August 2003 - cypherpunks-legacy

Cypherpunks List Info
by cpunk＠lne.com 17 Aug '03

17 Aug '03

Cypherpunks Mailing List Information Last updated: Sep 12, 2002 This message is also available at http://www.lne.com/cpunk Instructions on unsubscribing from the list can be found below. 0. Introduction The Cypherpunks mailing list is a mailing list for discussing cryptography and its effect on society. It is not a moderated list (but see exceptions below) and the list operators are not responsible for the list content. Cypherpunks is a distributed mailing list. A subscriber can subscribe to one node of the list and thereby participate on the full list. Each node (called a "Cypherpunks Distributed Remailer", although they are not related to anonymous remailers) exchanges messages with the other nodes in addition to sending messages to its subscribers. A message posted to one node will be received by the list subscribers on the other nodes, and vice-versa. 1. Filtering The various CDRs follow different policies on filtering spam and to a lesser extent on modifying messages that go to/from their subscribers. Filtering is done, on nodes that do it, to reduce the huge amount of spam that the cypherpunks list is subjected to. There are three basic flavors of filtering CDRs: "raw", which send all messages to their subscribers. "cooked" CDRs try to eliminate the spam on that's on the regular list by automatically sending only messages that are from cypherpunks list subscribers (on any CDR) or people who are replying to list messages. Finally there are moderated lists, where a human moderator decides which messages from the raw list to pass on to subscribers. 2. Message Modification Message modification policy indicates what modifications, if any, beyond what is needed to operate the CDR are done (most CDRs add a tracking X-loop header on mail posted to their subscribers to prevent mail loops). Message modification usually happens on mail going in or out to each CDR's subscribers. CDRs should not modify mail that they pass from one CDR to the next, but some of them do, and others undo those modifications. 3. Privacy Privacy policy indicates if the list will allow anyone ("open"), or only list members, or no one ("private") , to retrieve the subscribers list. Note that if you post, being on a "private" list doesn't mean much, since your address is now out there. It's really only useful for keeping spammers from harvesting addresses from the list software. Digest mode indicates that the CDR supports digest mode, which is where the posts are batched up into a few large emails. Nodes that support only digest mode are noted. 4. Anonymous posting Cypherpunks encourages anonymous posting. You can use an anonymous remailer: http://www.andrebacard.com/remail.html http://anon.efga.org/Remailers http://www.gilc.org/speech/anonymous/remailer.html or you can send posts to the list via cpunks_anon(a)einstein.ssz.com and your mail's headers will be stripped before posting. Note that this doesn't provide complete anonymity since the receiving site will still have log file entries showing the source of the mail (or you have to trust that they delete them). You also will be 'sharing' a reputation with the other entities that post through this alias, and some of them are spammers, so some subscribers will have this alias filtered. 5. Unsubscribing Unsubscribing from the cypherpunks list: Since the list is run from a number of different CDRs, you have to figure out which CDR you are subscribed to. If you don't remember and can't figure it out from the mail headers (hint: the top Received: line should tell you), the easiest way to unsubscribe is to send unsubscribe messages to all the CDRs listed below. How to figure out which CDR you are subscribed to: Get your mail client to show all the headers (Microsoft calls this "internet headers"). Look for the Sender or X-loop headers. The Sender will say something like "Sender: owner-cypherpunks(a)lne.com". The X-loop line will say something like "X-Loop: cypherpunks(a)lne.com". Both of these inticate that you are subscribed to the lne.com CDR. If you were subscribed to the algebra CDR, they would have algebra.com in them. Once you have figured out which CDR you're subscribed to, look in the table below to find that CDRs unsubscribe instructions. 6. Lunatics, spammers and nut-cases "I'm subscribed to a filtering CDR yet I still see lots of junk postings". At this writing there are a few sociopaths on the cypherpunks list who are abusing the lists openness by dumping reams of propaganda on the list. The distinction between a spammer and a subscriber is nearly always very clear, but the dictinction between a subscriber who is abusing the list by posting reams of propaganda and a subscriber who is making lots of controversial posts is not clear. Therefore, we tolerate the crap. Subscribers with a low crap tolerance should check out mail filters. Procmail is a good one, although it works on Unix and Unix-like systems only. Eudora also has a capacity for filtering mail, as do many other mail readers. An example procmail recipie is below, you will of course want to make your own decisions on which (ab)users to filter. # mailing lists: # filter all cypherpunks mail into its own cypherspool folder, discarding # mail from loons. All CDRs set their From: line to 'owner-cypherpunks'. # /dev/null is unix for the trash can. :0 * ^From.