December 2003 - cypherpunks-legacy

State of the Union Address
by bubbabill＠whitehouse.gov 17 Dec '03

17 Dec '03

Hear that the State of the Union next Monday has a section on Internet - networks - critical infrastructure protection et al. Anyone have any details?

1 0

Cybersitter censors code
by Secret Squirrel 17 Dec '03

17 Dec '03

>>Turns out, someone had inadvertly installed this piece of garbage >>called CyberSitter, which purports to protect you from nasty internet >>content. Turns out that it does this by patching the TCP drivers and >>watching the data flow over EVERY TCP STREAM. Can you spot the offense >>word in my example? It's "NUDE". Seems that cybersitter doesn't care if >>there are other characters in between. So it blanks out "nu */ #de" >>without blanking out the punctuation and line breaks. Very strange and >>stupid. Find out who it is and fire his ass for sabotage of the company computer systems.

1 0

Ultra computer
by Anonymous 17 Dec '03

17 Dec '03

Go back to the sushi bar and read your English book. Chop chop. >Ultra computer which NEC had the calculation speed of the world >maximum of about 1000 times of the super computer to was decided >to be developed. >Ultra computer will be completed in 2001. >It has the performance that the calculation which takes 10000 years >with the personal computer is made of 3, 4 days.

2 1

Premail/PERL 5.004 fix
by Jim Burnes 17 Dec '03

17 Dec '03

Punks: I've needed to upgrade PERL recently to 5.004 because some new software wouldn't work without it. I didn't want to do it because I heard it would break premail. I decided to DL the old perl-5.003 RPM from sunsite just in case 5.004 really screwed premail up. The actual truth of the matter is that 5.004 just warns you that premail re-declares several variable. Apparently this has no effect on the program, but those warnings are pretty annoying. Here is now you fix it: Define a WARN trap that checks a variable (DOWARN) to see whether it should warn or not. Since the re-declarations occurr in three different places you just have to set DOWARN to 0 before the line and then DOWARN to 1 after the line. Crude, but effective. Most of this code can be found by doing a man page on 'perlfunc', but I thought I'd save someone the time. Here is the diff for premail version .449. 100a101,102 > BEGIN { $SIG{'__WARN__'} = sub { warn $_[0] if $DOWARN } } > $DOWARN = 0; 1274a1277 > $DOWARN = 0; 1275a1279 > $DOWARN = 1; 1356a1361 > $DOWARN = 0; 1357a1363 > $DOWARN = 1; 6319a6326 > $DOWARN = 0; 6320a6328 > $DOWARN = 1; Your milelage may vary... Jim Burnes jim.burnes(a)ssds.com

