December 2003 - cypherpunks-legacy

Re: Position escrow (triangulation, cell "remailers")
by Austin Hill 17 Dec '03

17 Dec '03

The Navy's Onion Routing project (www.onion-router.net) actual makes reference to anonymous cell phone networks by using encrypted proxies (Onions). The current implementation is IP based, but the briefing documents refer to any public networks including pager and cell networks. -Austin Quoted text from Phil Karn (karn(a)qualcomm.com ) on 4/22/98 12:33 PM >>On cell "remailers": Why resend the cell signal? Why not instead set up a >>generic phone call resender, which could be used by cell users and >>non-users alike? As long as you use the call resender for all of your >>important calls, the feds (and others) will find it very difficult to >>figure out what cell phone ID to triangulate or home phone number to tap > >Exactly. And I think this brings the remailing concept full >circle. Wasn't the basic idea invented for telephones way back in >(alcohol) Prohibition days? As I recall, a device called a "cheesebox" >connected two phone lines. When a call came in on one line, it went >back out on the other. You'd place a cheesebox in some third party's >back room, e.g., a restaurant owner who was paid for the privilege and >to keep his mouth shut. If the cops traced a call, it would lead them >to the restaurant owner, who would tip off the bootleggers. > >Does anyone have any historical references for these things? I think it >would be fun to see how an earlier age made use of anonymous remailers >based on a much simpler technology. > >Phil > > _________________________________________________________________________ Austin Hill Zero-Knowledge Systems Inc. Chief Technical Officer Montreal, Quebec Phone: 514.286.2636 Fax: 514.286.2755 _________________________________________________________________________ "Anonymity represents for many people a liberating even more than a threatening phenomenon." -Harvey Cox, The Secular City

