December 2003 - cypherpunks-legacy

Re: (eternity) Re: Eternity Services
by redgod＠usa.net 17 Dec '03

17 Dec '03

FUCK! WHO REGISTER ME TO THIS MAILING LIST? CAN YOU TELL ME HOW TO REMOVE MYSELF FROM IT? I WILL MAD! OH GOD! TOO MANY EMAIL! At 08:18 AM 1/12/98 +0100, Lucky Green wrote: >On Mon, 12 Jan 1998, Ryan Lackey wrote: >[quoting Tim] >> >> > (* I say "working" in the sense that the concept was very easy to >> > demonstrate just by using PGP and remailers. Not much more than what I >> > demonstrated in 1993 would be needed to deploy a real system. Except for >> > one thing: true digital cash. Not the bullshit one-way-traceable stuff that >> > Chaum and others are now pushing, but the original, online-cleared or >> > escrow-cleared form, a la the work of Goldberg et. al. For some of these >> > applications, below, simple token- or coupon-based schemes might work >> > adequately.) >> >> There are currently-under-development systems which will meet the digital cash >> requirement, >> from people who I consider highly respectable and competent. > >And the demand for such ecash systems is real. I personally carried a $10 >million offer for a non-exclusive license for the blind signature patent >to David Chaum. He declined the offer. "The patent is not for license". >DigiCash's CEO since March of last year, Mike Nash, also told me that >DigiCash was not considering licensing the patent. I knew that day that it >was time to quit. Not surprisingly, nobody heard from DigiCash since. > >-- Lucky Green <shamrock(a)cypherpunks.to> PGP v5 encrypted email preferred. > "Tonga? Where the hell is Tonga? They have Cypherpunks there?" > >

3 2

Re: (eternity) Service denial attacks on Eternity
by redgod＠usa.net 17 Dec '03

17 Dec '03

FUCK! WHO REGISTER ME TO THIS MAILING LIST? CAN YOU TELL ME HOW TO REMOVE MYSELF FROM IT? I WILL MAD! OH GOD! TOO MANY EMAIL! At 04:51 PM 1/12/98 +0000, Ross Anderson wrote: >Tim May wrote: > >> It is also likely in the extreme that a working Eternity service will >> quickly be hit with attackers of various sorts who want to test the limits >> of the service, or who want such services shut down. > >Exactly. When I first talked about Eternity, which was at either the >1994 or 1995 protocols workshop, I was walking back to my seat when >Bob Morris (then at the NSA) said, from behind his hand in a stage >whisper, `Kiddyporn!' > >Adam Back added: > >> the spooks / feds have a history of posting their own child porn if >> none is available to seize > >Indeed, and a decade or so ago there was a scandal when it turned out >that the spooks were using the Kincora Boys' Home in Belfast as a pedo >brothel in order to entrap various local politicians. For them to say >now that they need key escrow to suppress Kiddyporn is a bit rich! > >However the main threat is the court order - Anton Pillar or whatever >- and the best weapon against court orders is anonymity. If they don't >know your address they can't serve you the order or arrest you for >contempt. > >Tom Womack: > >> I can imagine *use* of the service becoming a felony > >I mentioned in the paper that Mossad might deny Eternity service to >the Muslim world by posting something rude about the Prophet Mohammed. > >One must of course create a lawful excuse for people to have Eternity >software mounted on their system. Maybe in addition to the `public' >Eternity service we should have many corporate or even private >services, many of which have escrow capabilities and are thus clearly >law-abiding and accountable :-) > >There are many other possibilities. One topic that oozes into my >consciousness from time to time is that one might integrate covert >communications and storage with an anti-spam mail program - maybe a >natural way forward if Adam hides Eternity traffic in spam! > >Tim again: > >> Great idea, but where are the customers? > >Some 90% of security research effort is on confidentiality, 9% on >authenticity and 1% on availability. Corporate infosec expenditures >are exactly the other way round, and tools to enable disaster recovery >databases to be spread holographically over a company's PCs could save >a fortune compared with the cost of some current arrangements. If a >few of these backup resources have hidden directories that mount the >public Eternity service, then who can tell? > >At the Info Hiding Workshop at Portland in April, I will present a new >idea which may facilitate such implementations of Eternity. This is >the Steganographic File System - designed to provide you with any file >whose name and password you know. If you don't know this combination, >then you can't even tell that the file is there. We do not need to >make any assumptions about tamper resistance; it can be done using >suitable mathematics. (This is joint work with Roger Needham and Adi >Shamir.) > >Ross > >PS: we need a better word for `eternityspace', and Bell Labs have >already trademarked `Inferno'. So what - Nirvana? Valhalla? >

