December 2003 - cypherpunks-legacy

RE: Real-time surveillance of the police
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, Jonathan Rochkind wrote: ... I don't like it when someone tells me "what do you have to worry about if you aren't breaking any laws," and I don't like it when someone says that about the cops too.... This misses the point I was trying to make. The first argument in favor of wiring the cops, is that it is to their benefit. It helps backup officers or medical personnel to find them. It protects them from unfounded accusations of brutality or other misconduct. It makes a permanent visual and sound recording of perps who get away. This helps in later identification. Even with all these arguments in favor of wiring, I have a sneaking suspicion the cops will not want it. Why? Though few police would admit it publicly, my conjecture is that they know they are currently getting away with murder (sometimes literally) and would feel being wired would force them to obey the law. So my "teensy-tiny-minority" argument was offered sarcastically. In addition, I think recording officers' shifts would show just how little work cops actually do for their pay. Wiring would really throw a money wrench in the doughnut-boys cushy deal. Cynical? You betcha. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Real-time surveillance of the police
by blancw＠pylon.com 17 Dec '03

17 Dec '03

Responding to msg by Michael D. Crawford: . . . if a street gang felt the cops were thumping their members with unwarranted enthusiasm, the gang could purchase a case of cameras at the local Price Club, and everyone could carry them to photograph the cops. ............................................................... The first thing I imagined on reading this, was numbers of young blacks in the ghetto carrying on their shoulders - not boom boxes, but camcorders. But next I multiplied and elaborated and exaggerated the idea of everyone protecting themselves by any and all surveillance devices possible and available, and came up with this vision of a society where membership required that everyone be amenable to being recorded on contact with anyone and their cat. "Of course, I respect you - I just don't *trust* you." Blanc

1 0

Re: alt.anonymous.messages propagation
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Todd Masco writes: > Timothy C. May writes: > # Isn't this what "alt.anonymous.messages" is all about? > Alas, it is not available at MIT. I'll have to scrounge for a server that > carries it (volunteerings of feeds welcome!); Hmmm, does MIT get alt.anonymous at least ? I understand alt.anonymous was created to serve a purpose similar to that of alt.privacy.anon-server, but at the moment it's a de facto equivalent of alt.anonymous.messages. alt.anonymous is somewhat better propagated than a.a.m, from what I've heard. You should request one or both groups from the MIT news admins. If users there want to read the group, they'll likely be quite happy to carry it. I'm a fairly well-known regular in alt.config, and I believe I can probably recruit some prominent news admins to send booster newgroup messages for alt.anonymous.messages. Apart from that, it's a matter of people asking their local news admins to pick up the group if they aren't already carrying it. > Though netcom is our > IP provider, I'd rather not get news from them. Heh, I don't blame you. Although I heard they recently ditched alt.this.site.newgroups.everything (or something like that), they still carry virtually everything that gets newgrouped by anyone, accidentally or not. - - -L. Futplex McCarthy; PGP key by finger or server "We've got computers, we're tapping phone lines; I know that that ain't allowed" --Talking Heads - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLuvzUGf7YYibNzjpAQHr7AP/WCfDofFHaj8JgOEIWM490zc5hPCQxSSV 2d1KZ61wVGsJEDGLdEMI1OT1cuZAgTzbs4HXd+Hi0z5gu/ZsynSpkxCQTfPr7RZV 4+wPSSVOiEK4rrwf95dfJsC7U+EZk8fUCd8gNX0dXVJKYe9n258oWlUNk8VkgNgM L6f+bXRX/VY= =B8La - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLuv0uioZzwIn1bdtAQEbggF/ax15KwhS915RJ4eTZHpAPBS2W62tT8eK IniODiSMg+yqtueEQ7yTs8cny7RLOUYq =YTYr -----END PGP SIGNATURE-----

