December 2003 - cypherpunks-legacy

AD: Stock-Pick Discovers Media Goldmine!!
by stock-pick＠stock-pick.net 17 Dec '03

17 Dec '03

This message is sent in compliance of the new e-mail bill: SECTION 301, Paragraph (a)(2)(C) of s. 1618 Sender : Stock-Pick, P.O. Box 130544, St Paul, MN 55113 Phone : 1-612-646-8174 E-mail : stock-pick(a)stock-pick.net To be removed from our mailing list, simply reply with "REMOVE" in the subject. Visit http://www.stock-pick.net for full details. Financial Highlights: Triangle Broadcasting, Inc. (OTC BB : GAAY) Shares Outstanding (Aug 31, 1998) : 19.4 Million Shares Current Market Capitalization (Current Stock Price of $0.05) - $970,000 Stockholders Equity (June 30, 1998) - $2,233,470 - Equity per Share : $0.115 At current stock price of $0.05 we feel this stock to be tremendous BUY at these levels. Currently there are 19.4 million shares outstanding, this gives a market capitalization of only $970,000 - a modest investment could yield enormous rewards for the investors who entered on the ground floor. At current price levels $1000 would purchase 20,000 shares. "Mark Twain said: "The secret to success is - find out where the people are going and get there first". We feel that Triangle Broadcasting, Inc. (OTC BB : GAAY) has followed that adage to a T. Triangle Broadcasting Company, Inc. (OTC BB : GAAY) is launching itself to a right future. They are the first mass media company to target gays and lesbians on a national level. Successful companies always take one step at a time so that they never skip over something important that will haunt them in the future. First, Triangle Broadcasting Company, Inc. did extensive surveys. They found out what were the people's preferences. They also figured out what would be the most strategic way to market their product and what programs would be received well by both the gay and lesbian communities and the mass market. They set up their programming and found what cities they should target first. Triangle Broadcasting Company, Inc. is going to start in 15 cities. They have chosen 15 cities with large gay and lesbian populations. After they have gained acceptance in these markets, they will expand to a national level. They can already be received by over 10,000 stations in the United States and Canada. Triangle Broadcasting Company, Inc. will not expand until they have made a presence in the markets that they are focusing on. Triangle Broadcast Company, Inc. hand-picked it's management infrastructure. They took broadcast executives who had extensive knowledge about the industry. Gay and lesbian nightclub owners were brought in to help formulate the programming. Business advisors help with the complexities of running a business. And last but not least real estate people help with the planning of which communities would be their first targets. After all this was set up they contacted advertising executives of major companies throughout the United States and Canada. The response was overwhelming. With all the above factors, and the fact that advertisers are already lining up, success is almost inevitable. This is truly an amazing company with nothing but positive opportunities in front of it. Once again visit http://www.stock-pick.net for full details. ****** DISCLAIMER ****** This material is being provided by Stock-Pick, a paid public relations company, and is for informational purposes only and is not to be construed as an offer or solicitation of an offer to sell or buy any security. Stock-Pick is an independent electronic publication providing both information and factual analysis on selected companies that in the opinion of Stock-Pick have investment potential. Companies featured by Stock-Pick or company affiliates pay consideration to Stock-Pick for the electronic dissemination of company information. Triangle Broadcasting Company, Inc. has paid a consideration of 100,000 common shares of Triangle Broadcasting Company, Inc. stock to Stock-Pick in conjunction with this company profile. All statements and expressions are the opinion of Stock-Pick. Stock-Pick is not a registered investment advisor or a broker dealer. While it is our goal to locate and research equity investments in micro or small capitalization companies that have the potential for long-term appreciation, investment in the companies reviewed are considered to be high risk and may result in loss of some or all of the investment. The information that Stock-Pick relies on is generally provided by the featured companies and also may include information from outside sources and interviews conducted by Stock-Pick. While Stock-Pick believes all sources of the information to be reliable, Stock-Pick makes no representation or warranty as to the accuracy of the information provided. Investors should not rely solely on the information contained in this publication. Rather, investors should use the information contained in this publication as a starting point for doing additional independent research on the featured companies in order to allow the investor to form his or her own opinion regarding investing in featured companies. This publication contains forward looking statements that are subject to risk and uncertainties that could cause results to differ materially from those set forth in the forward-looking statements. These forward-looking statements represent Triangle Broadcasting Inc., judgement as of the date of this release. The company disclaims any intent or obligation to update these forward-looking statements. Factual statements in this publication are made as of the date stated and are subject to change without notice.

1 0

Re: HOW MUCH CODE DID 'CYPHERPUNK' TIM MAY EVER WRITE?
by Joseph 'Anonymous' Howe 17 Dec '03

17 Dec '03

HyperReal-Anon wrote: > > >HOW MUCH CODE DID 'CYPHERPUNK' TIM MAY EVER WRITE? > > How much code have you ever written? Quite a bit actually. I recently upgraded to a dual pentium II 400 and I wanted to take advantage of the 64 bit capability (2x32 = 64, right) so I've just finished the first beta of the AOL 64 bit port. The question of Tim May's contribution to cypherpunks keeps coming up. I noticed from the comments that the original AOL8 code base was written by Tim May. I hope that clears that up. -- an anonymous AOL64 beta user

2 1

please include me
by KCzzzzz＠aol.com 17 Dec '03

17 Dec '03

Lets do it all again.

1 0

ok
by KCzzzzz＠aol.com 17 Dec '03

17 Dec '03

list

1 0

A BANNER PROGRAM PAYING $50 A SIGNUP
by regnic902c＠gte.net 17 Dec '03

17 Dec '03

$50 PER SIGNUP - NO KIDDING! PAID WEEKLY IF YOU WISH! This banner program should be at the top of your links page for a couple of real important reasons that will make perfect sense! 1. It doesn't compete with your site - or anyone's! 2. It pays $50 for your signups, and $10 for each one that anyone you refer signs up! 3. It gives them something they need right now! Publicize the program to other webmasters and make $10 override on all their signups! We will send your payments weekly anywhere in the world . . . and the payments are guaranteed! Want to find out more? First, write down your referral code 000034 (that's 4 zeros and 34) Then, click on the link below http://206.132.179.167/kesef/ Thanks for your time! Be one of the first on this new program -- make your own $$$ and all the overrides!

1 0

Here we go again...
by Joseph 'Anonymous' Howe 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 09 Oct 1998 15:14:17 -0800 From: Greg Galbraith <GGALBRAI(a)jennycraig.com> Subject: <ALERT> Just in time for Halloween WARNING TO PARENTS: A form of tattoo called "Blue Star" is being sold to school children. It is a small piece of paper containing a blue star. They are the size of a pencil eraser and each star contains traces of Lysergic Acid Deithylamide (LSD). The drug is absorbed through the skin simply by handling the paper. They are also brightly colored paper tattoos resembling postage stamps that have the pictures of the following on them: Superman Mickey Mouse Butterflies Clowns Disney Characters Bart Simpson Each one is wrapped in foil. This is a new way of selling LSD by appealing to young children. These are laced with drugs. If your child gets any of the above, do not handle them. These are known to react quickly and some are laced with strychnine, which may cause irreversible brain damage in some cases. The drug is addictive and, in the quantities contained in the above items, can cause children to become additcts. Please feel free to distribute this article within your community and work place. FROM: J. O'Donnell, Danbury Hospital, Outpatient Chemical Dependency Treatment Service ---------------------------------------------------------------------------- Please copy and post! Give to friends. Send copies to schools. This is growing faster than we can train parents and professionals. Many Thanks, Val Val G. Armstrong Assistant to Director Rehabilitation Administration Program University of San Francisco PH: (415) 422-2532 Fax:(415) 422-2551 Internet: armstrongv(a)usfca.edu

2 1

EVEN MORE FREE PORN: STUFFED HAS 10 LINKS TO 100S OF FREE PICS, NEW EVERY DAY
by STUFFED SUN OCT 11 17 Dec '03

17 Dec '03

+ 30 SUPERB, HI-RES, HOT PHOTOS + 5 SUPER SEXY STORIES + AMANDA'S FANTASY + MISSIONARY MADNESS + BABES & BLOWJOBS + GALLERIES OF PORN + CUMSHOT QUEENS + BLOW BABY BLOW + FIRM BOOBS + PORN PRINCE + COLLEGE SEX + SLUTTYONES.COM + BONUS PIC 1 -> http://www.stuffed.net/home/12584.htm + BONUS PIC 2 -> http://www.stuffed.net/home/18130.htm + BONUS PIC 3 -> http://www.stuffed.net/home/2170.htm + BONUS PIC 4 -> http://www.stuffed.net/home/32120.htm + BONUS PIC 5 -> http://www.stuffed.net/home/22064.htm + MUCH, MUCH MORE! ----> http://stuffed.net/home/ <---- If you haven't visited STUFFED in the last few days, you're in for a real treat. It's faster than ever before and now, as a subscriber, you get 35 FREE new pics every day, plus over 100 more at carefully selected FREE sites we link to. This email is never sent unsolicited. Stuffed is the supplement for the Eureka newsletter you subscribed to. Full instructions on unsubscribing are in every issue of Eureka! ----> http://stuffed.net/home/ <----

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

> >HOW MUCH CODE DID 'CYPHERPUNK' TIM MAY EVER WRITE? > > How much code have you ever written? A DECENT AMOUNT. THE CRYPTO APPS I CREATED ARE SOMEWHAT UNIQUE, SO IF I MENTIONED THEM YOU MIGHT FIGURE OUT WHO I AM.

