December 2003 - cypherpunks-legacy

Re: Long-Lived Remailers
by hendersn＠zeta.org.au 17 Dec '03

17 Dec '03

>Ideally the final emanation point will be epherimal indeed. Perhaps only a >few minutes or an hour or two. I really like this idea. How about instead of a full-scale remailer being the final jump of the message, you have a _very_ simple remailer set up along the lines of anon.penet.fi. No encryption, just strip off the headers and send the message to its final destination. Sorry for being clueless in how this works(I'm learning as fast as I can), but wouldn't this kind of system be incredibly easy to start up and fold? You could have a host of such final emanation points winking in and out of existence while the actual encrypting remailers remain relatively safe. Zed(hendersn(a)zeta.org.au) "Don't hate the media, become the media" - Jello Biafra PGP key on request

1 0

Lotus Notes 4.0 stream encryption.
by Joseph L. Moll 17 Dec '03

17 Dec '03

Can anyone comment on this? --- Joseph L. (Joe) Moll mailto:jmoll@acquion.com Network and Communications Engineering http://www.acquion.com phone:864-281-4108 fax:864-281-4576 ACQUION, Inc. Greenville, SC USA -- Specialists in Electronic Commerce disclaimer: This email is not to be considered official correspondence ---

1 0

CLI_pr3
by jya＠pipeline.com 17 Dec '03

17 Dec '03

5-23-96. WaJo: "Chasing Criminals at Cyberspeed." Three recent developments in the money laundering trade have governments especially worried: the proliferation of offshore financial centers, the collapse of the Soviet Union and the adaptation of emerging technologies to criminal ends. Officials think newly developed "smart cards" will be particularly appealing to criminals. Smart cards could be used to download cash from bank accounts, then used to make payments or deposits anywhere in the world. All without anyone knowing who holds the smart card, because encryption guarantees anonymity. Says Stanley Morris, director of FinCEN, "The only way we can adequately assist our federal law enforcement counterparts in following the trail of the multinational money launderer is through our linkages with multilateral arrangements such as ... [Clipper 3]." 5-23-96. FiTi: "Japanese recruit 2,000 spies to monitor Asia crises." Their main source of official information will be material gathered by six electronic listening posts stationed across Japan. CLI_pr3 (for 2)

1 0

nyt: Report Warns of Security Threats Posed by Computer Hackers
by Joseph M. Reagle Jr. 17 Dec '03

