- cypherpunks-legacy - lists.cpunks.org

A firewall problem?
by Sarad AV 04 Jul '03

04 Jul '03

hi, Wont the following cause a firewall breach- First we capture inbound packets to a firewall assuming we have a man in the middle(M). If (M) use block replay on packets he can inject bits and pieces of his own information to an inbound firewall and can go undetected? M doesn't alter the source and destination ip's and is perfectly acceptable to the firewall.Even a timestamp won't work since a packet is expected at any time. We can still re-calculate the CRC of Checksum field by the same attack and replace the old crc/checksum after changing various required bit positions. Do firewall programs use initialisation vectors and a chaning mode to prevent this attack? Regards Sarath. __________________________________ Do you Yahoo!? SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com

1 0

Re: All quiet on the western front
by Tyler Durden 03 Jul '03

03 Jul '03

A. Melon wrote... "There are very few in the general population that are cut to be true dissenters and act upon it. Now this age brings in the additional requirement: they have to also be decent engineers. As a result, there are very few left." I agree with this assessment, but would also suggest that Tim May's old-fogeyism has some validity to it. As far as I'm concerned, the state has successfully bonded with big media to pretty much stifle a lot of critical thinking, particularly about what other Americans believe. We saw it with the war protests--despite the fact that the numbers were larger than during Vietnam, the media was successful in (first of all) convincing Americans that the vast majority of Americans supported the war/troops/president. After that, since most Americans believed the right thing was to support the war (because "everybody else supports it"), they then came to quasi-support it, or at least shut up about it. And still, no Osama, no Saddam, and no WMD, but only "kooks" and "commies" are screaming about it. Thus, to go back o your point, you're starting off with a small population of dissenters, so that once you pass down through the needs for engineering and math skills, you're left with very little. On the other hand, the only thing that's stopping me from coding up my "eJector" is a full time job and trying to live in the little spare time I have. So I guess I'm in the population you describe and will be, as long as I remain employed. But then again...if someone I actually know gets tortured or whatever, that could change at any minute. Then I'll be the REAL... -Tyler Durden >From: "A.Melon" <juicy(a)melontraffickers.com> >To: cypherpunks(a)lne.com >Subject: Re: All quiet on the western front >Date: Wed, 2 Jul 2003 23:06:14 -0700 (PDT) > >Hi, Tim, > >I'm glad that you have a bout of lucidity. > >The government essentially won the crypto battle, marginalizing crypto >proponents, quietly getting media and corporations under control when >crypto is concerned, and generally rising the stakes. Those of you who >have access to corporate product development documents that relate to >communications know what I am talking about. CALEA etcl. It's there, >it's real and I think that about 5-10% of development resources are >taken by it. > >Most cypherpunks were relatively highly paid engineers with >comfortable lives and some time on their hands, so while crypto was >fashionable it was cool to hang out at meetings and have pipe dreams >about taking on the state. Even then, scum like del Torto started to >bank ahead and sell to the "freedom fighters" and "good cops". > >But then it got much worse. After the WTC theater, being present at >essentially anti-state meetings was not considered totally benign. And >also the salaries were gone, so this beer and TV Saturday alternative >suddenly stopped being alternative at all. > >So we're back to the fact that highly paid engineers in crypto field >are really not automatically revolutionaries. On the contrary. > >There are very few in the general population that are cut to be true >dissenters and act upon it. Now this age brings in the additional >requirement: they have to also be decent engineers. As a result, there >are very few left. _________________________________________________________________ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail

1 0

Web Privacy War
by John Young 03 Jul '03

03 Jul '03

WSJ today reports on the war between web privacy firms and the feds: http://cryptome.org/web-priv-war.htm Lance Cottrell and other privacy protection firms are featured -- does Anonymizer really bring in up to a $1M a year? Lance says he doesn't keep logs thus cannot respond to subpoenas. Other privacy firms are said to cooperate with the feds. One brags that national security trumps making money. As if they natsec is not the biggest money maker of all time, though homesec is coming on strong. Privsec in the race, though deniability is mandatory. It notes the demise of Zero Knowledge just before the Patriot Act started the boom in people seeking protection from official spies. Darn. But then we don't know what ZK is doing black with the contacts it eagerly gathered in its meetings with the feds.

1 0

Re: Reporter writing article on proffr/mattd and threats
by Major Variola (ret) 03 Jul '03

03 Jul '03

At 04:09 PM 7/2/03 -0400, Declan McCullagh wrote: >I received a phone call today from a newspaper reporter who's writing an >article on mattd/proffr and wanted background on the cypherpunks group or >movement, as he put it. The reporter -- who covers crime, law enforcement, >and the courts How does one authenticate that a voice on a phone is a reporter? Or is my sarcasm/wryness detector stuck? --- We are all reporters, we are all book sellers. We are all first class objects. --Tim May

2 1

talking to coworkers = deemed exports
by Major Variola (ret) 03 Jul '03

03 Jul '03

http://www.eetimes.com/story/OEG20030623S0011 The Commerce Department considers some U.S. transfers of commercial technologies to foreign workers as exports. In some cases, U.S. companies may be required to obtain a deemed-export license before giving foreign-born employees access to sensitive technologies. [shades of the old crypto days, where you couldn't ask a colleage from another country to review your code.. this time its China, India they're freaking about]

