July 2018 - cypherpunks-legacy

[silk] If you're from the bay area and applied for a visa at the SFO Indian consulate ..
by Suresh Ramasubramanian 06 Jul '18

06 Jul '18

then you have my sympathies. look out for ID theft http://www.hindustantimes.com/news/181_1918016,00050001.htm Indian Consulate dumped visa applications in recycle plant Indo-Asian News Service New York, February 2, 2007 Visa applications and other sensitive documents of top executives and political figures were found lying in an open yard at a San Francisco recycling centre after they were dumped there by the city's Indian consulate, according to media reports. Security experts said that the documents were a potential treasure trove for identity thieves or terrorists. Among the papers found lying were visa applications submitted by Byron Pollitt, chief financial officer of San Francisco's Gap Inc., and Anne Gust, wife of California Attorney General Jerry Brown, according to the San Francisco Chronicle. Also visa applications of top executives of AT&T Wireless Inc, Oracle Corp, Intel Corp, Microsoft Corp, Qualcomm Inc and Williams-Sonoma Inc were also found lying. Information on the documents includes applicants' names, addresses, phone numbers, birth dates, professions, employers, passport numbers photos and also accompanying letters detail people's travel plans and reasons for visiting India. "This is absolutely sensitive information," said Charles Cresson Wood, a information-security consultant. "It needs to be safeguarded," he added. However, BS Prakash, the Indian consul general, was quoted as saying: "As we see it, the documents are not confidential. We would see something as confidential if it has a social security number or a credit card number, not a passport number." But security experts said it wouldn't be hard to obtain someone's social security number using the information available in the consular documents. "We have a shortage of space. We keep this material for a year, and then we have to destroy it," Pratik Sircar, deputy consul general for the Indian consulate, said. However, the consulate didn't destroy the documents. Instead, it hired a hauling company in December to cart the boxes to the recycling centre. "We thought it was their job to shred the material as soon as they got it," Sircar said. Indian officials have since removed the boxes containing the documents. Sircar said the consulate would find some other way to deal with its excess paperwork in the future. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[silk] If you're from the bay area and applied for a visa at the SFO Indian consulate ..
by Suresh Ramasubramanian 06 Jul '18

06 Jul '18

then you have my sympathies. look out for ID theft http://www.hindustantimes.com/news/181_1918016,00050001.htm Indian Consulate dumped visa applications in recycle plant Indo-Asian News Service New York, February 2, 2007 Visa applications and other sensitive documents of top executives and political figures were found lying in an open yard at a San Francisco recycling centre after they were dumped there by the city's Indian consulate, according to media reports. Security experts said that the documents were a potential treasure trove for identity thieves or terrorists. Among the papers found lying were visa applications submitted by Byron Pollitt, chief financial officer of San Francisco's Gap Inc., and Anne Gust, wife of California Attorney General Jerry Brown, according to the San Francisco Chronicle. Also visa applications of top executives of AT&T Wireless Inc, Oracle Corp, Intel Corp, Microsoft Corp, Qualcomm Inc and Williams-Sonoma Inc were also found lying. Information on the documents includes applicants' names, addresses, phone numbers, birth dates, professions, employers, passport numbers photos and also accompanying letters detail people's travel plans and reasons for visiting India. "This is absolutely sensitive information," said Charles Cresson Wood, a information-security consultant. "It needs to be safeguarded," he added. However, BS Prakash, the Indian consul general, was quoted as saying: "As we see it, the documents are not confidential. We would see something as confidential if it has a social security number or a credit card number, not a passport number." But security experts said it wouldn't be hard to obtain someone's social security number using the information available in the consular documents. "We have a shortage of space. We keep this material for a year, and then we have to destroy it," Pratik Sircar, deputy consul general for the Indian consulate, said. However, the consulate didn't destroy the documents. Instead, it hired a hauling company in December to cart the boxes to the recycling centre. "We thought it was their job to shred the material as soon as they got it," Sircar said. Indian officials have since removed the boxes containing the documents. Sircar said the consulate would find some other way to deal with its excess paperwork in the future. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

The Long-Awaited Great Debate: Tax Competition vs. Tax Cartels!
by Andrew Quinlan 06 Jul '18