*owner-cypherpunks@.* { :0: * (^From:.*ravage@ssz\.com.*|\ ^From:.*jchoate@dev.tivoli.com.*|\ ^From:.*mattd@useoz.com|\ ^From:.*proffr11@bigpond.com|\ ^From:.*jei@cc.hut.fi) /dev/null :0: cypherspool } 7. List of current CDRs All commands are sent in the body of mail unless otherwise noted. --------------------------------------------------------------------------- Algebra: Operator: Subscription: "subscribe cypherpunks" to majordomo(a)algebra.com Unsubscription: "unsubscribe cypherpunks" to majordomo(a)algebra.com Help: "help cypherpunks" to majordomo(a)algebra.com Posting address: cypherpunks(a)algebra.com Filtering policy: raw Message Modification policy: no modification Privacy policy: ??? Info: ??? --------------------------------------------------------------------------- CCC: Operator: drt(a)un.bewaff.net Subscription: "subscribe [password of your choice]" to cypherpunks-request(a)koeln.ccc.de Unsubscription: "unsubscribe <password>" to cypherpunks-request(a)koeln.ccc.de Help: "help" to to cypherpunks-request(a)koeln.ccc.de Web site: http://koeln.ccc.de/mailman/listinfo/cypherpunks Posting address: cypherpunks(a)koeln.ccc.de Filtering policy: This specific node drops messages bigger than 32k and every message with more than 17 recipients or just a line containing "subscribe" or "unsubscribe" in the subject. Digest mode: this node is digest-only NNTP: news://koeln.ccc.de/cbone.ml.cypherpunks Message Modification policy: no modification Privacy policy: ??? --------------------------------------------------------------------------- Infonex: Subscription: "subscribe cypherpunks" to majordomo(a)infonex.com Unsubscription: "unsubscribe cypherpunks" to majordomo(a)infonex.com Help: "help cypherpunks" to majordomo(a)infonex.com Posting address: cypherpunks(a)infonex.com Filtering policy: raw Message Modification policy: no modification Privacy policy: ??? --------------------------------------------------------------------------- Lne: Subscription: "subscribe cypherpunks" to majordomo(a)lne.com Unsubscription: "unsubscribe cypherpunks" to majordomo(a)lne.com Help: "help cypherpunks" to majordomo(a)lne.com Posting address: cypherpunks(a)lne.com Filtering policy: cooked Posts from all CDR subscribers & replies to threads go to lne CDR subscribers. All posts from other CDRs are forwarded to other CDRs unmodified. Message Modification policy: 1. messages are demimed (MIME attachments removed) when posted through lne or received by lne CDR subscribers 2. leading "CDR:" in subject line removed 3. "Reply-to:" removed Privacy policy: private Info: http://www.lne.com/cpunk; "info cypherpunks" to majordomo(a)lne.com Archive: http://archives.abditum.com/cypherpunks/index.html (thanks to Steve Furlong and Len Sassaman) --------------------------------------------------------------------------- Minder: Subscription: "subscribe cypherpunks" to majordomo(a)minder.net Unsubscription: "unsubscribe cypherpunks" to majordomo(a)minder.net Help: "help" to majordomo(a)minder.net Posting address: cypherpunks(a)minder.net Filtering policy: raw Message Modification policy: no modification Privacy policy: private Info: send mail to cypherpunks-info(a)minder.net --------------------------------------------------------------------------- Openpgp: [openpgp seems to have dropped off the end of the world-- it doesn't return anything from sending help queries. Ericm, 8/7/01] Subscription: "subscribe cypherpunks" to listproc(a)openpgp.net Unsubscription: "unsubscribe cypherpunks" to listproc(a)openpgp.net Help: "help" to listproc(a)openpgp.net Posting address: cypherpunks(a)openpgp.net Filtering policy: raw Message Modification policy: no modification Privacy policy: ??? --------------------------------------------------------------------------- Ssz: Subscription: "subscribe cypherpunks" to majordomo(a)ssz.com Unsubscription: "unsubscribe cypherpunks" to majordomo(a)ssz.com Help: "help cypherpunks" to majordomo(a)ssz.com Posting address: cypherpunks(a)ssz.com Filtering policy: raw Message Modification policy: Subject line prepended with "CDR:" Reply-to cypherpunks(a)ssz.com added. Privacy policy: open Info: http://www.ssz.com/cdr/ --------------------------------------------------------------------------- Sunder: Subscription: "subscribe" to sunder(a)sunder.net Unsubscription: "unsubscribe" to sunder(a)sunder.net Help: "help" to sunder(a)sunder.net Posting address: sunder(a)sunder.net Filtering policy: moderated Message Modification policy: ??? Privacy policy: ??? Info: ??? --------------------------------------------------------------------------- Pro-ns: Subscription: "subscribe cypherpunks" to majordomo(a)pro-ns.net Unsubscription: "unsubscribe cypherpunks" to majordomo(a)pro-ns.net Help: "help cypherpunks" to majordomo(a)pro-ns.net Posting address: cypherpunks(a)pro-ns.net Filtering policy: cooked Posts from all CDR subscribers & replies to threads go to local CDR subscribers. All posts from other CDRs are forwarded to other CDRs unmodified. Message Modification policy: 1. leading "CDR:" in subject line removed 2. "Reply-to:" removed Privacy policy: private Info: http://www.pro-ns.net/cpunk

