December 2003 - cypherpunks-legacy

Bay Area Cypherpunks Meeting Saturday 9/14, 12-6PDT, Stanford
by Bill Stewart 17 Dec '03

17 Dec '03

The monthly Bay Area Cypherpunks Meeting will be held Saturday, September 14th, at the picnic tables outside Tressider Hall at Stanford University. Lunch and general hanging out begin at 12:00, Program begins at 1:00. The coffee shop at Tressider will be open, though the main cafeteria won't be. Some items on the agenda include John Gilmore's SWAN project, Encrypting 5% of the net by Christmas Highlights of Crypto '96 meeting in Santa Barbara Bagels and bagel paraphrenalia The remailer crisis - anon.penet.fi, creative new spammer attacks Censorship Firewalls for SG, CN, DE, etc. - designing workarounds The Bernstein Lawsuit - court date is Friday Sept. 20 Bring show&tell items. You can find a map of the Stanford campus on the web at http://www.stanford.edu/home/visitors/campus-map.html To confuse Stanford alumni, the map has been realigned with the North end up, so visitors can use it. From Campus Drive East, turn North on Mayfield Ave, turn right on Lagunita Dr, and park in the lot. Walk north to Tressider, and the tables are on the west=left side. Look for the crowd of drug smugglers, money launderers, and Suspicious Persons. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # <A HREF="http://idiom.com/~wcs"> # You can get PGP software outside the US at ftp.ox.ac.uk/pub/crypto

1 0

10 minute delay considered inconsequential
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 4:15 AM 9/12/96, Adamsc wrote: >I've always wondered if the makers of mailer software couldn't include a delay >option, so that, say, a message might be held for 10 minutes and then sent. >Imagine how many of the "Sorry about x; I meant y" posts we'd never see. I expect there would be little effect. I suspect most of us write articles, send them out, and only notice the mistakes, typos, whatever when they are pointed out. (Very few people reread their posts prior to seeing them on the list an hour or two later, is my strong hunch. A delay of 10 minutes would not inspire many to read and reread their posts...most likely they'd just move on to other articles, other posts, and the 10 minute delay would be utterly inconsequential.) --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

RE: robert and hipcirme web sight
by !.!..............................# 17 Dec '03

17 Dec '03

>It's obvious that this guy's true passion is fractals and raytracing. >He threw in some bomb-making stuff, but he scanned it out of a book and >probably never tried it. Compared to the rest of the site, it looks like >an afterthought. Someone who was really interested in chemistry would >have taken the time to retype the info and add their own comments. He >had a reason to have some "anarchist" info on there but he's not really >interested in it. So basically this guy is a mathematician/artist trying >to pretend he's an anarchist. If his true passion is fractals and raytracing, then why would he expend energy things other than fractals and raytracing. He may be an anarchict but wish to invest his time in fractals and raytracing rather than in explaining anarchy. >Same goes for the remailers. He claims he likes remailers and anonymity, >but he's lying. Anyone who really liked remailers/anonymity/privacy would >have pages and pages about how to use remailers, and why privacy is a good >thing. He has a reason he needs to be anonymous, but it's not because >he supports privacy. He publishes a PGP key, because he wants to pretend >he's an anarchist, and Louis Freeh told him that all evil terrorist >organizations use PGP. But he doesn't like PGP, he doesn't advocate PGP, >and he doesn't tell you where to get PGP. If his true passion were re-mailers and anonymity then he would spend pages and pages writing about them rather than just admitting to supporting them. .00010000.

1 0

Re: Erasing Disks
by frantz＠netcom.com 17 Dec '03

17 Dec '03

I was asked of an outline of Peter Gutmann's paper, "Secure Deletion of Data from Magnetic and Solid-State Memory" in The Sixth USENIX Security Symposium Proceedings in private mail. Since I think the question is of general interest I am posting the answer and Bccing the original questioner. The paper starts with the comment that most secure data destruction guides are classified. There is the suspicion that the unclassified ones do not cover the newer recording materials and techniques, and will not protect you against government attackers. The analysis techniques for disks examined were Magnetic Force Microscopy (MFM) and its close cousin, Magnetic Force Scanning Tunneling Microscopy (STM). "It is possible to build a reasonably capable SPM for about US$1400, using a PC as a controller." (See http://www.skypoint.com/~members/jrice/STMWebPage.html) This cost is conceivably within the range of a high school student. Peter discusses the way that data can be recovered from under new data (due to the difference in the magnetic domains depending on whether the bits were the same or different), and beside new data due to positioning errors of the head. When trying to develop a secure erasure technique, you need to know the encoding technique used on the disk. (e.g. FM, MFM, RLL, PRML etc.) He recommends a 35 pass erasure scheme as follows: 1-4 Random 5 0x55 6 0xAA 7 0x924924 8 0x492492 9 0x249249 10 0x00 11 0x11 12 0x22 13 0x33 14 0x44 15 0x55 16 0x66 17 0x77 18 0x88 19 0x99 20 0xAA 21 0xBB 22 0xCC 23 0xDD 24 0xEE 25 0xFF 26 0x924924 27 0x492492 28 0x249249 29 0x6DB6DB 30 0xB6DB6D 31 0xDB6DB6 32-35 Random He recommends using cryptographically random numbers and randomly permuting the deterministic passes to further confuse attackers. He warns about disabling any disk caches which may be present, and discusses the problems of erasing data on now-bad sectors. He points out that data which has been left for a long time is harder to erase than recently written data. He mentions that the most powerful commercially available deguassers aren't powerful enough to erase modern disks or DAT tapes. (N.B. Deguassing a disk will also erase the factory-written control tracks, making the disk useless.) He notes that ECC may make destruction of data more difficult. He recommends burning floppy disks. He also discusses recovering data from DRAM and SRAM devices. He mentions that data which has been stored in DRAM for 10 minutes will be detectable after power is removed. He recommends that sensitive data (such as crypto keys) have their bits flipped every second or so. This technique has the beneficial side effect that the page remains recently used and is less likely to be paged out.\ I quote from his conclusion, "Data overwritten once or twice may be recovered by subtracting what is expected to be read from a storage location from what is actually read. Data which is overwritten an arbitrarily large number of times can still be recovered provided that the new data isn't written to the same location as the original data (for magnetic media), or that the recovery attempt is carried out fairly soon after the new data was written (for RAM). For this reason it is effectively impossible to sanitize storage locations by simple overwriting them, no matter how many overwrite passes are made or what data patterns are written. However by using the relatively simple methods presented in this paper the task of an attacker can be made significantly more difficult, if no prohibitively expensive." ------------------------------------------------------------------------- Bill Frantz | "Lone Star" - My personal | Periwinkle -- Consulting (408)356-8506 | choice for best movie of | 16345 Englewood Ave. frantz(a)netcom.com | 1996 | Los Gatos, CA 95032, USA

