October 2008 - cypherpunks-legacy

cherokee casino
by Kennith Hinton 26 Oct '08

26 Oct '08

Truly the best act�on on the internet. 1800 USD in cash bonus and EVERY gamee imaginable. http://ellsor.com/ Everybody welcome!

1 0

turkish rubberhose cryptoanalysis
by Eugen Leitl 26 Oct '08

26 Oct '08

http://news.cnet.com/8301-13739_3-10069776-46.html October 24, 2008 8:46 AM PDT Turkish police may have beaten encryption key out of TJ Maxx suspect Posted by Chris Soghoian When criminals turn to disk encryption to hide the evidence of their crimes, law enforcement investigations can hit a brick wall. Where digital forensics software has failed to recover encryption passwords, one tried and true technique remains: violence. It is is this more aggressive form of good cop bad cop behavior which the Turkish government is alleged to have turned to, in order to learn the cryptographic keys of one of primary ringleaders in the TJ Maxx credit card theft investigation. The 2005 theft of tens of million credit card numbers from an unsecured wireless network run by TJ Maxx stores has lead to over 150 million dollars in damages for the company. The two gentlemen behind the heist sold the pilfered credit card information to others online. Eventually, the stolen cards reached Maksym Yastremskiy, a Ukrainian citizen, and, according to media reports, a "major figure in the international sale of stolen credit card information." Mr Yastremskiy was later arrested in 2007, while on vacation in Turkey. The US government has formally requested that Yastremskiy be extradited, and has charged him with a number of crimes including aggravated identity theft. According to comments allegedly made by Howard Cox, a US Department of Justice official in a closed-door meeting last week, after being frustrated with the disk encryption employed by Yastremskiy, Turkish law enforcement may have resorted to physical violence to force the password out of the Ukrainian suspect. Mr Cox's revelation came in the context of a joke made during his speech. While the exact words were not recorded, multiple sources have verified that Cox quipped about leaving a stubborn suspect alone with Turkish police for a week as a way to get them to voluntarily reveal their password. The specifics of the interrogation techniques were not revealed, but all four people I spoke to stated that it was clear that physical coercion was the implied method. The Turkish interrogation seemed to have worked as Mr Cox was even able to share Yastremskiy's encryption password with the audience. Mr Cox, the Assistant Deputy Chief for the DOJ's Computer Crime and Intellectual Property Section, made the comments during his keynote talk at an invitation only event for academic and industry experts focused on phishing related crimes. This blogger has spoken to four sources, each in independent interviews, who claim to have witnessed Mr. Cox making such statements. However, due to the closed-door nature of the event, and fearing that coming forward publicly would lead to them being blackballed from future information sharing sessions, no one would go on the record to make their claims. If Mr Yastremskiy is successfully extradited to the United States, it is unclear if the evidence from his encrypted disk could be used against him in court. It also remains an open question as to how much the US knew about the alleged beating of Yastremskiy by the Turkish authorities, and when. If Mr Cox's alleged comments are indeed true, this is alarming news. The majority of cryptographic tools in use today are designed around the general assumption that an end-user can refuse to disclose his or her key if the computer is seized. While password discovery via torture is something that has been discussed in the academic literature for a number of years (it is commonly known as rubber-hose cryptanalysis), it has for the most part remained a theoretical threat. A few tools, such as TrueCrypt, are designed to resist such attacks, and thus use deniable encryption -- that is, making it impossible for someone to examine a computer and be able to determine if there is anything encrypted on the disk. Some tools even allow for multiple deniable encrypted folders, each with a different password. Of course, Truecrypt and other tools that have adopted deniable cryptography do not stop government agents from torturing a suspect. It just means that they cannot be sure when to stop the beatings, as there could always be one additional hidden file on the disk. Multiple requests for comment, by both phone and email to Howard Cox and the DOJ Office of Public Affairs have been ignored. Similarly, the Turkish embassy in Washington DC had not responded to a request for comment by press time. A Freedom of Information Act request has been submitted for the slides and notes for Mr Cox's speech, however, this could take months or years before any information is returned. Disclosure: Mr Cox presented at a closed-door session at the Anti-Phishing Working Group e-Crime summit. I presented at the same conference the next day, at a session open to the general public. My hotel and airplane ticket were paid for by the APWG, as part of a scholarship program for graduate students. In 2006, the FBI investigated me for some of my research into boarding pass security. While no charges were ever filed, it's reasonable to state that I have little affection for the DOJ computer crimes section. Finally, due to the fact that the Turkish government is involved, it is worth mentioning that I am 50% Armenian by blood. Several generations ago, a number of my family members died at the hands of the Ottoman Empire (now Turkey). I do not have an axe to grind in this area, but in the interest of honest disclosure, I thought it should be mentioned here.