1 0

SF meet: future of feta, port, sherry, gorgonzola at stake
by Declan McCullagh 03 Jul '03

03 Jul '03

COMMERCE UNDER SECRETARY ROGAN TO OPEN USPTO/WIPO CONFERENCE EXPLORING USE OF GEOGRAPHIC NAMES TO DESCRIBE FOOD AND WINE Use of Terms Bologna, Parmesan, Chablis, and Burgundy Could Be Prohibited, Adversely Affecting U.S. Food and Wine Industry Wednesday, July 9, 2003 9:30 a.m. The Palace Hotel 2 New Montgomery Street San Francisco, CA. Under Secretary of Commerce for Intellectual Property James E. Rogan will make opening remarks at a three-day symposium (July 9-11) on the use of geographical indications (GIs) to describe food and wine. The symposium, which is being co-hosted by the Department of Commercebs U.S. Patent and Trademark Office (USPTO) and the World Intellectual Property Organization (WIPO), will feature an international array of experts in the field from WIPO member states and the food and wine industries. The symposium is being held in anticipation of a World Trade Organization (WTO) meeting on GIs scheduled for Cancun, Mexico in September. It is expected that at the Cancun meeting, the European Union will call for terminating the use of certain generic terms to describe food and wine unless those products come from a specific geographic region. If the EU is successful, use of terms such as feta and gorgonzola for cheese, and port and sherry for wine - now considered generic in many WTO member nations - could be prohibited in the United States, resulting in consumer confusion and potentially injuring U.S. domestic and international commerce in food and wine. The symposium agenda is available at http://www.wipo.int/meetings/2003/geo-ind/en/program/.

2 1

architecture as torture
by Major Variola (ret) 03 Jul '03

03 Jul '03

http://www.smh.com.au/articles/2003/01/27/1043534004548.html

1 0

Re: All quiet on the western front
by A.Melon 03 Jul '03

03 Jul '03

Hi, Tim, I'm glad that you have a bout of lucidity. The government essentially won the crypto battle, marginalizing crypto proponents, quietly getting media and corporations under control when crypto is concerned, and generally rising the stakes. Those of you who have access to corporate product development documents that relate to communications know what I am talking about. CALEA etcl. It's there, it's real and I think that about 5-10% of development resources are taken by it. Most cypherpunks were relatively highly paid engineers with comfortable lives and some time on their hands, so while crypto was fashionable it was cool to hang out at meetings and have pipe dreams about taking on the state. Even then, scum like del Torto started to bank ahead and sell to the "freedom fighters" and "good cops". But then it got much worse. After the WTC theater, being present at essentially anti-state meetings was not considered totally benign. And also the salaries were gone, so this beer and TV Saturday alternative suddenly stopped being alternative at all. So we're back to the fact that highly paid engineers in crypto field are really not automatically revolutionaries. On the contrary. There are very few in the general population that are cut to be true dissenters and act upon it. Now this age brings in the additional requirement: they have to also be decent engineers. As a result, there are very few left.

1 0

Reporter writing article on proffr/mattd and threats
by Declan McCullagh 02 Jul '03

02 Jul '03

I received a phone call today from a newspaper reporter who's writing an article on mattd/proffr and wanted background on the cypherpunks group or movement, as he put it. The reporter -- who covers crime, law enforcement, and the courts -- wanted to know whether mattd/proffr was representative of the group or an outlier, and stressed that two other cypherpunks have been imprisoned for their actions in this area. Apparently mattd/proffr has been saying on cypherpunks that some federal prosecutors need killing. Then that post was indexed by Google, and now it is a prominent hit for the name of said prosecutor. (I say apparently because, thanks to the good graces of procmail, I haven't read any mattd/proffr posts in ages. This is what I gathered solely from the phone conversation.) Anyway, the Feds apparently are neither confirming nor denying that an investigation is in progress, except to say that they are "aware" of mattd/proffr's post. This is what I learned from the phone call. I have no firsthand knowledge. -Declan

3 3

Re: All quiet on the western front
by Anonymous 02 Jul '03

02 Jul '03

Hi, Tim, I'm glad that you have a bout of lucidity. The government essentially won the crypto battle, marginalizing crypto proponents, quietly getting media and corporations under control when crypto is concerned, and generally rising the stakes. Those of you who have access to corporate product development documents that relate to communications know what I am talking about. CALEA etcl. It's there, it's real and I think that about 5-10% of development resources are taken by it. Most cypherpunks were relatively highly paid engineers with comfortable lives and some time on their hands, so while crypto was fashionable it was cool to hang out at meetings and have pipe dreams about taking on the state. Even then, scum like del Torto started to bank ahead and sell to the "freedom fighters" and "good cops". But then it got much worse. After the WTC theater, being present at essentially anti-state meetings was not considered totally benign. And also the salaries were gone, so this beer and TV Saturday alternative suddenly stopped being alternative at all. So we're back to the fact that highly paid engineers in crypto field are really not automatically revolutionaries. On the contrary. There are very few in the general population that are cut to be true dissenters and act upon it. Now this age brings in the additional requirement: they have to also be decent engineers. As a result, there are very few left.

2 1