December 2003 - cypherpunks-legacy

Re: CoS supoenas records of all anonymous remailers?
by Powers Glenn 17 Dec '03

17 Dec '03

- > The church of scientology plans to subpoena the records of every - >anonymous remailer in the USA. Isn't this in violation of the Electronic Communication Privacy Act? glenn

1 0

Re: No matter where you go, there they are.
by jim bell 17 Dec '03

17 Dec '03

At 08:41 AM 4/10/96 -0400, Perry E. Metzger wrote: > >Anonymous writes: >> >> Location-based System Delivers User >> Authentication Breakthrough >> >> By Dorothy E. Denning and Peter F. MacDoran >> Copyright(c), 1996 - Computer Security Institute - All Rights Reserved >> Top - Help >> > >A bunch of us heard about this a while back, and I was in on an >exchange between several people including Phil Karn and Dorothy >Denning. The gist of it is that Denning et al believe they have >something -- and they are smart people -- but all the smart people who >understand both GPS and crypto think its total bunk and not at all >hard to fake being anywhere at all. I would say that I go with the >latter. The latter is far closer to the truth. First off, GPS signals can be faked. In fact, there are commercial boxes sold that generate a full synthetic constellation of GPS signals; these boxes are usually intended to simulate motion of a vehicle when the GPS unit under test is actually stuck in a laboratory or factory floor. If such a box were connected to an amplifier of a few tens or hundreds of milliwatts, it would be possible to park near a potential target and deny him service by making it look like his signal came from anywhere else around the world. (Military boxes would detect this because of A/S, however.) And if you had a receiver at some specific location at which you intend to appear to be connected at, it is likely that full data describing the motions of the satellites could be supplied to any other location on the Internet needing well under 14,400 bps. Jim Bell jimbell(a)pacifier.com

1 0

Re: Anonymous Remailer threat: Scientologists may subpoena anonymous remailerrecords?
by jwarren＠well.com 17 Dec '03

17 Dec '03

>To: cypherpunks(a)toad.com >Subject: Scientologists may subpoena anonymous remailer records >Date: Tue, 09 Apr 1996 19:02:39 -0700 >From: John Gilmore <gnu(a)toad.com> > >I thought that most or all of the cypherpunk anonymous remailers don't >keep records. Not even on backup tapes. The whole idea is that there >aren't logs. But maybe they have found some remailers that are >non-cypherpunk. ... My understanding is that anon remailers come in two flavors: All of then anonomize X's msg to Y before forwarding it to Y as being "from" anonymous source, Z. The first flavor keeps a record matching X with Z. This allows it to accept responses to Z that it then re-matches and forwards back to X. The second flavor simply forwards without retaining any matching records at all. Of course, this then prohibits responses to the original msg sender via that remailer. My understanding is that the most famous remailer, anon.penet.fi, is of the first flavor -- and was raided by reps of the Church of Scientology, several years ago, with a Finnish search warrant, and that this produced some [much?] of the evidence against their opponent who had allegedly been splattering COS copyrighted "works" all over the net. (Interesting application of private property rights -- protecting religious secrets.) --jim And ... if I were a surveillance-oriented government agency, I would insert "watchers" at appropriate regional and national hubs that would routinely and automatically monitor every message ever sent to every identified remailer -- so as to protect against those evil whistle-blowers who dare to expose such govt's arrogance, abuses and/or wrong-doing, and the one or two vile terrorists who are stupid enough to use the net for communications without using world-available uncrackable crypto (that are the U.S. govt's official excuse for wanting to wiretap us all.)

