December 2003 - cypherpunks-legacy

Tim's Tag Bi-Line
by John Young 17 Dec '03

17 Dec '03

>--Tim May > >There's something wrong when I'm a felon under an increasing number of laws. ---------- In response to Tim's tag line and to BXA's claim (twinned by NSA, FBI, CIA and DoJ) of training Janus crypto-narcs to snare dual-use miscreants: http://guru.cosc.georgetown.edu/~denning/cosc511/ Information Warfare: Terrorism, Crime, and National Security Prof. Dorothy E. Denning This course will study the nature of information warfare, including computer crime and information terrorism, in the global information infrastructure as it relates to national security, defense policy, economic security, organizational security, and personal security. Students will gain an understanding of the threats and vulnerabilities, including military and economic espionage, denial of service, destruction and modification of data, distortion and fabrication of information, forgery, control and disruption of information flow, electronic bombs, and psyops and perception management. They will learn about attacks and countermeasures, including authentication, encryption, auditing, monitoring, and firewalls, and the limitations of those countermeasures. They will learn about cyberspace law enforcement and investigations, information warfare and the military, and intelligence in the information age. Information technology policy and ethics will be examined. ----- This is not to single out the duality of Professor Denning/Mr. Denning. There are several similar dual-use courses being taught at civ-mi schools as market-wise institutions-governments scramble for funds-taxes by promising results to job-needy scientists-engineers and students-citizens. Heed the dual-use market/cartel, be an infoartist/informer, an inside-lawyer/outlaw; practice selfless public archy, greedy secret anarchy. That's the ticket for wise guys-gals, go either way as the bi-wind blows and stills.

1 0

Deloitte-Touche: Fraud and the Net
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: oldbear(a)pop.tiac.net Date: Thu, 24 Apr 1997 19:06:41 -0400 To: Digital Commerce Society of Boston <dcsb(a)ai.mit.edu> From: The Old Bear <oldbear(a)arctos.com> Subject: Deloitte-Touche: Fraud and the Net Mime-Version: 1.0 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: The Old Bear <oldbear(a)arctos.com> FRAUD AND THE NET A Deloitte & Touche report commissioned by the European Union says that cross-border fraud involving Internet abuse, banking and investment frauds, and smuggling is costing society $77 billion a year. The report suggests that perhaps the largest single threat comes from fraud through the Internet, because encryption technology remains vulnerable to sophisticated computer vandals. source: Financial Times April 24, 1997 Anyone have a pointer to the full report or a more detailed abstract? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ To unsubscribe from the dcsb list, send a letter to: Majordomo(a)ai.mit.edu In the body of the message, write: unsubscribe dcsb Or, to subscribe, write: subscribe dcsb If you have questions, write to me at Owner-DCSB(a)ai.mit.edu --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "...Wells Fargo's on-line banking sucks dead gerbils through a dirty garden hose." -- Eric Murray The e$ Home Page: http://www.shipwright.com/

2 1

New Crypto Panel
by John Young 17 Dec '03

17 Dec '03

Federal Register, April 24, 1997: DEPARTMENT OF COMMERCE President's Export Council Subcommittee on Encryption; Notice of Establishment The Secretary of Commerce has determined that the establishment of the President's Export Council Subcommittee on Encryption is in the public interest in connection with the performance of duties imposed on the Department by law. The Subcommittee will advise the Secretary, through the Assistant Secretary for Export Administration, on matters pertinent to the implementation of an encryption policy that will support the growth of commerce while protecting the public safety and national security. The Subcommittee will consist of approximately 25 members to be appointed by the Secretary to assure a balanced representation among the exporting community and those Government agencies with a mandate to implement policy regarding encryption. The Subcommittee will function solely as an advisory body. Interested persons are invited to submit comments regarding the establishment of the Subcommittee to Lee Ann Carpenter, Committee Liaison Officer, OAS/EA/BXA, U.S. Department of Commerce, MS: 3886C, Washington, D.C., 20230. Telephone: 202-482-2583. FAX: 202-501-8024. Dated: April 18, 1997. Sue E. Eckert, Assistant Secretary for Export Administration.

