December 2003 - cypherpunks-legacy

From Spyking: DNA Technology (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 25 Sep 1998 04:32:13 +0200 > From: "Albert P. Franco, II" <apf2(a)ctv.es> > Subject: From Spyking: DNA Technology > the target. Now they'll have the tools to do it. The same cop investigating > your car this month could inadvertently (or not) deposit a few traces of > your skin dust at the scene of a crime next month. They keep getting > scarier all the time! This is exactly why we won't see this become standard practice in the majority of cases, the expense of guaranteeing the evidence trail. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re: Stego-empty hard drives... (fwd)
by Albert P. Franco, II 17 Dec '03

17 Dec '03

>From: Jim Choate <ravage(a)einstein.ssz.com> >> From: "Albert P. Franco, II" <apf2(a)ctv.es> > >> I can't imagine that anyone that wasn't already sure that you were playing >> tricks with the HD would be able to detect either of these on a normal >> startup. Again I think the key is that it would vastly expensive and very >> time consuming for customs services to make more than a cursory check. More >> and more people are carrying notebooks with them on trips and just like >> most bag searching has ended due to very fast, but not perfect, technology, >> notebook scanning is limited by the very important public factor--the >> people waiting in line behind you will tend to get very anxious. :) > >That's a rationale for doing TEMPEST scanning I hadn't thought of. Since it >is time consuming and takes special training (which means higher personel >budgets that don't amortise over time like hardware) to operate a floppy >scanner and interpet the results there are budget forces involved. > I snipped the rest, but your point ignores that they still have to scan my hard drive for what they are looking for. So TEMPEST on top of the other measures just makes things slower. Also the vast variety of computers and clock speeds on the market today would make a 30 byte (10-20 clock cycles ... )BIOS patch virtually undetectable. Again...UNLESS they want YOU in particular. I would be more concerned about a Unix-like OS on their disk-following THEM to bypass my BIOS to read the HD. Of course, perhaps another way around this may be to carry a couple copies of an NDA and an Acceptance of Liability for Damages Caused contract. Tell the stooge at the counter that your machine contains highly valuable commercial information and that if it's damaged in any way, shape or form he/she will be held personally liable. Offer the two documents for his/her signature as you explain that since the procedure they intend to use is so fool proof (the stooge is sure to quote the party line...) this would only strengthen your case that damage or discloser to/of contents must be a direct result of negligence or criminal intent on the part of the stooge. "If you can't dazzle 'em with brilliance, baffle 'em with bullshit." It works for Clinton! Al Franco, II

1 0

Smoke a spammers phone bill...try it, it's their quarter
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: mmanning68(a)hotmail.com > Date: Thu, 24 Sep 1998 02:30:55 -0700 (PDT) > Subject: Did you receive my last message? > It is finally here............... > Your own bulk friendly ISP! > And we are giving them away for FREE! > ************************************************** > To proof it, we are willing to give you, your > own e-mail account for the next 30 days for FREE! > See yourself - The earning potential is enormous! > *************************************************** > so please mention access 474- E for this > special offer. Call today! 1.800.600.0343 ext 2669 > and we will give you all the details. Enjoy! ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Urgent - ABC coverage on One Nation
by Scott Balson 17 Dec '03

17 Dec '03

Dear One Nation supporter Att 6.55pm the ABC will be carrying a 5 minute address by One Nation. We apologise for the short time warning, but we have just been advised. The One Nation Health Policy released today is now on line at: <A href="http://www.gwb.com.au/onenation/policy/health.html">http://www.gwb.com.au/onenation/policy/health.html GWB Scott Balson Pauline Hanson's One Nation Web Master