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

PS. there is someone on this list who knows who i am. yes there is someone who knows who anon posters are. we fucking hate you and am waiting for you to take the trap and we will reveal your identity scumbag.

3 2

No Subject
by Anonymous 17 Dec '03

17 Dec '03

>> > >HOW MUCH CODE DID 'CYPHERPUNK' TIM MAY EVER WRITE? > >I suppose the cyphernomicon doesn't count as furthering >the cause to you? ahhh, so when you say "cypherpunks write code" that also means articles and other writings too???? so you can be a cypherpunk by writing a lot of stuff ABOUT cypherpunks code???? but just cause you write the code or text, that's only one part of the equiation, right??? in other words is david chaum a cypherpunk????

1 0

DESX
by Anonymous 17 Dec '03

17 Dec '03

| So what's DESX? DESX is a modification of DES which uses a 64+56+64 bit key, with what is called "pre- and post-whitening". Specifically, break the key into three pieces, 64 bit K1, 56 bit K2, 64 bit K3. Then DESX is defined by: C = K1 xor DES (K2, K3 xor P) where P is plaintext, C is ciphertext, and DES (K, P) is the DES encryption of P under key K. The encryption then has three steps: - XOR the input with K3 - DES encrypt that with K2 - XOR the result with K1 The first and last steps are called "whitening" because by xoring with a random value, any structure is destroyed. White light is a uniform and unstructured mixture of all colors. Whitening has been adopted as a general tool in constructing ciphers these days and many of the AES candidates use it. It makes things more difficult for the cryptanalyst as he won't know exactly what values are being fed into the guts of the cipher.

3 2

No Subject
by Anonymous 17 Dec '03

17 Dec '03

Sunday, October 11, 1998 - 01:11:20 MET It's messages like this which make the cypherpunk mailing list more bearable... NOT :- ) -> Subject: N/A -> Date: Sat, 10 Oct 1998 22:18:31 +0200 -> From: Anonymous <remailer(a)hr13.zedz.net> -> To: cypherpunks(a)cyberpass.net -> PS. there is someone on this list who knows who i am. yes there is someone who knows who anon -> posters are. we fucking hate you and am waiting for you to take the trap and we will reveal your identity scumbag. - Scumbag Interesting terminology... :- ) I got this nifty little slang dictionary which has this word in it... "Dictionary of Contemporary Slang" by Tony Thorne... ISBN 1-85980-003-3 [on the back of the dic] and it's worth 12.99 in British pounds :- ) Published in 1994 Copyright (c) Tony Thorne 1990 The moral right of author has been asserted A CIP entry for this book is available from the British Library Printed in Britain by Clays Ltd, St. Ives plc ISBN 0 7475 1735 5 [on the second page] Comments on back of book: More than 5,000 racy and raffish colloquial expressions - from Britain, America, the Caribbean, and other English-speaking places. 'Fascinating. Certainty a book I shall want to keep on trucking with.' Daily Mail 'Wonderfully informative.' Observer ------------------------------------ Definition of 'fucking': adjective an intensifier used with other adjectives to emphasis. Like "bloody" it is also one of the very few examples of an 'infix' [a word component inserted before the stressed syllable in the middle of a polysyllabic word] in English. e.g. 'Jesus, it's f****** cold in here.' e.g. 'Abso-fucking-lutely.' Definition of 'scumbag': noun, [origin] American a deceptive person. This term of abuse is now widespread and is permitted in the broadcast media, in spite of the fact that its origin, unknown to many of its users, is as an obscene phemism for condom, 'scum' being an obsolescent American term for semen. The word was adopted by British speakers around 1985. e.g.. 'Even scumbags have right here in the USA.' [Red Heat, US film 1988] Oo and a bottle of rum, Anonymous PS: If I remember correctly, the main actors in Red Head were James Belushi, and Arnold Swatznager [something like that]....

1 0

"TCQ" (request for comments)
by Frank O'Dwyer 17 Dec '03

17 Dec '03

Some people asked for more detail on the project I am working on, so I have begun a quick write-up about it. A draft version is at the URL below. This is just a sketch, and the document is fairly scrappy still, but I thought it would be worth asking for comments at this stage anyway. So, flame away. http://www.brd.ie/papers/tcq.pdf (Yes, it's an acrobat doc. Apologies for the somewhat awkward format here.) Cheers, Frank O'Dwyer.

