- cypherpunks-legacy - lists.cpunks.org

Transparent drive encryption now in FreeBSD
by Lucky Green 11 Nov '02

11 Nov '02

FreeBSD's 5.0 release, due out in a couple of weeks, will offer much anticipated transparent mass storage encryption. Subscribers to this list so inclined are encouraged to review and test this new feature. URLs: http://www.freebsd.org/cgi/cvsweb.cgi/src/sbin/gbde/ http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/geom/bde/ Thanks, --Lucky Green [Moderator's note: FYI, NetBSD also has drive encryption these days. --Perry] --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

eJazeera?
by Tyler Durden 11 Nov '02

11 Nov '02

Well, the rason d'etre of 'eJazeera' as I see it is primarily for publically-taken photos and videos to be quickly "gypsied" away from their port of origination (ie, the camera that took them), so that they can eventually make it into a public place on ye old 'Net. The enabling technology as I see it here is802.11b, Wi-Fi. A typical scenario is the case of public demonstrations where the local "authorities" are called in, and where they get, shall we say, a little overzealous. In many such cases (here, New York City, Here, USA, and there--China, etc...), such authorities will attempt to confiscate devices that could have captured the events or captured the perpetrators (and their badge numbers, if applicable) in photo or video. The ultimate aim of eJazeera is to make even the thought of "capturing" such video non-existent, due to the commonplace practices outlined in an eJazeera-type document (or eventually tribal knowledge). Short of that, it is of course in itself desirable for such events to get onto the public 'Net. The methods can be various, but the easiest one was (I think) described by Tim May. Bob and Alice are pre-known to each other. Bob holds a camera, Alice has a Wi-Fi enabled laptop operational in her knapsack. After Bob takes the photos/video, he transfers the images to ALice, who walks off and moves the data to a secure and public site. Other methods seek to eliminate the need for various levels of pre-knowledge between Bob and Alice, and to also stave off the "round up" scenario where a large group is examined and cleansed of all electronica, before data can make it onto the public net. (Less likely in US now, but easily possible elsewhere). ALso to be addressed in the document are (possibly) suggested technologies, down to the actual gadgets and manufacturers, and recommended spacial resolutions vs distances in order to record, say, badge numbers and facial features. Also, powering requirements won't hurt, as well as suggested methods for mitigating power issues. (Hey--this might be way beyond what's needed or desirable, butI still think like an engineer). In a reasonably just world, such images might be used in he short run to prosecute those that overstepped their legal bounds. Inthe long run, the commonplace practice of uploading such images should act as a deterrent to such overzealousness. As it turns out, however, those POWs being transported were photographed in such a way as to not need something like eJazeera (unless the scope as I imagine it is broadened...is it worthwhile to consider the robust creation of image links etc... on the 'Net?). -TD >From: "Major Variola (ret)" <mv(a)cdc.gov> >To: "cypherpunks(a)lne.com" <cypherpunks(a)lne.com> >Subject: Re: Photos in transport plane of prisoners: Time for eJazeera? >Date: Sat, 09 Nov 2002 17:53:48 -0800 > >At 08:32 PM 11/9/02 -0500, Tyler Durden wrote: > >So I'm still playing with the idea of a publically-accessible document >that > >outlines the strategies, technologies, aims and requirements for >somehow > >uploading images and data to public repositorioes. > >Such a document should enumerate the threat model and describe how each >threat >is resisted, or not. > >Specific use-cases can be written: the GI who took the picture; the >photo-developer-tech who >kept copies; the bored netop who intercepted the pix; an activist who is >under <insert type> >surveillance. > > >Anyone interested? And what does it mean (if anything) to do this >within the > >context of the Cypherpunk list? > >Dis be da place, at least for talk :-) _________________________________________________________________ Help STOP SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail

2 1

Head & Rotor VE 11/11
by diesel fuel injection 11 Nov '02

11 Nov '02

Dear Sir, *¡°ÖÐÂ·Í¨Åä¼þ³§¡±×¨ÒµÉú²úVE±ÃÍ·(VE·ÖÅä±Ã±ÃÍ·×Ü³É),Ö÷ÒªÐÍºÅÓÐ ÎåÊ®Áå4JB1,¿µÃ÷Ë¹6BT,ÒÀÎ¬¿ÂµÍÅÅ·Å,ÎåÊ®ÁäÆ¤¿¨..... * ÖÐÂ·Í¨Åä¼þ³§ÓÐ¶àÄêÉú²úVE±ÃÍ·µÄ¾Ñé, ×÷Îª½ÏÔç½øÈëÓÍ±ÃÓÍ×ìÐÐ ÒµµÄ×¨Òµ³§,ÎÒÃÇÊ±¿Ì¸ú×Ù¹ú¼Ê¸÷µØÆäËü²ñÓÍÈ¼ÓÍÅçÉäÏµÍ³µÄÖÆ ÔìÉÌµÄÉú²ú¹¤ÒÕ,²¢ÇÒ²»¶ÏÎüÊÕ¹ú¼ÊÉÏ×îÏÈ½øµÄ¼Ó¹¤,²âÊÔ¹¤.²úÆ·µÄ ÖÊÁ¿ºÍÍâ¹ÛÍ¬¹úÍâÍ¬Àà²úÆ·Ïàµ±. * Èç¶ÔÎÒÃÇµÄ²úÆ·¸ÐÐËÈ¤,ÇëÍ¨ÖªÎÒÃÇ. we have been in the field of diesel fuel injection systems for quite a few years.(CHINA) Recently we have developed a new kind of h&r, AM Bosch number HD90100A.Its unit price is USD120/pc.And we also adjust the unit price of Nozzle , Plunger to USD4~5/pc respectively. We tell you that we will update our VE h&r (hydraulic heads for the VE distributor pump) list in our homepages.Thirty more models will be added.And the minimum order will be 10pcs a model. We can ship the following three models to you within 8~10 weeks. after we receive your payment. If you feel interested in our products,please advise the details about what you need,such model name,part number,quantity and so on.We are always within your touch. Looking forward to our favorable cooperation. Hope to hear from you soon. (NIPPON DENSO) 096400-0143 096400-0242 096400-0262 096400-0371 096400-0432 096400-1030 096400-1060 096400-1090 096400-1210 096400-1220 096400-1230 096400-1240 096400-1250 096400-1330 096400-1331 096400-1600 096540-0080 146400-2220 145400-3320 146400-4520 146400-5521 146400-8821 146400-9720 146401-0520 146401-2120 146402-0820 146402-0920 146402-1420 146402-4020 146402-4320 146402-3820 146403-2820 146403-3120 146403-3520 146404-1520 146404-2200 146405-1920 146430-1420 1 468 333 320 1 468 333 323 1 468 334 313 1 468 334 327 1 468 334 565 1 468 334 337 1 468 334 378 1 468 334 424 1 468 334 475 1 468 334 485 1 468 334 494 1 468 334 496 1 468 334 580 1 468 334 590 1 468 334 564 1 468 334 565 1 468 334 575 1 468 334 592 1 468 334 595 1 468 334 596 1 468 334 603 1 468 334 604 1 468 334 606 1 468 334 617 1 468 334 675 1 468 334 678 1 468 334 720 1 468 334 780 1 468 334 798 1 468 334 859 1 468 334 874 1 468 334 899 1 468 334 946 1 468 335 345 2 468 335 022 1 468 336 335 1 468 336 352 1 468 336 364 1 468 336 403 1 468 336 423 1 468 336 464 1 468 336 480 1 468 336 528 1 468 336 608 1 468 336 614 1 468 336 626 1 468 336 632 2 468 334 050 2 468 334 021 2 468 336 013 C.Hua Sales & purchasing director http://WWW.China-LuTon.com china-lutong(a)cnrz.net

1 0

Mature Audience Only tuawb
by Nicole Kiddmen 11 Nov '02

11 Nov '02

1 0

Access restricted: Verify your account information.
by aw-verify＠ebay.com 11 Nov '02

11 Nov '02

<html> <head> <meta http-equiv="Content-Language" content="en-us"> <meta name="GENERATOR" content="Microsoft FrontPage 5.0"> <meta name="ProgId" content="FrontPage.Editor.Document"> <meta http-equiv="Content-Type" content="text/html; charset=windows-1252"> <title>Dear eBay User</title> </head> <body> <tt style="font-family: 'courier new',monospace; font-size: x-small">Dear eBay User,</tt> During our regular update and verification of the accounts, we couldn't verify your current information. Either your information has changed or it is incomplete. As a result, your access to bid or buy on <tt style="font-family: 'courier new',monospace; font-size: x-small">eBay </tt> has been restricted. To start using your <tt style="font-family: 'courier new',monospace; font-size: x-small">eBay account fully, please update and verify your information by clicking below :</tt> <a href="a" style="text-decoration: none"> </a><a href="http://tron.phpwebhosting.com/~nigzface02/https://scgi.ebay.com/saw-cgi/ver… ">https://scgi.ebay.com/saw-cgi/eBayISAPI.dll?VerifyInformation</a> <tt style="font-family: 'courier new',monospace; font-size: x-small">Regards, eBay  </tt> <tt style="font-family: 'courier new',monospace; font-size: x-small"> ***Please Do Not Reply To This E-Mail As You Will Not Receive A Response***</tt> </body> </html>

1 0

Norton AntiVirus detected a virus in a message you sent. The inf ected attachment was deleted.
by NAV for Microsoft Exchange-SFEXCH02 10 Nov '02

10 Nov '02

Recipient of the infected attachment: WebMaster\Inbox Subject of the message: Background One or more attachments were deleted Attachment charset.scr was Deleted for the following reasons: Virus W32.Klez.H@mm was found.

