December 2003 - cypherpunks-legacy

Re: Grubor remailer? (Was Re: Lucifer remailer)
by Anonymous User 17 Dec '03

17 Dec '03

>Hm, is that Dr. John Grubor's domain (aga(a)dhp.com)? > >That will make a nice anonymous remailer... NOT! Thank you. dhp is not "Grubor's domain," it's just a Pittsburgh ISP with liberal terms of service (which is why it can run remailers). Perhaps you're thinking of "manus.org"? check out http://www.dhp.com/amusement.html for some background on dhp's attitude -not a DHP user or sysadmin

1 0

CIA Fears UmpTeen InfoNukes
by jya＠pipeline.com 17 Dec '03

17 Dec '03

The New York Times, June 26, 1996, p. B7. Head of C.I.A. Plans Center To Protect Federal Computers By Tim Weiner Washington, June 25 -- Alarmed at the growing threat that computer hackers pose to national security, the Director of Central Intelligence today announced plans to create a "cyberwar" center to protect the bits and bytes that weave the nation together. The United States cannot be brought to its knees by a madman with a modem. But the Director, John M. Deutch, said the nation's intelligence agencies were alert to the threat of "very, very large" attacks on the computers that run Defense Department war rooms, power plants, telephone systems, air traffic control centers and international financial transfers. "The electron," Mr. Deutch warned, "is the ultimate precision-guided weapon." Mr. Deutch said he was seeking to create a cyberwar center at the National Security Agency, the giant electronic eavesdropping branch of American intelligence. He said the center could focus the Government's previously scattershot efforts to understand and combat the threats posed by governments, terrorist groups and mischievous teen-agers. Mr. Deutch's first public statement about information warfare came in testimony before Senator Sam Nunn, the Georgia Democrat who called a hearing of a Senate Governmental Affairs subcommittee to discuss the little-understood, highly classified problem. "There are some who believe we are going to have to have an electronic Pearl Harbor, so to speak, before we really make this the kind of priority that many of us believe it deserves to be made," Mr. Nunn said. "Do you think we're going to need that kind of real awakening, or are we fully alerted to this danger now?" Mr. Deutch replied: "I think that we are fully alerted to it now. I don't know whether we will face an electronic Pearl Harbor, but we will have, I'm sure, some very unpleasant circumstances." He added, "I'm certainly prepared to predict some very, very large and uncomfortable incidents." Mr. Deutch said cyberwar could become a 21st-century national security threat second only to nuclear, biological and chemical weapons. Potential attackers may already possess the sophisticated techniques they would need to bring off a cataclysmic crash, many experts believe, but they still lack the deep knowledge of their targets and direct access to the computer systems they would seek to disable. Military and civilian organizations are increasingly dependent on evermore complicated and interlinked systems. They run the risk of understanding the threat less and less as it becomes more and more complex Mr. Nunn and Mr. Deutch suggested. Senator Nunn also said intelligence agencies have communications problems with banks, telecommunications companies and other business ventures vulnerable to cyber attacks. "There's a great reluctance by the private sector to discuss the threat that they've faced or even the attacks that have already occurred," he said, "because they fear that the word would go out they're vulnerable, and therefore could destroy or damage consumer confidence and thereby cost them business." "At some point," the Senator added, "there's got to be communication here." [End]

4 3

Senate Crypto Hearing being "Cybercast" now!
by bobpal＠cdt.org 17 Dec '03

17 Dec '03

SENATE ENCRYPTION HEARING BEING "CYBERCAST" LIVE ON THE NET NOW! Wednesday June 26, 10:30am EDT | 7:30am PDT | 14:30 GMT HotWired WiredSide Chat http://www.hotwired.com/wiredside/ Senator Conrad Burns (R-MT) is chairing a hearing regarding cryptography policy before the Senate Subcommittee on Science, Space and Technology. The hearing is being "cybercast" now on HotWired's WiredSide Chat. Netizens concerned about privacy and security on the Internet are participating in the hearing; they are submitting comments and questions, and discussing the hearing with others online. Witnesses that are testifying now include: * Phil Zimmermann, Inventor of PGP * Whit Diffie, Father of Public-Key Cryptography * Jerry Berman, Executive Director, Center for Democracy and Technology * Matt Blaze, Cryptographer * Phil Karn, Cryptographer * Barbara Simons, Chair of US Public Policy Committee, ACM * Marc Rotenberg, Director, Electronic Privacy Information Center HOW TO JOIN THE HEARING LIVE ONLINE Point your web browser at: http://www.hotwired.com/wiredside/ To listen to the hearing, you will need to have RealAudio properly installed on your computer in order to participate in this event. (You can download RealAudio software *FREE* by visiting [http://www.realaudio.com/] In order to participate in the accompaning chat session (and to ask questions of the witnesses) you will need to be a member of HotWired. Membership is *FREE*! Visit http://www.hotwired.com/ for details. If you do not have RealAudio capability, you can still participate in the online discussion. Telnet to talk.com and log in with your HotWired member name and password. The hearing is being brought to you by HotWired, DIGEX, the Voters Telecommunications Watch, and the Center for Democracy and Technology. ----- Bob Palacios, Online Organizer/Sysop Center for Democracy and Technology <bobpal(a)cdt.org> 1634 Eye Street, NW Suite 1100 Washington, DC 20006 http://www.cdt.org/ (v) +1 202 637 9800 http://www.cdt.org/homes/bobpal/ (f) +1 202 637 0968 The CDA fight continues! Visit http://www.cdt.org/ciec/

