December 2003 - cypherpunks-legacy

ADDENDUM: BAY AREA CYPHERPUNKS, JUNE 14, AT PGP Inc. IN SAN MATEO
by Bill Stewart 17 Dec '03

17 Dec '03

Please refer to the official announcement at http://www.pgp.com/newsroom/cpunk-info.cgi in case any of the PGP-related details change....

1 0

Re: FCPUNX:Response to 'My War'
by Peter Trei 17 Dec '03

17 Dec '03

James A Donald writes: > fAt 10:07 PM 6/9/97 -0700, se7en wrote: > > Anyone who thinks this doesn't affect the young children, you are wrong. > > I doubt these children consented to the sexual activity. I doubt they > > consented to being photographed. I doubt they consented to the pictures > > being distributed to others. > > Most of these children are adults now. A great many of them are > grandmothers. Yet I see no prosecutions for the distribution of > images by the supposed victims. [...] > Produce a victim and you will find it a lot easier to prosecute. See http://www.net.be/connerotte/english-text.html for the timeline of last year's child sex & porn scandal in Belgium. Some of the victims there will never bring suit: they are dead. Peter Trei trei(a)process.com

2 1

Re: FCPUNX:Response to 'My War'
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

fAt 10:07 PM 6/9/97 -0700, se7en wrote: > Anyone who thinks this doesn't affect the young children, you are wrong. > I doubt these children consented to the sexual activity. I doubt they > consented to being photographed. I doubt they consented to the pictures > being distributed to others. Most of these children are adults now. A great many of them are grandmothers. Yet I see no prosecutions for the distribution of images by the supposed victims. > I am sure this affects the > emotional/psychological state of the child victim in many ways beyond > what most of us can understand. I think we can all agree that is creates > a less-than-optimal psychological state in the children. Produce a victim and you will find it a lot easier to prosecute. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

[off-topic] LEA announcement about children & computers (long)
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Cpunx: For your amusment - nicked from the local Telco web site. I especially enjoy the link between role playing games, satanism and computing. ----------------------------------------------------------------------- CHILDREN AND COMPUTERS: THE HIDDEN DANGER Dear Parent: With the never ending development of computer technology and as an increasing number of people become computer literate, it is much more likely that our children may be victimized or exploited in a computer environment. If your child has a home computer (or access to someone elseÆs computer), especially those equipped with a modem, then please take the time to review this guide and become familiar with the behavioural warning signs. It will only take a few minutes and may prevent devastating problems in the future. Keep in mind, however, that no matter how ôawareö you are of these warning signs, the most important safeguard is to monitor the contacts that your children are making in this unrestricted environment and regulate their computer related activities. In addition, do not allow your children to isolate themselves from family or friends by engaging in solitary computer activities for hours on end. A computer should never become a substitute for social interaction. 1984 Government Study TodayÆs children are being weaned on video games and quickly move to computers. Society has high hopes for this technically literate generation, but the proliferation of microcomputers and computer literacy also means that more and more assets will be stored on computer systems and the community of potential computer criminals will increase astronomically. Tips for Safe Computing PARENTS Please advise your children to observe the following safety rules whenever they are ôon-lineö. Remind them that no matter how safe and/or friendly the BBS seems (and this includes the major services as well as the Internet), there is always a potential for danger. They Should: òNever give out any personal information about themselves - particularly full names, addresses, phone numbers, financial information, etc. to anyone they meet on line. òAvoid responding to anyone who leaves them obnoxious, sexual or menacing E-mail. They should not become involved in public ôFlameö sessions as they have no idea who they are dealing with and what access an individual may have to their account information. òReport all electronic harassment and/or abuse to their parents. As parents, you should notify the SYSTEM OPERATOR (SYSOP) of the problem. If the SYSTEM OPERATOR does not give you satisfaction in stopping this abuse, the police should be notified. òNever set up face to face meetings alone with anyone they have met on the BBS. They should always take someone with them and always meet in a public place. òNever have someone come to their house until they get to know them and until they are satisfied that they have given accurate personal information about the individual. òSafeguard all credit card and telephone card numbers. They should pay for BBS services by money order whenever practical. PARENTS: Notify the police of all attempts by adults to set up meetings with your children. This is by far the most dangerous situation for children and should be prosecuted when appropriate. ôThe modern thief can steal more with a computer than with a gun, and tomorrowÆs terrorist may be able to do more damage with a keyboard than with a bombö. National Research Council Washington, D.C. Some Child Behavioural Warning Signs: Computer Addiction òWithdraws from friends, family etc. May lose interest in social activities. òUse of new (unusual) vocabulary, heavy with computer terms, satanic phrase or sexual reference (or sudden interest in related posters, music, etc.) Look for related doodling or writing. òUse of words such as: hacking, phreaking or any words with ôphö replacing ôfö. òLack of interest in self and appearance or indications of lack of sleep, (which might indicate late night modem-play). Other Potential Danger Signs òComputer and modem running late at night (even when unattended). òStoring of computer files ending in: GIF, JPG, MPG, AVI, MOV, BMP, TIF, PCX, DL, GL or unusual CDÆs; these are video or graphic image files and parents should know what they illustrate. òNames on communications programs which seem satanic or pornographic. òObsession with fantasy adventure games, (Dungeons and Dragons, Trade Wars, Sexcapade, etc). òUse of computer to scan or run telephone numbers or credit card numbers, (look for ôsequential diallingö programs). What you can do to Protect your Children Talk to your children about their use of the computer Know What They are Doing òIf possible, keep the computer in a ôcommonö area of your home, such as a family room or den. òYou decide if your child has a legitimate need for a modem. òIf a modem is being used, control the activity by monitoring times used and numbers dialled. Closely Monitor your Long Distance Bill òIf the computer is left running unattended, check the screen. òIf it is showing a series of four digit numbers, the computer is trying to identify calling card ôPINö numbers. òIf it is showing a series of sixteen digit numbers, the computer is trying to validate credit card numbers. òIf you are not computer literate, make sure you at least learn the basics about computers, take a course or have your child teach you. Courtesy of: Chief Alfred O. Olsen Warwick Township Police Department Lititz, Pennsylvania, USA

