December 2003 - cypherpunks-legacy

PGP_foi
by John Young 17 Dec '03

17 Dec '03

1-12-96. NYPaper: "Data Secrecy Export Case Dropped by U.S." By John Markoff. PGP_foi

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

> From: Michael C. Peponis <mianigand(a)unique.outlook.net> > To: cypherpunks(a)toad.com > > Why let it bother you? You must understand that the majority of the ^^^^^^^^ > population of the United States is working class trash, the news ^^^^^^^^^^^^^^^^^^^ Hope you're including yourself in that. > media is just peddeling to the masses, just like the morons that hold ^^^^^^^^^ Can't spell - *must* be working class trash... > elected office. > > Regards, > Michael Peponis ^^^^^^^ Tell me: is the 'po' silent?

1 0

reach out!
by William T. Rainbird 17 Dec '03

17 Dec '03

I know this isn't a typical posting for this group, but I thought I'd point out that O.J. Simpson has a video for sale, to further exploit his carnage. You can buy it by dialing 1-800-OJTELLS 1-800-658-3557 it is a FREE CALL (for you). I guess that means the MERCHANT PAYS for the calls, even if NOTHING IS ORDERED... Please repost and tell your friends!

1 0

Re: Novel use of Usenet and remailers to mailbomb
by rah＠shipwright.com 17 Dec '03

17 Dec '03

Jammin' on the mailbomb trick... Looks like it's a variant of another scheme used elsewhere, viz, --- begin forwarded text To: rah(a)shipwright.com (Robert A. Hettinga) From: oldbear(a)arctos.com (The Old Bear) Subject: Re: Novel use of Usenet and remailers to mailbomb Date: Fri, 12 Jan 1996 23:10:43 EDT rah(a)shipwright.com (Robert A. Hettinga) writes: >From: rah(a)shipwright.com (Robert A. Hettinga) >Newsgroups: tiac >Subject: Novel use of Usenet and remailers to mailbomb >Date: Fri, 12 Jan 1996 14:34:18 -0500 >Organization: e$ >| Somebody, too clever for their own good by half, has come up with a >| novel way of using Usenet and anonymous remailers to perpetrate >| mailbombs. The M.O. is to post a message to the naked-lady newsgroups >| saying "get pics in your mailbox! send this message to this address!), >| giving the email address of a cypherpunk-style anonymous remailer and >| including a pgp-encrypted message block. A variation on the mailbomb from dispersed unwitting sites, except involving the telephone network, was discussed on alt.dcom.telecom some time back. Maybe you call this a phone bomb. As you know, pager companies get blocks of numbers within a local exchange for their operations. So, for example, 635-3000 to 635-3999 may represent a thousand radio pager customers of a particular paging company. Wanting to harrass an estranged spouse, some nefarious character programmed a dialler deamon to sequentially call each of the numbers in a pager block and leave a messsage to return call to the spouse's phone number. Naturally, caller id did no good to track or ignore the unwanted calls to the spouse at all hours from pager subscribers who were receiving messages on their alpha-numberic pagers to call the spouse's number. 'Wrong number' calls were coming in to the spouse from all over at all times. Moreover, it is virtually impossible for a pager company to track a single number which calls each of its lines only once. Definitely not a nice thing. --- end forwarded text Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "Reality is not optional." --Thomas Sowell The NEW(!) e$ Home Page: http://thumper.vmeng.com/pub/rah/

1 0

E-mail Spoof Throws Apple for a Loop
by Anonymous 17 Dec '03

17 Dec '03

Your message here. Dirty, Rotten E-Mail Liar Accuses Apple of Being Worth a Lot More By JIM CARLTON Staff Reporter of The Wall Street Journal To Apple Computer Inc.'s litany of woes, add a mad e-mailer. The e-mailer struck this week with a copy of a bogus message from Sony Corp.'s president threatening a hostile takeover of the Cupertino, Calif., computer maker. The "letter" showed up in e-mail baskets of computers throughout Silicon Valley and beyond. Managers at Apple read the letter with great interest -- until they got to the part about Sony offering $63 a share, or roughly double Apple's stock value. Now Silicon Valley is abuzz about who the mad e-mailer is. Sony has launched an investigation, promising to explore "the availability of appropriate legal action against those responsible." At first glance, the letter appears to be worded authentically enough. Addressed to Apple CEO Michael Spindler from Nobuyuki Idei, it says Sony intends to buy all of Apple's shares for $7.74 billion after a breakdown in merger talks that were supposedly taking place between the two companies. "We believe this is the fastest, most efficient way to bring our companies together," Mr. Idei purportedly says. But at Apple, executives quickly dismissed the letter as a prank. For one thing, the Apple e-mail address was for a "c.franz," a person unknown to the company. The letter also misidentified Mr. Idei as Sony's chairman and CEO. And initial notification of such a takeover bid is almost never made by letter, for secrecy reasons. So just who is the mad e-mailer? The return address was left blank, and a list of suspects could prove endless. A disgruntled employee is one possibility. Scads of Apple managers have departed in recent months. Or, analysts say, it could be a cheap shot by an employee at an Apple competitor. Whoever the culprit is, "this sounds like a real attempt to tick somebody off," says Mark Macgillivray, an industry consultant in Sunnyvale, Calif. The e-mail letter was circulating as Apple was announcing an estimated loss of $68 million and plans for a restructuring that analysts expect to include massive layoffs. Since Apple has long been rumored to be a takeover target, the letter added to the angst in Cupertino. In a reflection of morale at Apple, some engineers are joking they're disappointed the letter was phony. They would have liked Apple to accept the offer.

1 0

Re: (none)
by Jeff Weinstein 17 Dec '03

17 Dec '03

owner-cypherpunks(a)toad.com wrote: > I was today playing around with a Mozilla 2.0beta5 that someone gave me > [more bells and whistles than my 1.12, but not much more bang for the buck] > and was showing a friend all the nifty information that netscape tells > about you when you visit sites, then went to c2 to show off the apache > web server and when I tried to use https:// to show off how you can have your > own encrypting web server for free and everything, a window popped up and > said the certificate was expired. > > I couldn't really tell if it meant that the certificate that Sameer generated > really needed to be updated, or if Netscape beta 5 had just been rigged to > reject non-netscape certificates, but the end result was no encryption. I just looked at c2's certificate, and it doesn't expire until april. The only reason I can think of that you should have a problem is if the date on your machine is wrong. > (Jeff, if you're reading this, of course we know that Netscape, with it's open > loving policies wouldn't do anything underhanded, but the thought does come > to mind, and by the way, when are we going to see an option to turn off or > control what information is passed out to the other end. Specifically, I'd like > http://anonymizer.cs.cmu.edu:8080/prog/snoop.pl to come up nearly blank.) We do not send the HTTP 'From:' header. I will look into where they are getting the user name and location from. There is really nothing I can do in the Navigator to stop them from getting your IP address or DNS name. > Soooo, anyway, I was wondering if anyone knows anything about the use of > privately generated certificates. Yes, Jeff, we know that Netscape is jumping > to fully support user-specified certificates, but personally I saw, relating > to certificates, a lot of *nifty* options and displays, but really didn't > see much in the way of anything that looked like "add". If you are operating a server you can use a certificate signed by any CA you want. When someone running Navigator 2.0 connects to that site they will be presented with a sequence of dialogs that allow them to decide if they want to talk to your site. Adding new certificates (other than for remote SSL servers) will generally be done via CA web pages, not the preferences UI. --Jeff -- Jeff Weinstein - Electronic Munitions Specialist Netscape Communication Corporation jsw(a)netscape.com - http://home.netscape.com/people/jsw Any opinions expressed above are mine.