1 0

An old _Discover_ article explaining RSA
by scrappo.reverb＠juno.com 17 Dec '03

17 Dec '03

I had found this article in an issue of Discover I've had for a few years. It is a comic strip-type article by Larry Gonick article explaining, in Layman's terms, the very basics of RSA. This article was printed in the April 1992 issue of Discover magazine (some liberties taken regarding pictures, etc.). Box1:Prime Time featuring SEYMOUR Cloak-and-Dagger Mathematician! (sh!) Box2:PRIME NUMBERS-numbers that can't be broken into a product of smaller factors- have always been one of the most amusing and USELESS topics in mathematics. Box3:Then why are Banks, Businesses, Mathematicians, and Government SPY AGENCIES fighting over prime numbers? (STOP RIGHT THERE!) Box4:It has to do with CRYPTOGRAPHY-secret codes. (The patriotic thing to do would be NOT to read one more word!) Box5:In the computer age, cryptography is MATHEMATICAL: Inside the computer, every MESSAGE is a string of ONES and ZEROES: a number, in other words. (PLEASE!!!) Box6:ENCRYPTING a message means scrambling this number, using a reversible formula based on a secret number or numbers called the KEY. message-->key-->cyphertext DECRYPTING the cyphertext is done by applying the key in reverse. Box7:It would seem that both the sender and receiver need to know- and conceal-the key, but in the 1970's, WHITFIELD DIFFIE and MARTIN HELLMAN showed a way to MAKE KEYS PUBLIC! (Hippy-Diffie!) Box8:Knowing how to SCRAMBLE, said Diffie, is not the same as knowing how to UNSCRAMBLE. Consider the egg!!! Box9:Suppose a code had TWO KEYS, a scrambler and an UNSCRAMBLER... and suppose it was IMPOSSIBLE to compute one key from the other-in the sense that no computer could do it in less than the lifetime of the UNIVERSE??? (crank crank crank) Box10:You'd have an UNBREAKABLE CODE! (Wait... Almost got it...) Box11:It works like this: Everyone owns a unique pair of keys. One remains private. But the other, public key is listed in a directory. To send me a message, you look up my public key and use it to scramble the message. My private key is the only way to unlock the message. Result:total secrecy and privacy!! Box12:Diffie's idea soon became a reality, as three guys at M.I.T. created a public-key algorithm known as RSA, from their initials. (picture)Rivest (picture)Shamir (picture)Adleman Box13:RSA's unbreakability depends on the "impossibility" of FACTORING large numbers. (15? that's 3 x 5! Easy!) (3,447,981,101,346,271,113,552,476,003,201, 119,181,244,551,900,123,549,822,344,722,436,001? um..) Box14:It's not hard to find two large PRIME NUMBERS P and Q. But if I hand you their PRODUCT, PQ, your supercomputer will never find P and Q again. (SOB!) Box15:Under RSA, each user gets a 160 digit number, N, which is the product of two large primes, P and Q. Box16:The number N is made public, while P and Q remain secret. A simple formula completes the encryption, which can't be cracked without FACTORING! (ngh) Box17:The National Security Agency didn't like this! The spy bureau wants the ability to crack any code! (Your assignment Seymour: FACTOR FASTER!!) Box18:But spies aren't the only ones who need cryptography! Anyone who transmits ELECTRONIC DATA wants to secure the information's integrity. (Why? What? This is an OPEN SOCIETY!) Box19:Unbreakable public-key code would effectively Protect money transfers from tampering Shield sensitive business data from the competition Immunize software against viruses (Allow us to gossip securely by E-Mail!) Box20:So-After years of resisting Public-Key systems, the government in 1991 finally endorsed one as a new NATIONAL STANDARD. (I WAS WRONG! EMBRACE ME!) Box21:Unlike RSA, however, the government's DSA (Digital Signature Algorithm) depends on a single, government-issue PRIME NUMBER. (Take a P! Not any P!) Box22:Within months, mathematicians had shown how this could give the government, and the government alone, the ability to BREAK the code-and so the argument continues... (Trust, Where is the trust??)

