December 2003 - cypherpunks-legacy

RCMP on InfoSec
by John Young 17 Dec '03

17 Dec '03

The Mounties have put out an impressive document on comprehensive security for information technology: encryption and TEMPEST, construction standards and secure rooms, hardware and software, management and personnel: Technical Security Standard for Information Technology Royal Canadian Mounted Police August 1995 Part One (Chapters 1-4) http://jya.com/rcmp1.htm (71K, plus graphics) Part Two (Chapters 5-8) http://jya.com/rcmp2.htm (81K, plus graphics)

1 0

Re: LAW_dno
by Marshall Clow 17 Dec '03

17 Dec '03

In the 12-29-96. Computerworld: >>>> Karen Epper, an analyst at Forrester Research, Inc. in Cambridge, Mass., said electronic commerce companies should do more legal research than that. "Joe Programmer could create a new currency system," Epper said. "But if it's not supported by regulators, what do you have?" <<<< And there you have it. If it's not regulated by the government, it's no good. P.S This was not an isolated quote, this was the central point of the article. -- Marshall Marshall Clow Aladdin Systems <mailto:mclow@mailhost2.csusm.edu> Warning: Objects in calendar are closer than they appear.

3 2

FinCEN reports from GAO
by Howard W Campbell 17 Dec '03

17 Dec '03

A GAO report to congress "MONEY LAUNDERING- Progress Report on Treasury's Financial Crimes Enforcement Network"(GAO/GGD-94-30) is available by snail mail free of charge for the first copy. All one needs to do is cut-and-paste the form below and send it to the address provided. The report gives a general overview complete with a few details describing methodologies. Of particular interest is the "Source Database" which "is designed to facilitate coordiation and cooperation among agencies that might be investigating the same suspects. The database serves as a central repository for information on suspects requested from FinCEN as well as ..." No doubt this will be part of the FAA/Airlines/Law enforcement data matching scheme when it is eventually implemented. The second report(GAO/GGD -95-156) supposedly details changes that the FinCEN people have suggested as needed improvements in the reporting system. I just recently requested the second report and haven't read it. Aloha, Woody email to : orders(a)gao.gov just fill out the name and address sections _______________________________________________________________________________________ Customer ID Number*: (* If using ID#, you ONLY need to provide your name) (**See FAQ Section 2.1 - Customer ID#'s - for details.) First Name: Last Name: Organization/Division/Office: Building: Room #: Street Address: City: State: Zip: Country (if not USA): ---- DOCUMENT/REPORT NUMBERS For example: HEHS-95-58 (You do not need to include leading "GAO/") DATE* Report #1:GAO/GGD-94-30 Report #2:GAO/GGD -95-156 Report #3: Report #4: Report #5: >>>CUT HERE<<<

1 0

Re: Hardening lists against spam attacks
by Lucky Green 17 Dec '03

17 Dec '03

At 10:25 AM 12/31/96 -0800, Peter Hendrickson wrote: >The easiest and fastest solution is to set up toad.com to charge a >dollar per message. (Proceeds to be spent by John Gilmore as he >sees fit.) > >We can then leverage off the existing e-cash infrastructure which >already provides blinding software for free on all major platforms. I am not sure that this proposal would work. Some of the spammers on this list are rather dedicated. They might gladly pay a dollar per message. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://www.mersenne.org/prime.htm

3 2

If He Doesn't Like Me
by Ross Wright 17 Dec '03

17 Dec '03

On or About 30 Dec 96 at 21:32, Timothy C. May wrote: > > Indeed, I added "Ross Wright" to my Eudora filter file after his > "slap you around" message several days ago, so I was mercifully > spared from reading > > > As to why he got *plonked*, this is the price people pay for writing > such things as "maybe we need to slap him around." I have more than > 20 in my > > Oh, and posting private mail is not considered acceptable behavior. > What's next? If Timmy doesn't like what I write will I be kicked off like the Doctor? Wow! From Timmy's trash bin to Kook of the Month FAME!!!!! What more could I ask for? Fuck You, Too, Timmy! But I refuse to censor my own input, so I'll still have to see your fucking stuff. ShitHead. Hostile Agent! How come it took over a year to get this far? Ross (Proud to be in Timmy's Filter File) Wright =-=-=-=-=-=- Ross Wright King Media: Bulk Sales of Software Media and Duplication Services http://www.slip.net/~cdr/kingmedia Voice: 415-206-9906

8 11

Re: [IMPORTANT] Forgery detection
by nobody＠zifi.genetics.utah.edu 17 Dec '03

17 Dec '03

There's a rumor that Tim C[reep] Maypole sells his dead relatives as fertilizer as they constitute the best shit in California. _ {~} ( V-) Tim C[reep] Maypole '|Y|' _|||_

