January 2006 - cypherpunks-legacy

Greater control over ejaculation
by Marlin Ladner 23 Jan '06

23 Jan '06

A recent survey showed that 68% of women are unsatisfied with their sexual partners. Of course most of these women would never tell their partner that they are unhappy. Not being able to fully satisfy a woman can result in depression and feelings of inadequacy. Thankfully, men of all ages can now safely and naturally enhance their body and penis anatomy and renew sexual vitality without resorting to dangerous surgery. The all natural proprietary blend of unique herbs found in Maxaman is designed to restore blood flow to your penis, unleash stored testosterone, and heighten sensation by activating the body's natural hormone production and supplying vital nutrients necessary for peak sexual performance. http://aegbchifkm.yoursunlightzone.info/?djlfkmxwqowyaegzmmbchi

1 0

Open something new for your self
by Inez Campbell 23 Jan '06

23 Jan '06

Cialis Soft Tabs is the new impotence treatment drug that everyone is talking about. It has benefits over Viagra and other ED treatment solutions. Here goes some reasons to choose Cialis Soft Tabs: 1. You can mix alcohol drinks with Cialis Soft Tabs without any undesired effects. 2.Cialis Soft Tabs does not make you feel dizzy or make vision blurred, so you can easily drive a car or operate heavy machinery. 3.Cialis soft tabs works much faster than any known ED treatment solution. Cialis Soft Tabs enters the bloodstream directly instead of going through the stomach, thus you need only 15 minutes till you feel the effect. Just look at the graph below If you are interested ? Just click here and Read more about it http://bcfhegkli.nicproc.net/?adjmixwqowybcfhzctegkl AND ALSO Cialis Soft Tabs formula is effective for 95% of the patients. If this treatment is not effective for you, we will refund you for every unopened pack. All you have to do is send them back, and we will immediatley refund your account!

1 0

Cringely bored by illegal NSA taps, doesn't think it really matters
by Eugen Leitl 23 Jan '06