06 Jul '18

http://www.freedomandprosperity.org/press/p02-27-08/p02-27-08.shtml Center for Freedom and Prosperity Foundation For Immediate Release Wednesday, February 27, 2008 202-285-0244 www.freedomandprosperity.org The Long-Awaited Great Debate: Tax Competition vs. Tax Cartels! (Washington, DC, Wednesday, February 27, 2008) The Center for Freedom and Prosperity Foundation is pleased to announce that the long- awaited " Tax Competition vs. Tax Cartels!" debate is officially scheduled. It may not be at the same level as the Lincoln-Douglas debates (though Richard Murphy and Jack Blum want taxpayers to be slaves of government). It may not get the ratings of the Ali-Frazier "Thrilla-in- Manilla" (though we are expecting a knock-out). And it may not dominate the headlines like Donald Trump vs. Rosie O'Donnell (can we choose none-of-the-above?). But when Dan Mitchell (Senior Fellow, Cato Institute, USA), and Richard Hay (International Tax Principal, Stikeman Elliott, UK) square off against Richard Murphy (Research Director, Tax Justice Network, UK) and Jack Blum (Co-Author, Financial Havens, Banking Secrecy & Money Laundering , USA), sparks are sure to fly. Some of you may remember there were rumors of a Mitchell-Murphy debate several months ago. This led to a debate about a possible debate ( see http://www.freedomandprosperity.org/press/p12-27-06/p12-27-06.shtml and http://www.freedomandprosperity.org/blog/ 2007-01/2007-01.shtml#153 for more info). So if they squabble that much over ground rules, imagine how much fun it will be when they actually cross (rhetorical) swords for real! The debate is being sponsored by Offshore Alert, and will take place April 14 in Fort Lauderdale, Fl, at the 6th Financial Diligence Conference: http://www.offshorealertconference.com/OAC2008/home.asp. To get an early peak at the debate, see http://www.offshorealertconference.com/OAC2008/OFCDebate.asp . Needless to say, we hope to see many of our friends in the audience. Murphy and Blum will doubtlessly be pumped up since the debate takes place on the eve of their favorite day of the year, so we need some friends in the audience. If you are interested, registration details are available at: http://www.offshorealertconference.com/OAC2008/rates.asp . # # # Contact Information: Center for Freedom and Prosperity Foundation |P.O. Box 10882 Alexandria, Virginia 22310-9998 Phone: 202-285-0244 press(a)freedomandprosperity.org www.freedomandprosperity.org Forward email This email was sent to rah(a)shipwright.com, by alert(a)freedomandprosperity.org Update Profile/Email Address | Instant removal with SafeUnsubscribe | Privacy Policy. Email Marketing by CF&P Foundation | PO Box 10882 | Alexandria | VA | 22310

1 0

FC: Ed Felten and researchers sue RIAA, DOJ over right to publish
by Declan McCullagh 06 Jul '18

06 Jul '18

--- Background: http://www.politechbot.com/cgi-bin/politech.cgi?name=felten DMCA-related photos: http://www.mccullagh.org/theme/dmca-appeals-arguments.html http://www.mccullagh.org/theme/dvd-2600-trial.html http://www.mccullagh.org/theme/dmca-protest.html EFF document archive: http://www.eff.org/Legal/Cases/Felten_v_RIAA/ --- http://www.wired.com/news/mp3/0,1285,44344,00.html Code-Breakers Go to Court By Declan McCullagh (declan(a)wired.com) 6:22 a.m. June 6, 2001 PDT WASHINGTON -- After a team of academics who broke a music-watermarking scheme bowed to legal threats from the recording industry and chose not to publish their research in April, they vowed to "fight another day, in another way." On Wednesday, Ed Felten of Princeton University and seven other researchers took their fight to a New Jersey federal court in a lawsuit asking that they be permitted to disclose their work at a security conference this summer. Joining them is the Usenix Association, a 26-year-old professional organization that has accepted Felten's paper for its 10th security symposium in Washington during the week of Aug. 13. The Electronic Frontier Foundation is representing the researchers and Usenix. In what appears to be the first legal challenge to the Digital Millennium Copyright Act's criminal sections, Usenix is asking the court to block the Justice Department from prosecuting the conference organizers for allowing the paper to be presented. [...] ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. To subscribe, visit http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ ------------------------------------------------------------------------- ----- End forwarded message ----- ----- End forwarded message -----

1 0

Advanced Paypal phish - uses faked functional address bar
by Stanton McCandlish 06 Jul '18

