December 2003 - cypherpunks-legacy

AGAIN???DISINFO IN THE NY TIMES??? RESPOND!!!
by info＠pgmedia.net 17 Dec '03

17 Dec '03

Again the NY Times is blatantly misleading the public! The following letter was sent to Jeri Clausing, a NY Times reporter bringing the disinformative article to her attention. Please read her article and then send her a "reminder" of her accountability to the public. Journalism requires thourough research and not just reliance on the press releases from NSI's IAHC's, of DoC's pr agencies. Wheather it's just pure laziness or wheather Ms. Clausing is following an agenda of some sort, it still adds up to dishonest and disinformative reporting. You can email to Jeri Clausing at jeri(a)nytimes.com. While you're at it, please cc it to her boss: cybertim(a)nytimes.com, rofixm(a)nytimes.com ----------full text of message follows--------- To: jeri(a)nytimes.com From: pgp(a)pgmedia.net (pgMedia) Subject: Disinfo In the NY Times---again? Cc: cybertim(a)nytimes.com, rofixm(a)nytimes.com Message-ID: <1340460904-6466563(a)MediaFilter.org> X-UIDL: 2ad5cdbc00a0fb68ba0a56b3fd2d9ae5 Dear Jeri Clausing, In your August 15 article in Cybertimes entitled "Public Jumps into the Domain Name Dispute" you failed to mention some key facts which are factors in the current Domain Name issue. First, the petition being widely endorsed in support of pgMedia, Inc.'s NAME.SPACE service, was not mentioned in your article, although it represents a significant percentage of the number of total replies received to date by the US Department of Commerce. The petition is located at http://petition.name.space.xs2.net Second, you failed to report the fact that pgMedia, Inc. is currently engaged in litigation against Network Solutions, Inc., a significant and influencing factor in this whole discussion. (http://name.space.xs2.net/law) These blatant omissions are patently misleading to the public and fail to give a fair overview of the entire situation. Wheather you are underinformed on this issue, or wheather you consciously choose to abridge the facts to suit your personal agenda or that of your employer, the New York Times, you are doing a disservice to the public by exercising such journalistic irresponsibility. I had higher expectations for those who write for the NY Times, and this opportunity to see how news is shaped and manufactured has been highly enlightening. Had I not been involved deeply and first-hand in this issue and had there not been so much reported about my comapny in the media, including the NY Times, concerning pgMedia/Name.Space's role in the changing domain name space, the Anti Trust Litigation against Network Solutions, and the US Department of Justice's involvement, I would have also been disinformed by your reporting. If you have any interest in informing yourself fully on the details absent in your reporting, please feel free to contact me at 212.677.4080. I will be happy to meet with you and demonstrate the name.space service and answer any qusetions you may have...and I'll forgive you if you really were unaware! Best regards, Paul Garrin president pgMedia, Inc./NAME.SPACE http://name.space http://name.space.xs2.net