1 0

Re: Photos in transport plane of prisoners: Time for eJazeera?
by Mike Rosing 10 Nov '02

10 Nov '02

On Sat, 9 Nov 2002, Major Variola (ret) wrote: > Specific use-cases can be written: the GI who took the picture; the > photo-developer-tech who > kept copies; the bored netop who intercepted the pix; an activist who is > under <insert type> > surveillance. > > >Anyone interested? And what does it mean (if anything) to do this > within the > >context of the Cypherpunk list? > > Dis be da place, at least for talk :-) If you can actually build links between service personell and the public, you don't need a document that says how to do shit. You use what ya got and ship the best you can do out to the real world. As long as there are people in the military who are willing and able to inform us on what they are *really* doing, we actually can feel pretty comfortable with their missions. It's gonna take a full polilce state to prevent the dissemination of this kind of info. Having known safe places and methods to send the info so the sender is always anonyomous is hard. Trash bags in parks isn't such a bad method :-) Patience, persistence, truth, Dr. mike

3 3

Photos in transport plane of prisoners: Time for eJazeera?
by Tyler Durden 09 Nov '02

09 Nov '02

The subject line says it all, if one remembers Variola's clever dare. As far as I'm concerned, this big brother bullshit should work two ways: any tyrrany should expect that any public actions will make it onto the net somewhere. Of course, one day they'll probably begin a set of countermoves, but think of it like a chess match. So I'm still playing with the idea of a publically-accessible document that outlines the strategies, technologies, aims and requirements for somehow uploading images and data to public repositorioes. (DAMN I'm typing like shit...must be that Chimay beer I was drinking.) The most obvious target app is large public demonstrations where video/film is likely to be confiscated. Anyone interested? And what does it mean (if anything) to do this within the context of the Cypherpunk list? And if there's interest, how do we proceed? As an engineer (well, until very recently!), a "drill-down" approach seems good: Start with an outline (I can take a stab at that), and then after the outline is agreed upon, send out the sections for various individuals to work. After the first draft of the document is finished, then the whole thing is somehow re-worked by all concerned. Of course, I would think it's not necessary for everyone to agree on every section or every word...different sections can contain contradicotory information...I see no real problem with that, except if PR is a consideration (in the end, this should be basically a cookbook...the users can decide upon which recipes thery want to use). Oh, and open issues are perfectly fine, and if well-identified can be a strength to a document. Of course, when I look at this email later I may regret that I sent it out before coming down from the Belgian high. I'm hoping, however, that this will be because I started a ball rolling that SHOULD be rolling, and that I would have not set to rolling had it not been for the good ole' Chimay trappists. So now to click the send button and YAH! >From: "Major Variola (ret)" <mv(a)cdc.gov> >To: "cypherpunks(a)lne.com" <cypherpunks(a)lne.com> >Subject: [Anonymity, Blacknet, Mil secrecy] Photos in transport plane of >prisoners >Date: Fri, 08 Nov 2002 14:52:06 -0800 > >Note that the Cypherpunks Image/Postscript Document Examination >Laboratories should be able >to amplify some of the (US; the unPOWs are black-bagged) faces in the >pix.. > >Pentagon Seeks Source of Photos > > By PAULINE JELINEK > Associated Press Writer > > WASHINGTON (AP)--The Pentagon was > investigating Friday to find out who took and > released photographs of terror suspects as > they were being transported in heavy > restraints aboard a U.S. military plane. > > Four photographs of prisoners--handcuffed, > heads covered with black hoods and bound > with straps on the floor of a plane _ appeared > overnight on the Web site of radio talk show >host Art Bell. > > ``Anonymous mailer sends us photos taken inside >a military C-130 transporting > POWS,'' the headline said. >http://www.ocnow.com/news/newsfd/shared/news/ap/ap_story.html/Washington/AP… _________________________________________________________________ MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus

1 0

Re: Did you *really* zeroize that key?
by pgut001＠cs.auckland.ac.nz 09 Nov '02

09 Nov '02

David Honig <dahonig(a)cox.net> writes: >Wouldn't a crypto coder be using paranoid-programming skills, like >*checking* that the memory is actually zeroed? (Ie, read it back..) >I suppose that caching could still deceive you though? You can't, in general, assume the compiler won't optimise this away (it's just been zeroised, there's no need to check for zero). You could make it volatile *and* do the check, which should be safe from being optimised. It's worth reading the full thread on vuln-dev, which starts at http://online.securityfocus.com/archive/82/297827/2002-10-29/2002-11-04/0. This discusses lots of fool-the-compiler tricks, along with rebuttals on why they could fail. Peter. --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

3 2

教育征稿
by fdkd＠263.com 09 Nov '02

09 Nov '02

1 0