1 0

Re: Access to Storage and Communication Keys
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:06 PM 6/9/97 -0400, Marc Horowitz wrote: >To me, mail encryption is not communications encryption. The mail >message is encrypted, just like a file might be. Then those encrypted >bits are sent over the net. It is precisely because I have access to >the ciphertext as a separate entity that this is not communications >encryption. An interesting perspective, but I don't know that it works. For this to make sense, either the business needs to have access to the stored received email if the user gets run over by a police car, or else the business needs to know that it doesn't _need_ access - either because the mail isn't business related, or because the business-related parts have been transferred to other systems using a convenient user interface. On the other hand, if receiving email with encrypted attachments is _in_convenient to store in a mail system, maybe it will help encourage people not to use that mail system for storing messages, or to junk the mail system entirely :-) (I'm thinking here of systems like IBM PROFS and Microsoft Mail, which both encourage storage in their monolithic mailboxes. >The *only* reason to escrow communications keys is to spy on people; >there is never an opportunity for data loss here. Yeah! (Actually, the other reason to escrow them is because you're using the same keys for communication and storage, and you have potentially decent business reasons for backup of storage keys, but that's only the case if you're not using a sufficiently flexible cryptosystem and are using key backup instead of data backup, which is really the preferred approach anyway.) # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list or news, please Cc: me on replies. Thanks.)

8 10

Re: FCPUNX:McVeigh
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 12:42 PM 6/4/97 -0400, Hallam-Baker wrote: > Bell's Murder Politics scheme was a censorship scheme. Surely people would be more inclined to kill politicians for what they do, rather than what they say. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

12 15

Unleashing Micro Viruses on Networks
by John Young 17 Dec '03

17 Dec '03

6-11-97, Janes' Defence Weekly: Unleashing Microbots on Iran's IT Networks Unlike the 1990-1991 Gulf War, when the USA inserted a National Security Agency-developed, virus-laden microchip into a French computer printer headed for Baghdad, in 2015 the USA relies on several methods for infecting Iranian computers. These efforts hope to get around problems created by the proliferation of encryption technology. While some peripheral equipment, like printers, will be intercepted and bugged in order to disable mainframe computers, intelligence technicians will also use the internet to send guided viruses into Iran's national information infrastructure. Thumbnail-sized micro-robots, known as `microbots', will also be unleashed by micro-air vehicles and naval guns. These parasites will creep into electronic equipment, attach themselves, and keep themselves alive by draining generator power. Once the electronics system's energy is depleted, the fully charged microscopic vermin will search for a new victim. The main problem will be that they are too small to carry identification equipment and so they infect indiscriminately. As such, they must be deployed far away from allied equipment. However, packages of microbots can be destroyed remotely as allies prepare to invade enemy territory. <> [Copyright 1997, Jane's Information Group]

1 0

Feds have lost battle against encryption
by Bill Frantz 17 Dec '03

17 Dec '03

There is an editorial in the June 11 San Jose Mercury News titled, "Feds have lost battle against encryption". It mentions the Sun/Elvis+ deal, and representative Goodlatte's bill. It says, "Government warriors should pack up their rusty cannons, admit that they've lost this battle, and learn to live in the 1990s." It speaks favorably of increased sentencing for criminal use of encryption. It says the bill does not go far enough in removing export controls. Try http://www.sjmercury.com for a copy. (I haven't looked, so no guarantees.) ------------------------------------------------------------------------- Bill Frantz | The Internet was designed | Periwinkle -- Consulting (408)356-8506 | to protect the free world | 16345 Englewood Ave. frantz(a)netcom.com | from hostile governments. | Los Gatos, CA 95032, USA

