December 2003 - cypherpunks-legacy

Re: U.S Mint Electronic Cash Study
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Sender: e$(a)thumper.vmeng.com Reply-To: jmuller(a)brobeck.com (John D. Muller) Mime-Version: 1.0 Precedence: Bulk Date: Thu, 20 Mar 1997 08:38:05 -0800 From: jmuller(a)brobeck.com (John D. Muller) To: Multiple recipients of <e$(a)thumper.vmeng.com> Subject: Re: U.S Mint Electronic Cash Study Federal Reserve Governor Kelley and New York Fed President McDonough have both stated that the Fed has no plans to issue electronic money. See: http://www.bog.frb.fed.us/BOARDDOCS/SPEECHES/19960618.htm http://www.ny.frb.org/pihome/news/speeches/sp961008.html ---------- The e$ lists are brought to you by: Intertrader Ltd - Commerce Solutions in the UK Visit <http://www.intertrader.com/> for details ... Where people, networks and money come together: Consult Hyperion http://www.hyperion.co.uk info(a)hyperion.co.uk Like e$? Help pay for it! See <http://www.shipwright.com/rah.html> Or, for e$/e$pam sponsorship, see <http://www.shipwright.com/rah/> Thanks to the e$ e$lves: Of Counsel: Vinnie Moscaritolo <mailto:vinnie@webstuff.apple.com> (Majordomo)^2: Rachel Willmer<mailto:rachel@intertrader.com> Commermeister: Anthony Templer <mailto:anthony@atanda.com> Interturge: Rodney Thayer <mailto:rodney@sabletech.com> --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "Never attribute to conspiracy what can be explained by stupidity." -- Jerry Pournelle The e$ Home Page: http://www.shipwright.com/rah/