1 0

jury nullification/selection
by Greg Broiles 17 Dec '03

17 Dec '03

Sorry if I was too terse earlier. I hadn't intended to start a big FIJA dustup. I think that government sleaziness is not only useful in a true nullification argument ("he's guilty but you should acquit anyway") but where it reflects on the credibility of testimony and the prosecution's case in general. It's easy to imagine a prosecution which rests on the testimony of people who lie every day (criminally involved informants, jailhouse informants, and undercover cops) and/or real evidence which was gained through the use of subterfuge and trickery (like wiretap/body wire evidence). The idea is to make the government look sleazier and trickier than the defendant(s) and the defense witnesses. If the government's evidence ends up being tainted directly or indirectly by lying, trickery, etc., then the defense can argue "Hey. You can't trust anyone who got up on that stand and talked to you. And if you don't know who to trust and you think everyone's lying, the government's got no case. And if they've got no case, the judge will tell you that you must acquit." So I think that public distaste and discomfort with weirder and sleazier tactics on the part of cops can be (and is) discussed and used and "voted on". "Not guilty" doesn't necessarily mean "innocent", sometimes it means "The prosecution didn't have enough evidence I thought I could trust." And yes, I agree that even mentioning nullification during voir dire will probably get you kicked off of a jury; and I think that's partly because one party or the other will be scared of nullification, and partly because the term "jury nullification" makes people think of FIJA and associated loons. Nobody wants a loon on the jury. (I don't think everyone who argues for nullification is a loon, but some of them sure are - and there's no good way to figure out whether someone's a loon or not in the middle of jury selection.) And I also agree that the jury selection process tends to select away from a true cross-section of society; but the few easily available examples (big trials like OJ or the Menendez Bros. or Wm. Kennedy Smith or whoever) are poor examples because they're not typical. Trials where lots is at stake (death penalty or celebrity defendant or big $ civil trials) tend to have longer processes (which weed out everyone who isn't incredibly boring) but it's not at all uncommon to pick a jury in a morning or in a day or two. In federal court, the judge usually questions the jury instead of the attorneys (which is faster), and may or may not ask questions that the attorneys have suggested. Also, sometimes one side or the other will *want* especially analytical or technical or well-trained jurors. Attorneys want to pick a jury they can persuade, but they also want to pick a jury that can understand their theory of the case. So I guess my point is that while the jury system isn't perfect, it is in some ways a much more direct way to "vote" on how things work in the judicial and law enforcement systems. I think it's more immediately and directly democratic than the electoral system. All of the legal bullshit aside, it's possible to think about trials as a way for people who have some sort of problem (they've been injured or accused of a crime or whatever) to tell a group of uninvolved people about the problem and ask them what the right thing to do is. Yeah, that's really oversimplified, but I think that what juries do is important and that what they do has a political and a moral dimension even if attorneys aren't supposed to talk about it during argument. -- Greg Broiles | "We pretend to be their friends, gbroiles(a)netbox.com | but they fuck with our heads." http://www.io.com/~gbroiles | |

2 1

Re: Child porn as thoughtcrime
by amnesia＠chardos.connix.com 17 Dec '03

17 Dec '03

Chuck Thompson writes: > > Well Andrew, pornography is meant to lead to arousal, which can lead to > aggression, which may lead to abuse. It's a fairly common path according to > what I've read on deviancy. Going into a bank can lead to casing out the joint, which may lead to a heist. Should this make the posession of pictures of banks illegal? I don't think that anyone here is advocating kiddie porn. The problem that TCM pointed out is that in fighting kiddie porn, legislators have started banning _thoughts_ that _could_ lead to child abuse. This is one great leap forward into the police state. > Following is one association's opinion, but > don't stop there, read for yourself what some of the deviants themselves > have to say: You're seeing the trees and missing the forest. It could be any activity, say the abuse of animals, that winds up being used as a wedge to create the police state. If the government started tatooing red 'P's on the foreheads of convicted pedophiles, would anyone notice the irony? Bobo

1 0

New type2.list/pubring.mix
by John Perry 17 Dec '03

17 Dec '03

I just updated the type2.list/pubring.mix combination on jpunix.com to reflect the disappearance of the ncognito remailer. I've been getting nothing but bounces and the owner doesn't seem to be around to fix it. The updated lists can be obtained by WWW from www.jpunix.com and by anonymous FTP from ftp.jpunix.com. -- John Perry KG5RG perry(a)alpha.jpunix.com PGP-encrypted e-mail welcome! WWW - http://www.jpunix.com PGP 2.62 key for perry(a)jpunix.com is on the keyservers.

1 0

Re: na673130@anon.penet.fi gone [Anonymous service rejected your mail.] (fwd)
by Johan Helsingius 17 Dec '03

17 Dec '03

At 21:49 96/09/11 -0400, Andy Dustman wrote: >Looks like Spambo either deleted his id or Julf pulled the plug on him. I pulled his plug. But his real address has been on this list several times. Julf

1 0

Sen. Burns' statement on postponement of Crypto vote today.
by jseiger＠cdt.org 17 Dec '03