17 Dec '03

Copyright 1996 The New York Times Company May 23, 1996 Report Warns of Security Threats Posed by Computer Hackers By PHILIP SHENON [W] ASHINGTON -- Government investigators warned Wednesday that computer hackers cruising the Internet posed a serious and growing threat to national security, with the Pentagon suffering as many as 250,000 "attacks" on its computers last year. The investigators, from the General Accounting Office, offered scenarios in which terrorists or enemy governments might break into Defense Department computer networks and shut them down, cutting off communications between military commanders in the middle of a war. "There will become an increasingly attractive way for terrorists or adversaries to wage attacks," the investigators said in a report prepared for two congressional committees. "The potential for catastrophic damage is great." The Pentagon did not dispute the findings of the study, although Defense Department officials said they knew of no instance in which hackers had obtained secret information or gained access to computer networks that control the firing of weapons. "We are certainly well aware that people are breaking in or trying to hack into our systems," said Susan Hansen, a department spokeswoman. While the Pentagon is developing encryption devices that show promise in defeating computer hackers, the accounting office, which is the investigative arm of Congress, warned that none of the proposed technical solutions was foolproof, and that the military's current security program was "dated, inconsistent and incomplete." The explosion in the use of the Internet and the increasing power and sophistication of small desktop computers has compounded the Pentagon's problems, creating a worldwide army of hackers able to break into all but the most secure computer networks. The report cited Defense Department estimates that the number of unauthorized efforts to enter its computer systems -- "attacks," in the parlance of cyberspace -- was doubling every year and may have reached 250,000 in 1995, most of them made through the Internet. Pentagon figures suggest that in about 65 percent of those efforts, hackers were able to gain entry to a computer network. The investigators provided details on several recent attacks on the Pentagon's computers, including a 1994 incident in which two computer hackers were able to gain "complete access to all of the information" on the computer systems of the Rome Air Development Center, the Air Force laboratory in Rome, N.Y., where the Defense Department carries out some of its most important research on weapons systems. The report said the hackers rummaged through the computer networks for several days and stole information on the methods used by Air Force commanders to relay secret intelligence and targeting information during wartime. Working through the Internet and a variety of phone switches in South America, the hackers also used the laboratory's computers as a "launching platform to attack other military, government, commercial and academic systems worldwide," including the Wright-Patterson Air Force Base in Ohio and the Goddard Space Flight Center in Greenbelt, Md., the report said. One of the hackers, a Briton whose code name was "Datastream Cowboy," was later arrested in England. The authorities say they do not know the nationality of the other hacker, whose code name is "Kuji" and who was never apprehended. "There may have been some national security risks associated with the Rome incident," the report said. "Air Force officials told us that at least one of the hackers may have been working for a foreign country interested in obtaining military research data or information on areas in which the Air Force was conducting advanced research." The foreign country was not identified in the report. In separate incidents between April 1990 and May 1991, the report said, hackers from the Netherlands broke into computer networks at 34 Defense Department sites and browsed the electronic-mail systems of several department officials, calling up all messages that contained the key words "nuclear," "weapons" or "missile." The accounting office investigator who oversaw the report, Jack L. Brock Jr., said in testimony Wednesday before the Senate Permanent Subcommittee on Investigations that more than 120 nations are reported to be developing "information warfare techniques" that could "allow our enemies to seize control of public networks which Defense relies upon for communications." "Countries today do not have to be military superpowers with large standing armies, fleets of battleships or squadrons of fighters to gain a competitive edge," he said. "Instead, all they really need to steal sensitive data or shut down military computers is a $2,000 computer and modem and a connection to the Internet." The investigators said the Pentagon had made itself vulnerable to attack by making itself so dependent on computers and the Internet, a system that its own researchers created in the 1970s. "Defense's computer systems are particularly susceptible to attack through connections on the Internet, which Defense uses to enhance communication and information sharing," the report said, noting that an estimated 40 million people worldwide are Internet users. "In turning to the Internet, Defense has increased its own exposure to attacks." The Pentagon uses the Internet to distribute electronic mail and other information. During the war in the Persian Gulf, the Defense Department used the Internet to communicate with allied armies and gather and distribute intelligence information. _______________________ Regards, When we ask advice, we are usually looking for an accomplice. -Marquis de la Grange Joseph Reagle http://farnsworth.mit.edu/~reagle/home.html reagle(a)mit.edu E0 D5 B2 05 B6 12 DA 65 BE 4D E3 C1 6A 66 25 4E

2 1

No Subject
by unknown＠example.com 17 Dec '03

17 Dec '03

Copyright 1996 The New York Times Company ^^^^^^^^^^^^^^ Report Warns of Security Threats Posed by Computer Hackers ^^^^^^ ^^^^^^^^ ^^^^^^^ [W] ASHINGTON -- Government investigators warned Wednesday that computer hackers cruising the ^^^^^^^^ Internet posed a serious and growing threat to national ^^^^^^^^ security, with the Pentagon suffering as many as 250,000 ^^^^^^^ "attacks" on its computers last year. ^ ^ -- Love, Qut(a)netcom.com