1 0

TCQ ascii version
by Anonymous 17 Dec '03

17 Dec '03

(c) 1998 Frank O'Dwyer. Verbatim copying and redistribution in any medium is permitted provided this copyright notice is preserved on all copies. TCQ ("They Seek You") Mass-market Strong Anonymity Frank O'Dwyer fod(a)brd.ie Introduction This document sketches the design goals and features of "TCQ", a work in progress with the aim of providing a mix of features offered by ICQ, IRC and email -- but using cryptography to provide strong anonymity and privacy. As the name implies, TCQ "(They Seek You") is similar in purpose to ICQ ("I Seek You"), but with a very different emphasis. TCQ is motivated by the recognition that people being sought do not always wish to be found, and that those doing the seeking (people, organisations, or governments) can be threatening. TCQ is also motivated by a desire to make the use of strong anonymity easier and much more common, riding the current wave of popularity of "anonymous" services like IRC, ICQ and webmail. Status TCQ is in the early stages of being designed and prototyped; this early draft is being made available now to solicit comments (and assistance) from anyone with an interest in this project. Some initial design decisions and the rationale for them are also documented here. It is planned to make TCQ freely available in source and binary form, under a liberal licence (such as MozPL, or a BSD-style licence). If you can contribute ideas, or code on those terms, you are welcome to. Background Basic political background to this, intended for general consumption (including people who may not be aware of what GAK is, etc.). This is just a sketch. - FOD Anonymous communication is hugely popular. Vast numbers of non-technical people use services such as ICQ (www.mirabilis.com) and Hotmail (www.hotmail.com) because they want to communicate privately and anonymously. However, these systems only offer a weak form of privacy and anonymity. They use unencrypted links (which can easily be tapped), unencrypted messages on centralised servers (which can easily be commandeered or shut down) and well known sites (to which access can easily be blocked). They also use communication links that can be traced to individuals, albeit requiring some effort. Systems which offer much better privacy and anonymity are available (for example PGP, Cypherpunks remailers), but relatively few people use those systems. This is partly because relatively few people know about them, but mainly because they are difficult to use. There is a lot of additional theory on strongly anonymous and strongly private communications [ref Cypherpunks literature here], but few implementations of any sort and no mass-market implementations. (that I am aware of - FOD). In the case of strong anonymity, most services thus far have been based on email. Email has a strong culture of being suspicious of "fake names", and this is another factor in the lack of mainstream take-up of strong anonymity. However, with services such as IRC and ICQ, "fake names" are the norm -- these cultures are now becoming mainstream and they may be more receptive to strong anonymity. At the same time, an individual's ability to communicate with true privacy and anonymity is under threat from various quarters, including for example: o Government Access to Keys. Proposals designed to allow governmental access to private communications, (including encrypted private communications between individuals) have been circulating for some time in many jurisdictions including the United States and Europe. These proposals are typically sold on the back of "hard cases", such as a claimed need for law enforcement to be able to intercept the communications of paedophiles and terrorists. o Physical border inspections. Users who cross borders may be subject to customs inspection of any computer equipment they may be carrying; for example, if their laptops contain (or appear to contain) encrypted information, they may be required to provide the key(s). On the other hand, if their information is not encrypted, then users' confidential information (private diaries, letters, business plans) is exposed. There are rumours that some countries (such as the UK) already perform such inspections. o Centralised Services. There is a growing trend to move security-critical services off users' own PCs and onto the web. Prime examples include online backup and webmail. Even non-technical people often instinctively react to this by becoming "anonymous" (e.g. lying about their names and location). However, this is still a very hospitable climate for attack by governments and other parties, and in any case, the level of anonymity is weak. Also, in so far as such services benefit privacy/anonymity (e.g. webmail), they are easily monitored, blocked, or shut down. o Strongly Identifying Protocols. Commercial security products, some of which apparently offer strong encryption and privacy, are almost universally based upon "X.509 certificates" and trusted third parties known as "Certification Authorities" (CAs). This trend is worrying for a number of reasons: o X.509 is typically used as a strongly identifying protocol, and the analogy is often made between X.509 certificates and a driving licence or passport. Although X.509 can facilitate private communications, it effectively prevents anonymous private communications since by design it requires you to show your "passport" to strangers. (X.509 does not have to be used this way, but people are often encouraged to use it that way.) o Use of X.509, and in particular establishment of public CAs, is likely to be heavily regulated. Proposals have been made to "licence" CAs, for example. Regulated management of individuals' encryption keys is not a healthy development for online privacy. o Extensions for governmental access to keys have been made to X.509, and X.509 is at the heart of some governmental strategies to mandate key access. o If Public CAs take off then they will turn out to be single points of failure and an extremely attractive attack target. Anyone (individual, corporation or government) who can compromise a public CA is in an excellent position to attack the communications of all users served by that CA. o Logical border inspections. Communications that cross cyberspace borders may be subject to traffic monitoring and/or filtering. This might occur at corporate firewalls or at well defined national "entry points" and "exit points". o Non-repudiation. Some systems for private communications have as a side effect that it is difficult for a person to plausibly deny sending or receiving a particular message. This is sometimes welcome, but it can be a problem if the person thinks he or she is anonymous. For example, a warm body might be linked to a message just by being found in physical possession of related cryptographic keys. Design goals These goals are listed to give an idea of the features TCQ is intended to provide. It is likely that TCQ will meet these goals only in a piecemeal fashion as it evolves, doing the easy bits first and leaving the hard bits till later. We will see. -FOD 1. Casual Anonymity. TCQ should offer a messaging service based on disposable cryptographic identities. This level of anonymity is weak, but it is easiest to implement and it is a start. 2. Relative Anonymity. It can be useful to have multiple identities (or "nyms") and for some identities to be less anonymous than others. A nym might be anonymous, identified to a friend, identified to a select group, or generally identified to everyone. For example, this allows for applications where the sender is anonymous but the receiver is not. TCQ should allow people to selectively reveal their identities (including partial information about themselves) while remaining fully anonymous to others. TCQ should also allow multiple identities to be maintained, with varying degrees of anonymity, and allow these identities to be kept at arm's length from each other. Lastly, it should be possible for a TCQ sender to selectively reveal "also known as" relationships between one nym and another. (lots of requirements here -- might be worth splitting this up). 3. Strong Anonymity. TCQ should be extensible to use, or natively offer, stronger anonymity services (mixes, remailer-type functionality, etc.). 4. Privacy. It should not be possible for unintended recipients to read TCQ messages (but see the caveats below). 5. Integrity. It should not be possible for a third party to tamper with TCQ messages. (again see the caveats below.) 6. Repudiability. It should be possible to plausibly deny having sent a TCQ message, or at least know when this will not be the case. 7. Ease of use. o TCQ should be easy to install and use for average users of ICQ, webmail and IRC, and should not require special cryptographic expertise. o TCQ should also be easy to use for advanced users, and allow them to know what is going on "under the hood". o It should be easy for average users to become advanced users, and they should be guided to documentation of issues that affect their privacy. o It should be easy for developers to extend TCQ without being intimately acquainted with all of its workings (ideally, it should offer well-defined extension points wherever possible). 8. Decentralisation. TCQ should not depend upon well-known centralised servers, since they are easily monitored and shut down. (This is unfortunate, since many ICQ-style features are very difficult to provide without central servers; TCQ may have to piggyback on existing public resources such as IRC and webmail to provide these.) 9. No Special Resources. TCQ should require only resources that are available to the average dial-up ISP user. (Users should not be required to set up a server on the Internet for example, though they should be able to use any public resources that exist, and private resources if they have them.) 10. Secure Message Store. TCQ should provide encrypted and tamperproof storage for received messages, and should provide a feature to securely erase messages from this store. (It is arguable whether "securely erase" is always useful -- an attacker will usually be able to record encrypted messages in transit anyhow. However there may be draft messages in the store that were never sent anywhere.) 11. Mobility. TCQ users will be typical dial-up users. They will not necessarily have fixed or easily discovered IP addresses. They may also change ISPs, move from location to location, or switch computers. While travelling they may cross borders and potentially they will be subject to inspections of their computing equipment. 12. Channel Independence. It should be possible to extend TCQ (with code) so that TCQ messages can be sent over whatever channels and drop-points are available (e.g. direct connections, email, webmail, IRC, ICQ, ftp sites, newsgroups, mailing lists, remailers, eternity services, etc.). Initially it should be possible to use at least IRC, email and webmail, since these are easiest to implement, most people have easy access to these, and IRC and webmail are relatively anonymous to begin with. (The expectation of anonymity is also highest on these services.) After that, use (and ultimately provision) of anonymous remailer style services is the natural next step. 13. Programmatic Access. It should be possible for programs (robots) to send messages via TCQ, and to automatically handle received messages. Command line and API access, coupled with some form of scriptability and the ability to call out to scripts to handle, pre-process or send messages is desirable for this. 14. Group communication. Programs such as IRC and ICQ offer the ability to have N-way chats. If it is to attract users of these programs, TCQ needs to offer that too. (This is difficult to do generically and securely, however.) 15. File Transfer. Messages should not be restricted to text messages, and messages should not be limited in size. 16. Stealth, firewall negotiation. TCQ should be able to avail of stealthy channels, and should not make its protocols easy to firewall. Protocols that are easy to firewall are usually easy to filter and monitor, and always easy to shut down. 17. Persistent pseudonyms, friend location. With IRC and ICQ, it is straightforward to determine if a friend is online and communicate with them again (although this is not done securely). Although it has no central server, TCQ should allow this in a similarly straightforward fashion, otherwise few will use it. 18. Key Management Independence. TCQ should not presuppose much more than the availability of a key pair per pseudonym. This allows different key management systems to be used, including web-of-trust, reputation capital systems, manual key exchange etc. 19. No patent problems. TCQ should not require the use of patented techniques or patented algorithms such as RSA and IDEA, as this would affect its use in some countries. 