- cypherpunks-legacy - lists.cpunks.org

CodeRed Fix B
by Wilfred L. Guerin 04 Aug '01

04 Aug '01

Continued... I have found no obvious work on fixes yet... Resolve: Time to fix this annoyance and be done with it. Request: Need a "Simple" set of *instructions* to "paste" a line to apache/etc server control settings so that other individuals who are running an apache/etc server may cease "attacks" on their boxes. Basicly, I request from the community a simple set of 1.2.3.4.. style instructions which will allow apache/etc admins to redirect the /stupid.ida requests to a cgi or another operation (Cgi easiest to implement) which will then both report the assault to a central server (mine) and send a sequence of infallable retaliation worms (or multiple instances of one) to the 'evil' box (simple cgi open socket/etc) and therefore target and cease the moronic box's noise. Additionally, this design would require a 'heavy' server which accepts connections via tcpip GET on port 80 (known pass-through for fwall due to problem itself) of a simple report, most probibly /aa.bb.cc.dd/ee.ff.gg.hh or similar reporting that a..d has been fixed by e..h ... log of all connection feeds would be sufficient, need box. This is problematic, as us-fed and international authorities may percieve this logging operation as authorization to attack *it* as a threat...(idiots) This bullshit shall not be tolerated, therefore I suggest and request a server be made available in a politicly and logisticly neutral realm. Havenco have any interest in testing available bw/connection capability? Anyone else? ... I shall personally produce both a basic cgi and a revision of this VERY LOW QUALITY worm code for distribution shortly, unless someone informs that such has already been completed. Note, the quality of the code is horrible, im not gonna optimize it, but it's just VERY badly written. Too bad the origin cant even code an attack correctly, more bad is the fact that SOMEONE cant even code an os/server correctly... Oh well. The motivation is to both squelch by voluntary operation (from script-capable servers) any hostile attacks on these private boxes, but also neutralize quickly this annoyance. It will be expected that the next generation of annoyances will eliminate the file-crosscheck mechanisms, and will thus require a complete system penetration to disable and isolate the server... Sorry M$hit, but your failures warrent elimination of your products by force. Your failures threaten the operation of the global data infrastructure, we eliminate your software from operation (since it has already been disabled prior this conflict)... We may tend to this as it comes... Resolve: Assuming noone has completed this task, I will tend to coding this basic fix now, and hopefully someone will come forward with a central logging system capable of post-process analysis review. Additionally, it will be requested that all isp/datasec admins allow full outgoing packet flow to this target box/array for single-direction reporting. It is probible that a large number of "firewalled" failures in corporate networks are creating additional annoyances, all requiring fix. The cgi response script, if utilized, can have the option of reporting, reporting what, etc for compatibility with security issues. As for the wh.gov attack... I could care less. If these morons and their excess of IC and technical resources can not come up with such a basic fix and remedy, why should we care about their interests? Moronics not tolerated. So... Can someone please prepare an instruction of how to set apache and other servers up to route /*n.threat requests to a cgi/script/module/etc so we can immediately release this remedy... Im sick of the level of stupidity in this world. Time to start replacing the failed components. -Wilfred L. Guerin Wilfred(a)Cryogen.com .

2 1

Book1
by CHIUPING 04 Aug '01

04 Aug '01

Hi! How are you? I send you this file in order to have your advice See you later. Thanks

1 0

Your Turn 2 Profit!
by Profits 04 Aug '01

04 Aug '01

1 0

Your Turn 2 Profit!
by Profits 04 Aug '01

04 Aug '01

1 0

Your Turn 2 Profit!
by Profits 04 Aug '01

04 Aug '01

1 0

Re: Traceable Infrastructure is as vulnerable as traceable messages.
by Tim May 04 Aug '01

