- cypherpunks-legacy - lists.cpunks.org

Re: Schneier on Stego, Dead Drops, bin Laden
by Adam Back 15 Oct '01

15 Oct '01

Bruce writes about uses of steganography as digital dead drops. But he also claims that there are no business uses for steganography. I don't think this claim is valid. There are business scenarios where traffic analysis can leak information about potential mergers, investment analysis activity and so on. Steganography is just a valid mechanism to hide traffic as cover traffic. Stego in fact offers marginally higher security against traffic analysis because it will not be evident that the two parties exchanged information, nor even had the opportunity to. The opportunity to have communicated would be evident if they were using just cover traffic. Apart from business uses there are uses for civil rights workers, and generally members of the public who choose to retain association privacy. I don't think we should be giving the press and government ammunition in their arguments to ban various forms of crypto, especially for forms of communication which may help civil rights workers, and which infringe on the tools available to the individual to partially regain his privacy be that confidentiality or of association. Adam On Tue, Sep 25, 2001 at 09:42:53AM -0700, Subcommander Bob wrote: > Monday September 24 01:15 PM EDT > > Terrorists and steganography > By Bruce Schneier, Special to ZDNet > > Why can't businesses use this? The primary reason is that > legitimate businesses don't need dead drops. I remember one company > talk about a corporation embedding a steganographic message to its > salespeople in a photo on the corporate Web page. Why not just send > an encrypted e-mail? Because someone might notice the e-mail and > know that the salespeople all got an encrypted message. So send a > message every day: a real message when you need to, and a dummy > message otherwise. This is a traffic analysis problem, and there are > other techniques to solve it. Steganography just doesn't apply here.

2 1

Re: stupid anthrax q: would microwaving your snail mail help?
by auto301094＠hushmail.com 15 Oct '01

15 Oct '01

-----BEGIN PGP SIGNED MESSAGE----- Sunder wrote: > Would it help to microwave your mail if you don't know where it came from > and you're sure it doesn't contain an objects? i.e. it's not a CD you've > ordered from Amazon. :) Whatever happened to simply not opening unexpected letters or packages? If you think it might be a problem, maybe getting mail delivered to a drop and discreetly popping on gloves and HEPA filter mask before you open your box would be better than having it delivered to your house. I'm not particularly worried, but having a mail drop box is just sound policy, privacy-wise. > Do anthrax spores get cooked enough by microwaves to be killed, or are they > too dry in spore form to be nuked? Here's a bit on dealing with anthrax from the American Public Health Association's Control of Communicable Diseases Manual: 3) Concurrent disinfection: Of discharges from lesions and articles soiled therewith. Hypochlorite is sporicidal and good when organic matter is not overwhelming and the item is not corrodable; hydrogen peroxide, peracetic acid or glutaraldehyde may be alternatives; formaldehyde, ethylene oxide and cobalt irradiation have been used. Spores require steam sterilization, autoclaving or burning to ensure complete destruction. Fumigation and chemical disinfection may be used for valuable equipment. Terminal cleaning. 4) Quarantine: None. 5) Immunization of contacts: None. 6) Investigation of contacts and source of infection: Search for history of exposure to infected animals or animal products and trace to place of origin. In a manufacturing plant, inspect for adequacy of preventive measures as outlined in 9A, above. As mentioned in 9B1, a potential bioterrorist source may need to be ruled out for all human cases of anthrax, especially for those cases with no obvious occupational source of infection. 7) Specific treatment: Penicillin is the drug of choice for cutane- ous anthrax and is given for 5-7 days. Tetracyclines, erythromycin and chloramphenicol are also effective. The U.S. military recommends parenteral ciprofloxacin or doxycycline for inhalational anthrax; the duration of therapy is not well defined. 8) Responders can be protected from anthrax spores by donning splash protection, gloves and a full face respirator with high-efficiency particle air (HEPA) filters (Level C) or self-contained breathing apparatus (SCBA) (Level B). 9) Persons who may have been exposed and are potentially contaminated should be decontaminated with soap and copious amounts of water in a shower. Usually no bleach solutions are required. A 1:10 dilution of household bleach (i.e., a final hypochlorite concentration of 0.5%) should be used only if there is gross contamination with the agent and an inability to remove the materials through soap and water decontamination. The use of bleach decontamination is recommended only after soap and water decontamination, and the solution should be rinsed off after 10 to 15 minutes. 10) All persons who are to be decontaminated should remove their clothing and personal effects and place all items in plastic bags, which should be labeled clearly with the owners name, contact telephone number and inventory of the bags contents. Personal items may be kept as evidence in a criminal trial or returned to the owner if the threat is unsubstantiated. 11) If the suspect envelope or package associated with an anthrax threat remains sealed (not opened), then first responders should not take any action other than notifying the FBI and packaging the evidence. Quarantine, evacuation, decontamination and chemoprophylaxis efforts are NOT indicated if the envelope or package remains sealed. For incidents involving possibly contaminated letters, the environment in direct contact with the letter or its contents should be decontaminated with a 0.5% hypochlorite solution following a crime scene investigation. Personal effects may be decontaminated similarly. 12) Technical assistance can be provided immediately by contacting the National Response Center at 800-424-8802 or the local Weapons of Mass Destruction Coordinator of the FBI. -----BEGIN PGP SIGNATURE----- Version: Hush 2.0 wl8EARECAB8FAjvKGM0YHGF1dG8zMDEwOTRAaHVzaG1haWwuY29tAAoJEKadvsVlUK4P ZSwAmgLhRWGtImfCeUkdwOqtYWrFx2ocAJ9SYerz0cLt4pEJmp2XOl3e/PL6yQ== =y/kX -----END PGP SIGNATURE-----