20. Sugar. Popular chat clients (e.g. Mirc, Vplaces) provide various "nice to have" features such as the ability to play sound files during conversations and the ability to have avatars (graphical representations of participants). TCQ should provide similar features. Anonymity and Privacy Caveats This is just an attempt on my part to work out what is and is not achievable in terms of privacy and integrity when purely anonymous participants are involved and relationships are formed wholly online (i.e. no out-of-band contact or face-to-face meetings). I just wrote it down here to clarify my own thinking and to capture it somewhere. Comments on this reasoning are very welcome. - FOD. Anonymous Receivers When talking to an anonymous receiver, privacy of communications does not apply in the usual sense, regardless of how much encryption is present. This is because an anonymous receiver could be anyone (by definition). In such a scenario, the sender should assume the worst, namely that the receiver is not someone the sender wishes to communicate confidential information to. For example, the receiver could be some entity out to determine the sender's identity or exact location. In addition, the receiver could pass the sender's messages on to others. Thus, not only could you be talking to anyone, you could be talking to everyone. In a group where all relationships are anonymous and formed wholly online, no amount of strong cryptography or "reputation capital" changes this (see Man in the middle attacks below). So why bother encrypting to an anonymous receiver? The only reason seems to be that in an anonymous online relationship, privacy comes from sender anonymity and sender anonymity might fail. If it does, then message encryption is a second line of defence against eavesdroppers but only if the anonymous receiver is trustworthy after all. There seem to be plenty of threat models in which encryption to anonymous receivers is worthless. An example may clarify this: Nym1 wishes to admit some embarrassing but non-identifying fact about themselves to Nym2. The reason Nym1 is willing to make the admission is because Nym1 believes itself to be speaking anonymously, not because it believes it is speaking privately. After all, Nym2 could be anyone/everyone. However, if Nym1's anonymity fails somehow, then encrypting to Nym2 can be beneficial if there is some significant chance that Nym2 is not revealing Nym1's messages, and Nym2 does not know Nym1 or is otherwise not an adversary of Nym1. Similarly, if there is a significant chance that Nym2 does know Nym1, or is an adversary, then encryption to Nym2 is pointless. In both cases, encryption is secondary and anonymity is the point. Anonymous Senders The flip side of the above, from the receiver perspective, is that an anonymous sender could be anyone. The receiver cannot assume that it is the only person receiving the sender's messages, even if they are encrypted. The sender could be broadcasting them. Nor can the receiver assume that the messages are in any sense "from" any particular sender, even if integrity protection is applied. They could be from anyone. It seems at first sight that given a sequence of messages from the same anonymous sender (same key pair) then each message is from the same individual, and that reputations can be built based on that fact. In the wholly-online/wholly-anonymous case, this is not quite true however (see below). Man in the middle attacks In a group based on public keys where all relationships are anonymous and formed wholly online, all communications within the group are always subject to (active) man-in-the-middle attacks. There is a possible defence against this using scale and publicity, but approaches such as web-of-trust and reputation capital do not work for this. This is how it seems to me, anyway, assuming a public key system is used, and I try to prove it below -- are there techniques other than public key techniques that do any better? - FOD This can be proved by informal induction; the first relationship (between Alice and Bob) is necessarily formed by exchange of naked public keys. No third party can vouch for the keys; there is no third party. No reputation capital can attach to the keys; Alice and Bob have just met for the first time. Since the public keys are naked, an active attacker can substitute its own keys for those of Alice and Bob during the key exchange. Thereafter the active attacker can eavesdrop on the conversation between Alice and Bob, and can also inject, delete, reorder, delay or modify messages at any time. As further participants join the population, any new relationships formed can be similarly attacked. Alice and Bob cannot reliably certify any new participants since they can both be impersonated, and in any case, by definition they do not know any new anonymous participants and can certify nothing about them. For the same reason, new participants cannot certify Alice and Bob either. Therefore, in principle at least, the attacker can impersonate or eavesdrop on any member of the population, no matter how large the population grows and no matter how many messages are exchanged. Such an elaborate spoof is arguably not feasible once some size of population is reached, but this is not terrifically comforting. (Publicity on out-of-band channels (e.g. face-to-face meetings) could be used to make these systems more reliable, but these are excluded by construction -- relationships are formed wholly online). Reputation capital does not help, since it does not matter how much capital Alice accrues if she can be impersonated. The attacker can damage or abuse Alice's reputation at any time, for example by injecting or modifying a message and making it appear to come from Alice. What reputation capital can do, however, is eventually defeat an attacker who for some reason is only able to attack some of Alice's exchanges. In that case, Alice will appear to have two public keys, one real and one fake (supplied by the attacker). It is then up to Alice to boost the reputation of the real key and damage that of the fake (assuming she gets to know of it). Initial Design Decisions This is still very incomplete, just a few notes for now - FOD Programming Language, Platform o TCQ will be implemented in Java/Swing, targeting Java 1.1/1.2 and Windows initially. Rationale: Java code is mobile and can be digitally signed, which leaves room for the entire TCQ program and its data to be dumped to cyberspace while travelling, and picked up securely upon arrival (even on a different computer). Thus a mobile TCQ user could cross borders with nothing more than a signature verification key and a memorised passphrase, and still restore a secure environment in the new location. Java is also cross-platform, so although most people use Windows a relatively easy port to other platforms (e.g., Macintosh, UNIX) should be possible, and developers using other platforms can provide extensions without much in the way of special tools. It is possible to call out to scripts from Java, and Java can be driven by script (e.g. TCL script, or E (?)). Java also has good support for cryptography, and an internationally available crypto library (Cryptix). Some problems with Java are that certain aspects of it are difficult to secure, and Java GUIs are frustrating to port in practice. Secure random number generation and protection of sensitive information such as keys are hard problems in Java. However, these problems are not significantly easier in other languages, and the GUI port is much more difficult. If necessary native code could be used to provide any features Java can't handle. Generic Delivery Channels o TCQ should presuppose only generic delivery channels for messages, allowing new delivery channels to be added easily. Rationale: To be usable over as many concrete delivery channels as possible (IRC, sockets, webmail, ftp sites, remailers, etc. -- see above), TCQ should not assume too much about the channel. In particular this means that security features should be applied to the messages themselves, not the channels. If channels can be assumed insecure, then people adding code for new delivery channels do not need to implement any security features unless it is to strengthen anonymity. Some properties that TCQ will need to know about each channel type are: o Whether it is offline or online. That is, with some channels the other party will be present at that moment and the communication can be real-time. This is important mainly because on an online channel an ephemeral key exchange can take place in order to establish perfect forward secrecy for that particular conversation. A second set of temporary keys can also be established while online, for later use in offline communications. For communication that takes place entirely offline, one-sided ephemeral key exchanges could be used as a form of key change (this would allow the related nym to persist across key changes and also improve forward secrecy.) Whether a channel is on or offline can be modelled as just binary (on/offline) or alternatively as some estimate of the channel lag. o Its anonymity characteristics. Some channel types will be more identifying than others. For example, a direct socket channel is relatively traceable, whereas a channel through a remailer-type network is much harder to trace. Channels via drop-points such as public news groups are somewhere in the middle, but nearer the "traceable" end of the spectrum. Message Format o TCQ messages will consist of an XML header and a MIME-typed content. Rationale: (This is all based on more of a hunch than a firm conviction.) XML is readable, easy to extend and easy to process with scripting languages. It's a nice framework for prototyping protocols, and unrecognised detail can easily be skipped. There are also canonical formats for XML, which lend themselves to hashing, digital signature, etc. It's good for assertions (certificates, RDF possibilities, W3C digsig?) too. There's also a pretty simple mapping from protocols such as SPKI and SDSI to XML, if necessary. MIME is a well-established standard for messaging and content identification, and the Java Activation Framework uses it for drag-and-drop, etc. Something like S/MIME or PGP/MIME could be used instead of XML+MIME, but these do not work so well in the online case and S/MIME uses X.509. In any case, these formats can still be used if desired, since they can be embedded as MIME-types in the body of a TCQ message. Generic "Friend Location" o TCQ should presuppose only generic methods of locating friends. Rationale: locating friends (i.e. finding if they are online, determining their current IP address or preferred drop-point) is difficult to do without a central server network. One approach is to piggyback on some server network that already exists, such as an IRC or ICQ network, or netphone directories. For example if two people log onto an IRC network using one of a set of prearranged handles, they can readily determine each other's online status and IP address. Another approach is to post a current IP address in a prearranged location, such as a web or FTP site. There are also some proposals for "dynamic DNS" which could be useful, since this is a general problem for mobile IP. Yet another approach is for the requirement to have no servers to be relaxed to the extent of allowing "nym servers" to be used just for the purposes of resolving previously exchanged nonces to current IP addresses, current drop-points, etc. Such servers could also double as drop-points themselves or as the basis of a remailer network, if there were enough of them. A variation on the last approach is to have sets of users collaborating to provide location services and message forwarding services for one another. This is probably the most interesting approach, but it is also the most difficult, it is vulnerable to disruption, and firewalls are a problem. By using a generic approach, simple initial solutions can be replaced with other solutions later.