1 0

Another Free Email Site with remailer possibilities
by Bill Stewart 17 Dec '03

17 Dec '03

Www.Iname.com is yet another free email site. Its business model is to offer free email forwarding from basic accounts (paid for by advertising attached to the bottom of the mail), with fancier-looking accounts and POP mailboxes for extra money. They have very explicit anti-spam policies, but I'm not sure if they really hunt down spammers, or if they just respond to complaints by shutting off accounts and keeping the $0 or $15. The policies would be no problem for a subscription-only exit remailer, presumably no problem for a entry-only or middleman remailer, and appear to ban non-subscription-based exit remailers. They may or may not have a problem with the type of remailer that sends a non-registered user a note saying "You've got anonymous mail; send this cookie if you want to receive it"; my guess is they probably drop free accounts after one complaint. The free accounts look like username(a)iname.com, or a few other lame domain names like cyberdude.com; one of them is "earthling.net", and I suspect the spammer who sent me mail from one of those accounts was trying to pretend to be from earthlink.net ; I've probably blocked both of them by now. You can only have one free account per destination address. The advertising attached to the bottom of the mail messages shouldn't be a problem for PGP-only remailers, assuming they use some tolerable format and don't try to package your mail in some MIME or HTML wrappers. I can't tell, because they say they won't start attaching ads until the extra-price-option ad-remover software is available RSN. The non-free accounts cost $15/year (first 60 days free) for wider collection of domain names (including mail.com, which is usable, and some pure spam-bait names including seductive.com and credit4u.com.) POP3 mailboxes cost $24/year. Their security is really spotty - they use SSL for things related to your bill, but not for passwords, at least for free accounts.... It's easy to set up an account that forwards mail to some third party; if you want to control the thing, you have to point it to yourself first, have it send you the password and confirmation, then go log in to the member page and change your mail forwarding destination. So it's unfortunately easy to spam the innocent with an account at innocent.com (they don't have guilty.com, though :-) I've set up remailer1(a)disposable.com to point to winsock(a)rigel.cyberpass.net , which is a PGP-only remailer. It'll expire in 60 days, unless someone wants to spend money, but that's why it's remailer1(a)disposable.com.... It's got one of the usual passwords. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list or news, please Cc: me on replies. Thanks.)

2 1

Toilet plungers and sodomy: Why we should trust police blindly
by Declan McCullagh 17 Dec '03

17 Dec '03

<B>By TOM HAYS<P> <B>Associated Press Writer<P> NEW YORK (AP) - A police officer turned himself over to investigators after being accused of using a toilet plunger to sodomize a Haitian immigrant who was arrested in a scuffle outside a nightclub. Justin Volpe, 25, one of two officers that Abner Louima identified as his attackers, surrendered to the police department's internal affairs division Wednesday night. Louima was critically injured in the Saturday beating. Deputy Inspector Michael Collins said Volpe would be charged with aggravated sexual abuse and first-degree assault. Collins also said disorderly conduct charges against Louima were being dropped. And the mayor said the precinct was undergoing a staff shakeup. Citing an unidentified high-ranking official familiar with the investigation, the Daily News reported today that Louima told investigators Volpe sodomized him. Louima has said an officer shoved a toilet plunger into his rectum, and then into his mouth. "They said, "Take this, nigger,' and stuck the stick in my rear end," Louima, 30, said in a hospital interview. [...]