4 3

Newsletter 15.10.01
by andre.goldenstein＠aral.net 15 Oct '01

15 Oct '01

------------------------------------------------------------------------------ You are getting this Newsletter because of our existing business relationship, you have subscribed to our newsletter or because of your price requests. For removal instructions see bottom of this newsletter. ------------------------------------------------------------------------------ Dear Sirs, we would like to offer you today as follows -subject is to prior sales-: Siemens C45 orignal and brandnew!!! 500 pcs DEM 305 Siemens S45 1000 pcs DEM 521 Siemens S40 800 pcs DEM 445 Siemens S35 silver edition 1000 pcs DEM 309 Siemens C35 silver edition 1000 pcs DEM 195 Nokia 8210 euro spec, 1000 pcs DEM 428 Nokia 3310 original 500 pcs DEM 265 Ericsson T29 original 1000 pcs DEM 305 Ericsson T28 eurospec 3 pin plug 1000 pcs DEM 230 Sony Z5 original 700 pcs DEM 506 Sony J70 original 500 pcs DEM 290 Sony J5 original 200 pcs DEM 255 Motorola V66 600 pcs DEM 756 Samsung A300 500 pcs DEM 583 Motorola V50 light 300 pcs DEM 409 PSION Oganizers: Psion Revo Plus 16MB english version 3000 pcs DEM 530 min order 1000 pcs Also 966 pcs ORIGINAL english Nokia 6210 manuals for DEM 2!!!!!!!! Siemens SL45 car kit comfort 100 pcs DEM 161 Siemens SL45 voice car kit 50 pcs DEM 289 Siemens S35 car kit comfort 250 pcs DEM 161 FUJI Digital Cameras: FUJI Fine Pix 1300 200 pcs DEM 410 FUJI Fine Pix 2300 200 pcs DEM 551 Fuji Fine Pix 2400z 200 pcs DEM 820 Fuji Fine Pix 40i blue or silver 500 pcs DEM 998 Fuji Fine Pix 4700z 100 pcs DEM 1383 Fuji Fine Pix 6800z 100 pcs DEM 1334 Fuji Fine Pix S1 pro 50 pcs DEM 5767 We also can offer the following Siemens Gigaset DECT phones: Siemens Homestation 200 pcs DEM 169 Siemens Gigaset 3010 micro 1000 pcs DEM 225 THE NEW SIEMENS GIGASET 4000 SERIES IS NOW AVAILABLE!!!!!!!! Please ask for prices. FOB Düsseldorf/Germany, subject is to prior sales. Best regards Andre Goldenstein Aral Mobilfunk Partner KMT GmbH Tel +49 2102 8747252 Fax +49 2102 8747269 mobile +49 174 9200555 =============================================================== If you have received this message in error, or wish not to be included on future mailings please forward your e-mail address of which we have sent this message to. If you receive this message through another e-mail address we have no way of removing you from our list unless you provide the original e-mail address contained in the full header of the e-mail message. If this information has been removed by your server(s) we cannot control this and, again, have no way to remove your e-mail address. Simply reply to this message with "REMOVE" in the subject line. We wish to fully comply with your wishes and all applicable state and federal laws. Your cooperation and patience in this matter are very much appreciated. Thank You! ===============================================================