3 3

Limiting Reuse of Certificates
by JMKELSEY＠delphi.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- [To: cypherpunks list ## Date: 01/11/96 02:25 pm ## Subject: Limiting reuse of certificates. ] >Date: Mon, 08 Jan 1996 17:31:24 -0500 (EST) >From: Michael Froomkin <froomkin(a)law.miami.edu> >Subject: Certificates: limiting your liability with reuse limitations >Suppose I am a CA. I am worried that by issuing a certificate with >a lifespan of more than 2 milliseconds I am opening myself up to >unlimited liability if for some reason, despite my best efforts, I >issue an erroneous certificate. >I know I can put an expiration date on the certificate, but that's >not enough. I can accumulate a lot of exposure in a few seconds, >much less weeks. >I know I can put a reliance limit in the X.509 ver 3 certificate, >but that's not enough. Even a $1 limit could be used many millions >of times. >Is it feasabile to say: Can only be relied on once per >day/week/month? Is this something the relying parties can reasonably >be expected to monitor? This is a hard problem. The only way I can see to do this is to require interaction with the CA (or its proxy) for each signature. The good news is that if you're doing certificate revokation lists online, then there is probably already some interaction with the server to verify that a certificate is still valid, before it is accepted. The trick here is to flip around who has to check the CRL server. a. Bob forms D = document he wants signed, ID_B = Bob's ID, and sends to Alice M_0 = ID_B, D. b. Alice forms T = timestamp and sends to the Server M_1 = T, hash(ID_B, D), Sign_{SK_A}(T, hash(ID_B, D)). c. The Server verifies the timestamp, the signature, and that Alice is currently allowed to sign things (her certificate is valid and hasn't been overused today). If not, it drops the connection and ends the protocol. If things all check out, however, it forms M_2 = T, Sign{SK_S}(T, hash(ID_B, D), Certificate_A). d. Alice now has (until the timestamp T becomes too stale) an authorization to sign D. She does so, and sends to Bob (who's been waiting all this time) M_3 = T, ID_B, D, Certificate_A, M_2, Sign_{SK_A}(ID_B, D). Now, the trick is to redefine valid signatures as only those that look like M_3. The recipient has to verify the timestamp, and that he hasn't received an identical signature from Alice recently, and has to verify the two signatures. (I make no promises about the soundness of this protocol--it's meant to illustrate the idea, not to be used directly.) Other than that, I can't think of anything that will fit the bill. >A. Michael Froomkin | +1 (305) 284-4285; +1 (305) 284-6506 (fax) >Associate Professor of Law | >U. Miami School of Law | froomkin(a)law.miami.edu >P.O. Box 248087 | http://www.law.miami.edu/~froomkin >Coral Gables, FL 33124 USA | It's warm here. Note: Please respond via e-mail as well as or instead of posting, as I get CP-LITE instead of the whole list. --John Kelsey, jmkelsey(a)delphi.com PGP 2.6 fingerprint = 4FE2 F421 100F BB0A 03D1 FE06 A435 7E36 -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMPV110Hx57Ag8goBAQFVggP+P9ilz7cM8BQX+nDgjByG4avAoHxgDpDw cWsx7dw31MQsPCEkzvuvCcwf36e4xEQd3jKMh5rYmWrYRAMQAoB4yGm7ixN4tqXH 1g6Xw9QPCLnW4OJvjfynzFfKb5i8KcvOSBnCXzOd1Z/LYEI23/6phdNd9rRf/YjL mxbKS7gDrHI= =dn6t -----END PGP SIGNATURE-----

1 0

Re: BIG NEWS: PRZ investigation dropped!
by James A. Donald 17 Dec '03

17 Dec '03

>From: Stanton McCandlish <mech(a)eff.org> >Date: Thu, 11 Jan 1996 11:53:46 -0800 (PST) > >Justice Dept. dropped investigation of Phil Zimmermann, declines to >prosecute. I never expected them to prosecute, unless he forced them to by toilet bombing the court, but I did expect them to keep on "investigating" him forever and a day. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

2 1

Re: Certificates: limiting your liability with reuse limitations
by Censored Girls Anonymous 17 Dec '03

17 Dec '03

In Minnesota, you wouldn't be liable. All you can do IS all you can do. Anything else is a crime! (on their part). Love Always, Carol Anne At 05:07 PM 1/11/96 -0800, you wrote: >You write: >How do notaries public get around this liability problem? It seems to me >that the checking done for a certificate might be similar to the checking >done by a notary - a glance at a driver's license, say. Are they subject >to liability if they are fooled by fake ID? > >Hal > > -- Member Internet Society - Certified BETSI Programmer - Webmistress *********************************************************************** Carol Anne Braddock (cab8) carolann(a)censored.org 206.42.112.96 My Homepage The Cyberdoc *********************************************************************** ------------------ PGP.ZIP Part [017/713] ------------------- M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M MF=O0H+*%(-S%&>S%+FS&<LS%3(Q&#W1"<]2%`H^;,]^1C$'HBN8PX$4SYAU^ MPGD<Q0ZLA0D+,`MCT!LA**4M[-JPAK9F?40!AJ,CW"'%DR#:'9?Q)3[%<DQ` ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/

1 0

Mitnick: Markoff responds to Platt's CuD "Takedown" critique
by Declan B. McCullagh 17 Dec '03

17 Dec '03

Topic 1119 [media]: Media Appearances of WELLperns VI, S.F.Bay Area Division #160 of 296: john markoff (johnm) Wed Dec 20 '95 (14:49) 557 lines Charles is certainly entitled to his opinion about our book, but I thought I would take this opportunity to correct his inaccuracies. REVIEW OF TAKEDOWN ON THE COMPUTER UNDERGROUND DIGEST The Mad-Scientist Myth Figure A circumlocuitous review of_Takedown_ by Tsutomu Shimomura and John Markoff (Hyperion, $24.95) by Charles Platt > Perhaps it seems strange that a journalist should defend herself by pleading ignorance of the subject that she chose to write about. Still, we should give Katie Hafner credit where it is due: she now seems genuinely repentant. Just for the record, Katie says that her remarks were taken out of context here by Charles. For her actual views you might want to look at her Esquire article on the subject, which is reprinted in a new paperback version of Cyberpunk. > The same can hardly be said for her ex-husband and ex- collaborator John Markoff, who must have made well over half a millions dollars by now, portraying Kevin Mitnick as an arch-enemy of techno-society. If Markoff regrets the "darkside hacker" label, he hasn't said much about it. * * * > Unlike many hackers, Kevin Mitnick never looked for publicity. He felt he should be paid for giving interviews, and when Hafner and Markoff refused to come up with any money, he refused to talk to them. He became famous--or infamous--while doing his best to remain obscure. The darkside hacker label was created during the late 1980s by the Southern California press. It is a label that I noted, but I didn't create. However, he's right I don't regret using it. And also for the record, Kevin Mitnick used to drive around in Las Vegas with a stack of copies of Cyberpunk in the trunk of his car to give away to admirers. He is on record as saying the book is "20 percent inaccurate." > The key event that catalyzed this strange ascent to notoriety occurred on July 4th, 1994, when a story by John Markoff appeared on the front page of _The New York Times._ Headlined "Cyberspace's Most Wanted: Hacker Eludes F.B.I. Pursuit," the text described Mitnick as "one of the nation's most wanted computer criminals" and was accompanied with a suitably menacing mug shot. The story was liberally spiced with tidbits recycled from _Cyberpunk,_ but if you looked more closely, there wasn't any actual news. Mitnick had violated parole a year or so previously, had disappeared at that time, and hadn't been seen since. That was all. This is really inaccurate. Kevin Mitnick had become notorious nationally in the late 1980s as a result of his being arrested for attacks on Digital Equipment Computers. A menacing mug shot? It was the only photo available. No actual news? Not the way I remember it. The news was that he was being pursued by the FBI (three agents full time), the California DMV, US Marshalls, telco security, local police, etc. The further news was that the FBI had told cellular telephone companies that they believed the fugitive had stolen software from at least six cellular phone manufacturers. I thought then, and still think, this merited a story. I also think the story was a good yarn. Mitnick had succeeded in evading law enforcement for more than a year - again. Why was this on the front page of a highly respected newspaper? Maybe because of the scary implications: that a weirdo who could paralyze vast computer networks was on the loose, and law enforcement had been too stupid to catch him. In reality, though, Mitnick has never been accused of willfully damaging any hardware or data, and has never been Wrong again. He was accused of doing more than $100,000 damage at US Leasing, a SF time sharing company in 1980. Their system was trashed by a group that Mitnick was a member of. After that, at various other times he cost companies tens of thousands of dollars trying to close the door on his attacks. A further point is that I have no control over placement of my stories in the paper. In _Cyberpunk,_ he was described as an omnipotent, obsessive-compulsive, egotistical, vindictive sociopath who used his computer to take revenge on the world that had spurned him. He later claimed (in _2600_ magazine) that this This is a totally misreading of Cyberpunk. I invite anyone to read that section of the book and see if that is the way he was portrayed. was "twenty percent fabricated and libelous." Maybe so, but I guess Kevin acknowledged 80 percent of what we wrote as accurate... 8) So far as I can discover, the FBI didn't classify Mitnick as one of America's most wanted; it was John Markoff who chose to apply that label. Markoff went far beyond the traditional function of a journalist who merely reports news; he helped to create a character, and the character himself became the news. Sorry, but I didn't create the character, Kevin did. He has now been arrested six times in fifteen years. Each time, except for this last time, he was given a second chance to get his act together. He chose not too. It seems to me that he is an adult and makes choices. He chose to keep breaking in to computers. He knew what the penalty was. So what's the problem? Unfortunately for Mitnick, this made him the target of a hacker witch hunt. A few years ago, here in CuD, Jim Thomas A witch hunt? Give me a break. It was an article describing a law enforcement hunt for a fugitive, who had been arrested five times previously, convicted at least three times, and was known to be attacking the computers of the nation's cellular telephone companies. * * * This information probably wasn't worth much; Markoff told the feds that Mitnick could probably be found stuffing himself with junk food at the nearest Fatburger, whereas in fact Mitnick was working out regularly, had slimmed down to normal weight, and had become a vegetarian. Oh please. I was called by Kent Walker, the AUSA on the case during a meeting at the Well. He asked me if I thought Mitnick was dangerous. I responded that everything I knew about Mitnick had either been in Cyberpunk or my July 4 1994 article, ie. in the public. I repeated the story of one arrest in which Kevin ended up handcuffed in tears over the hood of the detective's car. I gave no other information, nor got any. John Markoff's precise motives remain a mystery. We can, however, learn something by examining his writing. In his _Times_ article describing Mitnick's capture, he stated that the hacker had been on a "long crime spree" during which he had managed to "vandalize government, corporate and university computer systems." These are interesting phrases. "Crime spree" suggests a wild cross-country caper involving robberies and maybe even a shoot-out. In reality, Mitnick seems to have spent most of his time hiding in an apartment, typing on a keyboard. The word "vandalize" implies that he wantonly wrecked some property; in reality, Mitnick caused no intentional damage to anyone or anything. This is just not true. Kevin Mitnick was actively sharing system vulnerabilities with other people on the net. That is about the most damaging thing that could be done to the Internet community. When it came down to it, Markoff's journalism was long on opinion and short on facts. Sort of like this review, I guess..... 8) * * * I have a fantasy. In my fantasy, John Markoff bursts into a room where Tsutomu Shimomura sits as solemn as a zen master, peering impassively at a computer screen while he types a Perl script. "Tsutomu, I have good news and bad news!" Markoff exclaims. "The good news is, we sold the book rights for three-quarters of a million. The bad news is, I haven't got a clue what Mitnick was doing for the past two years. What the hell are we going to write about?" Shimomura doesn't even bother to look up. He gives a barely perceptible shrug and says, "Me, of course." This is weird... Mitnick grew up in a lower-class single-parent household and taught himself almost everything he knew about computers. Nice try. Kevin took lots of computer classes at various schools. * * * Presumably because Markoff felt that some romantic interest would help to sell the story, this book contains revelations of a type normally reserved for Hollywood celebrities or British royalty. While he was pursuing Mitnick, Shimomura was also pursuing "Julia," the long-term girlfriend of John Gilmore, one of the first employees at Sun Microsystems in 1982 who subsequently co-founded the software corporation Cygnus. The reason we described what happened at Toad Hall on Xmas was that the attacks first came from toad.com while Tsutomu and Julia were there. If we hadn't have been complete in our description someone would have charged us with a cover up. Please remember that David Bank, a San Jose Mercury reporter, spent several weeks pursuing the hypothesis that Tsutomu had attack his own computers. Kevin Mitnick begins to seem likable by comparison. At least he shows some irreverence, taunting Shimomura and trying to puncture his pomposity. At one point, Mitnick bundles up all the data he copied from Shimomura's computer and saves it onto the system at Netcom where he knows that Shimomura will find it. He names the file "japboy." At Yea, That Kevin is a real likeable guy. another point, in a private online communication (intercepted by Shimomura without any lawful authorization) Mitnick Wrong. At the Well, Netcom and in Raleigh, Tsutomu, at all times was operating under the exemptions granted Internet Service Providers by the ECPA. Well, maybe so, but unlike Shimomura, Mitnick never claimed to be heroic. Nor did he cause any intentional "damage." Nor did he "attack," "pilfer," and "vandalize" computer systems, even though these words are used repeatedly throughout the book--in the same pejorative style that John Markoff previously perfected in _The New York Times._ Perjorative?? Yikes! I mean we could go to the dictionary..... * * * All the charges except one have been dropped against Kevin Mitnick. He may even be out of jail in time for the Markoff/Shimomura book tour. In other words, the man Wrong. Kevin Mitnick is in jail in Los Angeles facing charges from more than six United States Federal Districts. He may go on trial or he may plea bargain. described in advance publicity for _Takedown_ as a threat to global civilization will befree to go about his business-- because, in the end, he wasn't much of a threat at all. Will this create an embarrassing schism between _Takedown_ and reality? Probably not. Reality has been at odds with the Mitnick myth for quite a while, but the myth is stronger than ever. Myth and reality? I have been writing about Kevin Mitnick for a long time, since 1981 to be precise, but I didn't create a myth, he created his own story.

