December 2003 - cypherpunks-legacy

Re: mailing list
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

>I want on the mailing list please > > haha

3 2

Re: mailing list
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Why the fuck are there so many requests from aol ? thats eerie if you ask me.

4 3

**Important** Please Read
by Daragh Lawlor 17 Dec '03

17 Dec '03

Dear friend, This is a "ONE-TIME MESSAGE" you were randomly selected to received this. There is no need to reply to remove, you will receive no further mailings from us. If you have interest in this GREAT INFORMATION, please do not click reply, use the contact information in this message. Thank You! This is not a chain letter and you are not on a mailing list. The following income opportunity is one you may be interested in taking a look at. It can be started with VERY MINIMAL outlay and the income return is TREMENDOUS! <> <> <> <> <> <> <> <> <> <> <> <> <> <> <> <> You are about to make at least $50,000 - In less than 90 days Read the enclosed program...THEN READ IT AGAIN!... <> <> <> <> <> <> <> <> <> <> <> <> <> <> <> <> The enclosed information is something I almost let slip through my fingers. Fortunately, sometime later I re-read everything and gave some thought and study to it. My name is Christopher Erickson. Two years ago, the corporation I worked at for the past twelve years down-sized and my position was eliminated. After unproductive job interviews, I decided to open my own business. Over the past year, I incurred many unforeseen financial problems. I owed my family, friends, and creditors over $35,000. The economy was taking a toll on my business and I just couldn't seem to make ends meet. I had to refinance and borrow against my home to support my family and struggling business. I truly believe it was wrong for me to be in debt like this. AT THAT MOMENT something significant happened in my life and I am writing to share my experience in hopes that this will change your life FOREVER....FINANCIALLY!!! In mid-December, I received this program via email. Six months prior to receiving this program I had been sending away for information on various business opportunities. All of the programs I received, in my opinion, were not cost effective. They were either too difficult for me to comprehend or the initial investment was too much for me to risk to see if they worked or not. One claimed I'd make a million dollars in one year...it didn't tell me I'd have to write a book to make it. But like I was saying, in December of '95 I received this program. I didn't send for it, or ask for it, they just got my name off a mailing list. THANK GOODNESS FOR THAT!!! After reading it several times, to make sure I was reading it correctly, I couldn't believe my eyes. Here was a MONEY-MAKING PHENOMENON. I could invest as much as I wanted to start, without putting me further in debt. After I got a pencil and paper and figured it out, I would at least get my money back. After determining that the program is LEGAL and NOT A CHAIN LETTER, I decided "WHY NOT". Initially I sent out 10,000 emails. It only cost me about $15.00 for my time on-line. The great thing about email is that I didn't need any money for printing to send out the program, only the cost to fulfill my orders. I am telling you like it is, I hope it doesn't turn you off, but I promised myself that I would not "rip-off" anyone, no matter how much money it cost me! A good program to help do this is Ready Aim Fire, an email extracting and mass mail program @ http://microsyssolutions.com/raf/ In less than one week, I was starting to receive orders for REPORT #1. By January 13th, I had received 26 orders for REPORT #1. When you read the GUARANTEE in the program, you will see that "YOU MUST RECEIVE 15 TO 20 ORDERS FOR REPORT #1 WITHIN TWO WEEKS. IF YOU DON'T, SEND OUT MORE PROGRAMS UNTIL YOU DO!" My first step in making $50,000 in 20 to 90 days was done. By January 30th, I had received 196 orders for REPORT #2. If you go back to the GUARANTEE, "YOU MUST RECEIVE 100 OR MORE ORDERS FOR REPORT #2 WITHIN TWO WEEKS. IF NOT, SEND OUT MORE PROGRAMS UNTIL YOU DO. ONCE YOU HAVE 100 ORDERS, THE REST IS EASY, RELAX, YOU WILL MAKE YOUR $50,000 GOAL." Well, I had 196 orders for REPORT #2, 96 more than I needed. So I sat back and relaxed. By March 19th, of my emailing of 10,000, I received $58,000 with more coming in every day. I paid off ALL my debts and bought a much needed new car. Please take time to read the attached program, IT WILL CHANGE YOUR LIFE FOREVER! Remember, it wont work if you don't try it. This program does work, but you must follow it EXACTLY! Especially the rules of not trying to place your name in a different place. It doesn't work, you'll lose out on a lot of money! REPORT #2 explains this. Always follow the guarantee, 15 to 20 orders for REPORT #1, and 100 or more orders for REPORT #2 and you will make $50,000 or more in 20 to 90 days. I AM LIVING PROOF THAT IT WORKS !!! If you choose not to participate in this program, I'm sorry. It really is a great opportunity with little cost or risk to you. If you choose to participate, follow the program and you will be on your way to financial security. If you are a fellow business owner and you are in financial trouble like I was, or you want to start your own business, consider this a sign. I DID! Sincerely, Christopher Erickson PS Do you have any idea what 11,700 $5 bills ($58,000) look like piled up on a kitchen table? IT'S AWESOME! THREW IT AWAY" "I had received this program before. I threw it away, but later wondered if I shouldn't have given it a try. Of course, I had no idea who to contact to get a copy, so I had to wait until I was emailed another copy of the program. Eleven months passed, then it came. I DIDN'T throw this one away. I made $41,000 on the first try." Dawn W., Evansville, IN "NO FREE LUNCH" "My late father always told me, 'remember, Alan, there is no free lunch in life. You get out of life what you put into it.' Through trial and error and a somewhat slow frustrating start, I finally figured it out. The program works very well, I just had to find the right target group of people to email it to. So far this year, I have made over $63,000 using this program. I know my dad would have been very proud of me." Alan B., Philadelphia, PA A PERSONAL NOTE FROM THE ORIGINATOR OF THIS PROGRAM By the time you have read the enclosed information and looked over the enclosed program and reports, you should have concluded that such a program, and one that is legal, could not have been created by an amateur. Let me tell you a little about myself. I had a profitable business for ten years. Then in 1979 my business began falling off. I was doing the same things that were previously successful for me, but it wasn't working. Finally, I figured it out. It wasn't me, it was the economy. Inflation and recession had replaced the stable economy that had been with us since 1945. I don't have to tell you what happened to the unemployment rate...because many of you know from first hand experience. There were more failures and bankruptcies than ever before. The middle class was vanishing. Those who knew what they were doing invested wisely and moved up. Those who did not, including those who never had anything to save or invest, were moving down into the ranks of the poor. As the saying goes, "THE RICH GET RICHER AND THE POOR GET POORER." The traditional methods of making money will never allow you to "move up" or "get rich", inflation will see to that. You have just received information that can give you financial freedom for the rest of your life, with "NO RISK" and "JUST A LITTLE BIT OF EFFORT." You can make more money in the next few months than you have ever imagined. I should also point out that I will not see a penny of your money, nor anyone else who has provided a testimonial for this program. I have already made over FOUR MILLION DOLLARS! I have retired from the program after sending out over 16,000 programs. Now I have several offices which market this and several other programs here in the US and overseas. By the Spring, we wish to market the 'Internet' by a partnership with AMERICA ON LINE. Follow the program EXACTLY AS INSTRUCTED. Do not change it in any way. It works exceedingly well as it is now. Remember to email a copy of this exciting program to everyone that you can think of. One of the people you send this to may send out 50,000...and your name will be on every one of them!. Remember though, the more you send out, the more potential customers you will reach. So my friend, I have given you the ideas, information, materials and opportunity to become financially independent, IT IS UP TO YOU NOW! "THINK ABOUT IT" Before you delete this program from your mailbox, as I almost did, take a little time to read it and REALLY THINK ABOUT IT. Get a pencil and figure out what could happen when YOU participate. Figure out the worst possible response and no matter how you calculate it, you will still make a lot of money! Definitely get back what you invested. Any doubts you have will vanish when your first orders come in. IT WORKS! Paul Johnson, Raleigh, NC HERE'S HOW THIS AMAZING PROGRAM WILL MAKE YOU $$$$$$ Let's say that you decide to start small, just to see how it goes, and we'll assume you and all those involved send out 2,000 programs each. Let's also assume that the mailing receives a .5% response. Using a good list the response could be much better. Also many people will send out hundreds of thousands of programs instead of 2,000. But continuing with this example, you send out only 2,000 programs. With a 5% response, that is only 10 orders for REPORT #1. Those 10 people respond by sending out 2,000 programs each for a total of 20,000. Out of those .5%, 100 people respond and order REPORT #2. Those 100 mail out 2,000 programs each for a total of 200,000. The .5% response to that is 1,000 orders for REPORT #3. Those 1,000 send out 2,000 programs each for a 2,000,000 total. The .5% response to that is 10,000 orders for REPORT #4. That's 10,000 five dollar bills for you. CASH!!!! Your total income in this example is $50 + $500 + $5000 + $50,000 for a total of $55,550!!!! REMEMBER FRIEND, THIS IS ASSUMING 1,990 OUT OF 2,000 PEOPLE YOU MAIL TO WILL DO ABSOLUTELY NOTHING... AND TRASH THIS PROGRAM! DARE TO THINK FOR A MOMENT WHAT WOULD HAPPEN IF EVERYONE OR HALF SENT OUT 100,000 PROGRAMS INSTEAD OF ONLY 2,000. Believe me, many people will do that and more! By the way, your cost to participate in this is practically nothing. You obviously already have an internet connection and email is FREE!!! REPORT#3 will show you the best methods for bulk emailing and purchasing email lists. THIS IS A LEGITIMATE, LEGAL, MONEY MAKING OPPORTUNITY. It does not require you to come in contact with people, do any hard work, and best of all, you never have to leave the house except to get the mail. If you believe that someday you'll get that big break that you've been waiting for, THIS IS IT! Simply follow the instructions, and your dream will come true. This multi-level email order marketing program works perfectly...100% EVERY TIME. Email is the sales tool of the future. Take advantage of this non-commercialized method of advertising NOW!! The longer you wait, the more people will be doing business using email. Get your piece of this action!! MULTI-LEVEL MARKETING (MLM) has finally gained respectability. It is being taught in the Harvard Business School, and both Stanford Research and The Wall Street Journal have stated that between 50% and 65% of all goods and services will be sold throughout Multi-level Methods by the mid to late 1990's. This is a Multi-Billion Dollar industry and of the 500,000 millionaires in the US, 20% (100,000) made their fortune in the last several years in MLM. Moreover, statistics show 45 people become millionaires everyday through Multi-Level Marketing. INSTRUCTIONS We at Erris Mail Order Marketing Business, have a method of raising capital that REALLY WORKS 100% EVERY TIME. I am sure that you could use $50,000 to $125,000 in the next 20 to 90 days. Before you say "Bull", please read the program carefully. This is not a chain letter, but a perfectly legal money making opportunity. Basically, this is what we do: As with all multi-level business, we build our business by recruiting new partners and selling our products. Every state in the USA allows you to recruit new multi-level business partners, and we offer a product for EVERY dollar sent. YOUR ORDERS COME AND ARE FILLED THROUGH THE MAIL, so you are not involved in personal selling. You do it privately in your own home, store or office. This is the GREATEST Multi-level Mail Order Marketing anywhere: Step (1) Order all four 4 REPORTS listed by NAME AND NUMBER. Do this by ordering the REPORT from each of the four 4 names listed on the next page. For each REPORT, send $5 CASH and a SELF- ADDRESSED, STAMPED envelope (BUSINESS SIZE #10) to the person listed for the SPECIFIC REPORT. International orders should also include $1 extra for postage. It is essential that you specify the NAME and NUMBER of the report requested to the person you are ordering from. You will need ALL FOUR 4 REPORTS because you will be REPRINTING and RESELLING them. DO NOT alter the names or sequence other than what the instructions say. IMPORTANT: Always provide same-day service on all orders. Step (2) Replace the name and address under REPORT #1 with yours, moving the one that was there down to REPORT #2. Drop the name and address under REPORT #2 to REPORT #3, moving the one that was there to REPORT #4. The name and address that was under REPORT #4 is dropped from the list and this party is no doubt on the way to the bank. When doing this, make certain you type the names and addresses ACCURATELY! DO NOT MIX UP MOVING PRODUCT/REPORT POSITIONS!!! Step (3) Having made the required changes in the NAME list, save it as a text (.txt) file in it's own directory to be used with whatever email program you like. Again, REPORT #3 will tell you the best methods of bulk emailing and acquiring email lists. Step (4) Email a copy of the entire program (all of this is very important) to everyone whose address you can get your hands on. Start with friends and relatives since you can encourage them to take advantage of this fabulous money-making opportunity. That's what I did. And they love me now, more than ever. Then, email to anyone and everyone! Use your imagination! You can get email addresses from companies on the internet who specialize in email mailing lists. These are very cheap, 100,000 addresses for around $35.00. IMPORTANT: You won't get a good response if you use an old list, so always request a FRESH, NEW list. You will find out where to purchase these lists when you order the four 4 REPORTS. ALWAYS PROVIDE SAME-DAY SERVICE ON ALL ORDERS!!! REQUIRED REPORTS ***Order each REPORT by NUMBER and NAME*** ALWAYS SEND A SELF-ADDRESSED, STAMPED ENVELOPE AND $5 CASH FOR EACH ORDER REQUESTING THE SPECIFIC REPORT BY NAME AND NUMBER __________________________________________________ REPORT #1 "HOW TO MAKE $250,000 THROUGH MULTI-LEVEL SALES" ORDER REPORT #1 FROM: T.R. Enterprises 800 S. Pacific Coast Highway, #8-425 Redondo Beach, CA 90277 __________________________________________________ ____ REPORT #2 "MAJOR CORPORATIONS AND MULTI-LEVEL SALES" ORDER REPORT #2 FROM: J.K.Enterprises P. O. Box 10893 Blacksburg, VA 24060 __________________________________________________ ______ REPORT#3 "SOURCES FOR THE BEST MAILING LISTS" ORDER REPORT #3 FROM: Hendon Enterprises P.O. Box 188 Seguin, TX __________________________________________________ _____ REPORT #4 "EVALUATING MULTI-LEVEL SALES PLANS" ORDER REPORT #4 FROM: 78156Prosperity Group PO Box 968 Englewood, FL __________________________________________________ ______ CONCLUSION I am enjoying my fortune that I made by sending out this program. You too, will be making money in 20 to 90 days, if you follow the SIMPLE STEPS outlined in this mailing. To be financially independent is to be FREE. Free to make financial decisions as never before. Go into business, get into investments, retire or take a vacation. No longer will a lack of money hold you back. However, very few people reach financial independence, because when opportunity knocks, they choose to ignore it. It is much easier to say "NO" than "YES", and this is the question that you must answer. Will YOU ignore this amazing opportunity or will you take advantage of it? If you do nothing, you have indeed missed something and nothing will change. Please re-read this material, this is a special opportunity. If you have any questions, please feel free to write to the sender of this information. You will get a prompt and informative reply. My method is simple. I sell thousands of people a product for $5 that costs me pennies to produce and email. I should also point out that this program is legal and everyone who participates WILL make money. This is not a chain letter or pyramid scam. At times you have probably received chain letters, asking you to send money, on faith, but getting NOTHING in return, NO product what-so-ever! Not only are chain letters illegal, but the risk of someone breaking the chain makes them quite unattractive. You are offering a legitimate product to your people. After they purchase the product from you, they reproduce more and resell them. It's simple free enterprise. As you learned from the enclosed material, the PRODUCT is a series of four 4 FINANCIAL AND BUSINESS REPORTS. The information contained in these REPORTS will not only help you in making your participation in this program more rewarding, but will be useful to you in any other business decisions you make in the years ahead. You are also buying the rights to reprint all of the REPORTS, which will be ordered from you by those to whom you mail this program. The concise one and two page REPORTS you will be buying can easily be reproduced at a local copy center for a cost off about 3 cents a copy. Best wishes with the program and Good Luck! "IT WAS TRULY AMAZING" "Not being the gambling type, it took me several weeks to make up my mind to participate in this program. But conservative as I am, I decided that the initial investment was so little that there was no way that I could not get enough orders to at least get my money back. BOY, was I ever surprised when I found my medium sized post office box crammed with orders! I will make more money this year than any ten years of my life before." Mary Riceland, Lansing, MI TIPS FOR SUCCESS Send for your four 4 REPORTS immediately so you will have them when the orders start coming in. When you receive a $5 order, you MUST send out the product/service to comply with US Postal and Lottery laws. Title 18 Sections 1302 and 1341 specifically state that: "A PRODUCT OR SERVICE MUST BE EXCHANGED FOR MONEY RECEIVED." WHILE YOU WAIT FOR THE REPORTS TO ARRIVE: 1. Name your new company. You can use your own name if you desire. 2. Get a post office box (preferred). 3. Edit the names and addresses on the program. You must remember, your name and address go next to REPORT #1 and the others all move down one, with the fourth one being bumped OFF the list. 4. Obtain as many email addresses as possible to send until you receive the information on mailing list companies in REPORT #3. 5. Decide on the number of programs you intend to send out. The more you send, and the quicker you send them, the more money you will make. 6. After mailing the programs, get ready to fill the orders. 7. Copy the four 4 REPORTS so you are able to sent them out as soon as you receive an order. IMPORTANT: ALWAYS PROVIDE SAME-DAY SERVICE ON ORDERS YOU RECEIVE! 8. Make certain the letter and reports are neat and legible. YOUR GUARANTEE The check point which GUARANTEES your success is simply this: you must receive 15 to 20 orders for REPORT #1. This is a must!!! If you don't within two weeks, email out more programs until you do. Then a couple of weeks later you should receive at least 100 orders for REPORT #2, if you don't, send out more programs until you do. Once you have received 100 or more orders for REPORT #2, (take a deep breath) you can sit back and relax, because YOU ARE GOING TO MAKE AT LEAST $50,000. Mathematically it is a proven guarantee. Of those who have participated in the program and reached the above GUARANTEES-ALL have reached their $50,000 goal. Also, remember, every time your name is moved down the list you are in front of a different REPORT, so you can keep track of your program by knowing what people are ordering from you. IT'S THAT EASY, REALLY, IT IS!!! REMEMBER: "HE WHO DARES NOTHING, NEED NOT HOPE FOR ANYTHING." "INVEST A LITTLE TIME, ENERGY AND MONEY NOW OR SEARCH FOR IT FOR THE REST OF YOUR LIFE."

