- cypherpunks-legacy - lists.cpunks.org

Proposed SS#/Federal Job Licensing DOS Attack
by Duncan Frissell 17 Dec '03

17 Dec '03

On another subject entirely... I have naturally been concerned about the Feds' proposal to set up a national job licensing system. In order to protect us from hordes of illegals, they have suggested that employers be required to check SS#-True Name matches before employment could begin. This amounts to requiring federal permission for the 55 million annual job changes. Initially, it is supposed to be restricted to checking SS# validity, name match, and non multiple use. Later (as with driver's licenses) they will add restrictions having to do with tax compliance, child support compliance, library fine compliance, etc. After all, we wouldn't want tax evading, deadbeat dad, library scofflaws working in Amerika, would we? This suggests am interesting Denial of Service (DOS) attack. If you published your own or others' SS#-True Name pairs on a public forum (currently completely legal BTW), multiple use could be encouraged, the TrueNames would become unemployable, and interesting litigation would result. If done enough, systemic breakdown would occur. I am anxious to see the regs (they are just at the talking stage) to see how they handle "exceptions" like thus. DCF "Who in spite of the fact that he has changed jobs since November 1986, has yet to fill out an I-9 form. He *loves* contract employment."

1 0

Re: Free The World Web Server project.. :)
by dursi＠lola.phy.QueensU.CA 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > > Expecially if the form letter generated would be randomly selected > >from parallel word streams. For example: > [...] > > You get the idea. > Rather than spend five minutes writing something on your own you'd end > up something that looks totally fake. I believe that what is going on > would be discerned by a staffer in moments. Well, it would be just as easy (although, admittedly, somewhat less convenient to the users) to have the web page such that the users could type in the letter, with some ``suggested text'' (perhaps randomly generated as above), perhaps even as the default; then it's just a matter of editing a few sentances, and maybe adding a paragraph or two... then click, and it's off. It wouldn't be as convenient as just-click-and-a-letter-will-be-sent, but it's still more convenient than having to write the letter yourself, which means that it'll generate more traffic... - Jonathan - --- Jonathan Dursi | "Never attribute to malice dursi(a)astro.queensu.ca | what can adequately be explained | by stupidity." - Hanlon's Razor -----BEGIN PGP SIGNATURE----- Version: 2.6.i iQBVAgUBMAp5/BJH45PFiKyNAQGYJQH/Uo3k45i73U8qQA1/y5LeXPso07LAPCwo 5i0xkFudoK2/Q5H7Gm7xmygNXIkckhuK/X/kJvdCf2khRluP8y/c7w== =jwye -----END PGP SIGNATURE-----

1 0

Windows secret-sharing
by joelm＠eskimo.com 17 Dec '03

17 Dec '03

I just uploaded a user-friendly, Windows front-end to Hal Finney's SECSPLIT.EXE (based on Shamir's secret-sharing) called Secret Sharer. The interface supports splitting and restoring files or passphrases. Nothing fancy, but a simple solution for Windows users who want to do their own key (or whatever) escrow. Secret Sharer is freeware, and is available from either: http://www.eskimo.com/~joelm ftp.eskimo.com /joelm/secshare.zip I'm probably being over-cautious, but because of ITAR, SECSPLIT.EXE is not included in the ZIP file. FTP sites for downloading are listed in the docs though. Comments, bug reports, etc. appreciated before I announce to the relevant newsgroups. Joel McNamara joelm(a)eskimo.com - http://www.eskimo.com/~joelm for PGP key

1 0

Re: Free The World Web Server project.. :)
by Peter Trei 17 Dec '03

17 Dec '03

> > DM> however, would be unobtrusive. A web page that mails a form letter to > DM> _your_ congressperson's form-letter-readers (ie staff readers) would be > DM> much better, IMHO. > Expecially if the form letter generated would be randomly selected > from parallel word streams. For example: > I am <concerned|alarmed|frightened> by the <attacks on privacy > rights in|glaring First Amendment violations in|fascist mentality > of|ominous provisions of|potential for civil rights infringement > by> SB <#BILLNO> <introduced recently| proposed|offered> by Senator > <#ORIGINATOR>..... This sort of thing bugs me a lot. If your level of passion on an issue is not enough to send an individually composed letter, then send a form letter. But don't try to fake out people that your note is actually individually composed. One of my pet peeves is junk mail tricked up to look like something else. I expect legislators feel the same way, and have a lot of practice recognizing it. Personally, if I feel strongly about an issue, I call up the legislators office and give his/her aide a piece of my mind. I try to be polite, informative, and find an angle of interest to that particular legislator, no matter how much I may actually despise the slimeball (this was tough when talking to Exon's press secretary). Peter Trei trei(a)acm.org Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation trei(a)process.com