2 1

Re: (eternity) autonomous agents
by redgod＠usa.net 17 Dec '03

17 Dec '03

FUCK! WHO REGISTER ME TO THIS MAILING LIST? CAN YOU TELL ME HOW TO REMOVE MYSELF FROM IT? I WILL MAD! OH GOD! TOO MANY EMAIL! At 03:51 PM 1/13/98 -0800, William Knowles wrote: >On Tue, 13 Jan 1998, Tim May wrote: > >> At 1:23 PM -0800 1/13/98, William Knowles wrote: >> >> >Anguilla seems to be a doing agood job on becoming a country >> >willing on hosting data havens. >> >> Oh yeah? >> >> It's been a while since we talked about this (at least on the Cypherpunks >> list), but a couple of years ago there was much discusson on the CP list >> about just what items would be allowable in Anguilla. Vince Cate gave his >> assessment, which I found fairly nebulous, in that it appeared the Ruling >> Families would allow what they would allow, and not allow what they would >> not allow---there seemed to be a lot of ad hoc rulings. > >If memory serves me right it was because Vince bounced off the Taxbomber >site because it offered second passports, camouflage passports, and other >products that was considered a fraud, Which to me sounds odd since there >is some other company selling most everthing and then some from an .ai >domain which Vince's company has the monopoly on handing out .ai domains > >http://www.ultramec.com.ai > >> (Given that copies of "Penthouse" are illegal in Anguilla, if I recall this >> correctly, and given that gun are illegal, and drugs are illegal, I rather >> doubt that Anguilla would happily host "The Aryan Nations Bomb Site," or >> "Pedophile Heaven," or "Gun Smuggler's Digest. " Or the even juicier stuff >> any "data haven" with any claim to really being a data haven will surely >> have.) > >You also have to wonder how far in the future it will be before the >special forces of some banana republic drops in on Vince to blow-up >his operation for as he advertises publishing censored information >on ones ex-president on the Internet, or for that matter I have >yet to see abortion information coming from his servers. > >What has happened in Anguilla proves that there will be a need for >different flavors of datahavens, Different degrees libility that >datahaven owners will want to store information on their servers. >I would love to open a XXX WWW site in Anguilla pulling in the >industry average of $5-10K a month and not pay any taxes there, >But it won't happen in Anguilla with the present adminstration! > >> >And there are likely under a hundred oil companies looking >> >for firms to 'recycle' their old oil platforms and drilling >> >rigs wasting away around the world, I'm sure some might just >> >give you one just to be rid of future liability. >> >> Given the willingness of the French to have SDECE sink Greenpeace ships in >> neutral ports, how long before a couple of kilos of Semtex are applied to >> the underside of these oil rigs? >> >> Given what happened with "pirate broadcast tankers," the future is not bright. > >Isn't there a microstate off the coast of England called 'Sealand' run >from a former oil rig/gun battery for the last 20 years? > >> When the first "oil rig data haven" is found to have kiddie porn, >> bomb-making info, and (shudder) material doubting the historicity of the >> Holocaust, the U.N. will cluck and the public will cheer when it is boarded >> and seized, or simply sunk. >> >> As I said in my last piece on this subject, there is no security in >> meatspace comparable to what is gotten with mathematics. >> >> --Tim May > >I agree completely, But there is still room for massively distrubted >datahavens on oil rigs, barges, gun batteries, island nations or >hiding in Norm's LAN in Cicero IL. All the harder to supress that >information. > > >William Knowles >erehwon(a)dis.org > >== >The information standard is more draconian than the gold >standard, because the government has lost control of the >marketplace. -- Walter Wriston >== >http://www.dis.org/erehwon/ > >