1 0

details of 6/26 action on HR 695??
by geeman＠best.com 17 Dec '03

17 Dec '03

Hello Washington watchers - Hey, what are the **details** ? Are these the same amendments from before, or new ones? Congressional Record: June 26, 1997 (House)] [Page H4834] >From the Congressional Record Online via GPO Access [wais.access.gpo.gov] [DOCID:cr26jn97-74] REPORTED BILL SEQUENTIALLY REFERRED Under clause 5 of rule X, the following action was taken by the Speaker: H.R. 695. A bill to amend title 18, United States Code, to affirm the rights of U.S. persons to use and sell encryption and to relax export controls on encryption; with an amendment; referred to the Committees on Commerce, National Security, and the Permanent Select Committee on intelligence for a period ending not later than September 5, 1997, for consideration of such provisions of the bill and amendment reported by the Committee on the Judiciary as fall within the jurisdiction of those committees pursuant to clause 1(e) and (k), rule X and rule XLVIII, respectively.

1 0

Re: Has your privacy been invaded? Protected? Both?
by geeman＠best.com 17 Dec '03

17 Dec '03

At 08:46 PM 6/30/97 -0400, you wrote: > >We hear a lot of steamy rhetoric about privacy and the information age, but >few real-world examples. I'm working on a story now for Time about just >this: what's happening to individual privacy today. I assmue you will protect the anonymity of any contributors even while sharing your generous payment with them! ;) > >Does the Net make us more exposed -- DejaNews and 411-type databases -- or >does it provide us with more privacy through tools like anonymous remailers >and pseudonymous identities? As a reader of cpunks the following should be obvious: the access to information from 411-etc. is simple and accessible to anyone who can type in a browser! On the other hand, remailers and nym servers are still solely the purview of propeller-heads. The remailer pages I have seen and tried to use are unreliable - and to use PGP remailers requires a level of PGP-ability that the average Joe won't invest in. Most people have Work to do, and cannot invest in the time to figure out how to use software. If we want to see pervasive use of privacy-preserving technologies then developers must realize this and develop for the Mass Market. PGP 5, PGPMail are certainly helpful and not enough. What I am concerned about is that in the absence of easy-to-use (that means no-effort-to-use) privacy software, the average Joe will rely on whatever is there for him: and in the limit this will mean whatever infrastructure the Powers-that-be want put in place for him, and not one that preserves his rights. (Forgive the gender bias: I'll switch now) There is no level of privacy afforded the average 'user' as simple to use as the intrusve technologies that are available to the snoop. >Can we trust the government to protect our >privacy when it works tirelessly to invade it? > Sometimes it is better to trust Government than it is to trust Big Business, although too often they converge onto identical tracks becuase of the ownership of Gov't *by* Big Business. I see two equally onerous invasions: One is the insistence of Government that the benefit of crypto to the Four Horsewomen of the Infocalypse (Porn, Drug Dealing, Money Laundering, and Terrorism), and the corresponding threat to society, is so large as to warrant registering everyone's secret-telling capability. The other is the intrusion by Business and Employers into the habits of consumers and workers. From click-tracking on the Web to the recently reported monitoring of every 7-11 manager's move at the POS terminal, Business is no friend of the People. That this is perhaps the more insidious threat is manifest by your not even mentioning it or including it in the question set. I fear Businesses who say "Government leave us alone because the Free Market knows what's best" and then proceed to invade and intrude in ways that are equally damaging to the privacy of the individual. The philosophy that if Business invades privacy it's OK, and if Government does so it's bad, is to say that 2+2=5. >Much has been written about this. What I'm looking for now are examples. >Have you used an anonymous remailer to cloak your identity, or been flamed >through one? Have you been denied a transaction at a store because you >refused to identify yourself? Have you hunted through databases to find >someone important? Has sensitive information about you turned up in one? > I have been fairly careful and very jealous of my privacy; and then my name and home address showed up on one of the name-search pages. I don't know if it's still there, and I don't remember the link. But then the Similac marketing Geniuses sent me something in the mail that even included the due date of my expected child! I consider that sensitive as hell, and it didn't occur via the Web. The problem is across the board. I use anonymizing tools when I need to, to protect what I consider "things" that are too sensitive for the Web. I have looked up past friends on the Web, and then not called because I felt it would be an intrusion into their life. I have found the ability to search for information on PUBLIC figures important and useful, looking for items related to their professional activities, and I think this is an important capability. The opportunity for People to make sure that the elected officials they elect and pay for, and the businesses that pave their towns and dump toxics into their yards, are behaving responsibly, is one of the few remaining possibilities for positive change. In the meantime, I'm wondering, as I wander off to renew my driver's license, why they want my social security number. And I still don't know how Similac figured out when my wife and I had sex. (C) Copyright 1997 by ..... oops! I don't want to include my name. >I'd appreciate hearing some stories... > >Thanks all, > >Declan > > >------------------------- >Declan McCullagh >Time Inc. >The Netly News Network >Washington Correspondent >http://netlynews.com/ > > > > -----BEGIN PGP SIGNED MESSAGE----- At 08:46 PM 6/30/97 -0400, you wrote: > >We hear a lot of steamy rhetoric about privacy and the information age, but >few real-world examples. I'm working on a story now for Time about just >this: what's happening to individual privacy today. I assmue you will protect the anonymity of any contributors even while sharing your generous payment with them! ;) > >Does the Net make us more exposed -- DejaNews and 411-type databases -- or >does it provide us with more privacy through tools like anonymous remailers >and pseudonymous identities? As a reader of cpunks the following should be obvious: the access to information from 411-etc. is simple and accessible to anyone who can type in a browser! On the other hand, remailers and nym servers are still solely the purview of propeller-heads. The remailer pages I have seen and tried to use are unreliable - and to use PGP remailers requires a level of PGP-ability that the average Joe won't invest in. Most people have Work to do, and cannot invest in the time to figure out how to use software. If we want to see pervasive use of privacy-preserving technologies then developers must realize this and develop for the Mass Market. PGP 5, PGPMail are certainly helpful and not enough. What I am concerned about is that in the absence of easy-to-use (that means no-effort-to-use) privacy software, the average Joe will rely on whatever is there for him: and in the limit this will mean whatever infrastructure the Powers-that-be want put in place for him, and not one that preserves his rights. (Forgive the gender bias: I'll switch now) There is no level of privacy afforded the average 'user' as simple to use as the intrusve technologies that are available to the snoop. >Can we trust the government to protect our >privacy when it works tirelessly to invade it? > Sometimes it is better to trust Government than it is to trust Big Business, although too often they converge onto identical tracks becuase of the ownership of Gov't *by* Big Business. I see two equally onerous invasions: One is the insistence of Government that the benefit of crypto to the Four Horsewomen of the Infocalypse (Porn, Drug Dealing, Money Laundering, and Terrorism), and the corresponding threat to society, is so large as to warrant registering everyone's secret-telling capability. The other is the intrusion by Business and Employers into the habits of consumers and workers. From click-tracking on the Web to the recently reported monitoring of every 7-11 manager's move at the POS terminal, Business is no friend of the People. That this is perhaps the more insidious threat is manifest by your not even mentioning it or including it in the question set. I fear Businesses who say "Government leave us alone because the Free Market knows what's best" and then proceed to invade and intrude in ways that are equally damaging to the privacy of the individual. The philosophy that if Business invades privacy it's OK, and if Government does so it's bad, is to say that 2+2=5. >Much has been written about this. What I'm looking for now are examples. >Have you used an anonymous remailer to cloak your identity, or been flamed >through one? Have you been denied a transaction at a store because you >refused to identify yourself? Have you hunted through databases to find >someone important? Has sensitive information about you turned up in one? > I have been fairly careful and very jealous of my privacy; and then my name and home address showed up on one of the name-search pages. I don't know if it's still there, and I don't remember the link. But then the Similac marketing Geniuses sent me something in the mail that even included the due date of my expected child! I consider that sensitive as hell, and it didn't occur via the Web. The problem is across the board. I use anonymizing tools when I need to, to protect what I consider "things" that are too sensitive for the Web. I have looked up past friends on the Web, and then not called because I felt it would be an intrusion into their life. I have found the ability to search for information on PUBLIC figures important and useful, looking for items related to their professional activities, and I think this is an important capability. The opportunity for People to make sure that the elected officials they elect and pay for, and the businesses that pave their towns and dump toxics into their yards, are behaving responsibly, is one of the few remaining possibilities for positive change. In the meantime, I'm wondering, as I wander off to renew my driver's license, why they want my social security number. And I still don't know how Similac figured out when my wife and I had sex. (C) Copyright 1997 by ..... oops! I don't want to include my name. >I'd appreciate hearing some stories... > >Thanks all, > >Declan > > >------------------------- >Declan McCullagh >Time Inc. >The Netly News Network >Washington Correspondent >http://netlynews.com/ > > > > -----BEGIN PGP SIGNATURE----- Version: 4.5 iQEVAwUBM7k0MjdEnrLKVNqJAQFijwf+M6Qq28YiBmfmxaMePf9QvZdSkHB2e51b 0XWX9n7CAcZVrK4YzcKfeII6Z4Z25BEK0Ddb0DdYJJWcWRKxe4pcYtr9Bb9/zMDf ii9PMquE7S/UXZGWqUgHsKx4BENwFYA9s4UF7ZWLLaD/A5ekL7kIAVFrd/52YFWO iycsGU3sdFw7xbzjCHHYUPwz51S6ger7c4YzNtlMVRKL4j0IiSLbWQ977Udp0vCj 4twqTu0l56GvkYMaybq3CHtU72bBY/6ckrqO8nmcMpZW1W2E5fKLhWsRLk2hepq1 wl7jTcU3HGvZH6ccgAfl8UtUxsyBTXL4S90dc0EsVE8XJBirTSNkUQ== =QJUu -----END PGP SIGNATURE-----

1 0

Let's Link
by grant＠letzlink.com 17 Dec '03

17 Dec '03

Let's consider linking! I invite you to visit Let's Link and add your site along with a brief description of your site content to our Internet Resource Center ... perhaps, our Let's Link & Links. Although, our "Add Your Link" service is FREE, we do ask you to reciprocate with a LINK at your site .... not required but highly appreciated. Our site visitation now exceeds 2,300 per/day! 25% Europe.... 70% North America... 5% Asia Regards, Frank Bertotti http://www.letzlink.com

1 0

Re: CIA's Manual on Assassination Politics
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Tim May wrote: > We are trading away our liberty for bullshit assurances of safety, > security, and protection from the Big Bad Wolf. (*) > > (* And of course the restrictions on publications of various items are > really designed to protect Those in Power; thus has it always been, thus > shall it always be.) Rapist: "I'm using a condom for _your_ protection." Victim: "Is that why you stole _my_ money to buy it?"

