December 2003 - cypherpunks-legacy

$8M for National ID registry
by crawford＠scruznet.com 17 Dec '03

17 Dec '03

"Anti-immigration bandwagon," San Francisco Examiner, Sunday, 11/22/95, p. A-5: Amid an article discussing Clinton's effort to beat the Republican's in keeping out illegal aliens: "A federal advisory commision recently proposed that the government establish a computerized register of the names and Social Security numbers of citizens and aliens authorized to work in the United States, so that employers could check the immigration status of job applicants." "Clinton will seek $8.3 million for a pilot program to evaluate the effectiveness of such a system." Comforting words, especially given that children are to be assigned Social Security numbers at birth. Best Wishes, Michael D. Crawford crawford(a)scruznet.com crawford(a)maxwell.ucsc.edu <- Finger me here for PGP Public Key.

1 0

A Legal Web Page Issue
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

Someone on the Cyberia mailing list has announced that his URL on legal matters (http://www.commlaw.com/pepper) can only be accessed by sites which charge a "flat rate." I'm not at all clear what he means by a flat rate here....is is flat rate per month, or per access, or what? In any case, I sent him (and the Cyberia list) a note saying I had already added it to my home page and that the nature of the Web is that URLs ripple out, either by linking with other pages or by publicizing the URLs (as he did, and as I have just done here). So, give it a browse and add it if you find it interesting. When he sees a bunch of accesses (assuming his system has logs he can look at) from sites over which he cannot possibly hope to set policy for, he may realize the futility of this. (He can stop accesses, or charge admission, with various means--maybe not yet fully developed, or with commercial Web servers such as Netscape is developing--but he cannot release the URL and then enforce his ideas of who can access it. God forbid we have people trying to "copyright" their URLs and then collect royalites anytime the URL shows up in someone's list of interesting places.) This experiment in guerilla ontology brought to you by, --Tim May -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^859433 | Public Key: PGP and MailSafe available. Cypherpunks list: majordomo(a)toad.com with body message of only: subscribe cypherpunks. FAQ available at ftp.netcom.com in pub/tc/tcmay

2 2

Markoff/NYT on IP spoofing
by Brian A. LaMacchia 17 Dec '03

17 Dec '03

John Markoff writes in Monday's New York Times about a rash of computer security breaches using IP spoofing to penetrate routers and firewalls. That's all the technical info I coudld glean from the story; CERT is supposed to "make an announcement" later today and tell us what brands of routers can and cannot be modified to defend against this type of attack. Towards the end of the article Markoff puts in a nice plug for crypto: Most computer security experts say that real security on the Internet awaits the widespread adoption of encryption technology for scrambling data and authenticating messages. ``The right answer is encryption because when you encrypt your business data you don't care how many people get a copy,'' said Eric Schmidt, the chief technical officer of Sun Microsystems. ``My prediction is that this will be the only real solution to these problems.'' --bal

3 4

Re: A Legal Web Page Issue
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 9:55 PM 1/22/95, Timothy C. May wrote: >Someone on the Cyberia mailing list has announced that his URL on >legal matters (http://www.commlaw.com/pepper) can only be accessed by >sites which charge a "flat rate." I'm not at all clear what he means >by a flat rate here....is is flat rate per month, or per access, or >what? [...] >So, give it a browse and add it if you find it interesting. When he >sees a bunch of accesses (assuming his system has logs he can look at) >from sites over which he cannot possibly hope to set policy for, he >may realize the futility of this. > >(He can stop accesses, or charge admission, with various means--maybe >not yet fully developed, or with commercial Web servers such as >Netscape is developing--but he cannot release the URL and then enforce >his ideas of who can access it. God forbid we have people trying to >"copyright" their URLs and then collect royalites anytime the URL >shows up in someone's list of interesting places.) What a crazy thought. I will make sure to access his URL early and often. BTW, what is your homepage URL? Or was that just a spoof? -- Lucky Green <shamrock(a)netcom.com> PGP encrypted mail preferred.