1 0

war Crimes
by Harmon Seaver 17 Aug '03

17 Aug '03

http://counterpunch.org/cloughley08162003.html "Col. David Hogg, commander of the 2nd Brigade of the 4th Infantry Division, said tougher methods are being used to gather intelligence. On Wednesday night, he said, his troops picked up the wife and daughter of an Iraqi lieutenant general. They left a note: "If you want your family released, turn yourself in." Such tactics are justified, he said." There obviously is very, very little difference anymore between the US gov't and the Third Reich anymore. Read the whole article, it's nauseating. -- Harmon Seaver CyberShamanix http://www.cybershamanix.com

2 1

Bookies in Exile
by Duncan Frissell 17 Aug '03

17 Aug '03

Today's NYT Magazine: http://www.nytimes.com/2003/08/17/magazine/17GAMBLING.html?position=&pagewa… August 17, 2003 Bookies in Exile By WILLIAM BERLIND Costa Rica is highly prized by the world's backpackers and sightseers for its unspoiled natural beauty, but it's easy to forget that when arriving in its grimy capital, San Jose. The newly remodeled airport is surrounded by chain hotels, freshly paved roads and shiny corporate plazas. After that it goes rapidly downhill. A dusty highway heading vaguely toward downtown takes you through the poorer suburbs of San Jose, packed with families in corrugated-tin-roof shacks. Above them, on the sides of the surrounding hills, Costa Rica's elite live behind high, fortified walls. The entire valley is blanketed with smog from auto fumes, brush fires and burned trash. This Costa Rica doesn't make for much of a postcard, but to a small group of men, Americans mostly, it is alluring, enchanting and brimming with possibilities for adventure. The men are bookmakers taking bets and dispensing winnings over the Internet, and Costa Rica has exactly what they need -- a government that welcomes new investment in almost whatever form it takes, a well-developed business environment that makes it possible get phone lines hooked up and computer equipment serviced and a sizable English-speaking population capable of manning the phones and helping customers place their bets. Legal prostitution, as well as a plethora of strip clubs, seedy casinos and bars festooned with Budweiser signs, round out the atmosphere. Betting operations are now among San Jose's most lucrative and visible enterprises, and their success has transformed the city. One prominent suburban landmark is an office building occupied by an outfit called BETonSPORTS.com. Throughout its nine floors, 1,500 Costa Ricans are employed (in mostly clerical positions) and offered amenities like on-site day care and classes to improve their English. Most of the bookmaking companies, though, are a good deal smaller and harder to see, tucked away in strip malls and shadowy side streets. The American proprietors are generally in their 30's and 40's, and for them, the Internet provides not only the means to escape the reach of American law, but also a chance to turn what had been the equivalent back home of small, local shops -- sustained by personalized attention and all the headaches that involves -- into booming, virtual superstores that can rake in action from all over the world. The experiences of these men in Costa Rica, as well as of those elsewhere in Central America and the Caribbean, started out as thrilling adventures in what seemed to them like Las Vegas in the 1950's. But as betting operations multiplied, the offshore business has become hotly competitive and complicated. Worse, in recent years lawmakers and ambitious prosecutors back in the States have been mounting ever more serious legal challenges. Returning home to a normal life now means facing the possibility of going to prison. And so, many of the bookmakers who started out so optimistically are finding themselves locked into an isolated way of life that with each passing day seems a worse bet. ....

