December 2003 - cypherpunks-legacy

FBI on BBS operator liability (fwd)
by L. Detweiler 17 Dec '03

17 Dec '03

also from Computer underground Digest Sun Oct 3 1993 Volume 5 : Issue 77 ISSN 1004-042X ===cut=here=== Date: Thu, 30 Sep 1993 11:38:00 -0400 (EDT) From: "Daniel P. Lieber - (617) 642-7697." <LIEBER_DANI(a)BENTLEY.EDU> Subject: File 4--Summary of BBLISA meeting (CuD 5.75) Account of BBLISA Meeting (posted in CuD #5.75) On Wed., Sept. 29, the BBLISA (Back Bay [Boston] Large Installation Systems Administration Group) group had their monthly meeting where they hosted both an FBI agent and a federal prosecutor from the U.S. Attorney General's office. Both speakers were knowledgeable about the subject and tried to answer all of the questions that they could. (I am omitting names as I am not sure of the correct spelling or titles -- both were substitutes for the original speakers.) After a brief welcoming by the leader of the group, the prosecutor spoke extensively on the different types of intruders into systems. Her particular area of expertise in the field of "computer crime" is with kiddie porn. However, she was knowledgeable on the major topic at hand -- intrusions. The most common and least threatening type of break-in artists are the solo hackers and crackers (usually young males) who break into systems for the thrill and to brag about their accomplishment. Usually, they cause little or no damage and no crime is prosecutable (just utilizing resources is not prosecutable). By far, the most serious threat is internal. Disgruntled workers and recently dismissed employees cause the most damage and are usually motivated by revenge and want to inflict injury. The third type of intrusion, for-profit, is growing rapidly. This includes bank and ATM fraud, among other types of information theft. The FBI agent relayed stories about cases he has worked on and the scope of the FBI office in Boston. To be investigatable by the FBI, a monetary or equivalent loss must be $100,000 or the loss must be shared amongst many different parties. He also informed us that there are no agents that just cruise around BBSs looking for crime. The FBI is too busy to do that. From the information discussed at the meeting, there were some conclusions and suggestions that were brought out: * System banners informing all users that unauthorized access is prohibited and that privacy is limited are helpful. * E-mail is usually considered private unless specifically stated otherwise. * System administrators are not obligated to report illegal activities that they detect on their systems. * Law enforcement does not like to confiscate systems and will usually get the information out of the machine without taking it. * To be prosecuted for a crime utilizing a computer, the defendant must have prior knowledge of the criminal materials or intent. For more information on BBLISA, send a message to majordomo(a)cs.umb.edu with the subject line: subscribe bblisa. Next month's meeting will discuss large-site Internet services. --Daniel Lieber, Systems Manager- _The Vanguard_ at Bentley College

1 0

Elm 2.4 patch
by nate＠VIS.ColoState.EDU 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have written an Elm 2.4 patch for remailing, anon service, and signing/encrypting of mail. ftp://129.82.156.104/pub/elmhack/* - -nate - -- +-------------------------------------------------------------------- | Nate Sammons email: nate(a)VIS.ColoState.Edu | Colorado State University Computer Visualization Laboratory | Finger nate(a)monet.VIS.ColoState.Edu for my PGP key | #include <std.disclaimer> | Always remember "Brazil"

1 0

Another application for stego (was POISON PILL)
by remail＠tamsun.tamu.edu 17 Dec '03

17 Dec '03

Matthew Gream: > ....if you have something > you _don't_ want found, then simply encrypting it leaving it sitting on > your system is probably not going to work. You may decide not to answer > any questions about it, you may refuse and so on, but they are going to > want the magic little key and keep pressing (maybe while you are under > oath). To prevent any of this occuring, the best approach (in my mind) is > to encrypt it into a form that will never be suspect as anything more than > harmless, trivial, information. Interesting: an application of steganography that is quite useful even where crypto is legal.