2 1

Mitnick #4: Platt's final response to Markoff
by Declan B. McCullagh 17 Dec '03

17 Dec '03

Topic 1119 [media]: Media Appearances of WELLperns VI, S.F.Bay Area Division #217 of 296: Aaron L Dickey (kieran) Wed Jan 3 '96 (20:19) 7 lines Charles Platt responds: "John Markoff's reply to my replies is much more factual and convincing than his original response to my review of his book. I thank him for his time and trouble. I still find it hard to agree with his overall perspective, but I am now convinced that he does have a sincere point of view, and I value the instances where he has corrected me on details." Topic 1119 [media]: Media Appearances of WELLperns VI, S.F.Bay Area Division #223 of 296: Declan McCullagh (declan) Thu Jan 4 '96 (07:33) 23 lines And one final response from Charles Platt: "Someone suggested that by criticizing TAKEDOWN I attempted to further my own career. "My primary career has nothing to do with computer journalism. Under a different name I write a series of prehistory novels, the first of which now has 200,000 copies in print. This is my main source of income; I pursue computer journalism as a sideline, because it pleases me. "I do have a computer-related book coming out under my own name later this year, but it was written more for pleasure than profit and is aimed at a small audience: people who are more concerned about really dangerous criminals such as James Exon or Ralph Reed than about hackers such as Kevin Mitnick. Frankly, this book will not sell a lot of copies no matter what I do, because decency legislation and first-amendment issues are a noncommercial topic compared with so-called computer crime. "Bearing all this in mind, it is misleading to suggest that I wrote my review for motives of self-promotion. I wrote it because I had just finished reading TAKEDOWN, it had irritated me greatly, and I believed (perhaps wrongly) that I possessed background information that might not be mentioned by other reviewers elsewhere."

1 0

Mitnick #2: Platt responds to Markoff's rebuttal
by Declan B. McCullagh 17 Dec '03