1 0

IP address change
by BMM 17 Dec '03

17 Dec '03

Within the next 24 hours, minder.net will be moving to a new block of IP's. Until DNS catches up with the new addresses, mail to cypherpunks(a)minder.net may become delayed or undeliverable for a short time. Thanks -Brian

1 0

Bloodgate
by Joseph 'Anonymous' Howe 17 Dec '03

17 Dec '03

Vince Foster suicide linked to Arkansas tainted plasma sales Mark Kennedy The Ottawa Citizen The controversy over how a U.S. firm collected tainted blood from Arkansas prison inmates and shipped it to Canada has spread to Vince Foster -- U.S. President Bill Clinton's personal confidant who committed suicide in 1993. Mr. Foster, a boyhood friend of Mr. Clinton's, was one of the president's most trusted advisers. As a corporate lawyer in Arkansas, he worked in the same law office as Hillary Rodham Clinton and became a close colleague of hers. When Mr. Clinton left Arkansas for the White House in early 1993, he called on Mr. Foster -- known as an earnest individual with high ethical standards -- to join him as deputy White House counsel. Mr. Foster obliged, also remaining the Clintons' personal lawyer. Now, five years after his mysterious death, two developments have prompted questions about Mr. Foster's knowledge of the U.S. company's prison-blood collection scheme: - There are signs that Mr. Foster tried to protect the company called Health Management Associates (HMA) more than a decade ago in a lawsuit. - And a major U.S. daily newspaper recently reported that Mr. Foster may have been worried about the tainted-blood scandal, which was just emerging as a contentious issue in Canada, when he killed himself in July 1993. Mr. Clinton was governor of Arkansas when the Canadian blood supply was contaminated in the early and mid-1980s. He was familiar with the operations of the now-defunct HMA, the Arkansas firm given a contract by Mr. Clinton's state administration to provide medical care to prisoners. In the process, HMA was also permitted by the state to collect prisoners' blood and sell it elsewhere. HMA's president in the mid-1980s, Leonard Dunn, was a friend of Mr. Clinton's and a political ally. Later, Mr. Dunn was a Clinton appointee to the Arkansas Industrial Development Commission and he was among the senior members of Mr. Clinton's 1990 gubernatorial re-election team. The contaminated prisoners' plasma -- used to create special blood products for hemophiliacs -- is believed to have been infected with HIV, the virus that causes AIDS. As well, it's likely the plasma was contaminated with hepatitis C. Any information linking Mr. Foster to HMA and its blood program is bound to raise more questions about how much Mr. Clinton knew. Michael Galster, a medical practitioner who did contract work for the prison system, has revealed to the Citizen that Mr. Foster once approached him in the mid 1980s to ask for a favour. At the time, Mr. Clinton's administration and HMA were facing a $12-million lawsuit from a prisoner whose infected leg had been amputated at the hip in 1982. The inmate was claiming that poor medical care by an HMA doctor -- who had been working in the prison despite being denied a permanent licence to practice by the state medical board -- had resulted in the needless amputation. Mr. Galster, an expert in prosthetics, says HMA's medical director had asked him to build a special artificial leg for the prisoner in the hope that it would lead to an out-of-court settlement. Mr. Galster refused to get involved, and was visited several weeks later at his office by Mr. Foster, who appealed again for his assistance. "The purpose of his being there was to convince me to take this, smooth it over and everybody would be happy," says Mr. Galster, who has written a fictionalized account of the prison-blood collection saga, called Blood Trail. "I refused him. He said, 'I understand your predicament, but this could make it difficult for you to get a future state contract.' "If it's like the past state contracts I've had, I don't need any," Mr. Galster says he replied. "He (Foster) kind of laughed and said 'OK, I appreciate your time.' " It was the only time the two met, but Mr. Galster now says he believes Mr. Foster was trying to protect both Mr. Clinton and HMA from public embarrassment. The questions surrounding Mr. Foster became even more intriguing when, several days ago, the New York Post published an article entitled "The tainted blood mystery" by one of its columnists, Maggie Gallagher. She reported on how the Citizen had broken a lengthy story in mid-September about the Arkansas prison-blood scheme. Most significantly, Ms. Gallagher wrote that the story suddenly cast new meaning upon "a strange little memory fragment" that had been "meaningless in itself." Citing a source who asked not to be identified, Ms. Gallagher reported that a day or two after Mr. Foster died on July 20, 1993, someone called a little-known phone number at the White House counsel's office where Mr. Foster had worked. "The man said he had some information that might be important," wrote Ms. Gallagher. "Something had upset Vince Foster greatly just days before he died. Something about 'tainted blood' that both Vince Foster and President Clinton knew about, this man said." Mr. Foster's mysterious death spawned a political controversy from the moment that police, responding to an anonymous 911 caller, found his body in a national park in Washington, D.C. Police concluded that Mr. Foster had stood there coatless in the late-afternoon heat, inserted the muzzle of an antique Colt 38. revolver into his mouth and pulled the trigger. Immediately, conspiracy theorists began spreading rumours that Mr. Foster had been murdered. But independent counsel Robert Fiske (a special prosecutor who examined the Whitewater scandal before being replaced by Kenneth Starr) conducted his own review and agreed with police that it was suicide. It was believed that Mr. Foster had been suffering from depression and was especially perturbed by a brewing scandal in which he was embroiled. In the so-called Travelgate fiasco, Clinton aides had fired several veteran White House travel-office employees as part of an alleged attempt to give the lucrative travel business to Arkansas cronies. However, Ms. Gallagher's column has raised questions over whether Mr. Foster was distressed about something he knew regarding tainted blood, and whether this anxiety contributed to his suicide. In Canada, the summer of 1993 was a critical period. A Commons committee, which had conducted a brief review of the tainted blood scandal, had just released its report in May. Its first recommendation called for a major "public inquiry" to conduct a "full examination of the events of the 1980s" when the Canadian blood supply became contaminated with AIDS. Indeed, on Sept. 16 -- eight weeks after Foster's death -- the federal government announced the public inquiry, to be headed by Justice Horace Krever. During the course of his work, Justice Krever unearthed the Arkansas prison-blood collection scheme and wrote about it in his final report last year. However, no mention was made of Mr. Clinton until last month's story in the Citizen, which drew on documents obtained from Arkansas State Police files.

1 0

IP: A Poll / A Thousand Lies (satire)
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: "Tom Simmons" <simmons(a)camasnet.com> Subject: IP: A Poll / A Thousand Lies (satire) Date: Fri, 9 Oct 1998 11:48:22 -0700 To: "Ignition Point" <ignition-point(a)pobox.com> Editor, I took my own cross-sectional, wholly "scientific" poll on Clinton's impeachment/resignation. In order to be truly "scientific", I followed these rules: 1) Choose a densely populated area of a major city in order to get a poll result that is not one-sided. 2) There are 25 known minority cultures in the U.S., including, in "random" order, but not limited to Indian, African, Mexican, Oriental, Caucasian, gray wolf, spotted owl, and grizzly bear. In order to ensure that minorities are not treated as minorities, enforce strict parameters of 96 percent combined minority and 4 percent Caucasian. 3) Eliminate the following from the poll to preclude prejudice: a.) anyone who did not vote for Clinton. It would not be fair to include those who are obviously biased already. b.) anyone who thinks a Newt Gingrich is a slimy lizard. c.) anyone who doesn't think Newt Gingrich is a slimy lizard. d.) all who believe there is such a thing as "sin". e.) all who have ever used or heard the phrase " moral authority ". f.) anyone who believes that a document as old as the Constitution should matter, at this point. g.) anyone who believes someone with the nickname Slick Willy, caught in a thousand lies, might not be telling the truth now. h.) anyone who has ever questioned the actions of the government and is still living or is not imprisoned. Using these guidelines as promoted by the United Pollsters / Young Urban Research Specialists, commonly known as UPYURS, the results were astoundingly accurate. When asked if Clinton is doing a good job, 7335 percent answered "yes", although when asked to be more specific, 8223 percent hadn't the foggiest idea what his job duties are. As to whether he should resign, 14243 percent answered " no ". A breakdown analysis revealed that, among those not eliminated by the above fairness rules, 62,786,091 work for the Clinton administration, 24,892,456 cannot speak English, 12,873,612 bear fur, and there was one token conservative. In a completely unrelated question, the same broadband group was asked whether Hitler should be posthumously awarded the Nobel Peace Prize...... Tom Simmons ***************************************************************** ***** The most formidable weapon against oppression and tyranny is not bullets, for their use is as a last resort, nor hiding in the mountains, for there is no safe haven from tyranny, nor foolish martyrdom for freedom's sake. It is an informed and involved citizenry. This IS our only hope.Get involved. Tom Simmons ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer **********************************************