1 0

Bulk Mailing Software
by Jorge Hernandez 17 Dec '03

17 Dec '03

Mailloop is bulk mailing software that will revolutionize how people advertise on the internet. See what all the fuss is about: http://www.mailloop.com

2 1

"Submit to over 500 urls" <new@valley-internet.com>
by Kerrie Mercel 17 Dec '03

17 Dec '03

Hi Do you know about the fully automatic submission program which will link your Web Pages to over 500 Search Engines & Directories? You Can Download the Program and have a FREE TRIAL at: http://www.freegoodies.com/wizard/submit.htm it's great mate! Happy New Year Kessa

1 0

premail.
by nobody＠replay.com 17 Dec '03

17 Dec '03

A scenario: 1) The spooks put a bug (named Eve) on the link between kiwi.cs.berkeley.edu and the Internet. Whenever kiwi.cs.berkeley.edu sents out the pubring.pgp Eve intercepts it and replaces it with a file of the spooks' choosing. This file will selectively replace the public pgp keys of some of the remailers (say exon) in pubring.pgp with keys to which the spooks know the private key. 2) A similar bug is put on the link between the exon remailer and the internet. All email to exon is intercepted, and if found to be encrypted with the spooks' PGP key, it is decrypted, saved, re-encrypted with exon's real PGP key and sent on. It is only a scenario. I am still using premail to send this.

3 2

Re: FinCEN reports from GAO
by John Young 17 Dec '03

17 Dec '03

The GAO reports Woody cites(*) and others are available online at: http://www.access.gpo.gov/su_docs/aces/aces160.shtml Here's a list on money laundering reports, and one which reports on the burgeoning federal law enforcement agencies. (*) Money Laundering: Progress Report on Treasury's Financial Crimes Enforcement Network (Letter Report, 11/08/93, GAO/GGD-94-30). Money Laundering: Characteristics of Currency Transaction Reports Filed in Calendar Year 1992 (Fact Sheet, 11/10/93, GAO/GGD-94-45FS). Money Laundering: U.S. Efforts To Fight It Are Threatened By Currency Smuggling (Chapter Report, 03/09/94, GAO/GGD-94-73). Money Laundering: The Volume of Currency Transaction Reports Filed Can and Should Be Reduced (Testimony, 03/15/94, GAO/T-GGD-94-113). (*) Money Laundering: Needed Improvements for Reporting Suspicious Transactions Are Planned (Chapter Report, 05/30/95, GAO/GGD-95-156). Money Laundering: Stakeholders View Recordkeeping Requirements for Cashier's Checks as Sufficient (Letter Report, 07/28/95, GAO/GGD-95-189). Money Laundering: Rapid Growth of Casinos Makes Them Vulnerable (Letter Report, 01/04/96, GAO/GGD-96-28). Counterfeit U.S. Currency Abroad: Observations on Counterfeiting and U.S. Deterrence Efforts (Testimony, 02/27/96, GAO/T-GGD-96-82). Money Laundering: U.S. Efforts to Combat Money Laundering Overseas (Testimony, 02/28/96, GAO/T-GGD-96-84). Money Laundering: A Framework for Understanding U.S. Efforts Overseas (Letter Report, 05/24/96, GAO/GGD-96-105). ---------------------------------------------------------------------- Federal Law Enforcement: Investigative Authority and Personnel at 13 Agencies (Letter Report, 09/30/96, GAO/GGD-96-154). [Excerpt] Pursuant to a congressional request, GAO provided information on the 13 federal agencies with the largest number of law enforcement investigative personnel. ATF - Bureau of Alcohol, Tobacco and Firearms DS - Bureau of Diplomatic Security CPDF - Central Personnel Data File DEA - Drug Enforcement Administration FBI - Federal Bureau of Investigation INS - Immigration and Naturalization Service IRS - Internal Revenue Service NCIS - Naval Criminal Investigative Service NPS - National Park Service OPM - U.S. Office of Personnel Management GAO found that: (1) 10 agencies employ over 90 percent of federal law enforcement investigative personnel and 3 agencies have 700 or more such personnel; (2) these agencies investigate criminal violations including organized crime, bank fraud, civil right violations, illegal immigration, violations of mail integrity and security, custom, drug trafficking, and money laundering violations, income tax violations, and passport and visa fraud; (3) the agencies derive their investigative authority primarily from statutory laws which are implemented through executive orders, agency regulations, and interagency agreements; (4) the 13 agencies employed about 42,800 law enforcement investigative personnel at the end of fiscal year (FY) 1995 and, except at the Immigration and Naturalization Service (INS), 100 percent of the personnel could execute search warrants, make arrests, and carry firearms; (5) there was a 19 percent overall increase in investigative personnel between 1987 and 1995; and (6) the change in the number of law enforcement investigative personnel ranged from an increase of about 66 percent at INS to a decrease of about 14 percent at the Naval Criminal Investigative Service.

1 0