1 0

Re: Misunderstanding of Remail Headers
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Hal writes: > One thing I do notice on reading the discussion in can.politics is the > fact that despite the disclaimers in the message headers, some people > took this as a forgery attempt on my part. I wonder if it might be > necessary to insert disclaimers into the body of the message as > anon.penet.fi does, at least for messages to known mail-to-news > gateways. > > There was also a misperception that my remailer was an official effort > endorsed by Portal (again, despite the disclaimers). Note that it was > they who were contacted, not me (yet). This might suggest that it will > not be possible to cleanly separate the remailer operators and service > providers when problems like this arise. Both may end up being hassled > (time will tell whether I am). This is all too familiar to me. Although I still haven't heard the official line on the shutdown of Underdog following the Scythe spam, at least some people locally (including, crucially, my advisor) received the impression that I had forged (and authored !) the offending news articles in spite of the disclaimer headers. Furthermore, the spam might not have been a fatal blow if not for the fact that some people ignored the "complaints to <lmccarth(a)ducie.cs.umass.edu>" header and wrote directly to root or postmaster here. Everyone who actually wrote to me came away satisfied that I was taking appropriate action, as far as I could tell. I'll take this opportunity to reiterate that I'm no longer operating a remailer at this address. I wrote to Matt Ghio about a week ago asking him to remove my address from remailer-pings(a)chaos.bsu.edu, but I suppose he's busy with school these days. That list remains frozen with information dating from Nov.22. Karl Barrus mentioned something about chaos.bsu.edu having moved to chaos.taylored.com; perhaps this is part of the reason for the snag ? - - -L. Futplex McCarthy; PGP key by finger or server "We've got computers, we're tapping phone lines; I know that that ain't allowed" --Talking Heads - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLuv2yGf7YYibNzjpAQF/GQP/VNo06+qqYvQBhU0xAO+TpHx44OJX6dKI HWhW+zIA6Xp/UYKsql8Mfg7dhxesJ4JSdqkkjY8znqUrwp/CnOTo3qql0W/EOxYt l3f7kcHJWvr/gPO/rvtMgWbR2GRjkhaCa62ny/tgV+IGCKxDqCi25A4Y2x23KFDB JgiLP4c2hSc= =34zm - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLuv4ACoZzwIn1bdtAQEkZwF/dL0lroedGXvGlNJFJ5W6Z0dm83yefrzq 9aRFW9Xh+2/cjvb5+OMY0Ol1uEnU5UaM =ygWU -----END PGP SIGNATURE-----

1 0

RSAREF for Perl Beta Testers Wanted
by Mike Ingle 17 Dec '03

17 Dec '03

RSAREF for Perl is complete and ready for beta testing. Does anyone want to volunteer? Using it requires Unix, Perl, and RSAREF 2.0. You do not need to recompile the Perl interpreter. It gives you conventional and public-key encryption, signing, hashing, and Diffie-Hellman as one-liners in Perl. Mike

1 0

RE: Real-time surveillance of the police
by crawford＠scruznet.com 17 Dec '03

17 Dec '03

Sandy Sandfort <sandfort(a)crl.com> writes: > Michael also argued that it might be more easily sold to private > security firms for legal liability reasons. This argument is > even more persuasive for police officers. Cities routinely pay > astronomical settlements, or fight expensive law suits, arising > out of alleged incidents of police misconduct. Frivolous > lawsuits would be quickly thrown out of court. Rogue cops would > be identified and thrown off the force. Works for me. Works for me, too, and one would think that it would work for cities, but experience shows that individual cops can rack up millions of dollars in legal settlement costs and still remain on the force. I heard some figure - this is quite vague, but hey, it's midnight - that a small handfull of cops in San Francisco had cost the City tens of millions, with individual cops repeatedly causing lawsuits, without getting fired. Why? Police unions. Settling out of court without assigning blame. City politics. Mayors that are former police chiefs. A clueless populace. Promises to do better next time. Now, I heartily agree with you that the police should be more closely monitored, and certainly cities have ample reason to avail themselves of this, but most cities do not even avail themselves of citizen police review commissions, because of the resistance the police have to it. In Santa Cruz, a proposal to allow an independent citizen panel to review police internal affairs investigations faced threats of lawsuits from the police union, and took _years_ to adopt. The commission we got has considerably less authority than was originally proposed. This is in a city reknowned throughout the nation for its leftist politics. If the People's Republic of Santa Cruz couldn't get a review board with real authority implemented, I doubt you'll convince the LAPD to put radio beacons on their thumping arms. Much as I think they should. Sandy continues: > Even with all these arguments in favor of wiring, I have a > sneaking suspicion the cops will not want it. Why? Though few > police would admit it publicly, my conjecture ... Well, my knowledge is that at least one cop wouldn't go for it - the cop we caught jacking off to a magazine of ill repute, parked in his patrol car on Yerba Buena Island in San Francisco Bay. Those rhythmic wrist-movements would show an unmistakable frequency signature back at home base. He sure drove off quick. Didn't even say hello. I say, > Yes, that's right - keep surveillance cameras going on _yourself_. If > you're not doing anything illegal, you've got nothing to fear from taping > everything you do. tcmay(a)netcom.com (Timothy C. May) replies: > This scenario is a likely way that "position escrow" will evolve, from > a voluntary escrowing (incl. timestamping, etc.). "Those with nothing > to hide" will agree to escrow their movements...this will exculpate > them in suspected crimes, etc. A slippery slope. I reflected on this a bit, and decided that if one were to implement "personal surveillance", a decent solution would be to encrypt the tapes. Use DAT tape instead of a VCR, and save MPEG's or QuickTime movies that have been encrypted with IDEA. The idea here is protection _from_ the police, to demonstrate that an officer misbehaved in the vicinity of my car, rather than to provide a record for use by the government. Needless to say, I wouldn't advertise that I actually had such a thing until I pulled the tapes out in a deposition, or sent them, decrypted, to the TV news. Again, I'm not saying such surveillance should be imposed, supplied or encouraged by the authorities, but that one might find some benefit in installing it oneself. Cheerio, Michael D. Crawford crawford(a)scruznet.com <- Please note change of address. crawford(a)maxwell.ucsc.edu <- Finger me here for PGP Public Key.

