July 2018 - cypherpunks-legacy

Abridged info on RISKS (comp.risks)
by RISKS-request＠csl.sri.com 06 Jul '18

06 Jul '18

The ACM RISKS Forum is a MODERATED digest, with Usenet equivalent comp.risks. => SUBSCRIPTIONS: PLEASE read RISKS as a newsgroup (comp.risks or equivalent) if possible and convenient for you. The mailman web interface can be used directly to subscribe and unsubscribe: http://lists.csl.sri.com/mailman/listinfo/risks Alternatively, to subscribe or unsubscribe via e-mail to mailman your FROM: address, send a message to risks-request(a)csl.sri.com containing only the one-word text subscribe or unsubscribe. You may also specify a different receiving address: subscribe address= ... . You may short-circuit that process by sending directly to either risks-subscribe(a)csl.sri.com or risks-unsubscribe(a)csl.sri.com depending on which action is to be taken. Subscription and unsubscription requests require that you reply to a confirmation message sent to the subscribing mail address. Instructions are included in the confirmation message. Each issue of RISKS that you receive contains information on how to post, unsubscribe, etc. => The complete INFO file (submissions, default disclaimers, archive sites, copyright policy, etc.) is online. <http://www.CSL.sri.com/risksinfo.html> The full info file may appear now and then in RISKS issues. *** Contributors are assumed to have read the full info file for guidelines. => .UK users should contact <Lindsay.Marshall(a)newcastle.ac.uk>. => SPAM challenge-responses will not be honored. Instead, use an alternative address from which you NEVER send mail! => SUBMISSIONS: to risks(a)CSL.sri.com with meaningful SUBJECT: line. *** NOTE: Including the string "notsp" at the beginning or end of the subject *** line will be very helpful in separating real contributions from spam. *** This attention-string may change, so watch this space now and then. => ARCHIVES: ftp://ftp.sri.com/risks for current volume or ftp://ftp.sri.com/VL/risks for previous VoLume <http://www.risks.org> redirects you to Lindsay Marshall's Newcastle archive http://catless.ncl.ac.uk/Risks/VL.IS.html gets you VoLume, ISsue. Lindsay has also added to the Newcastle catless site a palmtop version of the most recent RISKS issue and a WAP version that works for many but not all telephones: http://catless.ncl.ac.uk/w/r <http://the.wiretapped.net/security/info/textfiles/risks-digest/> . ==> PGN's comprehensive historical Illustrative Risks summary of one liners: <http://www.csl.sri.com/illustrative.html> for browsing, <http://www.csl.sri.com/illustrative.pdf> or .ps for printing ------------------------------ End of RISKS-FORUM Digest 24.73 ************************ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Abridged info on RISKS (comp.risks)
by RISKS-request＠csl.sri.com 06 Jul '18