1 0

Re: SC rules 1st doesn't cover lies [CNN] (fwd)
by Anonymous 17 Dec '03

17 Dec '03

>So you have to be an employee of the government to be a citizen? Yes. Welcome to America, Land of the Freeh.

1 0

Supplement to DoJ Seizure Guide
by John Young 17 Dec '03

17 Dec '03

There's a long October 1997 supplement to the 1994 DoJ Guide to Search and Seizure of Computers for which Jim Choate posted the TOC just now. It reflects recent campaigns, raids and counterattacks as the battle for supremacy between law and technology intensifies and both sides search and seize each's best and worst: http://jya.com/doj-ssgsup.htm (100K)

1 0

FW: Symantec Norton, Your Eyes Only.
by Pearson Shane 17 Dec '03

17 Dec '03

Anyone? > -----Original Message----- > From: Pearson Shane > Sent: Thursday, January 15, 1998 1:25 PM > To: 'cypherpunks(a)toad.com' > Subject: Symantec Norton, Your Eyes Only. > > > Hey all, > > Just wondering what people think of this product? > Good, bad or ugly? > > Is there an international version and a US version? > > If so, what limitations are in the international version? > > Many thanks...

2 1

Censorship free ISP
by White Liberty 17 Dec '03

17 Dec '03

Sorry for the cross-posting, but some of the readers may hopefully address this: Could you recommend me a censorship FREE InterNet Service Provider that in addition to a "no censorship" policy also guarantees your privacy. I am an ex-patriate Danish who live in the United States, but has a friend who wants to publish material deemed hateful in my birth country. In Denmark, they still struggle with laws abridging freedom of expression in regard to "hate speech." Could you recommend any ISP to me in the United States that satisfies this? I know Cyberpass in California does not censor based on content. But I am sure there are many many others. Please respond in personal mail or to cypherpunks(a)cyberpass.net.

