December 2003 - cypherpunks-legacy

Re: AP Revisited
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

paul(a)fatmans.demon.co.uk writes: > > Like Insurance? By purchasing insurance you are in effect > > betting that you _will_ have an accident that does more damage than > > you have paid in premiums. > > > > Really contorted huh? > > Hmm, I hadn`t thought of that, this is an interesting way to see AP: > Taking out a life insurance policy on someone else... But of course - entities that sell insurance/write options refer to their business as "making bets" and that's exactly what it is. By the way a lot of people in the finance industry are compulsive gamblers who lose tremendous amounts of money on horses, sports events, Atlantic City, etc. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

2 1

congressman wants review of online banking system
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: oldbear(a)pop.tiac.net Date: Tue, 08 Apr 1997 17:58:51 -0400 To: Digital Commerce Society of Boston <dcsb(a)ai.mit.edu> From: The Old Bear <oldbear(a)arctos.com> Subject: congressman wants review of online banking system Mime-Version: 1.0 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: The Old Bear <oldbear(a)arctos.com> CONGRESSMAN CALLS FOR REVIEW OF ONLINE BANKING House Banking Committee Chairman James Leach (R-Iowa) has asked the General Accounting Office to review whether the Federal Reserve has sufficiently protected its Fedwire funds transfer and security transfer system from electronic trespassing. Fedwire processes around 380,000 securities and funds transfers totaling $1.6 trillion each day. source: BNA Daily Report for Executives April 7, 1997 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ To unsubscribe from the dcsb list, send a letter to: Majordomo(a)ai.mit.edu In the body of the message, write: unsubscribe dcsb Or, to subscribe, write: subscribe dcsb If you have questions, write to me at Owner-DCSB(a)ai.mit.edu --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA Lesley Stahl: "You mean *anyone* can set up a web site and compete with the New York Times?" Andrew Kantor: "Yes." Stahl: "Isn't that dangerous?" The e$ Home Page: http://www.shipwright.com/

2 1

Re: AP Revisited
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Dr. Roberts suggestively wrote: >>The War on Drugs was first declared by President Nixon. It has been a >>failure ever since. >No, the "War on Drugs" was in Vietnam. > >Dr. Roberts Lost that one too. AP is OK if it's a bounty on drug dealers. More hypocrisy. Ms. Dr. Roberts

1 0

Re: IRS raids a cypherpunk
by rlpowell＠calum.csclub.uwaterloo.ca 17 Dec '03

17 Dec '03

The followiing is an article that didn't even brng a hiccup to cypherpunks. WHERE IS EVERYBODY?? -Robin, sniff :-( In article <v03007807af6a270a11d5(a)[168.161.105.191]> Declan McCullagh <declan(a)well.com> writes: Path: news.csclub.uwaterloo.ca!not-for-mail From: Declan McCullagh <declan(a)well.com> Newsgroups: csc.lists.coderpunks Date: 3 Apr 1997 23:41:04 -0500 Organization: University of Waterloo Computer Science Club Lines: 79 Sender: daemon(a)calum.csclub.uwaterloo.ca Approved: mail2news(a)csclub.uwaterloo.ca Distribution: csc NNTP-Posting-Host: calum.csclub.uwaterloo.ca Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" X-Sender: declan(a)mail.pathfinder.com Precedence: bulk Xref: news.csclub.uwaterloo.ca csc.lists.coderpunks:1207 [I've attached some excerpts from the article. Check out the URL below for the whole thing. --Declan] ******** http://cgi.pathfinder.com/netly/editorial/0,1012,800,00.html The Netly News Network April 3, 1997 IRS raids a cypherpunk by Declan McCullagh (declan(a)well.com) Jim Bell's first mistake was publishing an essay describing how disgruntled citizens could kill off Federal government agents by using anonymous betting pools and digital cash. His second mistake was informing the IRS that the agency had no legal authority to tax him. About twenty armed IRS agents and other Federal police swarmed into Bell's home in Washington state on Tuesday morning, hunting for evidence that Bell's "Assassination Politics" essay had come to fruition. They expropriated Bell's three computer systems, two guns and even a solitary mouse cable. The Feds were taking no chances: Since Bell's voluminous Net postings mentioned tax collectors, agents from the BATF, FBI, DEA, and local police forces joined the raid. [...] The raid stemmed from a six-month tussle between Bell and the IRS, which began in November 1996 when the 38-year old computer engineer demanded a hefty tax refund and threatened to convene his own "common-law court" if it was refused. That grabbed the Feds' attention. (So did the actions of the "Multnomah County Common Law Court," which apparently met in January to convict IRS agents and Attorney General Janet Reno of "theft by deception.") In February, IRS agents seized Bell's 1986 Honda as payment for back taxes -- and found inside it a printout of his "Assassination Politics" essay. " [...] And it was, ultimately, a Federal magistrate who signed the search warrant on 9:02 am on March 28 at the request of the IRS. Jeffrey Gordon, an inspector in the IRS' Internal Security Division, details in an 10-page affidavit how he traced Bell's use of allegedly fraudulent Social Security Numbers, how he learned that Bell had been arrested in 1989 for "manufacturing a controlled substance," how he found out that Bell possessed the home addresses of a handful of IRS agents. Gordon's conclusion: Bell planned "to overthrow the government." The IRS investigator says in his affidavit that Bell's "essay details an illegal scheme by Bell which involves plans to assassinate IRS and other government officals... I believe that Bell has begun taking steps to carry out his Assassination Politics plan." [...] ------------------------- Time Inc. The Netly News Network Washington Correspondent http://netlynews.com/