1 0

TIME pathfinder registration
by wb8foz＠nrk.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I note someone has used "cypherpunks" as a login for TIME Mag's WWW service. I'd guess it was in the spirit of other such enrollments. If so, what's the password? - -- A host is a host from coast to coast.................wb8foz(a)nrk.com & no one will talk to a host that's close........[v].(301) 56-LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead....................................20915-1433 -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAgUBMArQLhqU5+N/mI7JAQGAPwQAjVGA8kf/ncHJ+ltzVwnzr7ncCjCpcvxv kaPRYrIJHE5qQzm7YLKfrn6kv51f+QZgRQHZz0wWtQoQgSwta0WQXBbbU7CWFy95 vE1sKselPRElDkLRxzltgJqLCAYZBBAnjxlnck7EaDbXfyAGsTbNIE261PsXDMUk IyyYk+2Tc04= =JwQi -----END PGP SIGNATURE-----

2 1

Perl Shirts
by Samuel Kaplin 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Anyone know when Joel is going to ship the perl shirts? Thanks, Sam -----BEGIN PGP SIGNATURE----- Version: 2.6.1 Comment: PGP Signed with PineSign 1.0 iQCVAwUBMAq/xe5wXwthmZO1AQEeoQP/dnmJNi+yz5HwPVU3BCOlqLWrQlGHIGjW LcREDkaXaOWIqJB+5wr/Sc59l54niivh+PifgS72kreLgiw+Im1rF0ftAIUa1f9x 2NUvp+v1yMNB20By25jEhZHwGgMo1dKe67xOhOBVukoEhe1VLg4YO9i7XIqPCh0E WUlLMj38itQ= =zz5B -----END PGP SIGNATURE-----

1 0

Is it legal for commercial companies to use PGP?
by tim werner 17 Dec '03

17 Dec '03

Hi, I was reading in some Where to Get PGP Web page that "PGP2.6.2 is legal to use in the U.S. for non-commercial purposes (i.e., you cannot sell it or the functionality it provides)". Can anyone on the list say whether this is true? That is, was the use of "i.e." correct, or should it have been "e.g."? Or, to put it more succinctly, I was talking to one of the sys admins at A-B, and he said that we weren't allowed to use PGP to encrypt our mail, because Viacrypt owned the commercial rights. But, according to the bit I quoted, it would only be a violation if A-B tried to put PGP into one of their products. Has anyone heard a (hopefully legal, but I'll listen to anyone's opinion) answer to this? thanks, tw -- Well, Bust My Britches! Eggs Almondine and a Bottle of Beaujolais!

1 0

Re: Cray Computer liquidating...
by thresher!thad＠netcom.com 17 Dec '03

17 Dec '03

Phil Fraerling asks if there is any crypto relevance to CCC liquidating. There definately is some. They were in the middle of building a Cray 3 with .25 Million PIM processors for the NSA. It was a wild machine, basically it used the Cray to pass data back and forth very quickly among the 1 bit processors. Someone who worked on it said that it reminded him of Wayner's hypothetical DES cracking machine. It was never very close to being finished. It will be interesting to see if somebody tries to finish it, or if they use some other platform to use the PIM (processor-in-memory) chips. I'd love to see who bids for the half-finished machine at the coming liquidation... thad -- Thaddeus Beier email: thresher!thad(a)netcom.com Technology Development vox: 408) 286-3376 Hammerhead Productions fax: 408) 292-8624

1 0

Re: \"Judgement Proof\" and Putting Up or Shutting Up
by John Young 17 Dec '03

17 Dec '03

Responding to msg by klp(a)noc.cis.umn.edu () on Mon, 17 Jul 3:4 PM >Council on Foreign Relations. > >Silly me, I thought it was the Tri-Lateral Commission >that really steered the boat, must have been wrong :) CFR -> TLC -> Opus Dei -> Cyclops in the Land of The Blind -> Blind Leading the Blind -> Wanderers in the Wilderness -> Michael Jackson Leading the World's Rainbow Children of Benetton -> Marty Rimm, 16-year-old Sheik of AC, Porno-poller of CMU -> Bob Guccione - > FC - > CFR!

1 0

Re: "Judgement Proof" and Putting Up or Shutting Up
by tim werner 17 Dec '03

17 Dec '03

>Date: Wed, 5 Jul 1995 04:32:41 +0000 (GMT) >From: attila <attila(a)PrimeNet.Com> >and, conspiracy theories non-withstanding, we the people do not govern >America --we are only given a short list of politicians who have sold >their soul to CFR's satanist inner circle. What's CFR? tw -- Well, Bust My Britches! Eggs Almondine and a Bottle of Beaujolais!

4 3