1 0

Re: Real-time surveillance of the police
by Rich Salz 17 Dec '03

17 Dec '03

>After the Rodney King incident, I had the notion, (which I did not act on >to actually promote, I'm sorry to say), that organizations representing >people that feel persecuted by the law could issue disposable cameras to >all there members. A couple of years ago, when he was getting one of the first Rebok international humanr rights awards, Peter Gabriel talked about how one of the organizations he is affiliated with was planning on doing exactly this kind of thing. If you think about it, it's not unlike the driving thrust of Amnesty International.

1 0

Re: alt.anonymous.messages propagation
by cactus＠seabsd.hks.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- L. McCarthy <lmccarth(a)ducie.cs.umass.edu> wrote: >Hmmm, does MIT get alt.anonymous at least ? I understand alt.anonymous was >created to serve a purpose similar to that of alt.privacy.anon-server, but >at the moment it's a de facto equivalent of alt.anonymous.messages. >alt.anonymous is somewhat better propagated than a.a.m, from what I've heard. Nope, no alt.anonymous. 'Leastaways, not off the servers that the turist accounts use. And since I configured news on the machine, I'd love to hear if there are MIT servers that have a larger set than life.ai's. >You should request one or both groups from the MIT news admins. If users there >want to read the group, they'll likely be quite happy to carry it. Alas, I am but a turist at MIT, though one who helps maintain the turist machine. I'll be looking at getting a real newsfeed from elsewhere, but asking the MIT newsadmins for favors isn't in the cards. If anybody here has a bit of a stronger standing on campus, their asking would be way cool. >I'm a fairly well-known regular in alt.config, and I believe I can probably >recruit some prominent news admins to send booster newgroup messages for >alt.anonymous.messages. Apart from that, it's a matter of people asking their >local news admins to pick up the group if they aren't already carrying it. That would be a most excellent thing to do, regardless of how it affects my situation. - -- Todd Masco | It's difficult to be loud about keeping your enumerated cactus(a)hks.net | rights when you're busy exercising your unenumerated ones. cactus(a)bb.com | http://www.hks.net/~cactus/cactus.html - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLuwLBSoZzwIn1bdtAQHxqgGA3WuDp+3/5A8pqGNpFc5UqAVJafaSL7je bUpZDrHpYMXycfCUPAgh+HpxJpCTLWU1 =c8Gt -----END PGP SIGNATURE-----

2 1

Crypto Declaration of Independance
by nobody＠jpunix.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have a proposal for you all. I have started work on a Crypto Declaration of Independence, based on the famous American work which represents Independence. With the incoming batch of Congress and the new year approaching, I think that it's time we assert what we believe in. We need to let people know what we stand for, and why we think it's a good idea. And with the (quasi)-recent passage of the DigiTel proposal and Freeh's comments about banning encryption, we need to wake people up. However, asserting this to ourselves again would be akin to holding a one-person conference. We have rehashed these points amongst ourselves many times. Therefore, I propose that we spend some time revising this work, based off the writing I will post if there is support for this idea, then sign it, and email, fax and mail it to our respective news agencies, government officials and interest groups. However, without your support, this endeavor would be fruitless. Before I post the "beta version"/first draft of the CDoI (for lack of a better term), I want to know if you (the C'punks) will support it and help me. Overall, I'm looking for answers to four questions: 1) Will you support and help this endeavor. 2) A target date for sending it out. First idea which came to mind: Jan 1st, 1995 3) A list of groups/people which should receive it. Government officials, news agencies, HOTtired, CPSR, EFF, ACLU, etc and along with #3: 4) Ways for bringing it to people's attention. I intend to keep myself anonymous during this process, so please contact me by leaving a message on this list, or mailing everything within these cutmarks to remailer(a)jpunix.com: -- CUTMARK ( do not include )-- :: Encrypted: PGP - -----BEGIN PGP MESSAGE----- Version: 2.6.2 hIwD/nqSW1QDQfUBA/wI+tSk7CWd5u2dMywjv6oLosg3nm5ki/p8HhOg7VXHDk0S 6MpptLzWzUtkvL+EZEBS7NHORSTNRbo0K/Uvqgl0Rqaqig5Wx6i2VKve3ky9/Kbm I72casRMcyoBka+cOtKdU5JBVXF/YDWmCb3usnvAu0oDZGxBstTaTPgpJzMiV6YA AACTszK/wRKedt58GVDLQs7gNNUUyIxbKtUQNQGss2sbM7AZE0kaQ7B6Z1VXJy0t NKYzUQfk5LEJ1ko9ZbvDSgAWzTnZbmyfSszrpHpRN7ehFhgRCVf4YToMQa5eSOAg CHxmBMq01kDqIntHXZpWquU31+rfpPNNAT9pFHiYAj7biIRA3LWIRwvmy30j+QEv DaMODrdo =xtpD - -----END PGP MESSAGE----- < please put your message to me here> -- CUTMARK ( do not include ) -- I hope you will support me, and I will welcome any and all comments and criticism. Asynchronous -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLuq6yFG1rORFKstdAQH54wP/SaiMFKwz2UzjMdnhVK1HiBW2qSNs6NWC 5ENgEHod+n4ngfsx+miYMzmzDq2GmJ/KbvfMQjDFZiIcsirT2JPcu/YuvLG9AJvy GbO4pY0n/Mky8m1V66OxTxnVjb5CaGpRvbxrOKzAMx7CQMBGRfbdlHpPjtLWfpLf l0xwy9yoCVU= =Loxi -----END PGP SIGNATURE-----