1 0

State of the Union Address
by Anonymous 17 Dec '03

17 Dec '03

>Hear that the State of the Union next Monday has a section on Internet - >networks - critical infrastructure protection et al. Anyone have any >details? My bet is that it'll be the same as it always is. Klintonkov will rant about how he wants to censor the Internet. Then he'll go on and on about how he wants to connect every public school to the Internet and tax me to give these kids censored feeds, all when the students are coming out of the school system as complete morons. Some can't read, many can't do math, most have absolutely no clue about basic science, and most have absolutely no idea about the Bill of Rights and freedom of speech[1]. And of course he'll have to throw in a long diatribe about how Americans need to surrender more of their freedom to the government. Maybe he'll even mention how he doesn't remember screwing a reasonably attractive woman half his age in the White House while she was a White House intern. [1] Grab a totally random sample of 100 high school students. Haul the students out one at a time and ask them the following questions: 1) What is the acceleration of gravity at sealevel on Earth? 2) What are airlocks? What are they used for? How do they work? 3) How many chromosomes are in a normal, healthy human? 4) Joe is one of your classmates. He elects not to say the "Pledge of Allegience." Which of the following is true? a) He must say it because it is mandated by the government. b) He may not say it, but he must stand. c) He is not required to acknowledge it, except to allow others to say it if they wish to. d) He should be taken out behind the school and beaten with a sledgehammer. Afterwards his brains should be used to spell the words "Death to traitors!" e) He should be sent to the principal's office for disciplinary action. f) He should be expelled from the country. g) He must do so as long as he is a U.S. citizen. 5) Explain the equation 'f=m*a' and Newton's Third Law. 'f=m*a' is referenced in the context of Newtonian motion. 6) The First Amendment of the United States Constitution orders which of the following? a) Congress shall not restrict freedom of speech, the press, assembly, or religion. b) Congress shall not restrict freedom of speech, the press, assembly, or religion, except as ordered by the majority. c) Congress and private individuals may not descriminate on the basis of sex. d) Congress and private individuals may not restrict freedom of speech, the press, assembly, or religion. 7) What are the following government agencies and what are their function? a) FCC b) NSA c) CIA d) FBI e) DEA f) BATF g) NTSB h) DOJ 8) Your city passes a "teen curfew" law ordering criminal penalties for anybody younger than 18 who is out after 10PM on school nights. The law was passed by popular vote at this year's elections. Which of the following is true? a) This is a just and fair law, and is completely constitutional. Teenagers have no reason to be out past 10PM on school nights. They should be at home and asleep. b) This law violates the thirteenth amendment. c) This law violates the first amendment. It violates freedom of assembly. d) This is a constitutional law. Freedom of assembly does not apply because the people voted on this law and it passed by majority vote. 9) How many senators does each state have? 10) "What a piece of work is man; how noble in reason; how infinite in faculty, in form, in moving; how express and admirable in action..." Name the author. 11) Michelle mixes one gram of HCl and one half gram of NaOH. Under normal circumstances, what is produced and in what quantities? 12) (sin(9)^2 + cos(9)^2)=x. If this quantity can be determined, what is x equal to? 13) What is the square root of 256? 14) What is the fourth root of 81? 15) Given complete control of the environment, how could one cause pure water to boil at 96 degrees C? 16) Explain possible problems with cloning of humans. Analysis: Keep in mind that I'm talking about high school graduates or people who have almost graduated high school here, and these are people who have taken the appropriate courses. Back in high school I made the mistake of making some comments and assuming in class discussions that people had basic knowledge. I was wrong. Okay, so I was naive. Eventually I gave up and stopped participating simply because I was sick and tired of doing the school's job for them. 1) Most students probably won't have any idea. The value, of course, is about 9.81 m/s^2. 10 m/s^2 doesn't work although that's given in the mathematics books they give these kids. Most of them probably won't even know what the question is asking. 2) I actually brought this topic up to a group of *honors* students. Think of the expression "shove you out an airlock" for context. They boggled, wallowed in their ignorance and were proud, and then went off to their think tank. After confering with each other they came back with the breathtakingly brilliant answer that it was a contraceptive device. Of course even after explaining to them what it was they still didn't get the reference, had no grasp of how such a thing might work, and had no idea what it might be useful for. 3) This is taught in elementary biology which, at least down here, is a required course. They had no idea. Actually, most of them had no clue about basic genetics at all. Yes, basic genetics was covered in the course, and this material was included. 4) I was "Joe" in this case. The people involved had already taken a semester government course. Their answer to the question would have been along the lines of option 'd'. 5) I made a big mistake assuming they knew this one. Oops. 6) Most seemed to believe 'b' or 'd'. Maybe they knew it was 'a' and thought that maybe people wouldn't notice. 7) I made the mistake of using designations like this in a political science class during a class discussion. I regretted it when I had to start explaining these agencies and what they were supposed to be responsible for. 8) No explanation required. 9) "You expect me to memorize that for all 50 states?" "Nevermind." 10) Shakespeare. It wouldn't be so bad if they hadn't had to read Hamlet, MacBeth, and others in their English classes. Yipes. 11) "How am I supposed to know?" "Uh, you got out of chemistry with a B." "Yes, but they never gave me problems like that!" Uhhh... 12) Most probably couldn't solve it without a calculator. 13) Ditto. 14) Ditto. 15) They'll probably look at you like you're nuts and explain that you can't. Uh, right. 16) In an international relations class I took students picked a side and tried to argue it. Mine was pro-cloning or, more accurately, pro-science. Most were anti-cloning. Why? a) "God doesn't like us to do things like that." Right. Let's go outlaw fields of research based on one religion and what followers of one religion think their god is thinking at that moment. This is America, not Iraq. b) "How would you like it if somebody just came up and cloned you without you knowing and then made that person tell them information you refused to give them yourself?" Okay, I can buy the unwillful cloning part of it and could support a law on the grounds that it's theft of genetic material or for a variety of other reasons. As for the rest of that...ugh. Now maybe people on this list can't answer some of these either. That isn't the point. The point is that you should have been taught this stuff in school. Klintonkov wants to go blow millions (billions?) of dollars for censored network feeds in the schools and they haven't even got basic education down? And don't say "computer literacy" either. Most high school graduates can barely type on the bloody things, and they can forget about actually fixing a problem themselves. The *teachers* are blatently clueless. When Klintonkov fixes these problems he can talk about "wiring our schools for the 21st century." Of course then he'll want to censor the feeds or the net at large, at which point we're back to square one and should spend the money on something useful, like paying off the multi-trillion dollar debt the idiots ran up. Here's the scariest part of it all: These people are voting! And we wonder why we're in such a mess. The war isn't the war between the blacks and the whites, the liberals and the conservatives, or the Federation and the Romulans. It's between the clueful and the clueless.

