- cypherpunks-legacy - lists.cpunks.org

Sempre em Boa Forma com o Rudolfo
by infomacao＠giganetstore.com 26 Nov '01

26 Nov '01

Para retirar o seu email desta mailing list deverá entrar no nosso site http:\\www.giganetstore.com <http://www.giganetstore.com/> , ir à edição do seu registo e retirar a opção de receber informação acerca das nossas promoções e novos serviços

1 0

Denning's Geo-crypto
by John Young 26 Nov '01

26 Nov '01

Time Magazine, November 26, 2001: Denning's pioneering a new field she calls geo-encryption. Working with industry, Denning has developed a way to keep information undecipherable until it reaches its location, as determined by GPS satellites. Move studios, for example, have been afraid to release films digitally for the same reasons record companies hate Napster: once loose on the Internet, there's little to stop someone from posting the latest blockbuster DVD on the Web for all to see and download. With Denning's system, however, only subscribers in specified locations -- such as movie theaters -- would be able to unscramble the data. The technology works as well for national security as it does for Harry Potter. Coded messages that the State Department sends to its embassies, for example, could only be deciphered in the embassy buildings themselves, greatly reducing the risk of interception. For now, Denning says, terrorists "may want to bring down the power grid or the finance system, but it's still easier to blow up a building." If she's right, it's due in large part to her.

6 6

Compelling small cap investment opportunity
by Multex Investor 26 Nov '01

26 Nov '01

***************************************************************** As a registered Multex Investor member, we will occasionally contact you with special opportunities provided by our partners. To unsubscribe to this or any other exclusive offers, please see the bottom of this message. ***************************************************************** ---------------------------------------------------------------- ---------------------------------------------------------------- If you'd like to learn more about Multex Investor, please visit: http://www.multexinvestor.com/welcome.asp. If you can't remember your Multex Investor password and/or your user name, click here: http://www.multexinvestor.com/lostinfo.asp. If you want to update your email address, please click on the URL: http://www.multexinvestor.com/edituinfo.asp. To remove yourself from the mailing list for Special Promotions, please REPLY to THIS email message with the word UNSUBSCRIBE in the subject line. You may also unsubscribe on the account update page at: http://www.multexinvestor.com/edituinfo.asp.

1 0

Declans testimony;Clone me!,
by mattd 26 Nov '01

26 Nov '01

Hey measals,you shouldnt be called as a witless now the drumhead courts have got the nod.Living in amerikkka getting you down? "Defenders of the US Constitution and the common law from which it grew are being classified on the same level as the bottom-feeding Skinheads, Nazis and the KKK. "

1 0

Health bill endangers civil rights
by Khoder bin Hakkin 26 Nov '01

26 Nov '01

http://www.sfgate.com/cgi-bin/article.cgi?file=/c/a/2001/11/25/MN232750.DTL Health bill endangers civil rights The administration wants all 50 states to adopt a law allowing public health authorities to take over hospitals, seize drug supplies, quarantine people exposed to infectious pathogens, draft doctors to treat them, force patients to be vaccinated, and order police to restrain residents from leaving contaminated areas. ... Civil rights protections, however, are exactly what opponents find lacking. The kind of public health emergency that would trigger extraordinary powers for health officers is defined so broadly that it could include AIDS, HIV infection or a severe flu epidemic, said Tanya Ehrmann, director of public policy at the activist group AIDS Action in Washington, D.C. Annas said that under the legislation, people could be detained without a court order and isolated in stadiums or clinics without an adequate process to challenge the decision. The proposed law would also shield health officers from liability, along with anyone working at their direction, for deaths or health damage suffered by quarantined bioterror victims, he said. Under the measure, "if you kill people or hurt them, that's tough," said Annas, one of 10 New England health law scholars urging Thompson to change the draft law. "The families can't sue, nobody can sue."

1 0

SBC says appointing Gore-for-pres chief as president "signals the importance of governmental matters to our company's ability to grow revenues"
by Declan McCullagh 26 Nov '01

26 Nov '01

11/19. SBC named William Daley its new President. Daley will report directly to SBC's Chairman and CEO Edward Whitacre. SBC is the incumbent local exchange carrier in California, Nevada, Texas, Oklahoma, Kansas, Arkansas, Missouri, Illinois, Michigan, Ohio, Wisconsin, and Indiana. SBC also holds a majority equity interest in Cingular Wireless. Daley was former President Bill Clinton's Secretary of Commerce from January 1997 to June 2000. He resigned in June 2000 to become Chairman of former Vice President Al Gore's presidential campaign. Whitacre stated in a release that "His appointment as president of SBC signals the importance of governmental matters to our company's ability to grow revenues ..." release: http://www.sbc.com/News_Center/1,3950,31,00.html?query=20011119-1