1 0

reliance that's scary
by Major Variola (ret) 17 Aug '03

17 Aug '03

At 10:13 AM 8/16/03 -0400, Roy M. Silvernail wrote: > >Security, as Schneier says, is a process. It's also a mindset, and I think >one either has the mindset or he doesn't. And for those that don't have it, >it is *very* difficult to impart. And you don't get any droid-demonstrable features for all your efforts. Whereas being able to control <whatever> from a network has gee-whiz sellability. And the customer has a hard time imagining the attack -how are they going to find the network, how are they going to guess the password. I had the pleasure ca 1997 of figuring out how to browser-enable a multiton industrial machine (the kind with big red "stop" buttons, rotating lights on it when it was operating, and stickers showing various forms of dismemberment possible) once. A password was the only access control. I hope anyone who installed this understood firewalling and air gapping... (Meanwhile, my garage door is "protected" merely by the number of possibilities, 256)

2 1

US soldiers in Iraq held against their will
by Harmon Seaver 17 Aug '03

17 Aug '03

Just heard about this local guy who reluctantly went to Iraq because he was in the reserves, now his contract is up (as of 7/31) and they won't let him out. ======================================================================== Dear friends As many of you know I am in Iraq with the 724th Eng Bn. Many of you may not know however that on July 30th 2003 my enlistment contract ended and the I have been involuntarily extended. I am now a prisoner of the US army. I find it very troubling that the USA would force people against their free will to be in the military, furthermore the fact that their are hundreds perhaps thousands of able bodied volunteer soldier in the Wisconsin Army System that have not been activated and that could replace those soldiers who are in Iraq involuntarily. I request you assistance in helping me get home. Free Moon!! Below is a letter I have written to our Wisconsin congresspersons, and governor. Also below are their addresses and email addresses. I ask that you read my letter to them and email or write all of them with a similar letter addressed from your view point. Please do not forward my letter to them but rather write them in you own words your objection to the practice ofinvoluntary extension as it pertains to me. I feel that if enough people write that it may actually influence my Battalion Commander, who has the power to do so, to grant me my honorable discharge and send me home. Also please forward this email to people who you know know me and would be willing to help. Please help me return home, reunite with my son, and practice my religion of non-violence. Thank you. Love, Jason Moon Russ Fielgold russ_feingold(a)feingold.senate.gov Send snail mail to this address Bob Schweder C/O Senator Russ Fiengold 1640 Main Street Green Bay, WI 54302 920) 465-7508 Bob Schweder is Fiengold Military/ Veteran Affairs Aide. Herb Kohl senator_kohl(a)kohl.senate.gov Send snail mail to this address Steve Piotrowski C/o Senator Kohl 14 West Mifflin Street, Suite 207 Madison, WI 53703 Phone: (608) 264-5338 Fax: (608) 264-5473 Kohl personally asked to send all thought regarding Jason to Steve but still email the Senator. He responded personally to my email. Tom Petri US Rep 6th District WI http://www.house.gov/writerep/ Use the above link to write Rep Petri Send snail mail to this address Rep. Tom Petri 490 West Rolling Meadows Drive Suite B Fond du Lac, WI 54937 Tel: 920/922-1180 Toll-free in Wisconsin: 800/242-4883 -- Harmon Seaver CyberShamanix http://www.cybershamanix.com