2 1

Re: Black box attacks (was Re: Crypto-Dongel)
by Dave Emery 17 Dec '03

17 Dec '03

Lucky Green wrote : > It is true that methods exist to recover data from RAM even after it has > been "erased". First and foremost, there are physical processes taking > place in the substrate that cause permanent changes in the cells containing > the data. In general, if there is a chip left to analyze, the data that > used to be stored within can be obtained. [The particular opponent may of > course choose not to spend the funds required to perform the analysis.] > > The only way to reliably remove data from RAM is to destroy the substrate. > I recently investigated various methods of doing so for a certain high > security application. My research showed that the only portable (and truly > reliable) solution for this task are micro explosives. Perhaps > unsurprisingly, the US uses explosives to protect the electronics in > nuclear weapons. The local ATF office informed me that any device using > explosives to destroy its contents would be considered a booby trap, even > if the explosion would be contained to the inside of device and therefore > not pose a danger to the operator. > I have heard about thermite devices being used for this in the sort of applications that might warrent it. Granted that this is a royal fire hazard unless very carefully engineered, but at least it is not an explosive per se.... One can reduce this effect somewhat by implementing software or hardware methods that complement the key or whatever you are protecting every few seconds. But I can testify, as someone who has done hardware design, that the memory effect is real and very pronounced... not a myth. Dave Emery die(a)die.com

2 1

Re: Anti-Spambot: what algorithm should be used?
by Ross Wright 17 Dec '03

17 Dec '03

On or About 8 Apr 97 at 21:05, Dr.Dimitri Vulis KOTM wrote: On or About 8 Apr 97 at 21:05, I think it was Igor who wrote: > > will pay nothing and let Bob sue the forger for the lost income. > > (This may become moot as more and more ISPs ignore forged > > cancels.) This gives Bob the insentive to spam intelligently - not > > to trigger any cancelbots and not to have his plug pulled by his > > ISP. Right, but this is where a tool comes in that lets you post a seemingly "on topic" post to hundreds of newsgroups with the "Drink Kaka Kola, Elect John, etc." in the sig file. This also makes it harder for an article to be canceled, I imagine. Or you can do it by hand. I am sure that in a 40 hour week I could post seemingly "On-Topic" to many newsgroups. Hell, I'm doing this on a minor scale right now. Bob just needs to be *really* smart. And if he has a good relaitionship with his small, local ISP, then he can proceed as normal. Hell, I never get complaints anymore. Yet, every time I post I advertise my company. Then: On or About 8 Apr 97 at 21:05, Dr.Dimitri Vulis KOTM wrote: > After Alice's bot finds an eligible Usenet article, it should wait a > week or so to see if it was cancelled or superseded before issuing a > payment. If it's cancelled, then instead of payment it should send a > notice saying: > "Your article with message-id blah posted to blah contains > a message that I'm paying to promote. I would have paid > you $n e-cash, but unfortunately a cancel has been issued > for your article: <quote cancel>" > That should get Bob pretty mad at the 3rd party canceller. :-) Boy, I would be pissed off if I was Bob. This is definitely the scary end of the internet. Most people will never even know about this rash of first amendment violations, that you are calling "forged cancels" and "plug pulling". I am so glad I fell into these groups when I joined the net just about 20 months ago. Funny thing is, it's right where I belong. I always speak my mind and have been known as a trouble maker in the workplace. > Alice needs to maintain a map of (poster,newsgroup,regexp) to # > posts; when it reaches 100, stop paying this poster. I think 100 > mentions by the same poster is way past saturation. > > Ross: yes, unfortunately the spambot is on the back burner right > now, but I definitely will finish it eventually. Well, it seems to me that this is where this conversation is leading. The technology you are talking about here, without talking about it, is quite exciting to me. I'll be reading. Still looking for HP Vectra RS input, Ross =-=-=-=-=-=- Ross Wright King Media: Bulk Sales of Software Media and Duplication Services http://www.slip.net/~cdr/kingmedia Voice: 415-206-9906