1 0

Dr. Netscape / Re: More about Netscape Bug finder
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Lynne L. Harrison wrote: > This reminded me to ask if anyone knows if, per their statement, Netscape > intends to u/l a patch for the 3.x versions. When I checked yesterday, I > didn't see any reference to it. Why would you expect Netscape to make reference to the fact that use of their browser leaves you open to violation of your privacy and security? Corporations are not expected to show concern about keeping their customers well-informed in regard to problems that arise with their product--they are expected to pretend, as much as possible, that problems don't exist (even if it may result in disastrous consequences for the customers who foolishly trust the company to act with integrity and professionalism). Netscape software is my browser of choice. I like the product, I like the company, and I like what I know of the people involved in the company. Despite these facts, however, I recognize that reality is merely a shallow reflection of classic Hollywood movies, and "Invasion of the Body Snatchers" is currently playing at the Netscape cinema complex. You may have already seen this movie, at your own corporate cinema, so you know how the plot goes... You wake up one morning and realize that behind the glazed eyes of your formerly human co-workers, lurks the alien energy of a communal corporate soul. The company spokesperson (who has two cute kids and a dog that are always a hit at the company picnic) has turned into an alien life-form which is telling the press and public that the chemical spill near the high-school has nothing to do with the hands that are now growing out of the students' foreheads. The company president (who risked his job to support a decent employee health-plan against the investor's wishes) begins to speak about a "ten year study" to determine why 20% of the company employees develop a rare form of cancer every year. Your best friend at the company changes the subject when you mention the growing number of the company's customers who seem to have an extra ear growing on their forearm. You can tell that your best friend is looking into your eyes and trying to discern if you are one of "them." A twenty-dollar street hooker will sometimes have time to join you for coffee and a burger at the conclusion of a business transaction, but a high-priced call-girl invariably recognizes the danger of true personal contact adversely affecting future cash flow. For the same reason, the corporate legal team would rather discuss the responsibility for your failing health in a sterile boardroom, than during dinner at your house with the whole family present. It is probably in Netscape's best short-term financial interest to downplay the full implications of the "bug" in their software, as well as avoiding revealing the true reasons for this "bug" existing in the first place. However, I would much rather visit their website and see a big, red "Warning!!!" sign flashing at the top, with a pointer to full information about the nature and effect of the "bug," as well as disclosure of facts that would allow me to judge what level of trust I should use in the future in regard to the company and their products. After all, in terms of security, we can consider ourself to be "sleeping" with those whose software we use. If it appears that they are avoiding being fully honest about whether or not they are practicing "safe software" in the best interests of both themself and their "Johns," then perhaps we should think about changing our "sleeping" habits. The bottom line is that it does not reflect well on Netscape to have their customers and/or software users checking with the members of mailing lists (and the checkout clerk at the local QuickMart) to find out if there is any chance that they may be able to use Netscape's product safely in the future. I did a quick review of the Netscape documentation and found it gives no indication that users should inquire at the local QuickMart for information about problems and bug fixes for their products. TruthMonger ~.~.~.~.~.~ DISCLAIMER: I am not your hooker; you are not my John. Accordingly, the above is *NOT* illegal advice.

1 0

Details of HR 666
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

> Under clause 0 of rule XYZ, the following action was taken by the > Speaker: > > H.R. 666. A bill to amend title 0, United States Code, to > affirm the rights of U.S. persons to breathe the air around > them and to relax export controls on wind; with an > amendment; referred to the Committees on Commerce, National > Security, and the Permanent Select Committee on intelligence > for a period ending not later than September 5, 1997, for > consideration of such provisions of the bill and amendment > reported by the Committee on the Judiciary as fall within the > jurisdiction of those committees pursuant to clause 0(e) and > (k), rule XYZ and rule XLVIIIX, respectively.

1 0

Digital Signatures & THE LAW???
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Has there been any concideration for the difference between a digital signature that is used only for authentication and one that is legally binding?? I would hate for these Digital Signature Laws make every e-mail message I sent a legally binding document. :( - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBM7aBbI9Co1n+aLhhAQHsCwP/dUQ6jixcfYCkLLFkZomM5gzCysRjnlr3 rGjXMMDyVZ2OQn2ZjSJ+TmrocbmZy2yNolBquRN0w0PjnGbC8k8ZCFxW8C4xHX9B CBf7XNGijoFxi3DTVViTv/i+waLX6sfJM1fp9IpUe7Da5fOb6vqf0rXNDPwdVLIB Sn0rJodgqho= =+Bcp -----END PGP SIGNATURE-----

4 3

Dr. Dobbs Cryptography and Security CD-ROM
by Alan Olsen 17 Dec '03

17 Dec '03

While reading the latest issue of Dr. Dobbs, I found something of interest... Dr. Dobbs Essential Books on Cryptography and Security CD-ROM Price $99.95 Includes the following books: -- Applied Cryptology, Cryptographic Protocols, and Computer Security Models by Richard Demillo -- Applied Cryptography: Protocols, Algorithms, and Source Code in C, Second Edition by Bruce Schneier -- Contemporary Cryptology: The Science of Information Integrity edited by Gustavus J. Simmons -- Cryptography and Data Security by Dourthy Denning -- Cryptography: A New Dimension in Computer Data Security by Carl Meyer -- Cryptography: Theory and Practice by Douglas Stinson -- Handbook of Applied Cryptography by Paul C. Van Oorschot, Scott A. Vanstone, and Alfred Menezes -- Military Cryptanalysis, Volumes I-IV by William Friedman -- "RSA Laboratories FAQ on Cryptography," "RSA Labratories Technical Reports," "RSA Laboratories Security Bullitens," and "CryptoBytes Newsletter". The CD-ROM also boasts having a search engine. (No indication as to what OS. Probably Wintel only.) It is supposed to be shipping in July. It is only available to US customers. Phone orders: 1-800-992-0549 E-mail: orders(a)mfi.com Fax: 913-841-2624 Mail: Dr. Dobbs CD-ROM Library 1601 West 23rd St, Ste. 200 Lawrence, KS 66046-2703 [Disclaimer: I have nothing to do with Dr. Dobbs other than being a subscriber.] I plan on getting it as it has at least one book I have been planning on buying that costs about what the CD-ROM runs... I will tell people how good it is when I get it. --- | "That'll make it hot for them!" - Guy Grand | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

11 11

The Website With Everything
by .＠lox2.loxinfo.co.th 17 Dec '03

17 Dec '03

http://www.master-mall.com/ Everything you will ever need is here, If you are looking to start a business,need to find a long lost love or relative,or just like to play games,this is the place, you will even find "hard to get information" on offshore banking,finding people,very economical web page creation,and hosting even bulk email advertising. This place has it all. Thanks for your time.

1 0

Re: Digital Signatures and the Law...
by some days weren't there at all 17 Dec '03

17 Dec '03

> Has there been any concideration for the difference between a digital > signature that is used only for authentication and one that is legally > binding?? What's the difference? When I sign a contract, I'm simply giving notice that I accept its terms and conditions. What I write in snail mail, however, may also be used in a court of law to show that I actually thought or wrote whatever it was I wrote. Why would e-mail be any different? > I would hate for these Digital Signature Laws make every e-mail message I > sent a legally binding document. :( That's the rub about nailing down identity...there's no such thing as plausible deniability anymore. In a court of law, assuming you could prove to a judge and jury that digi sigs establish identity beyond a reasonable doubt, I'd imagine that anything signed, law or no law, would be legally binding insofar as you actually wrote it. I think I'm missing something...? --------------------- "Deities do not fall ten floors to the basement" - Willis pandemic(a)hotmail.com please contact for PGP public key. http://www.skylink.net/~bigdaddy

1 0

DEF CON V Convention Announcement #1.19 (06.30.97)
by Declan McCullagh 17 Dec '03