2 1

RE: Ridiculous Airline Security Story N+1 and N+2...
by Trei, Peter 26 Nov '01

26 Nov '01

Rohit (whom I know slightly) is too much a gentleman to suggest that he may be being hit due to racial profiling. Peter Trei > ---------- > From: R. A. Hettinga[SMTP:rah@shipwright.com] > Reply To: cypherpunks(a)einstein.ssz.com > Sent: Sunday, November 25, 2001 9:38 AM > To: cypherpunks(a)einstein.ssz.com; cryptography(a)wasabisystems.com; > dcsb(a)ai.mit.edu > Subject: Ridiculous Airline Security Story N+1 and N+2... > > > --- begin forwarded text > > > Status: U > Delivered-To: fork(a)xent.com > Date: Wed, 21 Nov 2001 22:44:04 -0800 > To: FoRK(a)xent.com > From: Rohit Khare <Rohit(a)KnowNow.com> > Subject: Ridiculous Airline Security Story N+1 and N+2... > Sender: fork-admin(a)xent.com > List-Id: Friends of Rohit Khare <fork.xent.com> > > Executive Summary: I am near my limit of anger with the "random", > "neutral" FAA passenger profiling algorithm. I have every reason to > believe some programmer has coded some strictures into it which would > truly offend American civil society if translated from mathematics > back into the ugly politics from whence it came. > > Soon after my last installment, I had to turn back around and fly out > of Denver. They made me X-ray my *shoes*... This time, the problem > was *too much* time on their hands. The second story is how I missed > the last flight back home on Thanksgiving eve because the security > supervisor wouldn't show up to process me at the gate in time. That > snowballed into a series of Catch-22 situations trying to find a lost > pair of glasses along the way. > > First, Denver. A tip on avoiding the Disneyland-like lines at the two > main X-ray posts -- even though, strictly speaking, that's an insult > to Disneyland, since even they've instituted a take-a-number pass > system for the most popular rides. > > Rather than take the train to one of the outlying concourses, ignore > the main signage and *walk* to Terminal A over a bridge on the > ticketing level. That's the X-ray post to Continental, British, etc. > Much less popular, even though many a savvy traveler knew that was > the way around United's silly carryon sizer templates (Contintental's > machines don't use them). Then take the train to wherever you really > need to get to. > > A co-worker and I arrived at DIA together, and I was able to purchase > a new ticket, and even with the foolishness of fellow business > travelers in stocking-feet waiting for their shoes back, I caught up > with him in the same train car... he spent the entire time in United > lines. > > Now, for the real outrage. > > Today, I was warned about massive Thanksgiving delays at Sea-Tac, so > I cut short a beer with a buddy in Bellevue to race back two and a > half hours in advance. I returned the car, picked up a boarding pass > from a pliant robot kiosk, and got through security in a wink. Two > hours in advance... no problem, right? > > Well, I was a selectee, presumably since it was a one-way ticket. So > I sat through yet another embarassing tearing-apart of my bags, and > this time they found a pocket screwdriver. A promotional pen-style > screwdriver that I've had for ten years (it's a NeXT repair shop :-) > > 1. They think you are not allowed to board with a three-inch, > 1/8-inch wide screwdriver. > > 2. You are not allowed to ask the aircrew to hold it for you on the > flight. > > 3. You are not allowed to leave the selectee table until a "GSC" > supervisor comes to look it over. > > At this point, there's twenty minutes left.... tick-tock... now, the > flight is almost completely boarded. You're still waiting. And now > you suddenly realize you've lost your $400 prescription sunglasses. > > 4. You keep all your metal -- everything -- in your jacket at all > times, so that you can x-ray a jacket rather than begin to empty out > pockets. Your sunglasses have fallen out at some checkpoint. > > At this point, you start tracing back your steps. It's 7 minutes or > so to push-back. > > 5. If you leave the selectee table, you will have to be searched all > over again when you return to the gate > > 6. They do not have walkie-talkies to ask security if your glasses > were stuck in the X-ray tunnel > > 7. See #3: You are not allowed to leave at all until the mythical GSC > arrives. > > Finally, a GSC arrives. Two minutes or so to departure, you haven't > been given any chance to run down and solve the mystery. > > 8. The screwdriver must be confiscated or bags must be checked. > > 9. Just because you have been flying with it all week means nothing. > "We're supposed to randomly change what the FAA is looking for every > day". Parse that, if you dare! > > 10. Any carry-on bag may be gate-checked *except* those containing > "forbidden carry-on items". Catch-22 #1. > > So now you're finally free to run back to the X-ray post and miss your > flight. > > 11. With about fifteen uniformed personnel of various stripes > (National Guard, Argenbright, Alaska, and United), none of the first > half-dozen people you ask claims to know about lost articles. > > 12. Before you can find a supervisor, the GSC has wandered back to > warn them you are carrying a screwdriver. > > 13. So at this point, instead of any sympathy for a harried traveler > asking for a supervisor, it's time for a lecture about "having > committed two federal crimes, bringing a forbidden item into a > screening area, lying about it to a ticket agent, two fines at > $11,000 each" -- which they take the pompous time to warn you adds up > to "a potential total fine of $22,000" since you're not paying enough > attention to the supercillious bastard who won't admit to knowing who > to ask about lost articles. > > Note that A) you are not allowed to leave your bags unaccompanied; > and B) the only way for a solo traveler to speak to a security > supervisor is to enter the screening area. Catch-22 #2. > > 14. Sufficiently alarmed, I am ordered to walk around, get back in > line, and wait to be escorted back to the *front* of the metal > detector to be handed my bags back. > > At this point, my interest is in going back to the Rental car desk > and asking if I left the glasses there. At no point has anyone > volunteered a back-up flight alternative for how I might every make > it back to Northern California tonight. > > Ultimately, when rebooking my ticket for a later flight to SFO, I > mention that I missed my flight because as a selectee, the personnel > needed to inspect me were not available in time. I get snapped at for > suggesting I was at all inconvenienced. And I'm marked as a selectee > again. > > And when I finally wade through security for the fourth time, the > same super is there to claim that the glasses must have been swept up > to Port of Seattle Lost and Found. But that he doesn't know what > their phone number is. > > 15. Seattle is the only airport in the world without white courtesy > telephones :-) > > But while looking for those phones, the wandering GSC comes back > around and huddles with the supervisor, staring at me. She's > obviously asking him how I could have come back in without having > checked my bag - and my dreaded screwdriver. Gingerly, they begin to > follow me back out of the screening area. I decide to placate their > fears that I got back through their infallible dragnet with > contraband. > > "Oh, I mailed it to myself, first-class air-mail!" > > ... > > Clever solutions aside, the outcome of this story is that a very > harried, very frequent traveling US citizen was at no point treated > like an innocent person anxious to solve a problem. Instead, every > contact is an opportunity to be treated like a suspect criminal. In > three hours, I was patted down four times, had my bags X-rayed twice, > hand-searched twice more, and went through metal detectors six times. > > The irony of it all is that the selectee program was created by the > FAA for those passengers who choose NOT to provide photo > identification as a matter of right. > > CAPPS, the Computer-Assisted Passenger Profiling System, deserves to > be sued out of existence. I'm almost ready to join the ACLU. These > so-called "confidential" criteria are not convincingly as neutral as > the cheery pink "You have been randomly selected"! flyers in your > ticket indicate. And the time-filling additional random searches by > the gate security supervisor were even more visibly biased towards > brown young men. Even one Army soldier on Thanksgiving leave. > > I am sick of being treated as guilty until proven innocent! > > Not least by such a patently fallible and placebo-driven security > system... The Feds will be *such* an improvement. -- not! > > Yours, > Rohit > > > http://xent.com/mailman/listinfo/fork > > --- end forwarded text > > > -- > ----------------- > R. A. Hettinga <mailto: rah(a)ibuc.com> > The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> > 44 Farquhar Street, Boston, MA 02131 USA > "... however it may deserve respect for its usefulness and antiquity, > [predicting the end of the world] has not been found agreeable to > experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' >