1 0

Re: Another Article on Jim Bell from the Oregano
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:18 AM 4/5/97 -0800, you wrote: >As for the "drug conviction", he was nailed for possession of phenyl acetic >acid in 1989. The government tried to prove that he was trying to manufacture >meth, but was unable and Jim pleaded guilty to a lesser charge. >(Of course, >what are prohibited molecules and non-prohibited molecules is an ever >changing maze. It is pretty hard to keep track of what is "legal" and >"illegal" in that area. Seems to be "whatever we say it is". It's actually quite straightforward - it all depends on the intent of the molecules being arrested. If they're just loitering around, it's not illegal, but if they're loitering with intent to commit public intoxication, or conspiring to form an illegal syndicate, you may be in big trouble.... # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

1 0

new ,CRIPT password
by Sebastia Lancho 17 Dec '03

17 Dec '03

Hi ! I'm Sebastian from Barcelona. I'm new on internet. I'm a developer.In my first project I did a homebanking but I don't know how cript the password of the users. If somebody has a little C function that can do this please send me! and report me information! many thanks Sebastian tan(a)mss.es

1 0

Re: Sweden Netscape Intra
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- -=> Quoting In:tcmay@got.net to Harka <=- In> The Swedish plan is something to be avoided. Consider just a few In> quotes: Actually, I was just flying over the text before forwarding it. But after reading it in depth, I agree with you. In> The government gives out the mailboxes. Wanna bet they give out the In> keys, too? Not only that but it would create the e-mail monopoly, that would be the destruction of the de-centralized nature of the Internet (e-mail being part of it). Just imagine, how easy it would be to have a few well publicized cases of remailer-abuse and the Swedish Postal Office therefore decides to automatically block all mail coming from (and maybe even to) remailers. With the majority of people having no clue about remailers in the first place (except what the press will feed them) the protest will be small enough to be ignored. That could even be extended to crypto, as you indicate. If Sweden ever outlaws cryptography, the monopoly would provide a perfect setting of enforcing such (with the few exceptions of where stego is used). The same applies to content and traceability of e-mails. In> (Yes, I understand that the system is being presented as "voluntary." In> For how long? And what happens to non-PTT ISPs when the PTT is a state In> monopoly? (Imagine what would happen if the U.S. Postal Service made a In> deal wherein AOL became the favored provider.) Market-driven "voluntary" measurements tend to be rather forced upon people than anything else. If something is standard then you'll have to use it because most other people do too. That is the danger with monopolies of any kind. This, I am afraid, will happen with crypto-issues in the US itself. I am almost certain, that Windows 97 will adress cryptography in one way or the other. If they put in means to encrypt e-mails for example right from the operating system and independent of the provider, then this would be the death-blow to PGP. And considering the talk about "key-management-infrastructure", then this will be probably the best means to achieve it. In fact, it might not even be a GAK-enabled system, but one that's easy to crack (propriatory algorithm or whatever). The civil-liberty groups have no GAK-issue to talk about anymore and few will understand, why "security through obscurity" is not good. The majority however, who doesn't care anyway much about crypto, will use that slick Windows interface and not worry any further. That would be cause for celebration at the TLA's and the end to wide-spread strong crypto. Ciao Harka /*************************************************************/ /* This user supports FREE SPEECH ONLINE ...more info at */ /* and PRIVATE ONLINE COMMUNICATIONS! -> http://www.epic.org */ /* E-mail: harka(at)nycmetro.com (PGP-encrypted mail pref'd) */ /* PGP public key available upon request. [KeyID: 04174301] */ /* F-print: FD E4 F8 6D C1 6A 44 F5 28 9C 40 6E B8 94 78 E8 */ /*<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>*/ /* May there be peace in this world, may all anger dissolve */ /* and may all living beings find the way to happiness... */ /*************************************************************/ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBM0oCzzltEBIEF0MBAQEf4gf/ZINVtWwqyIzYXbi7uDxmTKCdfMS1Xujj /AlYGsmjUeh7UduN2q8YmRqzfuUhA6SNOaT0La+QuqzIOImmY3MfbH9tWc+xWqNQ 4cUC/aPFAl/7SxbXA4lsL4QD8Vnf3Tf2bxt5XUC7TO6lfEW91hblnz1WV2OVimgt pBGhv8b0td+CIAPnGd8WoscbH1NtgZMz+bLaF9zTl22KZerd8tfUbDhPQjWHOzgv Ck0mXTuOPpRXYTO+U9tua1U/Nz2dJN/+VXJO3nUfJOJ8C5eAHimji+IbsoWt1jur O27KvFuIhPtDaQIenv62G8ClmVxvd+XzIJ+43XnEU4r3PmFHgDJLjg== =wREG -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