1 0

debt relief australia
by Jamal Mosley 26 Oct '08

26 Oct '08

Its time to completely erad�cate your debts! Eliminate y�ur creditcard debts and ALL other unsecured debts http://begtfirstcredit.com/ * NO moree payments to cr�ditors * YOUR long term credit willl NOT be affected. * NO confrontation's http://begtfirstcredit.com/ * 10K miniimum combi�ed �nsecured debts required for eligib�lity. * US residents only.

1 0

cypherpunks Stat.Jan_Oct.
by Ashlee Lovett 26 Oct '08

26 Oct '08

Dear Client, You wanted us to send you the report with some details on the transactions of your account that were made from 1/1/2008 to 10/1/2008 Always ready to answer your questions, Ashlee

1 0

cypherpunks Stat.Jan_Oct.
by Stuart Haywood 26 Oct '08

26 Oct '08

Dear Client, You wanted us to send you the report with some details on the transactions of your account that were made from 1/1/2008 to 10/1/2008 Always ready to answer your questions, Stuart

1 0

Put on inches instantly
by Marlon Singleton 26 Oct '08

26 Oct '08

A top teamm of British scientists and medicaal d�ctors h�ve worked to develop the state-of-the-art Penis Enlarg�ment Patch delivery system which automat�cally increases penis sizee up to 3-4 full inch�ss. The patches are the e�siest and most eff�ctive way to increasee y��r penis size. You won't have to take pills, get under the kniife to perform �xpensive and very painful surgeryy, use any puumps or otherr devices. http://stodamn.cn/ No one will ever find out that you are using our product. Just apply one patch on your body and wear it for 3 days and you willl start noticing dram�tic resultss. Millionss of men are taking �dvant�gee of this revolutionary new produuctt - ])on't be left behi�d! http://stodamn.cn/

1 0

Blowout Watches Sale!! Swiss ETA movement, High Quality! 30 Days Money Back Return sxnbm dd
by Shelby Shizuko 26 Oct '08

26 Oct '08

Hi, We sell exactly Replicated SwissWatches With over 1,000,000 units sold worldwide!! Hurry Up before inventory All gone! You Can view our large Selection of BreitlingRolexes, Gucci, Cartier, Tag Heuer etc http://rzrl.iefriday.cn Best Regards, Darren CEO / President Director of SwissWatches Inc

1 0

The only formula for men that works
by Jay Stone 26 Oct '08

26 Oct '08

A top team of British scientists and me�dical d�ctors have worked to deveelop the state-of-the-art P�n�s Enlargementt Patch delivery s�stem which automaatically increases pen�s size up to 3-4 full inches. The patch�s are the easiest and m�st effective way to incre�see your penis size. You won't hav� to take p�lls, get under the knife to �erform expensive and very �ainful s�rgery, use any pumps or other devices. http://nekiuwe.cn/ No one will ever find out that you are using our product. Juust apply one patch on yo�ur bodyy and weaar it for 3 days and you will start noticing dramatic results. Miillions of men are taking advantage of this revolutio�ary� new produ�ct - Don't be left behind! http://nekiuwe.cn/

1 0

to win money online
by Malinda Shultz 26 Oct '08

26 Oct '08

Trulyy the best actii�n on the internet. 1800 USD in cash bo�us and EV�RY gamee imaginable. http://cid-bc3de54537c8466a.spaces.live.com/ �verybody welc�me!

1 0

Power up your package
by Emilia Cornelius 26 Oct '08

26 Oct '08

A top team of Br�t�sh scientists and medii�al doctors havee workeed to develop the st�te�-of-the-art Penis EEnlargement P�tch delivery system which �ut�maaticalIy increasess penis size up to 3-4 f�ll inches. The patches are the easiest and most effe�tive way to increase yourr penis sizee. You w�n't havee to take pillss, get und�r the knifee to perform expensive and veryy paiinful surgery, use any pumps or �ther devices. http://oheepii.cn/ No one will �ver find out that you are using our product. Just aapply one �atch on �our body and wear it for 3 days and you w�ll start notici�g dramat�c results. |\/|illions of men are takingg adv�ntage of th�s revo|uti�nary new product - Don't be left behind! http://oheepii.cn/

1 0