December 2003 - cypherpunks-legacy

RE: TEMPEST laptops
by Trei, Peter 17 Dec '03

17 Dec '03

> -----Original Message----- > From: Lucky Green [SMTP:shamrock@cypherpunks.to] > Sent: Sunday, November 01, 1998 8:33 PM > To: Bill Stewart > Cc: cypherpunks(a)cyberpass.net > Subject: Re: TEMPEST laptops > > On Sun, 1 Nov 1998, Bill Stewart wrote: > [...] > > Just using a regular laptop isn't enough; I've seen laptops > > transmit recognizable images to a television (though I was probably > > using AC power rather than batteries, and may or may not have had > > the display mode set to LCD-and-monitor.) > > Thanks for touching on the popuar myth that laptops radiate less than > CRT's. Many laptops in fact radiate more compromising emissions than > CRT's. Ross Anderson does his van Eck demos to undergrads using a laptop, > because it works so much better than CRT's. > > -- Lucky Green <shamrock(a)cypherpunks.to> PGP v5 encrypted email preferred. Nearly all laptops have a built-in video port, for connection to an external monitor. This is often poorly shielded (usually just a plastic plug). I'd be curious to know how much the radiation from this port could be attenuated by (1) a metal plug contacting the laptop's ground plane, and (2) removing all the video-port specific circuitry (major surgery for a laptop :-( ). Peter Trei

1 0

orange book
by bill payne 17 Dec '03

17 Dec '03

Monday 11/2/98 7:55 AM PaulMerrill(a)ACM.Org I looked at the orange book at NOT the Orange Book - http://www.jya.com/ntob.htm NSA employee Tom White http://jya.com/nsasuit.txt got me a copy of I was told was THE NSA orange book for Sandias implementation of the NSA Benincasa nss/uso authentication algorithm.. The report I saw was concerned about implementation of cryptographic units. Things like shielding, power filtering, red-black boundaries, shift register compromising signals, some software guidelines,.... The soft-cover report was mostly hardware-oriented. What I see at jya.com is not the orange book Sandia was given. bill payne Title: Black and White Test of Cryptographic Algorithms Jump to Forum Click Image to Jump to Next Article Go to Text Only Print Version Black and White Test of Cryptographic Algorithms by William H. Payne This article requires special formatting. Please Click Here to Read Send This Article to a Friend: Your Name: Email Address of your Friend: Your Email address: Back to Home Page Quick Menu Visit the Button Shop Interactive Forum Black and White Test of Cryptographic Algorithms E-mail the Editor

2 1

100S OF FREE PICS'N'LINKS EVERY DAY!
by STUFFED TUE NOV 3 17 Dec '03

17 Dec '03

+ 30 SUPERB, HI-RES, HOT PHOTOS + 5 SUPER SEXY STORIES + BOOBLAND + BLONDES WITH BIG TITS + XXX WONDERLAND + SATURN SEX SITE + X-QUALITY BEAUTIFUL NUDE MODELS + MASTURB8 + CUM CATCHERS + XXX FREE PUSSY + PLAY SLUTS + PUSSY PUSSY + BONUS PIC 1 -> http://www.stuffed.net/home/19550.htm + BONUS PIC 2 -> http://www.stuffed.net/home/1183.htm + BONUS PIC 3 -> http://www.stuffed.net/home/28881.htm + BONUS PIC 4 -> http://www.stuffed.net/home/28151.htm + BONUS PIC 5 -> http://www.stuffed.net/home/13754.htm + MUCH, MUCH MORE! ----> http://stuffed.net/home/ <---- If you haven't visited STUFFED in the last few days, you're in for a real treat. It's faster than ever before and now, as a subscriber, you get 35 FREE new pics every day, plus over 100 more at carefully selected FREE sites we link to. This email is never sent unsolicited. Stuffed is the supplement for the Eureka newsletter you subscribed to. Full instructions on unsubscribing are in every issue of Eureka! ----> http://stuffed.net/home/ <----

1 0

Re: TEMPEST laptops
by Michael Motyka 17 Dec '03

17 Dec '03

> Understand that my comments are just some "common sense with a little > bit of physics" estimates, not direct knowledge of how best to shield > laptops. > I'd do this in preference to worrying about what some 1978 government > docs had to say about the subject. TEMPEST the specs are probably a > mixture of "RF shielding" tips and standards, and a mix of Van Eck > radiation tuner designs. > A long time ago I ran thermal measurement boards on a piece of equipment in liquid He under vacuum. Pretty icy. I used only standard components. My question is this - anyone know of any estimates of how weak a signal could be detected and actually rendered into useful information? The relevance of the low-T stuff is that it seems like a nice way to make low-noise receiving equipment. With an estimate of the capabilities of the receiver ( @exotic-lHe and commonplace-lN2 temps ) you could then address the emissions of the laptop with reasonable, quantitative target levels. Sort of reverse engineer the TEMPEST specs as it were. It would be nice to know what needed to be done to reduce emissions to the point that you could be fairly sure that an eavesdropper had to park on your doorstep to make his equipment work. > VERY FEW PEOPLE CARE ABOUT SECURITY. > Since they don't have anything to hide, why should they worry? Argh. ergo - if they're hiding something they are guilty of something. Bust the doors down boys. Mike