9 13

RE: FW: Symantec Norton, Your Eyes Only.
by Pearson Shane 17 Dec '03

17 Dec '03

Hi William, Many thanks for the reply. I was hoping it was ok having Blowfish, but I guess it could be their own "efficient" version. Bye for now. > -----Original Message----- > From: William H. Geiger III [SMTP:whgiii@invweb.net] > Sent: Friday, January 23, 1998 2:12 PM > To: Pearson Shane > Cc: 'cypherpunks(a)toad.com' > Subject: Re: FW: Symantec Norton, Your Eyes Only. > > -----BEGIN PGP SIGNED MESSAGE----- > > In <01ISPY42BHTU00B7O0(a)hmgwy1.isd.tafensw.edu.au>, on 01/23/98 > at 02:56 PM, Pearson Shane <Shane.Pearson(a)tafensw.edu.au> said: > > >Anyone? > > >> -----Original Message----- > >> From: Pearson Shane > >> Sent: Thursday, January 15, 1998 1:25 PM > >> To: 'cypherpunks(a)toad.com' > >> Subject: Symantec Norton, Your Eyes Only. > >> > >> > >> Hey all, > >> > >> Just wondering what people think of this product? > >> Good, bad or ugly? > >> > >> Is there an international version and a US version? > >> > >> If so, what limitations are in the international version? > >> > >> Many thanks... > > > Is source code available for peer review? NO > > Is it US Commercial software? YES > > I wouldn't use it to secure an outhouse. No source no trust. > > - -- > - --------------------------------------------------------------- > William H. Geiger III http://users.invweb.net/~whgiii > Geiger Consulting Cooking With Warp 4.0 > > Author of E-Secure - PGP Front End for MR/2 Ice > PGP & MR/2 the only way for secure e-mail. > OS/2 PGP 2.6.3a at: http://users.invweb.net/~whgiii/pgpmr2.html > > - --------------------------------------------------------------- > > Tag-O-Matic: If at first you don't succeed, work for Microsoft. > > -----BEGIN PGP SIGNATURE----- > Version: 2.6.3a-sha1 > Charset: cp850 > Comment: Registered_User_E-Secure_v1.1b1_ES000000 > > iQCVAwUBNMgK6Y9Co1n+aLhhAQF08wP/abLg8ftPY7nuJ1hp8OKi6Ik2lx7A70/3 > 0GU++TZAmLWJ4XKlgCiujm0Z06P3rSEf+qtiIOTfFKUaN4kvt9JlmkH6h8fmuAJf > t48Cq5XQbeYDMJ6HjvGpPraZJd5zmqv54UQuUjswZBONNIMqt+ypy6id/hpe0BY9 > mOg9VyMW1cM= > =aNiz > -----END PGP SIGNATURE-----