1 0

RSA_dog
by John Young 17 Dec '03

17 Dec '03

IDC Government ("Better Government Through IT Research") has snail-mailed an 8-page report on the January 1996 RSA Data Security Conference on "The Future of Cryptography." For math hermits untracked by the RSA bloodhound: RSA_dog

1 0

Scientology harassing anon.penet.fi again!
by mirele＠xmission.com 17 Dec '03

17 Dec '03

forwarded from rnewman(a)cybercom.net (Ron Newman): Here's what Grady said to me in several messages. Note that they seem to be after anon.penet.fi again too. (He has given me blanket permission to distribute his e-mail to me to anyone who may find it of use.) ------- Date: Thu, 04 Apr 1996 08:52:38 -0800 To: rnewman(a)cybercom.net (Ron Newman) From: Grady Ward <grady(a)northcoast.com> I've just received e-mail from: kaj.malmberg(a)mallu.pp.fi (Kaj Malmberg) The Poilice CID in Helsinki who is being pushed by the criminal cult yet again to get a search warrant for Julf's anonymous remailer, claiming I have been violating my injunction to post cult crap. I told him that as usual the criminal cult is lying and that I gave him and Julf explicit permission to investigate any or all of my posts I have ever made through the remailer. The criminal cult is trying to use the fact of my injunction to further their own conspiracy theories. South Africa, Finland, where does it end? Grady ------------- Date: Fri, 05 Apr 1996 07:41:25 -0800 To: rnewman(a)cybercom.net (Ron Newman) From: Grady Ward <grady(a)northcoast.com> Subject: Re: Kaj Malmberg, Finland At 10:11 AM 4/5/96 -0500, you wrote: >Why did you give them this permission? I think it sets a VERY bad >precedent. Chris Schafmeister was upset when I mentioned this >on the IRC channel yesterday afternoon -- he thinks you're being >too nice, polite, and cooperative for your own good. I like to err on the side of openness. Each to their own I suppose. Basically I trust Kaj to sense who is the criminal perpetrator in this case. I also sent him the set of trial stipulations in the Snow White case that ought to give him very interesting background on the criminal cult. >In my opinion, Julf and the Finnish cop should Just Say No >to the CoS. He is still free to do as he wishes. ------------ Date: Tue, 09 Apr 1996 14:16:32 -0700 To: Ron Newman <rnewman(a)cybercom.net> From: Grady Ward <grady(a)northcoast.com> Subject: Re: a few more questions No one was with me. Total hours day one: 7.5 Total hours day two: 3.25 hours, as per order of Judge Infante. Also I believe all american anonymous remailers will be subpoenaed for their records as will all my ISPs, and contents of safety deposit box held as evidence. At 04:56 PM 4/9/96 -0400, you wrote: >Was anyone with you (on YOUR side) at either day's deposition? > >How many hours total did you go each day? > -------- Date: Tue, 09 Apr 1996 19:37:57 -0700 To: Ron Newman <rnewman(a)cybercom.net> From: Grady Ward <grady(a)northcoast.com> Subject: Re: what is the latest regarding penet? I don't know what's up today, but Julf wrote yesterday to tell me that my id grady(a)northcoast.com had NOT been used to go through his remailer. No word on what the police are doing to subpoena his system, if they are. Grady -------------- Date: Tue, 09 Apr 1996 22:57:26 -0700 To: rnewman(a)cybercom.net (Ron Newman) From: Grady Ward <grady(a)northcoast.com> Subject: Re: what is the latest regarding penet? That is all he told me: that he could verify to authorities that grady(a)northcoast.com had not used his remailer. He didn;t mention anyone else or how he was helping the CID with their inquiries. Yes, you can put this datum on the web. At 01:52 AM 4/10/96 -0500, you wrote: >Was something else used to go through his remailer? > >Has he said anything in public about this? > >Should I post your message about it on my web site? Grady Ward | | http://www.northcoast.com/~grady +1 707 826 7715 | | (voice/24hr FAX) | 34877c8566839cb7 | grady(a)northcoast.com | aeab8ec5e5ee97fe | -- Ron Newman rnewman(a)cybercom.net Web: http://www.cybercom.net/~rnewman/home.html mirele(a)xmission.com -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GAT d- s++ a C++ U P L E- W++ N++ o-- K++ w--- O++ PS++ PE-- Y+ PGP+ t 5 X-- R- tv-- b++ DI++ D++ G e++++ h+ r* x++ ------END GEEK CODE BLOCK------