1 0

TWP on CIA Info Gears
by jya＠pipeline.com 17 Dec '03

17 Dec '03

The latter part of this article elaborates the NYT report today. The Washington Post, June 26, 1996, p. A19. CIA Gears Up to Thwart 'Information Attacks' Deutch Lists Computer Break-Ins, Terrorism as High-Priority Potential Threats to National Security By R. Jeffrey Smith CIA director John M. Deutch warned yesterday that the country is likely to experience some a very large and uncomfortable" disruptions of vital computer systems at the hands of foreign terrorists or hostile nations in coming years, but pledged a major new U.S. effort to detect and combat the threat of computer break-ins. "We have evidence that a number of countries around the world are developing the doctrine, strategies, and tools to conduct information attacks" on military-related computers, Deutch told a hearing of the Senate Permanent Subcommittee on Investigations, while declining to name these nations. Deutch added that he is convinced that foreigners are becoming increasingly aware "that advanced societies, especially the United States, are increasingly dependent on open and potentially vulnerable" computers to control electric power, airplane traffic, telecommunications and financial operations -- posing an attractive target for virtually "any nation or foreign terrorist organization." Emphasizing that the Clinton administration has just begun to grasp the dangers involved and begin working on the problem, Deutch said "we are not well-organized as a government to address these issues" and cautioned that making vital computers much less vulnerable to attack may take decades. "The electron is the ultimate precision-guided weapon," Deutch said, but "it is not [a problem about] which it's absolutely apparent ... the best way to proceed." Deutch said he nonetheless had already drawn up plans to create an office at the National Security Agency to be called the Information Warfare Technology Center, which will focus on analyzing the risks that foreign hackers pose to U.S. computers and help create new methods of investigating and defending the U.S. against electronic break-ins. Deutch also said that he supports creating a "real-time response center" for any major domestic or foreign attacks against civilian computers under the supervision of the Justice Department, as well as a separate, Defense Department center for responding to attacks on military-related computers. Deutch disclosed that the intelligence community conducted an extensive survey last year of the risks of an attack on computers controlling U.S. telephones, the electric power grid, oil refineries and other utilities. He said the results are classified, but added that a new, broader estimate of the threat is to be completed by December. He also said the intelligence community has begun to hunt more diligently for evidence of any foreign intent to attack U.S. computers, any sign of foreign sponsorship for U.S.-based computer hacking activities, and for any indication that foreign organized crime figures are becoming involved in attacks on computers at U.S. financial institutions. The Defense Intelligence Agency, moreover, is trying to develop a way to predict a major "information warfare attack" against the United States, Deutch said. One obstacle is that banks and other private institutions have been reluctant to divulge any evidence of computer intrusions for fear that it will leak and erode the confidence of their customers. Deutch said "the situation is improving" but that more cooperation was needed from major corporations, and said the CIA remains willing to share information with such firms about the risks they might face. Although he declined to cite any specific examples of computer warfare, Deutch said he would list it as the second most worrisome threat to U.S. national security -- just below the threat posed by foreign chemical, nuclear, and biological arms. In answer to a question from Senator Sam Nunn (D Ga.) about whether the government was aware of the danger, Deutch said, "I don't know whether we will face an electronic Pearl Harbor, but we will have, I'm sure, some very unpleasant circumstances in this area or our allies will.... I'm certainly prepared to predict some very, very large and uncomfortable incidents in this area." [End] Final notice: Wash Post on the Web at: http://www.washingtonpost.com