1 0

Network Security Solutions Conference Announcement
by Bruce Schneier 17 Dec '03

17 Dec '03

Network Security Solutions Conference Announcement July 29th and 30th, Las Vegas Nevada ****************** Call For Papers Announcement *************************** Network Security Solutions is now accepting papers for its 1998 event. Papers and requests to speak will be received and reviewed from March 24th until June 1st. Please submit an outline on a self selected topic covering either the problems or solutions surrounding network security. Topics of interest include Intrusion Detection Systems (IDS), distributed languages, network design, authentication systems, perimeter protection, and more. Talks will be an hour with a half hour for Q&A. There will be LCD projectors, overhead, and slide projectors. Updated announcements will be posted to newsgroups, security mailing lists, email, or visit the website at http://www.blackhat.com/ Current speakers include: Marcus Ranum, Network Flight Recorder CEO. Bruce Schneier, Counterpane Systems CEO. Ira Winkler, president of the Information Security Advisory Group. Theo DeRaadt, OpenBSD Lead Developer. Tom Ptacek, Secure Networks Inc. Scott Waddell, Cisco-Wheelgroup corporation. Dominique Brezinski, Network Security Professional at Secure Computing Corp. Peter Shipley, Independent Security consultant. Richard Thieme, Thiemeworks, Inc. Winn Schwartau, Interpact Inc. Dr. Mudge, L0pht Heavy Industries administrator. Ray Kaplan, Meet the Enemy panel discussion, Q&A. Jennifer Granick, Attorney at law. **************************************************************************** It's late. You're in the office alone, catching up on database administration. Behind you, your network servers hum along quietly, reliably. Life is good. No one can get to your data or disrupt your WAN. The network is secure. Or is it? The Network Security Solutions conference has been organized to put an end to concerns like these. While many conferences focus on information and network security, only Network Security Solutions will put your engineers and software programmers face-to-face with today's cutting edge computer security experts and "underground" security specialists. Only the Network Security Solutions conference will provide your people with the tools and understanding they need to thwart those lurking in the shadows of your firewall. The reality is, they are out there. The choice is yours. You can live in fear of them. Or, you can learn from them. **************************************************************************** Conference Overview The Network Security Solutions Summer '98 conference (Formerly known as The Black Hat Briefings) was created to fill the need of computer professionals to better understand the security risks to their computer and information infrastructures by potential threats. To do this we assemble a group of vendor-neutral security professionals in the same room and let them talk candidly about the problems businesses face, and the solutions they see to those problems. No gimmicks, just straight talk by people who make it their business to explore the ever changing security space. Spanning two days with two separate tracks, Network Security Solutions will focus on the vital security issues facing organizations with large Enterprise networks and mixed network operating systems. Topics will include Intrusion Detection Systems (IDS), denial of service attacks and responses, secure programming techniques and tool selection for creating and effectively monitoring secure networks. NSS's intense sessions will bring to light the security and misconfiguration problems confronting organizations and network administrators, most of which go unnoticed by today's preoccupied system admins where security gets put off in lieu of constant network growth and upgrades. Our experts will discuss the strategies involved in correcting existing problems and any problems on the horizon. Current Intrusion Detection Systems and strategies will be covered so that attendees may learn how to stop these problems before they occur. CIO's are welcome, but they should bring the people implementing their network strategies and building their applications, because this conference is for them. **************************************************************************** Speakers There will be 18-20 speakers covering two tracks speaking over two days. Speeches will be more technically oriented and last 1 1/2 hours each. The goal of the talks are to inform the audience with quality current state system vulnerabilities and fixes. Because of our unique speakers NSS will offer the audience a deep insight into the real security issues facing your network with no vendor pitches. Wednesday, July 29th 08:30 - 09:00 Breakfast 09:00 - 09:45 Keynote Address: Marcus Ranum - How to REALLY secure the Internet. 10:00 - 11:30 Track A Richard Thieme - Convergence -- Every Man (and Woman) a Spy. Track B Dominique Brezinski - Penetrating NT Networks Through Information Leaks and Policy Weaknesses. 11:40 - 13:10 Track A Ira Winkler - Information Security: Beyond the Hype. Track B Theo DeRaadt - A discussion of secure coding issues, problems with maintaining OS source trees, and secure program design philosophies. 13:20 - 14:20 Lunch 14:25 - 15:20 Ray Kaplan: Meet the Enemy Session. 15:30 - 17:00 Track A [Empty] Track B Scott Waddell - Thursday, July 10th 09:00 - 09:45 Keynote Address: Bruce Schneier - Mistakes and Blunders: A Hacker Looks at Cryptography. 10:00 - 11:30 Track A [Empty] Track B Dr. Mudge - Real world VPN implementation problems. 11:40 - 13:10 Track A Jennifer Granick - Track B Peter Shipley - An overview of a 2 year effort in massive multi-modem wardialing. 13:20 - 14:20 Lunch 14:25 - 15:20 Panel 1 The benefits and problems of commercial security software. This panel of 5 people and moderator will explore what products work, and what doesn't in specific applications. Q&A. Panel 2 The Merits of Intrusion Testing - What is the benefit of having people break into your network. A panel 5 people. 15:30 - 17:00 Track A Winn Schwartau - Track B Tom Ptacek - Problems with Intrusion Detection Systems. **************************************************************************** Speaker Topics and Biographies - - MARCUS RANUM, President and CEO of Network Flight Recorder, Inc. How to REALLY secure the Internet. Is it possible to really secure the Internet? With current technology and methods, the answer would appear to be a resounding "no." We've tried security through stepwise refinement and security through consensus - the best remaining solutions are totalitarian and draconian. Marcus will present an outline for how the Internet could be secured through some simple, cost effective methods. He'll also explain why it won't happen. Marcus Ranum is CEO of Network Flight Recorder, Inc., and has been specializing in Internet security since he built the first commercial firewall product in 1989. He has acted as chief architect and implementor of several other notable security systems including the TIS firewall toolkit, TIS Gauntlet firewall, whitehouse.gov, and the Network Flight Recorder. Marcus frequently lectures on Internet security issues, and is co-author of the "Web Site Security Sourcebook" with Avi Rubin and Dan Geer, published by John Wiley and Sons. - - BRUCE SCHNEIER, President of Counterpane Systems and author of Applied Cryptography. Mistakes and Blunders: A Hacker Looks at Cryptography. - From encryption to digital signatures to electronic commerce to secure voting--cryptography has become the enabling technology that allows us to take existing business and social constructs and move them to computer networks. But a lot of cryptography is bad, and the problem with bad cryptography is that it looks just like good cryptography; most people cannot tell the difference. Security is a chain: only as strong as the weakest link. In this talk I'll examine some of the common mistakes companies make implementing cryptography, and give tips on how to avoid them. Bruce Schneier is President of Counterpane Systems, the author of Applied Cryptography, and the inventor the Blowfish algorithm. He serves on the board of the International Association for Cryptologic Research and