17 Dec '03

[I'm planning to show up Friday morning. Anyone else going? --Declan] ******* READ & DISTRIBUTE & READ & DISTRIBUTE & READ & DISTRIBUTE & READ & DISTRIB DEF CON V Convention Announcement #1.19 (06.30.97) July 11-13th @ the Aladdin Hotel and Casino in Las Vegas XXXXXXXXXXXXXXXXXXXXXXXX XX DEF CON V Convention Announcement XXXXXXXxxxxXXXXXXXXXXXXXXX XX DEF CON V Convention Announcement XXXXXXxxxxxxXXXXXX X X DEF CON V Convention Announcement XXXXXxxxxxxxxXXXXXXX X DEF CON V Convention Announcement XXXXxxxxxxxxxxXXXX XXXXXXXXX DEF CON V Convention Announcement XXXxxxxxxxxxxxxXXXXXXXXXX X DEF CON V Convention Announcement XXxxxxxxxxxxxxxxXXXXXX XX X DEF CON V Convention Announcement XXXxxxxxxxxxxxxXXXXXXXX DEF CON V Convention Announcement XXXXxxxxxxxxxxXXXXXXXX X XX DEF CON V Convention Announcement XXXXXxxxxxxxxXXXXXXXXXX XX X DEF CON V Convention Announcement XXXXXXxxxxxxXXXXXXXXX X DEF CON V Convention Announcement XXXXXXXxxxxXXXXXXXXXXXXXXX DEF CON V Convention Announcement XXXXXXXXXXXXXXXXXXXXXXXXXXXX X DEF CON V Convention Announcement READ & DISTRIBUTE & READ & DISTRIBUTE & READ & DISTRIBUTE & READ & DISTRIB The only convention with free beer! IN SHORT:-------------------------------------------------------------------- WHAT: Speakers and partying in Vegas for all hackers WHEN: July 11th - 13th WHERE: Las Vegas, Nevada @ the Aladdin Hotel and Casino COSTS: $30 in advance, $40 at the door MORE INFO: http://www.defcon.org or email info(a)defcon.org IN LONG:--------------------------------------------------------------------- It's time to brave Las Vegas again for DEF CON! This is an initial announcement and invitation to DEF CON V, a convention for the "underground" elements of the computer culture. We try to target the (Fill in your favorite word here): Hackers, Phreaks, Hammies, Virii Coders, Programmers, Crackers, Cyberpunk Wannabees, Civil Liberties Groups, CypherPunks, Futurists, Artists, Criminally Insane, Hearing Impaired. It seems that books about the culture are becoming more popular, so of course reporters are also welcome. You won't be hurt. I promise. Just bring cash for drinks. So you heard about DEF CON IV, and want to hit part V? You heard about the parties, the info discussed, the bizarre atmosphere of Las Vegas and want to check it out in person? You want to do weird shit _away_ from the hotel where you can't get me in trouble? You have intimate knowledge of the SWIFT network, and want to transfer millions of dollars to the Def Con account? Then you're just the person to attend! What DEF CON is known for is the open discussion of all ideas, the free environment to make new contacts and the lack of ego. More people have made great friends at DEF CON over the years than my brain can conceive of. DEF CON is also known for letting the "Suits" (Government / Corporate) mix with everyone and get an idea of what the scene is all about. The media makes an appearance every year and we try to educate them as to what is really going on. Basically it has turned into the place to be if you are at all interested in the computer underground. [Note]----------------------------------------------------------------------- Now last year over 800 people showed up and threw my whole program for a loop. I was thinking 500+ people, but when 800 showed up it got a little crazy for the planning staff. This year I am planning for 1,000. This way I will be able to accommodate everyone and have less logistical screw- ups. I would also like to apologize to everyone last year who had temporary badges for half the convention, etc. I will do all that is possible for maximum coolness, and minimum hassles. Anyway, enough of my shit, on with the details. [End Note]------------------------------------------------------------------- SPEAKERS:-------------------------------------------------------------------- Over the years DEF CON has had many notable speakers. This year there will be more of an emphasis on technical talks. There will be a separate smaller room for break-out sessions of more specific topics. While the talks of the past have been great, it always seems some tech people drop out and general talks fill in. I will load it tech heavy so when people do drop out there will still be plenty of meat left for the propeller heads. There will be some speaking on Friday evening before Hacker Jeopardy, all day Saturday and Sunday. About 20 people will speak, plus smaller tech sessions. If you are interested in speaking or demonstrating something please contact me. Current speakers include: [> Nhil - Windows NT (in)security. The challenge response system, NT 5.0 Kerb security services, man in the middle attacks on domain controllers. This will be a more technical discussion of NT related security. [> Koresh - Hacking Novell Netware. [> Yobie - Emerging infrastructures made possible by Java. He will describe and talk about Java as the foundation for a global, object-oriented distributed network. New concepts and computing paradigms will discussed as well as applications for both applications development or straight-out hacking. [> Mudge - System Administrator for L0pht Heavy Industries. He will present a technical talk on something cool. [> Clovis - From the Hacker Jeopardy winning team. He will discuss issues with security and networked object systems, looking at some of the recent security issues found with activeX and detail some of the potentials and problems with network objects. Topics will include development of objects, distributed objects, standards, ActiveX, corba, and hacking objects. [> Bruce Schneier - Author of Applied Cryptography and the Blowfish algorithm - Why cryptography is harder than it looks. [> FBI Computer Crime Squad - They will make another appearance this year only if I can bribe them with the audio from last years convention. Can I do it in time? [> Richard Thieme - "The Dynamics of Social Engineering: a cognitive map for getting what you need to know, working in networks, and engaging in espionage quietly; the uses of paranoia, imagination, and grandiosity to build the Big Picture. [> Wrangler - Packet Sniffing: He will define the idea, explain everything from 802.2 frames down to the TCP datagram, and explain the mechanisms (NIT, bpf) that different platforms provide to allow the hack. Wrangler has been programming since seven column paper tape. He is a loner with the social skills of a California Condor. He has never been a member of LOD, MOD, or any other group. He has written no books, is not currently employed, and refuses to discuss what he refers to as "that credit card provider thing back when I used to do mainframe shit." His current projects include looking for his next Fortune 100 contract and writing the DEFCON V virus. [> Seven - What the feds think of us. [> Richard K. - Electronic countermeasures, counter espionage, risk management. Should include a demonstration of electronic countermeasures equipment as well as a talk on what works, what doesn't, and the industry. [> Tom Farley the Publisher of the "Private Line" journal, and Ken Kumasawa of TeleDesign Management - Toll Fraud in the 90s: Two perspectives. An overview of phreaking from a hackers point of view and an industry/security consultants point. [> Michael Quattrocchi - The future of digital cash and a presentation about the modernization and state of register-level debit cards; in effect currently throughout Canada. [> The Deth Vegetable - "The Cult of the Dead Cow embarks on a new era of Global Domination for the 21st Century three years early -- if you're not at Defcon this year, you won't be down with the master plan. Important announcements and startling new developments that will affect the entire history of the Computer Underground as you know it." [> Ira Winkler - Real life case studies of successful and unsuccessful corporate espionage. [> Sameer Parekh - c2.net - Why cryptography is harder than it looks, part two. A look at implementation and production problems facing people and companies wishing to develope and distribute strong encryption. [> Carolyn P. Meinel - Moderator of the Happy Hacker Digest and mailing lists. She will preside over a seperate Happy Hacker discussion pannel that will cover the topics of wether or not "newbies" should have information handed to them, or should they learn for themselves? [> Dan Veeneman - Low Earth Orbit satellites are nearing the launch stage, and this talk will cover the different systems that are planned and some of the services they'll offer. A bit on GPS that wasn't covered last year as well as the ever popular question and answer section. [> Hobbit - CIFS is a load of CACA - Random SMB CIFS stuff in Microsfot products. [> Cyber - An overview and explanation of available crypto-tools. What tools and programs do what, when to use them and on what platforms. From someone who has spent lots of time playing around with the currently available set of applications. [> Keith - Has some experience writing firmware for embedded microcontroller applications, and is giving a technical talk on applications of microcontrollers in the h/p community. [> James Jorasch - Hacking Vegas - How to games the gamers. From someone who used to deal with hotel casino security. What really goes on? SCHEDULE:-------------------------------------------------------------------- FRIDAY: Network Setup, Sign in, Informal PGP Keysigning at the "PGP table", Lots of Partying. Capture the Flag Contest Starts at 16:00 On Friday there will be the demonstrations of the Radio Burst Cannon, a "real" rail gun, and an omni-directional cell phone jammer. Times to be announced. 10:00 - Doors open, sign in starts 10:00 - Movies start in main conference room 16:00 - Capture the Flag II starts 15:30 - Round up and head off for demonstrations of HERF, and rail gun madness. Nothing may happen, then again.. 23:30 - 23:00 James Jorasch - "Hacking Vegas" how to beat the system in Vegas by someone who knows it inside and out. 23:00 - 03:00 Hacker Jeopardy Starts. SATURDAY: 10:00 - 10:50 Richard Thieme - The Dynamics of Social Engineering. 11:00 - 11:50 Yobie - Emerging infrastructures made possible by Java. 12:00 - 12:50 Clovis - issues with security and networked object systems. 13:00 - 13:50 FBI Computer Crime Squad - 14:00 - 14:50 Deth Veggie - Global Domination, cDc style. 15:00 - 15:50 Seven - What the feds think of us. 16:00 - 16:50 Richard K. - 17:00 - 17:50 Tom Farley and Ken K. - Toll Fraud in the 90s: Two perspectives. Saturday Breakout Tech Sessions: Koresh - Novell issues. Mudge - Secure Coding. Hobbit - Why CIFS is CACA. Nihil - NT security issues. Wrangler - Packet Sniffing. Keith - firmware for embedded microcontroller applications. 24:00 (Midnight) Final rounds of Hacker Jeopardy. SUNDAY: 10:00 - 10:50 Ira Winkler - Industrial Espionage. 11:00 - 11:50 Sameer - Why cryptography is harder than it looks, part two. 12:00 - 12:50 Cyber - An overview and explanation of available crypto-tools. 13:00 - 13:50 Carolyn Meinel - Happy Hacker Panel. 14:00 - 14:50 Michael Q. - The future of digital cash. 15:00 - 15:50 Dan Veeneman - Low Earth Orbit satellites. Sunday Breakout Tech Sessions: Happy Hacker track Panel: "The Newbie Experiments" Moderator is Carolyn Meinel, author of the Guides to (mostly) Harmless Hacking series. Other panel members are: - Matt Hinze, editor of the Happy Hacker Digest. - Bronc Buster, who runs a Web forum, IRC server and the New Buckaroos Web site for his fast-growing band of newbies. - Mark Biernacki of Shellonly.com will talk about this new ISP which is designed to make it easy for newbies to learn to hack. Just say "Telnet port 22!" - Jericho, who will hold forth on "Let the newbies fend for themselves." We will allow each panel member to open with a brief presentation of his or her work, followed by debate first among panel members, followed by Q&A from the audience. We expect some intense debate:-) Then if the Aladdin hotel hasn't yet been demolished yet by riots, we will continue with a series of individual presentations: - Jon McClintock, editor of Happy-SAD (Systems Administrator Digest) will demonstrate how to install Linux. - Bronc Buster will hold forth on the Windows 95 denial of service programs his Web site offers. - Carolyn Meinel will demonstrate how to read email headers, create, and decipher forged email. Breakout Tech Sessions: 16:00 Awards for Capture the Flag End of it all, cleanup, etc. See you all next year! EVENTS:---------------------------------------------------------------------- [> HACKER JEOPARDY: Winn is back with Hacker Jeopardy!! The third year in the running! Can the all-powerful Strat and his crypto-minion Erik, whose force cannot be contained, be defeated?! Will the powers that be allow Strat-Meister to dominate this beloved event for the third year in a row?! Can Erik continue to pimp-slap the audience into submission with a spoon in his mouth?!? Only Skill, Time, and booze will tell the tail! The Holy Cow will help supply the beer, you supply the answers. The first round starts at 12 midnight o'clock on Friday and lasts until it is done. The second and secret rounds will happen Saturday at midnight. 6 teams will be picked at random and compete for the final round. There can be only one! Strat's Team, the winners from last year will defend if all the members can be found. [> FREE BEER! Holy Cow will provide free beer tickets! If you are over 21 prepare to consume "hacker" beers. Actually it's whatever beer they have on tap, but it's the best beer in Las Vegas. Follow Las Vegas Blvd. up until you see the florescent cow with the big sunglasses. All taxi drivers know of this Mecca. Over 1,000 free beers in all! [> BLACK AND WHITE BALL: We've talked it over, and the verdict is in. For the last two years at DEF CON there has been a sort of unspoken Saturday night dress up event. People have worn everything from party dresses and Tuxedoes to AJ's ultra pimp Swank outfit with tiger print kilt. This year it is official. Wear your cool shit Saturday night, be it gothic or PVC vinyl or Yakuza looking black MIBs. No prizes, just your chance to be the uber-bustah pimp. [> THE TCP/IP DRINKING GAME: If you don't know the rules, you'll figure 'em out. [> CAPTURE THE FLAG: ALL NEW, ALL IMPROVED, MORE CONFRONTATIONAL, 1997 ILLUMINATI INVITATIONAL, CAPTURE THE FLAG, HACKER STYLE. The goal is to take over everybody else's server while protecting your own. To cut down on lag time and federal offences we're providing a playing field of 5 flag-machine networks connected by a big router in the middle. The rules: 1) No taking the network down for more than 60 seconds. 2) No taking any flag machine (including your own) down for more than 3 minutes. 3) In order to be counted in the game, a team's flag machine must - be directly connected to the network; - have a text file flag on the machine readable by at least 2 accounts, - keep at least 3 *normal* services running in a way that a client could actually get their work done using them. - run a web server if technically possible. 4) No goonery/summoning of elder gods/Mickey Finns/physical coercion... you get the idea. ( You had the idea, but we're trying to prevent you from using it. ) The field of play : Each network will have a "server" of some kind on it, called the flag machine. At the start of the game, these servers will be stock installations a lot like what you'd see on the average academic/secret cabal/military/megacorp network. Each of these machines will have a PGP private key, named root.flag, and a web server. There will also be a machine to provide DNS, called the scoreboard. Teams: Teams can be one human or more. In order to be a team, you have to generate 20 256bit PGP key pairs, have a DEFCON goon pgp-sign them and put the public keys on the scoreboard webserver. We'll generate a hundred key pairs in advance, so the first five teams can just grab a floppy disk (if they're trusting). To prove that you've hacked a flag machine, PGP - sign a message with the root.flag from the hacked machine, then with one of your own. Post the doubly-signed message on the scorekeeper web server, and you've captured that flag (and invalidated the captured root.flag). When you've captured a flag, decide between conquest and condescension: either take over the server yourself, or hand it back to its not-so-eleet owners. To conquer, put one of your PGP private keys on the captured server to become the next root.flag. (Of course, you have to properly secure the server to maintain your new territory.) To condescend, just wait until the original owners see their shame spread across the scoreboard. (It would sure be a pity if they had to put up a new key before they figured out how you got in last time, wouldn't it?) Two Ways to Win: #1 EVIL EMPIRE: Whoever has the most servers responding with their teams' private keys at the end wins. #2 PIRATE: Fabulous prizes will also be given to whoever racks up the highest total number of flags captured. Rough game mechanics (why is everyone so untrusting?): Once every 5 minutes or more, the scoreboard machine will post a plaintext challenge. Every team that claims to own a server has to PGP-sign that challenge with the private key registered for that server and post the signed version on their machine. If a server can't respond within 3 minutes, then nobody owns it, and it's fair game to be taken back over by the goons. Specific rules will be available in print at DefCon before the game begins. This was a message from The People [> QUAKE COMPETITION: http://www.ctive.com/ntech/defcon.htm This year knightPhlight contacted me and wanted to organize a single elimination Quake competition to find out who that badest ass 'mo 'fo is. Check out the web site to get the rules, sign up, or to donate a computer the greater good of destruction. It is IMHO that Quake by id Software rules 3D action gaming. But who rules Quake? We'll find out this July 11th-13th at the DefCon Conference in Las Vegas. This isn't going to be a networked game intent on quickly eliminating as many players as possible in a single round. Rather, one-on-one games will be played to absolutely determine who the best really is. Of course, you already know your the best so why would you feel obligated to prove it? Because we'll give the first place winner $750. Now, being the wily person you are, I bet you would like to know where I got the money for the prizes. It'll come from your registration fee of $7.50. Any half wit can do the math and see the 10,000% return for the winner. But just for entering you'll be in a drawing for really kewl stuff. If you don't think its kewl you can just give us your email address and we'll be happy to send you a couple hundred thousand messages explaining why the prizes are great. [> NET CONNECTION AND TOPOLOGY: DefCon 5 Network Plan (v.99) Telecommunications ------------------ Media Type: T1 ESF/B8ZS (not D4/AMI) Service Provider: Las Vegas Digital Internet Telco: Sprint Equipment needed Equipment on-hand ---------------- ---------------------------------------------- CSU/DSU Verilink AS2000's with NCC 2301 cards (JC) Router Cisco 2501 (Lock) Net Admin server (Lock ) 10bT Hubs 16-port from Lock - need more to populate the room 10bT Cable (miles) Everybody bring their own - will need some extra to link hubs Network Services: ----------------- Web Server CU-reflector RealAudio Server IRC server? This year we are pre-building many of the network boxes so the net can go up first thing Friday. It looks like we will have a T1 line and we will break it out to 10 BaseT hubs. If you want in on the network bring along the appropriate cables and adapters. More Net Madness! The T1 bandwidth will allow us to do the following cool stuff: - Have several color quickcams and a CU-SeeMe reflector site set up so people not at the con can check out what's going on. During the convention check out the DEF CON web site to get the location of the reflector site. You should get and install the software needed to view CU-SeeMe streams in advance! - Have a RealAudio server set up to stream the speakers talks to those who can not attend. - Potentially play a competitive multi user game(s) over the net. NOTE! If you wish to participate interactively with the convention please e-mail me and we can coordinate something. It would be great to get people from all over the world involved. [> 5th ANNUAL SPOT THE FED CONTEST: The ever popular paranoia builder. Who IS that person next to you? "Like a paranoid version of pin the tail on the donkey, the favorite sport at this gathering of computer hackers and phone phreaks seems to be hunting down real and imagined telephone security and Federal and local law enforcement authorities who the attendees are certain are tracking their every move.. .. Of course, they may be right." - John Markhoff, NYT Basically the contest goes like this: If you see some shady MIB (Men in Black) earphone penny loafer sunglass wearing Clint Eastwood to live and die in LA type lurking about, point him out. Just get my attention and claim out loud you think you have spotted a fed. The people around at the time will then (I bet) start to discuss the possibility of whether or not a real fed has been spotted. Once enough people have decided that a fed has been spotted, and the Identified Fed (I.F.) has had a say, and informal vote takes place, and if enough people think it's a true fed, or fed wanna-be, or other nefarious style character, you win a "I spotted the fed!" shirt, and the I.F. gets an "I am the fed!" shirt. NOTE TO THE FEDS: This is all in good fun, and if you survive unmolested and undetected, but would still secretly like an "I am the fed!" shirt to wear around the office or when booting in doors, please contact me when no one is looking and I will take your order(s). Just think of all the looks of awe you'll generate at work wearing this shirt while you file away all the paperwork you'll have to produce over this convention. I won't turn in any feds who contact me, they have to be spotted by others. DOUBLE SECRET NOTE TO FEDS: This year I am printing up extra "I am the Fed!" shirts, and will be trading them for coffee mugs, shirts or baseball hats from your favorite TLA. If you want to swap bring along some goodies and we can trade. Be stealth about it if you don't want people to spot you. Agents from foreign governments are welcome to trade too, but I gotta work on my mug collection and this is the fastest way. [> RAIL GUN DEMONSTRATION: (Friday) On Friday afternoon there will be a demonstration of a hand held rail gun. This garage project should be able to fire a graphite washer very, very fast. [> OMNIDIRECTIONAL CELL PHONE JAMMER DEMONSTRAITON: (Friday) Another interesting creation to be tested on Friday in the desert. Come along and watch you cell phone antenna explode with power! See control channels crumble before you. [> RADIO BURST CANNON DEMONSTRATION: (Friday) While not quite a HERF gun, this should come close. The RBC should be able to produce up to or less than one MegaWatt for up to or less than one second. What will this do? Who knows! Come and find out. Obviously the above demonstrations will take place away from the local hospitals and casinos out in the desert someplace, so be prepared. HOTELS:---------------------------------------------------------------------- [> Book your room NOW!!! We have a block of rooms, but it is first come, [> first served. Rooms get released about one month before the convention. [> Book by June 9th or risk it. The room rates are quite cool this year. PRIMARY HOTEL: The Aladdin Hotel and Casino 3667 Las Vegas Blvd. South, Las Vegas, Nevada Built in 1966 it is one of the oldest hotels in Las Vegas that hasn't been blown up to make room for newer ones. It is quite nice and has Tennis courts, two swimming pools, Chinese, Vietnamese and Korean. A Seafood and steakhouse, Joe's Diner and a 24 hour coffee shop too. It's located next to the MGM Theme park on the strip. PHONE: 1-800-634-3424, reference the "DC Communications conference" for reservations. 702-736-0222 RATES: Single & Double rooms are $65 in the Garden section, $85 for the Tower. Suites are $250 to $350. All costs are plus 8% room tax. Rollaway beds are available for an additional $15 a night. STUFF IN VEGAS:-------------------------------------------------------------- URLs Listings of other hotels in Las Vegas, their numbers, WWW pages, etc. http://www.intermind.net/im/hotel.html http://vegasdaily.com/HotelCasinos/HotelAndCasinos/CasinoList.html VENDORS / SPONSORS / RESEARCH:----------------------------------------------- If you are interested in selling something (shirts, books, computers, whatever) and want to get a table contact me for costs. If you have some pet research and you want to have the participants fill out anonymous questioners please contact me for the best way to do this. If you want to sponsor any event or part of DEF CON V in return for favorable mentions and media manipulation please contact me. For example in the past Secure Computing has sponsored a firewall hacking contest. MORE INFO:------------------------------------------------------------------- [> DEF CON Voice Bridge (801) 855-3326 This is a multi-line voice bbs, VMB and voice conference system. There are 5 or so conference areas, with up to eight people on each one. Anyone can create a free VMB, and there are different voice bbs sections for separate topics. This is a good neutral meeting place to hook up with others. The Voice bridge will be changing numbers soon, but the old number will refer you to the new location. The new spot won't suffer from "Phantom" bridges! [> MAILING LIST send emial to majordomo(a)merde.dis.org and in the body of the message include the following on a separate line each. subscribe dc-stuff dc-announce is used for convention updates and major announcements, dc-stuff is related to general conversation, planning rides and rooms, etc. [> WWW Site http://www.defcon.org/ Convention updates and archives from previous conventions are housed here. Past speakers, topics, and stuff for sale. Also a growing section of links to other places of interest and current events. [> The Third Annual California Car Caravan to DEF CON! http://www.netninja.com/caravan There are also some resources (links to other web sites and text files) generally related to DefCon--not specifically the California Caravan. These resources are available at: http://www.netninja.com/caravan/resources.html [> The DEF CON V Car ride sharing page: Use this site to arrange ride sharing to the convention from all over North America. If you can spare a seat for someone, or need to leech a ride go to the ride sharing page set up by Squeaky. http://garbage.bridge.net/~defcon/defcon.html [> EMAIL dtangent(a)defcon.org Send all email questions / comments to dtangent(a)defcon.org. It has been said that my email is monitored by various people. If you want to say something private, please do so with my pgp key (At the bottom of this announcement) I usually respond to everything, if not I'm swamped or had a system problem. [> GIVE ME MONEY! SNAIL MAIL PRE-REGISTRATION Send all written materials, pre-registrations, etc. to: DEF CON, 2709 E. Madison, Seattle WA, 98112 If you are pre-registering for $30 please make payable to DEF CON and include a name to which you want the registration to apply. I don't respond to registrations unless you request. DO YOU WANT TO HELP?--------------------------------------------------------- Here is what you can do if you want to help out or participate in some way: Donate stuff for the continuous giveaways and the various contests. Got extra ancient stuff, or new cool stuff you don't use anymore? Donate it to a good cause! One person was very happy over winning an osborne "portable" computer. ORGANIZE sharing a room or rides with other people in your area. Join the mailing list and let people know you have floor space or some extra seats in your car. Hey, what's the worst that can happen besides a trashed hotel room or a car-jacking? CREATE questions for hacker jeopardy (you know how the game is played) and email them to winn(a)infowar.com. No one helped out last year, so this year let's try. Everything from "Famous narks" to "unix bugs" is fair game. BRING a machine with a 10bt interface card, and get on the local network, trade pgp signatures, etc. FINAL CHECK LIST OF STUFF TO BRING:------------------------------------------ From: Enigma Here is a list of items to bring to DefCon. These are only suggestions. Your mileage may vary. :) Items to bring to DefCon ~~~~~ ~~ ~~~~~ ~~ ~~~~~~ Clothing - Comfortable shirts and pants/shorts - Socks, underwear, etc - Bathing suit - Toiletries (deodorant, toothbrush, comb, hair spray,..., giant tub of hair grease, Oxy pads, etc) - An extra towel (don't leave home without it. Anyway, doesn't it always seem that you run out of clean towels in the bathroom?) - Something cool, hip, pimp-o-matic, or ninja-riffic to wear Saturday night at the Black and White Ball You can skip the deodorant and extra clothing if all you are going to do is play "Magic: The Gathering" and "Quake." Everyone else does. Stuph - Your shades. Vegas is hot. The sun is bright. 'Nuff said. (If you wear eye glasses, I hear the clip-on, flip-up sunglasses are quite the fashion statement) - Sunscreen of at least SPF 100. After spending hundreds of hours in front of the monitor, who needs the sun to ruin their ghostly white tan? - A hat--preferably with a cool logo or catchy phrase like "Gandalf Routers," "Netscape," "Microsoft [with "sucks" scrawled below it in permanent marker]", "I [heart] [insert government institution: Cops, Feds, etc]"...you get the idea - Note book, palmtop, or laptop to take notes on during the speeches - [Micro]casette recorder to record the speeches (or everyone getting drunk in your room Saturday night, not knowing what they are saying, with no hope of remembering it...excellent blackmail material!) - Camcorder (see above...<>) - Digital camera--for all of the above reasons PLUS you can instantly upload the images through the T1 onto the net - Fake ID for all of you under 18/21 - Fake ID for everyone else, if you're planning something illegal - Your best jokes (Nooooo! Not the superman joke! Not the pink joke) - Your best hacking stories...these are all about something "your friend" did, aren't they? You wouldn't admit to doing anything illegal, now, would you? - Someone else's--oops, I mean "your" credit card numbers Fun - Your drug(s) of choice -- From caffeine to pot to speed to acid - Zippo and extra fuel. And while you're at it, put an extra flint (assuming you can find one in the back of your junk drawer) in the bottom. You always run out at just the wrong time. - Extra smokez (Splurge: get some cigars or cloves for the weekend) - Leather - Handcuffs and chains, nipple clamps, etc. - Saran wrap, duct tape, electrical tape, gaffer's tape - Candles (the drippy kind) - Incense - Oils - Your copy of "The Pocket Kama Sutra" (ISBN 0-7894-0437-0) - That corn starch and water "slime" that Light Ray (I believe) and others believed to be the ultimate thing, several DefCon's back. Tech - Laptop w/ Ethernet card - Extra laptop battery - A zip drive with a stack of disks containing all your soooper k-rad haxing utilities and g-files - 10bt/10b2 cabling - A small hub - You did remember to put a packet sniffer on your zip disk, right? Just checking. - Every power cord you could possibly need - A serial cable with a plethora of adapters so you can get each end to be male/female, 9pin/25pin, null-modem/straight - Cable to connect the above mentioned digital camera to the laptop - Scanner (modded, of course) - Frequency counter (I hear the "Scout" is pretty good) - HAM radio. Any band, any frequency. You didn't modify it to transmit on arbitrary frequencies, did you? Naughty monkey! - An assortment of tuned antennas - That zip disk has the FCC frequency allocations on it, right? - Your uber-elite organizer (the DOS based HP palmtops are quite cool) to collect handles and email addresses from people - High energy weapons ("Is that an unlicensed nuclear accelerator on your back?" "No, it's just a HERF gun." "Oh.") - Laser pointer (don't get kicked out of the hotel again, youz doodz) - Your "white courtesy phone" that you stole from the Monte Carlo last year - A microbroadcasting station with plenty of tuneage - Your lock picks or lock picking gun - A pocket-sized tool kit containing a modular screwdriver and plenty of attachments (flathead, philips, torx, hex, etc) - A pocket knife, pliers and wire cutters--or alternatively a Leatherman's tool - Hell, while you're at it: why not some bring bolt cutters, a sledge hammer, and a hack saw? - Telephone handset with alligator clips. Or, if you're uber- 31337, you have a lineman's butt set (with the serial number and telco logo filed off) - Bubble gum or epoxy putty--anything maleable and hardens. This is good for fixing hoses under the hood of your car. It's also useful to jam mechanical sensors (What would happen if the microwave always though it's door was open? Or if the elevator always thought there was someone blocking the path of the door? Wouldn't hotel security be pissed if they couldn't get into their security room because someone jammed a toothpick into the keyhole with krazy glue?) - An alabi - Spam - Multimeter - Cordless electric soldering iron - Parts box MY PGP KEY:------------------------------------------------------------------ -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.1 mQCNAy6v5H8AAAEEAJ7xUzvdRFMtJW3CLRs2yXL0BC9dBiB6+hAPgBVqSWbHWVIT /5A38LPA4zqeGnGpmZjGev6rPeFEGxDfoV68voLOonRPcea9d/ow0Aq2V5I0nUrl LKU7gi3TgEXvhUmk04hjr8Wpr92cTEx4cIlvAeyGkoirb+cihstEqldGqClNAAUR tCZUaGUgRGFyayBUYW5nZW50IDxkdGFuZ2VudEBkZWZjb24ub3JnPg== =ngNC -----END PGP PUBLIC KEY BLOCK-----