1 0

Re: NPR?
by Christian Void 17 Dec '03

17 Dec '03

On Sun, 3 Oct 1993, L. Detweiler wrote: > >Has anyone considered forwarding and/or send NPR an information packet to > >help bring the encryption/clipper issues to the general public, or is that > >looked upon as a bad idea? > > I think I may have called them once. didn't get a call back. ^^^^^^ They do have a mail address via AOL, and IMHO are not biased towards anything except the left wing. Getting them to discuss the Clipper/Crypto issue on the science program could help get it out in the open in a positive manner, rather than waiting for someone to have his equipment/life seized, or some other such thing making it's way into the mainstream, and thus causing the general public to be biased towards the government (which is what we don't want). Christian Void /T71 | "I don't like it, and I'm sorry I | VMResearch, Inc. cvoid(a)netcom.COM | ever had anything to do with it." | P.O. Box 170213 Tel. 1+415-807-5491 | -Erwin Schrodinger (1887-1961) | SF, CA 94117 * PGP v2.3a Public Key Available Via Finger *

2 1

Re: FBI on BBS operator liability (fwd)
by smb＠research.att.com 17 Dec '03

17 Dec '03

(just utilizing resources is not prosecutable). It's worth mentioning that that's true of Federal law, but isn't necessarily true of state law. For example, California Penal Code section 502 provides for the conviction of anyone who ``knowingly and without permission accesses or causes to be accessed any computer, computer system, or computer network''. Some other states have similar provisions. --Steve Bellovin