4 5

Cartel Leaders Set Snipers To Work In Border War
by tcmay＠got.net 17 Dec '03

17 Dec '03

According to this article, the home addresses of government agents are being solicited by Mexican drug dealers, for disposal of agents interfering in their business. Between anonymous remailers and payment systems, a real Assassination Politics market could be set up. Don't even need untraceable e-cash, though this would be better. Glad I'm not a DEA or INS agent. --Tim May > Date: Thu, 14 Aug 1997 22:42:08 -0700 (PDT) > Message-ID: <199708150542.WAA25283(a)sirius.infonex.com> > From: Mix <mixmaster(a)remail.obscura.com> > Comments: This message did not originate from the address above. It was remailed by an anonymous remailing service. If you have questions or complaints, please direct them to <complaints(a)remail.obscura.com> > Subject: Cartel Leaders Set Snipers To Work In Border War > Newsgroups: talk.politics.guns,misc.legal,misc.survivalism,alt.news-media,alt.politics.usa.misc,alt.politics.media,alt.politics.clinton > Mail-To-News-Contact: postmaster(a)nym.alias.net > Organization: mail2news(a)nym.alias.net > Lines: 58 ... > Cartel leaders set snipers to work in border 'war' > By John Hiscock Electronic Telegraph, London > > August 11, 1997 > > AMERICAN Border Patrol agents have become targets of snipers working > for drug smugglers trying to take control of the border with Mexico. A > five-mile strip of frontier near San Diego in California has become so > dangerous that a specially-trained squad of border patrol sentries > armed with assault rifles has been drafted in to combat the snipers, > who have fired at agents seven times in the past two months. > > The agents believe that Mexican drug cartel leaders have issued > instructions to kill any law enforcement officers impeding drug > smuggling operations. Their fears have been heightened by a bulletin > from the Immigration and Naturalisation Service that said two drug > cartel leaders in the Mexican border city of Tijuana had "reportedly > contracted with local gangs on both sides of the border to kill > federal law enforcement personnel", preferably on American soil. In > addition, officers recently received reports that cartel henchmen have > put a price on their heads by offering to pay £7,000 for the > home address of any United States federal agent. > > Dianne Feinstein, a Californian senator, says that border patrol > agents, whose job until recently was to arrest mainly frightened and > unarmed Mexicans trying to cross the frontier at night, are now in the > front line of a vicious drug war. "This is a border on alert, a border > where anything could happen," she said. "These cartels are moving > drugs across the border and are operating with impunity and that adds > an increased risk to the lives of border patrol agents. This is a > different border than it was two years ago." > > In addition to being the most popular spot for illegal aliens > attempting to cross, the border around San Diego is now the main > gateway for cocaine and heroin bound for the US. Since the > introduction of Operation Gatekeeper, President Clinton's 1994 > anti-illegal alien initiative that poured more money and agents into > the San Diego area, the drug smugglers have found themselves > increasingly caught up in the patrols' swoops on illegal > border-crossers. > > "We've made it increasingly difficult for drug traffic," said John > Williams, the chief of San Diego's 2,000-strong border patrol sector. > "We're making it tough on crime and that certainly has some bearing on > their reaction. The escalation of violence is of grave concern to me > and my agents." > > Members of the elite special protection unit carry M-16 assault > rifles, with a range of more than a mile, while all agents are now > being issued with semi-automatic pistols and shotguns. -- There's something wrong when I'm a felon under an increasing number of laws. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

3 2

Macintosh Users: "SpeedDoubler"
by tcmay＠got.net 17 Dec '03

17 Dec '03

For you Macintosh users, I thought I'd share with you my experiences with SpeedDoubler, a new utility that (effectively) doubles or even triples performance of many applications that still are heavily dependent on 68K code (as opposed to purely PowerPC code). My PowerMac 7100av is currently running at 80 MHz, with a 512K L2 cache, and 40 MB of physical RAM. (I can remember when 32K of "core" was a huge amount, and I can remember when Intel supplied 8 MB to CDC for their "Plato" system...at that time, one of the largest solid state memory installations ever.) SpeedDoubler, from Connectix, is a $60-70 (street) product that takes 68K code and makes various optimizations for the PPC. It's effectively the 68K emulator that Apple should have provided. (For you non-Mac users who are reading this, this technology of intercepting and translating code, is likely to be used to get higher performance out of code written ostensibly for one CPU but actually run on a later iteration of the processor. Such as the Pentium or P6 in running 16-bit code.) In Speedometer, I saw a 3.9x increase in "CPU"-related tasks (for 68K code), and a 2.4x increase in a SmalltalkAgents application which is only available at this time in 68K code form. Even the Finder runs faster, as various parts of it are still written in 68K code. So, as many programs are still in 68K code form, and not yet rewritten for the PPC, SpeedDoubler effectively gives you a machine that is almost twice as fast. There may be a few incompatibilities, and I would suggest you read comp.sys.mac.apps and other groups to verify that your critical apps are not having any problems. All I can say is that I'm very happy. --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

ADULT VIDEOS
by 00896450＠hyperway.com 17 Dec '03

17 Dec '03

Explicit straight, gay and lesbian videos. http://www.espdirect.com/adult/ Absolutely discrete shipping within 24 hours. Visit our Web Site now... Adults only... You must be 18 years or over to visit. Click Here ********************************************************************* To be removed from our mailing lists, please send any message to: simrem(a)answerme.com Thank you *********************************************************************