17 Dec '03

Topic 1119 [media]: Media Appearances of WELLperns VI, S.F.Bay Area Division #190 of 296: Declan McCullagh (declan) Tue Jan 2 '96 (09:38) 212 lines <hidden> From cp(a)panix.com Tue Jan 2 09:26:11 1996 Date: Tue, 2 Jan 1996 03:11:10 -0500 (EST) From: Charles Platt <cp(a)panix.com> To: Declan McCullagh Cc: Charles Platt <cp(a)panix.com> Subject: John Markoff's "rebuttal" In Computer Underground Digest I wrote a critical review of the recent book _Takedown_ by Shimomura and Markoff, in which I suggested that John Markoff had profited handsomely by mythologizing Kevin Mitnick as one of "America's most wanted computer criminals." My review was copied to The Well, where JM wrote a rebuttal. I am amused to fiund that this rebuttal not only fails to answer my rather serious allegations, but commits exactly the same journalistic sins of vagueness and hyperbole that I complained about originally. JM writes: "Just for the record, Katie [Hafner] says that her remarks were taken out of context here by Charles." This statement is perhaps intentionally vague, because if I don't know exactly what I'm being accused of, I can't answer it. *What,* precisely, was taken out of context? JM doesn't say. All I know is that when Katie Hafner contacted me directly, she complained that she never branded Kevin Mitnick a "darkside hacker" in the book _Cyberpunk;_ she merely used the phrase as the title of the first section of the book. But in fact, the "darkside hacker" term *is* applied to Mitnick within the text of the book; and in any case, a section heading obviously sets the tone for everything that follows. Therefore, I do not believe that I quoted Katie Hafner out of context--unless JM is talking about something else entirely, in which case he should say so, instead of attempting to devalue my review by a generalized accusation. JM Writes: "The darkside hacker label was created during the late 1980s by the Southern California press. It is a label that I noted, but I didn't create. However, he's right I don't regret using it. And also for the record, Kevin Mitnick used to drive around in Las Vegas with a stack of copies of Cyberpunk in the trunk of his car to give away to admirers. He is on record as saying the book is '20 percent inaccurate.'" JM is confusing the issue. I never suggested he invented the "darkside hacker" term. This is totally irrelevant. I said, very specifically, that he was the first to *apply* this label to Mitnick. JM does not actually deny this, and I believe it is true. Re my description of his initial article about Mitnick for the NY Times, JM writes: "This is really inaccurate. Kevin Mitnick had become notorious nationally in the late 1980s as a result of his being arrested for attacks on Digital Equipment Computers. A menacing mug shot? It was the only photo available. No actual news? Not the way I remember it. The news was that he was being pursued by the FBI (three agents full time), the California DMV, US Marshalls, telco security, local police, etc. The further news was that the FBI had told cellular telephone companies that they believed the fugitive had stolen software from at least six cellular phone manufacturers. I thought then, and still think, this merited a story. I also think the story was a good yarn. Mitnick had succeeded in evading law enforcement for more than a year - again." "Notorious" in what sense? This is another of those vague terms that JM throws around without limiting or defining it. Mitnick may have been "notorious" in hacker circles, but not in the eyes of the general public. My point was, and is, that JM converted Mitnick from a relatively obscure hacker into a public figure. JM tries to evade this point but cannot specifically deny it. As for Mitnick being "actively pursued," I believe this is a vast overstatement. As I understand it, law enforcement had largely lost interest until JM's news item embarrassed them. Even after that, according to JM's own book _Takedown,_ law enforcement had to be prodded into taking action. They seemed not to share JM's perception of Mitnick as a severe threat. They certainly didn't characterize him as one of "America's most wanted." In response to my statement that Kevin Mitnick has never been accused of intentionally damaging a computer, JM writes: "Wrong again. He was accused of doing more than $100,000 damage at US Leasing, a SF time sharing company in 1980. Their system was trashed by a group that Mitnick was a member of. After that, at various other times he cost companies tens of thousands of dollars trying to close the door on his attacks. A further point is that I have no control over placement of my stories in the paper." With all due respect, this is not fair or accurate journalism. Was Mitnick *active* in the group that caused the alleged damage? Did he play a personal role? Does JM know? If not, he's just slinging mud. This is a smear and should not be presented as if it is a fact. On the other hand, if there is evidence that Mitnick was indeed actively responsible, I will gladly admit that I didn't know of this. As for the money that companies spent fixing the security weaknesses that allowed Mitnick to gain access, it is grossly unfair and misleading for JM to throw this into a paragraph discussing "intentional damage." This is exactly the kind of deliberate blurring of different kinds of computer misuse that I complained about in my review. Regarding Mitnick's "most wanted" status, JM writes: "Sorry, but I didn't create the character, Kevin did. He has now been arrested six times in fifteen years. Each time, except for this last time, he was given a second chance to get his act together. He chose not too. It seems to me that he is an adult and makes choices. He chose to keep breaking in to computers. He knew what the penalty was. So what's the problem?" Here again, JM avoids my direct point--that he was the first to categorize Mitnick as "one of America's most wanted." Of course Mitnick is responsible for his actions. I never disputed this, and never suggested he was innocent of the crimes for which he was convicted. I merely suggested that the crimes were relatively trivial and were exaggerated out of all proportion by JM's extravagant prose. Exaggeration, imprecision, and innuendo: *that's* the problem, JM. JM writes: "A witch hunt? Give me a break. It was an article describing a law enforcement hunt for a fugitive, who had been arrested five times previously, convicted at least three times, and was known to be attacking the computers of the nation's cellular telephone companies." My review complained that JM throws around words such as "attack" without ever defining them in computer terms. He's still doing it here in his rebuttal. Kevin Mitnick never attacked any computer, by my understanding of the word. Re providing advice to the police, JM writes: "I was called by Kent Walker, the AUSA on the case during a meeting at the Well. He asked me if I thought Mitnick was dangerous. I responded that everything I knew about Mitnick had either been in Cyberpunk or my July 4 1994 article, ie. in the public. I repeated the story of one arrest in which Kevin ended up handcuffed in tears over the hood of the detective's car. I gave no other information, nor got any." Since we will never know the extent to which JM tried to help the FBI, I guess we'll just have to take his word for this. Re Mitnick's dangerousness, JM writes: "This is just not true. Kevin Mitnick was actively sharing system vulnerabilities with other people on the net. That is about the most damaging thing that could be done to the Internet community." Is JM aware that some highly respected security experts believe that sharing news of vulnerabilities is the best way to encourage better security? True, this is a controversial subject; but certainly the sharing of vulnerabilities is NOT "the most damaging thing that could be done to the Internet community." That's just another of those wildly exaggerated phrases that JM throws out for emotional effect. I can think of many politicians--and even a few journalists--who pose a far greater danger to the future of the net than Kevin Mitnick ever did. Re the petty gossip in _Takedown,_ JM writes: "The reason we described what happened at Toad Hall on Xmas was that the attacks first came from toad.com while Tsutomu and Julia were there. If we hadn't have been complete in our description someone would have charged us with a cover up. Please remember that David Bank, a San Jose Mercury reporter, spent several weeks pursuing the hypothesis that Tsutomu had attack his own computers." Uh-huh. And I suppose the rest of the sordid, relentlessly personal thread in _Takedown,_ describing every little nuance of Shimomura's campaign to steal someone's long-term girlfriend, was merely included so that no one could complain that the account was incomplete? Really! In my review, I complained about pejorative terms (such as "attack") that JM uses repeatedly. His response: "Perjorative?? Yikes! I mean we could go to the dictionary....." Well, I guess JM *should* go to the dictionary. If he does, he will find that pejorative is a perfectly good word which I spelled correctly. It's ironic that he seems unaware of it, since it so aptly describes his own journalistic technique. Re my assertion that all charges but one against Mitnick have been dropped, JM replies: "Wrong. Kevin Mitnick is in jail in Los Angeles facing charges from more than six United States Federal Districts. He may go on trial or he may plea bargain." I tried to contact Mitnick's attorney before I wrote my review. He did not return my calls. I based my statement on information from three other sources. If it's incorrect, obviously I stand corrected. As I understand it, though, those charges from other federal districts may not have been actually filed. Is "facing charges" another of those slightly misleading terms that makes the situation sound worse than it really is? Are the charges actual, or potential? Finally JM writes: "Myth and reality? I have been writing about Kevin Mitnick for a long time, since 1981 to be precise, but I didn't create a myth, he created his own story." In his own rebuttal, JM has already referred to the Mitnick story as a "good yarn." A yarn, of course, is a richly embroidered, sometimes fictionalized version of the truth. This is precisely what I believe he concocted, and it isn't my idea of decent journalism. ---- Lastly, a question which occurred to me after I wrote my original review. Around the same time that Kevin Mitnick broke into Tsutomo Shimomura's computer, he also broke into the system of Dan Farmer, another extremely well known security expert. What did Farmer do? He didn't get self-righteous about the "invasion of privacy." He didn't start ranting about the "extreme danger" posed by Mitnick. He certainly didn't take several weeks from his normal schedule and pursue a personal vendetta. Nor did he coauthor a book portraying Mitnick as a danger to the net. He presumably fixed the flaw that had allowed Mitnick to get in, and went on with his life. Would JM like to explain how Dan Farmer's perception of "the Mitnick threat" can be so different from Shimomura's? To the outside observer, it almost looks as if there wasn't a significant security threat, and Shimomura must have been motivated by wounded vanity, while John Markoff was motivated by his desire to tell a "good yarn" and make a lot of money. Am I wrong?

1 0

Phil Z getting through customs
by Brad Shantz 17 Dec '03

17 Dec '03

David Koontz wrote: > The question is, can Phil get through U.S. Customs at a point of entry > in a reasonable time, now? No. Just because he's off the hook as such doesn't mean that Customs will know about it. Customs officials often appear to me to be in their own little world...(personal opinion only.) I wasn't aware that Phil would have problems at customs anyway. If you answer the questions truthfully and are a US citizen, they really can't hold you back. Brad

2 1

Re: Zimmermann case is dropped.
by Brad Shantz 17 Dec '03

17 Dec '03

> Well, so far the feds haven't prosecuted "Jim Bidzos" for posting Crypto++ > to usenet. Anyway, both versions have been on utopia.hacktic.nl for months. I thought that it was determined to be a hoax. Someone "disguised" as Jim Bidzos posted it to USENET. Anyone have confirmation? Brad

2 1

SPO_oks
by John Young 17 Dec '03

17 Dec '03

1-12-96. WashP: "Agencies Debate Value of Being Out in the Cold. Spies Under 'Nonofficial Cover' Are Among Most Sensitive Operations." Today, as the roles and missions of American spying are being reviewed, one of the most sensitive debates in the U.S. intelligence community is whether to step up the overseas use of NOCs, not only by the CIA but also by the Pentagon's Defense Humint Service and the FBI, both of which also can work abroad under cover. Because they operate alone and outside embassies, NOCs need their own secure communications and a safe way to keep their highly classified files. 1-11-96. WashP: "Israeli Media Break Censorship Rules to Name New Security Service Head." The man who will take the reins of Israel's Shin Bet security service, Rear Adm. Ami Ayalon, was named today in Israeli news accounts for the first time in the history of the secretive organization. Israeli media have yet to name Ayalon's predecessor, Karmi Gilon, who was still referred to today as "Kaf." 1-11-96. FinTim: "Yeltsin's New Spy Master to Play by the Rules." Mr Trubnikov will be the first spymaster to work under new legislation which says the intelligence services must use "a combination of open and secret methods and tactics and in accordance with the principle of legality and respect for human rights and freedoms". Separately, Mr Yeltsin signed a decree limiting phone taps and the unauthorised collection of information on firms and individuals. But Tass, which reported the decree, gave no details of how it would work. SPO_oks

1 0

Next on "Geraldo": "Darkside Hackers in Love with their Trackers"
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 4:48 PM 1/12/96, Perry E. Metzger wrote: >PS I'm really not interested in reading large chunks of information on >John Gilmore's or Tsutomu Shimomura's sex lives anywhere at all, but >I'm sure there is SOME mailing list where it is relevant. Why don't >you go and post the garbage there, eh? On this one I have to agree with Perry. As I started to read the item someone posted (I have mercifully forgotten the poster) about TS in the upstairs-hot-tub-with-waterfalls and the Nepal-returned-starstruck lovers and their "committed" relationship, I felt I'd opened a manhole above a sewer. Or tuned in to "Sally Jesse Raphael." "Takedown" is one book I don't plan to even flip through at the bookstore. No offense intended to John, Tsutomo, Kevin, Julia, Kent, Katie, or John. --Tim May We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

[NOISE] Censorship as Theater: Media Coverage of the Internet
by Bill.Humphries＠msn.fullfeed.com 17 Dec '03

