December 2003 - cypherpunks-legacy

Money Laundering Nonsense.
by Black Unicorn 17 Dec '03

17 Dec '03

Note- cypherpunks: reply by mail, I'm not on the list any longer. Chicago Tribune Monday, November 10, 1997 Money Laundering law netting more small fry. Prosecutors putting new tool to work. A sentencing weapon Congress intended for use against drug lords is being wielded against other defendants. Judges and others say this has diminished legal fairness. By Jan Crawford Greenburg Washington Bureau Washington- Jose Caba considered himself a hardworking, law-abiding man, and immigrant who built a business selling groceries in a poor Brooklyn neighborhood. But when he started illegally redeeming food stamps and depositing the proceeds into a bank account, prosecutors thought otherwise. They accused him of money laundering and sought a harsh sentence. Caba, who thought he was only bending administrative rules, isn't the kind of criminal Congress had in mind when it decided to give prosecutors a weapon to bring down powerful drug lords. Nevertheless, he is one of a growing number of defendants who commit routine fraud and find themselves facing big-time charges of money laundering. [...] More and more prosecutors are invoking [money laundering statutes] in simple fraud, bribery and embezzlement cases, a trend that doesn't sit well with many federal judges or the U.S. Sentencing Commission. In a strongly worded report, the commission... is recommending that the sentences for money laundering be reworked. The penalties are unfair, the commission said, because they often vastly exceed the seriousness of the crime. Caba would have faced 2 to 2 1/2 years in prison for food stamp fraud, but because he deposited the funds in a bank- thereby meeting the definition of laundering the money- he was looking at 10 to 12 years. [...] Nationally, statistics show a marked increase in money laundering cases. In 1995 prosecutors charged 1700 people with money laundering, up from 250 in 1990. More than half of the defendants charged in 1995 were involved in non-drug related crimes. Critics say the charged is used even more than the figures show because prosecutors threaten defendants with the charge to get them to plead guilty to the underlying crime. "It has tremendous implications in the criminal justice system because prosecutors can use it as a tremendous bargaining stick..." said Gordon Greenberg, a defense attorney and an expert on money laundering. "Every single crime, theoretically, can be converted into money laundering because the statute is that broad." What's more, prosecutors in some areas routinely file the charge, while others decline to do so. As a result, "proportionality is lost and appropriate uniformity is lost," said Jonathan Wroblewski, director of legislative and public affairs for the sentencing commission. [] stiff sentences also apply to defendants who make no attempt to cover up their proceeds. Caba laundered money by depositing it into a bank, even though his deposits were by check and he paid taxes on his proceeds. "For all intents and purposes, if you use your ill-gotten gains, it's money laundering." said Alan Chaset, a lawyer who chairs the American Bar Association's committee on sentencing guidelines. "If you take money and put it in a bank and then withdraw it and buy a stick of gum, it's money laundering." Some judges refuse to impose the sentence in cases where there was no elaborate scheme to conceal the money, such as a 1994 case in which prosecutors charged a defendant with money laundering when he put cash from drug sales into a shoe box. [...]