1 0

Re: Phil Zimmermann/Amnesty International?
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 12:50 AM 9/2/95, Robert A. Hayden wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >On Fri, 1 Sep 1995, Michael Froomkin wrote: > >> I think he would have to be charged first. Have I missed something? >> PS when does the statute of limitations run out? > >I'm assuming that the statute of limitations has run out on most of these >things ( I don't know CA law, except to know it's weird :-) >What I'm concerned about, and nobody seems to have picked up on it, is >that one of the transcripts said that he and a partner beat up a bunch of >perps after they tried to surrender and that one of them died(!!). >That's murder in my book, and there is non statute of limitations on >that, even in California... Zimmermann and which partner? If it was Charlie Merritt, then all I can say is that I'm surprised. Kelly Goen...now there's a possibility. --Tim May P.S. As the thread title--"Re: Phil Zimmermann/Amnesty International?"--suggests, Phil Z. is the subject being discussed. Gary Jeffers made the bizarre speculation that Amnesty International might want to consider Phil a "prisoner of conscience" or a "political prisoner," or somesuch. All Michael Froomkin and others of us were pointing out is that this would be rather difficult, given that Phil has not even been charged, let alone tried, let alone imprisoned. How Mark Furhman migrated into this thread is beyond me. But, then, he killed Ron and Nicole, planted the glove to frame the nigger he hated so much, and was also involved in the bombing of the WTC. That he helped Phil export PGP is thus not surprising. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

Direct Socket to Remailer?
by ROBO Mixmaster Remailer 17 Dec '03

17 Dec '03

I've heard of telnetting to port 25 to send SEMI-untraceable e-mail. The procedure, quite frankly, sounds rather complicated. Most of my mail that I don't want traced goes through the Mixmaster remailer network. I'm using Winsock-compatible software via a PPP connection. Is it possible, for example, to tell my mailer software to use the remailer itself, such as "remail.obscura.com" as the mail host, rather than "mail.myISP.com"? Will it work, at least for sending, without having an account at "obscura.com", or whatever remailer? Would that be less traceable than sending it through my ISP's mail host?

1 0

ADULT VIDEOS
by 00896450＠hyperway.com 17 Dec '03

17 Dec '03

Explicit straight, gay and lesbian videos. http://www.espdirect.com/adult/ Absolutely discrete shipping within 24 hours. Visit our Web Site now... Adults only... You must be 18 years or over to visit. Click Here ********************************************************************* To be removed from our mailing lists, please send any message to: simrem(a)answerme.com Thank you *********************************************************************

