December 2003 - cypherpunks-legacy

Re: Scientology and police visit XS4ALL Amsterdam
by cg＠bofh.lake.de 17 Dec '03

17 Dec '03

> > This is the second or third time I've seen descriptions of such > raids where cult (no, I'm not trying to be diplomatic) > representatives were present and participating. Is this legal in > Amsterdam? How about in the U.S.? Britain? > Probably. Amsterdam isn't exactly the wild west, and they didn't take the computer equipment with them, they just inventoried everything so to have something to sell when their claims prove valid. Which I doubt (shit, I will be moving to this country in a couple of weeks...) > If a police officer has a warrant then I really don't have much > choice about letting him in. Am I also under an obligation to > allow the people who filed for the warrant into my home or > business? > I don't know whether this is valid. I assume so. I also think it is about time we develop some ideas about anonymous web publishing. Probably some chained cgi scripts could do, but how to get around traffic analysis? -- Cees de Groot, OpenLink Software <cg(a)bofh.lake.de> 262ui/2048: ID=4F018825 FP=5653C0DDECE4359D FFDDB8F7A7970789 [Key on servers] http://www.lake.de/sonst/homepages/s2449/index.html

5 7

Death of Privacy / Was: Di Privacy, Die!
by TruthMonger 17 Dec '03

17 Dec '03

>From the Not-ly News !Server: [Mainstream, Terra] -- "Huh?" by Defcom McCull'em Mainstream Media sources today denied rumors of news stories from real people, in the real world, finding their way into the bowels of the mainstream press before being burped out to make way for more of the same-old-same-old. Asked why the initial reports of eyewitnesses using words such as "explosion" were quickly buried in favor of the word "crash," sources replied, only one guy, somewhere in Canada, was awake at that hour, and he will soon be dead, so we can't really confirm the existence of those eyewitnesses, since no one wants to talk to them. Asked why initial accounts had "five" reporters being detained and why a rumor concerning the accidental death of "two" reporters, suddenly turned into "seven" reporters being detained, the sources would only comment, "These were only preliminary estimates, before we had a chance to talk to our media prisoners and explain the severity of what they would be facing if their stories were not 'politically correct'." Asked why statements by Fayed family members concerning their views that Dodi and Diana were 'offed' by the monarchy in a bid to thwart a gain in the political influence of sandnigger mobsters, mainstream media sources said, "We saw no need to cover old ground which had been dealt with on the Cypherpunks list, both before and after the event." Asked about the missing right wheel on the death vehicle, sources inferred that it was found on the stretcher that carried Diana to the hospital, next to the magic bullet that killed Kennedy. NotlyNewsMonger "All the news that gets you killed."

1 0

Re: NYT on Netscape Crack
by Rich Salz 17 Dec '03

17 Dec '03

>I take a long term view of security. Basically I don't trust security software >until it has been released in a stable condition for a few years. Really? So I assume you won't be using an ATM card to buy gasoline until the next millenium? >Visa and Mastercard will be comming out with a spec which will have very tight >requirements for implementations. I thought it was Visa and MC and Microsoft are coming out with an implementation, and then will get around to releasing the specs. One of V or MC also said that the only approved way to do Internet commerce with their card was to use this new system. /r$

1 0

Re: SFChron
by Rich Salz 17 Dec '03

17 Dec '03

>"Mike Homer, vice president of marketing for Netscpae, said that >recent breaches do not mean the products are flawed" Of course, it would have been better if the VP of Marketing said that they had a bug, but that the fundamental architecture is sound. /r$

1 0

Re: PGP Keyservers and 5.0 DSS/D-H Keys...
by Feanor 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On Sep 3, 17:07, Unicorn wrote: } Subject: PGP Keyservers and 5.0 DSS/D-H Keys... > Hi Guys (F/M), > > Just a quick question. > > Are the current (mostly PGP 2.6.x based) keyservers able to incorporate, > store and provide the new PGP 5.0 based DSS/Diffie-Hellman keys? And if Well, given that PGP 5 has a functionality just for sending and recieving keys with said keyservers... :-) -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQBVAwUBNA3U0RkU7YRPCnEJAQGgRwH/fX99svPMi51o7NIJGwrC1k59QioStPsk A9jjBb3MX7JMaYEWg9ubwhZMg3RPpa6ASSnvnRMxkVgG3sELIGR1Sg== =xmXy -----END PGP SIGNATURE-----