17 Dec '03

Censorship as Theater Several members of the list have complained of how the TV press portrays the Web and the USENET as central casting for pederasts, copperheads and narco-terrorists. I know, I've sent a couple of email messages to local TV news outlets complaining about the broad brush of tar they've been slinging. However, I don't think all the letters and education seminars will do a bit of good. Because TV is not suited to presenting detailed or sophisticated issues. TV is well-suited to telling exciting narratives full of thrills. Given that TV news must compete with Roseanne and Vanna (and Roseanne's writers do better narrative than Bosnian Serbs,) of course the Internet will be portrayed as a thrilling interzone of thugs (aryran nations), outlaws (Zimmerman), abominations (kiddieporn) and kooks (the EFF,) with a few good guys (Exon and Shimomura) from "High Noon". The whole thing will be presented as almost completely unrelated to the lives of the viewer (the fantasy element) except when it can be used melodramatically (cut to ur-bimbo gone good-nick and a blue binder full of GIFs, followed by mother hovering over child gravely asking for the 1st amendment to be torched for the good of the kiddies.) It's great theater, bad discourse. Of course, there are opportunists such as the Christian Coalition; Cold, Drug and Flu Warriors who exploit the theater and provide characters and plot points to inflence the show their way. Unfortunately, for all our nerdiness, many of us still think that civil discourse really exists. We think we can influence public debate through reasoned argument. We can't because reasoned argument isn't good TV. Does this mean the 'forces of light' (as John Leonard describes us anti-censorship types) should exploit the dominant means of persuasion and construct simple narratives that make our side look like the good guys? Turning anti-censorship into theater ignores the basic idea we're arguing for, and reduces us to another clade of marketing nerds. To carry the day, we have to take the arguement outside of the TV and other media influenced by TV. It means you have to talk to your neighbours, friends, and families and tell them why censorship is bad. Suggested Reading: Postman, Neil, _Amusing Ourselves to Death_, Balantine Paperback Leonard, John, _The Last Innocent White Man in America_, New Press, pp. 48-57 -- (c) 1996 by Bill Humphries Bill Humphries \/\/\/ bill.humphries(a)msn.fullfeed.com /\/\/\ Madison, WI, USA PGP Public Key Fingerprint = 84 05 17 9D B9 6E 2D FE A7 D1 E0 DC D0 96 63 FB

1 0

Mitnick #3: Markoff responds again to Platt
by Declan B. McCullagh 17 Dec '03

17 Dec '03

Topic 1119 [media]: Media Appearances of WELLperns VI, S.F.Bay Area Division #212 of 296: john markoff (johnm) Wed Jan 3 '96 (16:58) 256 lines <hidden> My response to Charles Platt's rebuttal..... JM Writes: "The darkside hacker label was created during the late 1980s by the Southern California press. It is a label that I noted, but I didn't create. However, he's right I don't regret using it. And also for the record, Kevin Mitnick used to drive around in Las Vegas with a stack of copies of Cyberpunk in the trunk of his car to give away to admirers. He is on record as saying the book is '20 percent inaccurate.'" >JM is confusing the issue. I never suggested he invented the "darkside >hacker" term. This is totally irrelevant. I said, very specifically, that >he was the first to *apply* this label to Mitnick. JM does not actually >deny this, and I believe it is true. Sorry, you're wrong. The "darkside hacker" label was used in the headlines of Southern California press coverage of Mitnick in 1987-8, in particular by John Johnson, an LA Times metro reporter. I was not the first one to use the term with respect to Mitnick. Re my description of his initial article about Mitnick for the NY Times, JM writes: "This is really inaccurate. Kevin Mitnick had become notorious nationally in the late 1980s as a result of his being arrested for attacks on Digital Equipment Computers. A menacing mug shot? It was the only photo available. No actual news? Not the way I remember it. The news was that he was being pursued by the FBI (three agents full time), the California DMV, US Marshalls, telco security, local police, etc. The further news was that the FBI had told cellular telephone companies that they believed the fugitive had stolen software from at least six cellular phone manufacturers. I thought then, and still think, this merited a story. I also think the story was a good yarn. Mitnick had succeeded in evading law enforcement for more than a year - again." >"Notorious" in what sense? This is another of those vague terms that JM >throws around without limiting or defining it. Mitnick may have been >"notorious" in hacker circles, but not in the eyes of the general public. >My point was, and is, that JM converted Mitnick from a relatively obscure >hacker into a public figure. JM tries to evade this point but cannot >specifically deny it. As for Mitnick being "actively pursued," I believe >this is a vast overstatement. As I understand it, law enforcement had >largely lost interest until JM's news item embarrassed them. Even after >that, according to JM's own book _Takedown,_ law enforcement had to be >prodded into taking action. They seemed not to share JM's perception of >Mitnick as a severe threat. They certainly didn't characterize him as one >of "America's most wanted." Since when is "notorious" a vague term? The dictionary def. of notorious is "generally known and talked of." Kevin Mitnick had national press attention in at least two cases (Los Angeles 1981 and Los Angeles 1987) and there were a number of articles in the Los Angeles Times, which the last time I checked was not a hacker quarterly, before Katie and I wrote about him in Cyberpunk. He was notorious. Charles is just plain wrong about the issue of pursuit: There was a US Marshalls search for him for a parole violation, a team of FBI agents in LA was detailed to finding Mitnick, telecommunications companies in Seattle and Southern California were pursuing him, California DMV had a special investigator looking for him. I could go on....Law enforcement did not have to be prodded into action. The first thing Tsutomu did when he was invited to the Well was meet with a US attorney and FBI agents who had an open case. In response to my statement that Kevin Mitnick has never been accused of intentionally damaging a computer, JM writes: "Wrong again. He was accused of doing more than $100,000 damage at US Leasing, a SF time sharing company in 1980. Their system was trashed by a group that Mitnick was a member of. After that, at various other times he cost companies tens of thousands of dollars trying to close the door on his attacks. >With all due respect, this is not fair or accurate journalism. Was Mitnick >*active* in the group that caused the alleged damage? Did he play a >personal role? Does JM know? If not, he's just slinging mud. This is a >smear and should not be presented as if it is a fact. On the other hand, >if there is evidence that Mitnick was indeed actively responsible, I will >gladly admit that I didn't know of this. Kevin was convicted in this case in the Spring of 1982. He spent 90 days in juvenile detention, he was given a year's probation. >As for the money that companies spent fixing the security weaknesses that >allowed Mitnick to gain access, it is grossly unfair and misleading for >JM to throw this into a paragraph discussing "intentional damage." This >is exactly the kind of deliberate blurring of different kinds of computer >misuse that I complained about in my review. I'm afraid that Charles has confused me here. I simply gave an example where intentional damage was done for which Kevin was convicted. I didn't say that he always damaged machines, I simply object to the portrayal of him as an innocent Regarding Mitnick's "most wanted" status, JM writes: "Sorry, but I didn't create the character, Kevin did. He has now been arrested six times in fifteen years. Each time, except for this last time, he was given a second chance to get his act together. He chose not too. It seems to me that he is an adult and makes choices. He chose to keep breaking in to computers. He knew what the penalty was. So what's the problem?" >Of course Mitnick is responsible for his actions. I never disputed this, >and never suggested he was innocent of the crimes for which he was >convicted. I merely suggested that the crimes were relatively trivial and >were exaggerated out of all proportion by JM's extravagant prose. >Exaggeration, imprecision, and innuendo: *that's* the problem, JM. In a passage above Charles accuses me of being vague, now he says that exaggeration, imprecision and innuendo are the problem. Boy, talk about being vague. But I guess we've descended to the nyah, nyah level.... 8) JM writes: "A witch hunt? Give me a break. It was an article describing a law enforcement hunt for a fugitive, who had been arrested five times previously, convicted at least three times, and was known to be attacking the computers of the nation's cellular telephone companies." >My review complained that JM throws around words such as "attack" without >ever defining them in computer terms. He's still doing it here in his >rebuttal. Kevin Mitnick never attacked any computer, by my understanding >of the word. Mitnick was persistent and frequently arrogant in his break-ins into dozens of different computers. Attack is not an exaggeration. Re Mitnick's dangerousness, JM writes: "This is just not true. Kevin Mitnick was actively sharing system vulnerabilities with other people on the net. That is about the most damaging thing that could be done to the Internet community." >Is JM aware that some highly respected security experts believe that >sharing news of vulnerabilities is the best way to encourage better >security? True, this is a controversial subject; but certainly the >sharing of vulnerabilities is NOT "the most damaging thing that could be >done to the Internet community." That's just another of those wildly >exaggerated phrases that JM throws out for emotional effect. I can think >of many politicians--and even a few journalists--who pose a far greater >danger to the future of the net than Kevin Mitnick ever did. Charles probably missed the followup discussion on this point, but I think there is a dramatic difference between distributing information publicly and sharing it in a clandestine fashion with a small gang of crackers the way Mitnick was doing it. I assume from his comments that Charles thinks that issues like Internet privacy and security are trivial and don't really matter very much. I disagree with him here. Re the petty gossip in _Takedown,_ JM writes: "The reason we described what happened at Toad Hall on Xmas was that the attacks first came from toad.com while Tsutomu and Julia were there. If we hadn't have been complete in our description someone would have charged us with a cover up. Please remember that David Bank, a San Jose Mercury reporter, spent several weeks pursuing the hypothesis that Tsutomu had attack his own computers." >Uh-huh. And I suppose the rest of the sordid, relentlessly personal thread >in _Takedown,_ describing every little nuance of Shimomura's campaign to >steal someone's long-term girlfriend, was merely included so that no one >could complain that the account was incomplete? Really! Sharon Fisher had a good response to the notion of girlfriend as property. Charles is being viciously innaccurate here. In my review, I complained about pejorative terms (such as "attack") that JM uses repeatedly. His response: "Perjorative?? Yikes! I mean we could go to the dictionary....." >Well, I guess JM *should* go to the dictionary. If he does, he will find >that pejorative is a perfectly good word which I spelled correctly. It's >ironic that he seems unaware of it, since it so aptly describes his >own journalistic technique. This is getting weird again. I still don't have any problem with using the word "attack" and would use it again. I think Charles has sort of run out of gas trying to mount a defense against something that is basicly indefensible. It's just not ok to read other people's mail, steal commercial software, leave trojan horses scattered around, and systematically alter system software. No matter how you dress it up, its criminal activity. Re my assertion that all charges but one against Mitnick have been dropped, JM replies: "Wrong. Kevin Mitnick is in jail in Los Angeles facing charges from more than six United States Federal Districts. He may go on trial or he may plea bargain." >I tried to contact Mitnick's attorney before I wrote my review. He did >not return my calls. I based my statement on information from three other >sources. If it's incorrect, obviously I stand corrected. As I understand >it, though, those charges from other federal districts may not have been >actually filed. Is "facing charges" another of those slightly misleading >terms that makes the situation sound worse than it really is? Are the >charges actual, or potential? Why didn't Charles think to give any of half a dozen US District Attorney's a call and chat with them about the charges that are being brought against Kevin Mitncik. For those who are curious there is a plea bargaining process going on now and Mitnick has a scheduled court date for January 29. Finally JM writes: "Myth and reality? I have been writing about Kevin Mitnick for a long time, since 1981 to be precise, but I didn't create a myth, he created his own story." >In his own rebuttal, JM has already referred to the Mitnick story as a >"good yarn." A yarn, of course, is a richly embroidered, sometimes >fictionalized version of the truth. This is precisely what I believe he >concocted, and it isn't my idea of decent journalism. Please Charles, which part is concocted? The part about Kevin being a criminal who was a fugitive and who was caught while he was breaking in to computers? >Would JM like to explain how Dan Farmer's perception of "the Mitnick >threat" can be so different from Shimomura's? To the outside observer, it >almost looks as if there wasn't a significant security threat, and >Shimomura must have been motivated by wounded vanity, while John Markoff >was motivated by his desire to tell a "good yarn" and make a lot of money. >Am I wrong? Yes you're wrong. I can't speak for Dan, but Tsutomu was invited by both the Well and Netcom to help them solve a persistent computer security problem. His advice to the Well was that they would never be secure unless the person who was attacking their computers was apprehended. The Well had no viable way to lock Kevin Mitnick out. Tsutomu's solution to actively pursue Mitnick was the only reasonable option, one which the Well management agreed with. There are several philosophies in the computer security world. One view is that rather than hiding in your shell it is necessary to track down offenders who have broken the law. I really don't see what's wrong with that approach. Do you Charles?