the Electronic Privacy Information Center. He is a contributing editor to Dr. Dobb's Journal, and a frequent writer and lecturer on cryptography. - - THEO DERAADT, Lead developer of OpenBSD. A discussion of secure coding issues, problems with maintaining OS source trees, and secure program design philosophies. Regular systems software has many security problems. A number of approaches at auditing and repairing these problems have been developed as a result of the OpenBSD project. Theo de Raadt heads the OpenBSD project. This 4.4BSD derived operating system project has increasingly placed its focus on discovery and repair of security issues. Due to a 2 year auditing process by a 10-member team, OpenBSD is probably the most secure operating system in common use today. For more information, see http://www.OpenBSD.org/security.html - - IRA WINKLER, President of the Information Security Advisory Group. Information Security: Beyond the Hype If you read the headlines today, you would think that no matter what people are doing to secure themselves, they will never be secure. The reason this idea comes across is that the media focuses on the threats and stories about unstoppable geniuses that can compromise even the Pentagon. The truth is that you can protect yourself from even the most diabolical genius. This presentation discusses Information Security from a Risk based perspective. The threats to your systems are discussed, but more important the vulnerabilities that actually allow the threats to compromise your systems are discussed. Using that information, you can then choose the countermeasures you need to protect yourself and your organization. This presentation will show you that while there is no such thing as perfect security, you can protect yourself from almost all of the most serious threats. Probably what is most valuable to attendees is guidance on how to spend limited funding in the most efficient manner. Ira Winkler, CISSP is considered one of the worlds leading experts on Information Security, Information Warfare, investigating information related crimes, and Industrial Espionage. He is author of the book, Corporate Espionage, and President of the Information Security Advisors Group. His clients include some of the largest companies and banks in the world. He is also a columnist for ZDTV with his column titled SpyFiles. He also functions as the network's security expert. Previously, Mr. Winkler was with the National Security Agency and was the Director of Technology with the National Computer Security Association. He has also performed studies on Information Warfare for the Joint Chiefs of Staff. - - DOMINIQUE BREZINSKI, Network Security Professional at Secure Computing Corporation. Penetrating NT Networks Through Information Leaks and Policy Weaknesses. The focus of this presentation will be a demonstration of how Windows NT hosts can be queried for information and how the information can be correlated to provide an attacker with a path of least resistance. Even though many Windows NT networks have few remotely exploitable technical vulnerabilities (buffer over-runs, flawed CGI scripts, address based authentication etc.), most NT networks give away too much information. By analyzing the information it is easy to find policy weaknesses that can be exploited to gain access to the NT hosts. Custom tools will be demonstrated on a small network. Dominique Brezinski is a Network Security Professional at Secure Computing Corporation and has been concentrating on Windows NT and TCP/IP network security issues for four years. Prior to working for Secure Computing, Mr. Brezinski worked as a Research Engineer at Internet Security Systems where he was responsible for finding new vulnerabilities and security assessment techniques for Windows NT. In 1996 Mr. Brezinski published a white paper entitled "A Weakness in CIFS Authentication" which revealed a serious flaw in the authentication protocol used in Windows NT (NT LM Security). It was shown for the first time that an attacker could completely subvert the network authentication in Windows NT to gain unauthorized access to Windows NT servers. Mr. Brezinski has continued to demonstrate advanced techniques for assessing the risks present in Windows NT networks. - - RICHARD THIEME, Thiemeworks, Inc. Convergence -- Every Man (and Woman) a Spy. Arbitrary digital interfaces - television, PCs, PDAs - are converging, but that's only part of the story. The roles people play in work and life are converging too. Intelligence agents, knowledge managers for global corporations, competitive business intelligence agents, sysadmins, hackers, journalists, and CIOs are becoming indistinguishable. Why does that matter? Because the ability to synthesize and integrate information, manage complexity and ambiguity, morph continually into roles appropriate to a shifting work context, and somehow remember who you are - that's what matters most. Our presentations of ourselves are the powerful levers that move mountains in the digital world. Richard Thieme discusses why and how to do it. Richard Thieme is a business consultant, writer, and professional speaker focused on the human dimension of technology and the workplace. His creative use of the Internet to reach global markets has earned accolades around the world. "Thieme knows whereof he speaks," wrote the Honolulu Advertiser. He is "a prominent American techno-philosopher" according to LAN Magazine (Australia), "a keen observer of hacker attitudes and behaviors" according to Le Monde (Paris), "one of the most creative minds of the digital generation" according to the editors of Digital Delirium, and "an online pundit of hacker culture" according to the L A Times. Thieme's articles are published around the world and translated into German, Chinese, Japanese and Indonesian. His weekly column, "Islands in the Clickstream," is published by the Business Times of Singapore, Convergence (Toronto), and South Africa Computer Magazine as well as distributed to subscribers in 52 countries. Recent clients include: Arthur Andersen; Strong Capital Management; System Planning Corporation; UOP; Wisconsin Power and Light; Firstar Bank; Northwestern Mutual Life Insurance Co.; W. H. Brady Company; Allstate Insurance; Intelligent Marketing; and the FBI. - - RAY KAPLAN. Generally, "hackers" are regarded as criminals by the "legitimate community." Who are these "hackers" that seem to keep whacking on our systems and networks? Are they merely scumbag reprobates that should be purged from the society? Is there anything to learn from them? This session is intended to introduce the two sides of the security equation to one another in a forum which fosters open, detailed, honest communication. Bring your questions. Who are the enemies of computer and network security? What techniques do they employ against us? Are those that attack our systems all just a bunch of slime balls that are devoid of morals, ethics, and common sense? While in the minority of reported computer crime statistics, the skilled outsider still represents a significant threat. This session explores who they are, their attitudes, their techniques, their successes and their failures from the perspective of what we have to learn from them to better protect your systems and networks. This classic session allows you to interact directly with members of the computer underground. Join us for some stimulating conversation with those who computer security professionals consider to be their enemies. Mr. Kaplan has been actively involved with system and network security as a consultant for over half of his more than 20 years in the industry. There is no question that he hacks. However, he is not a criminal. His clients have included the world's largest financial institution, smallest commodities broker and a wide variety of organizations, including multinational and Fortune 100 companies from all segments of the economy, and public institutions all over the world. Mr. Kaplan is a very prolific lecturer, instructor and writer. He consults, lectures and teaches technical system and network-related topics all over the world. His articles are frequently published in major computer journals and magazines. In over ten years of public speaking and audio/video conference