1 0

Re: "Hackers"-- brief review and anecdote...
by Rich Salz 17 Dec '03

17 Dec '03

>> If it wasn't for ITAR the Net would already have secure encryption and >> authentication, and most such hacker attacks would be impossible (or at >> least impractical). >The non-responsive answer is stricken from the record. :-) >You mean "secure" as Netscape was secure from sameer et al.? I don't think it's non-response, I just think you don't understand yhour expert witness. If not for the ITAR then I could distribute my secure applications as a binary library with the security part as source. When you got Netscape you'd read the security code or ask local experts to do so. You'd verify that the code was correct (or at least not stupid). You'd then compile the security code and link it against the main object module and away you'd go. If you didn't have a C compiler, you'd get a binary from someone you trusted. Of course, all this would be going on in parallel at thousands of sites around the world. Everyone looking at the code, finding holes, reporting them, fixing security bugs, and so on. But ITAR won't let you do that. Or netscape would just make calls to the common open multiple-crypto API that existed in a shared library in your machine. But apparently the ITAR won't even let you do this. /r$

2 1

http://www.osf.org/~rsalz/unabomber
by Rich Salz 17 Dec '03

17 Dec '03

Snarfed from MIT. I'm sure it will soon be all over on many people's homepages. I don't know if I want this terrorist to appreciate the irony or be disgusted. /r$

1 0

Re: Big Brother is watching
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Chip Mefford propelled us into the future by writing: >Fairfax County, In the Peoples Republic of Virginia It's Fairfax City, I think, which is an independent city wholly contained in Fairfax County. At least they were the only ones with this shit deployed. >Citizens in the PRV who have been travelling in Fairfax County will soon >be recieving summons to come pay their dues to the monster in the form of >traffic citations for running red lights issued by Big Brother. This was discussed a while ago. Buy a license plate cover ("Just protecting my plates against stones and vandalism, Officer!") that's virtually transparent from head-on, but opaque beyond a certain view angle. I think these things exist -- look in Car & Driver or some such. And if some peckerhead parks his SUV in your driveway to nail speeders, buy a "radar detector tester" (maybe C&D, or an electronic-hobbyist's magazine) and crank it up every now and again while he's trying to catch violators. Do it from the safety of your house so you don't wind up with a nightstick up your ass. <snip> >With this wonderful sucess, We can all look forward to this items being >placed in our domiciles in order to further protect us from crime. And I'll give my kids a can of spray paint and a ladder. Maybe I'll offer bonus prizes if they can figure out an inventive, undetectable way to disable the fucker. Shit, they're trying to nail Marv Albert for consensual sodomy, which is also a "crime" in the PRV, if they can't get him on the assault charges. So think twice before you and your SO get into acts of Hooverism down Virginia way. N.

4 3

Re: AOL monitoring
by Rich Salz 17 Dec '03

17 Dec '03

>How hard is it to record downloaded newsgroups/msgs from the news INN, probably the most popular NNTP news system, by default logs every time the client does a "group" command, typically sent by the newsreader when you enter a newsgroup. If you only fetch articles by messageid then you'll probably avoid anything other than connection logging. /r$

1 0

Not Crypto: Referencing Electronic Texts
by Deranged Mutant 17 Dec '03

17 Dec '03

This has nothing to do with crypto, but it's a question I'm sure a few people on the list have had to deal with this as well... I'm doing a research project for a class on the problems of making scholarly references to electronic documents, mainly on the how-tos (for author writing document as well as one who cites an electronic document in footnotes and bibliographies), as well as some technical problems (sites change or go down, documents are modified by author or hacker who doesn't indicate a modification, etc..). Any information, URLs, references, personal anecdotes, methods, tips, etc. would be greatly appreciated. (Please reply to me and not the list unless you find some bizarre way of relating this to crypto...) Thanks, Rob

1 0