2 1

Re: Deloitte-Touche: Fraud and the Net
by John Young 17 Dec '03

17 Dec '03

Declan wrote: >I'd be happy to contribute towards the cost if someone else wants to take >up a collection and buy the report. (If it goes online, as I assume it >will, is this an example of a cypherpunkish "public good?") > >Or I can try to call up and get 'em to send me a copy as a journalist. ---------- Praps a local bloke can help us out: The source is given as the D&T office in London: http://www.deloitte-touche-consulting.co.uk/about-us.html Deloitte & Touche Consulting Group, Stonecutter Court, Stonecutter Street, London EC4A 4TR. Tel: 0171 303 3000 Sure, I'll buy it and pay for Fedex too; got my Amex and FX numbers ready. John ---------- Financial Times, April 24, 1997, p. 3. EU fraudsters 'revel in fiscal paradise' Report urges Brussels authorities to crack down on $77bn cross-border corruption By John Mason in Brussels International fraud in the European Union could be costing governments, companies and individuals up to $77bn a year, a report commissioned by the European Commission has concluded. Crimes such as Internet abuse, counterfeiting, banking and investment frauds and smuggling pose an increasing threat which can only be countered by further international action, said Deloitte & Touche, the accountancy firm. Harmonisation of laws and regulations, improved co-operation between states and a greater stress on fraud prevention are needed if EU economies are not to be undermined by international criminals, the report said. Mr Will Inglis, the Deliotte & Touche partner responsible for the report, said: "There is clear evidence that determined fraudsters deliberately and cynical]y manipulate and take advantage of the different regulatory and monitoring regimes across the EU to perpetrate their frauds. In particular, we see the fraudsters taking advantage of havens of secrecy and fiscal paradises. Fraudulent activity in the Union has the potential to seriously distort competition and harm the citizens of the EU who end up paying the cost." The report identified 10 areas of concern: computer abuse, banking frauds, counterfeiting, investment fraud, confidence tricks, public sector fraud, fraudulent bankruptcy, insurance fraud, smuggling and money laundering. The type of crime varies considerably between countries. In the UK, financial services fraud is a problem because of the size of the industry, France suffers particularly from counterfeiting of luxury goods, while in Greece the smuggling of antiquities is second only to the drugs trade in terms of crime. However, across the EU, the removal of restrictions following the creation of the single market and technological advances have opened up opportunities for fraudsters, the report said. Perhaps the largest single threat comes from fraud through the Internet, Mr Inglis said. The potential for abuse of computer systems is huge, particularly since encryption technology is vulnerable to sophisticated computer abusers. The Internet is now also being used to manipulate financial markets. In other areas, fraudsters are becoming more sophisticated. Insider dealers are making more use of offshore havens to avoid detection while criminal syndicates with knowledge of banking practice have cheated banks. Not that frauds all need to be sophisticated. Italian investigators discovered that Libyan dinars were being taken to Naples to be literally "laundered" with a solvent and re-printed as D-Marks. The incidence of cross-border frauds is increasing faster than those which take place only within one country, with organised crime playing a substantial role, the report said. Other perpetrators of fraud, although on a lesser scale, include senior company managers. The report points to lack of legal harmonisation: In some EU states it is not even an offence to bribe somebody in a different country. Action against fraud can also damage a member state's economy. The use of "offshore" havens, some inside the EU, remains a common feature of fraud. But with some EU economies closely linked to the offshore world, the incentive to push for reform in this area is limited. Fraud, especially crossborder fraud, tends also to be given low priority compared to other crimes. There is also less political will to tackle money laundering when this involves fraud rather than drugs. The report concludes there are four priority areas - increased legal harmonisation, improved co-operation between member states, a greater concentration on confiscating fraudsters' assets and developing awareness of fraud prevention. [Bar chart] Corporate Fraud. Countries involved, with two bars for each showing: Number of cases involving each region and number of times countries in this region were mentioned as being of concern. EU countries Tax havens/fiscal paradises Eastern European countries Others (including US and Asia) -- "Fraud without Frontiers", L95, Deloitte & Touche, 1, Stonecutter St, London EC4A 4TR. [End]

