December 2003 - cypherpunks-legacy

Eavedropping devices
by Anonymous 17 Dec '03

17 Dec '03

I appreciate the replies I received on "how to cheaply detect eavesdropping devices," but I'm afraid that I do not have access to the types of equipment which were mentioned (IR glasses, etc). Any further suggestions? PS - Has anyone else been watching the lunatic ravings of one l.detweiler on comp.org.eff.talk? This guy is a fucking fruitcake!

1 0

Hut six
by norm＠netcom.com 17 Dec '03

17 Dec '03

"Hut Six" by Welchman seems to be out of print. The book describes early Bletchley Park work on the German Enigma cypher system. Does anyone know where to get a copy?

1 0

It had to happen...
by Mike Ingle 17 Dec '03

17 Dec '03

Today I got an interesting message. It seems that someone was doing some hardcore hacking of machines at a university campus. The person used one of these accounts to send me a message requesting a copy of Secure Drive. This message and my response were wiretapped by the people investigating the hacking. They traced the hacker and arrested him. His computer was encrypted with Secure Drive. The IS manager involved sent me a message asking me how to break Secure Drive, because they can't prosecute the person without the data, and the suspect has of course forgotten the encryption passphrase. So far I don't have many details other than these. I hope to find out more. I'd like to talk to the investigator and to the suspect. I sent the IS manager a copy of Secure Drive and told him how it works, but that's about all I can do. --- Mike

1 0

The Cypherpunk Equation
by L. Detweiler 17 Dec '03

17 Dec '03

Pseudospoofing == Privacy

1 0

mail-to-news gateway
by Eric Hollander 17 Dec '03

17 Dec '03

I'm currently setting up my soda.berkeley.edu remailer so it will post stuff to news. It's working fine, but I'm having an internal debate with myself: Do I want it to automatically anonymify the postings (that's what it's doing now) or should I have them with names on them? The only real difference is that if they have names on them by default, people will have to bounce it through a remailer first if they want anon. Also if it's always anon, it may lead to more abuses, and might not be as useful in some ways. What do people think? Btw, it's open for testing right now. To use it, send mail hh(a)soda.berkeley.edu with the following line in the header: Request-Post: alt.test and it will post. NOTE: PLEASE DO NOT PUBLICIZE THIS SERVICE YET, BECAUSE IT IS STILL IN "BETA". PLEASE DO NOT USE IT TO POST TO GROUPS OTHER THAN TEST GROUPS. e

2 1

Re: It had to happen...
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

The cracker who's using Secure Drive could be an interesting case. Unfortunately, assuming that a cracker at a university is probably a student, he may not hve very good legal representation, and I'd hate to see bad precedent on "can you be forced to reveal your key" set because someone is not only a tresspasser but a stupid one as well. Do you know if the wiretapping was being done by police, or if it was just the university staff with ethernet sniffers? I was interested by your comment that they can't prosecute the person without the data; while it could certainly be helpful to have, one would hope they had a reasonably solid case *before* they went and arrested him..... Thanks; Bill # Bill Stewart NCR Corp, 6870 Koll Center Parkway, Pleasanton CA, 94566 # Voice/Beeper 510-224-7043, Phone 510-484-6204 # email bill.stewart(a)pleasantonca.ncr.com billstewart(a)attmail.com

3 2

Re: It had to happen... (fwd)
by Harry Shapiro 17 Dec '03

17 Dec '03

a conscious being, Jim choate wrote: > Assuming the arrest warrant was good not revealing the key to a duly > authorized court representative would be illegal (ie interfereing with a > police investigation). If the courts serve a warrant for your arrest and the > confiscation of data on your hard drive (and you refuse to turn the data over > even after talking w/ an attorney) is specificaly mentioned you are opening > yourself up for another whole world of legal hurt. I would like to hear what Duncan has to say, but... 1) He did give them the data, they just can't read it. (not his problem). LIke if I wrote some notes in French, I don't think I woudl be required to translate them. 2) Then their is the issue of 5th Admendment issues... /hawk

1 0

it had to happen......
by Brian D Williams 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Bill Stewart writes; >Assuming the arrest warrant was good not revealing the key to a >duly authorized court representative would be illegal (ie >interfereing with a police investigation). If the courts serve a >warrant for your arrest and the confiscation of data on your hard >drive (and you refuse to turn the data over even after talking w/ >an attorney) is specificaly mentioned you are opening >yourself up for another whole world of legal hurt. >A citizen would have the legal right to refuse prior to talking w/ >an attorney but not after, at that point it becomes witholding >evidence. >If the process is legal there should be no reason a citizen can >refuse to turn over his private keys (I don't believe >self-incrimination holds here). Well no doubt they have his True_Name now. I'm curious as to why they are so adamant about trying to break the encryption? I get the impression they don't have much of a case. Don't forget kids to save those sniffer tracings, they could earn you valuable prizes! I won't even go into how dumb it is to try accessing a cracked system through a single cutout, kids don't try this at home ;) Brian Williams Extropian Cypherpatriot smarter than your average bear. -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLRn01tCcBnAsu2t1AQFSYwQAoQiqSmUmnl1CLOr94DF3V+4i274mGl+b kKyX8VU1FFFfY6jD8LC2EeMITFX0vJkuA29WxYEomUEa1WRlqt1z+wOahgpPaPzT ipyY0JF6xTOMSmTBnvsfEZWsJUHC4qTiNbQaONg5ooMic75bcnhWXTENfBFOlB50 E+f9M4GfPV0= =uGUA -----END PGP SIGNATURE-----

1 0

re it had to happen
by Brian D Williams 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Bill Stewart writes; >Assuming the arrest warrant was good not revealing the key to a >duly authorized court representative would be illegal (ie >interfereing with a police investigation). If the courts serve a >warrant for your arrest and the confiscation of data on your hard >drive (and you refuse to turn the data over even after talking w/ >an attorney) is specificaly mentioned you are opening >yourself up for another whole world of legal hurt. >A citizen would have the legal right to refuse prior to talking w/ >an attorney but not after, at that point it becomes witholding >evidence. >If the process is legal there should be no reason a citizen can >refuse to turn over his private keys (I don't believe >self-incrimination holds here). Bill, help me out here, if the warrant allows them to confiscate your harddrive that part I can understand, But if being forced to provide the decryption isn't self-incrimination, what the hell good is what we're doing here. Brian Williams Extropian Cypherpatriot -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLRnOTdCcBnAsu2t1AQEoaQQAllNzsD/MtKPC9awQbxKepja2zOAWaHvO IzOymSR3KizhwLOlFDXm3xEOx5kUfKYk6QDMk35Oz3GZXC0FRjnu2fLzc2SQInHo xprUvh/kmdaaDx220asohVjwDzoYLJC6UnB6lXhhp140If1Bvk7YcUGaBQvET26h EvYA9iS4XRY= =zZv+ -----END PGP SIGNATURE-----

4 3

Adolf the Nazi
by Anonymous 17 Dec '03

17 Dec '03

Isn't Detweiler a German name? Herr Adolf Detweiler.

1 0