RE: Extradition, Snatching, and the Danger of Traveling to Other Countries
by Trei, Peter 13 Dec '02

13 Dec '02

Mike Rosing wrote: [...] > When we can't vote, we can fight. So far the number of horror > stories is small. But when everyone has a personal friend or > relative that's been shot, abused, tortured or even just roughed > up - then they'll know they might be next. And they might vote to change > things. So from a purely machivellian perspective, the faster > "they" become more repressive and the more people "they" harm, > the faster things will change. > > We just have a few years of hell to go thru, that's all. > > Patience, persistence, truth, > For the Russians, 'a few' was over 70. I hope for a non-violent restoration - this sort of thing could give the Libertarian Party legs, if they handled it right. Peter Trei

1 0

XSS flaw found at "https://www.e-gold.com" (fwd)
by Eugen Leitl 13 Dec '02

13 Dec '02

---------- Forwarded message ---------- Date: 10 Dec 2002 12:50:03 -0000 From: Liu Die Yu <liudieyuinchina(a)yahoo.com.cn> To: bugtraq(a)securityfocus.com Subject: XSS flaw found at "https://www.e-gold.com" i know bugtraq doesn't accept vulnerability on one site, but the following info is important; please suggest a forum for me to post. ----=======------ XSSatEGOLD-Content-Tech XSS flaw found at "https://www.e-gold.com" technically, it's nothing new. XSS at E-gold is very dangerous. E-gold is one of the most popular way to do international business. and unlike credit card system, e-gold sent, it never comes back. there is no refund policy. so stealing passphrase means stealing real gold. it's important, so i take it seriously. [tested] browser:MSIEv6 time:2002/12/10 UTC+800 [demo] at http://www16.brinkster.com/liudieyu/XSSatEGOLD/XSSatEGOLD-MyPage.htm or http://clik.to/liudieyu ==>XSSatEGOLD or [CODE.URL START] https://www.e-gold.com/acct/historycsv.asp? initial=1xxxx"><SCRIPT>s="You_can_NOT_trust_this_page_if_you_got_if_from_a_ link.____by_LiuDieYu_http://clik.to/liudieyu";w=window.open("https://www.e- gold.com/acct/login.html");setTimeout("w.document.write (s)",150);</SCRIPT>&startmonth=12&startday=4&startyear=1996&endmonth=12&end day=4&endyear=2003&paymentsreceived=1&oldsort=tstamp&page=1 [CODE.URL END] [exp] technically, there is only one thing important for XSS attackers: some CGI can only be found when you are logged in, but they can be reached even if you are not logged in. of course, the module dealing with logged-in users is different from the one dealing with un-logged-in users. so, you have to test in both situations to ensure it's not XSS vulnerable. [contact] http://clik.to/liudieyu ==> "how to contact liu die yu" section [BTW] this flaw can be found easily with FASX at http://clik.to/fasx

1 0

Re: [MPUNKS] Cypherpunks December Mtg: HIGHFIRE Design Session
by Bill Stewart 13 Dec '02

13 Dec '02

At 05:21 AM 12/13/2002 +0000, Peter Fairbrother wrote: >Dave Del Torto wrote: > > > Resumes should be in plain > > ASCII text format with a PGP signature (detached sigs are OK) and on > > floppy disk or CD-R also containing a copy of the applicant's PGP > > public key. > >Fuck off. > >If you think that a PGP key is good enough, you don't know the threats you >are facing with GAK and the like. If you think a resume should be >required... >-- >Peter Fairbrother He didn't say you needed a resume to get into the meeting; he said you needed it if you wanted to apply for a job so they can show the people they're asking for grant money that they've got a bunch of highly qualified people that are interested in working on the project. If it's like most projects, the resume is largely separate from whether everybody knows whether you write great code quickly, but it can be a hook to remind them who's interested. Personally, I like resumes to be in hand-written well-styled HTML :-)

1 0

Re: Extradition, Snatching, and the Danger of Traveling to Other Countries
by Peter Fairbrother 13 Dec '02

13 Dec '02

Anonymous wrote: > On Thu, 12 Dec 2002 10:47:25 -0800, Tim May wrote: >> >> America used to disdain the secret trials, the Star Chamber proceedings so >> endemic in other parts of the world. Now we have them. >> >> We will reap what we sow. >> >> --Tim May > > Spot on. But what, if anything, do you think can be done to > reverse this slide to Red White and Blue Stalinism with good PR? > I trust you are not one of those who will prattle something like > "exercise your right to vote", or "write your > congressperson/MP", etc. In practical terms, in a surveillance > society, what can the regular person do to strike a blow in > opposition to the direct attack on the Constitution and civil > liberties and civil rights? > > Do we need a program to oppose the progrom? Dear America, Yes, It's hard, but here's how. First, you can make comms unreadable. There are well-known ways to do this. Second, you can make comms untraceable. Ways to do this exist, and better ones are being developed*. Third, you can make comms available to everyone - the 'net might help here. If you don't choose to use these methods, the consequences are up to you. But secure comms alone will only provide you with useful information, by themselves they aren't enough; you need to vote. Lots of you. Nothing else really matters. To "them", and you. -- Peter Fairbrother

1 0

Re: Anonymous blogging
by GaryJeffers＠aol.com 13 Dec '02

13 Dec '02

My Fellow Cypherpunks, My defense against getting overwhelmed with Cypherpunks list mail is to use Guan Sin Ong 's excellent archieve: http://www.inet-one.com/cypherpunks . I find this easy and I don't have to delete tons of mail. Yours Truly, Gary Jeffers

1 0

Art Bell nearing retirement
by London Morning 12 Dec '02

12 Dec '02

Hello your email address was found at http://cypherpunks.venona.com/ this was during a search for readers that might be interested in a different kind of news, much in the way the Art Bell radio show has discussed in the past. I am the editor of The London Morning Paper and invite you to a free subscription. It is email based and is sent daily. It includes news from a different slant and that of contemporary press for comparison. May I send you a sample? James van Etten, Editor contact: AB(a)beam.screaming.net London, W14 0HD - United Kingdom 0044 207 603 5340

1 0

Re: Libel lunacy -all laws apply fnord everywhere
by Major Variola (ret) 12 Dec '02

12 Dec '02

Quoth Steve: >Under this logic a retailer in one > country, selling a controversial book to someone in another country, could > involve publishers in yet a third country to litigation in the second > country. Bizarre. > > The real question is whether any judgement is enforceable. Depends if the Dow Jones CEOs ever go to Australia. Ask Mr. Skylarov about enforceability. Better yet, ask his wife or newborn.

1 0