1 0

IP: Biometric Signature for "Forms w/o Paper"
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: believer(a)telepath.com Subject: IP: Biometric Signature for "Forms w/o Paper" Date: Wed, 23 Sep 1998 08:32:25 -0500 To: believer(a)telepath.com Source: PR Newswire http://www.prnewswire.com Doxis, Inc. Announces Forms Without Paper Version 2.1 Computerized Data/Document Input And Storage System New Release Lets Pharmaceutical Workers Input Process and Analytical Forms/Data Into Secure Document Databases, With Improved Document Authoring Features and Capabilities. Communicates With Key Enterprise Systems. Visit Doxis at WorldPharm '98 Booth #1033 NORWOOD, MA Sept. 22 /PRNewswire/ -- Lewis Bell, President and Chief Executive Officer of Doxis, Inc., Norwood, MA, a pioneer and leader in the development of mobile computer-based forms management software systems, announced today, at WorldPharm '98, the latest version of Forms Without Paper(TM) -- Version 2.1. Doxis developed and markets Forms Without Paper -- the first software package that allows mobile pharmaceutical workers to input critical, real-time batch process, research and analytical forms and data -- with biometric signatures -- directly and interactively into a secure document database. The original data is locked into the form, the electronic equivalent of the original paper copy. However, data can also be made available to enterprise databases without retranscription, and without altering the original form. Forms Without Paper is a client server software toolset that provides data for trend analysis, and can be customized to interface to standards compliant MES (Manufacturing Execution Systems), LIMS (Laboratory Information Management Systems), and ERP (Enterprise Resource Planning) systems. Lewis Bell, Doxis, Inc., President and CEO, said, "Forms Without Paper Version 2.1 features a more advanced and flexible document authoring architecture designed to better facilitate and speed the process of changing and revalidating forms. This is a major breakthrough in computerized data/document input and storage, and provides tremendous advantages to pharmaceutical manufacturers who wish to use electronic records." Forms Without Paper Version 2.1 provides a superior vehicle for the collection of handwritten forms and data by mobile workers. It bridges gaps between the capture of handwritten, signed documents and data collection in highly regulated industries such as pharmaceutical and HBA manufacturing. These industries now have the ability to automate the capture of these documents and data at the point of work. They can also share it over worldwide enterprise systems, with their document management systems, and with other systems, including MES and LIMS. According to Bell, using Forms Without Paper Version 2.1, pharmaceutical companies now have a way to computerize both their existing paper-based batch records and laboratory data sheets that is based upon their current paradigm, and, therefore, is intuitive, non-disruptive to their operations, and painless to implement by industry standards. The software enforces version control and increased accuracy of data collection. It automatically verifies data integrity and applied tolerances per field. It proactively enforces compliance with SOP's, and provides a patented audit trail for changes. The orms Without Paper client runs on a pen-based terminal operating under Windows 95(R)/98(R) -- the equivalent of an electronic clipboard. The hand held unit communicates with the server via wireless LAN. The new release will be available in the first quarter of 1999 to pharmaceutical and consumer product manufacturers subject to FDA regulation. Bell is quick to point out that the new system does not obsolete existing forms processes, but rather automates them, making them more efficient and secure, and less error prone. "Many companies do not want to reinvent the wheel when it comes to processing the forms they use throughout their operations," Bell states. "However, they do want a better way to ensure the accuracy and timeliness of their forms. They want to control their forms throughout their life cycles, as the valuable corporate assets they are." Using Forms Without Paper, a worker now enters the data onto the electronic clipboard using a pen, just as he or she would when using a paper form. The layout of the form is the same as the paper version, and workers can also print out the paper form if they need to. As it is collected, information is date and time stamped, operator identified, and secured within the intelligent form to provide a cGMP compliant audit trail that will include all information captured in association with the data. Digital signatures that are captured are non-excisable, and can also be verified to authenticate the entry, if desired. Completed forms are stored in a Secure Document Database. Once transferred to the user's network, information is available to backend ODBC databases, desktop applications, and ODMA standards compliant document management software. Forms Without Paper can also be used as a front end to enterprise packages such as SAP(R) and BPCS(R), allowing pharmaceutical companies to extend the reach of these applications to mobile workers. Training on the system is available, as well as consultation and professional services, including validation services. Distribution, product support, consultation and professional services will be handled through the Doxis direct sales channel. Forms Without Paper(TM) and Doxis are registered trademarks of Doxis, Inc. All other companies and products mentioned are trademarks of their respective companies. SOURCE Doxis, Inc. ©1998 PR Newswire ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer **********************************************