1 0

Report from Supreme Court on CDA arguments
by Declan McCullagh 17 Dec '03

17 Dec '03

************** http://cgi.pathfinder.com/netly/editorial/0,1012,744,00.html The Netly News Network @The Supreme Court March 19, 1997 By Declan McCullagh (declan(a)well.com) Noah Robischon (noah(a)pathfinder.com) U.S. Supreme Court justices pummeled government proponents of the Communications Decency Act this morning during a review of the law that will set new standards for free speech in the 21st century. The notorious CDA, reviled throughout cyberspace since the day it was signed by President Clinton in February 1996, would criminalize the ill-defined category of "indecent" communications on the Net. A Philadelphia federal court struck down the law a year ago. Justice Antonin Scalia called the lawsuit, brought by the American Civil Liberties Union against Attorney General Janet Reno, "a distinctive form of First Amendment argument unlike others" because it covers an uncharted and rapidly developing communications medium. "That's a new case for us," he said. Deputy Solicitor General Seth Waxman argued that the CDA merely established boundaries on the Net and made it harder for pornographic material to fall into the hands of minors. He likened the law to a cyber-zoning ordinance; without it, he said, the Internet "threatens to give every child a free pass to get into every adult movie theater or bookstore in the country." But less than a minute after Waxman started, the justices impatiently plowed into his presentation. Justice Stephen Breyer demanded: "Suppose a group of high school students decides to talk over the Internet and they want to talk about their sexual experiences. I mean, that's been known to happen in high school." Would they "be guilty of a federal crime?" Justice Antonin Scalia cut in, joking: "There's no high school student exemption?" "You might find it in the legislative history, but I do not," Waxman replied. For much of the 70-minute hearing, the discussion swirled around the question of how netizens could comply with the CDA. Waxman claimed that the act includes a battery of ways to protect a person from prosecution -- visitors to "indecent" web sites would be required to provide credit-card numbers, for instance. But Justice Sandra Day O'Connor was unmoved. "How does that fit in with the use of web sites by noncommercial users, libraries?" she asked. Justice David Souter wondered if the portions of the act banning the "display" of indecent materials would imprison parents. "I take it a parent who allows his computer to be used by a child viewing indecent material, that parent would go to prison," he said. When Waxman demurred, Scalia took up the chase. "No... One of those offenses is a display offense," he pointed out. Chastened, Waxman replied, "I see your point." Bruce Ennis, arguing on behalf of the ACLU and American Library Association coalitions, contended that the CDA bans speech, even for adults; is not as effective as blocking software; and is unconstitutionally vague. Justice Scalia, who noted that he uses a computer, pointed out that technology is rapidly changing. "So much of your argument is based on what's currently available," he said to Ennis. "This technology is changing so quickly. Is it possible that this statute is unconstitutional now but could be [constitutional] in four or five years?" Ennis replied: "Not as it's written." During a subsequent press conference, Ennis added that indeed, the technology is changing, and is giving parents more control over what their children do and see online. "Precisely because the technology is changing, the government should not be trying to enforce this law," he said. The ACLU attorneys who joined Ennis were grinning: the justices appeared to understand the nature of communications online, noted that teens have rights, and focused on free speech, not porn. After the hearing, the anti-CDA protestors who had braved a chill rain to chant "Hey-ho, the CDA has got to go!" were displaced by a larger, bullhorn-wielding group of anti-porn advocates. One sign demanded, "Don't sacrifice my child on the altar of the First Amendment." One of the most vocal protestors was 19-year-old Berkeley student Kenritsu Yamamoto, who happened to be dressed as a Net cupid, complete with angel wings and a circuit board breastplate. He was acting in the Pure Love Alliance's skit illustrating how pornography and "Net abduction" harms children. In the skit, Yamamoto accidentally kills a small child to demonstrate the dangers of a world without the CDA. "If a small child buys porn at a 7-11, then the store can be held accountable," said Yamamoto. "But on the Net, there is no accountability." A few steps away, Donna Rice Hughes, Enough Is Enough's communications director, was explaining why she thought the CDA should be upheld. "Without the CDA, Larry Flynt can make his teasers and centerfolds available to kids on the Internet," she said. Across from Hughes stood Bruce Taylor, the lawyer who argued against Flynt in the Supreme Court more than a decade ago. "The technology is advancing so well that the court is going to see that people can use this stuff without violating the law," he said. If the Supreme Court disagrees and strikes down the CDA, some members of Congress have pledged to try again. Netly cornered Sen. Charles Grassley (R-Iowa), a stauch supporter of the CDA, in the basement of the Capitol after the argument. What would he do? "How to do this I don't know, but our objective hasn't changed," he replied. "Some way, somehow, we will have to find a constitutional way of doing this for kids, protecting them from porn the way we did for printed material." Rep. Bob Goodlatte (R-Virginia) says he hopes the high court "will give the Congress some very clear guidance." But any Congressional tinkering will come after the Supreme Court decides. A ruling is expected in early July. [McCullagh is one of the plaintiffs in the lawsuit challenging the CDA.] ------------------------- Time Inc. The Netly News Network Washington Correspondent http://netlynews.com/