1 0

IP: Different Approaches to Privacy Issue: OECD
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: believer(a)telepath.com Subject: IP: Different Approaches to Privacy Issue: OECD Date: Fri, 09 Oct 1998 16:28:03 -0500 To: believer(a)telepath.com Source: USIA http://www.usia.gov/current/news/latest/98100904.clt.html?/products/washfile /newsitem.shtml 09 October 1998 OECD CONFERENCE ACCEPTS DIFFERENT APPROACHES TO PRIVACY ISSUE (Resolved authentication issue on electronic signatures) (400) By Bruce Odessey USIA Staff Correspondent Ottawa -- A conference of 29 industrialized countries for promoting electronic commerce has resolved a controversy between the United States and the European over Internet privacy by accepting both points of view. The United States contended industry should be left to manage the problem by itself, but the European Union had demanded a government regulatory approach. "The adversity of views can produce compatible solutions," said John Manley, Canadian minister of industry, who presided over the October 7-9 conference of the Organization for Economic Cooperation and Development. The language approved by the OECD said the governments "encourage the adoption of privacy policies, whether implemented by legal, self-regulatory, administrative or technological means." In a statement issued in Washington U.S. Commerce Secretary William Daley praised the conference work. "Our self-regulatory approach can co-exist with approaches taken by other governments so long as we focus on our common objective -- effective privacy protection," Daley said. Again, on the issue of authenticating e-commerce signatures and enforcing Internet contracts, the OECD was comfortable with different approaches. The governments declared they would "take a non-discriminatory approach to electronic authentication from other countries." The three-day conference held in Ottawa, Canada, was the first one held by the OECD to include representatives from business, labor and consumer groups as well as non-member governments. Business representatives expressed satisfaction with the outcome, but representatives of consumer groups were skeptical or hostile. The OECD staff is required to complete draft guidelines in 1999 on consumer protection. The OECD emphasized development "of effective market driven self-regulatory mechanisms that include input from consumer representatives." But consumer advocates insisted that only government-to-government agreements can protect consumer interests when shoddy goods are ordered over the Internet and delivered across national borders. The conference also took some crucial decisions on taxation. Notably the governments agreed to apply existing taxes to electronic commerce and not to develop new taxes. They also agreed to impose taxes at the place of consumption and not at the place of production and to work out problems in defining the place of consumption. OECD Director-General Donald Johnston said he expected some sort of follow up meeting at the working level and not at the ministerial level within a year. ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer **********************************************

3 2

IP: Congress Poised To Approve Digital Copyright Law
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: believer(a)telepath.com Subject: IP: Congress Poised To Approve Digital Copyright Law Date: Fri, 09 Oct 1998 18:41:50 -0500 To: believer(a)telepath.com Source: Fox News - Reuters Congress Poised To Approve Digital Copyright Law 3.08 p.m. ET (1909 GMT) October 9, 1998 WASHINGTON Congress was expected to complete work later Friday on legislation to update copyright law for the digital age, after removing a controversial provision granting new rights to databases. The bill, which the Senate approved Thursday and the House will consider Friday, implements provisions of two international treaties adopted by the World Intellectual Property Organization in 1996. Software makers, movie studios, book publishers and other creators of copyrighted works have pushed hard for the legislation. They feared that as their products increasingly became available on the Internet in digital form, pirates and criminals would be able easily to make and sell illegal copies. The legislation creates criminal penalties for anyone who disables high-tech, anti-piracy protections, such as encryption, used to block illegal copying. The bill forbids the manufacture, import, sale or distribution of devices or services used for circumvention, as well. "This was a huge win for us,'' said Richard Taylor, spokesman for the Motion Picture Association of America. The movie industry will depend heavily on anti-piracy technology for movies distributed in all manner of formats, he said. A variety of exceptions were also included at the request of libraries, scientists and universities as well as some manufacturers of consumer electronic devices. They feared the law would prevent some kinds of research and would unfairly limit "fair use,'' the central principle of existing copyright law allowing copies to be made for educational and other noncommercial purposes. The exceptions include allowing circumvention if done for computer security testing, encryption research or limited kinds of computer software development. Internet surfers could also circumvent in limited ways to protect their privacy and parents could circumvent to monitor their children's travels through cyberspace. "What we've really been fighting about for the last few months was the exceptions,'' said Jonathan Band, a lawyer at Morrison & Foerster who worked with groups seeking to protect fair use. Band criticized Congress for criminalizing devices instead of actions only and for ignoring a person's motives for circumventing. "Given that Congress chose to go about it entirely the wrong way, it ended up pretty well,'' he said. In addition, at the urging of Band's group and others, the anti-circumvention laws will not go into effect for two years, until the Librarian of Congress, with advice from the Commerce Department, decides whether additional exceptions need to be made. Such exceptions would be reconsidered in a recurring process every three years, at which time new exceptions could also be created. The bill also defined broad freedom from liability for online and Internet service providers, like America Online , which otherwise might have been held financially liable for copyright infringement by one of their millions of customers. Under the bill, service providers will not be held liable for violations they do not know of but if notified by a copyright holder, must take rapid action to shut down the alleged violator. However, if the copyright holder fails to pursue the claim in court within a few weeks, the alleged violator has the right to demand that online access be restored. The controversial database provision, that was added at the last minute to the House version of the bill by North Carolina Republican Rep. Howard Coble, was dropped by a conference committee of members of both chambers. The provision would have overturned a Supreme Court ruling and granted copyright protection for the first time to databases assembled out of facts that themselves were common knowledge and not protected by copyright law. "The library community is extremely grateful that a sea change in American law was not made,'' Adam Eisgrau, lobbyist for the American Library Association, said. © Reuters Ltd. All rights reserved ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer **********************************************