1 0

DEF CON V Convention Announcement #1.19 (06.30.97)
by Declan McCullagh 17 Dec '03

17 Dec '03

[I'm planning to show up Friday morning. Anyone else going? --Declan] ******* READ & DISTRIBUTE & READ & DISTRIBUTE & READ & DISTRIBUTE & READ & DISTRIB DEF CON V Convention Announcement #1.19 (06.30.97) July 11-13th @ the Aladdin Hotel and Casino in Las Vegas XXXXXXXXXXXXXXXXXXXXXXXX XX DEF CON V Convention Announcement XXXXXXXxxxxXXXXXXXXXXXXXXX XX DEF CON V Convention Announcement XXXXXXxxxxxxXXXXXX X X DEF CON V Convention Announcement XXXXXxxxxxxxxXXXXXXX X DEF CON V Convention Announcement XXXXxxxxxxxxxxXXXX XXXXXXXXX DEF CON V Convention Announcement XXXxxxxxxxxxxxxXXXXXXXXXX X DEF CON V Convention Announcement XXxxxxxxxxxxxxxxXXXXXX XX X DEF CON V Convention Announcement XXXxxxxxxxxxxxxXXXXXXXX DEF CON V Convention Announcement XXXXxxxxxxxxxxXXXXXXXX X XX DEF CON V Convention Announcement XXXXXxxxxxxxxXXXXXXXXXX XX X DEF CON V Convention Announcement XXXXXXxxxxxxXXXXXXXXX X DEF CON V Convention Announcement XXXXXXXxxxxXXXXXXXXXXXXXXX DEF CON V Convention Announcement XXXXXXXXXXXXXXXXXXXXXXXXXXXX X DEF CON V Convention Announcement READ & DISTRIBUTE & READ & DISTRIBUTE & READ & DISTRIBUTE & READ & DISTRIB The only convention with free beer! IN SHORT:-------------------------------------------------------------------- WHAT: Speakers and partying in Vegas for all hackers WHEN: July 11th - 13th WHERE: Las Vegas, Nevada @ the Aladdin Hotel and Casino COSTS: $30 in advance, $40 at the door MORE INFO: http://www.defcon.org or email info(a)defcon.org IN LONG:--------------------------------------------------------------------- It's time to brave Las Vegas again for DEF CON! This is an initial announcement and invitation to DEF CON V, a convention for the "underground" elements of the computer culture. We try to target the (Fill in your favorite word here): Hackers, Phreaks, Hammies, Virii Coders, Programmers, Crackers, Cyberpunk Wannabees, Civil Liberties Groups, CypherPunks, Futurists, Artists, Criminally Insane, Hearing Impaired. It seems that books about the culture are becoming more popular, so of course reporters are also welcome. You won't be hurt. I promise. Just bring cash for drinks. So you heard about DEF CON IV, and want to hit part V? You heard about the parties, the info discussed, the bizarre atmosphere of Las Vegas and want to check it out in person? You want to do weird shit _away_ from the hotel where you can't get me in trouble? You have intimate knowledge of the SWIFT network, and want to transfer millions of dollars to the Def Con account? Then you're just the person to attend! What DEF CON is known for is the open discussion of all ideas, the free environment to make new contacts and the lack of ego. More people have made great friends at DEF CON over the years than my brain can conceive of. DEF CON is also known for letting the "Suits" (Government / Corporate) mix with everyone and get an idea of what the scene is all about. The media makes an appearance every year and we try to educate them as to what is really going on. Basically it has turned into the place to be if you are at all interested in the computer underground. [Note]----------------------------------------------------------------------- Now last year over 800 people showed up and threw my whole program for a loop. I was thinking 500+ people, but when 800 showed up it got a little crazy for the planning staff. This year I am planning for 1,000. This way I will be able to accommodate everyone and have less logistical screw- ups. I would also like to apologize to everyone last year who had temporary badges for half the convention, etc. I will do all that is possible for maximum coolness, and minimum hassles. Anyway, enough of my shit, on with the details. [End Note]------------------------------------------------------------------- SPEAKERS:-------------------------------------------------------------------- Over the years DEF CON has had many notable speakers. This year there will be more of an emphasis on technical talks. There will be a separate smaller room for break-out sessions of more specific topics. While the talks of the past have been great, it always seems some tech people drop out and general talks fill in. I will load it tech heavy so when people do drop out there will still be plenty of meat left for the propeller heads. There will be some speaking on Friday evening before Hacker Jeopardy, all day Saturday and Sunday. About 20 people will speak, plus smaller tech sessions. If you are interested in speaking or demonstrating something please contact me. Current speakers include: [> Nhil - Windows NT (in)security. The challenge response system, NT 5.0 Kerb security services, man in the middle attacks on domain controllers. This will be a more technical discussion of NT related security. [> Koresh - Hacking Novell Netware. [> Yobie - Emerging infrastructures made possible by Java. He will describe and talk about Java as the foundation for a global, object-oriented distributed network. New concepts and computing paradigms will discussed as well as applications for both applications development or straight-out hacking. [> Mudge - System Administrator for L0pht Heavy Industries. He will present a technical talk on something cool. [> Clovis - From the Hacker Jeopardy winning team. He will discuss issues with security and networked object systems, looking at some of the recent security issues found with activeX and detail some of the potentials and problems with network objects. Topics will include development of objects, distributed objects, standards, ActiveX, corba, and hacking objects. [> Bruce Schneier - Author of Applied Cryptography and the Blowfish algorithm - Why cryptography is harder than it looks. [> FBI Computer Crime Squad - They will make another appearance this year only if I can bribe them with the audio from last years convention. Can I do it in time? [> Richard Thieme - "The Dynamics of Social Engineering: a cognitive map for getting what you need to know, working in networks, and engaging in espionage quietly; the uses of paranoia, imagination, and grandiosity to build the Big Picture. [> Wrangler - Packet Sniffing: He will define the idea, explain everything from 802.2 frames down to the TCP datagram, and explain the mechanisms (NIT, bpf) that different platforms provide to allow the hack. Wrangler has been programming since seven column paper tape. He is a loner with the social skills of a California Condor. He has never been a member of LOD, MOD, or any other group. He has written no books, is not currently employed, and refuses to discuss what he refers to as "that credit card provider thing back when I used to do mainframe shit." His current projects include looking for his next Fortune 100 contract and writing the DEFCON V virus. [> Seven - What the feds think of us. [> Richard K. - Electronic countermeasures, counter espionage, risk management. Should include a demonstration of electronic countermeasures equipment as well as a talk on what works, what doesn't, and the industry. [> Tom Farley the Publisher of the "Private Line" journal, and Ken Kumasawa of TeleDesign Management - Toll Fraud in the 90s: Two perspectives. An overview of phreaking from a hackers point of view and an industry/security consultants point. [> Michael Quattrocchi - The future of digital cash and a presentation about the modernization and state of register-level debit cards; in effect currently throughout Canada. [> The Deth Vegetable - "The Cult of the Dead Cow embarks on a new era of Global Domination for the 21st Century three years early -- if you're not at Defcon this year, you won't be down with the master plan. Important announcements and startling new developments that will affect the entire history of the Computer Underground as you know it." [> Ira Winkler - Real life case studies of successful and unsuccessful corporate espionage. [> Sameer Parekh - c2.net - Why cryptography is harder than it looks, part two. A look at implementation and production problems facing people and companies wishing to develope and distribute strong encryption. [> Carolyn P. Meinel - Moderator of the Happy Hacker Digest and mailing lists. She will preside over a seperate Happy Hacker discussion pannel that will cover the topics of wether or not "newbies" should have information handed to them, or should they learn for themselves? [> Dan Veeneman - Low Earth Orbit satellites are nearing the launch stage, and this talk will cover the different systems that are planned and some of the services they'll offer. A bit on GPS that wasn't covered last year as well as the ever popular question and answer section. [> Hobbit - CIFS is a load of CACA - Random SMB CIFS stuff in Microsfot products. [> Cyber - An overview and explanation of available crypto-tools. What tools and programs do what, when to use them and on what platforms. From someone who has spent lots of time playing around with the currently available set of applications. [> Keith - Has some experience writing firmware for embedded microcontroller applications, and is giving a technical talk on applications of microcontrollers in the h/p community. [> James Jorasch - Hacking Vegas - How to games the gamers. From someone who used to deal with hotel casino security. What really goes on? SCHEDULE:-------------------------------------------------------------------- FRIDAY: Network Setup, Sign in, Informal PGP Keysigning at the "PGP table", Lots of Partying. Capture the Flag Contest Starts at 16:00 On Friday there will be the demonstrations of the Radio Burst Cannon, a "real" rail gun, and an omni-directional cell phone jammer. Times to be announced. 10:00 - Doors open, sign in starts 10:00 - Movies start in main conference room 16:00 - Capture the Flag II starts 15:30 - Round up and head off for demonstrations of HERF, and rail gun madness. Nothing may happen, then again.. 23:30 - 23:00 James Jorasch - "Hacking Vegas" how to beat the system in Vegas by someone who knows it inside and out. 23:00 - 03:00 Hacker Jeopardy Starts. SATURDAY: 10:00 - 10:50 Richard Thieme - The Dynamics of Social Engineering. 11:00 - 11:50 Yobie - Emerging infrastructures made possible by Java. 12:00 - 12:50 Clovis - issues with security and networked object systems. 13:00 - 13:50 FBI Computer Crime Squad - 14:00 - 14:50 Deth Veggie - Global Domination, cDc style. 15:00 - 15:50 Seven - What the feds think of us. 16:00 - 16:50 Richard K. - 17:00 - 17:50 Tom Farley and Ken K. - Toll Fraud in the 90s: Two perspectives. Saturday Breakout Tech Sessions: Koresh - Novell issues. Mudge - Secure Coding. Hobbit - Why CIFS is CACA. Nihil - NT security issues. Wrangler - Packet Sniffing. Keith - firmware for embedded microcontroller applications. 24:00 (Midnight) Final rounds of Hacker Jeopardy. SUNDAY: 10:00 - 10:50 Ira Winkler - Industrial Espionage. 11:00 - 11:50 Sameer - Why cryptography is harder than it looks, part two. 12:00 - 12:50 Cyber - An overview and explanation of available crypto-tools. 13:00 - 13:50 Carolyn Meinel - Happy Hacker Panel. 14:00 - 14:50 Michael Q. - The future of digital cash. 15:00 - 15:50 Dan Veeneman - Low Earth Orbit satellites. Sunday Breakout Tech Sessions: Happy Hacker track Panel: "The Newbie Experiments" Moderator is Carolyn Meinel, author of the Guides to (mostly) Harmless Hacking series. Other panel members are: - Matt Hinze, editor of the Happy Hacker Digest. - Bronc Buster, who runs a Web forum, IRC server and the New Buckaroos Web site for his fast-growing band of newbies. - Mark Biernacki of Shellonly.com will talk about this new ISP which is designed to make it easy for newbies to learn to hack. Just say "Telnet port 22!" - Jericho, who will hold forth on "Let the newbies fend for themselves." We will allow each panel member to open with a brief presentation of his or her work, followed by debate first among panel members, followed by Q&A from the audience. We expect some intense debate:-) Then if the Aladdin hotel hasn't yet been demolished yet by riots, we will continue with a series of individual presentations: - Jon McClintock, editor of Happy-SAD (Systems Administrator Digest) will demonstrate how to install Linux. - Bronc Buster will hold forth on the Windows 95 denial of service programs his Web site offers. - Carolyn Meinel will demonstrate how to read email headers, create, and decipher forged email. Breakout Tech Sessions: 16:00 Awards for Capture the Flag End of it all, cleanup, etc. See you all next year! EVENTS:---------------------------------------------------------------------- [> HACKER JEOPARDY: Winn is back with Hacker Jeopardy!! The third year in the running! Can the all-powerful Strat and his crypto-minion Erik, whose force cannot be contained, be defeated?! Will the powers that be allow Strat-Meister to dominate this beloved event for the third year in a row?! Can Erik continue to pimp-slap the audience into submission with a spoon in his mouth?!? Only Skill, Time, and booze will tell the tail! The Holy Cow will help supply the beer, you supply the answers. The first round starts at 12 midnight o'clock on Friday and lasts until it is done. The second and secret rounds will happen Saturday at midnight. 6 teams will be picked at random and compete for the final round. There can be only one! Strat's Team, the winners from last year will defend if all the members can be found. [> FREE BEER! Holy Cow will provide free beer tickets! If you are over 21 prepare to consume "hacker" beers. Actually it's whatever beer they have on tap, but it's the best beer in Las Vegas. Follow Las Vegas Blvd. up until you see the florescent cow with the big sunglasses. All taxi drivers know of this Mecca. Over 1,000 free beers in all! [> BLACK AND WHITE BALL: We've talked it over, and the verdict is in. For the last two years at DEF CON there has been a sort of unspoken Saturday night dress up event. People have worn everything from party dresses and Tuxedoes to AJ's ultra pimp Swank outfit with tiger print kilt. This year it is official. Wear your cool shit Saturday night, be it gothic or PVC vinyl or Yakuza looking black MIBs. No prizes, just your chance to be the uber-bustah pimp. [> THE TCP/IP DRINKING GAME: If you don't know the rules, you'll figure 'em out. [> CAPTURE THE FLAG: ALL NEW, ALL IMPROVED, MORE CONFRONTATIONAL, 1997 ILLUMINATI INVITATIONAL, CAPTURE THE FLAG, HACKER STYLE. The goal is to take over everybody else's server while protecting your own. To cut down on lag time and federal offences we're providing a playing field of 5 flag-machine networks connected by a big router in the middle. The rules: 1) No taking the network down for more than 60 seconds. 2) No taking any flag machine (including your own) down for more than 3 minutes. 3) In order to be counted in the game, a team's flag machine must - be directly connected to the network; - have a text file flag on the machine readable by at least 2 accounts, - keep at least 3 *normal* services running in a way that a client could actually get their work done using them. - run a web server if technically possible. 