2 2

NSA responds to criticism over weakening cellular crypto
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Thu, 20 Mar 1997 15:50:40 -0800 (PST) From: Declan McCullagh <declan(a)well.com> To: fight-censorship-announce(a)vorlon.mit.edu Subject: NSA responds to criticism over weakening cellular crypto John Markoff writes in today's NYT: Several telecommunications industry officials said the pressure came from the National Security Agency, which feared that stronger encryption technology might allow criminals or terrorists to conspire with impunity by cellular phones. But independent security experts now say that the code is easy enough to crack that anyone with sufficient technical skills could make and sell a monitoring device that would be as easy to use as a police scanner is. Below the NSA's Clint Brooks responds to Dave Banisar. -Declan ---------- Forwarded message ---------- Date: Thu, 20 Mar 1997 18:08:28 -0500 From: Dave Banisar <Banisar(a)epic.org> >Date: Thu, 20 Mar 1997 17:35:44 -0500 >From: Clinton Brooks <cbrooks(a)romulus.ncsc.mil> >Reply-To: cbrooks(a)romulus.ncsc.mil >MIME-Version: 1.0 >To: banisar(a)epic.org >CC: "Brooks, Clinton" <cbrooks(a)romulus.ncsc.mil> >Subject: Cellular Phone Flaw > >Dave, > > Re your comments on the flaw apparently found in cellular phones: > > We have released the following statement: > > "NSA had no role in the design or selection of the encryption >algorithm chosen by the Telecommunications Industry Association (TIA). >NSA also had no role in the design or manufacture of the telephones >themselves. As we understand the researchers' claim, it appears that >the algorithm selected and the way it was implemented in the system has >led to the stated flaws. > >NSA provided the TIA with technical advice on the exportability of these >devices under U.S. export regulations and processes." > > > Clint > ========================================================================= David Banisar (Banisar(a)epic.org) * 202-544-9240 (tel) Electronic Privacy Information Center * 202-547-5482 (fax) 666 Pennsylvania Ave, SE, Suite 301 * HTTP://www.epic.org Washington, DC 20003 PGP Key: http://www.epic.org/staff/banisar/key.html =========================================================================

1 0

WOW-COM Registration
by wow-com＠wow-com.com 17 Dec '03

17 Dec '03

Dear cypherpunks: Welcome to WOW-COM. By now you have had a chance to explore WOW-COM's rich content and features. Here are a few items to check out during your next visit. * The Wireless Daily News - updated three times a day. * WOW-COM's Career Center - The Wireless Workplace is the premiere source of wireless jobs. * Fraud and Antenna Siting Micro sites - latest news, legal developments, resources, and analyses from experts at CTIA. >From time to time WOW-COM will use email to inform you of new features. Please let us know if you do not want to receive these updates. WOW-COM does not sell or distribute its mailing lists. Sincerely, The WOW-COM Team wowcom(a)ctia.org http://www.wow-com.com

1 0

5.9 CENT PER MINUTE
by danny58＠speedydelivery.net 17 Dec '03

17 Dec '03

_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ S P E C T R U M C O M M U N I C A T I O N S !!! 5.9 CPM (cents per minute) LONG DISTANCE!! BRAND NEW --- JUST ANNOUNCED!! NO BLACK BOX NEEDED!! YOU DO NOT HAVE TO PRE-PAY FOR LD!! _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ FREE PERSONALIZED WEB PAGE WHEN YOU JOIN OUR SUCCESS TEAM ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Tag-Team Email support in place ready to go! ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ => * 5.9 CPM LONG DISTANCE - 24 hours every day * Billed in 6 second increments * NO black box required! NO minimum usage! * NO pre-payment on LD required * ONE TIME $50 to sign up * Sponsor just 2 to recoup your $50 investment * NO Minimum monthly purchase required * Commissions paid WEEKLY, not monthly * Phone cards available for your convenience * Fantastic pay plan ===> $300/day and $1000/day ============================================ COMING SOON * PrePaid Cellular * Nationwide Internet Services * Virtual Office Technology * International Call Back Service * TV Internet Devices (Web TV) * Discount residential/business 800 numbers * Satellite TV Equipment programming ============================================ We've signed up folks EVERY DAY since we joined! All our top leaders and heavy hitters are fully qualified and waiting for our next batch of NEW sign-ups to place people under. You sign up with us ... and you'll have the BEST upline support you've ever dreamed of. We have already given away over 100 people to our downline already ... you can be next!! From day one you'll qualify for group volume on all your levels down through INFINITY!!! We are co-op advertising to huge amounts of people. Once you respond to this email ... you will see why folks are flocking to us for the sharpest web pages and tag-team script email support. Folks, this blows away everything else out there! Spearheaded by an accomplished attorney and full staff with over 18 years of telecommunications experience and major carriers on board. Currently 3,000+ daily application processing ability about to triple in capability. This offers all the security you could want with the best opportunity on the market!!! There will be many multimillionaires created literally almost overnight with this program! You've seen the incredible explosion created over 7.9 LD, you can imagine how fast this will spread at only 5.9 with none of the hassles!!!! DON'T MISS OUT ON THIS EXTRAORDINARY OPPORTUNITY!!! Get details NOW and join before everyone else you know does!!! => We'll send you the Fast Fax on Demand giving you all the details => We'll send you the Phone number for a 3 minute introduction => We'll send you the Company conference call info => We'll send you the info on OUR upline/downline conf calls => We'll show you how easy and fast YOUR web page can be up $$ Yes, we are already getting checks! $$ Yes, we already have our packets from the company Don't join any group til you see the web page they will offer you!! Our web pages are fantastically and beautifully designed. Our web masters have encorportated technologies in this web page that others only hope for. We have it NOW and ready for you to use! HIT THE REPLY BUTTON and we'll immediately send out details so you can sign up FIRST and get into the BEST POSITION POSSIBLE! You have never found a better time than NOW !!