1 0

IP: Fwd: SHOWDOWN AT THE FCC (Microbroadcasting)
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: Bridget973(a)aol.com Subject: IP: Fwd: SHOWDOWN AT THE FCC (Microbroadcasting) Date: Wed, 23 Sep 1998 21:50:00 EDT To: ignition-point(a)majordomo.pobox.com Date: Tue, 22 Sep 1998 23:42:07 -0400 (EDT) From: Sara Zia-Ebrahimi <sazF95(a)hamp.hampshire.edu> To: chatski(a)gl.umbc.edu please forward to anyone you know who would be interested UPDATE!!!! SHOWDOWN AT THE FCC!!! FREE RADIO ACTIVISTS MARCH ON WASHINGTON TO CONFRONT THE GLOBAL MEDIA MONOPOLY AND THEIR MARIONNETTES IN GOVERNMENT! Sunday October 4th and Monday October 5th Calling all media activists, radio pirates, people for a democratic media and people just fed up with crappy corporate radio: Come to DC for the first national mobilization for free radio. Microbroadcasters from around the country will gather for two days to share radio skills, organize alliances, speak out to the media and protest at the FCC and NAB buildings, culminating in a live broadcast straight into the offices of the people working so hard to shut us down. Free Radio Berkeley, Radio Mutiny, Steal This Radio and other microstations have all broadcasted live in public and challenged the FCC to shut them down in the light of day, in front of the press and the Feds have never dared to show their face- this time, we're going to take it right to their doorstep and tell them that if they're so sure that their dumb law is worth enforcing, then the Chairman should come down from the 8th floor and put the cuffs on us himself. There will also be workshops to help new folks start stations, appointments will be made to lobby congress people, and press events will be held to show the true, diverse face of the microbroadcasting movement. Schedule Sunday, Latin American Youth Center: @1419 Columbia Rd. NW DC 10am-12pm: *Everything you need to start a community station besides a transmitter: facilitated by Joan and Eli of Free Radio Memphis *The FCC petitions: What's in it for us?: facilitated by Benn Kobb, Stuart Poritzky and Bill Spry *The current legal situation: facilitated by Alan Korn of the Committee for Democratic Communications, Scott Bullock from the Institute for Justice 12-1 lunch 1-3pm: *Transmitters 101: facilitated by Bill Gorz *Starting a legal application to position for another First Amendment case: facilitated by Pete triDish and Alan Korn *The threat of media concentration to democracy: facilitated by Greg Ruggiero from Steal this Radio 3-5 pm: *Transmitters 202: facilitated by *Commercial vs. non-commercial micro-stations: facilitated by Alan Korn *Publicity: Tips on talking to the press and lobbying for support: Jesse Walker of the Competitive Enterprise Institute and Diane Imelda Fleming 5-6:30 dinner @La Casa 3166 Mt. Pleasant St. NW DC 7pm party/puppet making for demonstration @La Casa Monday 9 am Panel and Debate at the Freedom Forum: an event which will probably be broadcast on NPR featuring micro-broadcasters, lawyers and FCC offcials head-to-head