4) No goonery/summoning of elder gods/Mickey Finns/physical coercion... you get the idea. ( You had the idea, but we're trying to prevent you from using it. ) The field of play : Each network will have a "server" of some kind on it, called the flag machine. At the start of the game, these servers will be stock installations a lot like what you'd see on the average academic/secret cabal/military/megacorp network. Each of these machines will have a PGP private key, named root.flag, and a web server. There will also be a machine to provide DNS, called the scoreboard. Teams: Teams can be one human or more. In order to be a team, you have to generate 20 256bit PGP key pairs, have a DEFCON goon pgp-sign them and put the public keys on the scoreboard webserver. We'll generate a hundred key pairs in advance, so the first five teams can just grab a floppy disk (if they're trusting). To prove that you've hacked a flag machine, PGP - sign a message with the root.flag from the hacked machine, then with one of your own. Post the doubly-signed message on the scorekeeper web server, and you've captured that flag (and invalidated the captured root.flag). When you've captured a flag, decide between conquest and condescension: either take over the server yourself, or hand it back to its not-so-eleet owners. To conquer, put one of your PGP private keys on the captured server to become the next root.flag. (Of course, you have to properly secure the server to maintain your new territory.) To condescend, just wait until the original owners see their shame spread across the scoreboard. (It would sure be a pity if they had to put up a new key before they figured out how you got in last time, wouldn't it?) Two Ways to Win: #1 EVIL EMPIRE: Whoever has the most servers responding with their teams' private keys at the end wins. #2 PIRATE: Fabulous prizes will also be given to whoever racks up the highest total number of flags captured. Rough game mechanics (why is everyone so untrusting?): Once every 5 minutes or more, the scoreboard machine will post a plaintext challenge. Every team that claims to own a server has to PGP-sign that challenge with the private key registered for that server and post the signed version on their machine. If a server can't respond within 3 minutes, then nobody owns it, and it's fair game to be taken back over by the goons. Specific rules will be available in print at DefCon before the game begins. This was a message from The People [> QUAKE COMPETITION: http://www.ctive.com/ntech/defcon.htm This year knightPhlight contacted me and wanted to organize a single elimination Quake competition to find out who that badest ass 'mo 'fo is. Check out the web site to get the rules, sign up, or to donate a computer the greater good of destruction. It is IMHO that Quake by id Software rules 3D action gaming. But who rules Quake? We'll find out this July 11th-13th at the DefCon Conference in Las Vegas. This isn't going to be a networked game intent on quickly eliminating as many players as possible in a single round. Rather, one-on-one games will be played to absolutely determine who the best really is. Of course, you already know your the best so why would you feel obligated to prove it? Because we'll give the first place winner $750. Now, being the wily person you are, I bet you would like to know where I got the money for the prizes. It'll come from your registration fee of $7.50. Any half wit can do the math and see the 10,000% return for the winner. But just for entering you'll be in a drawing for really kewl stuff. If you don't think its kewl you can just give us your email address and we'll be happy to send you a couple hundred thousand messages explaining why the prizes are great. [> NET CONNECTION AND TOPOLOGY: DefCon 5 Network Plan (v.99) Telecommunications ------------------ Media Type: T1 ESF/B8ZS (not D4/AMI) Service Provider: Las Vegas Digital Internet Telco: Sprint Equipment needed Equipment on-hand ---------------- ---------------------------------------------- CSU/DSU Verilink AS2000's with NCC 2301 cards (JC) Router Cisco 2501 (Lock) Net Admin server (Lock ) 10bT Hubs 16-port from Lock - need more to populate the room 10bT Cable (miles) Everybody bring their own - will need some extra to link hubs Network Services: ----------------- Web Server CU-reflector RealAudio Server IRC server? This year we are pre-building many of the network boxes so the net can go up first thing Friday. It looks like we will have a T1 line and we will break it out to 10 BaseT hubs. If you want in on the network bring along the appropriate cables and adapters. More Net Madness! The T1 bandwidth will allow us to do the following cool stuff: - Have several color quickcams and a CU-SeeMe reflector site set up so people not at the con can check out what's going on. During the convention check out the DEF CON web site to get the location of the reflector site. You should get and install the software needed to view CU-SeeMe streams in advance! - Have a RealAudio server set up to stream the speakers talks to those who can not attend. - Potentially play a competitive multi user game(s) over the net. NOTE! If you wish to participate interactively with the convention please e-mail me and we can coordinate something. It would be great to get people from all over the world involved. [> 5th ANNUAL SPOT THE FED CONTEST: The ever popular paranoia builder. Who IS that person next to you? "Like a paranoid version of pin the tail on the donkey, the favorite sport at this gathering of computer hackers and phone phreaks seems to be hunting down real and imagined telephone security and Federal and local law enforcement authorities who the attendees are certain are tracking their every move.. .. Of course, they may be right." - John Markhoff, NYT Basically the contest goes like this: If you see some shady MIB (Men in Black) earphone penny loafer sunglass wearing Clint Eastwood to live and die in LA type lurking about, point him out. Just get my attention and claim out loud you think you have spotted a fed. The people around at the time will then (I bet) start to discuss the possibility of whether or not a real fed has been spotted. Once enough people have decided that a fed has been spotted, and the Identified Fed (I.F.) has had a say, and informal vote takes place, and if enough people think it's a true fed, or fed wanna-be, or other nefarious style character, you win a "I spotted the fed!" shirt, and the I.F. gets an "I am the fed!" shirt. NOTE TO THE FEDS: This is all in good fun, and if you survive unmolested and undetected, but would still secretly like an "I am the fed!" shirt to wear around the office or when booting in doors, please contact me when no one is looking and I will take your order(s). Just think of all the looks of awe you'll generate at work wearing this shirt while you file away all the paperwork you'll have to produce over this convention. I won't turn in any feds who contact me, they have to be spotted by others. DOUBLE SECRET NOTE TO FEDS: This year I am printing up extra "I am the Fed!" shirts, and will be trading them for coffee mugs, shirts or baseball hats from your favorite TLA. If you want to swap bring along some goodies and we can trade. Be stealth about it if you don't want people to spot you. Agents from foreign governments are welcome to trade too, but I gotta work on my mug collection and this is the fastest way. [> RAIL GUN DEMONSTRATION: (Friday) On Friday afternoon there will be a demonstration of a hand held rail gun. This garage project should be able to fire a graphite washer very, very fast. [> OMNIDIRECTIONAL CELL PHONE JAMMER DEMONSTRAITON: (Friday) Another interesting creation to be tested on Friday in the desert. Come along and watch you cell phone antenna explode with power! See control channels crumble before you. [> RADIO BURST CANNON DEMONSTRATION: (Friday) While not quite a HERF gun, this should come close. The RBC should be able to produce up to or less than one MegaWatt for up to or less than one second. What will this do? Who knows! Come and find out. Obviously the above demonstrations will take place away from the local hospitals and casinos out in the desert someplace, so be prepared. HOTELS:---------------------------------------------------------------------- [> Book your room NOW!!! We have a block of rooms, but it is first come, [> first served. Rooms get released about one month before the convention. [> Book by June 9th or risk it. The room rates are quite cool this year. PRIMARY HOTEL: The Aladdin Hotel and Casino 3667 Las Vegas Blvd. South, Las Vegas, Nevada Built in 1966 it is one of the oldest hotels in Las Vegas that hasn't been blown up to make room for newer ones. It is quite nice and has Tennis courts, two swimming pools, Chinese, Vietnamese and Korean. A Seafood and steakhouse, Joe's Diner and a 24 hour coffee shop too. It's located next to the MGM Theme park on the strip. PHONE: 1-800-634-3424, reference the "DC Communications conference" for reservations. 702-736-0222 RATES: Single & Double rooms are $65 in the Garden section, $85 for the Tower. Suites are $250 to $350. All costs are plus 8% room tax. Rollaway beds are available for an additional $15 a night. STUFF IN VEGAS:-------------------------------------------------------------- URLs Listings of other hotels in Las Vegas, their numbers, WWW pages, etc. http://www.intermind.net/im/hotel.html http://vegasdaily.com/HotelCasinos/HotelAndCasinos/CasinoList.html VENDORS / SPONSORS / RESEARCH:----------------------------------------------- If you are interested in selling something (shirts, books, computers, whatever) and want to get a table contact me for costs. If you have some pet research and you want to have the participants fill out anonymous questioners please contact me for the best way to do this. If you want to sponsor any event or part of DEF CON V in return for favorable mentions and media manipulation please contact me. For example in the past Secure Computing has sponsored a firewall hacking contest. MORE INFO:------------------------------------------------------------------- [> DEF CON Voice Bridge (801) 855-3326 This is a multi-line voice bbs, VMB and voice conference system. There are 5 or so conference areas, with up to eight people on each one. Anyone can create a free VMB, and there are different voice bbs sections for separate topics. This is a good neutral meeting place to hook up with others. The Voice bridge will be changing numbers soon, but the old number will refer you to the new location. The new spot won't suffer from "Phantom" bridges! [> MAILING LIST send emial to majordomo(a)merde.dis.org and in the body of the message include the following on a separate line each. subscribe dc-stuff dc-announce is used for convention updates and major announcements, dc-stuff is related to general conversation, planning rides and rooms, etc. [> WWW Site http://www.defcon.org/ Convention updates and archives from previous conventions are housed here. Past speakers, topics, and stuff for sale. Also a growing section of links to other places of interest and current events. [> The Third Annual California Car Caravan to DEF CON! http://www.netninja.com/caravan There are also some resources (links to other web sites and text files) generally related to DefCon--not specifically the California Caravan. These resources are available at: http://www.netninja.com/caravan/resources.html [> The DEF CON V Car ride sharing page: Use this site to arrange ride sharing to the convention from all over North America. If you can spare a seat for someone, or need to leech a ride go to the ride sharing page set up by Squeaky. http://garbage.bridge.net/~defcon/defcon.html [> EMAIL dtangent(a)defcon.org Send all email questions / comments to dtangent(a)defcon.org. It has been said that my email is monitored by various people. If you want to say something private, please do so with my pgp key (At the bottom of this announcement) I usually respond to everything, if not I'm swamped or had a system problem. [> GIVE ME MONEY! SNAIL MAIL PRE-REGISTRATION Send all written materials, pre-registrations, etc. to: DEF CON, 2709 E. Madison, Seattle WA, 98112 If you are pre-registering for $30 please make payable to DEF CON and include a name to which you want the registration to apply. I don't respond to registrations unless you request. DO YOU WANT TO HELP?--------------------------------------------------------- Here is what you can do if you want to help out or participate in some way: Donate stuff for the continuous giveaways and the various contests. Got extra ancient stuff, or new cool stuff you don't use anymore? Donate it to a good cause! One person was very happy over winning an osborne "portable" computer. ORGANIZE sharing a room or rides with other people in your area. Join the mailing list and let people know you have floor space or some extra seats in your car. Hey, what's the worst that can happen besides a trashed hotel room or a car-jacking? CREATE questions for hacker jeopardy (you know how the game is played) and email them to winn(a)infowar.com. No one helped out last year, so this year let's try. Everything from "Famous narks" to "unix bugs" is fair game. BRING a machine with a 10bt interface card, and get on the local network, trade pgp signatures, etc. FINAL CHECK LIST OF STUFF TO BRING:------------------------------------------ From: Enigma Here is a list of items to bring to DefCon. These are only suggestions. Your mileage may vary. :) Items to bring to DefCon ~~~~~ ~~ ~~~~~ ~~ ~~~~~~ Clothing - Comfortable shirts and pants/shorts - Socks, underwear, etc - Bathing suit - Toiletries (deodorant, toothbrush, comb, hair spray,..., giant tub of hair grease, Oxy pads, etc) - An extra towel (don't leave home without it. Anyway, doesn't it always seem that you run out of clean towels in the bathroom?) - Something cool, hip, pimp-o-matic, or ninja-riffic to wear Saturday night at the Black and White Ball You can skip the deodorant and extra clothing if all you are going to do is play "Magic: The Gathering" and "Quake." Everyone else does. Stuph - Your shades. Vegas is hot. The sun is bright. 'Nuff said. (If you wear eye glasses, I hear the clip-on, flip-up sunglasses are quite the fashion statement) - Sunscreen of at least SPF 100. After spending hundreds of hours in front of the monitor, who needs the sun to ruin their ghostly white tan? - A hat--preferably with a cool logo or catchy phrase like "Gandalf Routers," "Netscape," "Microsoft [with "sucks" scrawled below it in permanent marker]", "I [heart] [insert government institution: Cops, Feds, etc]"...you get the idea - Note book, palmtop, or laptop to take notes on during the speeches - [Micro]casette recorder to record the speeches (or everyone getting drunk in your room Saturday night, not knowing what they are saying, with no hope of remembering it...excellent blackmail material!) - Camcorder (see above...<>) - Digital camera--for all of the above reasons PLUS you can instantly upload the images through the T1 onto the net - Fake ID for all of you under 18/21 - Fake ID for everyone else, if you're planning something illegal - Your best jokes (Nooooo! Not the superman joke! Not the pink joke) - Your best hacking stories...these are all about something "your friend" did, aren't they? You wouldn't admit to doing anything illegal, now, would you? - Someone else's--oops, I mean "your" credit card numbers Fun - Your drug(s) of choice -- From caffeine to pot to speed to acid - Zippo and extra fuel. And while you're at it, put an extra flint (assuming you can find one in the back of your junk drawer) in the bottom. You always run out at just the wrong time. - Extra smokez (Splurge: get some cigars or cloves for the weekend) - Leather - Handcuffs and chains, nipple clamps, etc. - Saran wrap, duct tape, electrical tape, gaffer's tape - Candles (the drippy kind) - Incense - Oils - Your copy of "The Pocket Kama Sutra" (ISBN 0-7894-0437-0) - That corn starch and water "slime" that Light Ray (I believe) and others believed to be the ultimate thing, several DefCon's back. Tech - Laptop w/ Ethernet card - Extra laptop battery - A zip drive with a stack of disks containing all your soooper k-rad haxing utilities and g-files - 10bt/10b2 cabling - A small hub - You did remember to put a packet sniffer on your zip disk, right? Just checking. - Every power cord you could possibly need - A serial cable with a plethora of adapters so you can get each end to be male/female, 9pin/25pin, null-modem/straight - Cable to connect the above mentioned digital camera to the laptop - Scanner (modded, of course) - Frequency counter (I hear the "Scout" is pretty good) - HAM radio. Any band, any frequency. You didn't modify it to transmit on arbitrary frequencies, did you? Naughty monkey! - An assortment of tuned antennas - That zip disk has the FCC frequency allocations on it, right? - Your uber-elite organizer (the DOS based HP palmtops are quite cool) to collect handles and email addresses from people - High energy weapons ("Is that an unlicensed nuclear accelerator on your back?" "No, it's just a HERF gun." "Oh.") - Laser pointer (don't get kicked out of the hotel again, youz doodz) - Your "white courtesy phone" that you stole from the Monte Carlo last year - A microbroadcasting station with plenty of tuneage - Your lock picks or lock picking gun - A pocket-sized tool kit containing a modular screwdriver and plenty of attachments (flathead, philips, torx, hex, etc) - A pocket knife, pliers and wire cutters--or alternatively a Leatherman's tool - Hell, while you're at it: why not some bring bolt cutters, a sledge hammer, and a hack saw? - Telephone handset with alligator clips. Or, if you're uber- 31337, you have a lineman's butt set (with the serial number and telco logo filed off) - Bubble gum or epoxy putty--anything maleable and hardens. This is good for fixing hoses under the hood of your car. It's also useful to jam mechanical sensors (What would happen if the microwave always though it's door was open? Or if the elevator always thought there was someone blocking the path of the door? Wouldn't hotel security be pissed if they couldn't get into their security room because someone jammed a toothpick into the keyhole with krazy glue?) - An alabi - Spam - Multimeter - Cordless electric soldering iron - Parts box MY PGP KEY:------------------------------------------------------------------ -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.1 mQCNAy6v5H8AAAEEAJ7xUzvdRFMtJW3CLRs2yXL0BC9dBiB6+hAPgBVqSWbHWVIT /5A38LPA4zqeGnGpmZjGev6rPeFEGxDfoV68voLOonRPcea9d/ow0Aq2V5I0nUrl LKU7gi3TgEXvhUmk04hjr8Wpr92cTEx4cIlvAeyGkoirb+cihstEqldGqClNAAUR tCZUaGUgRGFyayBUYW5nZW50IDxkdGFuZ2VudEBkZWZjb24ub3JnPg== =ngNC -----END PGP PUBLIC KEY BLOCK-----