1 0

Re: encrypt_1.html
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- -=> Quoting In:lynx_user@linux.nycmet to Harka <=- In> Clinton Admin. To Offer Encryption Bill Shortly In> WASHINGTON - The Clinton administration plans to introduce In> legislation soon that would clearly affirm that encryption users in In> this country are free to use any type or strength of encryption In> technology, a senior administration official said. In> Currently, no such explicit law is on the books. Obviously, by making a law, that strangely enough tries to legalize, what is legal already, the administration is trying to bait people into "voluntary" key escrow, which are in my opinion the actual main points of the law... In> The bill also would: In> -- Spell out the legal conditions for the release of "recovery In> information" to law enforcement officials. The bill also provides In> legal safeguards for third-party "key recovery agents" who have In> properly released such information. etc.etc... What a bunch of bullshit. Now, that the backdoor "Clipper" doesn't work due to enough awareness, they now try all the windows of the house of cyberspace to do their black-bag job of getting a lock on the front-door, that they'd have a master-key for... Ciao Harka /*************************************************************/ /* This user supports FREE SPEECH ONLINE ...more info at */ /* and PRIVATE ONLINE COMMUNICATIONS! --> http://www.eff.org */ /* E-mail: harka(at)nycmetro.com (PGP-encrypted mail pref'd) */ /* PGP public key available upon request. [KeyID: 04174301] */ /* F-print: FD E4 F8 6D C1 6A 44 F5 28 9C 40 6E B8 94 78 E8 */ /*<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>*/ /* May there be peace in this world, may all anger dissolve */ /* and may all living beings find the way to happiness... */ /*************************************************************/ ___ Blue Wave/386 v2.30 [NR] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBMzJYADltEBIEF0MBAQFbFgf9HEgRLdqaE9jiWXBr8ztkLPTLAaQ5BfRE e4Q6KEYC/zGXUOEtxUEN755rIHo8PNwwSM7ovbEGf7La15O4AnNxRKbVvFbUWGTv nVw3eMDiy/mt11DqMQ316zAIv0sIpXJhspxHTSMWU++uIR3pVUGq31weFPUN4f4B RruaJwEmf1dvVVJkXHgDsrC8HiECSrBidvz57vfpeZpIj4BscEdycBEAH8zmnPic t3Hi9sc5Gc6DQz6ThbaMAj2bHhWEwPuw3GiKe2yzM6A2D/DeIZrlJ0dE2hK6DMXV jz2/DKNQYp9kS1d6vojPdYYEaPXR/upg6Otqno3SJ71DEMqcc49IDA== =vBCY -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