06 Jul '18

A new phishing trick; cool, in a nefarious way: The phisher pops a window that uses Javascript to hide your real address toolbar, then adds a fake tool bar with a graphic and DHTML coding, matching your browser, that looks like the original address toolbar, with a fake but usable URL field in it, which is stocked with the address of the legit site the phisher is masqueraded as. So the actual phisher site address is completely hidden, and it looks like you're at the legit site. Nasty. There's the real phish at the bottom, in the quoted passage (sorry, original headers lost, so I don't know who the initial writer was) which you probably don't want to go to. Immediately below is an example of how it works on a safe page: http://ip.securescience.net/exploits/ You have to have popup-blockers turned off for it to work. The safe test version above only seems to fake IE6/Win address bars, but it does so successfully in Firefox and Safari on the Mac. I don't think it would fool that many Mac people but the fakery is pretty impressive with IE on WinXP, and as noted above, the live phish is claimed to be more sophisticated in its mimickry. >>>This is a heads up. Below you'll find a new and sophisticated >>>Paypal scam. >>> >>>It uses a google redirector to mask where it goes, but that is >>certainly not >>>the advanced stuff :-) >>> >>>The complete URL is: >>>http://www.google.pt/url?sa=U&start=4&q=http://dns1.n- >>>kiso.co.jp/.checking/. >>>www.paypal.com/index.php >>> >>>Which goes to: >>>http://dns1.n-kiso.co.jp/.checking/.www.paypal.com/index.php >>> >>>When the link "Click here to go to our main page " >>> >>>It will open a javascript: "java script: Start('sysdll.Php')" >>> >>>When opened it will construct the fraudulent website according to >>>your >>>default browser. >>> >>>I've tested with: >>> >>>- Firefox >>>- Internet Explorer >>>- Opera >>> >>>All latest versions with all relevant patches. >>> >>>The fake adressbar used may trick someone into thinking that they >>>are >>>actually on https://www.paypal.com. Watch and observe. This is >>indeed tricky >>>done. >> >>Although - some popup blockers should block this I would think. The >>trick is similar to http://ip.securescience.net/exploits/ so it >>creates >>an address bar using a pop-up controller and you just draw the >>image of >>the address bar. This is one of the first ones I've seen that has >>been >>done quite a bit better than the other ones that have attempted it. >>Their aim was off so it looked terrible. >> > ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] Advanced Paypal phish - uses faked functional address bar
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

The Long-Awaited Great Debate: Tax Competition vs. Tax Cartels!
by Andrew Quinlan 06 Jul '18

06 Jul '18

http://www.freedomandprosperity.org/press/p02-27-08/p02-27-08.shtml Center for Freedom and Prosperity Foundation For Immediate Release Wednesday, February 27, 2008 202-285-0244 www.freedomandprosperity.org The Long-Awaited Great Debate: Tax Competition vs. Tax Cartels! (Washington, DC, Wednesday, February 27, 2008) The Center for Freedom and Prosperity Foundation is pleased to announce that the long- awaited " Tax Competition vs. Tax Cartels!" debate is officially scheduled. It may not be at the same level as the Lincoln-Douglas debates (though Richard Murphy and Jack Blum want taxpayers to be slaves of government). It may not get the ratings of the Ali-Frazier "Thrilla-in- Manilla" (though we are expecting a knock-out). And it may not dominate the headlines like Donald Trump vs. Rosie O'Donnell (can we choose none-of-the-above?). But when Dan Mitchell (Senior Fellow, Cato Institute, USA), and Richard Hay (International Tax Principal, Stikeman Elliott, UK) square off against Richard Murphy (Research Director, Tax Justice Network, UK) and Jack Blum (Co-Author, Financial Havens, Banking Secrecy & Money Laundering , USA), sparks are sure to fly. Some of you may remember there were rumors of a Mitchell-Murphy debate several months ago. This led to a debate about a possible debate ( see http://www.freedomandprosperity.org/press/p12-27-06/p12-27-06.shtml and http://www.freedomandprosperity.org/blog/ 2007-01/2007-01.shtml#153 for more info). So if they squabble that much over ground rules, imagine how much fun it will be when they actually cross (rhetorical) swords for real! The debate is being sponsored by Offshore Alert, and will take place April 14 in Fort Lauderdale, Fl, at the 6th Financial Diligence Conference: http://www.offshorealertconference.com/OAC2008/home.asp. To get an early peak at the debate, see http://www.offshorealertconference.com/OAC2008/OFCDebate.asp . Needless to say, we hope to see many of our friends in the audience. Murphy and Blum will doubtlessly be pumped up since the debate takes place on the eve of their favorite day of the year, so we need some friends in the audience. If you are interested, registration details are available at: http://www.offshorealertconference.com/OAC2008/rates.asp . # # # Contact Information: Center for Freedom and Prosperity Foundation |P.O. Box 10882 Alexandria, Virginia 22310-9998 Phone: 202-285-0244 press(a)freedomandprosperity.org www.freedomandprosperity.org Forward email This email was sent to rah(a)shipwright.com, by alert(a)freedomandprosperity.org Update Profile/Email Address | Instant removal with SafeUnsubscribe | Privacy Policy. Email Marketing by CF&P Foundation | PO Box 10882 | Alexandria | VA | 22310