5 4

[CNN] Stolen Laptops and lame 'solution'
by geeman＠best.com 17 Dec '03

17 Dec '03

reproduced under fair-use: > PC, phone home > > Industry aims to stop > theft of laptops > > June 10, 1997 > Web posted at: 11:45 p.m. EDT (0345 GMT) > > From Correspondent Greg > Lefevre > > SAN FRANCISCO (CNN) -- Expensive, compact and > frequently out and about, a laptop computer makes an attractive > target for thieves. > > But the computer industry has devised some ingenious ways to > counter theft, including invisible software that knows when the > computer is in trouble. > > "As soon as the thief plugs that machine into a phone network, it > will phone home," said John Livingston, chief executive of > CompuTrace Service. > > The call goes to a Canadian office > that in turn phones the cops. So far, > it has a 100 percent recovery rate. > ====== 100% of WHAT? Systems with it installed which are stolen? How would you know what systems do NOT call in? It's like the question the clerk asks at the airport: "Did anyone put anything in your luggage you don't know anything about?" Now that the word is out, of course, the wily thief will eschew pluggin in until the hard drive is reformatted and installed with a clean OS. As usual: the stupid will be caught.

8 9

My War
by se7en 17 Dec '03

17 Dec '03

Way back when in 1995 when I stopped lurking on this list and became a regular poster, one of the things I quickly became known for was my on-line harrassment of those who had stepped over the line in one manner or another in a way that would ultimately hurt us as a group overall. Many old-timers here will remember my harrassment of Curtis Sliwa and Colin Hatcher of the Cyberangels (a.k.a. Guardian Angels). These were the fools who organized a worldwide volunteer police-wannabe force that searched out indecency (in the generic and ill-defined sense of the term) on the net, which when one dug further into their agenda, found it was just a ploy for funding and political power. My incessant harrassment led to the revelation of many things, most importantly that their leader had never ever been on the WWW, stating that he didn't have time to do so. This despite the fact he had time to organize a police force to patrol it. There have been many others since then, most not as evil as the Cyberangels. They each had their own reasons for harrassment. Among some of them have been Carolyn Meinel, O.J. Simpson, Captain Crunch, and Gambit. As many of you know, I make a living as a professional speaker, with federal government, military and intelligence communities as my core audience. Let me put any fears anyone may have to rest: my work concentrates in Information Technology more than anything else, and if I get into hackers and hacking, it is more pro-hacker than anything else. I am working to improve our image as a community of talented individuals. I recently went off on a serious rant with three different audiences on a topic I felt was seriously exaggerated/over-hyped/fearmongered/bullshit. That topic was child pornography on the Internet. If you believed the press, child pornography was all over the Internet and easy to get. This brought about even more press and some action by our legislators to crack down on the Internet. I conducted an eight-week long search for child pornography late last year in the middle of this hype. I searched for, followed literally tens of thousands of links and hacked into pay/private porno servers all over the world. My opinion based on my results, which were not having found a single picture of child pornography anywhere, was that this whole topic was a bunch of bullshit. Well, that all changed a few days ago. I had asked for a software crack in a public USENET forum to override the NT4.0 Server 120 day time limit. While never receiving the crack, some idiot from an anonymous address sent me a child porn .jpg file. Trust me when I say it was child porn; the girl was no older than four years old and was very graphic. I immediately deleted all trace of the message/attachment. I was also very pissed to say the least that some asshole sent me this. I looked around on IRC on #teensex, and by whois'ing several operators, found more insidious channels. Among them are: #preteensexpics #littlegirlsex #100%preteensexpics #100%preteensexfuckpics #!!!!!!preteensexpics There are many others. I joined several of these channels and found that upon entering each one, I was auto messaged about special kiddie porn servers dedicated to trading, e.g., PreTeenSexPics - FTP at 130.67.80.230 l/p ncc/ncc [|] I logged onto several of these servers, and upon doing an ls-la found directories dedicated, among others, to child pornography. CD'ing into these directories listed several hundreds of files such as: 9yoshowr.jpg 8&dad.jpg 4yrfuck.jpg 6thgrade.jpg 6yoanal.jpg These are some of over several hundreds of files in a single directory on a single server. There were dozens of servers. I learned the protocol to download on these servers was to uplaod pictures you owned and then the operator would give you "credits" of various ratios for downloading, i.e., upload two pictures, you get credit to download one picture. I uploaded generic garbage pics off of a commercial adult web site, and recived credit to download three pics. What I saw wanted to make me physically vomit (yes, these pics are long since overwritten with 1's and 0's and destroyed). To put any doubts at rest, the material