3 2

CTIA Downplays Code Crack
by John Young 17 Dec '03

17 Dec '03

(Bruce Schneier's rebuttal of this follows) TITLE: CTIA: Encryption of Digital Wireless Phones SOURCE: PR Newswire DATE: 3/20/97 12:10 PM CTIA: Encryption of Digital Wireless Phones Today, a group of professional and academic cryptographers will announce that it has "discovered a flaw in the privacy protection used in today's most advanced digital cellular phones." Following is a set of questions and answers that arise from that announcement. Q. Does this mean that eavesdroppers can listen in on my phone calls? A. No. The encryption discussed by the researchers involves the algorithm used to encrypt numbers punched on the keypad of a phone, not the algorithm used to encrypt voice transmissions. Q. Is it easy to break this keypad number code? A. Not at this time. It involves very sophisticated cryptological knowledge. The digital encryption system now in use is designed to inhibit interception by the unsophisticated. Any technology developed by one person can be broken by another with the application of sufficient technology. This announced attack requires multiple minutes -- up to hours -- of high speed computer processing to break a coded message. 0. What is the impact of this announcement on people who now use wireless phones? A. Virtually none. Approximately 95 percent of the wireless phones now being used are analog phones, not digital phones. The possible impact of this announcement is only relevant to some digital phones that are now being introduced to the market. Q. Why didn't the wireless phone industry develop phones that have unbreakable security? A. Standards for phone technology are developed within the confines of federal regulations and the realities of the marketplace. A wireless phone is a consumer product, not a spy v. spy technology adequate for national security. Such a unit would have cost, battery life and call set-up times which would make it unacceptable to consumers. 0. Does this announcement have any impact on the industry's efforts to stop phone cloning? A. No. During the past year, the industry has been very successful in introducing new technologies that prevent phone cloning. These authentication and "fingerprinting" technologies operate differently and are not compromised by the cryptography announced today. Q. What is the industry doing about this problem? A. Tom Wheeler, the president and CEO of CTIA, testified before Congress on February 5, about the need to strengthen the laws protecting the security of wireless phone calls. It is currently illegal to intentionally intercept a wireless phone call. Unfortunately, whereas federal law prohibits the sale and manufacture of devices designed to eavesdrop on wireless calls, it does not extend the prohibition to cordless phones and the newer digital frequencies. In regard to today's announcement, Wheeler said, "This is the horse nudging at the barn door and it is time to act before the horse is gone completely." CTIA is the international association for the wireless telecommunication industry. It represents more PCS and cellular carriers than any other association in the world. INTERNET USERS. News about the wireless telecommunications industry is updated several times each day on CTIA's World Wide Web site (http://www.wow-com.com) CTIA news releases and other information also are available an WOW-COM. NOTE: The cryptography researchers are Bruce Schneier, Counterpane Systems, 612-823-1098; Robert Sanders, University of California, Berkeley, 510-643-6998; David Wagner, University of California, Berkeley, 510-643-9435; and Lori Sinton, Jump Start Communications, 415-938-2234. CONTACT: For more information, please contact Tim Ayers, 202-736-3203, or Jeffrey Nelson, 202-736-3207, both of CTIA.