1 0

Re: CIA Fears UmpTeen InfoNukes
by Alex de Joode 17 Dec '03

17 Dec '03

Mike sez: [..] : By the way, there was a thing in the Yahoo/Reuters feed about "attacks" : on DoD computers; apparently British police arrested a "hacker" the : other day. Anyway, the article included a claim that there have been : 250,000 attempted break-ins on DoD computers over the past year. : Does anybody know how they count that? 'telnet nsa.gov 25' and you will be added to the count .... -- -AJ-

2 1

Lucifer remailer
by lucifer 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have just finished setting up a Mixmaster and cpunk remailer at lucifer(a)dhp.com. The PGP key and Mixmaster key are below. lucifer lucifer(a)dhp.com 6e57353149a1175f11aba72cedee02fd 2.0.3 - -----Begin Mix Key----- 6e57353149a1175f11aba72cedee02fd 258 AATvJVbP8R9tUF6R9zjSbRdDaz2j1INJvkVI6L6I 5F65Q7lRCoOl8+TCi+HgUo1AErYsLPpHpI1l4F9I RUqvH/fvR7GuqgIJc+RsGyQPPG0dpL5lHt2ppdmW wcTX85ZKRK242SW1hTih43IaCmXr+i1zX6+QZsr1 MtAqwDlyDgoU0QAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAQAB - -----End Mix Key----- - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzHPdZkAAAEEAK3rI5oq3dwDV5inleitjy03JvhBD/GtbRRDO1noLUnRf4FV CmCfGJrqitHtIBqhA+hIRBcNRo7J48Yiu6ctda29xe/rEy3QdSKHpZhstsV+hzw3 42Lhogm1cW2QPrvjJQUgU5mpKR9qKn7KQLBcVz/Mx1EvX4aMGJ2oJ1gRbIg5AAUR tCRBbm9ueW1vdXMgcmVtYWlsZXIgPGx1Y2lmZXJAZGhwLmNvbT6JAJUDBRAxz3vx nagnWBFsiDkBAfUAA/9ufh0GPUo6uR4/5/tbbFKyQs8fW0NmDkrU+xni7QNmKKUj qC7lJ/MHPxRGzuXaYE+k9I8NmI1DxyzdWlRX/X6uwcwYPOxa/+CI9HUAkcB/Q/N8 GZJckumcU7hlMim08lFJQjsEWxNyqKefAeOAKQ5v5xt3rmpPDmHrXbOuJ104Ng== =dFZY - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMdFhcZ2oJ1gRbIg5AQGqSwP9HzVjkvkN4oBIHh5AzvsKZoZG+zMvId7Z +LlvpSOSyXm+Vaxga28jBL03JIN8j6+yJtZy1h07VlYYwnhhBrhnIufeq+mO+ea6 k/ymFcUFsfM4jnf5jvaHKJTMULnmL3wspWzBKl3CRkQ2e238ozx8IWdhTxxdD9vj aO3vQZHHFTI= =/ICd -----END PGP SIGNATURE-----

1 0

Re: domain name zapping threat by Internic
by Herr Wendigo 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- An entity claiming to be Bill Stewart wrote: : : Perhaps I'm misunderstanding your point. Because the root nameservers : provide name service for the top level domains, if you want to find : schmoe.org, you need to ask a nameserver for .org where it is, and to find : www.schmoe.org, you need to ask a nameserver for .org where to find a : primary or secondary nameserver for schmoe.org - so if the .org folks : decide to drop you, you become hard to reach, even if you've got : the primary and secondary name servers working just fine. The org. folks ARE the InterNIC. The machines on ROOT-SERVERS.NET are all fed by the NIC. My problem with the original statement was the implication that using your own nameserver as having zone authority was a bad idea. Not only is it a good idea, it is standard operating procedure. You're absolutely right about being "hard to reach" (a bit understated) if the NIC drops your record. Any recursive lookups will fail. : Now, you can improve your odds a bit by getting popular systems, such as : aol.com and compuserve.com to act as secondary nameservers for you - : you may lose connectivity to Europe, but you're in the cache for half : the Net that way... Well, if you decide to use AOL as your secondary, you will only be accessible (by name) outside of aol.com for about 48 hours after the NIC drops your records. After that, only users who use one of aol.com's name servers will be able to access your domain. Then, when someone else registers your domain, AOL will probably drop you like a bad habit (if they don't when the NIC drops you). I'm sure that AOL (or Compuserve, etc.) are not too keen on being the odd man out when the NIC and the rest of the world say XYZ.COM is owned by your competitor and AOL says it is owned by you. mark - -- Mark Rogaski | Why read when you can just sit and | Member GTI System Admin | stare at things? | Programmers Local wendigo(a)gti.net | Any expressed opinions are my own | # 0xfffe wendigo(a)pobox.com | unless they can get me in trouble. | APL-CPIO -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMdFpaQ0HmAyu61cJAQEn+AP/Ttiw04EyeEQ4/6K19ZqXAbOui+zZ+fmu t/RJJGL834E/8yWB3xmbAmltDR+/V5T679iBUtw8Q+0CQEZOWwXeguRriILyabMn XRFdCP8+Cw5zvrz12BtIKYHCm4o9MG7or3BBbP3iHSF1ia6n2eMPwjRiaKrlqBYm Gqv9lThaoqU= =LD// -----END PGP SIGNATURE-----