1 0

IP: Oops! Police Fire Tear Gas Into Wrong House
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: believer(a)telepath.com Subject: IP: Oops! Police Fire Tear Gas Into Wrong House Date: Fri, 09 Oct 1998 17:21:40 -0500 To: believer(a)telepath.com Source: St. Paul, Minnesota Pioneer Planet News http://www.pioneerplanet.com/news/mtc_docs/004072.htm Published: Friday, October 9, 1998 Suspect captured; incident probed Tear gas fired into neighbor's house by St. Paul police ROBERT F. MOORE STAFF WRITER A 12-hour search for a man who shot at St. Paul police in Highland Park ended Thursday morning when a police dog found him hiding in a tool shed. And a couple living next door to the suspect was temporarily moved by the city into a hotel after police fired tear gas into their home. Police Chief William Finney said Thursday night he didn't know whether the action was planned by the Critical Incident Response Team, or CIRT. ``I suspect it was an accident,'' Finney said. ``Overall it was an excellent operation. No one was hurt. They held the position for 12 hours and they made the arrest. But they have some explaining to do.'' Dr. Daniel Lutz, the owner of the house, was not looking for explanations Thursday night. He just wanted to get back into the home he has shared with his wife for the last five years. ``I saw my house in the dark last night, but I don't even know the extent of the damage,'' said Lutz, 28, a chiropractor in Circle Pines. ``Right now, I'm not trying to point fingers. I don't know if it was justified or not. I just want my house put back in order.'' Lutz said the city has begun decontaminating the house and that he planned to move back in early next week. He and his wife had been evacuated and were at a neighbor's home before the tear gas operation began just after 1 a.m. Meanwhile, Finney has scheduled a meeting with supervisors of the operation today to determine what happened. Other neighbors who took cover in their basements before the operation said a contractor was at the scene late Thursday afternoon to replace the windows of the Lutz home. Finney said the city attorney was working with the family to repair the damage. Neither Finney nor Lutz knew the extent of the damage Thursday night. Despite the incident, however, neighbors agreed police responded appropriately, simply because the suspect was apprehended. At about 8:30 a.m. Thursday, a police dog discovered Wa Lee Her, 51, in a rusty tin shed next to a residence on the 2300 block of Edgcumbe Road. Her was treated at Regions Hospital for dog bites on a leg and released to police custody, pending a decision on multiple aggravated assault charges. Police said the dog, Ranger, was sent into the shed after Her ignored orders to come out. The suspect did not draw a weapon during his capture, though police recovered a shotgun and a rifle. One of those weapons was allegedly used the night before to threaten his wife and also to fire a shot at police. Her's stepson told a 911 dispatcher his stepfather was threatening to shoot his mother. Her was apprehended just blocks away from his family's St. Paul Avenue house. Finney praised the two officers, Tina Kill and Jeffrey Levens, who responded to Her's home on the 1100 block of St. Paul Avenue just before 9 p.m. Wednesday. ``I'm real proud of those two officers,'' Finney said. ``They did exactly what they were trained to do. They contained the situation, evacuated the residents of the house, called for additional resources and kept the suspect bottled up all night.'' Police blocked off the area soon after Her allegedly fired a shot at Levens and fled into the neighborhood between Howell Street and Edgcumbe Road. Levens had shined a flashlight on the suspect and ordered him to put his hands in the open, when Her fired at the officer, police said. Levens returned fire. No one was hit. Later in the night, officers decided to use tear gas after hearing what police said was a muffled sound, possibly a gunshot, come from the suspect's house. Police first fired tear gas into the Lutz home and then the suspect's. Officers from CIRT and the K-9 unit waited until about 7 a.m. to conduct a ground search of the area. It was a move Finney said was intended to protect both the public and the between 40 and 50 officers in the area. ``It doesn't make sense to search a wooded area in the dark when the suspect has such firepower,'' Finney said. ``We don't want citizens caught in the cross-fire.'' Neighbors knew little about the suspect, but longtime residents thought the family moved into their home less than two years ago. ``It was the most frightened I have ever been in my life,'' said Bonnie Rodriguez, 49, who lives next door to the house where Her was found. ``I was getting ready to go to my doctor and I heard police officers crawling on my roof and walking on my patio. Some had bulletproof vests, some were dressed in camouflage. They had their guns drawn, so they must have known the man was close. I thought there would be a shootout in front of my house and someone would die in my yard.'' _ Rodriguez, who has lived on Edgcumbe Road for 15 years, said police were searching around her house for about 30 minutes Thursday morning. ``I feel better that he is not out here right now, but it terrifies me that he was out there all night and could have broken into my house,'' she said. Pat Sellner, who also lives in the neighborhood, viewed the assault and manhunt as isolated incidents. Sellner, however, admitted being nervous when he heard a helicopter flying overhead Wednesday night. ``I called 911 when the helicopter got lower,'' he said. ``The dispatcher just told me to lock the doors and to stay inside.'' _Cmdr. Doug Wills viewed the entire situation with relief, reflecting on the deaths of two St. Paul police officers gunned down four years ago. ``Whenever you get in a situation like this, you have to remember the day those officers were killed,'' Wills said. ``It dictates how you do business, because you want to make sure nothing like that will happen again.'' St. Paul police officer Ron Ryan Jr. was fatally shot at 7 a.m. Aug. 26, 1994, in the parking lot of an East Side church. Three hours later, officer Tim Jones and his police dog, Laser, were shot and killed by Ryan's assailant as they and others searched for him in the neighborhood. Guy Harvey Baker was caught, convicted and sentenced to life in prison for the slayings. Robert F. Moore, who covers crime and public safety, can be reached at rmoore(a)pioneerpress.com or at (651) 228-5591. ©1998 PioneerPlanet / St. Paul (Minnesota) Pioneer Press - All Rights Reserved copyright information ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer **********************************************

1 0

IP: This Country *Needs* to Come to a Screeching Halt!
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: Patricia Neill <pnpj(a)db1.cc.rochester.edu> Subject: IP: This Country *Needs* to Come to a Screeching Halt! Date: Fri, 09 Oct 1998 15:44:42 -0400 To: ignition-point(a)majordomo.pobox.com This Country *Needs* to Come to a Screeching Halt! by Patricia Neill (c) 1998 All week I've had to listen to the ever more irritating mass media clones droning on about how Americans want "the country to move on" and how all these polled citizens want the President and Congress "to get back to the business of running the country." The media droids (and they have such a droidic quality that they're beginning to sound all alike to me) have of course used their boring technique of repeating these dimwitted phrases over and over and over and over in the bright hope that we get the message. As always, I have to wonder who the hell these media people poll. It surely isn't me nor the millions upon millions like me! My bet is that the pollagandizers (a newly minted, wonderful fresh coinage from the pen of Publius Press) ask each other what they think, and use that as their statistically significantly absolutely similar population. Or maybe they ask the animals at the Washington Zoo and take the calls, snarls and roars for the dulcent tones of assent and consent to their pollaganda (lifted from the same place, today's Federalist Digest). But what I do know is that they are not asking *anyone* who remotely disagrees with their bias, and if they mistakenly call someone like me, I'm probably one of the ones they would simply ignore, as not statistically significant, or at least not significant, to their wizened little minds. As for me, do I want "the country to move on?" Hell, NO! I want it to come to a screeching halt! I want everything else to stop, cease, desist until the American people and those spurious Spongelords down in Congress have a chance to fully investigate Mr. Clinton and his White House. I don't care if no other "business of the country" gets handled. I don't care if NO federal agencies get funded. In fact, I'd just as soon they weren't. Let's not fund them for a year, and see if we miss any of them. I doubt it. We'd all be a lot happier if they disappeared off the face of the earth. Ain't that the truth. I don't even care if Congress has to close down. That'd be another blessing in my book. They can all meet outside of Congress and hold their investigation. They don't need to be under oath--they never pay any attention to it anyway. In fact, why doesn't the Republican majority shut down Congress while they go about checking out those lying sacks of gas up on 1600 Pennsylvania. They can rent the Watergate Hotel--it'd be a fitting touch. I want to know every little detail of what Mr. Clinton did, and when. I want to know how Hillary's billing files for the Rose Law Firm "disappeared" and then "showed up." I want to know about all the millions Bill and Hillary and gang stole from Madison Guaranty. I want all the myriads of scandals of this White House--both Clintons and ALL their cohorts--laid open for the public to see--and I know it will be ugly, real ugly. Actually, my bet is it will be pretty fascinating in a sick kind of way. Like watching a huge spider crawl up the wall if you have arachnaphobia. One fatheaded demagogue (I think it was Barney Frank) was quoted on NPR this morning as saying (and this is not exact, as I was busy trying to get the escaping smoke back into my ears). In the whining, puling tones, characteristic of this particular specimen of Congress: "We should censure Clinton, but he did nothing impeachable. Do you *really* want this thing to drag on for a year, while the 'business of the country' is waiting?" Short answer to that is, there is absolutely no reason under the sun for this to take a year, you dissembling, mammering twit! You could do it in a day, an hour, a nanosecond.You ALREADY know the crimes of Bill Clinton and his wife. You already *know* he lied, he lied to you, he lied to the grand jury, he lied to the American people. And my question for you is, what the hell is your *problem.* Do you honestly think Bill Clinton should be allowed to get away with not only his adultery and lying, but with all his other malfeasances, offenses, violations, felonies, torts, misconduct, misdeeds, sins, transgressions, iniquities and outrages--did I miss anything? Oh yes, murders! You have six years worth to sort through. In fact, Bill Clinton is such a crook that he should have been impeached, tried, convicted and jailed *before* he became president. You have his Washington crimes, but if you go back to his Arkansas years, you'd really have a bonanza! So, please, stop everything else and deal with this impeachment, immediately. The financial global crisis can go right on crisis-ing, for all I care. You all created that problem in the first place, and you ain't gonna get my money to solve it by bailing out Wall Street again. The heck with that. So put everything else to the side, and yes, bring this country to a screeching halt. And see to Mr. Clinton's crimes. My respect for the government is already a mere wisp at this point, if that. If Congress does not impeach--and do a serious job--then ALL my respect for government and what you folk cynically call "rule of law" will be gone. That's a promise. ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer **********************************************

