- cypherpunks-legacy - lists.cpunks.org

[johnmacsgroup] Follow up to German Anonymizer no longer anonymous
by R. A. Hettinga 26 Aug '03

26 Aug '03

--- begin forwarded text

1 0

Re: "domestic terrorism", fat lazy amerikans & ducks
by Major Variola (ret) 26 Aug '03

26 Aug '03

At 01:11 PM 8/26/03 -0400, Tyler Durden wrote: >PS: Anyone else getting tired of the term "terror"? Back when we all hated You're out of the loop. Here's how you play the propoganda drinking game: You and a friend get a bottle of <whatever> and watch a Bush speech. *You* drink whenever he says "terror"; *she* drinks whenever he says "freedom". If he says "warlord", "constitution", "regime" or "WoMD" you both drink. If he says "occupation", "election", "oil" or "Quisling" you skip a drink. If he mentions "viet nam" or "guerilla" you take 2 drinks. Whoever is left standing gets to clean up.

1 0

Re: "domestic terrorism", fat lazy amerikans & ducks
by Tyler Durden 26 Aug '03

26 Aug '03

So... how many people does one have to terrorize in order to be a terrorist? PS: Anyone else getting tired of the term "terror"? Back when we all hated Osama bin Laden (remember that guy?) Osama was promoted from "Terrorist" to "terror mastermind" to "lord of terror" and so on. I'm sick of being told I'm some sniveling lil' bitch that needs protecting. Right now I am 3 blocks from the "Hole of Death" and if I stand up and look out that window I can see what will likely be the next "ground zero", but I'm not scared per se (granted, it would SUCK to die in a giant pile of collapsing rubble or crashing-and-bleeding due to a dirty bomb). Can't we just call the "terrorists" our "enemies" like back in the good old days? -TD >From: "R. A. Hettinga" <rah(a)shipwright.com> >To: Sunder <sunder(a)sunder.net>, Bill Stewart <bill.stewart(a)pobox.com> >CC: cypherpunks(a)lne.com >Subject: Re: "domestic terrorism", fat lazy amerikans & ducks >Date: Tue, 26 Aug 2003 12:02:14 -0400 > >At 10:25 AM -0400 8/26/03, Sunder wrote: > >I'm "afraid" of the oil companies > >Ah. You're afraid of markets. That makes you a socialist. > >*You*'re a terrorist, Sunder. > >;-) > >Cheers, >RAH > >-- >----------------- >R. A. Hettinga <mailto: rah(a)ibuc.com> >The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> >44 Farquhar Street, Boston, MA 02131 USA >"... however it may deserve respect for its usefulness and antiquity, >[predicting the end of the world] has not been found agreeable to >experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' _________________________________________________________________ Get MSN 8 and help protect your children with advanced parental controls. http://join.msn.com/?page=features/parental

2 1

Some new problems uncovered for short latency mixes
by Steve Schear 26 Aug '03

26 Aug '03

Probabilistic Analysis of Anonymity by Vitaly Shmatikov Abstract: We present a formal analysis technique for probabilistic security properties of peer-to-peer communication systems based on random message routing among members. The behavior of group members and the adversary is modeled as a discrete-time Markov chain, and security properties are expressed as PCTL formulas. To illustrate feasibility of the approach, we model the Crowds system for anonymous Web browsing, and use a probabilistic model checker, PRISM, to perform automated analysis of the system... http://citeseer.nj.nec.com/shmatikov02probabilistic.html "...for every complex problem, there is a solution that is simple, neat, and wrong." -- H.L. Mencken

1 0

Guardian Unlimited Books | By genre | Observer review: The Music of the Primes by Marcus du Sautoy (fwd)
by Jim Choate 26 Aug '03

26 Aug '03

Suggested reading... http://books.guardian.co.uk/reviews/scienceandnature/0,6121,1028232,00.html -- -- ravage(a)ssz.com jchoate(a)open-forge.com www.ssz.com www.open-forge.com

1 0

Re: Is it time to kill the JAP backdoor cretins and their families?
by Adam Shostack 26 Aug '03

26 Aug '03

On Mon, Aug 25, 2003 at 08:27:20PM -0700, Len Sassaman wrote: | However, even when setting aside the issue that our understanding of the | math involved may be flawed, JAP quickly becomes less appealing choice | once the other factors are considered. | | University / government funded research relies on grants for its | existence. This makes the operators beholden to the source of grant funds. | It also eliminates an economic incentive to put users first. | | Private companies offering privacy/anonymity services are faced with a | direct correlation between revenue and delivery of such services. Should a | company like Anonymizer violate its stated privacy policy and misrepresent | its level of security, as JAP did, the results would be devastating to the | viability of the company. The JAP group, on the other hand, is facing | nothing more than a little bad PR and the loss of some users. (Many of | those 30,000 probably are unaware of the silent compromise of JAP | security). Much as we'd like reputational issues to rule, I think your final parenthetical is important. I would be willing to bet that Lance *could* take FBI money to rat out users without it reaching the userbase. I'd also be willing to bet that Lance *wouldn't,* but that bet would obviously be smaller. So, to the question of, is a private company better than a research lab? Probably. But could a privacte company comprimise its users without imploding? Probably. The right system is probably something like Tarzan, running low-latency traffic inside the file trading cloud. Adam -- "It is seldom that liberty of any kind is lost all at once." -Hume

2 1

[dave@farber.net: [IP] blackmail / real world stego use]
by Adam Shostack 26 Aug '03

26 Aug '03

----- Forwarded message from Dave Farber <dave(a)farber.net> -----

2 1

[Full-Disclosure] RE: JAP back doored
by Vincent Penquerc'h 25 Aug '03

25 Aug '03

> "CAMsg::printMsg(LOG_INFO,"Loading Crime Detection Data....\n");" > "CAMsg::printMsg(LOG_CRIT,"Crime detected - ID: %u - Content: > \n%s\n",id,crimeBuff,payLen);" Well, people say the JAP team hid it, but with that (assuming the strings appeared verbatim in the binary), they made sure someone would spot it. They essentially made sure the users would be warned about it while keeping plausible deniability. -- Vincent Penquerc'h _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html

3 2

Re: Schneier at toorcon 2003
by Major Variola (ret) 25 Aug '03

25 Aug '03

At 02:44 PM 8/25/03 -0700, Meyer Wolfsheim wrote: >On Mon, 25 Aug 2003, Major Variola (ret) wrote: > >> I'm told by an organizer that >> Bruce Schneier will be speaking at toorcon in San Diego this year. >> See www.toorcon.org for info. > >This is of interest why? Because it was previously untrue, and now, being true, should be advertized to the relevant audience.

1 0

Slashdot | Florida Proposes Taxing Local LANs (fwd)
by Jim Choate 25 Aug '03

25 Aug '03

http://yro.slashdot.org/yro/03/08/25/2248224.shtml?tid=103&tid=98&tid=99 -- -- ravage(a)ssz.com jchoate(a)open-forge.com www.ssz.com www.open-forge.com

1 0