1 0

Re: No matter where you go, there they are.
by JonWienke＠aol.com 17 Dec '03

17 Dec '03

In a message dated 96-04-10 10:33:19 EDT, D. Denning allegedly writes: >For two-way authentication, the reverse process would be performed. In the >current implementation, location signatures are 20,000 bytes. For >continuous authentication, an additional 20 bytes per second are >transferred. Re- authorization can be performed every few seconds or >longer. The location signature is virtually impossible to forge at the >required accuracy. This is because the GPS observations at any given time >are essentially unpredictable to high precision due to subtle satellite >orbit perturbations, which are unknowable in real-time, and intentional >signal instabilities (dithering) imposed by the U.S. Department of Defense >selective availability (SA) security policy. Further, because a signature >is invalid after five milliseconds, the attacker cannot spoof the location Umm, excuse me, but doesn't it take longer than 5 ms for a data packet to transit from point A to point B? We ARE talking about transmitting via the Net here, aren't we? >by replaying an intercepted signature, particularly when it is bound to the Replaying an intercepted signature would completely unnecessary. GPS positions are calculated by comparing the phase differential between several different satellite signals. It would be trivial for anyone who understands the inner workings of reprogram their GPS receiver (or build a hacked one) to give a false location. Simply calculate the distances to the satellites relative to your position, (GPS already does this to determine your position) and then calculate them in reference to another location. (This other location would have to be close enough to receive signals from four of the same satellites that you are receiving, if I remember GPS specs correctly.) Phase-shifting the signals according to the distance differences between your true location and the other location yields a signal set that can be fed into any GPS receiver to yield the other location, in real time. >message (e.g., through a checksum or digital signature). Continuous >authentication provides further protection against such attacks. See above. Is this a troll? Jonathan Wienke

1 0

Bank information protected by 40-bit encryption....
by droelke＠rdxsunhost.aud.alcatel.com 17 Dec '03

17 Dec '03

If you are the worring sort (or are looking for a ripe target) point your browser at: https://www.diginsite.com/clients.html There is a list of 23 Credit Unions - some (or all) of which allow transactions to be done over the net. A brief once over shows that it requires Netscape 2.0 or better so you will have encryption, but it does not warn you when you are using only a 40-bit session key vs. a 128-bit key. (Netscape wizards - is there a way that the server can detect this so that a warning message could be put up?) They also have some other information about their security at: http://www.diginsite.com/security/security.html I think it is GREAT that this kind of functionality is coming. I also think that the pioneers like this had better be prepared to be targets as I am sure they will be. Dan ------------------------------------------------------------------ Dan Oelke Alcatel Network Systems droelke(a)aud.alcatel.com Richardson, TX