1 0

A Scud in California!
by William Knowles 17 Dec '03

17 Dec '03

>From another one of the several lists I'm on, I figured someone might know who the new pseudo-proud owner of a fully-operational SS-1C Scud missle *WITH* moblie launcher is... Cheers! William Knowles erehwon(a)dis.org Intelligence, N. 86, 5 October 1998, p. 12 USA THE SCUD THAT DIDN'T GET AWAY At "Intelligence", we're taking bets that you won't hear about the unidentified British firm which used an unnamed British freighter to import a fully-operational SS-1C Scud missile -- complete with launcher, but missing its warhead -- into the United States. According to a 25 September report in the "Washington Times", special investigators from HM Customs and Excise have been asked to determine how paperwork sent with the system came to be falsified, but they're probably going to run into ... the Pentagon because the Scud missile and its mobile transporter-erector launcher were seized on 2 September by the US Customs Service at Port Hueneme, California, about 56 km. north of Los Angeles and ... next door to the US Navy Point Mugu Pacific Missile Range, and ... the closest military port to the Vandenburg US Air Force Base where all classified US military launches take place. The Russian-designed, Czech-manufactured missile system was licensed for importation by the Bureau of Alcohol, Tobacco and Firearms (ATF), but ... it was wrongly described. Although addressed to a wealthy -- but so far unnamed (and bets are he will never be named) -- US citizen, who is regarded as a bona fide weapons collector rather than an arms dealer, the missile system had not been made inoperable as required by import rules. This is, of course, of interest to the Pentagon. "This is a full-blown missile," stated John Hensley, a senior agent of US Customs Service in Los Angeles. "The only thing missing is the warhead." The launch chassis is a MAZ-543 truck, commonly used by former Soviet and Warsaw Pact forces. "The guidance system was totally intact and the engine was ready to go," Mr. Hensley said. "All you needed to do was strap on a garbage can full of C-4 high-explosive and you had a weapon." The guidance system and engine would, of course, be of intense interest to Pentagon intelligence, and the Israeli Mossad, particularly if the weapon is a later date or recent model. Hensley said the buyer, who lives in Palo Alto, had previously purchased a Scud missile that had been properly demilitarized. Under US law, such weapons may be imported, provided they are first cut up with a blowtorch so that they can never be reassembled. But in this case, in an effort to fool customs officials, a photograph of the first -- cut up -- missile to be imported was attached to the illegal -- intact -- system, which was seized on 2 September. If the "buyer" really wanted his missile, then the San Francisco Bay, which Palo Alto overlooks, is a much better port of entry. Bets at "Intelligence" are also out on the "buyer" being associated with the military- funded Stanford Research Institute (SRI) or similar Pentagon- dependent firms in nearby Silicon Valley. COMMENT -- The SS-1C Scud is a liquid-fueled missile which is among the most widely deployed weapons in the world. It is in service in 16 nations. Iraq's military forces were able to extend the range of the missile ("with baling wire and plywood", according to certain specialists), and used it extensively during the 1991 Gulf war. International transfers of such missiles, which normally have a range of 300 km., are banned under the Missile Technology Control Regime. Although the major media suggested the seizure would embarrass the Clinton administration, currently engaged in a major international diplomatic effort to halt exports of weapons of mass destruction and missile-delivery systems by Russia and China to the Middle East, it would seem more likely that the affair will "drag out indefinitely" in a California court, unless an appropriate "buyer" can be "sacrificed" publicly. --------------------------------------------- Olivier Schmidt, Editor of "Intelligence" <oschmidt(a)francenet.fr>

4 3

your classifieds.
by submitsoft＠premiumproducts.com 17 Dec '03

17 Dec '03

4 WAYS TO MAKE MONEY WITH MY TWO NEW SOFTWARES! (LIMITED OFFER: GET BOTH FOR $30. SAVE $50 ! ACT TODAY!) -------------------------------------------------- My following 2 new software programs will make you money in 4 ways! They will even do the selling for you! They are the new & affordable 1) 100 CLASSIFIEDS '98 AD SUBMITTING SOFTWARE ------------------------------------------- Type in your ad, and the software will automatically submit it to the top 100 internet free classifieds! Save time and effort! 2) GLOBAL CLASSIFIED '98 AD SUBMITTING SOFTWARE --------------------------------------------- Same as above software, except it submits to the top international trade free classified sites! Different from the above 100 sites! HERE ARE THE 4 WAYS THE TWO SOFTWARES WILL MAKE YOU MONEY: ----------------------------------------------------------- A)START AN AD SUBMISSION SERVICE: Use the 2 softwares to advertise your new service. Charge $10/ad ! B)SELL THE SOFTWARES & MAKE MONEY, WITH ZERO INVESTMENT: Again, use the softwares to advertise their own sale! Charge $40 each. Get the orders, send us 50%, and keep the other 50% ! C)SPONSOR OTHER RESELLERS AND MAKE MONEY OFF THEIR SALES: Again, use the softwares to locate resellers all over the globe. Get 20% on these resellers' sales! D)PROMOTE YOUR OWN PRODUCTS & SERVICES: Again, use the softwares to locate buyers and distributors all over the world for your products and services! If you do not have any product or service to offer, we shall give you a FREE 250-money making reports on a disk. You have the right to make copies and sell each REPORT for $5.00! Use the 2 softwares to place free ads over , and over, and over! The softwares are sold for $40 EACH! If you order the 2 softwares within 2 days of this message, you can buy BOTH of them for only US$30 (THIRTY!) You will be saving $50 !! Plus I shall pay the postage anywhere in the world! This is a limited offer! ACT TODAY! ------------------------------------------------------------------- ORDER FORM Ref:D.B.10/10 =========== Please PRINT the Order Form, TYPE the information, & ENCLOSE payment: ...US$30 (for the 100 Classifieds 98 & Global Classifieds softwares) ...FREE (250-Reports Disk if you order the softwares within 48hrs) I enclose a total of US$.... in... cash,...check,... or Money Order. Checks(on US banks only) take 10 days to clear.Mail all to my address. To order with Credit Card:fill, sign & mail (or fax to (561) 792-6175): ====================================================================== I authorize you to charge my following....Visa....M.C. with the sum of US$.......covering my above order! Master Card or Visa only accepted. Credit Card #.........................................Expiry:........ Signature:................................. NAME:......................................................... ADDRESS:...................................................... ...................................................... CITY:..............STATE:..................ZIP:............... COUNTRY:................ Al Jebaly 3668 161st Terrace North Loxahatchee, Florida 33470 USA (The above is an INTRODUCTORY offer for the above NEW AUTOMATIC softwares! You save $50!Offer is limited & sales are final!Act now!) -------------------------------------------------------------- Your name was given to me as someone interested in a home biz. If this message was sent in error, please forgive me! If you want your name to be removed, hit REPLY, type Remove, & SEND. (10/10) --------------------------------------------------------------

1 0

Hidden WebTV signatures
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

For those of you who don't read sci.crypt, Robert Ames <gnome(a)istar.ca> has posted an article in which he observes that all WebTV posts contain an X-WebTV-Signature: line containing base64-encoded data. For samples of WebTV-generated posts, try the alt.weemba newsgroup, which is filled with WebTV-user drool (caution: remember to employ protection when exposting your mind to the content of the messages). Some samples: X-WebTV-Signature: 1 ETAsAhQDqtur/jfleJ2CDOnNrVoeyALEQAIUOQyCBbzjx5HHfxeMERDgCjztXOU= X-WebTV-Signature: 1 ETAtAhUAmCCzQt+Tqt6fNX+L9+gDCECaqQkCFA0YCPz5tk85mUgq7iX/u4vWvOgG These decode into ASN.1-encoded DSA signatures, eg: 1 30 45: SEQUENCE { 3 02 21: INTEGER : 00 98 20 B3 42 DF 93 AA DE 9F 35 7F 8B F7 E8 03 : 08 40 9A A9 09 26 02 20: INTEGER : 0D 18 08 FC F9 B6 4F 39 99 48 2A EE 25 FF BB 8B : D6 BC E8 06 : } for the second one. The key isn't included in the header, presumably the @webtv.net address can be tied to the hardware which contains some hardcoded DSA key. I wonder if WebTV users know they're signing each message they send? Peter.

1 0

Hello from Miami,
by ginadi＠topchat.com 17 Dec '03

17 Dec '03

Want to have your own successful internet business? Be your own boss? This is an exciting new money-making opportunity that can bring you the income you've been looking for! Contact us and learn about one of the MOST SUCCESSFUL BUSINESSES to run on the internet today: INTERNATIONAL DATING and MATCHMAKING SERVICE. Help Singles around the World!!! Meet people * Have fun * Make money * Travel Work part time or full time. We provide all the necessary software and support. Send for info to: ginadi(a)topchat.com Sincerely, Gina Di'Lombartti Matchmaker International Milano - Branch 14 Via Galvani 20124 Milano ITALIA tel: 39- (02) 69-837, when busy please e-mail me.

1 0