1 0

Re: Thoughts in proxy services.
by Trei, Peter 26 Nov '01

26 Nov '01

[Ryan replied on the list to a private email I sent him. I'm sending the original letter to provide context for his reply.] Peter Trei > ---------- > From: Trei, Peter > Sent: Wednesday, November 21, 2001 10:15 AM > To: 'Ryan Lackey' > Subject: RE: "quitting havenco", not quite! > > > > ---------- > From: Ryan Lackey[SMTP:ryan@havenco.com] > Sent: Tuesday, November 20, 2001 5:48 PM > To: Trei, Peter > Cc: 'cypherpunks(a)lne.com' > Subject: Re: "quitting havenco", not quite! > > > Ryan and the other HavenCo folks deserve *massive* kudos for this. > > (now, when is the HavenCo remailer going online? :-) > > The remailer has been up since 16 September 2001, and was announced to > this list among others. http://remailer.havenco.com/ > > Oops! (more kudos to you!) > > Followed by: (I have them for myself now, not commercial-grade yet) > * Anonymizing proxy on Sealand, cover general traffic as well as > havenco-destination traffic. Free and no ads to havenco-destination > sites; free and ads and rate-limiting to elsewhere, or subscription. > > Now that Safeweb is down, this would be really nice. A suggestion: > > Protecting traffic between the end-user and the proxy is as and > sometimes more important to the user as protecting the target > user from the target web site. > > Safeweb did this pretty well, using SSL between the user and > safeweb, and rewriting the URLs as encrypted strings. (There was > a javascript frame on the end users browser, but I'm sure you > know all that). Protecting the target URLs from observation is > almost as important as protecting the content. > > Thus, once Safeweb was going, an observer on the firewall > could find nothing except the volume of traffic between the > user and safeweb. > > Of course, safeweb went tits-up, so their economic model (they > were ad-supported) is questionable. > > There are a couple other systems out there that are similar; > www.the-cloak.com for one. > > I've a small list of links on this, if it would be helpful. For > example: http://www.jmarshall.com/tools/cgiproxy/ > > Peter