3 4

Re: Globe and Mail Article On Forged Posting
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Mark Terka writes: > Ok, here is the text of the story about the "Forged Bob Rae Posting" from > the Toronto Globe and Mail. An examination of the story only indicates how > far our journalists and politicians have to go in understanding the Internet! Indeed. Let's examine some of the apparent misconceptions.... [quoted text from here to the end is from Rusk & Mittelstaedt of the Globe & Mail] > A furious Mr. Rae criticized Mr. Harris outside the legislature, > accusing him of leading to the "Americanization of Canadian > politics" through the use of "dirty tricks. (ouch :) [...] > Ont.general is a computer bulletin board on which Internet users > discuss life and public issues in the province, said Larry Sherman, > president of Internet Seminars of Woodbridge. > A message can be removed from the board only by whoever posted it, No, anyone with a moderately flexible newsreader and a little bit of knowledge about news control message syntax can cancel someone else's article. Tying this in to the discussion about using a newsgroup as a message pool, notice that news articles are far easier to wipe out than mail messages. This is potentially a major vulnerability of any such system, given current news software. Widespread unauthorized cancellations (other than for spam) are greatly frowned upon, though, so a concerted attack would probably set up a major clash of powers on the net. [...] > The source of the message was an account that provides a service > that allows people anonymous access to the Internet, she said. mail forwarding =/= net access > Mr. Sherman said it is very easy to post a false message on a > bulletin board and to make it appear that it came from a computer > different from the one that sent it. True, but that's a claim about forgery, not remailing; this is a worrisome confusion of terms reminiscent of the hacker/cracker problem. > By going through a California bulletin board, "obviously someone > has gone way out of their way to send that in," Mr. Sherman > added. One hopes that Internet Seminars pres. Sherman isn't responsible for the absurd implication I infer from this: sending mail via a geographically distant site requires going out of one's way. Is there some more sensible interpretation ? It seems obvious that someone posting an article purporting to emanate from the Canadian PM would try to transmit it with some level of indirection. [...] > Last months, the Tories played pranks at an NDP convention > sending in a camera crew that shot pictures ridiculing Mr. Rae, > including a doctored video sequence that seemed to give the Premier > a stutter. The picture were broadcast as dinner-time entertainment > at a Conservative convention the same weekend. Who's learning slimy politics from whom ? - - -L. Futplex McCarthy; PGP key by finger or server "We've got computers, we're tapping phone lines; I know that that ain't allowed" --Talking Heads - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLuwUnmf7YYibNzjpAQHqQAP+LPVNyr0dFCMDlSmF9GiLzK6ODmCgpopC Pke/Qk9esB+vWA5bPpxtbD1Z61rCGJgvZU++g1+vovmbcSzduoQMauEKKoX5+V9m oGEcfyvu1KqnsVL83jN6YHTMANs/DxHCPVf8jWusJOgQJ+LzZN9xPxlcKDBRFiS1 wyBTHvaOlaQ= =Lism - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLuwV9yoZzwIn1bdtAQHkUAF/QCXYBhzma2Y8rrT+hWnIeZYkjlNzi+8s Nf3pPrzjc34nCOsxcwz9aJ9AjhPvWJEV =wOms -----END PGP SIGNATURE-----

1 0