1 0

Eureka! Fri Jan 23 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Friday's issue of Eureka! HARD CITY Ouch - you bet it's hard. What is? Stupid question! One visit to this website and the search for porn becomes more of a daily jaunt. It's simply packed with stuff to do and see, and what's more, it's FREE for a limited trial period! Hard City ......................... http://www.hardcity.com/ PLEASE VISIT THIS FINE EUREKA! PARTNER SITE THE ULTIMATE HARDCORE SITES http://sexplosion.com/adverts.shtml An incredible collection of over 30 sites featuring the hottest free hardcore photos. The pix are easy to find and the sites are all very accessible. You won't be disappointed. XXXTASY ISLAND Cum on vacation to XXXtasy island! You'll get a very warm wet welcome from the island girls. They serve you Cock Tales of erotic stories. They show you hot sex in their Slut Huts. A nice looking site with good looking sex. It's where the waves and the babes come lapping around your thighs. XXXtasy Island ................. http://www.xtasyisland.com/ AWESOME XXX A nice spread of free pix to choose from. A cool site with plenty to see. Do group sex, mixed race sex, one on one, lesbian or bondage pics get you hot? These are just some of the free hardcore pix available, and thumbnailed. Awesome! Awesome XXX ................ http://www.kjmedia.com/awesome/ BOOMBASTIC Take a peeping tom's ride thru over 1000 free pix. Nice quality photos show the high class girls in the way that God intended them - flat on their backs on the Net. Technology is a wonderful thing. Good looking girls. Good looking site. Boombastic ................ http://205.246.63.10/boombastic/ SEX UTOPIA Your head will spin and your blood will pump at Sex Utopia. There's free thumbnailed pix and you'll wish you were in'em! The girls are getting serviced, good n'hard. You can see it all nice n'close. Sex Utopia takes you to the edge of heaven Sex Utopia ........................... http//207.55.184.113/ FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here --> http://www.netscape.com/download/ Teenage lesbian .. http://207.240.169.120/lesbian/start.html CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Adult/Sex Chat -----------------> http://137.39.63.229/chat/ General/Fun Chat -------> http://137.39.63.229/chat/funchat/ THE BEST PHONE SEX NEW!!!! LD Call only! - Live Hot Girls!!!!--->1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline-------->1-800-644-8779 FREE: Live 1-on-1 (international call only)--->011-678-77416 AMATEUR SITE OF THE DAY ALLISON: Big-Boobs, Huge Tits. This girl is built like the proverbial shit house. With curves like hers, Allison's tits should be illegal. But don't let her boobs fool you, she has plenty of other ASSets to go around. Allison is not only a hot body, but she is a real sweetheart and her eyes will mesmerize you! ---------------------------> http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY HotStories.com: Tired of all those pics? Hot Stories lets you use your imagination to is full potential. Over 100 free sex stories in 8 different categories. Our stories are worth a thousand pics! ................ http://www.hotstories.com/ DAILY CARTOON ----------> http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Every day we bring you an exclusive choice pic of a famous adult porn star. And we must tell you - these pix are abso- luletly brilliant! ---> http://www.xxxadultstars.com/eureka/ GAYEUREKA! The gay newsletter is now available. You can get it here! Gay Eureka! ----------> http://eureka.abc-web.com/gayeureka/ EUREKA! TRANSLATIONS As well as English you can now choose any of these languages DEUTSCH ------> http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ------> http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ----> http://eureka.abc-web.com/eureka/francais.htm ITALIANO ----> http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE > http://eureka.abc-web.com/eureka/portuguese.htm TODAY'S FREE PIX Pic 1 --------------------------> http://137.39.63.229/?230 Pic 2 --------------------------> http://137.39.63.229/?231 Pic 3 --------------------------> http://137.39.63.229/?232 Pic 4 --------------------------> http://137.39.63.229/?233 Pic 5 --------------------------> http://137.39.63.229/?234 Pic 6 --------------------------> http://137.39.63.229/?235 Pic 7 --------------------------> http://137.39.63.229/?236 Pic 8 --------------------------> http://137.39.63.229/?237 Pic 9 --------------------------> http://137.39.63.229/?238 Pic 10 --------------------------> http://137.39.63.229/?239 ============================================================ TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS EMAIL RIGHT BACK TO US. ============================================================