1 0

Novel use of Usenet and remailers to mailbomb from luzskru@cpcnet.com
by abostick＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Somebody, too clever for their own good by half, has come up with a novel way of using Usenet and anonymous remailers to perpetrate mailbombs. The M.O. is to post a message to the naked-lady newsgroups saying "get pics in your mailbox! send this message to this address!), giving the email address of a cypherpunk-style anonymous remailer and including a pgp-encrypted message block. Thousands of horny net geeks will send in the message; some of them will even follow instructions correctly so the remailer forwards the message to its intended target. The result is that the target will be mailbombed -- and the remailer operator can't stop the abuse by blocking the abuser's address, because it's coming from all over the net. There is *no* chance that this is legitimate. The remailer discards the original message header. There is no way for the recipient to know who sent the email message. Cypherpunks: is there any way to respond to, or prevent, this sort of attack short of actually shutting down the remailer? What comes to my mind is the remailer operator grepping for a character string of ASCII-armored cyphertext from the known attack message and throwing messages containing it into the bit-bucket. It is highly unlikely that this would appear in any message except the attack message. The problem with this is that it works only for a known attack message -- it can shut down an ongoing attack, but it can't prevent new ones. I am including the widely-crossposted attack message below, including headers. Alan Bostick | He played the king as if afraid someone else Seeking opportunity to | would play the ace. develop multimedia content. | John Mason Brown, drama critic Finger abostick(a)netcom.com for more info and PGP public key > Xref: netcom.com alt.sex:292849 alt.sex.wizards:44144 alt.sex.magazines:11634 alt.binaries.pictures.erotica:364153 alt.binaries.pictures.erotica.blondes:48686 alt.binaries.pictures.erotica.female:130066 alt.sex.movies:91249 alt.sex.pictures:98757 > Newsgroups: alt.sex,alt.sex.wizards,alt.sex.magazines,alt.binaries.pictures.erotica,alt.binaries.pictures.erotica.blondes,alt.binaries.pictures.erotica.female,alt.sex.movies,alt.sex.pictures > Path: netcom.com!ix.netcom.com!howland.reston.ans.net!news.sprintlink.net!nuclear.microserve.net!luzskru.cpcnet.com!www-39-190 > From: luzskru(a)cpcnet.com (luzskru) > Subject: Get Penthouse and Playboy pics on your mail box!! > Message-ID: <1b7cc$12a26.20(a)luzskru.cpcnet.com> > Date: Thu, 11 Jan 1996 18:10:37 GMT > Organization: http://www.cpcnet.com/~luzskru/home.htm > X-Newsreader: News Xpress Version 1.0 Beta #4 > Lines: 119 > > Follow these instructions. > 1) paste everything between the -------- into the body of your message. Be > sure to leave the first line blank and include everything including the :: > 2) Send the message to homer(a)rahul.net > 3) as the subject, specify playboy or penthouse and the month. > 4) if you don't get the file within a few hours, then send it again and be > sure that you didn't do something wrong. Here is the message: > > --------------------------------------------------------- > > :: > Encrypted: pgp > > -----BEGIN PGP MESSAGE----- > Version: 2.6.2i > > hIwDuhnKCI5qH1EBBACCHVVFVfrX6fQ9QzUFVe8aCb+2g1M71Utg1ZJKGrq1S16v > 0q/H8RvBa4bpg1RCx6IjhScaHqW66uubAUY1GOlzvWiMW4xw+3kEcO7lep8crvH0 > +/YXe6S2jlIUjMW7FncoFSrBIumrPXygkXHtkTjStvJiBdXyXlmgahyl9nlaNKYA > ABGCfXDZs31NP39/YeJmyP7M+edjKsKpTs8A9tW58Fm45Nlr/wStSsRsteTy/lQu > +O5Hft36bsci8B8Y4gsSLlZ71a1GLvBhSOx5qfXIOStAaLZobfbPYd+WWJMiIXcv > dGhl6SOoyUo5xc6ty7/Z4/vvxtOtndJMz7acsEk2pFQX8WNpBZRg+WRBOlTAKPDW > vQhnowKeIna8wq8FfOJFQzdM3uxgYBeoqRc6dRGlB8+V+aOicAtZHdRgTjH4hgAk > QF8W1lXDYc6OJZn3cR4WcoCYQnrGYLyFCEF/eU4umrFaCjs2HAql/ygBoK1AAloi > BE2HSeKI+gh6DXwbR3Ub9FWkMGr8t3S2AHe4FzbJlIrnJEvSQUcihro+aCG/wGr4 > 0KyvfZuuBgKX7XiSEnZeoO+UcF9yBlnvy7FhNT7skmjZ79JH0aCnSgSE0u9Ta/Dw > WGQT8nIz7Ex7T4sObGtKgSk2Ari86a+qM4McTBpelKmXIQLoivyuEW1r0OsRUJdA > 1iwk2ILNL2Sn6/cHQaZKnGCSasWqxlM3cDcfit6M2y/3Jryj4fh29B2rYY+A8fP1 > VU8uwFZ5whOBw7TcoS2dAoqOBOEYKz3pItCAxTMZ8UN1qu0EGXuBxSLLbNQtRShN > oGddR2jlv43Js07rumdMGUazTiAUUY27Pb1w3V9dcvL3YALFjtEB2Keg9A4foyaf > o1Krbxg/dMTVVcXuneP0ayhg3QGRlks5Gr+jGhTYUfrn9WetyI9nXeqzpvcwtXbc > GkxHpQboQNeWiRkhkbmnBvbT/IseehBcC7NsyP9P6K/XxY02ebimFo51xpxM4Bsy > MjMo1N/e9mvPuh1mzpbQwzuba9udM5Np2E9h7PKXO9F0PbMiLW1LMZ7lqfh4FHQO > vhV/FwjkhTtCc/+T4ZNgpYcJ7PwM9s8JKxNWB73AFkTKBx4gQNDnhHNty77YunYU > Rj8vUgiSRb+1hPejecxcfNAr5g3TAM/mJuVLg5njCkr3o2fuL4wGF5lz/GZ2l3sE > sOs+BDQhZcefX4MOq7Ys60rAMvNizzQUo4H5aIdYzT4MYfw+4xPjOLcaHvzAYU7M > WbeFoLdm7nC+//3ah5e1Bkk6POKUb6SnCJnUa/JyLV7+2PLo+YkwnokkSrB61bUf > 7blbc91VSjaQ+wsUwBoVHu2RRg9QCtxTQKDilKG3oYISnnA1LaOhMfFVm1XKm7Oe > 540eeJu7MGT+kLKjLe+UF1TDrZG7r9v/WK2SgTbliTvDzhj0dBhJ1MoDZxhx+h3m > GM/kyqyV8YcTpBC8ePmzYE+j8gMTakihRslWPZn2SxT18leerbyMsyplyXdAowdW > HXhTNuoolLJQPFpu9gK4kbr7U6KVdHPbUDDw+0km6pcJ8qWR4kCUD3Y8aMNfzggh > VxuCqbdJdfYL8YzS3Z0PknzorgdvuWR/BXAkf/Jh9+zTNRgLu5TnueA6Ae68uIqp > VDU0cetrD7ys5Wb+rq6Tg1WRgkpyg2iWdxdFpVb3w9zvdtV4MvfbVG8ckY1qYrAY > wZgJOdWHtCW37UWXXgHWTrifsjNLeKVSSSrOIDzsxbI0wuwTadFRG/4Ci7A0K/C8 > 2lGs+gluHw6iTV0uSwxyZXr3JQR7R1VH4zb3sjDDd5X6YmR2OwThT934G49W4Afa > 3F1gv4M5/9JVKTdRJGYPfYwDTbtfPHMWgj33rtsBbILBZ4HBJKoBDCygJfZzO6Jm > fbUOqzB9+rPQLbD0DcxOoUyVtynWr9xG2M/WbvzjN+y28/YAQLrNvkppxA4psjNQ > j/jS3od7HY1BWRvBGOgybrnovK9+ZbphLHHZzx+WcuG4ngtYriETlr5ZhlznT6Hv > 5+vCJjIZHwp7x+sscxbYsSgyrtzi+nam1kiljLowN+avbaA/Xt3K7zymMAVbFq3T > cM6Q4Gq07wAZkbmu69tCR41sdha7hWF9NM9DHAiOgdDknxljgKyHBcdKDOSsyzsU > Ow9fdjMlna45i0AoZ4YsFfGC8SFhnMrLGAu1f6RVlWIpt/avWtEdJ3VYCe7ZwYw8 > wtKHLMS3pSVrMNx3OuiQFykMs/TpBOGIdtR1AWqSRroE/SlxRtJWQjNt1yX24plZ > +MMASvIbi8wJPrxwCOiNI5EBg+3UFdcxnOvdt6Da0ElO22ucr9qiu2E246QCSyDT > j9jWAyRdxlevI1+O1OPqMO6LOGHL9pLw6FdsEKmpT49kWXYCIrxvSO25sq1ilIaH > 0IiTs0FkWUxMaiwS8owhX0KVNGPJgl0RdAzsTIMf28AjN16Ex1d/Z7tjUy3AKgxq > 7t6yaaot9sCIV2u5JD4DPnhG9pQ0gVPUTHbs/ImNA634Q/QK+mJTcFI+yweIaLCP > Rk5kECvk9UBS1wLUSy//EotQ7XMJOq0/Vadwh9vMGE36yJcgB9kUAAl7HMvxLZsC > ZgOiMqSNr5O8H0ulj1hqqaklR8xj1Dln9AVWsrh3gJP7NUiMrh0jnTWaHKGATDZ1 > 5wWiRTB5YqteRn7TW1R6+v/u9SHVriiQIvoL0ZtnZZzgZAsaJcGThPgWuyciB7ff > HIqsjtul3EFr9Fm2rhTiVAnW7E6HFq2buLrQixImImDyygtCI5/LXsQvsANVjg1m > qMZdBdOkc6Da6w0BXIgb14T1+O0uxnxAAxCDp93xmv/tsthW2mtYhESECTV93ph1 > pk+JegBEN37ivX5054tIVJfD+aVkDXXnN2KM/GhqzOdGJEhZHcWFqQ7RNCiTk9n5 > T/hF1FNcrf1mBIuM8U+tpyslhU4tOuHj4MTrbNA+zVNUHI0yhekLW89WwoIsDGCV > boA6B5qirvM+PZOniXyzFqUaEGGAEkIizt9UFvaJ50sn9OcVxTeirHQPrkjVPGWh > MXk8eBNzDmnO+/kWFLc9oOLmUiOmQDhboOtiHYMEaGNRxWw4i82XJi1fULSuj0s5 > YjdSnH+He5oawpnnR3CzkVOrJkXxJTEaKUhe0i0lrkYi5YTnsCkpz/dHC4n6dEyT > id1//eRfWqianNmyzbzkY89kUJu7XUn0iZPQhJgLCkx7JFLK2W/g4krgMkmQZc/L > C0gxWH5ZCJvutuZrDtFXFk9z3oxSEDyaxqSjVn5lxjHc28jrHLLDC0FZWNklrOWl > dK9Hjhh8aBWwsjcjKs71ibRs05Fmg6dxgR0K6UZm872WGgHUEwR1co4B9ArP1qVd > U64v3Izm8ojVM4tgFx3z4QFyitoaNhkdlf+Q+rdUaIgoQHLl+9orISFZrItLwCKn > gXtPrHwNRVcHs6hM9mxNjONufRhRMZUBpaeHhrNLMV9Coy9LROHFYbr0mT8+oyIh > 7PrAlDQE6nuaC11NVlkh22bCRyR1ExsJSQrbrsvsFePm3JMxMEcVSXSyxNZqLTkA > ueJtoW++RybT8VFe5w7DrPvKRVK5c23Ko081pBFfK2pWW5gYmnO61I1K+UOdZDET > uvoXfPQ66aB4LsEo7iTwc7tcko2SMbjBgIp1rXKSCHpJkH1WBdKcALZnDTnvPwp2 > mjpQlfy/OvHssjE+dNiWobHE8ymSzw1sOMAWNlEUCWNw0mGicO2XsnuG9AcN35oX > b5qpmqCNn83r9B5a+d5jKlJzHcIFSjHryrudHRgUY+VilxsoIzPKKpkhcqKrNA+N > GAl/tWA+oYBp/vhRQv0bqxMIYBSdrUKN52SNPIXmnDzAociBobnpcnr8zXEk7ITo > rQJObrYbMOh1meqDcNLt0+6gKhFwiGGQmuxAakR6NgfE9SKFciQXE1bDCF3/YaAA > 5V8YKA4Oe1z4AA5eRQiWJ7A1FbfJtxcl2ABcseyx2zHCPZv0a2zulqgyThhdMLNa > 6gbxg1nr2W6QlbYH43gU3eJrvunDBDTGpWBKwSBAnO15Pscia0CLWJ2P/j4hLyyU > 1nnswmdGaxluv/sSwwAR8OEWfj/lkQXrm1RPKyoFTifeFitmIOGtal2T3pf/NuR3 > lXE1u+z3T0LZPrZ7n3/k4xyKaD2H5vhtV8Dj+UhHbyqlxYE+E0s1JGhhSE8rbydx > +uFCk7MiQ4Y4QzUB+IomQDjK1U1FLKyTkFF6LihKXWbufvvDiGo8k61KsO5ebUAW > gAV9t0wGBD5oQHBa+92qyrkmK/5QIzXbUSRUpHpmM4geP6wiS/wRock4DT5Y8RFE > e8tlU365TbaYD+n1B87IZvggd6+i+tgszK6U7EslePOVOq+eJkgHtEHwqXMsC9BY > +mMjGK9IgDSl8o3eYR2aCC2ZPRc7FXCvkQyGoBvmbjKZC30JwrfRSnbhz8JeLO/2 > 9yBHGS+YDmLkzV2yr8d8u5AD0NI3bhDYvH6T0P3PK6rV27ITi7Pp6rzWRJDag2MO > cObv4YfGbopQ4j02NNy7KBq2xlcApPFvudCdHcVBdeKjaRBWvPei94Oy7/B8xazN > jZDcMuOogNEaE+zGbjSlnhp4P1lHILY7NcgoFzgF9bhb46k6RZRXnt/mlzYpNMAw > o3Ch6yJJNIQQx8c0Kka11ZPD4qVUCw8M85cFPVqhTOHQyao6q12exbT7WsZExzQn > AnOjHffkChpECDyhGcFlRkS20t9kgTxoaD/1z22i8jFZOX3BoHaRSJM0FxC620JE > cYxm7w3V1z9k1e4SfriI1rbLFZywYHyCglnV45pe4wkzRvw7OGdwtHYx56351m5j > GX5Ls+J1KHrZQPH3Gb6iiZEXT/Hndhm/JRsQqxi6mgf3/zBwZyqnC8nenRjIwKhN > x8eDG3jldBEFAjg1je4BQ1KoSKtqrRNPwg2FRW9D9ozGIxLn9cgjLyRWBwH3+J/P > v6OLiqpcufeTr3nABb58y51qpiXT65lpFLnsw5Wj9vX2nkneDB88l54ZmrH6e6Z1 > pSloilRAhzdWoXksUCSdxNXL7cH0ps0yGF9GWmUP3BaFv0q2YuV4Cfq3RF6zXO4e > /ANPVO3j/pl4rk8cmKOJHWPBMgV5pkdUt29I/dcCSI/z9yZlYJZ7PSac0Tn3kyg7 > 23/IYhTSPx4JIq+VqT4sgOIdPjxBpJqKX7BMGQqecynonS+isIwgbSP/J2cNUhp0 > 0N7VDfei4kVjU4sJaOdNi1zO4/nLk+rfZiyR1WP3o59b35JoKq3Vdln2Jubt7PMW > B6Ilmu6xVZj2QfhL1zGvY2C55uBcuqiIpKvmdgR8WAsvmtSPxSLE2ScanXUD1At0 > 2ej4+gr7K16pWLwLIcQ40B4BurxsZI+80kfUnx/LZjRLzc9Cdtw6b1VVhPp3qn9g > yv352SccnDbP3yzcprJuSWQbHd9BeGcoHJsy5rKtdS5LiAuRGZ02EJ3RAJAwUMwK > k430fYjY3ZX6giwKkpHunB9z59PQiGtI8s4OA0sEK+MuHWp8htbBP5kJddsP4k1G > VFUQDcvsvjWQoJnCVEbvE7kPYf00AeRLGm7vM7TQTdDkoRfCii35G5wYS1dVY3nc > luEu3b8aNwjXwH9Bh0aLXQIQVjvdpvr0/zUJ5hAi/YyZnYVqIsWkbWo8/i8Pw9jb > BdElQ9yU9RIYDPrqBSKi5gLoOts7YYnZbWLAKWylm5Hbn6imJ/qbhPi7Buy0h5dA > S/68ux55oW7FXc+rEfpjf0zBsrvxmT0SDu40S3l25SMUEO4A8oCB2sJgXafWE2Ea > RssohLtRar4x8VCFpcGPbNio2muTT9VwaQG9KHygOfH3i69VcuC6db18uah0b80O > WrXMeqK5M88JwjfJKe36kqPvLZD5llPeM7Sqj0wxUaKmnPW6ClXHm+mYeP+21BIY > AOtDh1Lxg3R+rob8J/OtA3U9TtHT4aSnafRNrxDT5sm3PKx8ajnR3fe0jLo4mgdi > Z1sLLK1wh9j21R4hy6XvrIOFCDqpbSR6KDCerYJyo371kd1mkpJKwdlsBIl5G4bN > Q6nbNKsVWpHTdF24zHNh+GZgiY4Q98HcSp2PeFa4vetVlYmV48Uf8tncEukox0pK > XIpWrirDXI+90zyVAwhKtjbNlC2a > =TKgw > -----END PGP MESSAGE----- > > ------------------------------------------------------------------------------ > Include everthing between the ------------------------------- and you will get > the pictures in your mail box. > > -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQB1AwUBMPayLeVevBgtmhnpAQGKxgL9H4WsKLnIJAXGm5s1XPwWkRKsTHj2Ewhm sPVDYt697wflpqXy69oL4k8Jk/GUswuPcbO6/3zyeUGetm1hkVxrVCJSlW5sapQV tIT2MSZi1uz3Wwfn52uajm0d7ebF9bx3 =yoZx -----END PGP SIGNATURE-----