5 5

Techno Warfare In The 21st Century (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: >From consim-l-return-17237-ravage=ssz.com(a)net.uni-c.dk Mon Nov 2 12:19:37 1998 Mailing-List: contact consim-l-help(a)net.uni-c.dk; run by ezmlm Reply-To: consim-l(a)net.uni-c.dk Delivered-To: mailing list consim-l(a)net.uni-c.dk From: HBtLF(a)aol.com Message-ID: <b4455e8.363df7e5(a)aol.com> Date: Mon, 2 Nov 1998 13:20:21 EST To: consim-l(a)net.uni-c.dk Mime-Version: 1.0 Subject: Techno Warfare In The 21st Century Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7bit X-Mailer: AOL 4.0 for Windows 95 sub 214 Dear consimers, When I'm not playing or designing wargames, I produce documentary programs for television. I'm considering whether to produce a documentary on the topic of technology and weaponry. Specifically, I want to look at how computer networks can be used in warfare. I grew up on SAC bases, so I've seen that side of it (computers controlling missile systems, for example). I'm more interested in how cyberwarfare might be conducted over the Internet to bring down an opponent's infrastructure (or play havoc with economic activity such as stock markets). James Adams' new book "Computers Are The Weapons and The Front Line Is Everywhere" is the type of material I am trying to find. I would urge any consimmers with suggestions to contact me at hbtlf(a)aol.com Thanks in advance. David Bolt

1 0

Sex, Terrorism and the NET
by tcmay＠got.net 17 Dec '03

17 Dec '03

I know there are some here who think Cypherpunks should cooperate with law enforcment and do "reach outs" to such folks...this was a theme at some past CFP Conferences, for example. I think most cops will use anyone they can. Meanwhile, this is what they're doing. Entrapment, infiltration, participation in chat rooms and news groups, and all the usual Red Squad stuff. --Tim > From: spranzint(a)aol.com (Spranz int) > Newsgroups: alt.security.terrorism > Subject: Sex, Terrorism and the NET > Lines: 52 > NNTP-Posting-Host: ladder03.news.aol.com > X-Admin: news(a)aol.com > Date: 2 Nov 1998 13:29:57 GMT > Organization: AOL http://www.aol.com > Message-ID: <19981102082957.03067.00002747(a)ng117.aol.com> > Xref: Sn alt.security.terrorism:3219 > > > > Sex, Terrorism and the Internet: > Inservice Workshop for Law Enforcement > > > > > LEARN: Who is the best Internet provider for you. > Techniques for creating a screen persona > How to verify and use your on-line contacts to gather vital intelligence > The latest Hacking techniques > > EXAMINE: Live and On-line... > Pedophiles, Swap Groups and White Slavery > Neo Nazi and Militia Movements > Latin American Revolutionaries > Nationalist Groups with both local and global operations > Militant Islamic Movements > > PARTICIPATE IN: News groups and Chat Rooms > World wide Web Sites, Links and Search Engines > Hacking , Militia and Sex Trade Chatrooms around the globe > > DISCOVER : Web sites offering detailed information on: > procuring and using Nuclear, Chemical and Biological Agents > as well as satellite intelligence data . > How to get "expert" advice > How to procure black market items and conduct investigations on > the web > > Curriculum includes: > > Introduction to Cyberspace Hacking and Cracking > Sex and the Internet Student Explorations > Learning Investigative Tools Developing in house programs > Exploring NEWSGROUPS Monitoring and Identifying suspects > Terror Organizations Creating a web persona > > Fee: $ 50.00 includes class handouts and certificate > Program includes an optional two hour online practicum following the > presentation. > > FDLE Approved for Second Dollar Spending and Mandatory Retraining! > Location: Coral Springs Police Dept, Coral Springs FL > > Date: Friday 4 December 1999 / 0830 1230 (4 instruction hours) > To Register: Contact a Spranza Representative at: > POB 26047 Tamarac, FL 33320 > Voice: (954) 722 5811 email: Spranzint(a)aol.com fax: (954) 720 4472 > Visit our website: http://members.aol.com/spranzint/pubpage.htm for more info!