1 0

Netscape 5 will be GPL'ed
by root 17 Dec '03

17 Dec '03

[Press Releases] http://www.netscape.com/newsref/pr/newsrelease558.html?cp=nws01flh1 NETSCAPE ANNOUNCES PLANS TO MAKE NEXT-GENERATION COMMUNICATOR SOURCE CODE AVAILABLE FREE ON THE NET BOLD MOVE TO HARNESS CREATIVE POWER OF THOUSANDS OF INTERNET DEVELOPERS; COMPANY MAKES NETSCAPE NAVIGATOR AND COMMUNICATOR 4.0 IMMEDIATELY FREE FOR ALL USERS, SEEDING MARKET FOR ENTERPRISE AND NETCENTER BUSINESSES ---------------------------------------------------------------------------- MOUNTAIN VIEW, Calif. (January 22, 1998) -- Netscape Communications Corporation (NASDAQ: NSCP) today announced bold plans to make the source code for the next generation of its highly popular Netscape Communicator client software available for free licensing on the Internet. The company plans to post the source code beginning with the first Netscape Communicator 5.0 developer release, expected by the end of the first quarter of 1998. This aggressive move will enable Netscape to harness the creative power of thousands of programmers on the Internet by incorporating their best enhancements into future versions of Netscape's software. This strategy is designed to accelerate development and free distribution by Netscape of future high-quality versions of Netscape Communicator to business customers and individuals, further seeding the market for Netscape's enterprise solutions and Netcenter business. In addition, the company is making its currently available Netscape Navigator and Communicator Standard Edition 4.0 software products immediately free for all users. With this action, Netscape makes it easier than ever for individuals at home, at school or at work to choose the world's most popular Internet client software as their preferred interface to the Internet. "The time is right for us to take the bold action of making our client free - and we are going even further by committing to post the source code for free for Communicator 5.0," said Jim Barksdale, Netscape's president and chief executive officer. "By giving away the source code for future versions, we can ignite the creative energies of the entire Net community and fuel unprecedented levels of innovation in the browser market. Our customers can benefit from world-class technology advancements; the development community gains access to a whole new market opportunity; and Netscape's core businesses benefit from the proliferation of the market-leading client software." Netscape plans to make Netscape Communicator 5.0 source code available for modification and redistribution beginning later this quarter with the first developer release of the product. The company will handle free source distribution with a license which allows source code modification and redistribution and provides for free availability of source code versions, building on the heritage of the GNU Public License (GPL), familiar to developers on the Net. Netscape intends to create a special Web site service where all interested parties can download the source code, post their enhancements, take part in newsgroup discussions, and obtain and share Communicator-related information with others in the Internet community. Netscape will also continue to develop new technologies and offer periodic certified, high-quality, supported releases of its Netscape Communicator and Navigator products, incorporating some of the best features created by this dynamic community. The ubiquity of Netscape's client software facilitates Netscape's strategy of linking millions of individuals to businesses. Today's announcements will help to further proliferate Netscape's award-winning client software which today has an installed base of more than 68 million, providing a ready market for businesses using Netscape's Networked Enterprise software solutions and Netscape Netcenter services. Netscape's research indicates that in the education market where Netscape's products are free, the Netscape client software commands approximately 90 percent share, indicating that users tend to choose Netscape when the choice is freely available. Making its browser software free also will enable Netscape to continue to drive Internet standards, maximize the number of users on the Internet, and expand the third-party community of companies and products that take advantage of the Netscape software platform. Netscape has successfully shifted its business over the past year toward enterprise software sales and to revenues from its Web site business, and away from standalone client revenues. In the third quarter of 1997, standalone client revenues represented approximately 18 percent of Netscape's revenue, with the rest coming from enterprise software, services and the Web site. Preliminary results for the fourth quarter of 1997, which Netscape announced January 5, show standalone client revenues decreased to approximately 13 percent in the fourth quarter. In the fourth quarter of 1996 by comparison, standalone client revenue represented approximately 45 percent of Netscape's revenue. In conjunction with its free client, Netscape separately announced today that it is launching a host of enhanced products and services that leverage its free client software to make it easy for enterprise and individual customers to adopt Netscape solutions. The new products and services reinforce Netscape's strategy of leveraging market penetration of its popular client software and its busy Internet site to seed further sales of Netscape software solutions in the home and business markets. The new products and services include enhanced subscription and support packages, an investment protection program for Netscape Communicator users, new reduced pricing on Netscape's retail and enterprise client products, new Premium Services on its Netscape Netcenter online service and Netscape SuiteSpot server software upgrades featuring Netscape client software. In addition, the company separately announced the launch of an aggressive new software distribution program called "Unlimited Distribution" to broadly distribute its market-leading Internet client software for free. Unlimited Distribution enables Original Equipment Manufacturers (OEMs), Internet Service Providers (ISPs), telecommunications companies, Web content providers, publishers and software developers to download and redistribute Netscape Communicator and Netscape Navigator easily with "no strings attached." In addition, beginning immediately, individual users can download Netscape Communicator or Navigator for free, register for Netscape Netcenter and, beginning tomorrow, enter the Choose Netscape Sweepstakes to win exciting travel-related prizes including a grand prize of two all-inclusive, seven-night tropical resort vacations. Individuals can download a free copy of Netscape Communicator client software or the Netscape Navigator browser from the Netscape home page at http://home.netscape.com, or by clicking on any of the thousands of "Netscape Now" buttons on the Internet. Netscape Communicator Professional Edition, which adds features for enterprise customers, will be available for US$29. Netscape Communications Corporation is a premier provider of open software for linking people and information over enterprise networks and the Internet. The company offers a full line of Netscape Navigator clients, servers, development tools and commercial applications to create a complete platform for next-generation, live online applications. Traded on NASDAQ under the symbol "NSCP," Netscape Communications Corporation is based in Mountain View, California. Additional information on Netscape Communications Corporation is available on the Internet at http://home.netscape.com, by sending email to info(a)netscape.com or by calling 650/937-2555 (corporate customers) or 650/937-3777 (individuals). Netscape is a trademark of Netscape Communications Corporation, which is registered in the United States and other jurisdictions. Netscape Communications, the Netscape Communications logo, Netscape Navigator, Netscape SuiteSpot, Netscape Composer, Netscape Messenger and Netscape Communicator are trademarks of Netscape Communications Corporation. ---------------------------------------------------------------------------- Corporate Sales: 650/937-2555 · Corporate Renewal Sales: 650/937-2929 · Personal Sales: 650/937-3777 · Government Sales: 650/937-3678 · Education Sales: 650/937-2810 If you have any questions, please visit Customer Service, or contact your nearest sales office. Copyright © 1998 Netscape Communications Corporation. This site powered by Netscape SuiteSpot servers.