production, he has given over 2,000 technical, tutorial-style presentations and lectures in forums such as professional societies, seminars and his consulting. As a frustrated inventor, he is forever trying to rid the world of inefficiency, frustration and waste by pursuing new paradigms in the delivery of training, education and technical information. - - PETER SHIPLEY - An overview of a 2 year effort in massive multi-modem wardialing. Security problems occur when obvious security problems are overlooked. One commonly overlooked problem is alternative access methods to a corporate Intranet from an external machine. Many if not most companies are overlooking their secondary vulnerabilities surrounding alternate methods of network access. Mr. Shipley will present research covering an overview of a 2 year effort in massive multi-modem wardialing. His findings will include some personal observations and the results obtained from scanning the San Francisco Bay area. When Mr. Shipley started this project he noted that there were no published research references to wardialing or documented statistical results of the types of equipment and computer networks commonly found on the POTS (Plain old telephone system) network. Mr. Shipley decided to change that through his research. Mr. Shipley Is an independent consultant in the San Francisco Bay Area with nearly thirteen years experience in the Computer Security field. Mr. Shipley is one of the few individuals who is well known and respected in the professional world as well as the underground and hacker community. He has extensive experience in system and network security as well as programming and project design. Past and current clients include TRW, DHL, Claris, USPS, Wells Fargo, and KPMG. In the past Mr. Shipley has designed Intranet banking applications for Wells Fargo, Firewall design and testing for and, WWW server configuration and design for DHL. Mr. Shipley's specialties are third party penetration testing and firewall review, computer risk assessment, and security training. Mr. Shipley also performs post intrusion analysis as well as expert witness testimony. Mr. Shipley is currently concentrating his efforts on completing several research projects. - - Thomas Ptacek, Network Security Professional at Secure Networks, Inc. Defeating Network Intrusion Detection. Network intrusion detection (ID), a technology that attempts to identify attackers by monitoring network traffic, is fast becoming one of the hottest products in the security market. Beneath the hype, however, lie some serious concerns about the reliability of currently available ID systems, as well as the fundamental techniques they use to collect information. This talk will explain why the most popular ID systems on the market can't be trusted, demonstrate how to avoid detection by them, and, in the process, eliminate some very widespread misunderstandings about the capabilities of sniffers and intrusion detection systems. Thomas Ptacek is a developer at Secure Networks, Inc. His work focuses on vulnerability assessment, which involves researching and testing network systems for exploitable design and implementation flaws. In the course of this work, his team has discovered some of the Internet's most serious security problems, including vulnerabilities in Windows NT, Checkpoint Firewall-1, and Solaris, as well as core Internet software such as the BIND, INN, and Apache. - - DR. MUDGE, Administrator of the Boston L0pht Heavy Industries. Real world VPN implementation security issues. As one of the prominent members of the hacker group 'The L0pht', mudge has been responsible for numerous advisories and tools in use in both the black hat and white hat communities. L0phtcrack, the Windows NT password decryptor - monkey, the S/Key password cracker, Solaris getopt() root vulnerability, sendmail 8.7.5 root vulnerability, Kerberos 4 cracker, and SecurID vulnerabilities are some of the recent offerings that mudge has contributed to the security community. Mudge recently finished cryptanalysis work with some of the top US cryptographers - papers will be published within the next several months. The BBC, Wired Magazine, Byte Magazine, and the Washington Post have all recently covered mudge and the L0pht's ongoing projects. - - SCOTT WADDELL, Cisco-Wheelgroup corporation. **************************************************************************** Fees and Registration Registration fees before July 10th are $995, after the 10th are $1195 US. To register please use the online registration page at https://convmgmt.com/security/reg.htm Current payment methods include American Express, Master Card, Visa, and company checks and money orders. You will receive a confirmation letter in the mail informing you of a successful registration. **************************************************************************** Hotel Information Network Security Solutions '98 will take place July 29th and 30th at the Plaza Hotel & Casino in Las Vegas, Nevada. To take advantage of conference rates, reservations must be made prior to June 9. When making arrangements, please reference Network Security Solutions. The Plaza Hotel and Casino, Number One Main Street Las Vegas, NV Phone: 1-800-634-6575 **************************************************************************** Network Security Solutions Summer '98 Sponsors Aventail Corporation http://www.aventail.com/ Aventail (tm) Corporation is the pioneer of policy-based Virtual Private Network (VPN) software solutions. Its award winning product, Aventail VPN (tm) , enables corporations to privately communicate, share applications, and securely exchange business-critical information over the Internet with their business partners, customers, suppliers, and remote/mobile employees. Aventails adherence to open security standards simplifies VPN deployment, enables interoperability, and leverages corporations existing network investments. Network Flight Recorder http://www.nfr.com/ Network Flight Recorder builds traffic analysis and monitoring tools that help you see how your network is being used. Nobody's network is shrinking or getting less complicated - and networking is becoming the lifeblood of many modern businesses. In other words, your job is getting harder and more important. Network Flight Recorder's monitoring package gives you a flexible, user-programmable system that lets you: Recover or monitor online transaction records, keep historical statistics about how your network grows, generate detailed breakdowns of how your network services are being used and by whom, watch for patterns of abuse of network resources and identify the culprit in real-time, set burglar alarms that alert you to security violations or unexpected changes in your network, log and monitor who went where on your network, and replay attackers' sessions and learn what they did. Knowledge is power, and knowing what's going on within your network is the key to keeping it operating smoothly. Like our namesake, the aircraft flight recorder, our system records the information you want about what happened when, where, and how. If you need to go back and look at a reliable record of events, your Network Flight Recorder is the first place to check. We are dedicated to providing the best possible tools for understanding your network traffic, so you can maintain it and secure it. Counterpane Systems http://www.counterpane.com/ Counterpane Systems is a cryptography and computer security consulting firm. We are a virtual company based in Minneapolis, with three full-time employees and six part-time contractors. Counterpane provides expert consulting on Design and Analysis. This is the majority of Counterpane's work: making and breaking commercial cryptographic systems and system designs. We can analyze all aspects of a security system, from the threat model to the cryptographic algorithms, and from the protocols to the implementation and procedures. Our detailed reports provide clients with information on security problems as well as suggested fixes. ********************************************************************** Bruce Schneier, President, Counterpane Systems Phone: 612-823-1098 101 E Minnehaha Parkway, Minneapolis,MN 55419 Fax: 612-823-1590 http://www.counterpane.com