23 Jan '06

http://www.pbs.org/cringely/pulpit/pulpit20060119.html January 19, 2006 Hitler on Line One There's a Long History of Intercepting Foreign Communications, and Some of It May Have Been Legal By Robert X. Cringely Who is listening-in on your phone calls? Probably nobody. Right now, there is huge interest in phone tapping in the United States because the Bush Administration (through the National Security Agency) was caught listening in without appropriate court orders. What I have noticed is that, for all the talking and writing on this subject, there seems to be very little real information being presented. So this column is my attempt to share what I've learned about the topic. It might surprise you. Intercepting communications for purposes of maintaining national security is nothing new. From before Pearl Harbor through 1945, EVERY trans-Atlantic phone call, cable and indeed letter was intercepted in Bermuda by the Coordinator of Information (COI) in the White House and later by the Office of Strategic Services (OSS). Sir William Stephenson revealed this in his autobiography, A Man Called Intrepid. They literally tapped the undersea cables and shipped all post to Europe through Bermuda, where every single call was monitored, every cable printed out, and every letter opened. FDR and Churchill needed intelligence and they took the steps they needed to get it. The computer monitoring of cell phone conversations pales in both scale and significance. One fun fact from that monitoring: The CEO of International Telephone & Telegraph (ITT) reportedly spoke with Adolf Hitler on the phone from New York City every week of the war. According to the book The Sovereign State of ITT, the call was placed from New York to South America, and then used a cable from South America to Berlin. Key companies that maintained the German telephone network were ITT subsidiaries at that time, and communications were obviously of strategic importance for Germany; thus Hitler needed to speak with the CEO every week. ITT never stopped running the German phones during the war and were evidently allowed to continue doing so to gather just this sort of intelligence (that's me putting a positive spin on a disturbingly ambiguous relationship). So information technology's ability to eliminate borders in warfare is nothing new, even though it seemed to take the New York Times by surprise! Following the war, the Bell Operating Companies cooperated in national security wiretapping for years based only on the delivery of the so-called "Hoover Letter," under the hand of FBI Director J. Edgar Hoover. As a result of that cooperation, AT&T was ultimately the defendant in 18 national security lawsuits, all of which involved wiretaps of U.S. citizens' domestic communications where there was no prior judicial authorization. The trial court and the D.C. Circuit Court of Appeals decided that AT&T had not violated any constitutional right or law. Keep in mind that international calls or communications were not at issue. In 1967, the U.S. Supreme Court ruled that telephone surveillance was technically a "search," and thus prohibited by the Fourth Amendment to the Constitution unless conducted with a court order. In 1972 the Supreme Court handed down a unanimous opinion that clarified the scope of the Executive Branch to engage in wiretapping without prior judicial approval, saying that the Nixon Administration needed warrants for every domestic phone and wire tap. Even after this decision, however, the Executive Branch continued to conduct electronic surveillance of international communications without prior judicial approval (Republican and Democratic administrations alike), according to people working in these areas for the phone company at that time. Because the objects of those searches were presumed not to be U.S. citizens (whether they actually were or not), the taps were allowed. Jumping to the present day, in the United States there were two categories of phone taps and two major laws governing phone taps -- that is until the Bush Administration invented whole new versions of both. The two laws are the Community Assistance for Law Enforcement Act (CALEA) and the Foreign Intelligence Surveillance Act (FISA). CALEA is for domestic wiretaps and FISA is for international wiretaps. Each requires a report to Congress every year and for the 2004 year (the most recent reported) each had slightly over 1700 qualifying wiretaps. Each law also requires a court order for every tap, though under FISA there is some leeway, and in theory such court orders can be obtained retroactively in any case within 72 hours. To this point what we have been considering are technically called "intercepts" -- listening to phone calls and recording the information they contain. Most phone taps in the U.S. aren't conducted that way at all. On top of the approximately 3,500 CALEA and FISA intercepts conducted each year, there are another 75,000 domestic phone taps called "pen/traps" by the telephone company. While interceptions capture the voice portion of a telephone call or the data portion of an electronic communication, such as the content of e-mail, pen/traps capture just the outgoing digits dialed (the pen register portion of the technology) and the numbers of the incoming callers (the trap and trace portion of the technology). In CALEA terms, these are "call-identifying information." Court authorizations for interceptions are difficult to obtain for many reasons. Pen/traps are easy to obtain. While the government has to obtain court authorization to install a pen/trap, the role of the court in this review and approval procedure is merely "ministerial" -- primarily a form of record-keeping. The government has a very low hurdle to meet to obtain judicial approval for pen/traps, and if that hurdle is met, the court MUST approve the order. Pen/traps are very useful in a criminal investigation, and inexpensive compared to a court-approved interception. So, it is not surprising that there are so many more pen/traps than there are interceptions. To get this far, I had to talk to a lot of former and current telco people, and one thing I learned is that they generally don't like having to do either type of phone tap. Under both laws, telephone companies that do this kind of work are supposed to be reimbursed for it, yet many phone companies never send a bill. Whether that is because of patriotism or fear of liability, I don't know. Many phone companies also outsource their phone taps to smaller firms that specialize in that kind of work. These firms handle the legal paperwork, and generally more than pay for themselves by billing the Feds, too, on behalf of the telco. It feels a little creepy to me knowing that our telephone systems can be accessed at will by "rent-a-tap" outfits, and that the technology has advanced to the point where such intercepts can apparently be done from a properly-authorized PC. Is all of this worth worrying about? What led me on this quest in the first place was the fact that I simply couldn't understand why the Administration felt the need to go beyond FISA, given that the court nearly always granted warrants and warrants could be done retroactively. But does it really matter? I didn't know whether to be outraged or bored, and I feared that most Americans were in similar positions. Given that this is all about National Security, we'll probably never know the full answer. Even if the proper research is conducted and answers obtained, they won't be shared with you or me. But here's a hint from a lawyer who used to be in charge of exactly these compliance issues for one of the largest RBOCs: "While it is true the FISA court approves nearly all applications submitted to it, this is due primarily to the close vetting the DOJ attorneys give to applications before they are submitted to the court. In fact, the FISA appellate court noted that the DOJ standards had been higher than the statute required. I am unaware that the court has 'retroactively' approved any electronic surveillance that was not conducted in an emergency situation. There are four emergency situations enumerated in the statute. Even in an emergency, the government has to apply for approval of what they have already started or in some case finished and these applications have to meet the same strict standards as any other application." So the probable answer is that the several hundred NSA communication intercepts wouldn't have qualified for submission by the DoJ to the FISA court, and some of those might not have qualified for FISA court orders even if they had been submitted. It looks like the difference between using a rifle or a shotgun, with the Bush Administration clearly preferring the shotgun approach. Only time will tell, though, if what they are doing is legal. -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