17 Dec '03

As you may have heard by now, the Senate commerce committee markup of the Burns/Leahy "Pro-CODE' bill, originally set for today, has been postponed. Indications from the Commerce Committee staff are that this was largely due to scheduling issues, although end-of-the-session politics are also playing a role. Both the Committee staff and Senator Burns himself (see note below) have said they are committed to holding a markup before the end of the session. We expect more information early next week and will post updates as soon as new information becomes available. Senator Burns asked us to forward the following note to the net.community: >X-POP3-Rcpt: jseiger@mailserver >From: Conrad_Burns(a)burns.senate.gov >Date: Thu, 12 Sep 96 09:55:35 EST >To: jseiger(a)cdt.org >Subject: Open Letter to the Internet from Senator Burns > > The Commerce Committee markup on Pro-CODE, S. 1726, that we had > expected to have held on Thursday, September 12 has been postponed. I > am fully committed to taking Pro-CODE to markup, out of committee and > onto the floor of the Senate in this Congress. I believe that this > legislation is vital to ensuring the continued strength of America's > high-tech community and the privacy of its citizens. I would like to > thank the many thousands of Netizens who have expressed their support > for Pro-CODE. > > Sincerely, > > U.S. Senator Conrad Burns > Please keep your phone calls coming to the Senate Commerce Committee members offices, and be sure to sign the petition at http://www.crypto.com/petition/. A coalition alert with more information will be posted soon. Jonah ** THE FIGHT FOR FREE SPEECH ONLINE CONTINUES TO THE SUPREME COURT ** It's not too late to be a part of history -- Join the Lawsuit <http://www.cdt.org/ciec> -- <ciec-info(a)cdt.org> -- Jonah Seiger, Policy Analyst Center for Democracy and Technology <jseiger(a)cdt.org> 1634 Eye Street NW, Suite 1100 Washington, DC 20006 PGP Key via finger (v) +1.202.637.9800 http://www.cdt.org/ (f) +1.202.637.0968 http://www.cdt.org/homes/jseiger/

1 0

[BOOK] Competitive Intelligence
by Brian D Williams 17 Dec '03

17 Dec '03

Competitive Intelligence "From Black Ops to Boardrooms- How Businesses Gather, Analyze, and use Information to Succeed in the Global Marketplace." ISBN 0-684-81074-3 Simon and Schuster ($24.00) Preface: Being a Hero and not a Bum Part One: What is Competitive Intelligence? 1.) The Rise of Competitive Intelligence 2.) What Competitive Intelligence can do for your company: Information vs Intelligence 3.) Why most managers are still stuck in the information age Part Two: Real-World Competitive Intelligence 4.) The Intelligence Cycle 5.) Planning and Direction 6.) Collection 7.) Analysis 8.) Dissemination 9.) Mergers and Acquistions 10.) Benchmarking and Competitive Intelligence 11.) How the Japanese Perform Competitive Intelligence 12.) Competitive Intelligence in other Countries 13.) Building a Competitive Intelligence System Part Three: Issues, Opportunities, and the Future 14.) Justifying the cost of Competitive Intelligence 15.) Using Competitive Intelligence in the European Union 16.) Ethics 17.) The New Gatekeepers 18.) Why the U.S. Government must get involved in Competitive Intelligence 19.) Competitive Intelligence-The Next Generation Glossary of Competitive Intelligence

1 0

Re: ISODE Consortium X.509 Certification system
by Carl Ellison 17 Dec '03

17 Dec '03

Bill, thanks for forwarding this to me. It really bothers me whenever I see someone mouthing plattitudes about certificates, like: >The ITU-T, through X.509, recommend strong authentication based on public >key cryptosystems as the basis for providing secure services. The ISODE >Consortium uses X.509 as the core of its security strategy. >X.509 provides a flexible, scaleable and manageable algorithm-independent >authentication infrastructure, which can be used as the basis for a wide >range of security services such as message encryption and access control. Fact is, identity certification (which is what X.509 gives) is neither necessary nor sufficient for providing secure services -- and there's nothing magic about X.509. There are marketeers, however, who want the world to believe that the generation and use of X.509 certs will somehow give you security -- so they can sell machinery or a service which makes those certs. - Carl P.S. My USENIX paper giving the case against certification authorities is on-line now at <ftp://ftp.clark.net/pub/cme/usenix.ps> = <http://www.clark.net/pub/cme/usenix.ps> +------------------------------------------------------------------+ |Carl M. Ellison cme(a)acm.org http://www.clark.net/pub/cme | | PGP 2.6.2: 61 E2 DE 7F CB 9D 79 84 E9 C8 04 8B A6 32 21 A2 | +-Officer, officer, arrest that man. He's whistling a dirty song.--+