1 0

IP: Biometric Security Showcased at Int'l Conference
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: believer(a)telepath.com Subject: IP: Biometric Security Showcased at Int'l Conference Date: Wed, 23 Sep 1998 08:28:26 -0500 To: believer(a)telepath.com Source: PR Newswire http://www.prnewswire.com SAFLINK and Unisys to Showcase Biometric Security Solutions for Banking at World Wide Users Conference TAMPA, Fla., Sept. 22 /PRNewswire/ -- SAFLINK Corporation (Nasdaq: NRID), a leader in the implementation of biometric technology in the financial industry, will be participating in Unisys Corporation's second annual FBA Navigator Users Conference, October 4 - 7 in Puerto Rico.The conference provides an opportunity for users, and prospective users, of Unisys FBA Navigator retail delivery suite to discuss trends and issues in the banking industry, learn about Unisys product plans, provide feedback to Unisys, and meet with peer users from around the world. Targeted at bank marketing and delivery channel executives, and at senior technical professionals, the conference theme is "Multiple Channels One Solution."Presentations and interactive business sessions focus on one of the most critical issues facing bankers today: how to maintain a consistently high level of customer service while securely delivering products and services through a variety of channels.Among the delivery channels the conference will address are the branch, the call center, the Internet and mobile banking. Conference highlights include: -An on-site tour of Westernbank, a Unisys FBA Navigator client and a SAFLINK finger imaging client.The tour will highlight the recently installed Unisys retail branch solution, which includes finger imaging hardware and software from SAFLINK.Attendees will also receive a private demonstration of the solution and will have an opportunity to address questions to Westernbank, Unisys and Unisys business partners, including SAFLINK, Microsoft Corporation and Genesys Corporation, during a panel discussion following the site visit. -A keynote address by Dr. James B. Moore, Ph. D., President and CEO of highly respected Mentis Corporation, a leading financial services research firm.Mentis recently published a research report on biometric technology entitled 'Beyond the PIN: Evolving Strategies and Implementations of Biometrics-Based Recognition for Financial Services,' which included an overview of SAFLINK's kiosk installation at Purdue Employees Federal Credit Union.(Further information about Mentis is available through the company's web site at http://www.mentis.com.) -A thought-provoking slate of business and technical sessions designed to address the benefits of a multi-channel strategy, and to highlight various implementation considerations and approaches. -A dinner in Mayaguez, sponsored by Unisys, SAFLINK, Microsoft and Genesys, with a special "Welcome to Puerto Rico" address by Frank C. Stipes, President of Westernbank. SAFLINK, a Unisys Marketing Associate business partner, has worked with Unisys to seamlessly integrate biometric technology with the highly regarded Unisys FBA Navigator retail delivery solution.Capabilities developed with Unisys include customer identification, and teller/supervisor log-on and transaction approvals."Our partners add key capabilities to the FBA Navigator solution, to the ultimate benefit of our customers" said Judy Jones, Unisys FBA Navigator Program Director."We are very excited about our partnership with SAFLINK, which enables us to offer our retail delivery clients leading-edge biometric authentication." Westernbank is the first Unisys customer to install the integrated FBA Navigator/SAFLINK solution."We cannot say enough good things about how well this partnership has worked" said Israel Lorenzana, Unisys Account Executive, for Westernbank Puerto Rico."SAFLINK's expertise in integrating biometrics, along with the outstanding support from their technical staff, helped the development and integration effort move quickly.Their willingness to participate in every aspect of the project, including areas such as user training and helping the bank develop informative customer brochures, also contributed to the success of this installation.They are key players in the Westernbank/Unisys team." About SAFLINK SAFLINK Corporation, a National Registry Inc. subsidiary based in Tampa, Florida, brings the Power of Biometric Identificationa to enterprise networks and the Internet.The Company provides cost-effective multi-biometric software solutions to verify individual identity, to protect business and personal information, and to replace passwords and PINs in order to safeguard and simplify access to electronic systems and enable new online services for customers.The Company's Secure Authentication Facility (SAF(TM)) suite of multi-biometric network security products delivers enterprise-level secure access control to a range of software platforms and network applications, including Microsoft(R) Windows NT(R) and Internet Information Server(R). Further information is available through the Company's World Wide Web Site (http://www.saflink.com) About Unisys Unisys is an information technology solutions provider that has a portfolio of information services, technologies and third-party alliances needed to help clients capitalize on their information asset to enhance their competitiveness and responsiveness to customers. Unisys expertise is founded on the strengths of three global businesses: Information Services, providing consulting, application solutions, systems integration and outsourcing; Computer Systems, providing industry-leading technologies; and Global CustomerServices, delivering comprehensive services and products supporting distributed computing environments. Access the Unisys home page on the World Wide Web -- http://www.unisys.com -- for further information. SOURCE SAFLINK Corporation Web Site: http://www.mentis.com ©1998 PR Newswire. ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer **********************************************