3 2

[dave@farber.net: [IP] Logan to start express security program this summer / Participants register and pay yearly fee]
by Eugen Leitl 23 Jan '06

23 Jan '06

----- Forwarded message from David Farber <dave(a)farber.net> -----

1 0

Pay Less Today IHRGc1
by Ricardo Camp 22 Jan '06

22 Jan '06

Dear Home Owner, Your credit doesn't matter to us! If you OWN real estate and want IMMEDIATE cash to spend ANY way you like, or simply wish to LOWER your monthly payments by a third or more, here are the deals we have TODAY (hurry, these offers will expire TONIGHT) : $450,000.00 at a 3.85% fixed-rate $374,000.00 at a 3.54% variable-rate $464,000.00 at a 3.77% interest-only $214,000.00 at a 3.54% fixed-rate $134,000.00 at a 3.75% variable-rate Hurry, when these deals are gone, they are gone! Simply fill out this one-minute form... http://2O.neckthu.com/af Don't worry about approval, your credit will not disqualify you! http://DTSzz.neckthu.com/af Sincerely, Phyllis Heller Approval Manager stop the current promo http://uhgJrV.neckthu.com/rem rr

1 0

Al Q's anonymous comms
by Major Variola (ret) 22 Jan '06

22 Jan '06

The system involves each courier hand delivering the tape or the written message to another courier or location without knowing the courier's identity, the origin of the tape or message or its destination. It makes it almost impossible for intelligence agencies to roll up the entire network. http://abcnews.go.com/International/Terrorism/story?id=1527351

2 1

One tab that will bring you to the top of performance
by Veronica Ames 21 Jan '06

21 Jan '06

No matter your age and actual performance, you can always do better. And the great news is that now you don?t have to wait ? the soft tab gets into bloodstream, including your buddy, in just 15-20 minutes. Down the little thing and start pleasing her in the foreplay, because minutes later you will win her very personal First Prize. Now you can be up for the entire night, reaching heavens of pleasure for both of you. You can now become the king of the bed (or wherever you use it) ? Fast, safe and easy! http://madeikcfhj.dreamteam4u.info/?bglcfhjxwqowymzvtadeik

1 0

CodeCon program announced, early registration deadline nearing
by Len Sassaman 21 Jan '06

21 Jan '06

The program for CodeCon 2006 has been announced. http://www.codecon.org/2006/program.html CodeCon is the premier showcase of innovative software projects. It is a workshop for developers of real-world applications with working code and active development projects. All presentations will given by one of the lead developers, and accompanied by a functional demo. Highlights of CodeCon 2006 include: iGlance - Open source push-to-talk videoconferencing and screen-sharing Monotone - Low stress, high functionality version control Query By Example - Data mining operations within PostgreSQL Djinni - Efficient approximations to NP-complete problems Elsa/Oink/Cqual++ - A static-time whole-program dataflow analysis for C and C++ Truman - An open-source behavioral malware analysis sandnet VidTorrent/Peers - A scalable real-time p2p streaming protocol The fifth annual CodeCon takes place February 10 - 12, 11:30 - 18:00, at StudioZ (314 11th Street) in San Francisco. Early registration is $63, available online until February 1st, 2006. Registration will be available at the door for $85. Supporting Attendee tickets are also available, and include a one-year membership to the USENIX Association. Please see the CodeCon registration page for details: http://www.codecon.org/2006/registration.html