1 0

Assume The Position, Escrhole!
by Toto 17 Dec '03

17 Dec '03

Lt.Carnal Karns, Antsin Mia Frantz, et al, are undoubtedly first class TechnoWarriors and/or OhmResistance Fighters in the InfoWar being fought on the new Electronic BattleGround. However, I can't help but wonder if even the most brilliant of technical solutions to potential BigBro tools such as 'position escrow' are of any use, in the long run, if the majority of society continues to unquestionably accept any form of unconstitutional intrusion into their lives, as long as it comes in 'a pretty red box', or is promoted by Michael Jordan as a 'must have' March To Battan model. I find it interesting that TechnoWarrior accomplishments such as the GSM exloit seem to have more effect on the psyches of those concerned with the 'constitutional rights' of corporations and governments, rather than being of great concern to the average individual. I find it disconcerting that governments and corporations recognize the dangers to their own position and power by an all-seeing BigBro, while the Sheeple rush to take advantage of the latest in Digital Implants, in order to take advantage of the 'convenience' and 'safety' that results from having themselves, their children and their goldfish tracked and monitored by governments and corporations from the moment of their birth to the day of their last purchase at the '[YourNameHere] Tombstone Shop'. Perhaps what the Digital rEvolution needs is a Marketing Manager and a seat on the NASDAQ. How does the 'Michael Jordan Remailer' sound? 'Nike Nukes', with a joint advertising campaign with Samsonite and Timex? Toto

2 1

CIA to Kids: I Spy, You Spy
by David Honig 17 Dec '03

17 Dec '03

Wednesday April 22 3:57 PM EDT CIA to Kids: I Spy, You Spy By Jim Wolf WASHINGTON (Reuters) - The Central Intelligence Agency has unveiled a World Wide Web site aimed at introducing the spy game to the kindergarten set. The CIA's "Home Page for Kids" at www.odci.gov/cia/ciakids, features geography quizzes, interactive disguise games and thumbnail sketches of cloak-and-dagger figures dating back to the Revolutionary War against Britain. It also showcases "Who We Are and What We Do," a very basic primer on intelligence-gathering and analysis. "What we're really trying to do is encourage kids to use computers, explore geography and give them an understanding of what the CIA does," said Anya Guilsher, an agency spokeswoman. "We're also putting a human face on the people who work here," she said. The section on those behind the scenes opens with a shot of a woman possibly meant to personify the CIA's vision of the American James Bond for the late 1990s. Slender, smiling and black, she is conservatively dressed in a white blouse and smartly tailored outfit. Other pages give a glimpse of an espionage operation, complete with a man wearing dark glasses and a trench coat. "If you worked in the Directorate of Operations, you would like to travel and have a great curiosity about the world and its different cultures," reads the text in the People section. "You would like to work with people from all over the world, be able to adapt to any situation (especially dangerous ones!), be well educated, know other languages, be good at working at with other kinds of people, and be courageous, well disciplined, and able to accept anonymity," it says. The text goes on to explain that such undercover operatives -- whose job typically includes recruiting foreigners to steal secrets for the United States -- know they will toil chiefly in the twilight. "The rewards for the officer are the knowledge that he or she contributed to the security of our country and is recognized by his or her peers," the text adds. The site lays out the work of the CIA's other three branches as well -- those analyzing intelligence for policymakers, solving science and technology challenges ("To work beyond the state of the art every day is normal in this directorate") and administering the CIA's estimated 16,000 full-time U.S. employees and its $3 billion budget. One fringe benefit of the site, which went online last month, is that it helps CIA personnel explain their jobs to their kids, said Karen Gilbert, an agency public affairs specialist who was part of the four-woman design team. "Finally people who work here now have a way to talk to children about what they do here," she said in an interview at CIA headquarters in the Washington suburb of Langley, Virginia. To appeal to children as young as six, the designers picked the CIA's bomb-sniffing canine corps of Black Labradors and Belgian Shepherds to conduct "first-person" tours of the CIA's leafy campus. The site will be updated regularly. The Web site, which the agency said has been receiving as many as 950 visits a day, contains links to the CIA's signature World Factbook and the agency's main Web page, said to get almost two million "hits" a month. The kid page has nothing to do with recruiting future U.S. spies, the agency said. But job-seekers can read about pay and benefits by clicking on the employment tab on the main site. It stems from an executive order last April 19 in which President Clinton told federal agencies to match White House efforts to put more educational material online for children. The CIA effort, hardened against would-be hackers and housed on computers separate from those used for its sensitive work, was done on "a real shoestring budget," said Gilbert. http://dailynews.yahoo.com/headlines/top_stories/story.html?s=z/reuters/9804 22/news/stories/cia_2.html ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu "But if we have to use force, it is because we are America; we are the indispensable nation." ---Secretary of State Madeleine K. Albright