2 1

www.commlaw.com/pepper page
by Syed Yusuf 17 Dec '03

17 Dec '03

<p> Copyright 1994 by Pepper & Corazzini, L.L.P. All rights reserved. Reproduction is permitted so long as no charge is made for copies, no copies are placed on any electronic online service or database for which there is a fee other than a flat access charge, there is no alteration and this copyright notice is included. <p> legal translation: don't charge money to access this or copies of this page UNLESS you charge for internet access and EVEN then, don't charge extra just to look at this page. didn't want to bring this to the list unless it's to kill this discussion someone misread it.

1 0

Re: transient guerrilla remailers
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Nobody(a)rahul.net, forwarding from homer's remailer, writes: > If c2.org can offer RIAB accounts on a pre-paid basis, what's to > stop people interested in the cause from paying anonymously, > setting up the RIAB, and just walking away? When the pre-paid period > expires, the remailer goes away. Yeah - John Doe pays in cash, or uses a Post Office money order :-), to get X months of remailer service. After the initial account setup, he can keep it up dated by mailing in mostly-anonymous paper cash using the usually-anonymous paper remailer service offered by the US government, dropping the payments in a mailbox. If the sysadm is trustable, no problem, and the degree of trust is whatever a month's remailer service costs. If he's not, John Doe can detect it by occasionally using the remailer, and can spam the net with scanned-in copies of the money order showing it's payable to sysadm. If the sysadm wants to float the (low) cost of running a remailer for a month, he can even keep the money order around for a month or so to use as evidence if he's subpoenaed or otherwise legally harassed. One concern I have about this remailer strategy is whether everyone's remailer shows up as their own, or as "nobody" - can you tell the nobodies apart? John X. Doe

1 0

Re: "Internetpol"
by Censored Girls Anonymous 17 Dec '03

17 Dec '03

Netcops By Hank, reprinted with permission <hank(a)vm.tau.ac.il> I eased the unmarked cruiser onto the highway, its 424 cubic cc, VJ engine purring. Traffic was heavy that day, as convoys of Usenet semi-trailers barrelled their way down the Information Super Highway. Biker gangs using Crack steered clear of our sedan searching instead for Internet tourists in Bermuda shorts and Nikon cameras around their necks. "Unit 7, Unit 7. Woman reporting a 426, over," came the printout on the Netcops IRC channel. Friday turned to me and gave me that look. The look that he gets when he wants to tear somone's head off. Friday is 6'6" and 230 pounds. he enjoys inflicting pain when necessary. "It's guys like this who give the Internet a bad name. Let's go see what we can do to help," said Friday, as he placed the flashing blue Kojak on top of the sedan as I popped the car into 5th and slashed by the Usenet truckers hauling their load of pornographic magazines and political soapboxes. We arrived at the Holiday Inn where the lady was staying. Her eyes were red and she looked like a Mac had hit her. Under the hurt she was actually quite pleasant to look at., kind of like the girl next door. Her name was Mary and in between sobs we sat her down and ordered espresso from the lounge bar. "It was terrible. I feel so violated. I'd like to kill the bastard," spat Mary with a vehemence that only Friday could understand. "Just the facts, mam," said Friday. "I'm here overseas for 9 weeks on assignment for my company. My husband is back home with our daughter and we decided to stay in contact via the Internet. I carry my subnotebook with me everytime I travel. My husband and I get along great but 9 weeks away from each other is just too long so we engage in cyber-sex. You know, private IRC channel, getting undressed behind locked doors and describing in intimate detail what wee are doing to each other. We've been doing it almost daily for 3 weeks,". "But this last time was different. My husband asked me to do all sorts of weird and kinky things and I agreed, but it just seemed wrong. After our three hour session, my husband called later that day saying that his Internet system was under ICMP redirect attack and that he hasn't been able to get Internet access for the past 24 hours,". Friday cut her off, "Do you use any protection?". "I normally would have used PGP (Pretty Good Privacy), but I forgot to install it before I left home. Listen, this guy at the other end must have been listening in on my previous sessions with my husband because he knew all the right things to say as to not arouse my suspicions,". Her lip trembled as she tried to hold back her tears but both Friday and myself knew time may heal all wounds but the scars remain. It was now my turn to bring down the hard facts, "Mary it looks like you are the victim of a 426 --net-rape. There are no laws on the Internet, no police, no government to turn to. Friday and myself act as volunteers in this neck of the woods, along with thousands of others throughout the world who mete out our form of frontier justice. What would you like done once we catch the perp?". She didn't hesitate for a moment, "I want nine of his fingers broken,". "Why nine," I asked. "There's no greater torture than using the Internet with one finger,". Friday smiled. Mary had made herself a lifetime fan. EPILOGUE We were able to track down the perp via the historical data sampling we collect daily via our RMON probe. We just correllated the packets with Mary's known IP address and the time of day that the incident happened. Once we had the perps IP address we contacted our fellow "cowboys" in that area who worked with the sysadmin who backtracked through the Unix logs and found the guy. Needless to say, he will never type fast again. ------ The story you have read is true (giggle) the names ahve been changed to protect the guilty. ------ This article appeared in Vol3 No2 Internet Society Magazine, 1994. Registered<BETSI>BEllcore Trusted Software Integrity system programmer *********************************************************************** Carol Anne Braddock "Give me your Tired, your Poor, your old PC's..." The TS NET REVOKED PGP KEY NO.0C91594D carolb(a)spring.com carolann(a)mm.com ************************************************************************ COMING SOON TO AN INTERNET NEWSGROUP NEAR YOU...............CENSORED.COM