1 0

Australian "Walsh" report exposes the hole in key escrow
by John Gilmore 17 Dec '03

17 Dec '03

This report was finally obtained (after suing the Australian government under Freedom of Information laws) by Electronic Frontiers Australia. I haven't seen it yet; this is the first I'd heard that it is released. The first paragraph does its best to scare people, but the gist is all correct: if you escrow authentication keys, digital signatures don't work. If you don't escrow authentication keys, then key escrow doesn't work. John Gilmore Forwarded-by: Hal Abelson (I don't know the original source). By John Davidson Governments will be forced to completely undermine the emerging global electronic commerce system if they want to prevent it being used by criminals and for tax evasion, one of Australia's leading data security experts has warned. Professor William Caelli, head of the school of data communications at Queensland University of Technology, said yesterday that it was all but technically impossible to satisfy the competing needs of law enforcement and international trade. The difficulty was in allowing encrypted data passing along the Internet to be monitored by law enforcement agencies, while at the same time giving legal status to the digital signatures that will underpin electronic trade. A suppressed government report into encryption, written by a former deputy director-general of ASIO, Mr Gerard Walsh, has agreed with Professor Caelli. The Commonwealth should abandon as "doomed to failure" attempts to control encryption by keeping a copy of the passwords, or keys, in escrow, Mr Walsh told The Australian Financial Review yesterday. The field of cryptography is generally divided into encryption, where data is scrambled for confidentiality; and authentication, where an electronic document is scrambled or signed to prove who it came from for legal purposes. Policy under consideration in Australia, the US and the UK calls for a separation of the two key types, with law-enforcement agencies having some sort of access to all encryption keys while individual's authentication keys are kept strictly private. It is widely accepted that escrowing authentication keys would render them legally useless for signing documents. "If you ever allow people to get near authentication keys you'll corrupt the administration of justice," said Mr Walsh. The problem facing governments, according to Professor Caelli, is that it is technically impossible to separate the two key types, since they are both just very long numbers. The thinking with the most currency, known as "key tagging", involves adding extra data to the start or end of a digital key to identify what it would be used for. But key tagging can't work in a PC environment, Professor Caelli claims. PC operating systems don't have enough security to prevent users from simply taking the tag off an authentication key and adding it to an encryption key, thereby bypassing government attempts to escrow all encryption keys. If, as it was likely, a dual-key infrastructure proved impossible in a PC world, governments would either have to escrow all keys, rendering digital certification meaningless, or escrow no keys at all, rendering data surveillance totally ineffectual, he said. Mr Steve Orlowski, a leading Government expert on cryptography, acknowledged that it was now impossible to build a secure dual-key infrastructure, but said that it was "possible that someone could make a breakthrough". "We're encouraging research into that area so we'll be able to make the distinction," he said. The US National Institute of Standards and Technology recently made a worldwide plea for cryptography algorithms that can be used for authentication and not for encryption. Mr Walsh's report, commissioned by the federal government to look into how it must legislate to satisfy security and privacy needs in the face of strong cryptography, has only now come to light following a successful Freedom of Information action by Electronic Frontiers Australia. The 96 page report, Review of policy relating to encryption technologies, was due to be published in October last year, and called for a period of public discussion about cryptography issues. However, it was never released, and was only made available to the EFA this week with 20 paragraphs deleted. A second report prepared at the same time but with specific recommendations is still secret, however. According to Mr Walsh, trying to put the lid on encryption with key escrow would be "an exercise in futility" because it would miss the very target it was intended to catch: organised crime, money laundering operations and terrorists. These groups would either refuse to escrow their keys, or simply embed a further level of encryption in their messages, he said. He also said in the report that it would also be futile to try to regulate the length of crypto keys on a nation-by-nation basis because "the notion of fixed national borders is simply anachronistic" thanks to the Internet. "It's not in the interests of the community's rights to privacy, nor the needs of the business community, to . . . limit the strength of cryptography simply to catch the occasional minnow," he said. Law enforcement considerations should not automatically leapfrog privacy considerations, and the government would have to mount a "damned strong argument" every time it wanted to access someone's encryption keys, he said. Mr Walsh said he was uncertain why his report had been suppressed, given that anything that might have been controversial was restricted to the secret report he also submitted. "I wrote (the first report) in the clear expectation that it would be publicly released," he said.