1 0

Cipher newsletter
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- == Forwarded Message Follows ========================================= Vance Bell wrote: From: vbell(a)dept.english.upenn.edu (Vance Bell) Subject: Cipher Date: Sun, 6 Apr 1997 16:46:08 -0400 (EDT) Cipher http://www.itd.nrl.navy.mil/ITD/5540/ieee/cipher/ Cipher is the electronic newsletter of the Technical Committee on Security and Privacy, IEEE featuring Security and Privacy News Briefs, Conference Reports, Commentary and Opinion on computer security and privacy issues. Recent articles: Security and Privacy News Briefs * LISTWATCH: Items from security-related mailing lists by Mary * UK Policy on Licensing TTPs Proposed, Criticised * Two New Sources of Random Numbers * Attack Reports and Responses * U.S. Computer Security Breach During Desert Shield? * New IETF Working Group Formed to Standardize SSH * News items from past Cipher issues Conference Reports * Report on 1st Annual Workshop on Education in Computer Security (WECS '97) * Report on ISOC Symposium on Network and Distributed System Security '97 Commentary and Opinion * Practical Experimentation in Information Security Education (A brief report from a survey) *Summary of Comments on "A Serious Problem for Key Escrow Systems?" Contact: Carl Landwehr, landwehr(a)itd.nrl.navy.mil - ------------------------------ == End Forwarded Message ============================================== Ciao Harka /*************************************************************/ /* This user supports FREE SPEECH ONLINE ...more info at */ /* and PRIVATE ONLINE COMMUNICATIONS! -> http://www.epic.org */ /* E-mail: harka(at)nycmetro.com (PGP-encrypted mail pref'd) */ /* PGP public key available upon request. [KeyID: 04174301] */ /* F-print: FD E4 F8 6D C1 6A 44 F5 28 9C 40 6E B8 94 78 E8 */ /*<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>*/ /* May there be peace in this world, may all anger dissolve */ /* and may all living beings find the way to happiness... */ /*************************************************************/ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBM0oDDjltEBIEF0MBAQGisAf+LYkc1Pn7UGdkW5TyjR+Lz1gZ2/Qn1izJ m8aIydx1bHkkRTarV432i69l+SPV8BeWjHIELBNSDfTQ+rci2AFRvxBHdBquyl0A KLjdvhek2fJNn9vC8eifDpE0wM4VR+Fn7RfHFwMMr4CxocZlMxkXseebQ4hsviVk eJb8dbz4oFYtE4AXhNCzCsAx9LQNojJgxq+xGzMnBreTGNDZtRdKhi7MMhiWCmFp u2FQ9lpNs2I8wdlAuHIYAUg11gylkKk7iwUJ1fVLgaeCBww7da2TFcl7ybLvMx0Z m9GYeo9bsWpRFJuJcZxa2mLo0DksDPfHytqcxyGNyb7ebPkZJ4lLww== =6Ly2 -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

1 0