1 0

Re: A Legal Web Page Issue
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 11:53 PM 1/22/95, Timothy C. May wrote: >Lucky Green wrote: > >> What a crazy thought. I will make sure to access his URL early and often. >> >> BTW, what is your homepage URL? Or was that just a spoof? > >Not a spoof, but not necessarily a normal home page. What I call my >home page is my "lynx" page, "lynx_bookmarks.html", to which I add >whatever URLs look interesting. (Netcom currently does not support WWW >pages for outside access.) I see. I thought that perhaps you had one of those ftp://* homepages that people here at Netcom seem to set up more and more. -- Lucky Green <shamrock(a)netcom.com> PGP encrypted mail preferred.

4 3

Re: AA + Anonymous ECash = Unhappy Fundies
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

> > It strikes me that this would be the perfect way to generate > > consumer interest in anonymous digital cash protocols [. . . .] > The "cause" will do much better if the first major association is made > with something much less controversial. Girl Scout cookies, say. Girl Scout Cookies do crumble a bit when crammed through the net, and it's tough to deliver them to anonymous locations, unlike bits. And there are moral concerns there as well - not only do their "butter cookies" use non-butter shortening (:-), but there's the problem that it turns the Girl Scouts into a crass commercial enterprise, just another division of Nabisco, instead of teaching the kids that hard work will get them a 7 percent margin on their sales. On the other hand, being able to have Girl Scout cookies or flowers sent by anonymous donors may go over well in some circles... Bill

1 0

Re: hmmm, port 25
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

nutty elf writes, from tower.stc.housing.washington.edu, the message below. If I'd been watching recently for postings from that machine, I could point out who he probably was..... > From toad.com!owner-cypherpunks(a)ig1.att.att.com Sun Jan 22 03:18:20 1995 > Return-Path: <toad.com!owner-cypherpunks(a)ig1.att.att.com> > Received: from ig1.att.att.com by anchor.ho.att.com (4.1/EMS-1.1.1 SunOS) > id AA28663; Sun, 22 Jan 95 03:18:19 EST > Received: from att!toad.com by ig1.att.att.com id AA09271; Sun, 22 Jan 95 03:20:16 EST > Received: by gw1.att.com; Sun Jan 22 03:19:52 EST 1995 > Received: from toad.com by relay2.UU.NET with SMTP > id QQxzth02499; Sun, 22 Jan 1995 03:16:33 -0500 > Received: by toad.com id AA25129; Sun, 22 Jan 95 00:12:52 PST > Received: from northpole.org (tower.stc.housing.washington.edu) by toad.com id AA24523; Sun, 22 Jan 95 00:10:24 PST > Date: Sun, 22 Jan 95 00:09:36 PST > From: nutty_elf(a)northpole.org > Message-Id: <9501220810.AA24523(a)toad.com> > Subject: hmmm, port 25 > To: cypherpunks(a)toad.com > Sender: owner-cypherpunks(a)toad.com > Precedence: bulk > Status: RO > > That's strange, that last port 25 forgery didn't behave as expected. > Just checking it. > > --nutty elf >

1 0