1 0

...
by Martin.Greifer＠f28.n125.z1.FIDONET.ORG 17 Dec '03

17 Dec '03

@>1:125/1@fidonet To: hal(a)alumni.caltech.edu :: Request-Remailing-To: remail(a)extropia.wimsey.com -----BEGIN PGP MESSAGE----- Version: 2.3a hIwC23BwJ6a1oy8BA/4rfsLaZv2W/uvUn9f2vMaj9p8kEU59DtyoQyZuYqNVl3T+ H2/kzpJDL4Pn5cB5QratY0gj13QFDm5hQ8m7AKXSaojHRYhbLdsJ+GoI/C2n9Rdw jrWnrGB/acsDISNLs6daWK+9pmuDAvrNi8NGku4tDZW0u8v/Tq45y2AqzrAMf6YA AA6jC1TJlJXxhdoZiwrjb9Inzdj3LFHXbBb52/DMXHloLviWS5rvzTAlEgvZ70o0 UdWTRaVmhij24oGYd7N3rfOuYkcQuc13QPiSJ16Q/ZfaDh4d737nEjqbCQ2pZiAI A4f+SlxZ3KvIrp9wBLEscUV8X/8pr/eAOWxRmwSmQ2hPkEdjLTbm1f/ZekrHBvu3 Q3vJC2bvI0ttC6JpqlkBfo9kK2CrcVdVzvY2dvRq4alkuxc1/b2B2+EqndxNEG+1 zOI8JEH2CREtXQflj2cNQc52x6kK9GtDdqflbODkrcYqr2RFoMl5HgNDcoVLG78k 33qMK6th1iuk7bYd18WkCI80Qa+G7gDTWgP6aYcDRlc3rDkpP9AglZeAW2HiqWLx d8rZm6FIXzFXwWN5KxYsK4qxuR9RWgG3Je00asKLh33Si99BOFncSSw8luby9QXk gjY6h/ipLTBa5gfUd+PCCHqCgK0TgANdoNwhSexO8L3VxxhI6EhfQ5X6enN10nCK B6toik3EGWy1F80gFO9kFoEL96mwYpbffYNf/nCMaCKBoZy59DMbvtQUGgoyPt/H KF0hwRbd/bZus2wvslQxR97LWlw+tbCtKod31Y9SePTSXmt6J4rVomVWwqHdm+R6 JhMKv3JflMX6eWmL0moybWNNx0GdQ0Fm6LB+fMuOo7KqRPdXbaeaKnQlzOPSYZ6m x91T1m0kOYqvHCy3Is6EC7EwIQIvibgvw92LfCjKbMJNnWVcganhfsMVSyOfEAOs HAZTgKKpGblILqYPl7ERHkdBD6LhbgJWBdkDxWSWSS3VWTAbAmvJelxv4LyoW2qm KH7tWsDNvOA0yN1gVY4zDRE8KBxscvA2chFeMnlVLWf8l5iatuM8M47sefLb8B1p 98ZcVBH+4V0pL8MV5zLdY9o5uxy5Z6EM5c88ZXEJtPU7v8uipmMxpRJsKLRcU185 eB40ZAUMmdR6rp+TW1kCOdpcLVepvsOeaBp1QN5WM2NCHbfFzeKGLTXB/UkLFY6T VNexnlQECnjp6Y7/QVPaPvthDHhqAvEtRpWJsS1f5z4bYtu9++MRKw5/v6xHhOCr 30PUAsLmsOw1Gq2D+Pe8HcgWNhX6VjoTgQ0/hzFdqOMvJHbXvw4wMlJblNvolxMw h0nN1EvZEpZea/DCBWLRcZiWnKDrAvD/xKpaZ20vQzz/rWtarXpUwwqyDCC3riD0 vvUo0j/C1TaHEhIntIafAVSWvu6RCfFAOtQXJOjj4WJFZN+1kdd+F8lggtBxm0FG 4fXPhUy6bT/8UC+n0+PyqeCfu7PJP3uVOp7qEqD8WgOsn+TN8FPh0YsK6WEtM28m 1qX/LOauJojajNm1iEXewQi18aKcOi6Vt3LkPJX1EGG2bbxu0N1j51+WvihYxuji LO5mnwrbEaurvtaU1secNNEMrRcjPjS5ZkE34Y72kFUplsy2dTkckX5SU3AUwCPp T0KhO1/1iiy5qtToqtnB/XUf1PbAWyol9gYcVfWc35zQabmjaDs/sx190rDe37XY K2Z7Ye+4piiU28WXq2bs+GmyCQw8ly38aBGxEgxANZdYVkqiP9thrXQvMQbZkZjq UBKny4x/W9AHbGgiFpyY5Q3yXfsfkF0xKWeLNofxP8BfyS3VgT1vS66i5XaDOkLI eb1MWp79vcr7cqxhBsj11QYD3IAkLR/s7HLHIP2wU6rR2kfaTj6ht2BfEqQWuC7C aZGVpiHSE3jpq0rjp4CQe4YS7azUoMa+45OHERT3Q0XNX7YfYO7QbL7gRoiCZGxg H50P1sSmmU4wbgRvleDFRyjJDYRA8E8FXKXRpBkMFH5hjMB0lUn/tjrEHlSDhy8s IfiqvsyMGmlH7a3IzSotWXiyzhikHoiJMzJivwgF7GFFUpa3l2W7HMz0dWDK/elj MDaHXLEceTWEQm0J+Ekqj+MH9HiU/2w3kF39mjT49bnTE3s+AuV0xlN1dTUjRScV am07nm08ZeGmX9kp9xgQFLFAI/hPxKZje/H67qEL5n7nomrqLYTkMSSFEfO80dGZ 1RHDNxyK+tIh+gSYUzGovRSCN4nG/Dn6j3s+mb/3qfN9E53avu92ItAfTpa/G06e ov3m8z76Hu8ozRp0DfRund7pgiss/MWyBB/yReJdGpgW/Mi8de5ZiWoFnm5whhwD snY1ubncllajYzGi2ivgrRhHe8lrfmSCGtVuXI7rKPta7Wsc3bQdWJ0OlGmPk1xs lXVcoemFPiCkJOJJqxqat11vKm9X8wflR3HISJyUBtkNwLdidW7eu461wSBniSik QwALin3sWsVWHbMTqAsthWFgl3WVqhBYgGOLlVxXh25LqARGtLsGQo0L6VT7iN0X