2 1

Re: 10th FIRST
by William H. Geiger III 17 Dec '03

17 Dec '03

------------------------------------------------------------------------- The following message is forwarded to you by "William H. Geiger III" <whgiii(a)invweb.net> (listed as the From user of this message). The original sender (see the header, below) was Vicente Garcia <vggarcia(a)campus.mty.itesm.mx> and has been set as the "Reply-To" field of this message. ------------------------------------------------------------------------- >From: Vicente Garcia <vggarcia(a)campus.mty.itesm.mx> >Newsgroups: comp.security.pgp.resources >Subject: 10th FIRST >Date: Tue, 20 Jan 1998 18:38:39 -0600 >Organization: ITESM Campus Monterrey . DINF-DTCI >Lines: 371 >Message-ID: <34C5438D.F8F99029(a)campus.mty.itesm.mx> >NNTP-Posting-Host: vangelis.mty.itesm.mx >Mime-Version: 1.0 >Content-Type: text/plain; charset=us-ascii >Content-Transfer-Encoding: 7bit >X-Trace: news.mty.itesm.mx 885343029 6704 (None) 131.178.17.111 >X-Complaints-To: news(a)news.mty.itesm.mx >X-Mailer: Mozilla 4.01 [en] (Win95; I) >X-Priority: 3 (Normal) >Path: edison.dotstar.net!pull-feed.internetmci.com!opus.ies-energy.com!news.cs.utwente.nl!cosy.sbg.ac.at!wuff.mayn.de!Cabal.CESspool!bofh.vszbr.cz!cpk-news-hub1.bbnplanet.com!news.bbnplanet.com!cs.utexas.edu!news.uh.edu!news.mty.itesm.mx!not-for-mail -----BEGIN PGP SIGNED MESSAGE----- ************************************************************* * * * Forum of Incident Response and Security Teams (FIRST) * * * * Tenth Annual Computer Security Incident Handling Workshop * * * * Monterrey, Mexico * * * * Monday 22-Jun-1998 to Friday 26-Jun-1998 (inclusive) * * * ************************************************************* C A L L F O R P A P E R S Submission Deadline: January 15, 1998 "The challenges of incident handling in a diverse world" The Forum of Incident Response and Security Teams (FIRST) was formed in November 1990 to address the problem of an ever increasing number of computer and network security related incidents, affecting thousands of systems around the world. The forum is made up of government, private and academic Computer Security Incident Response Teams from around the world. Its primary goal is to coordinate the efforts of its members in order to increase both their individual and collective effectiveness. The annual Incident Handling Workshop is part of FIRST's ongoing educational program, which is aimed at increasing the general awareness of security issues and improving expertise when handling computer security incidents. Specific security problems can affect many individuals and organizations around the world, possibly involving many different technological environments. Each of the parties involved must tailor its actions to the context in which the problem is experienced. Factors which must be taken into account include: * Cultural: The way in which a problem is tackled can be highly influenced by the historical development of the community in question. Examples are the ability for open communication about problems or values regarding privacy. * Professional: Today the Internet is open to the masses. The ease of communication, the advent of electronic commerce, and the availability of information, makes it a playground and a library for the masses. It is also a key business tool which professionals depend upon. * Political: Political decisions of individual countries concerning key areas of computer security, e.g. restrictions in the use and export of cryptological technology, may change the way that security problems must be approached. Legalities pertaining to diverse use of computer systems vary widely between countries. * Technological: Different technologies, covering a wide spectrum that includes mainframes, unix workstations, personal computers and network computers are connected to the same network simultaneously. Who should attend? __________________ All those responsible for any aspect of computer security management will benefit from attending this workshop. This includes both members and non-members of FIRST, law enforcement officials, computer security incident response teams, as well as consultants, contractors, vendors and individuals involved in the use, maintenance or planning of computer