1 0

Fourth of July Special
by ctn＠idp.net 17 Dec '03

17 Dec '03

Fourth of July Special!!!!!! Call 1-800-767-0160 to order. Brand New Hewlett Packard Toner Cartridges at Wholesale Prices!!! Part # Printer Type Price 92298A EP-E Series 4, 4M, 4+, 4, 5N, 5M $89.00 92295A EP-S Series II, III $69.00 92275A EP-L Series IIP, IIIP $76.00 92274A EP-P Series 4L/4P $65.00 92291A EP-N Series IIISi/4Si $99.00 C3900A EP-B Series 4V/4MV $125.00 C3903A EP-V Series 5P, 5MP, 6P, 6MP $76.00 C3906A EP-A Series 5L $59.00 C3909A EP-W Series 5Si, 5SiMX, Mopier $145.00 FX-1 Canon Fax L700 Series $81.00 FX-2 Canon Fax 5000/5500 $71.00 FX-3 Canon Fax L4000 $71.00 51626A InkJet DeskJet, DeskJet+, 500C/ 500J/505J/520/540/550C 560C/700 $27.95 Order 10 or more cartridges and receive free shipping!!!!! Ask about our other specials on Brand New Laser and InkJet Cartridges for your Printers, Faxes and Copiers. Save up to 35% by using our 100% Guaranteed Remanufactured Cartridges To Order: via email: ctn(a)idp.net via FAX: 703-449-7904; 703-449-7905; 703-449-7906; 703-803-9887 Toll Free: 1-800-767-0160 snail mail: Cartridge Technology Network, Inc. 14110 Sullyfield Circle Chantilly, Virginia 22046 FAX ORDER FORM Name________________________________________________________________________ Company Name________________________________________________________________ Address______________________________________________________________________ City/State/Zip_________________________________________________________________ Phone____________________________________FAX________________________________ EMAIL_______________________________________________________________________ Part #______________ Quantity __________ Part #______________ Quantity __________ Part # _____________ Quantity __________ Part # _____________ Quantity __________ Credit Card #:______________________________________________ Exp._______________ Signature:____________________________________________________________________ VISA/MC/Discover/American Express Accepted Corporate Purchase Orders Accepted, please call 1-800-767-0160. IF YOU DO NOT WISH TO RECEIVE FUTURE EMAIL, PLEASE REPLY TO 'ctn(a)idp.net' AND PLEASE PLACE 'REMOVE' IN THE SUBJECT AREA.

1 0

Computer
by 05643693＠prodigy.net 17 Dec '03

17 Dec '03

PLEASE READ THIS IF YOU WOULD LIKE TO EARN EXTRA CASH USING YOUR COMPUTER!!! (Now in Mac format, too!) If you have even a basic knowledge of computers, you could be making money in your spare time. There are many opportunities including: contract typing; data entry; advertising on your own Web page; and even testing new games. Send for the packet, "Home Computer Income" which contains all the information you need to get started. Included is a listing of several companies that offer this type of work. Order today, all you need is a few hours a week to create an excellent second source of income! -Please print (or write out) this order form and mail to- ------------------------------------------------------------------------------ M.E.C. P.O. Box 2188 La Mesa, CA 91943-2188 [ ] Yes, I would like to get started. Please rush me the information. Enclosed is $14.95 (plus $2.00 for shipping and handling, $16.95 total.) If I am not completely satisfied, I have 30 days to return the packet for a full refund (less S+H). Please allow 5-7 business days for checks to clear. Name/E-Mail Address___________________________________ Address_______________________________________________ City,State,Zip__________________________________________ [] Send packet to my e-mail address (omit S&H.) [] Send packet on 3.5" / 5.25" / Mac disk. (circle one.) (disc is compatible with all word processors.) -----------------------------------------------------------------------------------

1 0

Re: details of 6/26 action on HR 695??
by John Young 17 Dec '03

17 Dec '03

geeman(a)best.com wrote: >Are these the same amendments from before, or new ones? The H.R.695 amendments referred to in the Congressional Record appear to be the same ones described in House Report 105-108: http://jya.com/hr105-108.txt If there are others they have not yet been published. ---------- >Congressional Record: June 26, 1997 (House)] >[Page H4834] >From the Congressional Record Online via GPO Access [wais.access.gpo.gov] >[DOCID:cr26jn97-74] > > > REPORTED BILL SEQUENTIALLY REFERRED > > Under clause 5 of rule X, the following action was taken by the >Speaker: > > H.R. 695. A bill to amend title 18, United States Code, to > affirm the rights of U.S. persons to use and sell encryption > and to relax export controls on encryption; with an > amendment; referred to the Committees on Commerce, National > Security, and the Permanent Select Committee on intelligence > for a period ending not later than September 5, 1997, for > consideration of such provisions of the bill and amendment > reported by the Committee on the Judiciary as fall within the > jurisdiction of those committees pursuant to clause 1(e) and > (k), rule X and rule XLVIII, respectively. >

1 0

Re: Hettinga's e$yllogism
by Robert Hettinga 17 Dec '03

17 Dec '03

At 2:13 pm -0400 on 6/28/97, Tim May wrote: Kent (With a Brick, Mr.) Chrispin emetted: > >Governments have devalued currencies many many times in the past > >without the need of key escrow...key escrow is an independent issue. > > Sure, but one of the potential advantages of strong crypto is the > oft-discussed "denationalization of money." Leading bankers are beginning > to see the light on this. I wonder if Mr. Chrispin has ever heard of George Soros, or does the adventures of St. George and the BofE dragon smack too much of, horrors, capitalism? (Modulo Soros' ocassional self-flagellatory Atlantic article, of course. Knight-errants are all into that mortifying the flesh stuff. Or, maybe he's just trying to hedge his bets or something...) Anyway, on the same note, and, as a result of the Wired article this month on FC97 (I finally saw it, and it's not as bad as I thought it was going to be. I guess as long as they spell my name right...), I just got request for an interview from a staff writer from Forbes. He's writing on this very thing, the macroeconomic effect of transanational digital cash. His very words to me were: > An editor of mine liked the story so much he told > me to expand it (a.k.a. totally rewrite it) looking at whether or not a > boom in the use of electronic money might not render governmental > monetary control irrelevant as well. Looking at the issue from that > angle is convincing me that the answer is yes, and that the real story > here is about crypto. He's going to interview me on Tuesday, after the DCSB meeting. God help us all. :-). When I replied to him, I gave him the whole nine yards, poor guy. Hope I didn't scare him off: financial cryptography, the ubiquitous geodesic economy, cryptomoney, etc. (Including, of course, the, um, "excrable" e$yllogism. ;-)) I also gave him a whole passle of people to talk to about it, including David Friedman, who reported on another list lately that he's brought father Milton around to believing in the inefficiency of central banking compared to free banking, particularly in a world of ubiquitous internetworks and financial cryptography. I also sent him on to Tatsuo Tanaka, who did a presentation about a year ago at DCSB on, you guessed it, the transnationality of digital cash. :-). (Of course, Tatsuo's thinking then was that some global run or another on free$banks would end in the creation of a central bank of cypherspace, but, maybe, he's *much* better now. :-)) I didn't include you on that list, Tim, because I remember you saying something about not being bothered with such reporter.cruft anymore, and how coupling financial cryptography with strong cryptography in the eyes of the press and the financial establishment didn't make any sense, but, in case you want him to misquote us *both* and scare all those capitalist tools out there half to death, let me know and I'll send him your way. Or, maybe such glad tidings will make them all want to help us dance a jig on the eventual grave of the nation-state, you never know. The rich and hoity-toity are very different from you and me. Well, *me*, anyway... (Did I ever tell you the story about how my old man built a sailboat on St. Thomas without ever having really sailed much, and, the boat was so fast that it won *lots* of silver, so much silver that he made the New York Post (I think) about it, and, having read that article, Malcom Forbes came down to the islands that fall, and invited Pop to hang out with him on Highlander for a few days? No? Well, my old man built a sailboat on St. Thomas, you see,...) <Tune: "America the beautiful"> "My country tis of thee, land of plutography..." </T> Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Government at Work (prudish idiocy)
by Immoral Majority 17 Dec '03

17 Dec '03

from Wired News: Oklahoma-am-Rhein: Police Seize Oscar Winner 12:05 pm Oklahoma City police seized copies of The Tin Drum, the 1979 Academy Award winner for best foreign film, after a judge ruled the film obscene under Oklahoma law. On Thursday, police began removing the movie from video stores and, using store records, tracking down those who possessed rented copies. Oklahoma District Judge Richard Freeman acted on a complaint by Oklahomans for Children and Families, which was upset by a scene in which a young boy has oral sex with a teenage girl.

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"lucifer"} = "<lucifer(a)dhp.com> cpunk mix pgp hash latent cut ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash middle latent cut ek"; $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp pgponly hash cut ksub reord"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"balls"} = "<remailer(a)huge.cajones.com> cpunk pgp hash latent cut ek"; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp pgponly hash latent cut ek"; $remailer{"middle"} = "<middleman(a)jpunix.com> cpunk mix pgp hash latent cut ek reord"; $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"reno"} = "<middleman(a)cyberpass.net> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{"wazoo"} = "<remailer(a)wazoo.com> cpunk mix pgp hash latent cut ek"; $remailer{"shaman"} = "<remailer(a)lycaeum.org> cpunk pgp hash latent cut ek"; $remailer{"hidden"} = "<remailer(a)hidden.net> cpunk pgp hash latent cut"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix) (weasel squirrel) The alpha and nymrod nymservers are down due to abuse. However, you can use the nym or weasel (newnym style) nymservers. The cyber nymserver is quite reliable for outgoing mail (which is what's measured here), but is exhibiting serious reliability problems for incoming mail. The squirrel and winsock remailers accept PGP encrypted mail only. 403 Permission denied errors have been caused by a flaky disk on the Berkeley WWW server. This seems to be fixed now. The penet remailer is closed. Last update: Mon 30 Jun 97 6:45:39 PDT remailer email address history latency uptime ----------------------------------------------------------------------- weasel config(a)weasel.owl.de ++++++++++-+ 1:32:04 99.98% squirrel mix(a)squirrel.owl.de ++++++++++-+ 1:30:31 99.98% jam remailer(a)cypherpunks.ca ****+*+**+* 15:41 99.89% replay remailer(a)replay.com ****** +**+* 6:12 99.83% reno middleman(a)cyberpass.net ++++ -.--+.- 5:33:46 99.72% cyber alias(a)alias.cyberpass.net ******* **+* 13:41 99.37% mix mixmaster(a)remail.obscura.com -.- ---.-*.- 7:57:51 99.03% winsock winsock(a)rigel.cyberpass.net -------- - 7:15:22 97.91% nym config(a)nym.alias.net ***###++##+# 4:58 97.29% hidden remailer(a)hidden.net ###### 4:44:03 40.46% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

Re: Dr. Dobbs Cryptography and Security CD-ROM
by Alex de Joode 17 Dec '03

17 Dec '03

Peter Gutmann sez: [..] : What makes this case especially awkward is the fact that the CDROM can't : legally be sold outside the US, which means the only way the rest of the world : can get it is through illegal copies. Given the immense usefulness of : something like this, I'd say it's only a matter of time before bootleg copies : start appearing outside the US, but because of the USG's position we can't pay : for it even if we want to (DDJ wouldn't look too good if they accepted payment : for what they knew was illegally exported crypto). Perhaps a donation of the : same amount to charity would serve as some equivalent to payment... It would be nice to see a Dr. Dobbs CD at the HIP ... -- -aj-

1 0

Fwd: TSS OfficeLock: Protect Office documents w/PGP (fwd) mslock20.zip - TSS OfficeLock: Protect Office documents w/PGP
by Ray Arachelian 17 Dec '03

17 Dec '03

I have uploaded to Simtel.Net: http://www.simtel.net/pub/simtelnet/win95/util/mslock20.zip ftp://ftp.simtel.net/pub/simtelnet/win95/util/mslock20.zip 459405 bytes mslock20.zip TSS OfficeLock: Protect Office documents w/PGP TSS OfficeLock v2.0 is a data security plug-in for Microsoft Office 95 & 97. It protects files on desktop or laptop PCs, on networks, and over the Internet. OfficeLock automatically decrypts files when opened and encrypts them again when they're closed. Prevent intruders from opening or changing your secured Word, Excel, Access, and Powerpoint files. Uses the unbreakable PGP data encryption engine. 32 Bit software for Win 95 & Office 95 / 97. Special requirements: None. Shareware. Uploaded on behalf of the author by Shareware.COM. Author information: Dan Goodman Total System Solutions dan(a)officelock.com http://www.officelock.com

1 0

Re: Government at Work (prudish idiocy)
by geeman＠best.com 17 Dec '03

17 Dec '03

At 07:29 AM 6/30/97 -0500, you wrote: > >from Wired News: > >Oklahoma-am-Rhein: Police Seize Oscar Winner >12:05 pm > >Oklahoma City police seized copies of >The Tin Drum, the 1979 Academy Award winner >for best foreign film, after a judge ruled the film >obscene under Oklahoma law. On Thursday, >police began removing the movie from video stores >and, using store records, tracking down those who >possessed rented copies. ..../\ last I heard, this was illegal without a warrant. Of course, in the pursuit of Justice and the Law I suppose the warrant was easily obtained. OR was is obtained at all? Oklahoma District >Judge Richard Freeman acted on a complaint by >Oklahomans for Children and Families, which was >upset by a scene in which a young boy has oral >sex with a teenage girl. > > >

1 0