1 0

Schneier Rebuts CTIA
by John Young 17 Dec '03

17 Dec '03

(Thanks to DAW for the CTIA and Schneier forwards) Here's Bruce Schneier's press release rebutting the CTIA's assertions. Forwarded message: MINNEAPOLIS -- The Cellular Telecommunications Industry Association (CTIA) issued a press release discussing our recent cryptographic break against digital cellular phones. Following is a correction of some of their mis-statements. 1. While it is true that our paper did not discuss voice encryption, that does not mean that the voice encryption system is any good. As early as 1992 others -- including noted expert Whitfield Diffie -- have pointed out fatal flaws in the new standard's voice privacy features. The underlying technology is the Vegienere cipher, broken by the Union Army during the American Civil War. One cryptographer was quoted in the July 1992 Communications of the ACM calling the voice privacy protection "pitifully easy to break." Certainly digital cellular is harder to eavesdrop on than analog cellular--the latter just requires a scanner tuned to the correct frequencies--digital cellular voice security can be broken in real time by anyone with a little bit of budget, expertise, and desire. 2. While our break did involve sophisticated cryptographic expertise, our results have been published. While we have no intention of publishing our computer code, anyone able to understand our paper can implement our attack. It is not true that "any technology developed by one person can be broken by another with the application of sufficient technology." The Telecommunications Industry Association (TIA) could have designed secure algorithms to protect voice and messages; they chose not to. 3. While it is true that our announcement does not affect most people because they use analog phones, that is a misleading statement. Analog phones are even less secure; the whole point of digital cellular was that it was secure. This announcement affects both CDMA and TDMA cellular systems, but not GSM systems. 4. The phone industry did not develop phones with unbreakable security because they chose not to. It is possible, with today's technology, to implement digital cellular algorithms in cellular phones without affecting the phone's weight, power consumption, voice quality, or call setup. It takes more computer processing power to digitize the voice than it does to encrypt the digital voice. 5. It is true that our attack does not affect phone cloning. The TIA put more effort into preventing cellular fraud, because that directly affects their bottom line. Cellular privacy is much less of a concern, so they didn't bother doing a good job. 6. All the industry seems to be doing about this problem is releasing misleading press releases in an attempt to pretend that nothing is wrong. One moral of this story is that good security standards need to be developed in the open. The CTIA believed that keeping the details of their security measures secret improved the security of the system. This notion works, as long as the details remain secret. All good security systems are designed to remain secure even if their details are made public. To do otherwise is naive and foolish, similar to creating recipes without ever bothering to let anyone taste the food. The CTIA also pointed to the need for legislation to make this illegal. While important, this is not a solution. Listening in on analog cellular phones is illegal, but people do it all the time. Stealing cars is illegal, but Lojack is still in business. We need to protect ourselves with technology, not with legislation. Laws are a quick fix for an industry unwilling to devote resources to solving their problems.

1 0

Spam from DM.NET
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Who the fuck is "dueling modems"? Why am I getting this shit at my site? This is dm.com, not dm.net. What a bunch of fucking morons. "Jim RoadRunner" <Wild_Mouse(a)msn.com> writes: > > > ---------- > From: nic > Sent: Wednesday, March 19, 1997 5:26 PM > To: Jim RoadRunner > Subject: Welcome to Dueling Modems! > > Dear James, > > Welcome to Dueling Modems! > > This letter is to confirm that we've received your signup and billing > information, and have set up your account. > > ***** ACCOUNT INFORMATION ***** > > Acct #: 0032108 > ID: wild-mouse > Password: railroad > Email Name: wild-mouse(a)dm.net > Email Destination: wild_mouse(a)msn.com > > We may have tweaked some of the ID/Pwd information you put on the form, > to meet the requirements of our operating system. Please make sure you > use the information above when configuring your software. > > ***** EMAIL INFORMATION ***** > > If your email destination is "local," you'll need to set up your email > program with the following parameters: > > POP3 Server: mail.dm.net > SMTP Server: mail.dm.net > Email Account ID: wild-mouse > Email Account Password: railroad > POP Account: wild-mouse(a)dm.net > Real Name: (or your "handle") > Return Address: wild-mouse(a)dm.net > > ***** BILLING INFORMATION ***** > > You've chosen to be billed by: Credit Card > Your first billing month was/will be: Apr-97 > Your billing frequency is: monthly > > If you've chosen to be billed by check, you'll receive an invoice via > email sent to the above destination address. > > Electronic Funds Transfer subscribers will receive an additional email > containing the information you'll need to provide to your bank to set up > the process. > > ***** NEWSGROUP INFORMATION ***** > > Your personal members' newsgroup is: > > dm.members.wild-mouse > > ***** WEB PAGE INFORMATION ***** > > The URL for your personal web site is: > > http://www.dm.net/~wild-mouse/ > > If you've opted to have a personal web page: > > To load your web pages, you'll need an "ftp client." This software lets > you upload files to a remote server. > > (Dueling Modems provides links to several ftp packages on our Software > Warehouse web page.) > > Configure your ftp client to log onto: > > www.dm.net > > Make sure you set up the ftp client software to use the ID and password > listed at the beginning of this letter. You'll be directly connected to > your own directory space. > > Once connected, you'll see a sub-directory named "web_pages". Log into > that directory. You can then upload your HTML files. > > For help in creating your web pages, check into the dm.html.* area on > the news server. The staff there are experts, and are delighted to help > out. > > Apologies for the brevity of these instructions. We'll be creating an > Online User's Guide soon, which will include detailed instructions for > various software packages. For the time being, though, please ask for > help in dm.html.*. > > ***** USER AUTHENTICATION ***** > > (aka, Logging into the news server.) > > We're beginning to move parts of the service to "subscriber-only" mode, > which will require you to set up your User ID and Password in your > newsreading software. > > User authentication will also be needed to gain access to private areas > within the news server. We've set up two groups specifically to test > your log-in: > > dm.priv-test.announce > dm.priv-test.sign-in > > Please set up your newsreader for user Authentication now, and refresh > your group list to make sure you can reach these two groups. If you > can't, check into dm.admin.help-desk.newsreaders for assistance. > > Unfortunately, the very popular Netscape Navigator does NOT provide any > way of entering your ID/Password when you try to connect to DM's server, > which means that eventually you won't be able to reach the BBS with > Navigator. :( > > The solution is to use a different software package. We recommend Free > Agent for Windows users and NewsWatcher for Mac users. Both of these > packages are free and available from DM's Software Warehouse web page: > > http://dm.net/software.htm > > We're taking our time in making this conversion, btw., so as to make > sure nobody gets caught unable to reach us. So don't worry about that. > > Of course, installing and learning new software always takes time and > often requires a bit of hand-holding. Again, feel free to check into > the dm.admin.help-desk.newsreader group for help. That group will be > publicly available for some time to come. > > As mentioned above, we will be setting up an Online User's Guide on the > DM web site. Installing and configuring software will be covered > extensively. But for the meantime, please use the help desk newsgroup. > > Again, welcome to Dueling Modems. If you have any questions, feel free > to drop me an email at: > > sysop(a)dm.net > > If I don't know the answer, we'll find somebody who does. ;) > > Nic Grabien > President, Dueling Modems > --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