2 1

Re: Bubba Bottoming out on Cocaine Paranoia?
by attila 17 Dec '03

17 Dec '03

In <v03007808ae5dadc0f80f(a)[207.79.65.35]>, on 09/12/96 at 08:16 AM, Chip Mefford <cmefford(a)avwashington.com> said: = > 2. the rewrite of history to reflect not only the = > politically correct views, but to reflect history as = > the elite wish to see it --even to the point of rewriting = > quotations of Thomas Jefferson to suit their purpose. = > = Can you give a clear example of this?? = Just asking the most blatant one was the rewording of Jefferson's words for the equality of all men about two years ago. As we know, Jefferson was all for freedom, and had a "God bless you, you're a slave" attitude, but he was clearly not for the equalization. when that one came out of washington, several papers had a hard time with it, but I have seen it since. I have been collecting Jefferson quotes for years; frankly, I always considered the Dems were off base: Jefferson was the Republican --leaving Hamilton and his Federalists as pawns pawns of the Illuminati as advocates of the independent Federal Bank (the worst of the Rothschilds (Maurice, I think) who made the statements regarding control of the government by control of the money was in his prime around 1800). I am not a dedicated Jeffersonian scholar, but he has been the corner stone of my (now long blown) faith in our government. I would a complete set of Jefferson's works --if, and only, if I could find a good edition published over a 100 years ago. secondly, Jefferson is now interpreted as being the great enfranchiser, which is not even close to his view. Jefferson's writings clearly emphasize that the electorate should be comprised of the landed and merchant class; secondly, it was Jefferson's statement that the electorate, and therefore the juries should be composed "...of a well educated and informed citizenry." Jefferson was interested in an electorate which was of substance and possessing of a stake in America. One of the clear principles of Jeffersonian thought was that jury, beyond the requirement of guilt beyond a reasonable doubt, was to _vote its conscience_. Jefferson was responsible for including the constitutional language which makes this possible, even today, despite instructions from judges who could care less about the intent of the constitution and are treating the accused as nothing more than cattle on the way to the abattoir --if they are not guilty this time they will be next time, so why waste further time --sometimes known as "collateral damage." = > Why has it gone this far? because Joe-Six-Pack will sell = > all his freedom in return for the promised security. who is = > the Judas goat? the captive press. = > = Actually, being a "Joe six pack" my own damn self, I'd have to say = that this is simply not the case. It is Joe six pack who makes up the = body of the NRA and most other freedom watch dog organizations. = Just for yer information, the pendulem has been swinging very much = the other way, with 36 or 37 states recently following Floridas lead = on concealed weapons carries. Not only that, but even NPR has even = admitted that it has been effective. Agreed on the restoration of concealed weapons rights which had been regulated out of existence. Granted, Joe-Six-Pack may not be the perfect analogy, but I refer to America's working class, blue collar and the grunts of the white collars as Joe-Six-Pack --maybe I should say Joe-Couch-Potato. the class" referenced is a collection of many levels --what they have in common is they work and then confrom to the current norm of 7.2 hrs/day in front of the tube which becomes their entire source of information --THEY will sell out from ignorance. If you refer to Joe-Six-Pack as the the classic Southern red neck, any attempt to limit their freedom, particularly the right to a pickup truck with a gun rack, and their handguns --that's a very different situation. and that extends to small town westerners, like myself, and to the plains. I grew up on a farm, went to Harvard, joined the spooks for six years of a bloodpath, bounced around the world in different fields, and I am back in a very small community in the high desert: 100 families. Noone around here questions my bad attitude --the admissions requirements are at least 5 kids and 2000 rounds. However, I think Joe-Six-Pack, in this constrained social set, for the vast majority would sell out on freedom of cryptography. they do not understand it, particularly against the onslaught of the pinko-liberal captive media. Our job is to educate them --and not with defiant rhetoric (such as mine). As for concealed weapons permits, bank robberies should certainly drop --all it would take is one cowboy (and I'll volunteer) and anything other than a large coordinated operation is in serious trouble. One unsuspected, mean and surly patron with a .357 who seriously knows how and when to use same is very effective. On the other hand, I do not recommend carrying an assault rifle on a sling over your shoulder to visit the bank.... The simple (I think) point I was trying to make was: the vast majority of our U.S. citizens would acquiesce to the deployment of federal troops in return for security, rather than being armed, Posse Comitas not withstanding, to wipe crime off the streets. The point could even be made: the troops might as well be doing something useful rather than sitting around their bases; we do have a rather large standing army --unfortunately, they would become poorly trained and poorly disciplined --and could easily be part of the massive corruption in our cities (and every other government over many people). Frankly, we should all vote in a _free_ cyberspace; forget the current system of choosing party loyalists and presidential electors. The application of a military mentality on the streets is not my idea of law and order --they could kill off the majority of the crime by legalizing all drugs and dispensing them in clinics. Britain reduced their second story (burglary) crime rate by over 60%; they did find they had a great many more addicts than the thought, however. A second benefit is that it takes some of the mystery and challenge out of drugs --however, be prepared for the alcohol problem, although that effect would be significantly less than the current social cost of having 10% of the male black population in lockdown. no, my bottome line is the Bubba has sunk to bottom with paranoia, both he and the elite money interests which jerk all of the politicial habituites who depend on their soft money for their campaings and who wish to participate at the trough of influence and greed (ever see someone retired after many years in Washington without a bundle). --attila -- one of the few things we all share: the utter, corrosive contempt for our elected officials.

2 1

Getting the word "GAK" into common usage
by Jim Ray 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: cypherpunks(a)toad.com Date: Thu Sep 12 11:20:55 1996 cypherpunks: As most of you know, I have been trying to bring "our" word, "GAK" into common usage, as opposed to the "key-escrow" Newspeak proposed by some (unnamed) big-government bureaucrat, and unfortunately adopted in most discussions of cryptography policy, (especially those outside this forum) in spite of the true English meaning of the word "escrow." There is a resource called "Infomania," which you can learn about by sending a blank message with the subject "help" to <infobot(a)infomania.com>. The service provides, via email, services that are normally only available to people who have real internet acess (ie, "WHOIS,") but there is also a heavy bias toward humor. Sending it the subject "GEEK," for example, returns the current version of the Code of the Geeks. Sending the subject CHEF with some dry, boring text (such as this message) in the message body returns you a truly hilarious transmogrification. :) Anyway, I have been in contact with Jason Fesler, who administers the site for Infomania [a firm which produces film separations for commercial grade printers and which provides this free service] about putting in a new command, "GAK," which will return to senders whatever the current U.S. govt. "key-escrow" Newspeak bigbrother anti-privacy proposal(s) is/are. (ie. clipper1, clipper2, son of clipper etc.). He has agreed that if we can supply a script or url or gopher page or something of that sort to interface it to, and a person to maintain it whenever the policy changes yet again (the hard part) he will do it. I would, of course, expect a bit of cypherpunkly commentary to accompany the text. Perhaps this information already exists (likely it does) on some page, and if you know where and think it is stable and well-updated, please email me privately, and I will try to put the owner of the site in touch with Jason. I am Bccing him with this message. Thanks for your help. JMR Regards, Jim Ray -- DNRC Minister of Encryption Advocacy "As govt.s grow arithmetically, corruption grows exponentially." -- Ray's Law of official corruption. Defeat the Duopoly! Stop the Browne out. Harry Browne for President. Jo Jorgensen for Vice-president. http://www.HarryBrowne96.org/ http://www.twr.com/stbo ___________________________________________________________________ PGP id.E9BD6D35 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 I will generate a new (and bigger) PGP key-pair on election night. <mailto:liberty@gate.net> http://www.shopmiami.com/prs/jimray ___________________________________________________________________ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMjgqXW1lp8bpvW01AQF49wP8Ci8D9blF898dNaFsKesX311qT2MO88zr xM11xZ0g1Ui4ahv3yB4jo6qqv4Z9InjNpiOk6wxcsXUPPtn6UNCBOTdos/DCk/SO SSOupiLA48gBHfoCIMN2f/+hGGM4BcuYC5wQ9rgJrTeiY8nQX18hJxKDxujn7z0A pbvTrSRQozY= =rA5a -----END PGP SIGNATURE-----

