January 2005 - cypherpunks-legacy

[IP] No expectation of privacy in public? In a pig's eye! (fwd from dave@farber.net)
by Eugen Leitl 14 Jan '05

14 Jan '05

----- Forwarded message from David Farber <dave(a)farber.net> -----

3 2

Florida man faces bioweapon charge
by R.A. Hettinga 14 Jan '05

14 Jan '05

<http://www.cnn.com/2005/US/01/13/ricin.arrest/> CNN Florida man faces bioweapon charge FBI says accused had poison ricin and several weapons Thursday, January 13, 2005 Posted: 7:00 PM EST (0000 GMT) MIAMI, Florida (CNN) -- An Ocala, Florida, man was arrested by the FBI after they found the biotoxin ricin in his possession in the home he shares with his mother. Steven Michael Ekberg, 22, had at least 83 castor beans and other byproducts consistent with the manufacture of ricin in his possession, the FBI said. Ricin is a poison that can be made from the waste from processing castor beans, according to the Centers for Disease Control and Prevention. The former waiter also had several weapons, including an AK-47 and an Uzi, the FBI said. Ekberg was taken into custody Wednesday night and was scheduled to appear Thursday afternoon before a federal magistrate in Ocala. He is being charged with possession of a biological weapon. "We are still investigating and are trying to determine what his intentions were, but we have no information that he released it to anyone," said FBI spokesman Jeff Westcott. "We believe that he acquired the materials over the Internet, but we are still investigating," he said. In their affidavit, FBI officials said they found a number of seeds in packaging that describes the material as "very poisonous." They said they also found, in a cardboard box in Ekberg's room, glass vials containing white granules suspected of being husk-less, chopped castor beans, a byproduct of the manufacture of ricin. The FBI said Ekberg has no known ties to terrorists or extremists. A hazardous-materials team took the substance to the Florida Health Department laboratory in Jacksonville, where it was confirmed to be ricin, the FBI said. FBI biohazard teams swept the house to ensure that no one in the neighborhood could become contaminated. Ekberg was arrested on an unrelated weapons and narcotics charge last weekend by the Marion County Sheriff's Office. According to the FBI affidavit, an anonymous source now acting as a confidential source called the sheriff's office and told authorities that Ekberg showed him the materials several months ago. "If I put this on your food, this would kill you immediately," Ekberg allegedly told the source, pointing to the contents of a container, according to the affidavit. He then picked up another container and stated words to the effect, "This would make you really sick," the source allegedly told authorities. Picking up another container, he said, "This would kill you, but not right away." The source told police that Ekberg had two books containing information on how to make poisons from household chemicals and plants, according to the affidavit. Ekberg, who has a license to carry concealed weapons, was in possession of various handguns at the time of his arrest, in addition to the Uzi and AK-47, authorities said. His mother, Theresa Ekberg, told the FBI that he has been treated for depression, according to the affidavit. His mother also told authorities that in the past her son had possessed some "chemicals." She said that on at least one occasion he showed her something he had purchased via the Internet and expressed concern that if their cat inadvertently ate enough of it, the cat would die, according to the affidavit. She advised that her son had had the chemicals for several years. The confidential source, according to the FBI, told authorities that Ekberg would often mix his anti-depression medication with alcohol and visit bars carrying concealed weapons. If convicted, he could face up to 10 years in prison. The FBI is still investigating who sent two letters that contained ricin in 2003 through the U.S. postal system. Those letters contained threats and complaints about labor regulations in the trucking industry. In 1978, Georgi Markov, a Bulgarian writer and journalist in London, died after a man attacked him with an umbrella that had been rigged to inject a ricin pellet under his skin. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

3 2

Re: Ridge Wants Fingerprints in Passports
by Bill Stewart 14 Jan '05

14 Jan '05

He's smearing his sticky fingerprints all over everything else, and now he wants them in our passports? Oughtta learn to keep his hands to himself. ---- Bill Stewart bill.stewart(a)pobox.com