10 12

toc.htm
by Jim Choate 17 Dec '03

17 Dec '03

FEDERAL GUIDELINES FOR SEARCHING AND SEIZING COMPUTERS TABLE OF CONTENTS PREFACE INTRODUCTION I. KEY TERMS AND CONCEPTS A. DEFINITIONS B. LIST OF COMPUTER SYSTEM COMPONENTS C. DETERMINING THE COMPUTER'S ROLE IN THE OFFENSE II. GENERAL PRINCIPLES A. SEARCH WARRANTS B. PLAIN VIEW C. EXIGENT CIRCUMSTANCES D. BORDER SEARCHES E. CONSENT SEARCHES 1. Scope of the Consent 2. Third-Party Consent a. General Rules b. Spouses c. Parents d. Employers e. Networks: System Administrators F. INFORMANTS AND UNDERCOVER AGENTS III. SEIZING HARDWARE A. THE INDEPENDENT COMPONENT DOCTRINE B. HARDWARE AS CONTRABAND OR FRUITS OF CRIME 1. Authority for Seizing Contraband or Fruits of Crime 2. Contraband and Fruits of Crime Defined C. HARDWARE AS AN INSTRUMENTALITY OF THE OFFENSE 1. Authority for Seizing Instrumentalities 2. Instrumentalities Defined D. HARDWARE AS EVIDENCE OF AN OFFENSE 1. Authority for Seizing Evidence 2. Evidence Defined E. TRANSPORTING HARDWARE FROM THE SCENE IV. SEARCHING FOR AND SEIZING INFORMATION A. INTRODUCTION B. INFORMATION AS CONTRABAND C. INFORMATION AS AN INSTRUMENTALITY D. INFORMATION AS EVIDENCE 1. Evidence of Identity 2. Specific Types of Evidence a. Hard Copy Printouts b. Handwritten Notes E. PRIVILEGED AND CONFIDENTIAL INFORMATION 1. In General a. Doctors, Lawyers, and Clergy b. Publishers and Authors 2. Targets 3. Using Special Masters F. UNDERSTANDING WHERE THE EVIDENCE MIGHT BE: STAND-ALONE PCs, NETWORKS AND FILE-SERVERS, BACKUPS, ELECTRONIC BULLETIN BOARDS, AND ELECTRONIC MAIL 1. Stand-Alone PCs a. Input/Output Devices: Do Monitors, Modems, Printers, and Keyboards Ever Need to be Searched? b. Routine Data Backups 2. Networked PCs a. Routine Backups b. Disaster Backups G. SEARCHING FOR INFORMATION 1. Business Records and Other Documents 2. Data Created or Maintained by Targets 3. Limited Data Searches 4. Discovering the Unexpected a. Items Different from the Description in the Warrant b. Encryption H. DECIDING WHETHER TO CONDUCT THE SEARCH ON-SITE OR TO REMOVE HARDWARE TO ANOTHER LOCATION 1. Seizing Computers because of the Volume of Evidence a. Broad Warrant Authorizes Voluminous Seizure of Documents b. Warrant is Narrowly Drawn but Number of Document to be Sifted through is Enormous c. Warrant Executed in the Home d. Applying Existing Rules to Computers 2. Seizing Computers because of Technical Concerns a. Conducting a Controlled Search to Avoid Destroying Data b. Seizing Hardware and Documentation so the System Will Operate at the Lab I. EXPERT ASSISTANCE 1. Introduction 2. Finding Experts a. Federal Sources b. Private Experts (1) Professional Computer Organizations (2) Universities (3) Computer and Telecommunications Industry Personnel (4) The Victim 3. What the Experts Can Do a. Search Planning and Execution b. Electronic Analysis c. Trial Preparation d. Training for Field Agents V. NETWORKS AND BULLETIN