zf6k4oOGZAlqqM9vNGsOqzW9RP9UUPEH4je5HpZVNJlshPRFI5srU3cbDSYV7YyS gXGQMDnyVwIu9iSqrz5fgepX6cofbqStB6VQD0mr+OT+hzasy+wEXe/lwSfre/Ca x7MPmDc0xe4Yfh+nbNqtW+s5+sjHlpuMLbNvQsJcXFoQgMXnhXRvFEFJSTPBmWGw u7SXKo+kpmCItyPVAJX4gF3UVsEgDWfedEwXFwRheFHByiMKHVeLYLSM7j/OOajQ MnGj6IKSZE2SZEZ4gLrDWs6UVg2zBPL4qkAZjWCrU60MbQEnNmOmhcsxQCl62V3w SM8AtiFKW8d6udtXSedebEWUqphiZ1Yq3dk57LoFOM/JM2l9S/OP6ngodKXimi5g jV++446pZtpjF/lq811QtIFWXLO4SmEkQs1P+YByXimUAg04GckpTrdA7PVTgkrY AW/eD1nLtVNqjZwTLErko1RPRFZtByBCsBER51DGcurQEs7BPbkQyJuaFRCPSlWE Rz4BpMHcHIXU6GRWMWyTXZPKcri5phEWKSg8vS1F+0wo2r5p1K8jiFPcxAkjihur 9cUlqFS76vxuqIJ1gcQCeKwvBDp9uM5ojPZ9+W1CKbjCWf/wnERU4StybIlCUH7x ZhqeOHrYl4fKzZzcXoDem8YmFy1Di1ovZwQ7c60fkzgRUDgL9V+jXkrNScNOct+M AbPOhZzRDFc2MIgl/vgjeqWnzA6tFrbdIXeF5IfooC+WzuUpoaf2kFRwMLaHcbCj TbCa+iiZS+8B/cCY6bbS2xfpf29JC9zaAUyuxIuPuT1g7SdVcAt6hp9ZrJB0LiHa 7O3unyp4+uqNPbl8OHP6snCqBtCHuFwNB/aGW54Jr7eWt9X7EUg42RwpPxBFIs7d kRkq5+YIb83vGHV/uOi5ckKIz/TCnCRLRqinYIPRpSNxUQNiLDw/TZdBhQI1KF15 tcybTc3cAZgb1Txqx99qO8c58vKMwmV4B7W0sXDWkxuExmxE5OvZKPnG5JXpi4Qa hTuM5Tf/WKlaVRTFaf4cR8wHK+FP5mINFtYdpq0PVgNqBOZcvpuAgish/vcYVQHS mmEnGkt3b+zLEof7MnSmu/LQj7rqmFHTNI5Uz4zIxG3PTzXuwRa2f5MuaBNFS9QB lcKnparl1IQcX9E1OHSISzBqz9ztNeRjiUTwWFfw5LxYprvRqVDIXP6NqquHPBMS D/T2UQNgCcV/LQIqdVPw0sNzwd5CMSXe20H26dsWsU7nbKA3BUljsZ3dnGmGsFwF popv+l1MS+smFv7B6832eMzpI5YjD4lD5ygyrf0YARyK4LJs3L5KCxHLJYvPXoWB 3fLfoGNArp8vnkTqi0b85VW0BIkoveRUTNWmu3wthZ4iTt7/XcwOW4joodFgSLGb gT4uicJJnUjKRZEV+31c+vYeaxNJCgMiApHLT7He2o/RSCrIp3+wGXNXyMhD5AF5 5qYjliA4WKc7/PRVEPvJZmAXuvDyno1EG260ffU5Ow+1DiGnHb7ZR9W3oKXhyQcT LGO+2M2A9kYV5RbqJSN0z8Kh4iVcyuHdwOnshjouyt4GhbSW0ViGJ1zzySxSDg4g 5bH5ZuK3W1f+nfk3d047xVAJQL2RBw24PKKSXGczECJrfpYzWQikPvXn8/wXvVd+ BuvkwlOe+RnjkxZyUcnbflUOTq9UAiYd6gO1g0m2IwgCIpxqcFyz0yqxRTBt/pZ+ vj9mZ+EqKPEvAhMbLMf7/o4qAyKOhxy5QDMhw4W7PdyMYEZ4AOlymVKAmJJWDFGI RBRLiEaVpuguo2gpFd+KJ/H+qiHDooJIDni3/qST0pDXETjbdPq5vUrbBsALrlDl b7+72cUyeBWphRmAR/tXIZO1BeEDoaOXIGD8lGITdSIgY6i7LC8ytE3a1NSh9R9N E7hUF8x5whQgJxSaMg1hQ45Y7AAG9cf2FCvRFDtCsTS1gWOOofPKhtoM3qvUmJ4S a9GXBlce/SahhK+UHN4Qapx0RRZZb2vA60qG20FcW81kRrrITFCtMRm5iYtbP/E7 7q6pAhPG1toisgIGjf4hlS6TJgsVKN7jYzAgdK2GyUOZGxg94KaTtvF4NYDt3AQ+ CpS1XqJx5aca3deRUaUd/uhRXp20/zmLYd/lLZFfH7UKDoaJZdxKf1jVj8w3Ii/0 vHQkBr1/kJoI4D77M8+dhPP+999z2KPxpega73hLSQYQ2EyjFI3y1CtSt7aLPgOM xCM37wF99FLRrZXHOPd/2s9J/6ypb4PZulOJzCw5Ku/3Nh/4Obe3zvy/62ODowe9 95688pEYALHhMc66WUSn0LyzydXiBi6yzQ21fmUmshfgNyuft0PUxwiGvLWeAfTx Tdn2Il077RfMOTtdKW5CpnlYDYMQfwWBQV48k3htQh1xMgc9xEYEz7epnMWI95ly 7ZEt/TtShUAntAvwubAdUi0S3Kut8WnLV3eivQg4xmmpg0JUvBarOAontQT1PDeF pJYuzIczkK8hxVL8IaQzyx3XF6FFWIJs12eH4xdPqRp7hAO9JhxDnhPl+P4m2iQ1 LuvaSWEwO/10kXVyUToWrEphRE2zx8V/Q0LLRHH/w9zYSf2kK1OhuNBND/nhD4y+ 03r/E6OS =chIA -----END PGP MESSAGE----- ___ Blue Wave/QWK v2.12 -- Martin Greifer - via FidoNet node 1:125/1 UUCP: ...!uunet!kumr!shelter!28!Martin.Greifer INTERNET: Martin.Greifer(a)f28.n125.z1.FIDONET.ORG