2 4

Jessica Stern on Jim Bell
by John Young 17 Aug '03

17 Aug '03

Jessica Stern's new book, "Terror in the Name of God : Why Religious Militants Kill," has about 8 pages on Jim Bell, in a chapter called "Lone Wolf Avengers," which is shared with the Pakistani Kansai, assassin of CIA employees. Stern says that while Bell is not a religion-based terrorist he is included in the book as an example of the solo individual with a private agenda that smacks of religion. This appears to be a stretch, but Stern stretches her material to fit an agenda. A Stern footnote says the Bell material is based on the forthcoming publication, "James Dalton Bell." She says she had numerous telephone interviews with him beginning in 2000 after making a request in 1998 during Jim's first imprisonment. Her capsule version of Jim's "crimes" and punishment is a bellweather of what may be in store for other miscreants who are fodder for terrorism careerists. To be sure, Jim may get a movie made about him, and I guess that would be his finest hour. Stern says Jim's leadership potential has so far led only to inspiring Carl Johnson to get himself thrown into prison.

1 0

Slective DoS on enemy communication by a P2P WLAN
by Thomas Shaddack 17 Aug '03

17 Aug '03

http://www.theregister.co.uk/content/68/32361.html US forces to target enemy mobiles with P2P WLANs By Tony Smith Posted: 15/08/2003 at 11:22 GMT The US military is developing a weapon based on peer-to-peer technology to take out mobile phone communications, the US Department of Defence has revealed. The system also has the capability to covertly monitor cellular traffic. Codenamed 'WolfPack', the device is intended to prevent an enemy from using its communications technologies, including cellular, without hindering US forces' own communications systems. WolfPack is a 6 x 4in cylinder weighing 6lbs, capable of being dropped by parachute or fired into the target area as a missile payload. Each device zaps mobile phone communications within a radius of half a kilometre. "The idea is to litter the battlefield with these small objects," WolfPack programme manager Preston Marshall in a statement. The battery-powered device contains an inflatable antenna. Fins mounted inside the cylinder extend from the device on touchdown to lift it into a vertical position. Once in place and with the aerial up, each WolfPack until begins communicating with any others it can detect. Together, they quickly establish a network. Other networks in range can tie in too, creating, if you will, an 'Internet' of WolfPack nodes, which ultimately allows data from any single device to be routed across the network of networks to the command centre. Each cylinder can generate radio signal to disrupt cellular traffic, said Marshall. "Each WolfPack is very small, but collectively they gang up on the signal," he added. Equally, the units can used to monitor enemy communications signals. Think of it as a Napster for military intelligence - each device can share the signals it picks up with all the others. Units can stay powered for up to two months in the field, and can be later collected and re-used. Each node costs around $10,000. Together, they are cheaper, less obtrusive and a much less obvious target for enemy intervention than the aircraft-based systems used to jam or monitor communications at the moment. WolfPack prototypes will be put to the test with in the next 18 months, the DoD said. .