BOARDS A. INTRODUCTION B. THE PRIVACY PROTECTION ACT, 42 U.S.C. § 2000aa 1. A Brief History of the Privacy Protection Act 2. Work Product Materials 3. Documentary Materials 4. Computer Searches and the Privacy Protection Act a. The Reasonable Belief Standard b. Similar Form of Public Communication c. Unique Problems: Unknown Targets and Commingled Materials 5. Approval of Deputy Assistant Attorney General Required C. STORED ELECTRONIC COMMUNICATIONS VI. DRAFTING THE WARRANT A. DRAFTING A WARRANT TO SEIZE HARDWARE B. DRAFTING A WARRANT TO SEIZE INFORMATION 1. Describing the Place to be Searched a. General Rule: Obtain a Second Warrant b. Handling Multiple Sites within the Same District c. Handling Multiple Sites in Different Districts d. Information at an Unknown Site e. Information/Devices Which Have Been Moved 2. Describing the Items to be Seized 3. Removing Hardware to Search Off-Site: Ask th Magistrate for Explicit Permission. 4. Seeking Authority for a No-Knock Warrant a. In General b. In Computer-Related Cases VII. POST-SEARCH PROCEDURES A. INTRODUCTION B. PROCEDURES FOR PRESERVING EVIDENCE 1. Chain of Custody 2. Organization 3. Keeping Records 4. Returning Seized Computers and Materials a. Federal Rules of Criminal Procedure: Rule 41(e) b. Hardware c. Documentation d. Notes and Papers e. Third-Party Owners VIII. EVIDENCE A. INTRODUCTION B. THE BEST EVIDENCE RULE C. AUTHENTICATING ELECTRONIC DOCUMENTS 1. "Distinctive" Evidence 2. Chain of Custody 3. Electronic Processing of Evidence D. THE HEARSAY RULE IX. APPENDICES APPENDIX A: SAMPLE COMPUTER LANGUAGE FOR SEARCH WARRANTS 1. Tangible Objects a. Justify Seizing the Objects b. List and Describe the Objects (1) Hardware (2) Software (3) Documentation (4) Passwords and Data Security Devices 2. Information: Records, Documents, Data a. Describe the Content of Records, Documents, or other Information b. Describe the Form which the Relevant Information May Take c. Electronic Mail: Searching and Seizing Data from a BBS Server under 18 U.S.C. § 2703 (1) If All the E-Mail is Evidence of Crime (2) If Some of the E-Mail is Evidence of Crime (3) If None of the E-Mail is Evidence of Crime d. Ask Permission to Seize Storage Devices when Off-Site Search is Necessary e. Ask Permission to Seize, Use, and Return Auxiliary Items, as Necessary f. Data Analysis Techniques 3. Stipulation for Returning Original Electronic Data APPENDIX B: GLOSSARY APPENDIX C: FEDERAL EXPERTS FOR COMPUTER CRIME INVESTIGATIONS APPENDIX D: COMPUTER SEARCH AND SEIZURE WORKING GROUP APPENDIX E: STATUTORY POPULAR NAME TABLE APPENDIX F: TABLE OF AUTHORITIES Cases Statutes Federal Rules Federal Regulations Legislative History Reference Materials Go to . . . CCIPS Home || Justice Home Page _________________________________________________________________ Updated page May 9 , 1997 usdoj-jmd/irm/css/mlb _________________________________________________________________