1 0

TODAY'S NEWS AND PICS PACKED STUFFED! - READ IT NOW!
by STUFFED NEWS DAILY 17 Dec '03

17 Dec '03

+ THE ESSENTIALS OF SEDUCTION + CELEBRATE SEX + BUTTNAKED FROLIC + THE BEST OF EUREKA + PLENTY OF SEX ON THE NET + PUSSY FLAVORED CANDY + SEX OLYMPICS + HAUNTING NUDDY PICS ----> http://stuffed.net/98/9/24/ <---- Welcome to today's issue of Stuffed. To read it you should click on the URL above. If it is not made clickable by your email program you will need to use your mouse to highlight the URL, copy it and then paste it into your browser (then press Return). This email is never sent unsolicited. Stuffed is the supplement for the Eureka newsletter you subscribed to. Full instructions on unsubscribing are in every issue of Eureka! ----> http://stuffed.net/98/9/24/ <----

1 0

Additional drive/stego/tempest/customs NOIZE
by Michael Motyka 17 Dec '03

17 Dec '03

Dear Sir, Sunder Wrote: > You seem to think these guys are actually super spies, not clueless > overpaid (for their level of skills) bored burrowcrats working on an > assembly line. You're over estimating their abilities by at least > four orders of magnitude there. > Through the *magic* of taxation and government contracts the opponents you are so casually dismissing as dull-witted drones are your peers. So unless you really are smarter than everyone else I would say that your above statement is rash. If the motivation to snoop is strong enough the resources will be put into place by the current crop of ground-dwelling representatives and any imaginable technology could be applied to the *problem*. I doubt in this case, at this time, that the motivation is enough to pay for a database of EMI analyses of PC bootups. Mike I found this one interesting: http://www.jya.com/fbi-en7898.htm Our elected representatives probably believe this official-looking analysis more than they do mere citizen's opinions. I have LOTS of copper materials. I have a source for conductive paints. Could you suggest a good source for ferrites in powder and tile form? All this to insure my privacy whilst I compute in my own house! The snoopers have, by their very existence, a chilling effect on speech.

1 0

hurricanes and digital commerce and financial cryptography
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: rodney(a)module-one.tillerman.nu Date: Thu, 24 Sep 1998 07:32:20 -0400 To: dcsb(a)ai.mit.edu From: Rodney Thayer <rodney(a)tillerman.nu> Subject: hurricanes and digital commerce and financial cryptography Mime-Version: 1.0 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Rodney Thayer <rodney(a)tillerman.nu> Status: U Ok, Anguilla has had it's liter of rainwater worth of fame from this damn hurricane. Time for South Florida. So, ahem,... It's Thursday and there's a hurricane coming. There's plenty of beer in the starboard refrigerator and plenty of frozen White Castle hamburgers in the port refrigerator. The gas generator is all set to keep the server and the notebook PC battery chargers running. The local badly run telephone monopoly claims it can keep the telephone network up, we'll see if they are telling the truth when there's a foot of water on the road. In spit of the crypto-refugee claims, there's plenty of crypto work here, and this 'offshore' location is only about 100 feet from the mainland so it's not actually exporting code when I drive back to the office from the local computer store with the PC in my car. Here's my commerce question. How often do people expect to cycle private keys from PKI systems? I mean, suppose you have a web server, or an IPSec router, or some related device. I would assume you'd actually generate a new key pair every time you get a new certificate. So, for example, if you get a new certificate every six months for a web server, you would use a new private key. It turns out there is some debate over this. Some people assume the private key lives essentially forever, and that you'd simply get a new certificate against the same old key pair. I myself think this is rock stupid because one of the threat models is that the private key gets stolen, and the longer it's used the longer it's stealable. This relates to hurricanes. If you know any IPSec-aware routers, or any secure web servers, or any other PKI-based devices, and they are in the Florida Keys, you had better assume they'll need new key pairs as of some time Sunday. You see, unless I've missed the "waterproofing" requirements in FIPS 140 (the government security hardware standard), then those boxes will all be under water and will require replacement. So any of these PKI Service Provider models that assume the private key is immortal are about to be proven wrong. And there better be something in your revocation procedure for "the private key was destroyed by an act of nature". Look that up in your CPS and your Digital Signature legislation. But I need to go prepare, it's supposed to start getting exciting here in Clearwater, some time today. [I pass the torch to some DCSB subscriber in the New Orleans area...] -------- Rodney Thayer <rodney(a)tillerman.nu> "layer of sand separate transmitted and received packets". (with apologies to Keith Law son.) For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0