3 2

The National Research Council Study of National...
by CRYPTO 17 Dec '03

17 Dec '03

Subject: The National Research Council Study of National Cryptography Policy (An incorrect web page/URL locator was posted in the previous message; apologies. If you found your way to the right page anyway and signed up for information, you don't need to do it again.) Please post this message widely I am writing to let interested parties know about the imminent release of the NRC's study of national cryptography policy. If all goes well, we hope to release it on May 30, 1996. However, prior to that time, we won't be able to comment on its contents. For current information on release, visit the web site http://www2.nas.edu/cstbweb/notifyme.html When you visit that site, you'll have the opportunity to be put onto a mailing list so that we can inform you by e-mail when the report is available in print and/or electronically, as well as any public events associated with the report (e.g., public briefings). Herb Lin Cryptography Policy Study Director Computer Science and Telecommunications Board National Academy of Sciences/National Research Council 202-334-2605

1 0

The Political Map, (was Re: FTC online workshop on privacy)
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 12:14 AM 5/23/96 -0400, Shabbir J. Safdar wrote: >There's actually an interesting parallel here. If you look at the >Dworkin "ban pornography because speech is action" crowd, they often >end up on the same side of things as the Christian Coalition "ban porn >because it drives you to ungodly acts" crowd. They both happily support >legislation that would ban such images. The left and the right move so >far off the edges of the scales that they come around and meet each other >on the same side of the issue. This is because any analysis of political opinion that tries to reduce it to a one dimensional metric is ipso facto wrong. Two dimensions gives you a much better match. (Try personal freedom on one axis and economic freedom on the other.) I suspect the more dimensions you include, the better you analysis will be. Regards - Bill ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

1 0

Re: INFO: Transcript of Sen. Leahy's RealAudio chat now available! (5/22/96)
by jim bell 17 Dec '03

17 Dec '03

At 01:34 AM 5/23/96 -0400, Voters Telecommunications Watch wrote: > REALAUDIO TRANSCRIPTS OF LEAHY'S WIREDSIDE CHAT AVAILABLE > Date: May 22, 1996 > URL:http://www.crypto.com/ crypto-news(a)panix.com >NEWS >Rave reviews of Senator Leahy's appearance on HotWired's WiredSide chat >are coming already. With this appearance, the gentleman from Vermont >proves once again that he knows net.politics on a personal level, and >can understands the subtleties that we assume many in Congress are just >learning. Well, he must have learned it all in the last few months, because his bill was the closest thing to DOA that we've seen in a long time, exceeded only by GAK 3. I'd like to hear from him what the source of the text of the Leahy bill on encryption really was: Who pressured him to make it so bad? Jim Bell jimbell(a)pacifier.com

1 0

Re: The Crisis with Remailers
by Bruce Baugh 17 Dec '03

17 Dec '03

At 11:30 PM 5/22/96 -0400, Joined Trill wrote: >On certain political newsgroups (perhaps most noticeably in the >soc.culture.* heirarchy) it's common to see someone's views refuted >because they are identified with a particular interest group. Now _there_ is a good point, well-known to the sort of people I'm concerned about presenting good advocacy to. Thanks! -- Bruce Baugh bruce(a)aracnet.com http://www.aracnet.com/~bruce

1 0

Re: ecash representation
by Peter Trei 17 Dec '03

17 Dec '03

> In my last article, I slightly screwed up. > > A signed 32 bit fixed point number, with two places of precision (less > than you need when calculating things like interest and what have you, > but lets be generous) has a maximum representation of even less than I > off the cuffed -- a mere 21,474,836.48. This is hardly sufficient for > accounting. However, floating point is even less useful. > > .pm Back in the mid-80's, I worked for several years at Irving Trust, a (now-gone) major money center bank. One of the financial messaging systems I worked with stored currency amounts as 96-bit vectors of a base unit (eg, a penny), and could have a 'binary point' anywhere in the vector. There were the usual math functions available to handle this data type. If you split the vector evenly between fractional and non-fractional parts, you could represent amounts up to $7E13 to an accuracy of about 3E-15 of a cent. The maximal amount that could be represented was about $2E28, and the highest precision about $1E-29 of a cent. This range and level of precision was judged adequate of most purposes :-). Peter Trei ptrei(a)acm.org "Did you know that there is a subunit of the Japanese yen?"

2 1