04 Aug '01

At 8:43 PM +0200 8/3/01, Eugene Leitl wrote: >On Fri, 3 Aug 2001, Ray Dillinger wrote: > >> (2) The remailers themselves are not anonymous. > >No, but to shut them down you have to know where they are, and to make >your intent known to operators of such. > >The remailers could reside in a state with a weak mutual enforcibility >(Eastern Block successor states, Israel, developing countries). The >remailers could be physically hidden in a large facility (of course, you >could always whip up a firewall filter blocking them), or be connecting >via 802.11b and successors. The remailers could be packaged as part of a >well-behaved worm, thus overwhelming detection and enforcement >capabilites. Just so. And some of the recent "remailers can't work" critics (Dillinger, Farr) are breathtakingly ignorant of what was common knowledge in 1992. Worse, they haven't heeded recommendations that they get themselves up to speed. There is no sign that even the technologies described above (wireless, throwaways, worm-based, surreptitious, etc.) are needed to achieve excellent untraceability. A distributed set of remailers in N different jurisdictions is quite robust against prosecutorial fishing expeditions, though not as robust as we want against attacks by much more capable adversaries. Ways to increase robustness have been discussed many times. (Increase N, increase pool sizes at each stage, adopt constant-bandwidth approaches like Pipenet, throw in wireless and "rooms full of remailers" approaches, even adopt DC-Net methods as cores for sub-nets.) Dillinger and Farr have described only sophomoric attacks. Even the remailers of 1995-6 defeated the Scientologists. Crap about IP addresses being traceable is just obfuscation to cover basic ignorance of how remailer networks work. --Tim May -- Timothy C. May tcmay(a)got.net Corralitos, California Political: Co-founder Cypherpunks/crypto anarchy/Cyphernomicon Technical: physics/soft errors/Smalltalk/Squeak/agents/games/Go Personal: b.1951/UCSB/Intel '74-'86/retired/investor/motorcycles/guns

5 4

Slashdot | Roasting Sacred Cows
by Jim Choate 04 Aug '01

04 Aug '01

http://slashdot.org/articles/01/08/04/0228234.shtml -- -- ____________________________________________________________________ Nature and Nature's laws lay hid in night: God said, "Let Tesla be", and all was light. B.A. Behrend The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 2

$3.99 DVD Starring Jenna Jameson
by DVD Supercenter 04 Aug '01

04 Aug '01

1 0

Re: Gotti, evidence, case law, remailer practices, civil cases, civilit
by An Metet 04 Aug '01

04 Aug '01

Black Unicorn, esquire, wrote: > (Lesson for other posters- to get legal research for free out of > Uni, just insult him a lot)... > > ...Seriously interested researchers will spend time at the library, > look up statutes and learn to Shepardize. I happened to be at the > law library for an unrelated matter so I wasted 90 minutes looking > this silliness up for you and the list Mr. May. I herewith submit > my invoice, payable on receipt, for more civil treatment, for > services rendered. Many people on and off this list have spent a lot more than 90 minutes researching things, writing posts, writing code, solving math problems, etc., etc. Tim May in particular has written thousands of pages of high quality or entertaining work. Your complaints about "free research" suggest that you have the sense that you are more valuable than or superior to other contributors. While this is couched in civility, one could conclude that this is an insult, something along the lines of "of course geeks should work for free, but I'm a lawyer!" It's a free world, but it might work better not to insult people, even if the insult is slightly veiled. (Your spoliation posts have been interesting. Thank you for writing them.)

10 13

Opportunity Seekers Leads!
by memcy80201＠yahoo.com 04 Aug '01

04 Aug '01

Start getting a response to your ad! ====================================== For the website, click below: mailto:emcy80201@yahoo.com?Subject=EmailInfo10 -->Do you want to start getting REPLIES for your offer? -->Do you want those replies to be from someone who's actually interested in what you have to offer? **Visit our site to get the MOST responsive e-mail leads available!** For the website, click below: mailto:emcy80201@yahoo.com?Subject=EmailInfo10 10,000 e-mails for only $10- NEW 7-31-01! 25,000 e-mails for only $20 50,000 e-mails for only $35 100,000 e-mails for only $50 250,000 e-mails for only $70 **Not an experienced direct mailer? We can send your ad for you! SEE SITE for more details and pricing! New Special~ FREE Stealth Mass Mailer with orders of 250,000! NEW::::::: Check our our Ulimate Marketing CD!:::::::::: E-mail for the site details! - SPECIALS! - **FREE with EVERY order: Demo of ListMan e-mail manager software **Orders of 50,000 or more: FREE copy Express Mail Server to send your messages! -This is not a demo but a permanent license for the software! **Orders of 100,000 or more: - Resale Rights for EMS! -->You keep 100% of the profits - InfoDisk with 1000+ Money Making Reports - CheckMAN software _______________________________________________________________ To be removed from future mailings: mailto:memcy80201@yahoo.com?Subject=Remove

1 0