2 1

PANIX.COM down: denial of service attack
by #6 17 Dec '03

17 Dec '03

WSJ 9/12/96 Paraphrasing: Panix has been under attack for the last week by someone flooding their server with bogus "requests for information" [see below] ... The attack(s): * "Have rendered almost defenseless the small NY company" * "...began late Friday afternoon ... were still continung yesterday" * have targeted "computers that control WWW pages, store e-mail, and still others that link Internet addresses to Panix subscribers." "The hacker [sic] has been sending up to 150 requests a second to Panix's computers, seeking to establish a connection ... the requests, presumably generated by a malicious computer program, contain fake Internet addresses, which the computer must sort out before they can discard them. The computers have choked under the deluge." "As to who might be targeting Panix, the firm's Mr. Rosen speculated it could be someone upset by the fact that the site hosts, free, the Web site for Voters Telecommunication Watch...."

1 0

Re: Child Porn as Thoughtcrime
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

Rick Smith wrote: > : ...the "little girls in leotards" case was only a few years ago, etc.) > > Don't know about that one. Is it illegal for little girls to be > photographed in leotards now? "Nutcracker" is X rated? Move over, > Bambi. But this proves precisely Tim's original point, that child pornography is a thoughtcrime. Here's a working definition of child pornography at the end of the millenium: it's a picture of a child, in the hands of a pedophile. Pictures of girls in leotarfds are not child pornography per se, but if you think evil thoughts while watching them, then they become child pornography. What got Stephen Knox in trouble was leaving so much evidence that he was thinking those evil thoughts.

1 0

Re: Nonsense, absolute nonsense... [Fwd: HipCrime and Spam]
by Admin 17 Dec '03

17 Dec '03

At 09:34 PM 9/11/96 -0400, you wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >On Wed, 11 Sep 1996, Admin wrote: > >> >This is an absurd and inaccurate analogy. The mailBot simply pushes >> >*mailto:* tags that people have willingly placed on their public websites. >> >They invite the mail so a more accurate analogy would be that City Hall puts >> >up a public suggestion box and invites comments. The bot then puts one, and >> >only one, unsigned anonymous suggestion into the box. It then goes on to the > >You're sending out messages, inviting people to visit your web site, but >you're using anonymous remailers because... you don't want people to know >who you are? Perhaps he's sending out through the remailers...because he can. Its open to the public. Or perhaps he's trying to get the word out about remailers also, or perhaps no one but he knows why, and why is unimportant. You can always make your remailers a private, pay per use club. Then you could control all the *whys* *whens* and *hows*. >Then why invite them to your site (or even have a site)? It's >like if I sent out postcards to people with no return address saying, >"Please stop by 1313 Mockingbird Lane for snacks and refreshments. Signed, >A Friend". (Note, this is not my real address.) >Only in this case the >postcards don't have any stamps so the people who receive them have to pay >the postage. Which is precisely what you're doing: Sending someone e-mail >costs them time and it often costs them money. These people have invited the email, and the associated expense, by placing a public email-to: button on their public www page. A more acurate analogy, and to the point, would be if a business sends you a postage pre-paid business reply card, that is blank, and invites your comments on the card. They can hardly complain of the expense when people actually send it in, even if they don't like the comments. >Sending it through an >anonymous remailer accomplishes four things: 1) People can't complain to >you to stop sending them mail. Seems anyone who followed the link can complain to the appropriate source. >2) It costs us, the International Secret >Cabal of Anonymous Remailer Operators, time and money for no good reason, >because you are sending anonymous mail and not making yourself anonymous. Didn't see any disclaimers on the remailers requiring a *good reason* to use them. Who would be this Judge of Sufficiently Good Reason? Perhaps you can write an AI piece that can auto-detect good reason from *no good reason*... >3) You're pissing off a bunch of people, and the only ones they can take >their frustrations out on or complain to is us. What is the ratio of *pissed off people* to not pissed off people. Likely less than 0.5% based on how many messages the Cpunks claim went out in a day. >4) It's giving us a bad >rap, man, and that's the *last* thing the remailer net needs now. The saying goes...There is Heat in the Kitchen... > >I could care less about your little applet, or what you have to say; in >the words of Thomas Jefferson, "it neither breaks my leg nor picks my >pocket." Until, that is, you start sending it through my remailer, and >*then* you start picking my pocket. >The remailers of the world don't exist >to provide non-anonymous anonymous advertising, which you could do just as >well on your own sending forged e-mail headers from netcom. Now now... forgery is a no-no. And someone always has the freedom to give up their anonymity whenever they choose. > >Andy Dustman / Computational Center for Molecular Structure and Design / UGA >===== For PGP public key: finger andy(a)neptune.chem.uga.edu | pgp -fka ===== >Sure, the Telecomm Act will create jobs: 100,000 new thought-cops on the net >http://charon.chem.uga.edu/~andy mailto:andy@CCMSD.chem.uga.edu <}+++< <>________________Lowest_Priced_Long_Distance__________________<> ||Long Distance 9.9¢/min |Helping hardworking people || ||9.9¢ Anytime, Anywhere in US! |like yourself pay the || ||Free sign-up, 6 second billing |lowest possible price for || ||http://www.superhot.com/phone |high quality LD service. || <>-----------------------1_303_692_5190------------------------<>