1 0

IETF security report
by Rich Salz 17 Dec '03

17 Dec '03

>From saag-request(a)neptune.tis.com Fri Sep 1 19:09:55 1995 Received: from TIS.COM (neptune.tis.com [192.94.214.96]) by postman.osf.org (8.6.9/8.6.x) with SMTP id TAA08164 for <rsalz(a)osf.org>; Fri, 1 Sep 1995 19:09:54 -0400 Received: from neptune.tis.com by neptune.TIS.COM id aa06599; 1 Sep 95 16:20 EDT Received: from relay.tis.com by neptune.TIS.COM id aa06595; 1 Sep 95 16:18 EDT Received: from big-screw.mit.edu(18.72.0.176) by relay.tis.com via smap (g3.0.1) id xma004617; Fri, 1 Sep 95 16:07:54 -0400 Received: by big-screw id AA23873; Fri, 1 Sep 95 16:18:03 -0400 Date: Fri, 1 Sep 95 16:18:03 -0400 Message-Id: <9509012018.AA23873@big-screw> >From: "Jeffrey I. Schiller" <jis(a)mit.edu> Sender: jis(a)mit.edu To: minutes(a)cnri.reston.va.us Subject: IETF Security Area Report (July 17-21, 1995: 33rd IETF meeting) Cc: secdir(a)TIS.COM, saag(a)TIS.COM Status: R -----BEGIN PGP SIGNED MESSAGE----- IETF Security Area Report Jeff Schiller and Jim Galvin jis(a)mit.edu galvin(a)tis.com July 17-21, 1995 The Security Area within the IETF is responsible for development of security oriented protocols, security review of RFCs, development of candidate policies, and review of operational security on the Internet. The Area Director is assisted by a Directorate, an advisory entity with no standards-setting powers. The members of the Security Directorate are as follows. Jeffrey I. Schiller <jis(a)mit.edu> Ran Atkinson <atkinson(a)itd.nrl.navy.mil> Steve Bellovin <smb(a)research.att.com> Steve Crocker <crocker(a)tis.com> Barbara Fraser <byf(a)cert.org> James M. Galvin <galvin(a)tis.com> Phil Karn <karn(a)qualcomm.com> Steve Kent <kent(a)bbn.com> John Linn <linn(a)ov.com> Clifford Neuman <bcn(a)isi.edu> Rob Shirey <shirey(a)mitre.org> Ted Ts'o <tytso(a)mit.edu> In addition to the Directorate the Security Area is assisted by the Security Area Advisory Group (SAAG). The SAAG is an open group that meets at least once during each IETF meeting as well as electronically via the saag(a)tis.com mailing list. Send a message to the address saag-request(a)tis.com to join the list. During the Security Area Advisory Group (SAAG) meeting, the activities of the Security Area, including the Directorate, are reported and discussed. In addition, the SAAG meeting provides an opportunity for open discussion of security issues. Included below is a summary from those working groups and birds of a feather sessions with security relevant activities to report and the Security Directorate meeting summary. In addition, the following topics were discussed during the SAAG meeting. o Documents Approved as Proposed Standards The IESG approved the advancement of five of the IPSEC documents to proposed standards. With the advancement of these documents the IPSEC working group will focus on issues related to key management. The IESG approved the advancement of the two MOSS documents to proposed standards. With the advancement of these documents the PEM working group has completed its charter and will be closed. o Domain Name System Security The last revision of the enhancements for the DNS to support security has been released. It will enter working group last call very soon; no issues are expected to be raised. At the end of the working group last call the document will be submitted to the IESG to be considered for publication as a Proposed Standard. An implementation of the specification is available to U.S. and Canadian sites and individuals via anonymous FTP (see ftp://ftp.tis.com/pub/DNSSEC/README for details). o Key Management It was noted that the Internet needs two kinds of key management: one for short-term keys and one for long-term keys. The expected usage of short-term keys would be on a per connection or per message basis. Long-term keys, on the other hand, would probably be used to exchanged short-term keys. The distribution and management of long-term keys requires the existence of a global infrastructure. There are two options for the global infrastructure today: Secure DNS or The Directory (X.500). It is also possible that something completely different will be needed and developed. Key management is expected to get increasing attention in the IETF. o Internet Security Architecture Steve Crocker gave an abbreviated version of his presentation to the IAB the previous evening. He posed a challenge to the community to improve the network security at IETF meetings. The specific proposal is to have IPSEC available with manual keying, which would be enough to make a difference when compared to the current configuration. This should be available for use in the IETF terminal room by both the terminals/workstations and laptops. In addition, we should install a demonstration firewall that is IPSEC friendly. The goal is to make it available at the next IETF meeting in Dallas (December 4-8, 1995). The activity of the following working groups and birds of a feather sessions was reported. o Secure Socket Layer (SSL) BOF A consensus developed for the need for a session layer security protocol. This was predicated on observing that IPSEC is below the transport layer and the session layer is above it, and that implementing security in the transport or network layer would require changes to operating systems. In contrast, session