1 0

Re: Position escrow
by Dan Todd 17 Dec '03

17 Dec '03

There is a similar (probably a number of them) service in parts of the US. While visiting Michigan recently I saw a wireless phone with a "calling card" from a company called Isis. It appeared to be an anonymous, pre-paid cellular phone but I didn't investigate to see if it runs on standard cellular or if they ask for and verify personal information upon purchase. I've also seen this product advertised on DSS (I don't recall what market) and the commercial seems to support this as an anonymous service. I guess the advantages are that is wouldn't give up any identifying information while still allowing for tracking in an emergency. cheers, dan -----Original Message----- From: Geraint Price <Geraint.Price(a)cl.cam.ac.uk> To: Phil Karn <karn(a)qualcomm.com> Cc: frantz(a)netcom.com <frantz(a)netcom.com>; geer(a)world.std.com <geer(a)world.std.com>; die(a)die.com <die(a)die.com>; cypherpunks(a)toad.com <cypherpunks(a)toad.com>; cryptography(a)c2.net <cryptography(a)c2.net>; Geraint.Price(a)cl.cam.ac.uk <Geraint.Price(a)cl.cam.ac.uk> Date: Thursday, April 23, 1998 10:39 AM Subject: Re: Position escrow > >> >One interesting, but unlikely possibility is an originate-only phone which >> >pays for calls with cash (e.g. Digicash, or a prepaid phone activation >> >card). Since it can't receive calls, it doesn't need an identity. What >> >would come out of the system is, "Someone in cell X called telephone number >> >Y." >> >> There's already a way to do this: cloning. This is not always done >> just to avoid paying for service. Certain cloners are entirely able >> and willing to pay for cellular service, but they demand anonymity. >> >> Somebody should point out to the carriers that they could get rid of >> much of the incentive to clone phones if they simply offered a >> legit way to remain anonymous. >> >> Phil > >This technology already exists in Britain (I don't know about any other >countries), where you can buy a mobile without any subscription information >off the shelf. To use the mobile, you go and purchase a 'token' which allows >you to use the mobile on a pay-per-call basis much the same as a public phone. >I don't know the method of token implementation. > >The police have started kicking up a fuss over this technology as they claim >it hinders their investigation into criminal activity, because if they trace a >cellular phone which turns out to be one of this type then they can't pull the >info on the customer to go round knocking on doors. > >Geraint > > >

1 0

From Russia With Love
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

A CyberPsychotic wrote: > So what you think?:) > I want to place it somewhere anonymously.. > > --------------------------------------------------------------- > <html><head><title>the Black List</title> > </head> > <body> > <center>The most honest page ever been made. > </center> > > <hr> > Disclaimer: The things covered in this page are just expressing my > sence of the reality. I don't even pretend to claim that my own opinions > express the minds of all the people around, even though I feel that many friends > of mine would agree with me here. Writing it I just use my right > for "speaking freely".If you get pissed off you'd better > <a href=http://www.happytoy.com> leave it NOW</a> > <hr> > Description: This page covers the (su|o)bjects which generally have been > pissed me off during my life, so I decided to publish 'em. Wonder Why? > Just because I want to.. If you ever want to contribute you may send > me your ideas to <a href=mailto:fygrave@usa.net>fygrave(a)usa.net</a> However > if you feel like flaming me send it to <a href=mailto:root@localhost>separate > address</a> so i could sort it out:-). > > Be ready for the most disturbing and pathethic truth you ever heard.. > > <quote>Remark:Most of statements here are provoked by Tequila Breeze. Alas, Great Drink. > </quote> > <hr> > <ul> > <li> I hate <a href=http://www.online.kg>the Fucking Country</a> I live in... > > Why? There are many reasons. > <ul> > <li>This country makes me feel > like a bunch of monkeys rule it. They make rules and laws for people, > but what the fuck they don't follow 'em themsleves? > > <li> They have fucking right to claim we are democratic? But why the hell they violate even basic human rights ? > <li> They claim they build civilized country, but civilized country > cares of its citizen, not robes them. > <li> They claim that everyone is equal before the face of law? > But What the FUCK some are more EQUAL than others? And why the hell, > they forget of equality when things start dealing with MoneY or Relatives? > > <li>You may claim that there are some (lots) of things which are free for now, > and which are "real freedom". But i will tell you that's because those > Morons just are too stupid to figure out how to exploit it, or it is just being > > overlooked .. yet... But be sure they will sell your country to <a href=http://www.whitehouse.gov>Yankee's Goverment</a> some Day.. > </ul> > <li> Does it make you feel than any other country is better? No WAY. > Take a look on <a href=http://www.gov.ru> Russia </a> > with their moronic Drunk-head President and Puppet-like parlament > or <a href=http://www.whitehouse.gov> United States</a> > with helpless president and crazyBUCK-ruled congress.I could state > more arguments why those countries suck, but I'd better leave it for > those who <a href=http://www.antionline.com> live there</a> > > <li><a href=http://www.microsoft.com> MiKr0SlopHt</a> > > If you are Wind0gze user, i hope there are even no reason to > explain You why MicroSloft sucks. Ever have found yourself standing > Helpless before their stupid GUI and "Can't remove tmp directory. Reformatting Disk C:.." like message and wondering for the XXXth time "why the heck > i started using Microsoft products?", or finding one day morning all > your files being stolen and removed due to lame security<a href=http://oliver.efri.hr/~crv/security/bugs/NT/nt.html>(read NO SECURITY)</a> developed by'em? > > <li> Lamers and Wannabies .. > Hah... there are no MORE annoying people than those who think they KNOW everything or peretend to .. > <li> Fuckin' Elite > I just can't understand why those fucks claim they are better than me > just because their Dads made more bucks that I do, or they could > > move their asses there and here in the cars while i have to walk. > </ul> > </body> > </html>

1 0

Oral Argument to Be Held April 24 in Crypto Export Case
by Shari Steele 17 Dec '03