7 11

CoS and anon remailers
by Jim Byrd 17 Dec '03

17 Dec '03

Here's more details. For quite some time the Church of Scientology has been pestered by an anonymous poster "Scamizdat" who regularly has been spilling cult secrets onto the net. These include directions on how to harrass critics. Scamizdat (whoever he is or they are) appears to have been using anonymous chained remailers. Grady Ward, a critic of the cult, has been taunting the cult with "Have you stopped Scamizdat yet?" I believe that Grady is almost certainly NOT Scamizdat. The church appears to have concluded that Grady is Scamizdat, has sued him, applied for a writ of seizure to raid his house (denied), and asked for a deposition (granted). It appears that Scientology is interesting in getting into the records of American anon remailers. They are also interested in anon.penet.fi. Once before, they raided anon.penet.fi when some of their internal information leaked out onto the net, and that poster has never been heard from again. Someone asked if this wouldn't violate the ECPA. In the past the cult has seized whole computers, complete with email, and ignored court orders to return them. The whole story may be found on http://www.cybercom.net/~rnewman/scientology/home.html Here is a file I got from Ron Newman's web page: --------------- Article 78833 of alt.religion.scientology: Path: news.cybercom.net!dial2-30.cybercom.net!user From: rnewman(a)cybercom.net (Ron Newman) Newsgroups: alt.privacy.anon-server,alt.religion.scientology,comp.org.eff.talk Subject: Warning - Scientology attacking remailers again! Date: Wed, 10 Apr 1996 11:15:40 -0500 Organization: Cyber Access Internet Services (617) 396-0491 Lines: 138 Distribution: inet Message-ID: <rnewman-1004961115400001(a)dial2-30.cybercom.net> NNTP-Posting-Host: dial2-30.cybercom.net Keywords: Scientology remailers anon penet anonymous Grady Ward Xref: news.cybercom.net alt.privacy.anon-server:3524 alt.religion.scientology:78833 comp.org.eff.talk:25569 The following are a series of messages from Grady Ward, which he has authorized me to distribute to the Net at large. Grady is being sued by the Church of Scientology for alleged copyright violation (they claim he is the mysterious "Scamizdat", which he denies.) For more details, see http://www.cybercom.net/~rnewman/scientology/grady/home.html http://www.northcoast.com/~grady/ According to Grady, the CoS has once again demanded access to anon.penet.fi, and may soon subpoena other remailers as well: ------- Date: Thu, 04 Apr 1996 08:52:38 -0800 To: rnewman(a)cybercom.net (Ron Newman) From: Grady Ward <grady(a)northcoast.com> I've just received e-mail from: kaj.malmberg(a)mallu.pp.fi (Kaj Malmberg) The Poilice CID in Helsinki who is being pushed by the criminal cult yet again to get a search warrant for Julf's anonymous remailer, claiming I have been violating my injunction to post cult crap. I told him that as usual the criminal cult is lying and that I gave him and Julf explicit permission to investigate any or all of my posts I have ever made through the remailer. The criminal cult is trying to use the fact of my injunction to further their own conspiracy theories. South Africa, Finland, where does it end? Grady ------------- Date: Fri, 05 Apr 1996 07:41:25 -0800 To: rnewman(a)cybercom.net (Ron Newman) From: Grady Ward <grady(a)northcoast.com> Subject: Re: Kaj Malmberg, Finland At 10:11 AM 4/5/96 -0500, you wrote: >Why did you give them this permission? I think it sets a VERY bad >precedent. [deleted] was upset when I mentioned this >yesterday afternoon -- he thinks you're being >too nice, polite, and cooperative for your own good. I like to err on the side of openness. Each to their own I suppose. Basically I trust Kaj to sense who is the criminal perpetrator in this case. I also sent him the set of trial stipulations in the Snow White case that ought to give him very interesting background on the criminal cult. >In my opinion, Julf and the Finnish cop should Just Say No >to the CoS. He is still free to do as he wishes. ------------ Date: Tue, 09 Apr 1996 14:16:32 -0700 To: Ron Newman <rnewman(a)cybercom.net> From: Grady Ward <grady(a)northcoast.com> Subject: Re: a few more questions At 04:56 PM 4/9/96 -0400, you wrote: >Was anyone with you (on YOUR side) at either day's deposition? > >How many hours total did you go each day? No one was with me. Total hours day one: 7.5 Total hours day two: 3.25 hours, as per order of Judge Infante. Also I believe all american anonymous remailers will be subpoenaed for their records as will all my ISPs, and contents of safety deposit box held as evidence. -------- Date: Tue, 09 Apr 1996 19:37:57 -0700 To: Ron Newman <rnewman(a)cybercom.net> From: Grady Ward <grady(a)northcoast.com> Subject: Re: what is the latest regarding penet? I don't know what's up today, but Julf wrote yesterday to tell me that my id grady(a)northcoast.com had NOT been used to go through his remailer. No word on what the police are doing to subpoena his system, if they are. Grady -------------- Date: Tue, 09 Apr 1996 22:57:26 -0700 To: rnewman(a)cybercom.net (Ron Newman) From: Grady Ward <grady(a)northcoast.com> Subject: Re: what is the latest regarding penet? At 01:52 AM 4/10/96 -0500, you wrote: >Was something else used to go through his remailer? > >Has he said anything in public about this? > >Should I post your message about it on my web site? That is all he told me: that he could verify to authorities that grady(a)northcoast.com had not used his remailer. He didn;t mention anyone else or how he was helping the CID with their inquiries. Yes, you can put this datum on the web. -------------- Date: Wed, 10 Apr 1996 07:17:01 -0700 To: rnewman(a)cybercom.net (Ron Newman) From: Grady Ward <grady(a)northcoast.com> Subject: Re: what is the latest regarding penet? Ron, Yes do please distribute my messages as you deem necessary. Some people ought to be aware of what is coming down. My feeling is that they will be doing anything they can to attempt to produce "hard evidence" that I am part of the Grand Conspiracy. I would say it is virtually certain that U.S. anon remailers will be subpoenaed as well as any foreign ones in which they can handle the authorities. Grady Ward | | http://www.northcoast.com/~grady +1 707 826 7715 | | (voice/24hr FAX) | 34877c8566839cb7 | grady(a)northcoast.com | aeab8ec5e5ee97fe | -- Ron Newman rnewman(a)cybercom.net Web: http://www.cybercom.net/~rnewman/home.html