2 1

Altnet trying to 'mug' companies
by R.A. Hettinga 14 Jan '05

14 Jan '05

<http://p2pnet.net/story/3542> p2pnet.net - the original daily p2p and digital media news site Altnet trying to 'mug' companies Jay Flemma p2pnet.net News:- Entertainment lawyer Jay Flemma doesn't believe Altnet's circular email campaign to p2p companies in a bid to get them to license the TrueNames 'hash' patent will work. In fact, "As I understand the lay of the land in this case, I believe they are grossly over-reaching in attempting to turn the world of IP into the wild, wild west and effectively mug these companies by trying to make them pay for something for which they do not have the rights to defend or prosecute," he told p2pnet. Flemma, who specialises in music, film, tv and book law with particular emphasis on the confluence of the media with the Net, is consulting with companies who've received the Altnet patent letter. "We're having discussions as to whether or not Altnet really has a leg to stand on," says Flemma, an expert in the legalities of Net distribution media. But, "I think their attorney's claims in the Washington Post that a jury found that their patent was valid is woefully inaccurate because it is not a jury question - or what's called a question of fact, whether or not a patent is valid," he says. "That is a question of law," "I can tell you this: juries do not rule on the question of whether or not a patent is valid." The EFF (Electronic Frontier Foundation) is taking an interest in events, we understand. As p2pnet was the first to report on Monday, Altnet has fired off a round of identical letters to companies it believes use hashes (think 'links') for a digital file. How2Share Technologies, a small Canadian company based in Victoria on Vancouver Island, British Columbia, and which markets PiXPO software for a picture sharing network, is one of the more recent victims. "I don't think the Patent has any legs," managing director Jim Wallace told p2pnet. Without saying it in so many words, the Altnet letters imply that if firms it approaches don't license the patent, they'll be sued. In the meanwhile, in case you're wondering what all the fuss is about, "A Hash as unique identifier was the whole idea behind hashing algorithms," says Exo in a p2pnet comment. Read on >>>>>>>>>>>>>>>>>>>>>>>> Earliest example I can recall was the Hash sorting technique. In essence IBM's punch card sorting machines (pre WWII) are an early example of hash sorting. In the punch card machine the hash was simply a nibble from a specific character column that is used to steer the card to a specific bin. This hash is only perfect in the since that all cards having the same character in the selected column will be steered to the same bin. To sort on a wider field, you simply start with the least significant column of the sort field; run the cards, re-stack first bin on top of second bin, and so on, repeating for each column in the field. In data communications the CRC is a hash guaranteed to be unique over a specific number of bits. A CRC-16 is unique for files up to 2^16 bits in length, CRC-32 for up to 2^32 bits. Different CRC algorithms use different bits to generate the feedback used to digest the data into a hash. (early 1970's?) CRC's were first used to detect data errors over serial data links. Early example: IBM mainframe to terminal equipment communications using SNA and SDLC protocols. TCP/IP protocol uses a CRC-32 to detect packet errors. (Mid 19080's) The field of cryptography, specifically public key cryptography, needed secure hashing algorithms. (Only secure in the sense that the estimated length of time to brute force content that will generate a specific hash value will take a very long time on the order of many CPU years. RSA patented various Message Digest functions (in the 1970's, several RSA patents recently expired and are now public domain). Most of us are familiar with the MD5 algorithm in which several P2P applications use to generate file Hash values. The whole Idea of using a Message Digest function in cryptography was to generate a hash on a plain text document (file) such that it could be used to detect if that document changes in any way. If any character in the document (file) is different then the hash will be different. These hashes are used when digitally signing a document, to verify that a document is the exact same (uniquely identified) document you viewed before signing. To prevent someone from changing the hash, it is encrypted using your private key so that others can verify using your public key. The results of processing the document using the MD function should exactly match the hash decoded using your public key. Databases have used such hashing algorithms to generate unique keys for locating data in a database. Software has a good example in the C++ language standard template library in the implementation of the std map object. The map object stores a key, the key can be plain text, but is usually a hash to minimize the number of characters that need to be compared when dealing with long strings. The key is used in a binary search to locate the mapped data. This technique was introduced in the STL library in the mid 1980's when C++ first appeared, but the general technique in software originates in Data structure text books well before that. Earliest reference I can cite from the top of my head is in Donald Knuth's "the art of computer programming" from the early 1970's. =================== Stay tuned. =================== See:- first to report - Altnet tries TrueNames on p2p ops, p2pnet, January 10, 2005 (Thursday 13th January 2005) -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Blue Iraq: Local Experts in Global Communications
by R.A. Hettinga 14 Jan '05