1 0

How can you tell if your alarm company's...
by Tyler Durden 17 Aug '03

17 Aug '03

...in cahoots with the "authorities"? In other words, lets say I leave my house for an extended period of time, and "they" tell the Alarm Monitoring company to shut down for a while so they can protect our freedoms. (I assume this is the way they would go about installing various things in one's house while away...wrong?) How can I tell if my alarm has been "down" for a period of time, assuming I don't believe the records of the alarm company in such cases? -TD _________________________________________________________________ The new MSN 8: smart spam protection and 2 months FREE* http://join.msn.com/?page=features/junkmail

10 13

Faith-based Drug Wars
by Tim Meehan 17 Aug '03

17 Aug '03

I'm starting to worry less about Brinworld and more about the Republic of Gilead... Source: Working for Change Pubdate: August 8, 2003 Author: Bill Berkowitz Webpage: http://www.workingforchange.com/article.cfm?ItemID=15420 Faith-based drug wars 08.08.03 - What do advocating "religious hiring rights," a $4 billion workplace retraining bill, and the war on drugs have in common? The short answer: Bring on the faith-based organizations! Although more than 30 months have passed since President Bush announced the centerpiece of his domestic agenda -- his faith-based initiative -- and no significant broader efforts to fund his initiative has emerged from Congress, the administration continues to move ahead on a number of fronts. Bush's latest faith-based proposal involves enlisting religious youth groups in the war on drugs. According to the Washington Times, the administration recently printed 75,000 copies of a guidebook to the drug wars called "Pathways to Prevention: Guiding Youth to Wise Decisions." The 100-page pamphlet "seeks to teach youth leaders how to handle questions and concerns about substance abuse." In addition to the publication, there's a new Web site and an e-mail newsletter. The new anti-drug project is built around three premises which are spelled out in a fact sheet titled "Marijuana and Kids: Faith": 1) "Religion plays a major role in the lives of American teens;" 2) "Religion and religiosity repeatedly correlate with lower teen and adult marijuana and substance use rates and buffer the impact of life stress which can lead to marijuana and substance use;" and 3) "Youth turn to faith communities [but] most faith institutions [with] youth ministries [do not] incorporate significant teen substance abuse prevention activities." Krissy Oechslin, assistant director of communications at the Washington, DC-based Marijuana Policy Project, the nation's largest marijuana policy reform organization, is concerned about the faith-based effort. "We do not oppose efforts to teach kids the truth about drugs. But the one thing that will likely be conspicuously missing from this faith-based initiative is any discussion about the effects of our drug laws," Oechslin told me in a telephone interview. "You can talk all you want about prevention and reducing demand but the fact of the matter is, nearly 750,000 people were arrested for marijuana violations in 2001; nearly 90% of those were for simple possession," Oechslin pointed out. "Despite the fact they are in a religious setting, they will likely avoid significant ethical questions raised by the drug wars, such as whether kids should be put into prison for using marijuana. If you talked with John Walters about this he would probably say that these kinds of questions are irrelevant to the conversation." Moving forward on faith Bush's faith-based anti-drug effort is the latest in a series of moves advancing his faith-based initiative. In late-June, the White House Office of Faith-Based and Community Organizations spelled out its position on a concept called "religious hiring rights." In a position paper titled "Protecting the Civil Rights and Religious Liberty of Faith-Based Organizations: Why Religious Hiring Rights Must Be Preserved," the administration argued religious organizations that receive government grants should be allowed to hire anyone they darn well please. At least two pieces of legislation with "religious hiring rights" provisions are currently under consideration by Congress: "The School Readiness Act of 2003," H.R. 2210, allows religious organizations receiving government funds to provide Head Start services to discriminate in their hiring practices; and the $4 billion Workforce Reinvestment and Adult Education Act -- passed by the full House on a party-line 220-204 vote -- also included a similar faith-based exemption. 'Faith: The Anti-Drug' At a press conference surrounded by Christian, Jewish and Islamic community leaders, John Walters, director of the Office of National Drug Control Policy, said: "Faith plays an important role when it comes to teen marijuana prevention. We are urging youth ministers, volunteers and faith leaders to integrate drug prevention messages and activities into their sermons and youth programming and are providing them with key tools and resources to make a difference. "As long as [America's youth] have, in their minds, the expectation that drug abuse comes as a rite of passage, we will continue to lose too many of our young people." (Isn't it amazing how many press conferences Bush Administration officials have held surrounded by Christian, Jewish and Islamic religious leaders?) "The reality is a lot of people don't know how to talk about these issues," said Jim Towey, the Director of the White