06 Jul '18

The ACM RISKS Forum is a MODERATED digest, with Usenet equivalent comp.risks. => SUBSCRIPTIONS: PLEASE read RISKS as a newsgroup (comp.risks or equivalent) if possible and convenient for you. The mailman web interface can be used directly to subscribe and unsubscribe: http://lists.csl.sri.com/mailman/listinfo/risks Alternatively, to subscribe or unsubscribe via e-mail to mailman your FROM: address, send a message to risks-request(a)csl.sri.com containing only the one-word text subscribe or unsubscribe. You may also specify a different receiving address: subscribe address= ... . You may short-circuit that process by sending directly to either risks-subscribe(a)csl.sri.com or risks-unsubscribe(a)csl.sri.com depending on which action is to be taken. Subscription and unsubscription requests require that you reply to a confirmation message sent to the subscribing mail address. Instructions are included in the confirmation message. Each issue of RISKS that you receive contains information on how to post, unsubscribe, etc. => The complete INFO file (submissions, default disclaimers, archive sites, copyright policy, etc.) is online. <http://www.CSL.sri.com/risksinfo.html> The full info file may appear now and then in RISKS issues. *** Contributors are assumed to have read the full info file for guidelines. => .UK users should contact <Lindsay.Marshall(a)newcastle.ac.uk>. => SPAM challenge-responses will not be honored. Instead, use an alternative address from which you NEVER send mail! => SUBMISSIONS: to risks(a)CSL.sri.com with meaningful SUBJECT: line. *** NOTE: Including the string "notsp" at the beginning or end of the subject *** line will be very helpful in separating real contributions from spam. *** This attention-string may change, so watch this space now and then. => ARCHIVES: ftp://ftp.sri.com/risks for current volume or ftp://ftp.sri.com/VL/risks for previous VoLume <http://www.risks.org> redirects you to Lindsay Marshall's Newcastle archive http://catless.ncl.ac.uk/Risks/VL.IS.html gets you VoLume, ISsue. Lindsay has also added to the Newcastle catless site a palmtop version of the most recent RISKS issue and a WAP version that works for many but not all telephones: http://catless.ncl.ac.uk/w/r <http://the.wiretapped.net/security/info/textfiles/risks-digest/> . ==> PGN's comprehensive historical Illustrative Risks summary of one liners: <http://www.csl.sri.com/illustrative.html> for browsing, <http://www.csl.sri.com/illustrative.pdf> or .ps for printing ------------------------------ End of RISKS-FORUM Digest 24.73 ************************ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Abridged info on RISKS (comp.risks)
by RISKS-request＠csl.sri.com 06 Jul '18

06 Jul '18

The ACM RISKS Forum is a MODERATED digest, with Usenet equivalent comp.risks. => SUBSCRIPTIONS: PLEASE read RISKS as a newsgroup (comp.risks or equivalent) if possible and convenient for you. The mailman web interface can be used directly to subscribe and unsubscribe: http://lists.csl.sri.com/mailman/listinfo/risks Alternatively, to subscribe or unsubscribe via e-mail to mailman your FROM: address, send a message to risks-request(a)csl.sri.com containing only the one-word text subscribe or unsubscribe. You may also specify a different receiving address: subscribe address= ... . You may short-circuit that process by sending directly to either risks-subscribe(a)csl.sri.com or risks-unsubscribe(a)csl.sri.com depending on which action is to be taken. Subscription and unsubscription requests require that you reply to a confirmation message sent to the subscribing mail address. Instructions are included in the confirmation message. Each issue of RISKS that you receive contains information on how to post, unsubscribe, etc. => The complete INFO file (submissions, default disclaimers, archive sites, copyright policy, etc.) is online. <http://www.CSL.sri.com/risksinfo.html> The full info file may appear now and then in RISKS issues. *** Contributors are assumed to have read the full info file for guidelines. => .UK users should contact <Lindsay.Marshall(a)newcastle.ac.uk>. => SPAM challenge-responses will not be honored. Instead, use an alternative address from which you NEVER send mail! => SUBMISSIONS: to risks(a)CSL.sri.com with meaningful SUBJECT: line. *** NOTE: Including the string "notsp" at the beginning or end of the subject *** line will be very helpful in separating real contributions from spam. *** This attention-string may change, so watch this space now and then. => ARCHIVES: ftp://ftp.sri.com/risks for current volume or ftp://ftp.sri.com/VL/risks for previous VoLume <http://www.risks.org> redirects you to Lindsay Marshall's Newcastle archive http://catless.ncl.ac.uk/Risks/VL.IS.html gets you VoLume, ISsue. Lindsay has also added to the Newcastle catless site a palmtop version of the most recent RISKS issue and a WAP version that works for many but not all telephones: http://catless.ncl.ac.uk/w/r <http://the.wiretapped.net/security/info/textfiles/risks-digest/> . ==> PGN's comprehensive historical Illustrative Risks summary of one liners: <http://www.csl.sri.com/illustrative.html> for browsing, <http://www.csl.sri.com/illustrative.pdf> or .ps for printing ------------------------------ End of RISKS-FORUM Digest 24.73 ************************ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[IP] China filtering SMS messages
by dave＠farber.net 06 Jul '18