14 Jan '05

I expect a few cypherpunks will know the founder of blueiraq... Cheers, RAH (who wonders who's running rediraq.com... ;-)) ------ <http://blueiraq.com/iraq/index.html> Blue Iraq Local Experts in Global Communications about Blue Iraq | Products and Services | Technology and Networks | Iraq FAQ | Support | Contact Us Iraq FAQ FAQs Technology and Internet in Iraq: Frequently Asked Questions We have found that there are a few common questions about Internet access and general IT in Iraq. By answering these questions here, we can try to improve understanding inside and outside Iraq of the unique environment which exists here. What kind of Internet connection does Iraq have? Iraq does not have "one main Internet connection". As of 2003, Iraq has had no landline or microwave relay connections to the outside world. All international communications, and most domestic communications, have been via satellite. Domestic wireline or wireless networks rely on satellite access for international connectivity. Many businesses use small satellite terminals (VSATs) to communicate directly with the outside world. Who uses Internet service in Iraq? The US Department of Defense, DoD and Redevelopment Contractors, Western expatriates, and the Iraqi Government are major users of Internet and international communications services in Iraq. Additionally, many NGOs, universities, and Iraqi businesses are establishing internet connectivity. One of the major purchasers of Internet service in the domestic Iraqi market is for small, entrepreneurial Internet Cafes. Why is service in Iraq more expensive than in other parts of the world? Satellite capacity is usually more expensive than terrestrial connectivity, due to the high costs of satellites and limited RF capacity available on a given transponder. However, satellites also have very high reliability, and are the only practical means of deploying communications rapidly over a large territory without building extensive (and vulnerable) fixed infrastructure. Modern shared IP-optimized Ku-band VSAT systems can be very affordably priced compared to older satellite communications systems. Communications companies operating in Iraq also face higher operating costs than similar communications companies operating elsewhere in the world, due to security concerns and lack of infrastructure. Can I use Voice over IP (VoIP) over satellite? Generally VoIP will require special settings to work reliably over satellite. We currently only support our iDirect network and dedicated satellite capacity for VoIP applications, and all supported VoIP communications must go through our VoIP gateway to ensure traffic prioritization and quality of service. Your competitors offer some systems which are cheaper, and can use Iraqis to do the installation. Why should I use Blue Iraq? Our prices are actually lower than most other satellite systems, based on service capacity and performance -- unlike a lot of companies, we specify our systems based on observed performance in Iraq, not a fanciful design specification. Due to the security situation, it is very difficult for Iraqis to get onto US bases to do installations. We do use trained Iraqis for off-base installs in some cases. However, in many cases, we have found that having US engineers do the world results in the most effective solution with the highest overall quality. An inexpensive system which does not work reliably is no bargain. Why should I purchase a system from an Iraq-focused network operating company, vs. one of the satellite owners or major networks? One word: presence. Blue Iraq has trained personnel on the ground in Iraq who are familiar with the environment. Many other vendors have never set foot in Iraq, and rely on local contract installation companies to do installations. Non-Iraq based companies also do not have personnel in Iraq do provide after-sale support if anything goes wrong. In a place like Iraq, many things can go wrong. Isn't it too dangerous to operate a business in Iraq? The news shows bombings and kidnappings every day? Iraq can be a very dangerous place. However, we take all reasonable precautions to minimize this risk. Our personnel travel with appropriate levels of security, and will refuse to go to sites which are not adequately secured. We primarily operate in conjunction with the US military, and rely on US military helicopter transport between secure bases. All personnel have appropriate protective gear and training. Why does the military use commercial internet services? Doesn't it have enough satellite capacity of its own? The US military makes extensive use of commercial products and systems for a wide variey of non-tactical purposes, as commercial systems often provide the cheapest, best, and most cost-effective solution to a given problem. Commercial satellite networks are extensively used for Morale, Welfare, and Recreation (MWR) purposes, administrative and support systems, and more. Do you do business in the Iraqi economy, or only on DOD bases? Our primary customers are located on DOD bases: the DOD, its personnel, and contractors. However, we do business with the local Iraqi economy via Iraqi resellers and installers. How can I get Internet service as an individual in Iraq? Please evaluate our products and services. Due to capital costs of our VSAT systems, our mobile Inmarsart R-BGAN system may be desirable for low-volume individual users. Alternately, you could try finding others with whom to share a VSAT system and split the cost. How can I get Internet service for my unit or company? Please evaluate our products and services, with particular attention to our VSAT systems. Please contact us with any additional questions. Can you set up service outside Iraq? We can interface with corporate or military networks anywhere in the world. We can also provide satellite communications or other IT systems outside Iraq, but our focus is on the DOD, Iraq and its neighbors, Afghanistan, and the Islamic world in general. How do I register an Iraq Domain Name (.iq)? At present, .iq domain names are unavailable. We suggest using name-iq.com, name-iraq.com, nameiraq.com, or other similar names. When do you think the occupation/insurgency/etc. will end? We can't predict the future. However, even if Iraq became a peaceful nation today, it would be many years before infrastructure had been rebuilt to the level required for a fully functional economy. Can I invest in Blue Iraq? What is your stock ticker symbol? What is the minimum investment? Blue Iraq is not currently a publicly traded company, nor is it listed on any stock exchange. We are currently raising our first round of funds from angel investors within the technology industry, and those familiar with Iraq. If you are an SEC-qualified investor interested in investing at least USD 100 000, please contact our investor relations department at ir(a)blueiraq.com. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: Ready, Aim, ID Check: In Wrong Hands, Gun Won't Fire
by John Kelsey 13 Jan '05