1 0

Re: Anonymous Remailer threat: Scientologists may subpoena anonymous remailer records?
by Jim Byrd 17 Dec '03

17 Dec '03

At 11:01 AM 4/10/96 -0700, Jim Warren wrote: >My understanding is that the most famous remailer, anon.penet.fi, is of the >first flavor -- and was raided by reps of the Church of Scientology, >several years ago, with a Finnish search warrant, and that this produced >some [much?] of the evidence against their opponent who had allegedly been >splattering COS copyrighted "works" all over the net. (Interesting >application of private property rights -- protecting religious secrets.) The story is weirder than that. The first poster of church secrets (with lots of commentary) was Dennis Erlich, an ex-scientologist. Dennis was raided and sued, and is awaiting trial. His ISP, Tom Klemesrud, refused to cancel Dennis' account, and so was sued, and is awaiting trial. A lady met Klemesrud in a bar, identified herself as an IRS agent, and talked her way into Klemesrud's apartment. She proceeded to remove her clothes and spread blood all over the apartment. She there identified herself as a representative of the Church of Scientology. Klemesrud posted an account of this bizarre affair to alt.religion.scientology, and an anonymous poster "-AB-", using anon.penet.fi, posted a differing version of events. The Church went ballistic over this post, and raided anon.penet.fi to find the identity of -AB-. This turned out to be an alumni account at Cal Tech. The poster has never been heard from again. The raid on anon.penet.fi occurred in Feb. 1995. "Scamizdat" has never used anon.penet.fi, and his (their?) identity is still unknown.

1 0

Re: PEP Announcement (fwd)
by rah＠shipwright.com 17 Dec '03

17 Dec '03

At 10:17 PM 4/10/96, you wrote: > Thanks for the good review, Bob. You're absolutely right about the > pgp/original message window problem. I wrestled with it through most of >the > development process, and it remains the interface element I'd like to > change most. I ended up choosing the PGP window because I didn't want the > user to be faced with the choice of saving it unencrypted or losing it > forever. I did think, however, that it automatically verified and added > keys on decryption. Are you sure it doesn't? Got me there. I didn't even check for it. Heh. Now I know better... Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "Reality is not optional." --Thomas Sowell The e$ Home Page: http://thumper.vmeng.com/pub/rah/

1 0