06 Jul '18

___ Dave Farber +1 412 726 9889 ...... Forwarded Message ....... From: "Alan A. Reiter" <aareiter(a)gmail.com> To: David Farber <dave(a)farber.net> Date: Sat, 03 Jul 2004 10:33:10 -0400 Subj: China filtering SMS messages Hi Dave, When Howard Rheingold wrote "Smart Mobs," he discussed how wireless communications -- such as SMS -- can be a force for change. Apparently, the Chinese government wants to ensure SMS is not a force for changing the existing political system. The "New York Times" today published an article today that leads with, "China has begun filtering billions of telephone text messages to ensure that people do not use the popular communication tool to undermine one-party rule. "The campaign, announced on Friday by the official New China News Agency, comes after text messages sent between China's nearly 300 million mobile phone users helped to expose the national cover-up of the SARS epidemic last year. Text messages have also generated popular outrage about corruption and abuse cases that had received little attention in the state-controlled media.... "The dispatch said the purpose was to stop the spread of pornographic messages and false or deceptive advertising as well as to block illicit news and information. "All such companies are being required to install filtering equipment that can monitor and delete messages that contain key words, phrases or numbers that authorities consider suspicious before they reach customers. The companies must contact the relevant authorities, including the Communist Party's propaganda department, to make sure they stay in touch with the latest lists of banned topics, executives in the industry said." http://www.nytimes.com/2004/07/03/international/asia/03chin.html Alan ----------------------------------- Alan A. Reiter, president Wireless Internet & Mobile Computing E-Mail: reiter(a)wirelessinternet.com Phone: 1-301-951-0385 Weblog: http://www.CameraPhoneReport.com Weblog: http://reiter.weblogger.com Website: http://www.wirelessinternet.com ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

Oops.
by Randall 06 Jul '18

06 Jul '18

Detailed schematics of a military detainee holding facility in southern Iraq. Geographical surveys and aerial photographs of two military airfields outside Baghdad. Plans for a new fuel farm at Bagram Air Base in Afghanistan. The military calls it "need-to-know" information that would pose a direct threat to U.S. troops if it were to fall into the hands of terrorists. It's material so sensitive that officials refused to release the documents when asked. But it's already out there, posted carelessly to file servers by government agencies and contractors, accessible to anyone with an Internet connection. In a survey of servers run by agencies or companies involved with the military and the wars in Iraq and Afghanistan, The Associated Press found dozens of documents that officials refused to release when asked directly, citing troop security. [Source: Mike Baker, Military files left unprotected online, AP item, 11 Jul 2007; PGN-truncated good long item, not surprising] http://news.yahoo.com/s/ap/military_online_insecurity;_ylt=Aixup_YEMhxbq7rT… ------------------------------

1 0

[RISKS] Risks Digest 24.73
by RISKS List Owner 06 Jul '18

06 Jul '18

RISKS-LIST: Risks-Forum Digest Tuesday 17 July 2007 Volume 24 : Issue 73 ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks) Peter G. Neumann, moderator, chmn ACM Committee on Computers and Public Policy ***** See last item for further information, disclaimers, caveats, etc. ***** This issue is archived at <http://www.risks.org> as <http://catless.ncl.ac.uk/Risks/24.73.html> The current issue can be found at <http://www.csl.sri.com/users/risko/risks.txt> Contents: CCTV biometric surveillance software fails German reliability test (Martin Virtel) Military files left unprotected online (Randall via Dewayne Hendricks) Face recognition flop (Christian Kuhtz via Dave Farber) Microsoft protects me against ... Microsoft (David de Leeuw) Jogger with iPod Struck by Lightning (Gene Wirchenko) Phone switch rootkit in Greek surveillance (Jeremy Kirk) Space Shuttle uses 2-version programming (Andrew Morton, PGN) Re: N-version programming -- the errors are in ourselves (Peter Mellor) Re: Gripen: Risks of safety measures in military jet ... (Henry Baker, Peter Mellor) Re: BSoD in standardized tests (Martyn Thomas) Re: Wikipedia and Responsibility (Joe Bednorz) Re: Risk with the Mac OS X 10.4.10 version number (Dirk Fieldhouse) Search Engine Dispute Notification (Jurek Kirakowski) Exploiting Online Games, Hoglund/McGraw (PGN) Abridged info on RISKS (comp.risks) ----------------------------------------------------------------------