1 0

Alternative Reality
by Shift Control 17 Dec '03

17 Dec '03

Introducing... the Alternative Reality Issue of Shift Control. This week: "Inject it a number of times over a period of several hours and you will experience what psychology textbooks refer to as an "out-of-body experience". This is a recurrent theme in descriptions of the ketamine experience - the mind, spirit or soul leaving the body... Ketamine has similar mental effects on some animals - especially monkeys, who have been observed trying to swot non-existent flies while under its influence." - Alex Bellos on ecstasy's latest rival "Only sleep, books and disk storage mechanisms, with computers becoming our third lobe, allow us to cope with a world of accelerating travel and electronic communication. But these extensions to the human brain capacity will ultimately become inadequate, and so we might consider something new: the prospect of an implanted third lobe." - Peter Cochrane on building alternative human realities through technology "'Bud Hopkins, psychiatrist and expert on alien abductions' - just the man's name got me salivating. My brain whirred with associations. Bud equals Yank, Yank equals alien, alien equals cool... 'Did you see that bit in episode 27 when you could see Scully's cleavage as she e-mailed Mulder?' a voice whispered near to me. It was clear that experts in alien abduction were not to be messed with." - Leo Hickman on the fourth annual UnConvention of paranormal phenomena Also this week: a squeaky clean way to play with yourself in the bath, a chance to write your own film reviews, more memoirs from Freebee the bee, £200 up for grabs in another short story competition, and a chance to win dinner for two at your favourite curry house. Shift Control: altering your perceptions of the net and waiting for you now at http://www.shiftcontrol.com -------------------------------- Shift Control is produced by the Guardian's New Media Lab with help from Boddingtons and Stella Artois Dry. To unsubscribe from this mailing list send e-mail to shiftcontrol-request(a)nml.guardian.co.uk with the following text in the body of the mail message: unsubscribe

1 0

Texas declares war...
by Robert Hettinga 17 Dec '03

17 Dec '03

I love April 19th. Patriot's Day, indeed... <http://www.overland.net/~embthert/em03019.html> Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "...Wells Fargo's on-line banking sucks dead gerbils through a dirty garden hose." -- Eric Murray The e$ Home Page: http://www.shipwright.com/

4 5

Re: Bombs Away, from The Netly News Network
by azur＠netcom.com 17 Dec '03

17 Dec '03

At 3:50 PM 5/1/97, Jeff Barber wrote: >Declan McCullagh writes: >> "A >> member of the DoJ committee accessed a single web site >> on the World Wide Web and obtained the titles of 110 >> different bomb-making texts." > >I wonder if this was a bookstore. I did a search for "explosives" >on amazon.com and came up with at least that many titles. Only a >handful were of the Anarchist's Cookbook ilk. Most were academic or >industrial studies; a few were from US Govt or Govt-affiliated >organizations. Probably Paladin Press. Publisher of such notables, as Hit Man: A technical manual for independent contractors, a semi-fictional work with lots of details (written by an anonymous woman, BTW). See http://www.paladin-press.com PGP mail preferred Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 Key available on BAL server, http://www-swiss.ai.mit.edu/~bal/pks-toplev.html --------------------------------------------------------------------- Steve Schear | tel: (702) 658-2654 CEO | fax: (702) 658-2673 First ECache Corporation | 7075 West Gowan Road | Suite 2148 | Las Vegas, NV 89129 | Internet: azur(a)netcom.com --------------------------------------------------------------------- "I know not what instruments others may use, but as for me, give me Ecache or give me debt."

1 0

Re: Privacy news: Oakland Cameras
by azur＠netcom.com 17 Dec '03

17 Dec '03

>>How do you hack a camera? Physically damaging the camera works, but can get you jail time. A better solution, if you have a nearby office window facing the cameras, is to use a near-infrared laser (<$100) and blind camera. A strong IR signal will easily overwhelm the AGC circuit and cause the camera to behave as if its pointed into the sun. All video cameras contain an IR block, but it generally isn't sharp enough to cut off an 850 nm diode laser. --Steve PGP mail preferred Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 Key available on BAL server, http://www-swiss.ai.mit.edu/~bal/pks-toplev.html --------------------------------------------------------------------- Steve Schear | tel: (702) 658-2654 CEO | fax: (702) 658-2673 First ECache Corporation | 7075 West Gowan Road | Suite 2148 | Las Vegas, NV 89129 | Internet: azur(a)netcom.com --------------------------------------------------------------------- "I know not what instruments others may use, but as for me, give me Ecache or give me debt."