3 2

Mobile IP Resources -- Analysis of Security and Privacy in Mobile IP
by Bill Stewart 17 Dec '03

17 Dec '03

An anonymous poster to alt.cypherpunks recommended the attached article. http://www.neda.com/mobileIpSurvey/html/mobileIP_37.html Title: Mobile IP Resources -- Analysis of Security and Privacy in Mobile IP Go backward to Improving Reliable Transport and Handoff Performance in Cellular Wireless Networks Go up to Mobile IP Research and Technical papers Go forward to Variable and Scalable Security: Protection of Location Information in Mobile IP Analysis of Security and Privacy in Mobile IP http://www-i4.informatik.rwth-aachen.de/~andreas/PAPERS/SecurityPerformance… Authors: A. Fasbender, D. Kesdogan, and O. Kubitz Date: March 1996 In this paper we present a possible extension of the proposed Mobile IP and route optimization protocols, the Non-Disclosure Method (NDM). It prevents the tracking of user movements by third parties and gives mobile users control over the revelation of their location information, according to their personal security demands. We give an overview on Mobile IP protocols and briefly discuss these protocols in terms of security issues. We show that confidential location management in Mobile IP is an unsolved problem. Then we propose our method for providing untraceable communications in packet-oriented mobile networks. NDM is based on the idea of mixes, which has been suggested by Chaum for hiding the originator addresses of electronic mails. Our algorithm prevents the linkability of sender and recipient addresses in Mobile IP, can be easily adopted to other mobility supporting networks as well. We conclude our paper with performance aspects, discussing the trade-off between the level of security provided and the costs of NDM in terms of increased packet transmission delays. For this purpose, we present a new modelling approach for Internet connections, which is based on empirically derived packet delay distributions and their analytical description. Our results show that the overhead for confidential location management is not as critical as might be expected, and that a considerable delay reduction compared to mixes can be achieved. info(a)neda.com

1 0