17 Dec '03

Everyone in the Akron area is encouraged to attend this hearing (8:30am, Akron federal courthouse) and show the judge how important it is that the export controls on encryption be repealed. If you are able to attend, please remember to dress in your best courtroom attire and to be respectful of the court. EFF and the Bernstein legal team wish Peter Junger, Gino Scarcelli and the rest of the Junger legal team the best of luck. For more information on the Junger case, see http://samsara.law.cwru.edu/comp_law/jvd/. Shari Oral Argument to Be Held April 24 in Crypto Export Case Stipulation of Undisputed Facts Filed in Law Suit Challenging Federal Licensing of Publishers of Encryption Software Junger v. Daley on Fast Track ---------------------------------------------------------------- Cleveland, Ohio, Monday, April 13, 1998 For Immediate Release For More Information Contact: Peter D. Junger (216) 368-2535 <junger(a)samsara.law.cwru.edu> Raymond Vasvari (216) 522-1925 <freespeech(a)mail.multiverse.com> Or see URL: http://samsara.law.cwru.edu/comp_law/jvd/ To be added to, or removed from, the list of those who were sent this press release, please send e-mail to <lawsuit(a)upaya.multiverse.com>. _________________________________________________________________ Cleveland, Ohio, April 13 -- Arguments in Junger v. Daley, the law suit challenging the constitutionality of the export regulations on encryption software, will be held in front of Judge Gwin on April 24 at 8:30 AM at the federal courthouse in Akron, Ohio. The parties have filed a Stipulation of Undisputed Facts which is now available from the cryptography archive maintained by John Young at <http://www.jya.com/pdj8.htm> and from the plaintiff's archive at <http://samsara.law.cwru.edu/comp_law/jvd/pdj8.htm>. The suit was brought by Peter Junger, a law professor at Case Western Reserve University in Cleveland, Ohio against William Daley, the United States Secretary of Commerce, to establish that the export regulations restricting the publication of computer programs used to protect privacy and confidentiality violate the freedoms of speech and of the press guaranteed by the First Amendment to the United States Constitution. Those regulations, which apply only to publication on the Internet and the World Wide Web and by other electronic means, but not to traditional books or magazines, have been extensively challenged by the computer industry and by civil rights groups. There is now legislation pending in Congress that would relax or abolish the current restrictions on ``exporting'' encryption software, restrictions that endanger the competitive position of the United States software industry and effectively prevent many within the the United States from obtaining the computer programs that they need to preserve their privacy. ``Those are very important issues,'' Professor Junger says, ``but the issues raised by my suit do not just affect encryption software. If the government can restrict the writing and publication of encryption programs because they are useful--and that is basically what the government is claiming--without regard to the authors' and publishers' constitutional rights under the First Amendment, then, by the same reasoning, it could forbid the publication of any computer program that earns the disfavor of the authorities. At this time of year, for example, I find it easy to believe that the government would like to forbid the publication of tax preparation software that the tax collectors feel are too good at detecting loopholes.'' Both sides have asked for summary judgment and it is expected that Judge Gwin will be able to decide the case shortly after the hearing on the 24th without any further proceedings, but if any issues remain to be be decided after that Judge Gwin has set July 20th as the date on which the case will go to trial. ``It is good to be back on the fast track,'' Junger says, ``and I am confident that the case can be decided without a trial. The dispute is not about the facts. The only real issue is whether, and to what extent, the constitution protects the writing and publication of computer programs. And a trial is not going to be necessary to settle that issue. ``But this is only the first step,'' he adds. ``No matter who wins in the district court, it is almost certain that the other side will appeal the case. My lawyers, and particularly Gino Scarselli, have done a wonderful job at considerable personal sacrifice. As I think about the prospects of an appeal, I only hope that we can raise some support for them.'' A fund has been established to defray the cost of this litigation and contributions may now be sent to Professor Spencer Neth, Case Western Reserve University Law School, Cleveland, OH 44106. Checks should bear the notation ``Junger Litigation Fund'' or ``Crypto Litigation Fund.'' -30- -- Shari Steele, Staff Attorney ssteele(a)eff.org Electronic Frontier Foundation 301.375.8856 (v) P.O. Box 649 301.283.5337 (f) Bryans Road, MD 20616 http://www.eff.org/homes/steele.html

1 0

Thank you for downloading Calendar.pl v1.1
by calendar＠jann.com 17 Dec '03

17 Dec '03

Thanks for downloading the Calendar.pl v1.1! I will keep you up to date on all enhancements and bug fixes to the program via email from now on. Again, thanks! Jann Linder jann(a)jann.com ------------------------------------- For bug reports, please send email to: mailto:calendar_bug@jann.com For questions, please email to: mailto:calendar@jann.com