1 0

Abridged info on RISKS (comp.risks)
by RISKS-request＠csl.sri.com 06 Jul '18

06 Jul '18

The ACM RISKS Forum is a MODERATED digest, with Usenet equivalent comp.risks. => SUBSCRIPTIONS: PLEASE read RISKS as a newsgroup (comp.risks or equivalent) if possible and convenient for you. The mailman web interface can be used directly to subscribe and unsubscribe: http://lists.csl.sri.com/mailman/listinfo/risks Alternatively, to subscribe or unsubscribe via e-mail to mailman your FROM: address, send a message to risks-request(a)csl.sri.com containing only the one-word text subscribe or unsubscribe. You may also specify a different receiving address: subscribe address= ... . You may short-circuit that process by sending directly to either risks-subscribe(a)csl.sri.com or risks-unsubscribe(a)csl.sri.com depending on which action is to be taken. Subscription and unsubscription requests require that you reply to a confirmation message sent to the subscribing mail address. Instructions are included in the confirmation message. Each issue of RISKS that you receive contains information on how to post, unsubscribe, etc. => The complete INFO file (submissions, default disclaimers, archive sites, copyright policy, etc.) is online. <http://www.CSL.sri.com/risksinfo.html> The full info file may appear now and then in RISKS issues. *** Contributors are assumed to have read the full info file for guidelines. => .UK users should contact <Lindsay.Marshall(a)newcastle.ac.uk>. => SPAM challenge-responses will not be honored. Instead, use an alternative address from which you NEVER send mail! => SUBMISSIONS: to risks(a)CSL.sri.com with meaningful SUBJECT: line. *** NOTE: Including the string "notsp" at the beginning or end of the subject *** line will be very helpful in separating real contributions from spam. *** This attention-string may change, so watch this space now and then. => ARCHIVES: ftp://ftp.sri.com/risks for current volume or ftp://ftp.sri.com/VL/risks for previous VoLume <http://www.risks.org> redirects you to Lindsay Marshall's Newcastle archive http://catless.ncl.ac.uk/Risks/VL.IS.html gets you VoLume, ISsue. Lindsay has also added to the Newcastle catless site a palmtop version of the most recent RISKS issue and a WAP version that works for many but not all telephones: http://catless.ncl.ac.uk/w/r <http://the.wiretapped.net/security/info/textfiles/risks-digest/> . ==> PGN's comprehensive historical Illustrative Risks summary of one liners: <http://www.csl.sri.com/illustrative.html> for browsing, <http://www.csl.sri.com/illustrative.pdf> or .ps for printing ------------------------------ End of RISKS-FORUM Digest 24.73 ************************ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[IP] China filtering SMS messages
by dave＠farber.net 06 Jul '18