1 0

Re: On the LAM--Local Area Mixes (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 22 Jan 1998 21:29:55 -0500 (EST) > From: Ryan Anderson <ryan(a)michonline.com> > Subject: Re: On the LAM--Local Area Mixes (fwd) > On Thu, 22 Jan 1998, Jim Choate wrote: > > > Are police considered an extension of the judicial or the executive arm of > > the government? > > In theory, executive. (That way legislative writes laws, executive > decides if they want to enforce them, judicial decides if they're legal or > not.. ) In theory, of course.. First, I knew the answer, I was looking for a lead-in...thanks. Then how, Constitutionaly speaking, do they have get the responsbility to search when it is clearly a judicial responsibility (that is where it is in the Constitution) and in cases such as Evans -v- Gore the Supreme Court has found that the judicial body can't transfer or relinquish it's responsibilities even if it *wants* to? I suspect that, again Constitutionaly speaking, the only system that would pass strict muster would be something similar to the Dutch which prohibit the police from executing a search until *after* review by a legislative representative. This is a rhetorical question, I don't expect you or anyone else to respond to it. Just think about it... ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Re: (eternity) Re: Eternity Services
by redgod＠usa.net 17 Dec '03

17 Dec '03

FUCK! WHO REGISTER ME TO THIS MAILING LIST? CAN YOU TELL ME HOW TO REMOVE MYSELF FROM IT? I WILL MAD! OH GOD! TOO MANY EMAIL! At 08:18 AM 1/12/98 +0100, Lucky Green wrote: >On Mon, 12 Jan 1998, Ryan Lackey wrote: >[quoting Tim] >> >> > (* I say "working" in the sense that the concept was very easy to >> > demonstrate just by using PGP and remailers. Not much more than what I >> > demonstrated in 1993 would be needed to deploy a real system. Except for >> > one thing: true digital cash. Not the bullshit one-way-traceable stuff that >> > Chaum and others are now pushing, but the original, online-cleared or >> > escrow-cleared form, a la the work of Goldberg et. al. For some of these >> > applications, below, simple token- or coupon-based schemes might work >> > adequately.) >> >> There are currently-under-development systems which will meet the digital cash >> requirement, >> from people who I consider highly respectable and competent. > >And the demand for such ecash systems is real. I personally carried a $10 >million offer for a non-exclusive license for the blind signature patent >to David Chaum. He declined the offer. "The patent is not for license". >DigiCash's CEO since March of last year, Mike Nash, also told me that >DigiCash was not considering licensing the patent. I knew that day that it >was time to quit. Not surprisingly, nobody heard from DigiCash since. > >-- Lucky Green <shamrock(a)cypherpunks.to> PGP v5 encrypted email preferred. > "Tonga? Where the hell is Tonga? They have Cypherpunks there?" > >

3 2

Re: (eternity) Service denial attacks on Eternity
by redgod＠usa.net 17 Dec '03

17 Dec '03

FUCK! WHO REGISTER ME TO THIS MAILING LIST? CAN YOU TELL ME HOW TO REMOVE MYSELF FROM IT? I WILL MAD! OH GOD! TOO MANY EMAIL! At 04:51 PM 1/12/98 +0000, Ross Anderson wrote: >Tim May wrote: > >> It is also likely in the extreme that a working Eternity service will >> quickly be hit with attackers of various sorts who want to test the limits >> of the service, or who want such services shut down. > >Exactly. When I first talked about Eternity, which was at either the >1994 or 1995 protocols workshop, I was walking back to my seat when >Bob Morris (then at the NSA) said, from behind his hand in a stage >whisper, `Kiddyporn!' > >Adam Back added: > >> the spooks / feds have a history of posting their own child porn if >> none is available to seize > >Indeed, and a decade or so ago there was a scandal when it turned out >that the spooks were using the Kincora Boys' Home in Belfast as a pedo >brothel in order to entrap various local politicians. For them to say >now that they need key escrow to suppress Kiddyporn is a bit rich! > >However the main threat is the court order - Anton Pillar or whatever >- and the best weapon against court orders is anonymity. If they don't >know your address they can't serve you the order or arrest you for >contempt. > >Tom Womack: > >> I can imagine *use* of the service becoming a felony > >I mentioned in the paper that Mossad might deny Eternity service to >the Muslim world by posting something rude about the Prophet Mohammed. > >One must of course create a lawful excuse for people to have Eternity >software mounted on their system. Maybe in addition to the `public' >Eternity service we should have many corporate or even private >services, many of which have escrow capabilities and are thus clearly >law-abiding and accountable :-) > >There are many other possibilities. One topic that oozes into my >consciousness from time to time is that one might integrate covert >communications and storage with an anti-spam mail program - maybe a >natural way forward if Adam hides Eternity traffic in spam! > >Tim again: > >> Great idea, but where are the customers? > >Some 90% of security research effort is on confidentiality, 9% on >authenticity and 1% on availability. Corporate infosec expenditures >are exactly the other way round, and tools to enable disaster recovery >databases to be spread holographically over a company's PCs could save >a fortune compared with the cost of some current arrangements. If a >few of these backup resources have hidden directories that mount the >public Eternity service, then who can tell? > >At the Info Hiding Workshop at Portland in April, I will present a new >idea which may facilitate such implementations of Eternity. This is >the Steganographic File System - designed to provide you with any file >whose name and password you know. If you don't know this combination, >then you can't even tell that the file is there. We do not need to >make any assumptions about tamper resistance; it can be done using >suitable mathematics. (This is joint work with Roger Needham and Adi >Shamir.) > >Ross > >PS: we need a better word for `eternityspace', and Bell Labs have >already trademarked `Inferno'. So what - Nirvana? Valhalla? >

2 1