House Office of Faith-Based and Community Initiatives. "According to data from Monitoring the Future, 90 percent of teens in the U.S. are affiliated with a religious denomination and 43 percent of eighth graders attend religious services weekly. Churches, temples and mosques are well positioned to cultivate anti-drug values and teach effective coping tools to deal with negative peer pressure," said Towey. The new campaign's slogan -- "Faith. The Anti-Drug" -- appears to indicate that Walters, appointed drug czar by Bush in May 2001, is turning down the volume from an earlier anti-marijuana ad campaign focused on teens. That high-powered effort was aimed at linking teenagers using marijuana to the funding of terrorist organizations and support for terrorism. Walters, characterized as a "drug 'hawk' well known for his moral condemnation of drug use and his criticism of Clinton's drug war techniques," by Salon's Janelle Brown, pointed out that "we need to be candid" about the situation confronting America's youth. Being candid, however, has not been one of the drug czar's strong suits. If Walters were truly candid he would talk about the billions of dollars wasted on the war on drugs; he would talk about the succession of cynical anti-drug advertising campaigns run by high-powered and well-connected ad agencies whose only success has been in lining its own pockets with tax-payer funds; and he would talk about the hundreds of thousands of people languishing in prisons because of marijuana-related convictions. In May, 2002, the Village Voice's Cynthia Cotts reported that a Wall Street Journal article citing the results of a Walters-authorized survey -- conducted by the private research firm Westat and the University of Pennsylvania -- "shows the government's anti-drug ads have completely failed to slow down teen drug use. Over the past five years," Cotts writes, "the feds spent $929 million to spread the message, and what did they get? A quarter of high school seniors still use illegal drugs, and after seeing the ads, some 13-year-old girls started smoking pot." If the new emphasis on faith-based interventions sounds like the repackaging of an old idea, well, that's because it very well might be. Last year, when the president announced his National Drug Control Strategy, FY-2003, "compassionate coercion" was the term coined and touted as a key element for success. Under the heading "Healing America's Drug Users" a White House fact sheet said: "Getting people into treatment -- including programs that call upon the power of faith -- will require us to create a new climate of compassionate coercion, which begins with family, friends, employers, and the community. Compassionate coercion also uses the criminal justice system to get people into treatment." Bush's advocacy of "religious hiring rights" and the administration's grafting of faith-based organizations onto the drug wars cuts to the heart of church/state separation, says Barry Lynn, executive director of Americans United for Separation of Church and State. According to Lynn, this new anti-drug effort is another administration attempt to blur those lines. In a Press Release issued by Americans United Lynn said, "The Bush administration seems to think there's a 'faith-based' solution to every social and medical problem in America. The project announced today is one very small part of a larger crusade that raises troubling constitutional concerns." "The White House is ignoring vital constitutional safeguards," continued Lynn. "The Constitution calls for a separation between religion and government, not a merger." Lynn pointed out that Walters recently appeared at a Riverside, Calif. "Teen Challenge" facility whose treatment program "relies on conversion to fundamentalist Christianity as its form of treatment." Only evangelical Christians are hired to carry out its work. In testimony before Congress in 2001, a Teen Challenge official noted that some Jews who participate in the program convert to Christianity, becoming what he called "completed Jews." Many Jewish leaders found the term offensive, the AU Press Release pointed out. This far, says Jeremy Leaming, Communications Associate at Americans United, government funds have not been awarded to Teen Challenge or any other religious organizations for John Walter's new anti-drug initiative. "But," he added, "we are watching the situation closely." "Bush's whole drug policy is in reality one gigantic faith-based initiative," Bruce Mirken, the Marijuana Policy Project's director of communications, commented in a recent e-mail. "It's sure not based on science or data, particularly in regard to marijuana. The government's own figures show that marijuana use by kids under 21 has gone up over 2000% since marijuana was banned, and a National Research Council study commissioned by the Drug Czar's office reported in 2001 that the evidence shows little or no relationship between the severity of criminal sanctions and rates or frequency of drug use. "If the government announced a program to reduce unemployment, and unemployment subsequently rose 2000%, that policy would be toast faster than you can say 'Bill Bennett loves to gamble,'" Mirken pointed out. "But the administration believes, with deep religious conviction that drugs are bad and must be banned. It's truly a faith based drug policy, and it ruins lives every day." (c) Working Assets Online. All rights reserved. -- Parti Marijuana de l'Ontario Marijuana Party http://ontario.mjparty.ca ICQ: 231997626 AOL/Yahoo/MSN: onmjp