1 0

Re: Freeware SET?
by Donald E. Eastlake 3rd 17 Dec '03

17 Dec '03

The SET reference implementation was written only with a concern for protocol correctness and essentially no concern for operational usability. It is not clear to me that a product could be based on it without a lot of additonal work. But I suppose it might be useful for hacking... Donald On Sat, 8 Nov 1997, Robert Hettinga wrote: > Date: Sat, 8 Nov 1997 10:12:49 -0500 > From: Robert Hettinga <rah(a)shipwright.com> > > > Date: Sat, 8 Nov 1997 04:49:34 +0100 (CET) > From: Lucky Green <shamrock(a)cypherpunks.to> > To: cypherpunks-announce(a)toad.com, cypherpunks(a)algebra.com, > cryptography(a)c2.net, andrada(a)earthlink.net, andrea.liles(a)nike.com > Subject: Bay Area Cypherpunks meeting announcement > Sender: owner-cypherpunks(a)cyberpass.net > Reply-To: Lucky Green <shamrock(a)cypherpunks.to> > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Tomorrow's Bay Area Cypherpunks meeting will be held at the offices of > C2Net Software in Oakland. > > Agenda: > o Andrea Liles will present some cool new ideas about virtual CA's. > > o Lucky Green will demonstrate the Dumb Mouse, a universal chipcard > reader, and associated analysis/manipulation software. If you are at all > interested in smartcards, especially smartcards for crypto and > authentication purposes, you don't want to miss this one. If there aren't > too many attendees, we will host a workshop. Attendees are encouraged to > bring any smartcards in their possession and discover what is /really/ > happening on the card. The Cypherpunks Smartcard Developers Association > will accept smartcard donations after the workshop. > > o Cypherpunks Tonga will announce the release of BSAFEeay, a BSAFE 3.0 API > compatible crypto library based on SSLeay. > > o Cypherpunks Tonga will then combine BSAFEeay with the freeware SETref > (which requires BSAFE for the underlying crypto) and demonstrate the first > ever globally available *freeware* SET solution. > > Location: > C2Net Software > 1440 Broadway > 7th Floor > Oakland, CA > > Date/time: > Saturday, 11/8, noon > > Directions: > By BART: > Exit the system at 12th Street Oakland. Walk north on Broadway one block. > 1440 is on the right side of the street. > > By car: > http://www.mapquest.com/ > Choose "Trip Quest" from the menu. > > - -- Lucky Green <shamrock(a)cypherpunks.to> PGP v5 encrypted email preferred. > "Tonga? Where the hell is Tonga? They have Cypherpunks there?" > > -----BEGIN PGP SIGNATURE----- > Version: PGP 5.0i > Charset: noconv > > iQA/AwUBNGPhYvXUPTw3WtkkEQKztACeIQwx4voyUVIP6u1HmosCWklX7osAnROD > TTJn3K2jCIrKUQtOc5Z3oW1P > =byR/ > -----END PGP SIGNATURE----- > > --- end forwarded text > > > > ----------------- > Robert Hettinga (rah(a)shipwright.com) Philodox > e$, 44 Farquhar Street, Boston, MA 02131 USA > "... however it may deserve respect for its usefulness and antiquity, > [predicting the end of the world] has not been found agreeable to > experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' > The e$ Home Page: http://www.shipwright.com/ > Ask me about FC98 in Anguilla!: <http://www.fc98.ai/> ===================================================================== Donald E. Eastlake 3rd +1 978-287-4877(tel) dee(a)cybercash.com 318 Acton Street +1 978-371-7148(fax) dee(a)world.std.com Carlisle, MA 01741 USA +1 703-620-4200(main office, Reston, VA) http://www.cybercash.com http://www.privacy.org/ipc

1 0

Motorola Boo-Boo
by Eric Cordian 17 Dec '03

17 Dec '03

In the discussion of the Intel F00FC7C8 problem, it was alleged that the instruction "unlk a7" will lock up a Motorola 68040 CPU even from user mode. Would someone care to test this on an old MAC? Is anyone aware of non-privileged instructions which kill other popular CPUs, like Alphas, SPARCS, and MIPS? -- Eric Michael Cordian 0+ O:.T:.O:. Mathematical Munitions Division "Do What Thou Wilt Shall Be The Whole Of The Law"

1 0

Kill -9.9
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Eric Cordian wrote: > In the discussion of the Intel F00FC7C8 problem, it was alleged that > the instruction "unlk a7" will lock up a Motorola 68040 CPU even from > user mode. > Is anyone aware of non-privileged instructions which kill other popular > CPUs, like Alphas, SPARCS, and MIPS? In a world where government agencies using fear of the 'enemy' and bragging about their 'dirty tricks' to gain increasing funding, I am surprised that few seem to realize that many of the 'bugs' are actually 'features,' and that when one finds a true, non-designed bug in major hardware or software, there are certain government agencies which may pay handsomely for the information, depending on the potential and obscurity of the bug. In a world where the value of 'tracking chips' and 'kill switches' on personal automobiles is recognized, does anyone truly believe that government agencies with billions of dollars worth of funding have not recognized and instituted this technology surrupticiously in the same areas where they brag about introducing 'faulty parts' into weapons systems? The government is desperate to maintain their electronic snooping and warfare abilities as Year2000 approaches. Hardware & Software == Intel & MicroSoft == VX-Chip & GAK/GMR The government is using Anti-Trust actions to muscle both computer giants. A million dollar a day assault on MicroSoft, and release of compromising 'bug' information to put the squeeze on Intel. KillMonger