2 1

Re: PANIX.COM down: denial of service attack
by Duncan Frissell 17 Dec '03

17 Dec '03

At 09:09 AM 9/12/96 -0700, #6 wrote: >WSJ 9/12/96 > >Paraphrasing: > >Panix has been under attack for the last week by someone flooding >their server with bogus "requests for information" [see below] ... Even though service has suffered, Panix is still useable. Until I read the MOTDs on Tuesday, I thought it was just normal flakiness. DCF

1 0

Fear of Flying -- from HotWired
by declan＠well.com 17 Dec '03

17 Dec '03

http://www.hotwired.com/netizen/96/37/special3a.html 12 September 96 HotWired, The Netizen Fear of Flying by Declan McCullagh (declan(a)well.com) Washington, DC, 11 September John Gilmore, co-founder of the Electronic Frontier Foundation, knows firsthand how drastically airports in the United States are altering their policies in response to the nation's perceived vulnerability to terrorists. When Gilmore opened his laptop for inspection by airport personnel at San Francisco International last month - as requested - but refused to turn the machine on, the cops were called. When he then refused to show identification to airport police, "they put the handcuffs on me and hauled me off," he told The Netizen. The cops took Gilmore to a back-room office. "They tried to ask me questions. I said I wanted to speak to my lawyer. They kept asking me questions anyway," he says. Airport police arrested Gilmore even though, according to the FAA, "there is currently no prohibition against allowing someone on an aircraft" without identification. Gilmore's arrest came after President Clinton tightened airport security in response to the TWA Flight 800 disaster and the Atlanta Olympic Games bombing. Now the anti-terrorism drumbeat in the nation's capital is starting again, and it's louder and more ominous than ever. It reached a fevered pitch Monday, when Clinton called for an increase of more than one billion dollars to be spent on anti-terrorism measures, especially airport security. Clinton based his request on the unsurprising recommendations of a commission created by executive order in August, staffed by spooks and headed by Vice President Gore. The group's proposal includes a plan allowing the CIA and FBI to "develop a system" to screen passengers who fit certain profiles as potential terrorists. David Sobel, a lawyer with the Electronic Privacy Information Center, called the White House proposal "a realization of Big Brother concerns people have about computer technology." The proposal would allow the FBI and CIA to couple their databases with those of the airlines. "There are going to be massive databases that will track our actions and activities. If you think of increased capabilities to collect information, it's even scarier," Sobel said. A former US senator agrees. At a Cato Institute terrorism conference yesterday, Malcolm Wallop said: "In the year and a half since the terrorism debate began, all the legislation considered would do little or nothing to stop or deter terrorism. These measures do more to crack down on Americans than terrorists. "A bloody nose does not warrant an exponential expansion of federal government authority," argued Wallop, now the chairman of the Frontiers of Freedom Institute. Over lunch at the conference yesterday afternoon, former CIA director James Woolsey responded with some seemingly gratuitous anti-Net rhetoric. Terrorists may use biological weapons like anthrax, he said. "Anthrax is colorless, odorless, and has a 90 percent lethality. One gram has 100 million lethal doses." Then Woolsey delivered the zinger: "The knowledge of how to make anthrax is widely available, including on the Internet." Not content to let bad enough alone, Woolsey added that the government can't allow netizens to use data-scrambling software like Pretty Good Privacy that the spooks can't break. He said the threat of terrorism will "require us to have a key escrow system" where keys "for complex algorithms [will] be placed in such a way that the government" will have access to them. "You can accommodate industry a lot, but the principle is: you got to get to the key," Woolsey said. (FBI director Louis Freeh made similar, though less straightforward, comments during Senate hearings in July.) Before Congress adjourns for the fall recess, the House must decide whether to approve a "digital telephony" domestic wiretapping slush fund into which the NSA and CIA can pour cash. Senators will then likely add provisions for warrantless wiretaps to the anti-terrorism bill that the House sent to them in August. The fundamental problem here is, of course, the politics of terrorism. Legislators routinely grandstand atop national tragedies, using victims and their families as backdrops. Justice Department lobbyists then swarm onto Capitol Hill and demand reduced civil liberties in the name of fighting terrorism. Societies can, and should, safeguard against systematic threats. Random acts of violence, on the other hand, are trickier to forestall - and terrorist acts are anything but predictable. Luckily for the EFF's Gilmore, he was cited only for the crime of "delaying/obstructing a peace officer" and was released after being handcuffed to a bench and then dumped in a holding cell for a few hours. He got off easy. But if Congress decides to sacrifice freedom for security, the country will ultimately enjoy neither. ###

1 0

(Correction) Child Porn as Thoughtcrime
by Rick Smith 17 Dec '03

17 Dec '03

I wrote: : I've read in several places that the Jock Sturges case was thrown out : Nobody has dragged me away in shackles for : owning "Radiant Images." Correction -- That's "Radiant Identities." Rick.