13 Jan '05

>From: Justin <justin-cypherpunks(a)soze.net> >Sent: Jan 10, 2005 7:35 PM >To: cypherpunks(a)al-qaeda.net >Subject: Re: Ready, Aim, ID Check: In Wrong Hands, Gun Won't Fire ... >Some gun "accidents" are suicides reported as such to avoid >embarrassment to the family. I've heard this from other people, too--some in reasonably good positions to know how such things were reported. And there's surely some ambiguity between fatal accidents caused by doing something really stupid and intentional suicides. ... --John

1 0

To Tyler Durden
by Major Variola (ret) 13 Jan '05

13 Jan '05

TD, I just watched _Fight Club_ so I finally get your nym. (Here in low-earth geosynchronous orbit, content is delayed). Cool. I had thought it was your real name. Maj. Variola (ret)

2 1

Ridge Wants Fingerprints in Passports
by R.A. Hettinga 13 Jan '05

13 Jan '05

<http://www.nytimes.com/2005/01/13/politics/13fingerprint.html?oref=login&pa…> The New York Times January 13, 2005 Ridge Wants Fingerprints in Passports By MATTHEW L. WALD WASHINGTON, Jan. 12 - The United States should issue passports that include a full set of the bearer's fingerprints, Tom Ridge, the departing secretary of homeland security, said Wednesday. Mr. Ridge said the change would induce foreign governments to do the same on the passports they issue. Privacy advocates promised to fight the Ridge suggestion, in part because it would deliver the prints of American travelers to foreign governments, and the State Department has been cool to it as well. Mr. Ridge, speaking at the Center for Strategic and International Studies, a research group here, cast his comments as advice to Michael Chertoff, chosen by President Bush on Tuesday to succeed him. "Be aggressive, go after 10 fingerprints on the passports," Mr. Ridge said, adding that it was "a lot easier to negotiate with your allies if you've already done what you're asking them to do." Applicants for visas to visit the United States must already submit to finger scans of both index fingers. Experts call them scans, not prints, because the images are taken on a scanner screen, without ink. Later this year, a 2002 law will require people whose nationality allows them to enter this country without a visa to present machine-readable passports that incorporate a digital photograph as biometric data. A spokeswoman for the State Department, Kelly Shannon, said that the machine-readable passports the United States issues would have a computer chip with 64 kilobytes of memory, far more than is needed for the traveler's name, date and place of birth, passport number and a single photo. The chip could be used for other biometric data in the future, including an additional photo, Ms. Shannon said, adding that "the globally interoperable, chosen biometric for travel documents" was photos. At the Electronic Privacy Information Center, a nonprofit group here, Marc Rotenberg, the president, said that providing foreign governments with the fingerprints of each American visitor would "make it easier for those foreign governments to conduct their own investigations of U.S. citizens in that foreign country." -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

[i2p] Distributed Search Engine (fwd from tkaitchuck@comcast.net)
by Eugen Leitl 13 Jan '05

13 Jan '05

----- Forwarded message from Tom Kaitchuck <tkaitchuck(a)comcast.net> -----

1 0

expectation of privacy
by Major Variola (ret) 13 Jan '05

13 Jan '05

At 09:01 PM 1/12/05 +0100, Eugen Leitl wrote: > >It's time to blow the lid off this "no expectation of privacy in >public places" argument that judges and law enforcement now spout out >like demented parrots in so many situations. A court refused to hear the case of a man accused of owning unlicensed pharmaceuticals when a pig entered a locked loo. The loo was part of a gas station; the attendant called the pigs. A prostitute was in there too, with him, and the area rife with folks of that profession, FWIW, which is nothing. But the court held reduced expectation of privacy in a public loo. One imagines much fun with anonymous calls when state employees are in such places, but this does not temper our disgust, or desire for karma with extreme prejudice.

1 0