1 0

Re: RFD: Developing Nations and crypto (based on excertp from Edupag
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 3:57 AM 6/26/96, Deranged Mutant wrote: >An interesting possibility: information tech expands and 'centers' in >third-world/developing countries, since (1) they need to skip >industrial techs to catch up to N.America, Europe, etc. (2) they >aren't bogged down in older ways of doing business, communicating, >etc. (3) 'emerging democracies' might embrace crypto tech as a >safeguard against Orwellian practices, to use digital authentication >to protect from fraud, etc. (4) cheaper costs for rent, wages, etc. >[though in many cases exploitavily cheap] may outweigh building an >infrastructure from scratch, (5) building an infrastructure from >scratch has advantages of building in flexibility towards uses that >were not built into older structures in N.Am, Eur., etc. (6) desire >for investment (7) desire for skills or tech to drive education etc. >in region Sadly, most developing countries (Third World, LDCs, whatever) have repressive governments of various stripes...few are libertarian. Several have embraced computer technology, but primarily as an instrument of social control. Singapore is an example of a country that jumped from former colonial status, surrounded by relatively poor (GNP) countries, to the "Information Age." And what is the result? What our own Sandy Sandfort dubbed "Disneyland with a Death Penalty." No spitting, no cursing, no long hair, no "Wall Street Journal," no pornography, no Internet free access, no dissension. And smartcards track the movements of all Citizen-Units. Not an encouraging example. As for the comment that "they aren't bogged down in older ways of doing business, communicating, etc." Well, some of these "older ways" include: - concepts about the ownership of property and transfers of title - contracts, and the ability to make and enforce them - understanding of the Uniform Commercial Code (the descendent of the "Law Merchant" which Western societies have embraced for centuries) - a stable middle class, solid educational facilities, and a tradition of business and technical achievement (These are all things which are missing in many Third World countries, for whatever reasons. Even in many Second World countries, such as the former U.S.S.R., and these lacks are making the development of modern economic systems problematic.) Certainly some small nations--perhaps island nations--can essentially jump directly to an "information based economy." The Cayman Islands and several other examples come to mind. I find it harder to believe that a _large_ nation is likely to make such a transition. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Life imitates art (InfoWar, Sunday Times article)
by Peter Trei 17 Dec '03

17 Dec '03

Winn Schwartau is much too modest. Following up on the alleged info-ransom attacks on European financial institutions, I've tracked down his entertaining fascinating resume at: http://www.homecom.com/people/schwartau-frame.html This led me to the most amazing discovery: Winn predicted the technologies used in the alleged attacks at least three years ago, in the self-published science fiction novel "Terminal Compromise." The text of this prescient work can be found on the web at: http://www.inform.umd.edu:8080/Educational_Resources/ReadingRoom/Fiction/Te… I won't quote from it (there are dire warnings against doing so in the intro), but here are some of the elements in which alleged real life is so closely imitating Winn's art: EMP bomb attacks against financial institutions chapter 11 "HERF" guns (described but un-named) chapter 16 info-ransom demands against large corporations chapter 17 ... and many others. If I had predicted the future so well and so far ahead, I'd be shouting it from the rooftops, and use the strength of the reputation I'd instantly establish to set up shop as a professional prognosticator (for fat fees). I wonder why Winn hasn't bothered to bring this to our attention - and I hope that Peter Warren and the editors of the London Sunday Times have heard about his astounding foresight. Winn, my hat's off to you, and my $7 "shareware fee" will be in mail as soon as I finish the book! Peter Trei ptrei(a)acm.org

1 0

Re: AT&T bans anonymous messages
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ C'punks, At 11:16 AM 6/26/96 -0700, Rich Graves wrote: >I see no excuse for the craven "indecency" and "personal >information" bits of the AUP, but... Plausible deniability. Currently, the majors don't want to be publicly associated with "naughty" uses of their networks. The do, however, want the lucrative fees generated by them. As a result, an enormous market niche has come open for "resellers" of 900/976 services. The majors can say, "We don't offer our services to THOSE types of services, but we are powerless to stop our resellers from doing that sort of business." The same rational applies to the Internet. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0