2 1

FREE Downloads on the new RealPlayer 5.0; FREE November Music Madness for RealPlayer Plus users
by RealPlayer News 17 Dec '03

17 Dec '03

RealPlayer just got BETTER and it's FREE Dear RealPlayer User, We are delighted to announce that the beta (preview) version of RealPlayer 5.0 has just been released. The great quality audio you already enjoy in the RealPlayer has gotten even BETTER! The video is LARGER. We have added NEW FEATURES like streaming RealFlash animations and near-CD voice quality at 28.8 kpbs. Best of all, these new features are all ABSOLUTELY FREE! You can upgrade free to the RealPlayer version 5.0 right now simply by visiting: http://www.real.com/50/index.html And there's new content to enjoy at the touch of a button. Whether you want music and videos, or business programming, you can get there faster through new Destinations choices. Like we said, it's all FREE. Download it now! We've also released a new version of /---------------------\ RealPlayer Plus, which ENHANCES the | November Music | RealPlayer, giving you the BEST-QUALITY | Madness by Capitol | RealAudio, RealVideo, and RealFlash. | Records. Hot music | | by cool artists, | RealPlayer Plus delivers these | only for RealPlayer | great benefits: | Plus users. Visit | | the URL below for | - The Best-Quality Live and On-demand | the complete artist | RealAudio, RealVideo, and RealFlash | list and more info. | - Scan for Live Audio and Video Sites \---------------------/ - Presets for Your Favorite Content - 30-day Money Back Guarantee So make your computer the world's COOLEST entertainment center with RealPlayer Plus. Visit: http://www.real.com/50/order.html Maria Cantwell Sr. Vice President RealNetworks, Inc. --------------------------------------------- For information about this e-mail including how to subscribe to or unsubscribe from future announcements, please visit: http://www.real.com/mailinglist/index.html

1 0

Re: WARNING: Serious Pentium Bug
by Anonymous 17 Dec '03

17 Dec '03

"William H. Geiger III" <whgiii(a)invweb.net> wrote: >For the same reason Intel does nothing about any of thier bugs: they are >assholes. The only way any of these type of things are ever addressed is >by enough users putting pressure on Intel to fix their fuckups. (Really >slopy not testing the microcode) Yeah. A conspiracy theorist might be prompted to theorize that Intel deliberately placed this in their processor, took a chance that nobody else would find it and publically release it, and then leaked the information themselves. If they refuse to replace the P5s many people will upgrade to a PPro or a P5. Of course Cyrix and AMD throw a wrench into this theory, but I doubt there are a whole lot of people who won't be buying any more Intel products due to this, and some of the clones have or did have big problems such as annoyingly slow FPUs. If they don't make it extraordinarily easy for me to replace my processor I'll probably be one of the people who falls into the latter catagory and goes off to Cyrixland.