1 0

Re: Viral DNS Attack, DDos Idea
by Major Variola (ret) 17 Aug '03

17 Aug '03

At 05:46 PM 8/15/03 -0700, Bill Stewart wrote: >At 01:19 PM 08/15/2003 -0700, Major Variola (ret.) wrote: >>Suppose malware appends a bogus entry to an infected machine's >>/etc/hosts (or more likely, MSwindows' \windows\blahblah\hosts file). >>(This constitutes a DNS attack on the appended domain name, exploiting >>the local hosts' name-resolution prioritization.) >>If the appended IP address points to the >>same victim (66.66.66.66) on all the virus-infected machines, >>and the appended (redirected) domain name is popular ("google.com" > >Cute, but sounds like a lot of work compared to other obvious attacks >you could do if you're spreading a virus anyway. Yes if you have virally owned a machine you can do much nastier. But this attack has the advantage that its effects would not be immediately recognized, nor could they be fixed in one spot once detected. Evolved diseases don't kill their hosts. Google is too useful to redirect. On the other hand, you can redirect an entire TLD (eg .mil), albeit on one machine at a time. Try doing that to one of The DNS Roots (pbut). >The more popular version of this attack is to try to hack DNS servers, >or poison DNS requests, so that DNS requests for google report the wrong thing. Yes I've followed discussions about SecDNS etc before. The cute part of the local hostsfile attack is that local machines are *not* administered competently, whereas DNS servers (and even ISP caches) are more likely tended better. >One problem with hacking the hosts files is that >different versions of Windows tend to put them in different places, >though perhaps if you target XP and 2000 and ME and 98 >it's consistent enough to work. OS detection is trivial once in.. as is file/path detection. I bet a javascript program could do it, if the client security settings (ACLs) were poor. >The real question is whether the bad guys would redirect to a victim, >or to a fake web server run by them, so they could hand out >bogus responses, such as redirects to various places around the web, >potentially along with some advertising banners. That's the virus author's choice, of course. In fact, I first thought of the attack as a DNS-redirect on domain names ---intending on random (or even localhost) misdirection. Upon thinking about it, the utility of all those 9AM Monday clicks became apparent. Diagnosing the situation would be a bushel of fun in the first hours either way. >If it's a virtual server machine, though, you can't do that >without disrupting all the clients on it, which is too bad; Hadn't thought of virtual servers... "all your eggs in one basket" :-) >If it's a router, that's a more interesting problem, You're right, routers merely drop port 80 incoming, any router DoS depends on sheer bandwidth --say routing the NYTimes.com clicks to Podunk-BackwaterTimes.com >because many routers have wimpy CPUs and do the routine work in ASICs - ASICs are great except for exception handling, which is a vulnerability. I was working on Intel's network processors earlier this year. Amazing chips--they have hardware support for everything you do in an IP stack, buttloads of memory controllers, I/O up the kazoo, and a dozen hardware-supported thread contexts (hyperthreading) on each of a dozen high-clockrate RISC engines. But they all defer exception packet processing to the onboard ARM, which might alert the host system or at least log the exception by incrementing a counter. But the ARM is not as fast as the threads and could perhaps be overwhelmed. Perhaps the subject of a future Gedanken Design Idea. ----- "When the rotary telephone first came out, people said, 'You mean I have to dial seven numbers?' "

2 1