1 0

Crypto Toolkit Suggestions
by Mike Ingle 17 Dec '03

17 Dec '03

I'm writing a toolkit to allow crypto programs to be written using pipes and shell/perl scripts. There will be several small programs, most of which will act as filters, to give direct access to rsa, idea, md5, keyrings, etc. This should allow quick and easy coding of digicash, zero-knowledge servers, and other interesting things. So far I've got the MD5 and IDEA functions. MD5 is just a filter - it takes whatever you feed it and outputs the MD5 hash in hex. IDEA takes e or d for encrypt or decrypt, a key, and (if encrypting) an initialization block. Then it acts as a filter. The output is ten bytes longer than the input - init block and two key check bytes - just like the idea_file function in PGP's crypto.c file. MD5 links with md5.c and md5.h, and IDEA links with idea.c and idea.h from pgp23a. For example, you could do: key=`md5` passphrase^D init=(16 random hex digits - another MD5 is okay, it will ignore excess) export key init idea e key init < infile > outfile idea d key < outfile > decrypted Questions: what is the best way to pass a key? The command line is definitely out, because ps shows it. Right now, IDEA takes the name of an exported environment variable containing the hex key. Can you securely wipe an environment variable? Is there a better way? (A temporary file could be dangerous; a key could be left lying around.) What else should I write? Ideas: direct access to rsa with hex numbers, direct access to modmult, etc, for dh and stuff, a filter for armor/dearmor and zip/unzip. A program to pull key material out of a keyring in hex, so you could use PGP keys with the rsa routines. What would really be nice is a filter that could generate pgp-compatible packets, so you could make up any "pgp object" using a pipe. You could also use the hex output directly. --- MikeIngle(a)delphi.com The enemy is not just the federal government. The enemy is centralized power, wherever it may exist.

2 1

News: where to get them
by geoffw＠nexsys.net 17 Dec '03

17 Dec '03

Topic 553News: where to get themRUSSIA(a)ARIZVM1.ccit.arizona.edubitl.russia 1:30 pm Oct 3, 1993 Reply-To: Russia & her neighbors <RUSSIA(a)ARIZVM1.ccit.arizona.edu> From: Serge Viznyuk <VIZNYUK(a)MPS.OHIO-STATE.EDU> Subject: News: where to get them ---------------------- Information from the mail header ----------------------- Sender: Russia & her neighbors <RUSSIA(a)ARIZVM1.BITNET> Poster: Serge Viznyuk <VIZNYUK(a)MPS.OHIO-STATE.EDU> Subject: News: where to get them ------------------------------------------------------------------------------- The latest news from Interfax and Postfactum in Russian (KOI-8) are available also on newcom.kiae.su NNTP server on relcom.politics newsgroup newcom.kiae.su network address is 144.206.136.5

1 0

Re: POISON PILL :-)
by cme＠ellisun.sw.stratus.com 17 Dec '03

17 Dec '03

>Date: 30 Sep 93 16:43:41 EDT >From: Sandy <72114.1712(a)CompuServe.COM> >Subject: POISON PILL :-) > !!WARNING!! > This Machine is Booby-Trapped > Use at Your Own Risk What about the stickers on car windows announcing that the radio, if stolen, will be unusable? ...seems to me the precedent has been set. - Carl

1 0

subscribe
by Robert J Woodhead 17 Dec '03

17 Dec '03

Here's hoping I haven't made an ass out of myself.

1 0