1 0

Quality Medicine Available HdcXq
by Bridgett Ortiz 21 Jan '06

21 Jan '06

Huge selection of meds available at attractive prices. Highest quality assured. Try us out today.. http://au.geocities.com/keary88660madelle1843/ a15F

1 0

[Clips] Re: Commercial Key Escrow?
by R. A. Hettinga 21 Jan '06

21 Jan '06

--- begin forwarded text Delivered-To: clips(a)philodox.com Date: Sat, 21 Jan 2006 09:12:05 -0500 To: "Philodox Clips List" <clips(a)philodox.com> From: "R. A. Hettinga" <rah(a)shipwright.com> Subject: [Clips] Re: Commercial Key Escrow? Reply-To: rah(a)philodox.com Sender: clips-bounces(a)philodox.com --- begin forwarded text Cc: "Philodox Clips List" <clips(a)philodox.com> From: Nicko van Someren <nicko(a)ncipher.com> Subject: Re: Commercial Key Escrow? Date: Sat, 21 Jan 2006 11:03:20 +0000 To: "R. A. Hettinga" <rah(a)shipwright.com> On 20 Jan 2006, at 22:58, R. A. Hettinga wrote: > --- begin forwarded text > > Date: Fri, 20 Jan 2006 14:10:54 -0800 > From: ericm(a)lne.com > To: cypherpunks(a)jfet.org > Subject: Re: Commercial Key Escrow? > User-Agent: Mutt/1.4.1i > Sender: owner-cypherpunks(a)jfet.org > > On Fri, Jan 20, 2006 at 04:38:56PM -0500, R. A. Hettinga wrote: >> At 1:26 PM -0800 1/20/06, ericm(a)lne.com wrote: >>> I'm looking for someone who provides an actual commercial key >>> escrow service, not double encryption with a master key. >> >> One would think that the effect, being the same, creates a >> distinction >> without a difference? > > In some cases, yes. But not for this application. > > I really am looking for a commercial trusted third party to hold > keys. > > I've found a bunch of references from ~10 years ago that say > that someday commercial key escrow will be prevalent > but it appears that someday hasn't yet arrived. > > My problem is in many ways similar to the problem a CA would face > in ensuring business continuity in a business that depends on > keeping secrets. > > What does say Verisign do to back up their root CA private keys? > They probably have a bunch of BBN SafeKeypers (or rather the modern > equivalent FIPS-140 hardware). What if all of them croak at the > same time? > > Do they keep multiple backups? What happens if the keys/passphrases > for those backups are lost? > > Or secret sharing? What if N-(K+1) shares are destroyed? Do they > just quit the CA business then? There presumeably are scenerios > under which that is the only answer, and Verisign has judged their > possibility to be so remote and/or their solution cost so high > that they are not worth defending against. > > What would Verisign do if they didn't have security experts to > decide what's an acceptable risk and what isn't, and instead > just wanted to have someone else deal with the problem for them? No matter what sort of architecture one chooses for long term key protection it is inevitably going to fail once some threshold fraction of the system fails. With a simply multiple copies system you have to have 100% failure, but such a system has poorer security properties. K-of-N threshold schemes fail once you've lost N-(K+1) shares but generally have much better security. It is my understanding that Verisign have multiple HSMs for the root and they simply go out of their way to keep them very safe. At nCipher our critical keys (such as firmware signing keys) are distributed using a threshold scheme and we have procedures in place to periodically check the integrity of each share (though never checking more than one at a time). As far as I know there are no active commercial key escrow services around. One problem is that the half-life of Internet companies is short compared to the time people seem to want to keep their keys so it would be hard to trust such a company unless it was very carefully set up. Cheers, Nicko --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' _______________________________________________ Clips mailing list Clips(a)philodox.com http://www.philodox.com/mailman/listinfo/clips --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0