1 0

Key Signing
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Bill Stewart wrote: > > In particular, if you publish the key with your first posting, > then you can demonstrate later that you're the poster who > used that name. Thus, Checkered Daemon announced his nym with > a key, and since I could find no other record of use of that name, > I was willing to sign that key 0x50EC521D as his (I do use > a separate key for signing nyms; I've signed them for a few other > people such as Black Unicorn, some of whom I've since met in person.) > You can also get similar results by posting your key fingerprint > in your messages and sending the key to a keyserver, and it's > a bit more compact, but for a first posting using a nym > it's worthwhile to include the key. Excellent advice, Bill! I am including the key (below) for my new nym, which has not been used before, and would like for people to sign it and send the signed key to the list. This way, people will know by the signature, that it is, indeed: Necessarily Knot, ME - -----BEGIN PGP MESSAGE----- Version: 2.6.2 lQD4AzRmZWoAAAECAMnJrqd/TERCLeFscdgNvwVxrVG4tRm0VThMEXXkctCGMaUD jcETxcV0ZseRUcyUKfqlLd3CRsIwClozlWHHR7EABREAAfwJ5D1Ecilit/Mwsn4N GcWZXWpg3mM6/Epzs2pEhi3I926ZiWPB1DKmdZR4nVemsnwv47SWLJyCnE4sben5 h8oHAQDTFaJDJSN7+9NToOE4NFiruAXXMIHEQ6ZH21oW1sYSiwEA9LmhvfahDVKo 1/CMtxxozAtG8rWycBYVIVrkDKiVgjMBAKeB2VY/f7tzmv7KxUUtN9607+CQlWPp E3HBLTlwtuRAUxC0FU5lY2Vzc2FyaWx5IEtub3R0LCBNRQ== =caeb - -----END PGP MESSAGE----- -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQBVAwUBNGZSSApaM5Vhx0exAQHWcQH/VHc1j8RenSUsPd+UJMCcrPWS5Euu+VVn hD4zGvaJ9irsyh1eKDLbMOUO5dOwxQuOQGDI5rB6cRuoh9ULdQjQyw== =c+x0 -----END PGP SIGNATURE-----

2 1

Re: [patent] Secure electronic message transfer and voting scheme
by ulf＠fitug.de 17 Dec '03

17 Dec '03

>Patent Number: 5682430 >Inventor(s): Kilian, Joseph John{#buSako, Kazue#} The full text is available at <http://patent.womplex.ibm.com>. The novelty in this patent is an algorithm that uses Fiat-Shamir to prove that the mixes operate correctly. The general idea of using non-interactive zero-knowledge proofs to verify that mixes follow the protocol was already published by Rackoff and Simon in 1991, although that is not acknowledged in the patent specification. Does anyone have details about Kilian's patent application on identity escrow, other than the paper at <http://www.princeton.edu/~erez/ident.ps>?

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

In the grand tradition of RSA-in-3-lines-of-perl, we present Crash-A-Pentium-in-44-characters: main(){int i=0xc8c70ff0;void (*f)()=&i;f();} - f00fie

6 6

No Subject
by Mix 17 Dec '03

17 Dec '03

Monday, November 10, 1997 - 04:25:17 MET The following is from http://www.mobil.com/speedpass/ Note that I've only quoted the parts I think are relevent to a security discussion... ---begin quote--- How does Mobil Speedpass work? Speedpass uses an electronic system located in the pump to "talk" with a miniature radio-like device (a transponder). Together, these electronic devices provide "instant" access to gasoline by automatically charging fuel purchases to the credit card you've selected. The technology is similar to the state-of-the-art technology successfully used by many tollways. What happens if my Speedpass is lost, stolen or damaged? Treat it just like a credit card. Immediately notify our Service Center at 1-800-459-2266. Tell us your name or Speedpass number. And we'll cancel your old Speedpass and send you a new one right away. You should write down your Speedpass number (8 digits on tag) and keep it in a safe place. Is there a pin code with my Mobil Speedpass? No. Can other people intercept the transmission of my credit card number? No. The Speedpass system operates on a dedicated transponder identification code. Your credit card code remains outside the Speedpass signal system, maintaining the confidentiality of that information and protecting your account from unauthorized use. ---end quote--- I see several options, none seem too secure: 1) "dedicated transponder identification code" (dtic from now on) is sent in the clear. Anyone who can listen and re-transmit can get free gas. 2) Speedpass and the gas pump negotiate DH key exchange and use DES/RC5/IDEA/Whatever. Anyone who can impersonate a gas pump can gain access to dtics and get free gas. 2) Gas pumps have an RSA keypair, and all of the speedpasses know the public key. The dtic is encrypted to the gas pump's key along with some random data. Anyone who can compromise the gas pump's private key (including service station operators/employees?) can imitate a gas pump and get dtics, with which to get free gas. The third option seems pretty secure at first, until you realize that it's like putting all of your eggs in one basket and giving thousands of people physical access to the basket. Anybody know how they are actualy doing it? Is there some more secure way I haven't thought of? -Some anonymous guy with no 'nym

1 0