December 2003 - cypherpunks-legacy

The New War
by John Young 17 Dec '03

17 Dec '03

"The New War" is Senator John Kerry's (Dem, MA) new book which examines global enemies of law and order. He cites the use of high-tech weapons, off-shore banks, and the Internet, featuring encryption, by rogue nations and organized criminals who are hiring the best and brightest lawyers, programmers, cryptographers and ex-spooks who once looked to the USG for secure careers, and who also pay top dollar for premium products and skills once affordable only by the military. He wonders how governments can compete with these new cash-flush criminals. The answer: new laws and new global arrangements. His view on global crypto is almost identical to that of Senator Kerrey (Dem, KA), Professor Denning and others who appear to be working in concert with the administration to advance global GAK, while admitting that some harm to privacy may be necessary. All nations must act in concert, Kerry says, to prevent the spread of dangerous technology. For a similar view, see Denning's synopsis of a paper on criminal use of encryption and developing technology to be published shortly: http://guru.cosc.georgetown.edu/~denning/crypto/oc-abs.html We've also heard from BXA that new regulations for the Commerce Control List and EAR to bring them into accord with the Wassenaar Arrangement will be out in "a month or two." This will probably be coordinated with the issuance of similar regulations by the 33 signators of the regime. It might portend the imposition of a global GAK regime that Kerry, et al, suggest is a primary weapon in The New War.

3 2

Re: Password pirates plunder XXX sites, from The Netly News
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

A huge number of passwords to pay-only porn sites are loose on the Net. Just surf newsgroups like alt.sex.passwords or do a simple search through a typical web engine and long lists of logins are easy to find. There is an easy solution to this problem. Just use one-time passwords. Put it in a cookie. Every time the customer accesses the service you give him a new one. He doesn't have to do anything. If he gives his password away it won't work for him any more. John