1 0

Roadblocks to Find Unlicensed Drivers LEGAL
by Optimizzin Al-gorithm 15 Oct '01

15 Oct '01

http://ap.tbo.com/ap/breaking/MGAH7TBEUSC.html WASHINGTON (AP) - Ohio drivers lost a Supreme Court appeal Monday that asked whether police roadblocks to check for unlicensed drivers violated the Constitution's guarantee against unreasonable searches or stops. The court, without comment, declined to hear the case of two Dayton men cited for driving without licenses in 1998. "We're pleased with the decision," said Dayton city prosecutor Deirdre Logan. "These types of checkpoints don't violate the Constitution. We intend to do more checkpoints." Police generally need a court warrant or a reason to suspect someone of a crime before detaining them for several minutes. But in past rulings, the nation's highest court allowed police to set up sobriety checkpoints aimed at randomly detecting drunken drivers and border roadblocks to intercept illegal immigrants. In both instances the court found that benefits to public safety and order outweighed the inconvenience and loss of privacy suffered by motorists. Last year, the court invalidated random checkpoints intended to catch drug criminals. Law enforcement in and of itself is not a good enough reason to stop innocent motorists, the 6-3 majority concluded in that case, called Indianapolis v. Edmond. The court has not ruled squarely on the question of whether catching license violations is reason enough to erect a roadblock. Licenses are checked at sobriety checkpoints, but catching drunks is the main aim. In the Dayton case, Magus D. Orr and Andre L. Smith were ticketed in June 1998, when police ran several checkpoints throughout the city. The men claim the stops were unconstitutional because police had no particular reason to suspect one motorist over another. "The idea that government agents may seize people at checkpoints without having any suspicion of wrongdoing it very un-American," lawyers for the two men wrote in asking the Supreme Court to hear the appeal. Dayton police stopped cars according to a prearranged pattern - say every 10th car or every fourth - and a sign posted 100 yards away warned drivers they might be stopped. Police asked for a license, and if the driver had none the officer ran a computer check. For most people, the stop lasted no more than two minutes, police said. The city argued that roadblocks improved public safety by catching drivers who are more likely to pose a danger, and who would not be immediately recognizable to police any other way. "Checkpoints allow detection of unlicensed or unqualified drivers before some intervening event, such as when an accident or injury to the public occurs," lawyers for the city wrote in urging the Supreme Court not to review the men's appeal. Approximately one in eight drivers in Dayton had no valid license, and about 30 percent of traffic citations issued in the city were for license violations, the city claimed. The Ohio Supreme Court unanimously upheld the roadblocks in May. The case is Orr v. Ohio, 01-253.

1 0

RE: How not to be seen (Re: RIAA Safeweb Proxy ID)
by Trei, Peter 15 Oct '01

15 Oct '01

> Morlock Elloi[SMTP:morlockelloi@yahoo.com] wrote: > > > > This is totally off-topic, but consider this: the way that a Proxy > > cache works (not just Squid, any cache) is that it stores all of the > > requested objects (web pages and files, in this case) on a series of > > local servers. Then, when a user requests them, it serves them off of > > It boggles one's mind - the idea that data will _not_ be collected just > because > someone says so. Using any concentration point to "anonymize" http access > is > like frequenting the facility marked "SAFE PLACE FOR DRUG DEALING" in huge > red > letters to cater for one's need for untaxed molecules. > > At best it can shield from naive end users - unless they get pissed like > JYA. > The implied asumption above, of course, is that Safeweb narcs to their investor, the CIA, and so on to the US Government. Actually, depending on your threat model, Safeweb can provide a very useful service. One of the things a Safeweb proxy does is SSL all your traffic between your browser and Safeweb. Even URLs are encrypted. The upshot of this is that if your worry is not a TLA, but rather, a snoopy employer watching the firewall to see who visits monster.com, safeweb provides a good shield. If you're asked why you use it, you can point out that it allows you to research competitors without tipping them off. [For those curious, I've just survived the current round of layoffs at RSA. I'm curious as to whether other RSA employees on the list have (you know who you are). Peter Trei