1 0

Re: PANIX.COM down: denial of service attack
by Duncan Frissell 17 Dec '03

17 Dec '03

Here are the gory details from the first MOTD last Saturday: The attacker is forging random source addresses on his packets, so there is no way to find his/her location. There is also no way to screen out those packets with a simple router filter. This is probably the most deadly type of denial-of-service attack possible. There is no easy or quick way of dealing with it. If it continues into Saturday we will start working on kernel modifications to try to absorb the damage (since there's absolutely no way to avoid it). This however will not be an easy job and it could take days to get done (and get done right). For those who are IP hackers, the problem is that we're being flooded with SYNs from random IP addresses on our smtp ports. We are getting on average 150 packets per second (50 per host). We are not the only site being attacked in this way. I know of one other site that is being attacked in an identical manner right now, and I know of three others that have been attacked in the last two weeks. I hope that this means that the attacker is merely playing malicious games, and will soon tire of molesting our site. If that is the case, mail will come back up as soon as the attack ends. But if the attacker is really interested in damaging Panix specifically, the attack may *never* stop and service won't be restored until we can write kernel modifications. Since then the packet streams have hit almost all the ports for news, www, telnet, etc. DCF

3 4

[BOOK] "Competitive Intelligence" corrected
by Brian D Williams 17 Dec '03

17 Dec '03

Sorry, forgot the Author... Brian "Car Bombs- The poor mans cruise missle." Competitive Intelligence Larry Kahaner "From Black Ops to Boardrooms- How Businesses Gather, Analyze, and use Information to Succeed in the Global Marketplace." ISBN 0-684-81074-3 Simon and Schuster ($24.00) Preface: Being a Hero and not a Bum Part One: What is Competitive Intelligence? 1.) The Rise of Competitive Intelligence 2.) What Competitive Intelligence can do for your company: Information vs Intelligence 3.) Why most managers are still stuck in the information age Part Two: Real-World Competitive Intelligence 4.) The Intelligence Cycle 5.) Planning and Direction 6.) Collection 7.) Analysis 8.) Dissemination 9.) Mergers and Acquistions 10.) Benchmarking and Competitive Intelligence 11.) How the Japanese Perform Competitive Intelligence 12.) Competitive Intelligence in other Countries 13.) Building a Competitive Intelligence System Part Three: Issues, Opportunities, and the Future 14.) Justifying the cost of Competitive Intelligence 15.) Using Competitive Intelligence in the European Union 16.) Ethics 17.) The New Gatekeepers 18.) Why the U.S. Government must get involved in Competitive Intelligence 19.) Competitive Intelligence-The Next Generation Glossary of Competitive Intelligence

1 0

Re: ... subversive leftists
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

> tcmay(a)got.net (Timothy C. May) writes: > > As to "tasteless and insulting," a matter of personal perspective. I find > > it helpful to call a spade a spade, and others apparently do as well. > > > > Of course, Tim gets very uncomfortable when others call a spade a spade. This constant character assasination of Tim is getting rather boring, as far as I can see, and I read all of the posts on the list, he has done nothing more than ignore posts from these idiots, that is his choice and nothing to do with anyone else. This whole thread is taking up too much space and is just totally pointless. lets call it a day and just agree to differ eh? Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Http://www.fatmans.demon.co.uk/crypt/ "Don`t forget to mount a scratch monkey" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6 mQCNAjH9j+cAAAEEAMBvREiQR0ot9dFCO0TiSCSunAYLv2g1Bc6I3bz8FzKXNH53 6mieJf/W4rD+CxJpT0q9RQaaoRtkHJLwbjfK2il3D7mEahMAyqvF/xRJNqkXfhM3 sRJM0Jh43l+W0M5vwokbEbk25/bxWWGspTsLD3YHbzKnG6pOcL5OPIRbv66xAAUR tCdQYXVsIEJyYWRsZXkgPHBhdWxAZmF0bWFucy5kZW1vbi5jby51az4= =riHc -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: Fear of Flying -- from HotWired
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 1:16 PM 9/12/96 -0500, Declan McCullagh quoted: >... former CIA director James Woolsey: responded with some seemingly > gratuitous anti-Net > rhetoric. Terrorists may use biological weapons like anthrax, he said. > "Anthrax is colorless, odorless, and has a 90 percent lethality. One > gram has 100 million lethal doses." Then Woolsey delivered the zinger: > "The knowledge of how to make anthrax is widely available, including > on the Internet." Gee, biotech has come a long way. Now I can download the Anthrax DNA sequence from the net and insert it in some carrier bacteria and start making Anthrax bacteria. Neat! Or did he mean I can chemically synthesize Anthrax toxin? Or did he mean I can get information on culturing bacteria on the net, but must obtain a sample of the bacteria from other sources? BTW - My dictionary says that Anthrax is primarily an animal disease which only occasionally infects humans. It sounds like a poor choice for bio-war terror. ------------------------------------------------------------------------- Bill Frantz | "Lone Star" - My personal | Periwinkle -- Consulting (408)356-8506 | choice for best movie of | 16345 Englewood Ave. frantz(a)netcom.com | 1996 | Los Gatos, CA 95032, USA

1 0

Re: Excite Live!
by E. Allen Smith 17 Dec '03

17 Dec '03

From: IN%"live(a)excite.com" 11-SEP-1996 22:14:03.06 >A request was made for the location of your Excite Live! page >Found your Excite Live at URL >http://live.excite.com/?uid=CEC8C99632372D6E Hi. As you can see from the above, I've set up an Excite Live! page up with the email address of cypherpunks(a)toad.com. It has top priority on things related to cypherpunks, including technology news, political news, international news, etcetera, plus some build-in links and searches to appropriate places. I'd advise using the anonymizer to access the above link (http://www.anonymizer.com:8080/http://live.excite.com/?uid=) -Allen

2 1