systems. Why attend? ___________ The character of the Internet is changing rapidly. Not only has the commercial community discovered new possibilities offered by "direct" marketing and advertisement. Governmental and non-academic organizations have also turned their attentions to the potential of the Internet. Incident Handling must adapt to the changing user base of the Internet. In addition to the opportunity for those involved in computer security to get together and discuss all aspects of the subject, the workshop will provide the opportunity to listen to experts in the fields of computer security incident response and vulnerability analysis. They will share their valuable expertise by speaking about their experience in dealing successfully with the coordination of incidents traversing international boundaries, highlighting particular problems where appropriate. There is no other workshop dedicated to this topic in the world. Important Dates: ________________ Abstract/Proposals Due: January 15, 1998 Authors Notified: February 10, 1998 Full Materials for Proceedings Due: April 1, 1998 Format of the workshop: _______________________ The first day is allocated for parallel tutorial style presentations. The remaining four days will consist of conference paper and workshop style presentations, as well as FIRST business sessions. One evening is allocated for participants to hold events devoted to subjects of particular interest ("birds of a feather" sessions). All events will be selected to further the objectives of FIRST and its members. They may involve topics such as computer security incident handling, team and incident response coordination, tools, international issues, or work in progress. A list of example topics can be found at the end of this announcement. Contributions should follow the following guidelines: Tutorials: Half or full day tutorial proposals will be considered. Papers: Written papers may be as long as desired, but presentations must be limited to 30 minutes. Workshop: These informal sessions should either follow a more "hands-on" approach or provide for a high degree of audience participation. They should be tailored to address specific issues and should be from 60 to 90 minutes in duration. Panel Sessions on a particular topic are acceptable. Submission information: _______________________ Submissions should include an abstract, proposed length and single page of notes describing the content and style of the presentation. Special audio/visual requirements (other than one microphone and one overhead projector) should be described. Panel session proposals should include a list of panelists who have agreed to participate. Submissions should be sent to the contact address given at the end of this document. The preferred submission mechanism is via electronic mail in ASCII, HTML or PostScript formats. Submissions via Facsimile transmission or the postal service will, however, be accepted. Submissions must be received by the January 15, 1998. Submissions received after this date may not be considered for inclusion in the program. Please use the appended form for your submissions. Authors will be notified by the February 10, 1998 of the status of their presentation (accepted/rejected). The final version of the material used for the presentation (overheads, papers, slides) must be delivered to the organizers by the April 1, 1998 for inclusion in the proceedings. Email: ______ Please use the email address first-pc98(a)first.org for submissions or questions regarding the call for papers. WWW: ____ The Workshop WWW page is accessible from the FIRST webserver: http://www.first.org/workshops/1998/ Program Committee: __________________ Wolfgang Ley, DFN-CERT, Germany (Program Chair) Brian Dunphy, ASSIST, USA Eric A. Fisch, Trident Data Systems, USA Eric Halil, AUSCERT, Australia Stephen Hansen, Stanford University, USA Ahmet Koltuksuz, IZMIR Inst. of Technology, Turkey Sherman O. Loges, Boeing, USA Paul Mauvais, CIAC, USA Fran Nielsen, NIST, USA Steve Romig, Ohio State, USA Roger Safian, Northwestern University, USA Miguel J. Sanchez, SGI, USA Sandy Sparks, CIAC, USA Don Stikvoort, CERT-NL, Netherlands Wietse Venema, TU Eindhoven, Netherlands Mark Zajicek, CERT Coordination Center, USA Conference