layer security could be implemented and added non-invasively to existing systems, thus making security services available to a broad range of application protocols. As a result, a working group called Session Layer Security will be proposed. The Secure Socket Layer specification will serve as the starting point for the new working group. o Internet Secure Payments Protocol (ISPP) BOF This BOF met two times with more than a dozen technology presentations. Fortunately, the various technologies are much more similar than they are different. The consensus was that the IETF should have one or more working groups in this area. Charters will be proposed and submitted to the area director for consideration. o Simple Key Management for IP (SKIP) BOF SKIP is Sun's proposal for key management on the Internet. It is a competitor to the Photouris specification being discussed in IPSEC. It is still undecided as to whether this specification should be discussed as part of the IPSEC working group or within its own working group. Although there appeared to be consensus to move the SKIP specification onto the standards track, the authors will need to discuss the process and relationship to IPSEC with the area director and the Chairs of the IPSEC working group before this can be done. [Note: Since the IETF meeting took place discussions between the various parties are proceeding. The likely outcome will be for the SKIP work to take place within the IPSEC working group.] o Authenticated Firewall Traversal (AFT) There are currently four implementations underway with interoperability testing expected to begin shortly. If the testing is successful three documents will be submitted to the IESG to be considered for publication as Proposed Standards before the next IETF meeting in Dallas. o Common Authentication Technology (CAT) The CAT working group discussed topics related to active documents, including GSS-V2 (to receive another set of specific revisions at the Internet-Draft level, and then to be recommended for advancement to Proposed Standards), IDUP (where revised interface specifications and a new mechanism specification were discussed, with standards advancement to be considered at the Dallas IETF), GSS-API Negotiation (new draft discussed), Kerberos mechanism and extensions (status and comments discussed, new drafts to follow), FTP Security (to be recommended for advancement to Proposed Standard after inclusion of clarifying revisions), and a presentation of a new mechanism based on FIPS PUB JJJ cryptography. Presentations on work in progress included GSS-API integration into World-Wide Web browsers and servers, loadable GSS-API multi-mechanism support, and discussion of the use of RFC-1731 as a generic framework for integration of security tokens into text-based applications. The group also discussed a range of candidate follow-on topic areas related to authorization, and identified a subset with apparent common value and feasibility for proposals and work by group members. o Web Transaction Security (WTS) There were three short presentations on related subjects and a review of the two documents being developed by the working group. With respect to the requirements specification, several new issues were raised at this meeting and most, but not all, were resolved. There was consensus to resolve the remaining issues on the list and then submit the document to the IESG to be considered for publication as an information RFC. Recent changes to the SHTTP document were reviewed and no objections were raised. An outstanding issue is coordinating SHTTP with MOSS, which is dependent on the harder (and outside our scope) problem of coordinating HTTP with MIME. We remain hopeful that we will reach consensus on a document to propose to advance to Proposed Standard by the next IETF meeting Dallas. o IP Security (IPSEC) The interoperability testing of the recently approved Proposed Standards was discussed. The majority of the meeting was devoted to discussing Internet key management and the two working documents on Photouris and ISAKMP. o Site Security Handbook (SSH) Two documents are expected to be available by the first week of November, which will allow for final revisions to be proposed during the next IETF meeting in Dallas followed by advancing the documents onto the standards track as quickly as possible. The Security Area Directorate met on Monday afternoon for a 2 hour meeting. In addition to all of the above, the following was noted. o Intellectual Property Rights (IPR) The purpose of the discussion was information exchange. Several protocols are pending in the IESG as a result of unresolved IPR issues and several protocols from the security area are about to be submitted to the IESG with unresolved IPR issues. It is uncertain exactly what the outcome will be of any specific case. o Key-ed MD5 Key-ed MD5 is being used in a variety of protocols for authentication. The IETF needs an applicability statement which includes advice on how often to change the secrets. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMEdqFMUtR20Nv5BtAQELhwP/eTwVc+07AA19P0Q7KdfHxTAaNjnsPBRY 4bb2ekatHDaL5oVH2bbad1DECgOVU2Y0tKBXBNO3Pw1vQiMOV874ZeMIWNtcuxJE MUcd9PLXekRoIUGmUdQMdnVhGEhb4NWPAi6KXzkWRxLN0wZNG9tyjkb7qLCo0dLe +98gDe4dO1c= =2CtY -----END PGP SIGNATURE-----

1 0