1 0

FC: Ed Felten and researchers sue RIAA, DOJ over right to publish
by Declan McCullagh 06 Jul '18

06 Jul '18

--- Background: http://www.politechbot.com/cgi-bin/politech.cgi?name=felten DMCA-related photos: http://www.mccullagh.org/theme/dmca-appeals-arguments.html http://www.mccullagh.org/theme/dvd-2600-trial.html http://www.mccullagh.org/theme/dmca-protest.html EFF document archive: http://www.eff.org/Legal/Cases/Felten_v_RIAA/ --- http://www.wired.com/news/mp3/0,1285,44344,00.html Code-Breakers Go to Court By Declan McCullagh (declan(a)wired.com) 6:22 a.m. June 6, 2001 PDT WASHINGTON -- After a team of academics who broke a music-watermarking scheme bowed to legal threats from the recording industry and chose not to publish their research in April, they vowed to "fight another day, in another way." On Wednesday, Ed Felten of Princeton University and seven other researchers took their fight to a New Jersey federal court in a lawsuit asking that they be permitted to disclose their work at a security conference this summer. Joining them is the Usenix Association, a 26-year-old professional organization that has accepted Felten's paper for its 10th security symposium in Washington during the week of Aug. 13. The Electronic Frontier Foundation is representing the researchers and Usenix. In what appears to be the first legal challenge to the Digital Millennium Copyright Act's criminal sections, Usenix is asking the court to block the Justice Department from prosecuting the conference organizers for allowing the paper to be presented. [...] ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. To subscribe, visit http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ ------------------------------------------------------------------------- ----- End forwarded message ----- ----- End forwarded message -----

1 0

Advanced Paypal phish - uses faked functional address bar
by Stanton McCandlish 06 Jul '18

06 Jul '18

A new phishing trick; cool, in a nefarious way: The phisher pops a window that uses Javascript to hide your real address toolbar, then adds a fake tool bar with a graphic and DHTML coding, matching your browser, that looks like the original address toolbar, with a fake but usable URL field in it, which is stocked with the address of the legit site the phisher is masqueraded as. So the actual phisher site address is completely hidden, and it looks like you're at the legit site. Nasty. There's the real phish at the bottom, in the quoted passage (sorry, original headers lost, so I don't know who the initial writer was) which you probably don't want to go to. Immediately below is an example of how it works on a safe page: http://ip.securescience.net/exploits/ You have to have popup-blockers turned off for it to work. The safe test version above only seems to fake IE6/Win address bars, but it does so successfully in Firefox and Safari on the Mac. I don't think it would fool that many Mac people but the fakery is pretty impressive with IE on WinXP, and as noted above, the live phish is claimed to be more sophisticated in its mimickry. >>>This is a heads up. Below you'll find a new and sophisticated >>>Paypal scam. >>> >>>It uses a google redirector to mask where it goes, but that is >>certainly not >>>the advanced stuff :-) >>> >>>The complete URL is: >>>http://www.google.pt/url?sa=U&start=4&q=http://dns1.n- >>>kiso.co.jp/.checking/. >>>www.paypal.com/index.php >>> >>>Which goes to: >>>http://dns1.n-kiso.co.jp/.checking/.www.paypal.com/index.php >>> >>>When the link "Click here to go to our main page " >>> >>>It will open a javascript: "java script: Start('sysdll.Php')" >>> >>>When opened it will construct the fraudulent website according to >>>your >>>default browser. >>> >>>I've tested with: >>> >>>- Firefox >>>- Internet Explorer >>>- Opera >>> >>>All latest versions with all relevant patches. >>> >>>The fake adressbar used may trick someone into thinking that they >>>are >>>actually on https://www.paypal.com. Watch and observe. This is >>indeed tricky >>>done. >> >>Although - some popup blockers should block this I would think. The >>trick is similar to http://ip.securescience.net/exploits/ so it >>creates >>an address bar using a pop-up controller and you just draw the >>image of >>the address bar. This is one of the first ones I've seen that has >>been >>done quite a bit better than the other ones that have attempted it. >>Their aim was off so it looked terrible. >> > ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] Advanced Paypal phish - uses faked functional address bar
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0