8 11

PRZ "battle lost"
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

regarding PRZ, SP wrote earlier that "we have gained nothing--the US can still harass people over cryptographic algorithms". that's true, but that's a side effect of our legal system, not of our secret government bureacracy (the NSA etc). it has always been the case that someone with lots of money, time, and lawyers can harass someone else in the courts without any leg to stand on. the government does not have a monopoly on this capability, and in fact they can arguably be shown to be a minor player when it comes to what happens every day in the business world. you can consume someone else's time and money significantly, and scare them into submission, without ever even going to trial, through pre-trial hearings and all that kind of thing. is there an alternative? yes, but it involves fewer lawyers than are in the US today. however I don't see lawyers as the problem, but a symptom of something deeper: the tendency of people to resort to legal action to settle even trivial disputes. I for example am aware of a case where someone threatened to sue a well-known kook on the internet for "libel" for material that was clearly satire, and the supposed "libel" was committed--AGAINST A PSEUDONYM!! so to me all the lawyers are not the problem, but the attitude in our society that if you have been offended in some way, you should use the legal system to get "justice". a rather immature kind of mentality, of course, but who am I to criticize an infant for being an infant? I suppose its partly my mistake if I run into an adult that is actually an infant and I don't realize it at first.

1 0

Boston talk on offshore banks
by Rich Salz 17 Dec '03

17 Dec '03

I heard an ad on the radio for a free seminar on how to protect your assets using off-shore banks. I forget who the speaker is, I think they're with the English-Irish bank in Austria, or something like that. The thrust was to save assets for when you retire and Social Security isn't there for you. I'm posting this since off-shore banking touches on privacy issues and comes up here now and then. Two dates, Jan 17 (Newton, MA) or Jan 18 (Burlington, MA). Call 617 663 3299 for more info.

3 2

Re: Zimmermann case is dropped.
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

I wrote: > ...and I'm sure they'll be watching VERY closely to see how >version 3.0 will be distributed.... John Young wrote: >AUSA William Keane in today's WSJ: > > "This decision shouldn't be interpreted as meaning > anything. I caution people against concluding the > Internet is now free for export." Alex Strasheim wrote: >The government's policy doesn't prevent crypto from spreading around the >world, but it does discourage a lot of people from distributing code >they've written or modified. That's the point of the policy, and from >their point of view it's probably a big success. My sentiments <expanded upon> exactly. I tend to disbelieve in coincidences. Rather, I found the timing of dropping the investigation of PRZ and the anticipated release of version 3.0 extremely interesting. One might conclude that their attitude was: "Let's throw this fish back and aim for a 'keeper'.

1 0

Re: Zimmermann case is dropped.
by koontz＠MasPar.COM 17 Dec '03

17 Dec '03

tcmay(a)got.net wrote: >Yes, I think it likely that another case will be filed, a case the >government senses is more winnable. In many ways, what Phil and/or some of >his friends may or may not have done was too "stale." None of the Four >Horsemen were involved directly, and Phil's case generated publicity that >tended to make him a hero, not an Enemy of the People. The question is, can Phil get through U.S. Customs at a point of entry in a reasonable time, now?

1 0

Re: Shimomura on TV?
by Douglas F. Elznic 17 Dec '03

17 Dec '03

At 07:38 PM 1/11/96 -0500, hallam(a)w3.org wrote: > >>Has anyone heard anything else about this? I am getting real sick of the >>media's portrayal of the internet. They never say anything good about it. > >At the last World Wide Web consortium meeting I said that the media were >pumping up the bubble and their favourite game is to see if they can >destroy what they have the arrogance to imagine they created. > >That is why we have to replace the press. Consider this in the next >election voters on the Internet will be able to read the press releases >of the candidates without the press filtering them. There is the potential >for the internet citizens to participate in shaping the political agenda >- another role the press likes to usurp for itself. > >I recently held a workshop on political use of the Web which was attended >by Republican and Democrat party workers and political activists from >6 other countries. One thing that suprized me was the consensus amongst the >politicians that the differences between them were smaller than their >differences with the press. > >To take one example. A collumnist in the New York Times recently received >much coverage for calling the First Lady "a congenital liar". Yet little >mention is made of the fact that said collumnist worked for both Nixon and >Spiro Agnew and has never condemned either for their actions. > > > Phill > > It is disgusting to me. I would really like to do something about it. I use to have a sig file(s) that said: "The revolution will not be televised but the proceeedings will be available oonline." During the french revolution someone said "Look their is a revolt" And another replied "No, a revolution." Or something to that affect. But anyway I say we as a community do something. Look around the potential is here for something big e.g. C2.org -- ==================Douglas Elznic=================== delznic(a)storm.net http://www.vcomm.net/~delznic/ (315)682-5489 (315)682-1647 4877 Firethorn Circle Manlius, NY 13104 "Challenge the system, question the rules." =================================================== PGP key available: http://www.vcomm.net/~delznic/pgpkey.asc PGP Fingerprint: 68 6F 89 F6 F0 58 AE 22 14 8A 31 2A E5 5C FD A5 ===================================================

1 0

Re: PRZ grand jury - how about free accts for them...
by liberty＠gate.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- patrick finerty wrote: <snips> >it would be nice if someone (c2??) would offer dialup >access for any members of the grand jury who wanted it. > and Professor Froomkin responded: >sounds like jury tampering to me. a good way to go to jail quickly. > >A. Michael Froomkin | +1 (305) 284-4285; +1 (305) 284-6506 (fax) >Associate Professor of Law | >U. Miami School of Law | froomkin(a)law.miami.edu >P.O. Box 248087 | http://www.law.miami.edu/~froomkin >Coral Gables, FL 33124 USA | It's warm here. I agree with the Professor (although as a native Floridian, I dispute his .sig about it being warm here!:)) but AFAIK, and unless there are court orders to the contrary, members of the jury may speak freely *after* dismissal from grand jury duty. Our problem is finding them (which shouldn't be *too* hard, given the technology we have). IMO, after the jury is dismissed we must _not_ contact them directly, but rather make it clear that we would be happy if they were to contact us. Hopefully, one of our journalist-types could manage this without yet-another article giving out the <cypherpunks(a)toad.com> address. Presumably, grand-jurors who have carefully followed the court's instructions would have a bit of catch-up reading on the subject to do, thus giving us an opportunity for indirect contact with them. I don't think that this would be illegal, but best to check with a real-lawyer, and perhaps research the issue a bit, since PRZ's case (supposedly) has "national security" overtones which could possibly cause a court to want to hush things. JMR -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Freedom isn't Freeh. iQCVAwUBMPb+uG1lp8bpvW01AQHB4wP+MMFkH9sWknEksRmEDEYQTldnFIvZGoH0 R4oQeQiZhUOj9TNNpgLSldVHN0KqKtbs0oUS5n5tT+eNDgm7vguZVik/3pWvhQwQ ERUi/Bp2E0l7DPZ/lploUdqqmxJmSwO4MFaJtoHMiabH20S0cmcqDqkwiV+LCQkv u/CaLagzGi4= =E5Wl -----END PGP SIGNATURE-----

1 0