1 0

Re: Traceability of Calling Cards, Phones, Remailers
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tim May wrote: > At 12:27 PM -0800 4/23/98, Anonymous wrote: > >Keep in mind that Timothy McVeigh thought he had anonymity with his > >use of a prepaid 'anonymous' phone card over public payphones. He was > >wrong. > If I recall correctly, they determined that the same calling card was used > to call various places. Once they had identified the card, correlation was > easy. It is even easier to track in real-time if one has prior information in regard to the possessession of such 'anonymous' instruments, either through in-place informants on either end (or both ends) of the transaction. > What I took from this was the advisability of buying a dozen or so cheap > prepaid cards, from a machine dispenser or shrinkwrap/cardpack untraceable > sale, and then not use any single card over and over again. Mr. May is astute enough to recognize that law enforcement agencies are fully capable of reading (or writing) the same guerrila-outlaw how-to books and manuals available to would-be anonymous activists, and that it is dangerous for an individual to fail to use their own wit and wisdom to add additional layers of protection and deception to guerilla methods commonly championed. e.g. - a 'known plaintext' becomes one-step deeper when translated into an unfamiliar language. > >It is highly unlikely that electronically-based 'anonymous' technology > >is going to be any more untracable than meatspace-disseminated tools > >of anonymity. > With all due respect, I think you're talking out of your ass on this one. One should be careful about insulting people named 'Anonymous', since we come from such a large family... > The math of tracing messages routed through a network of N selected > remailers each properly executing a remailer protocol (e.g., accumulating M > messages, encryption at each stage, etc.) is far, far stronger than > anything McVeigh was using. Very true, but I was thinking more in terms of the pre-existing compromise of the tools of anonymity which will be offered/marketed to the masses. e.g. - Decades ago, after picking up a book order from Loompmatics which I had sent to a cold-address (USPS), I shortly thereafter watched in amusement as border-guards tore my vehicle apart looking for material that they theoretically were not supposed to know I had taken possession of, not knowing that my 'unreasonable' paranoia had resulted in my making a 'test run' before crossing the border with them. > I had hoped there would be many more remailers in use by the time the next > Big Event happened and involved remailers, but it appears remailers are > spreading slowly and the pressure cooker is reaching the bursting point for > more patriot or militia or terrorist actions. There are many more remailers in existence than is readily apparent. The Winsock remailer software, for instance, has been modified to allow 'clustered' remailers to exist on a single server, wherein a number of individuals can channel their email to a separate in-house remailer designed to give them an outgoing consistent persona that is not traceable to their incoming message through ordinary man-in- the-middle tracking. Totoally Anonymous

1 0

Epilogue 5/0 -- SPACE ALIENS HIDE MY DRUGS!!!
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Epilogue 5/0 -- SPACE ALIENS HIDE MY DRUGS!!! _____________________________________________ A REPTILIAN NAZI WHO NARROWLY ESCAPED BEING MADE INTO A PAIR OF BOOTS WHILE TRAVELLING THROUGH TEXAS wrote: > Hello, Toto...this is just a friendly response. You sound just like I did > when I was first exposed to Illuminatus! and Mexico City Blues...both really > nifty books. Wow. You must have been some sick puppy... > The whole reason I got involved in government work at all was because I needed > to find out what it was all about, and I grant you, it's VERY EASY for a good > "social engineer" to warp the living dogshit out of any organization, because > the more hierarchical a structure, the fewer variables you have in bending it > to your will. It was this very Prince Apia of Physics that allowed Linda McCartney to be secretly buried as an imaginary driver in the log book of a finely tuned Volkswagen with a fifth-wheel which could be retracted when outside the jurisdiction of the Kansas Control Commission, thus allowing the Bug to be hidden outside of the prying blinds of the papparazzi, whose long, reptilian tongues were busy snapping at fruit's flies. > This all makes sense...BUT...this is America, and, as this mailing list > illustrates, our population is not so easily subdued. In my not-so-humble > analysis (as a loud-mouthed student of propaganda), great propagandists like > Ayn Rand and a few others gave essentially shielded us from herd-responses > on a government scale. Ayn Rand's 'propaganda' apparently didn't shield us well enough from herd-responses to keep her books off of the best-seller lists, while *real* classics such as 'Thinker Dumped' were used to prop up the corner of couches around the nation. > This is entirely unprecedented (and kicks ass) > because we have an ACCEPTED CULTURE of resistance against any unnecessary > controls. However, one needs to keep in mind that top government officials and members of the military are being provided innoculation to provide them with resistance to the cultures that they experiment with, while making them illegal for the average bean-counter to possess. > There will always be regulation-mongers who try to pull shit like the War on > Drugs, but, as you can see, they lose public support *really* fast. Lack of public support does not seem to prevent the regulation-mongers from continuing their various forms of the War on Drugs over the course of hundreds of years, while imprisoning and killing large numbers of citizens, in the process. > I don't > know anyone in the military...INCLUDING people who are assigned to the "War on > Drugs"...who think this is a good idea. Friends of mine who have gone on > missions to assist in drug-siezing have outright stated that they were going > to watch for "stupid-shit" of which we all know law enforcement officials to be > capable. And I don't know anyone in a child-sex ring...INCLUDING those who only hold them down...who think this is a legal activity. Friends of yours who have gone on missions to assist in child-seizing have outright stated that they were going to watch for holes in the condoms being used. "If it saves the life of a single child..." > In other words, keep your head...because as you begin to fear imagined threats, > you're much less "on guard" against REAL threats to your individuality. I've been keeping my head in glass canning jars, and so far I have enough saved up to hold out for forty days and forty nights if the Y2K Volkswagen results in a shortage of Tequila, Kahlua and Cream. I, and countless other citizens, are fully capable of dealing with the REAL threats which life serves up on a daily basis. The 'imagined' threats are the ones that truly need to be guarded against, as they are the ones that the Oppressor uses most effectively to crush both the spirit and verse of the Constitution. > Hopefully, this rather opinionated little comment hasn't offended you too > terribly. Well, I am rather thin-skinned, but at least I'm not thin-scaled... > (Of course, I am aware that your response to my description of the reality of > modern warfare could have been humorous, but I know some people actually think > that there's some gigantic organized conspiracy to fuck with their heads. Some of the more mentally unstable of those indivdiduals actually believe that they are receiving secret messages through their televisions from large-breasted women who are attempting to sell them fast cars, toothpaste and other consumer goods. > There ARE a lot of tiny organized conspiracies, but you'd be bloody shocked > to find out how little influence they really have.) Certainly not as much as the 'large' organized conspiracies... > Tossing a golden soccer ball marked "Khallisti", > Dxmxtxy Tossing a golden lager marked "Pilsner", Txtx

1 0