Location: ____________________ Monterrey, Mexico Dates: _____ Mon June 22, 1998 - tutorials (parallel streams) Tue June 23, 1998 to Fri June 26, 1998 (workshop). Conference Host: ________________ Instituto Tecnologico y de Estudios Superiores de Monterrey (ITESM), Mexican CERT (MxCERT). The workshop is sponsored by First.Org Inc. Contact Information: ____________________ Electronic Mail: first-pc98(a)first.org Postal Address: Attn: Wolfgang Ley DFN-CERT Univ. of Hamburg Vogt-Koelln-Str. 30 22527 Hamburg Germany Facsimile: +49 40 5494 2241 Subject: FIRST 1998 Workshop Example Topics (other topics may be considered): Dealing with the increasing diversity in all areas International Legal Issues Legal and Administrative Issues in Incident Handling Coordinating International Incidents Incident Handling and the Internet Security on Large Networks other than the Internet How to Protect an Incident Response Team Site Interviewing/Hiring Incident Response Team Staff Outsourcing an Incident Response Team Vulnerability/Advisory Processes New Tools for Incident Handling Statistic Tools Informational Resources Programming Securely Preventing Incidents Intrusion/Vulnerability Detection Tools System/Network Monitoring Tools The Changing Nature of the "hack" Internet Service Providers and Security Vendor Session Collecting Evidence =========================================================================== ABSTRACT / PROPOSAL SUBMISSION SHEET FIRST 1998 Name __________________________________________________________ Address __________________________________________________________ __________________________________________________________ __________________________________________________________ Phone ____________________ Fax _______________________ E-mail ____________________ URL _______________________ Title of Presentation ____________________________________________ Presentation Type ( please tick one ) ( ) Paper ( ) Half-day Tutorial ( ) Workshop ( ) Full-day Tutorial ( ) Panel Presentation Length (in minutes) ______ Presentation Media Requirement (other than one overhead projector and a microphone): _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ Abstract ( 75-100 words ) _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ FIRST is granted an non exclusive right to copy and redistribute conference material including the submissions of the author(s). This includes possible distribution on a conference CD and/or the FIRST website. Brief Biography ( 50-75 words ) _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ -----BEGIN PGP SIGNATURE----- Version: 2.6.2i iQCVAwUBNHit6QQmfXmOCknRAQFQQQP6Ao1CYieDoeHK1BFqypC6QjVKXeNLEjY+ jq2HgNBSvxuysHH1fNnqNxMRJSHWyFw+yEJJk3TFXL6tyIOIojbfnzH88crtdMah yzMYZL+APdTf3JppF8ipeIO8HygwMVt/BuRtW7JUCPvN5b7Vj1jDfc8pqOE786np eAExY1mgrSk= =LqxA -----END PGP SIGNATURE----- -------------------------------------------------------------------- MR/2 PGP Signature Check 22 Jan 1998 22:58:34 -------------------------------------------------------------------- Key matching expected Key ID 8E0A49D1 not found in file 'pubring.pgp'. WARNING: Can't find the right public key-- can't check signature integrity. -------------------------------------------------------------------- MR/2 PGP Signature Check [Secondary Keyring] 22 Jan 1998 22:58:34 -------------------------------------------------------------------- WARNING: Bad signature, doesn't match file contents! Bad signature from user "Wolfgang Ley, DFN-CERT <ley(a)cert.dfn.de>". Signature made 1997/11/23 22:28 GMT using 1024-bit key, key ID 8E0A49D1 WARNING: Because this public key is not certified with a trusted signature, it is not known with high confidence that this public key actually belongs to: "Wolfgang Ley, DFN-CERT <ley(a)cert.dfn.de>". PGPRC=1 PGPRC2=1 ----------------------------------------------------- -- End of forwarded message ----------------------------------------------------- -- --------------------------------------------------------------- William H. Geiger III http://users.invweb.net/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://users.invweb.net/~whgiii/pgpmr2.html --------------------------------------------------------------- Tag-O-Matic: The sad thing about Windows bashing is it's all true.

1 0