06 Jul '18

___ Dave Farber +1 412 726 9889 ...... Forwarded Message ....... From: "Alan A. Reiter" <aareiter(a)gmail.com> To: David Farber <dave(a)farber.net> Date: Sat, 03 Jul 2004 10:33:10 -0400 Subj: China filtering SMS messages Hi Dave, When Howard Rheingold wrote "Smart Mobs," he discussed how wireless communications -- such as SMS -- can be a force for change. Apparently, the Chinese government wants to ensure SMS is not a force for changing the existing political system. The "New York Times" today published an article today that leads with, "China has begun filtering billions of telephone text messages to ensure that people do not use the popular communication tool to undermine one-party rule. "The campaign, announced on Friday by the official New China News Agency, comes after text messages sent between China's nearly 300 million mobile phone users helped to expose the national cover-up of the SARS epidemic last year. Text messages have also generated popular outrage about corruption and abuse cases that had received little attention in the state-controlled media.... "The dispatch said the purpose was to stop the spread of pornographic messages and false or deceptive advertising as well as to block illicit news and information. "All such companies are being required to install filtering equipment that can monitor and delete messages that contain key words, phrases or numbers that authorities consider suspicious before they reach customers. The companies must contact the relevant authorities, including the Communist Party's propaganda department, to make sure they stay in touch with the latest lists of banned topics, executives in the industry said." http://www.nytimes.com/2004/07/03/international/asia/03chin.html Alan ----------------------------------- Alan A. Reiter, president Wireless Internet & Mobile Computing E-Mail: reiter(a)wirelessinternet.com Phone: 1-301-951-0385 Weblog: http://www.CameraPhoneReport.com Weblog: http://reiter.weblogger.com Website: http://www.wirelessinternet.com ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

Oops.
by Randall 06 Jul '18

06 Jul '18

Detailed schematics of a military detainee holding facility in southern Iraq. Geographical surveys and aerial photographs of two military airfields outside Baghdad. Plans for a new fuel farm at Bagram Air Base in Afghanistan. The military calls it "need-to-know" information that would pose a direct threat to U.S. troops if it were to fall into the hands of terrorists. It's material so sensitive that officials refused to release the documents when asked. But it's already out there, posted carelessly to file servers by government agencies and contractors, accessible to anyone with an Internet connection. In a survey of servers run by agencies or companies involved with the military and the wars in Iraq and Afghanistan, The Associated Press found dozens of documents that officials refused to release when asked directly, citing troop security. [Source: Mike Baker, Military files left unprotected online, AP item, 11 Jul 2007; PGN-truncated good long item, not surprising] http://news.yahoo.com/s/ap/military_online_insecurity;_ylt=Aixup_YEMhxbq7rT… ------------------------------

1 0

[RISKS] Risks Digest 24.73
by RISKS List Owner 06 Jul '18

06 Jul '18

RISKS-LIST: Risks-Forum Digest Tuesday 17 July 2007 Volume 24 : Issue 73 ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks) Peter G. Neumann, moderator, chmn ACM Committee on Computers and Public Policy ***** See last item for further information, disclaimers, caveats, etc. ***** This issue is archived at <http://www.risks.org> as <http://catless.ncl.ac.uk/Risks/24.73.html> The current issue can be found at <http://www.csl.sri.com/users/risko/risks.txt> Contents: CCTV biometric surveillance software fails German reliability test (Martin Virtel) Military files left unprotected online (Randall via Dewayne Hendricks) Face recognition flop (Christian Kuhtz via Dave Farber) Microsoft protects me against ... Microsoft (David de Leeuw) Jogger with iPod Struck by Lightning (Gene Wirchenko) Phone switch rootkit in Greek surveillance (Jeremy Kirk) Space Shuttle uses 2-version programming (Andrew Morton, PGN) Re: N-version programming -- the errors are in ourselves (Peter Mellor) Re: Gripen: Risks of safety measures in military jet ... (Henry Baker, Peter Mellor) Re: BSoD in standardized tests (Martyn Thomas) Re: Wikipedia and Responsibility (Joe Bednorz) Re: Risk with the Mac OS X 10.4.10 version number (Dirk Fieldhouse) Search Engine Dispute Notification (Jurek Kirakowski) Exploiting Online Games, Hoglund/McGraw (PGN) Abridged info on RISKS (comp.risks) ----------------------------------------------------------------------

1 0