1 0

PRL Article Suggests Quantum Fingerprinting Of Data
by Jim Choate 15 Oct '01

15 Oct '01

http://unisci.com/stories/20014/1015016.htm -- -- ____________________________________________________________________ The people never give up their liberties but under some delusion. Edmund Burke (1784) The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Biometrics/Letter to the Economist
by Adam Shostack 15 Oct '01

15 Oct '01

October 6th, letters section: > SIR - Those about to invest in iris-scanning security technology > will be disappointed to learn of recent developments in the > treatment of glaucoma ("Watching you ", September > 22nd). Prostaglandin analogues are rapidly gaining popularity in the > treatment of this blinding eye condition that affects 1% of the > population. An innocuous side-effect of this drug is to cause a > change in both iris colour (a darkening) and morphology. This change > in susceptible people, usually Europeans, occurs over one to two > years. Apart from rendering iris scanning potentially useless for > these people, unscrupulous types without glaucoma may be tempted to > use the drugs to "change" identity. > > Simon Longstaff > Consultant ophthalmic surgeon > Sheffield, South Yorkshire http://www.economist.com/printedition/displayStory.cfm?Story_ID=806111&CFID… -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Get results
by Steve Schear 15 Oct '01

15 Oct '01

I've created a non-PC Qaeda "ad" suitable for Forbes or Fortune (large .jpg) The first 10 callers get one ;-) steve

2 1

Re: [EMED-L] Contagious vs Non-Contagious Biological Warfare
by measl＠mfn.org 15 Oct '01

15 Oct '01

On Mon, 15 Oct 2001, Oboegal Janie wrote: > Dear Willie, > I look at it this way. The United States of America sends billions of dollars > into the Middle East to keep the oil tap on "open." If I have a bad case of > Ebola and don't feel well, then I probably won't fill up my tank in my new > Honda CR-V...you know. Now...I suggest that someone over there has figured > this out, and it may be the guy who turns the oil faucet from *on* to *off.* > I really don't think this oil SOMMELIER is about to allow his crop to rot in > the fields, ravaged by some foreign bacteria from Afganistan. We are talking > BIG BUCKS, and I don't think the leadership of the Middle East will give it > up for the "afterlife." > > Janie > Atlanta > > To unsubscribe, send the command "SIGNOFF EMED-L" to LISTSERV(a)ITSSRV1.UCSF.EDU And this, my dear Janie, is one of the very attitudes that got us into this mess in the first place. Just because you are a socioeconomic flake whose every waking moment is consumed by the passion of your "toys", does not mean that the rest of the world follows in your twisted footsteps For one, your comments above imply that the Afghani's actually *have something to lose*. I think you need to reexamine the premise. Second, you are assuming that your value systems can be reliably projected onto other societies. Bzzzt. This type of societal narcissism is where the current fad treatment with spoorozites originated... Step back from all the jingoist rhetoric a little, and examine your underlying issues. Between you and "Dr." Willie, this list is a microcosm of Amerikka - a last great bastion of hate and predjudice: certainly not the kind of place people want the medical practitioners "hanging out". -- Yours, J.A. Terranson sysadmin(a)mfn.org If Governments really want us to behave like civilized human beings, they should give serious consideration towards setting a better example: Ruling by force, rather than consensus; the unrestrained application of unjust laws (which the victim-populations were never allowed input on in the first place); the State policy of justice only for the rich and elected; the intentional abuse and occassionally destruction of entire populations merely to distract an already apathetic and numb electorate... This type of demogoguery must surely wipe out the fascist United States as surely as it wiped out the fascist Union of Soviet Socialist Republics. The views expressed here are mine, and NOT those of my employers, associates, or others. Besides, if it *were* the opinion of all of those people, I doubt there would be a problem to bitch about in the first place... --------------------------------------------------------------------

1 0

Spin the wheel 24568
by garyg＠haier.com 15 Oct '01

15 Oct '01

1 0