2 1

BOUNCE cypherpunks@Algebra.COM: Admin reques
by Igor Chudov ＠ home 17 Dec '03

17 Dec '03

----- Forwarded message from owner-cypherpunks(a)algebra.com ----- >From owner-cypherpunks(a)Algebra.COM Wed Jun 4 16:52:19 1997 From: owner-cypherpunks(a)algebra.com Date: Wed, 4 Jun 1997 17:52:04 -0400 (EDT) Message-Id: <199706042152.RAA01373(a)www.video-collage.com> To: owner-cypherpunks(a)Algebra.COM Subject: BOUNCE cypherpunks(a)Algebra.COM: Admin request of type /\bsub-scribe\b/i at line 7 >From cpunks Wed Jun 4 17:51:59 1997 Received: from sirius.infonex.com (sirius.infonex.com [206.170.114.2]) by www.video-collage.com (8.8.5/8.8.5) with ESMTP id RAA01319 for <cypherpunks(a)algebra.com>; Wed, 4 Jun 1997 17:51:45 -0400 (EDT) Received: (from cpunks@localhost) by sirius.infonex.com (8.8.5/8.7.3) id OAA09047; Wed, 4 Jun 1997 14:51:41 -0700 (PDT) Received: from rigel.cyberpass.net (root(a)rigel.infonex.com [206.170.114.3]) by sirius.infonex.com (8.8.5/8.7.3) with ESMTP id OAA09040 for <cpunks(a)sirius.infonex.com>; Wed, 4 Jun 1997 14:51:36 -0700 (PDT) Received: from toad.com (toad.com [140.174.2.1]) by rigel.cyberpass.net (8.8.5/8.7.3) with ESMTP id OAA13609 for <cypherpunks(a)cyberpass.net>; Wed, 4 Jun 1997 14:50:14 -0700 (PDT) Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id OAA25146 for cypherpunks-unedited-outgoing; Wed, 4 Jun 1997 14:43:54 -0700 (PDT) Received: from pathfinder.com (relay2.pathfinder.com [204.71.242.22]) by toad.com (8.7.5/8.7.3) with ESMTP id OAA25141 for <cypherpunks(a)toad.com>; Wed, 4 Jun 1997 14:43:50 -0700 (PDT) Received: from cp.pathfinder.com by pathfinder.com (8.7.3/SMI-SVR4) id RAA15204; Wed, 4 Jun 1997 17:43:19 -0400 (EDT) Received: from localhost by cp.pathfinder.com (SMI-8.6) id RAA03951; Wed, 4 Jun 1997 17:43:13 -0400 Date: Wed, 4 Jun 1997 17:42:33 -0400 (EDT) From: Declan McCullagh <declan(a)pathfinder.com> Reply-To: declan(a)well.com To: cypherpunks(a)toad.com Subject: Anonymity should be banned for speakers and vendors Message-ID: <Pine.GSO.3.95.970604174023.29555R-100000(a)cp.pathfinder.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-cypherpunks(a)toad.com Precedence: bulk [Ray, a recent DC law school grad and anti-spam activist, is a good guy but is IMHO sadly mistaken here. Thought this might be interesting. --Declan] ---------- Forwarded message ---------- X-FC-URL: Fight-Censorship is at http://www.eff.org/~declan/fc/ X-FC-URL: To join send "sub-scribe" to fight-censorship-request(a)vorlon.mit.edu Date: Wed, 4 Jun 97 17:25:36 -0400 From: Ray Everett-Church <ray(a)everett.org> Sender: owner-fight-censorship(a)vorlon.mit.edu To: sameer <sameer(a)c2.net>, tbetz(a)pobox.com Cc: fight-censorship(a)vorlon.mit.edu Subject: Re: Spam costs and questions On 6/4/97 4:52 PM, sameer (sameer(a)c2.net) wrote: >> If Wallace were up against criminal and civil penalties if he continued to >> hide his customers' real identities, he'd give them up in a hot second. Of >> course, as soon as there was a chance of that happening, he'd get out of the >> business entirely. > > So how do criminal and civial penalties for not revealing a >customer's name protect anonymity on the internet? > Anonymity on the internet must be preserved. If you could come >up with a way to make spam illegal and preserve anonymity, I would be >very glad. Until then, I will have to oppose making spam illegal. As stated before, I have heard no convincing argument that it is in the consumers best interest to have an anonymous *vendor*. Sure it's vital that *consumers* be allowed to remain anonymous, but if you're selling a product or service, there's no legitimate reason why a business needs to remain anonymous given issues of warranties, product liability, sales taxes, etc. And in the case above, since the remailer in question is simply acting as an agent for the business, there's no question of legitimate anonymity implicated. Indeed, perpetuating anonymity for the business often times facilitates activites that constitute a breach of contract and sometimes even fraud. The whole reason to use a pro-spam anon remailer is so that you can violate your ISP usage agreement without being traceable or accountable. And if you've entered into that contractual relationship with the ISP with the *intent* to breach that contract, it's fraud. Anonymity for consumers, Yes! Anonymity for vendors, NO! -Ray <everett(a)cauce.org> ------------------------------------------------------------------------- Ray Everett-Church, Esq. <ray(a)everett.org> www.everett.org/~everett This mail isn't legal advice. Opinion(RE-C) != Opinion(clients(RE-C)) (C)1997 Ray Everett-Church ** Help outlaw "spam"=> http://www.cauce.org ------------------------------------------------------------------------- ----- End of forwarded message from owner-cypherpunks(a)algebra.com -----

3 2

Password pirates plunder XXX sites, from The Netly News
by Declan McCullagh 17 Dec '03

17 Dec '03

[We include links to sites with porn passwords in today's story, BTW. --Declan] ******* http://cgi.pathfinder.com/netly/opinion/0,1042,1015,00.html The Netly News Network (http://netlynews.com/) June 4, 1997 Porn Free by Chris Stamper and Greg Lindsay (thenetlynews(a)pathfinder.com) Sexfilms.com used to be a small, members-only adult site that shipped full-frame videos over a super-fast T-3 line. Traffic on the site was comfortably low for about a year, owner Ray Alba says, until one name -- "Joe Camaro" -- started appearing with some frequency. Actually, it started appearing 500 times a minute. From Sweden, Japan, Hong Kong, Singapore -- just about anywhere. Somebody was passing out the password. Download speeds faltered, from 300K/sec to 6K/sec. And then the servers themselves began to crash. Finally, Alba had to shut down the site for several weeks to clear out Camaro and numerous other accounts that had leaked out to the Net. Alba was the latest victim of... Porn Piratz! A huge number of passwords to pay-only porn sites are loose on the Net. Just surf newsgroups like alt.sex.passwords or do a simple search through a typical web engine and long lists of logins are easy to find. Some of these logins are giveaways from people who ponied up the low, one-time-only flat fees that many sites charge. Others, apparently, were obtained with phony credit card numbers. Who knows how Porn Piratz get the rest. But they do: A Hustler executive told us that Hustler's sites have seven times its paid membership logging on every day. [...]