2 1

Seeking CDSA source code reference implementation
by DOOM Anonymous Untraceable User 17 Dec '03

17 Dec '03

I am searching for a source code reference implementation of the CDSA V2.0 standard as published by the Open Group. I know that a freely available implementation has been released by IBM (MIT Jonah PKIX Freeware, can be downloaded from http://web.mit.edu/pfl) but this is legally accessible only for US citizen. I have tried to spot the CDSA source but have not found anything up to now. Has this software found its way outside the US yet? I'd like to put my fingers on it without actually breaking fed laws... Thanx.

1 0

No Subject
by Mixmaster 17 Dec '03

17 Dec '03

Might as well include the laptop with the box, including an encrypted filesystem and some software and hardware booby trap features. Whitecap

1 0

RE: dbts: Privacy Fetishes, Perfect Competition, and the Foregone Alternative
by Matthew James Gering 17 Dec '03

17 Dec '03

> paradox of financial cryptography, and, more specifically, > digital bearer settlement, is not that it gives you privacy > and freedom (anarchy? :-)) Anarchy != privacy In fact to many people privacy is a very statist construct, as they clamor for more privacy regulations by government. The contradiction is government has a vested interest in preventing privacy from itself, and generally makes loud but ineffectual noise in creating privacy from others. There are many anarchic elements financial cryptography, such as: * That you can achieve greater privacy through cryptographic means instead of government means by limiting the information transfer via zero knowledge, blinding, cryptographic pseudonymity, etc. * That you can exchange money in ways that are secured cryptographically and settled instantly that do not rely on the government as observer/auditor/enforcer[/taxer]. * You can create private currencies that do not rely on government goodwill and stability to retain their value. * That you can enforce contracts via electronic mediation and reputation punishment in a way that does not rely on biometric ID and government mediation/enforcement. Therefore traditionally archical processes become anarchical (without state [involvement]). It is the *process*, not the result that is anarchic, and it is the process, not the result, that is cheaper. Cryptography (cpu-cycles) is cheaper than government, with a falling cost versus a rising one. Will all these free anarchical processes eventually result in an anarchic state? Maybe. But the economics of the processes is the prime mover, the politics of the result is a consequence. Matt

2 1

IP: Privacy: Dangers of security measures
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: believer(a)telepath.com Subject: IP: Privacy: Dangers of security measures Date: Sat, 31 Oct 1998 09:38:16 -0600 To: believer(a)telepath.com Source: Federal Computer Week http://www.fcw.com/pubs/fcw/1998/1026/web-epic-10-26-98.html OCTOBER 26, 1998 . . . 16:35 EST Privacy watchdog group warns about dangers of security measures BY HEATHER HARRELD (heather(a)fcw.com) The recommendations of a presidential commission for protecting the nation's critical computer systems -- many of which are being launched by various federal entities -- would expand government authority and lead to civil liberty violations, according to a report released today by a privacy think tank. The report, authored by the Electronic Privacy Information Center, asserts that the expanded role of the Defense Department and the FBI required to ward off perceived information warfare threats to the nation's critical infrastructures would infringe upon various civil liberties, such as freedom of speech, privacy protections and the Freedom of Information Act. Specifically, Wayne Madsen, senior fellow at EPIC and author of the report, noted that the National Security Agency and other intelligence agencies would have their roles expanded from collecting international intelligence data to focusing efforts on domestic computer security. Traditionally, the NSA has been prohibited from playing a role in the protection of unclassified computer security data. But because infrastructure protection involves working closely with the private-sector owners and operators of infrastructure, such as telecommunications companies and banks, this role would be expanded. The report from the President's Commission on Critical Infrastructure Protection supported the use of key-recovery encryption, a technology mechanism strongly supported by the NSA that would allow law enforcement officials to descramble encrypted data with a court order or other authorization. It also suggests that the federal government create new classifications for government information and provide federal agencies with expanded latitude for classifying information, according to Madsen. "The intelligence community...has had its sights set on restricting access to public information for years," Madsen said. "There's been a struggle between NSA and civilian agencies over who will be responsible for protecting unclassified information. NSA [in commission recommendations] will become the de facto information security czar." But Jeffrey Hunker, director of the Critical Infrastructure Assurance Office, which was created by President Clinton to carry out many of the recommendations in the commission's report, said his office places First Amendment and civil liberty concerns foremost in its work. "We are dealing with a new and evolving threat environment," Hunker said. "Discussions about civil liberties need to recognize the fact that there are new threats that pose real risks to Americans at home...and their way of life." Mail questions to webmaster(a)fcw.com Copyright 1998 FCW Government Technology Group ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- **************************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address or (un)subscribe ignition-point-digest email@address **************************************************** www.telepath.com/believer ****************************************************

1 0