1 0

RE: Slashdot | McAfee Will Ignore FBI Spyware
by Trei, Peter 26 Nov '01

26 Nov '01

A few years ago I coined the term 'espionage-enabled' to describe the 'International' version of Lotus Notes, with it's blabbing 88 of 128 bits of encryption keys wrapped with an NSA supplied public key. I guess it's time to label another product. Peter Trei > ---------- > From: Jim Choate[SMTP:ravage@einstein.ssz.com] > Reply To: cypherpunks(a)einstein.ssz.com > Sent: Sunday, November 25, 2001 12:52 PM > To: hell(a)einstein.ssz.com; cypherpunks(a)einstein.ssz.com > Subject: Slashdot | McAfee Will Ignore FBI Spyware > > http://slashdot.org/yro/01/11/24/2324241.shtml > -- > > -- > ____________________________________________________________________ > > Day by day the Penguins are making me lose my mind. > > Bumper Sticker > > The Armadillo Group ,::////;::-. James Choate > Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com > www.ssz.com .', |||| `/( e\ 512-451-7087 > -====~~mm-'`-```-mm --'- > -------------------------------------------------------------------- >

1 0

RE: Denning's Geo-crypto
by Trei, Peter 26 Nov '01

26 Nov '01

Curious. 4-5 years ago Denning and another associate (I forget who, it's in the archives :-) tried to market an authentication scheme which purported to authenticate the location of a remote user using GPS. The idea was that the user's machine would pick up the aggregate analog GPS signal available at it's location (either the regular, non-classified version or the high-precision classified signals), and transmit it to the server, which would use it to work out the location of the user - a user who was located at 'Pentagon, third ring, fourth floor, Army segment' would be accorded different privilieges than one whose location decoded as 'Presidential Palace, Baghdad'. I and several other list subscribers pointed out numerous issues. Among them were: 1. GPS signals don't work well in buildings of substantial construction, and the chance of them working at all in a TEMPEST shielded building are about zip. 2. There are numerous DOS attacks available - the GPS signals are easily jammed. One amusing approach would be to use GPS test equipment to generate signals appropriate for a different location (eg, Pyongyang) and beam them at the site to be DOS'd. 4. Conversely, an attacker could use the same test equipment to make it look like he's in the Pentagon, when he's actually in Kandahar. 5. GPS is based on the relative time delays of signals from different satellites. Since network lag of hundreds of milliseconds must be accepted, anyone who can see the same set of satellites as the location to be spoofed can separate the signals from the different satellites, modify the lags appropriately, and remix to generate a spoofed analog signal. -------- I sent these concerns to Denning, who replied that she would address them only under NDA, which I declined to enter. This sounds an awful lot like old wine in new bottles. Many of the same concerns arise. Peter Trei Disclaimer: The above represents only my personal opinions. > ---------- > From: John Young[SMTP:jya@pipeline.com] > Sent: Thursday, November 22, 2001 2:06 PM > To: cypherpunks(a)lne.com > Subject: Denning's Geo-crypto > > Time Magazine, November 26, 2001: > > Denning's pioneering a new field she calls geo-encryption. > Working with industry, Denning has developed a way to keep > information undecipherable until it reaches its location, as > determined by GPS satellites. Move studios, for example, > have been afraid to release films digitally for the same reasons > record companies hate Napster: once loose on the Internet, > there's little to stop someone from posting the latest blockbuster > DVD on the Web for all to see and download. With Denning's > system, however, only subscribers in specified locations -- > such as movie theaters -- would be able to unscramble the > data. The technology works as well for national security > as it does for Harry Potter. Coded messages that the State > Department sends to its embassies, for example, could only > be deciphered in the embassy buildings themselves, greatly > reducing the risk of interception. > > For now, Denning says, terrorists "may want to bring down > the power grid or the finance system, but it's still easier to > blow up a building." If she's right, it's due in large part to her.

1 0