1 0

G-10 on Electronic Money
by John Young 17 Dec '03

17 Dec '03

We offer the April 1997 report of the G-10 countries* "Electronic Money." http://jya.com/g10emoney.htm (121K) This is a survey of the electronic payments systems of the ten countries, and the status and prospects in each for policy, law enforcement, privacy and related issues. The report is by a Working Party set up after the Lyon conference in June 1996 to examine three policy areas: (1) consumer issues; (2) law enforcement issues; and (3) supervisory issues It was presented at a G-10 conference in DC on April 28 and publically released in the US on May 7 by the Treasury Department. * Belgium, Canada, France, Germany, Italy, Japan, Netherlands, Sweden, Switzerland, United Kingdom and the United States.

1 0

RE: McVeigh? Nimrods.....
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- <sigh> If you don't want your children to get blown up don't put them in harms way. The government *KNEW* that this building was the target of numerious groups. They especially knew that it was a major risk on that day. They did nothing to warn the occupants of the building. This is no different than palcing a daycare center in a munition factory durring a time of war and then blaming the bomber pilots for blowing up children. The Judge of the McVeigh case said himself in his instructions to the jury that there was no evidence that McVeigh knew of the day care center in the building. McVeigh was going after the ATF agents in the building (all of which were conviently gone at the time of the bombing). A just where were your tears for the children that were burned alive by the ATF in Waco or the children of Weaver guned down by sinpers at Ruby Ridge? I guess it only ok to kill children if it's the Federal Government doing it. - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBM5W3749Co1n+aLhhAQEsWQP/R2nbcaI5ZgcLJRrjfoXTcDOJ8mFDzVv1 BzDomMwafGWQw9NDAyFg1M7B31899OF0LnVrP4ezg5cRLOMUpjP7lBlKkxduBvUi yy/37h8czmepT3ejTAvLwdFWR1uIx3B8A2t79b52XwcO2WHSpRHLruK0oAUOGWMK Bfe2uIKzVOE= =WigK -----END PGP SIGNATURE-----

2 1

Re: Who "invented" remailers?
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In <Pine.GSO.3.96.970604112313.13859B-100000(a)linda.teleport.com>, on 06/04/97 at 11:46 AM, Alan <alano(a)teleport.com> said: >Unfortunatly for mixmaster to work effectivly, you need a threshold of >usage. That threshold has not been reached yet. With the successful >campaign against remailers by those who oppose them, the problem is made >worse. (As well as supporting a form of encryption not commonly >available to "Joe Sixpack".) Currently, use of the Mixmaster remailer >system is out of reach of most of the average users out there. The only >serious project to address that need has been Private Idaho and >development has stopped on that project. Development has not stoped on PI. As a matter of fact I just received an announcement that a new release is out. I am currently working on a simmilar project for the OS/2 platform. I am not sure what is being done on the Mac or *nix. Currently I am testing remailer support using PGP encryption but should have mixmaster support as soon as I get the mixmaster code ported over. I just downloaded the new mixmaster code so I will have to se what changes have been made. - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBM5XAVI9Co1n+aLhhAQF1TQP+KlLlU6B3+mIcvMncireVvaY2Pr1bRoQk h9xdrBTYpIONHrbzp2eK4eMCDfuySbtm2F5/tCZhUpk5KF+AU9TqHf1zTGzEooUE brrheFXemwgjPHXEldSStvC9rW9XbrdN9cYKOZ9kcIrCS2+xqt0rlirI6e0D2JQu 9yHjqd/BJDM= =rrZK -----END PGP SIGNATURE-----

1 0

Spam costs and questions
by Declan McCullagh 17 Dec '03

17 Dec '03

A friend who's going to be speaking on one of the FTC panels next week sent me a few questions about spam. Does anyone want to try their hand at answering them? I'll forward along all responses I get. What are the costs to consumers of unsolicited e-mail? I guess the time it takes to delete it might be one, hard drive space might be another. I would like to know how to quantify it, and compare it with the cost of sending e-mail. If you banned commercial e-mail, wouldn't it just affect legitimate commercial transactions? That is to say, wouldn't fly-by-night pyramid-scheme builders still be able to spam? I would think that if they are so untraceable that it's hard to block their spam that it wouldn't really matter if it were simply made illegal. -Declan

4 3

nude gifs plz
by User Name 17 Dec '03

17 Dec '03

plz sends da gifz of naked chicks!!!