was real and fit the names of the files mentioned above. I was also actively sent private messages by those looking to trade. I asked what they had, and the usual response was "anything and everything." Some of the more common messages were: "I have 4-12 year old girls both action or pose." "I have little boys and girls alone or together." "I specialize in adults with 4-8 year old girls." I started logging the channels. I wanted to silently gather IP addresses and email addresses. These people needed some genuine hacker terror. Among some of the more active and persistent traders were: (*denotes server in operation) * SylphFox has a ftp at 206.246.162.183 1:2 ratio, anon login * <hehe(a)ts33.dac.pace.edu> * <kiddie(a)t2o15p13.telia.com> <suicide(a)mail1.arnan.com> <alexis(a)broken.dartmouth.edu> <guinness(a)broken.dartmouth.edu> <nexgen(a)philly158.voicenet.com> <tuvak(a)ppp-5200-0403.mtl.total.net> <Triad(a)an108.tir.com> <seeme(a)star090165.galstar.com> <domain(a)port182-tnt-ak-2.ihug.co.nz> <lewisJ(a)user-37kb329.dialup.mindspring.com> name: Lewis Johnson <fungus(a)infounik.com> <tk(a)conc0-a03.conc.tds.net> <pyro(a)user-37kb97d.dialup.mindspring.com> <hat(a)dialin9001.slip.uci.edu> name: Tuyen Ha <phostis(a)har-ct5-03.ix.netcom.com> <polls(a)175-203-179.ipt.aol.com> This log was generated in thirty minutes on #100%preteensexpics. If their email address appears above, it indicates they were actively offering trades or had servers in operation. These people listed above *were not* passive participants in the rooms. This represents only a small sampling of the overall people in the room at the time. Average number of people in each room varies, but seems to number about 40 people per room. I logged out of IRC, and then went to USENET, in such rooms as: alt.binaries.erotica.children.pre-teen There I found several hundreds upon hundreds of .jpg files of real child pornography. Several messages also pointed to some WWW sites, such as: http://www.nudebooks.com For someone who took a virtual tour of the kiddie porn world for only one day, I had the opportunity to download enough files to fully max out an IOmega 100MB ZIP disc. **This is not an exaggeration.** Imagine how much could be, and has, been downloaded by those who are regular participants in this activity. Well, this whole situation is unacceptable. First, I would like to apologize to all those who have hired me in the past, and were subject to my emotional rants about how the whole subject was bullshit and not real. It is very real. It is disgustingly real. It is so real it will make you want to throw up, and I actually, physically did throw up last night. Second, in reference to previous conversation over the years on this list, and in the hacking community in general, I know this type of activity is not tolerated by us. I have given you enough information above to start identifying the players in this and the places they congregate. It would be my sincere hope that hackers of all abilities would spend a few moments each day and put their talents to use against these people. Yes, I am advocating malicious, destructive hacking activity against these people. Who are they going to run to? The police? "They hacked my kiddie porn server and rm -rf'd my computer!" Right...the police will be so anxious to lock us up left and right. These people need to be eradicated from the Internet. While that may never happen completely, enough harrassment will send a message that engaging in this type of activity in very dangerous, and can result in serious harrassment, public embarrassment and computer destruction. This is my war. It will be a public war. I don't care what happens to me by their community or by law enforcement. I feel secure enough that no jury in the world will convict me for taking these people out. I feel secure enough that no law enforcement agency will ever take action that would place me in front of a jury. And if by some chance I do end up being prosecuted, I know what I did was right. So, now start the logs of the channels and the actions of those in it. Now starts the public postings of these logs in various places on the Internet. Now starts the harrassment. Now starts the malicious hacking. Now starts the war. I don't expect people to join me here on this. If you do, you have enough information to start. I caution you to log what is going on, and to make sure you are hitting the guilty, so no innocent people get annihilated in the process. Make damn sure you know who you are hitting and why, and be able to back it up with the idea of having to justify your actions in front of a jury. And make *REALLY SURE* that if you do come across files of child pornography, that you *OVERWRITE AND DESTROY* these files immediately! You wouldn't want to be the one who ends up being prosecuted for being in possession of this type of material. I would also recommend getting an anonymous email account, such as juno.com, mailmasher.com, hacked, etc., so that you can conduct your activities without fear of the inevitable retribution of those who actively trade this shit when the heat starts getting applied to them. Of all the people who can help stop this, it is us...hackers. Not law enforcement, not the government, not the media. Not anyone. Just us, hackers who have the talent to do what no one else can. Please forward this message freely around the Internet. It is not copyrighted in any way, shape, or form. se7en

12 18