1 0

Re: Bypassing the Digicash Patents
by Hal Finney 17 Dec '03

17 Dec '03

Robert Hettinga, <rah(a)shipwright.com>, writes: > Again, it's using the right business model, and not necessarily > cryptography, which makes a market happen. Blind signatures and hash > collisions are necessary, but not sufficient, for the market to exist. Bob, if I understand you correctly, you've suggested that digital bearer instruments will in the long run actually be more efficient than conventional book entry based transaction models. Anonymity will be cheaper than identified transactions. But, if digital bearer certificates of all kinds are, as you suggest, cheaper and more efficient than conventional ones, why can't we just use ordinary non-blinded digital instruments and ignore the identifying information? For example, XYZ Co. could issue a signed note saying "Serial number 12345, worth 100 shares of XYZ Co.". A bank could issue a signed note saying "Serial number 54321, worth $100 at DigiBank". These can be done with ordinary digital signatures. No blinding or patent issues arise (by the end of this year, when the patents expire!). These are not blinded, so they are in principle traceable. They have to have unique serial numbers to solve the double spending problem, and those could be used to track them. This makes them less attractive from the privacy perspective, but what about from the point of view of the financial markets? Can they just ignore the serial numbers and treat them as the bearer certificates you have been talking about? (Don't real bearer certificates often have serial numbers on them?) Maybe this geodesic market you're talking about (which I don't understand at all) could work with current technology? Hal

3 2

Conference on UK Crypto Initiative 19 May 1997
by Dave Banisar 17 Dec '03

17 Dec '03

SCRAMBLING FOR SAFETY Privacy, security and commercial implications of the DTI's proposed encryption policy May 19, 1997 Computer Security Research Centre The London School of Economics Organised by: Privacy International Global Internet Liberty Campaign Chairman: Prof. Ian Angell, London School of Economics On May 19, the Computer Security Research Centre of the London School of Economics will host a one day meeting on the U.K. Department of Trade and Industry's policy paper "Licensing of Trusted Third Parties for the Provision of Encryption Services," The event is being jointly organised by Privacy International and the Global Internet Liberty Campaign. The LSE meeting - the only public meeting during the consultation phase - will comprehensively assess all aspects of the governments proposal. Security specialists, academics cryptographers, legal experts, cyber-rights groups, ISP's and other commercial organisations will participate. The DTI and representatives from other agencies will be in attendance for the entire day. There will be no cost for members of the public to attend. An interactive audiocast on the Internet will also be available. DRAFT AGENDA: Introduction to cryptography Welcome and opening remarks - Dr James Backhouse Keynote - Geoffrey Robertson QC (invited) The DTI proposals - presented by the DTI Perspectives: * Legal and Commercial - Peter Sommer (LSE) and Alistair Kelman (LSE) * Architectural and Technical - Dr. Whitfield Diffie, Sun Microsystems - Phil Zimmermann, PGP Inc. - Dr Ross Anderson, University of Cambridge - Dr. Carl Ellison, Cybercash * Civil Rights and Privacy - Simon Davies, Privacy International * International - OECD (invited) Section by Section analysis of the document. Wrapup (Around 3:30) MORE INFORMATION More information on the conference and the DTI initiative is available from http://www.privacy.org/pi/conference/dti/. REGISTRATION To register for the conference, email Simon Davies at davies(a)privacy.org. ABOUT PRIVACY INTERNATIONAL Privacy International was formed in 1990 as a watchdog on surveillance by governments and corporations. With members in more than 40 countries, it has created an international movement that has helped to counter abuses of privacy by way of information technology. Privacy International has conducted campaigns in Europe, Asia and North America to raise awareness about the dangers of ID card systems, military surveillance, data matching, police information systems, and credit reporting. It is based in London, UK, and is administered by the Electronic Privacy Information Center (EPIC) in Washington, D.C. Privacy International publishes a quarterly newsletter (the International Privacy Bulletin) and organizes conferences each year on privacy and technology. More information is available at http://www.privacy.org/ ABOUT THE GLOBAL INTERNET LIBERTY CAMPAIGN The Global Internet Liberty Campaign is an international coalition of 28 human rights, free speech, cyber-liberties and privacy groups that has come together to promote free speech and privacy on the Internet. More information is available at http://www.gilc.org/ ------- David Banisar (Banisar(a)epic.org) * 202-544-9240 (tel) Electronic Privacy Information Center * 202-547-5482 (fax) 666 Pennsylvania Ave, SE, Suite 301 * HTTP://www.epic.org Washington, DC 20003 * PGP Key http://www.epic.org/staff/banisar/key.html

1 0