1 0

Re: McVeigh? Nimrods.....
by bennett_t1＠popmail.firn.edu 17 Dec '03

17 Dec '03

Chris DiBona wrote: > > <rant> > > Okay folks...what the hell is wrong with you? First off, this whole McVeigh > Crap is a bit off topic..but we all know this. The amazing thing about the > string of posts has been that people have forgotten that He has been found > guilty of murdering quite a few people. Guilty, Guilty, Guilty. Jury of > his peers, dare I say, people like us all. Randomly selected. This is how > our system works. > > Yes there are flaws in the system. > > Yes the US govt. has it's problems in the past, present and future. > > Yes people have died because schnooks in DC have had thier heads up thier > ass. Or not. > > So whether or not you belive he did it.....how can anyone be _for_ what > _happened_. People died senselessly, I can't believe that anyone (in this > case Duncan Frissell frissell(a)panix.com, lets give credit where it is due) > can be so callous and , frankly, sick , to say : > > <> > As to the Children of OKC, people who turn the care of their children over > to > government employees or contractors do not place too high a value on those > children. > <> > > Are you serious? You should be ashamed that you think this way. Do you > really > think those children who died weren't cared for? You are a sick person who > should seriously consider therapy. Anyone who read this and said "Yeah!" > is > on the same plane. > > To all the people who defend blowing shit and people up to get thier point > across.... > > Okay..so the IRA does it, and HAMMAS does it, and the CIA does it. So does > the > PLFP the FARC and a zillion other terrorist groups. And it appears McVeigh > did it. > But that doesn't make blowing up children in freakin' day care all right. > Do you > understand this? There is no reason to blow up kids. It's wrong. For any > reason. > Bad. Duncan...looking over your past posts.. .I've got to wonder if you > were on acid > when you wrote this, many of your posts were fairly cozigent. But this? Do > you have > children? Any cousins who are children? A nephew or neice? Do these > children > who may be important to you have parents who "care" about them enough to > scour the planet to find a good,safe day care that isn't withing the blast > radius or > shooting range of : > > A government office. > A large corporations headquarters. > A law firm. > A post office. > A town square. > A restaurant. > A bank. > Anywhere some asshole might have a gun and go loopy. > Anywhere some asshole might have a car be drunk and go loopy. > Anywhere some asshole might have a gun and a car and be drunk and go loopy. > > If they even could, I'm someone somewhere will find a way to fuck up that > safe place. > > You get the point, I could go on....but I won't. Perhaps you should think > and read > over your posts before you post again. The only good thing (and I mean > ONLY) to > come out of the whole Mcveigh thing being discussed here on cypherpunks, is > that it has allowed me to add to my killfiles people who have for some > reason, > had a prefrontal. > > To all the dipshits who could possibly think otherwise. I should also > mention it > is an EQUALLY fucked up thing to blow up adults. > > Like my fellow Santa Clara County Resident Bill Frantz said : > > For cypherpunks this comes down to: Make code, not bombs. > > Chris DiBona > > </rant> If these parents DID care, then why in the hell WOULD they put them in a federal building? If I remember fully a past post (i forget which, and my memory ISN'T perfect) that place (the building) had been threatened by numerous attacks, and yet these ignorant parents put their kids in there. I would put my kid a regular day care. If someone blew up a regular daycare, then they ARE fucked up. He wasn't attacking a DAY CARE, his midn was on blowing up the federals in there. I'm not JUSTIFYING killing children. Who knows whether or not it will be beneficial to the anti-federal cause. Geiger gave a few examples. To accomplish some things you gotta break a few eggs (Tim May's post). Not that it's right to do it, but things happen.

1 0