- cypherpunks-legacy - lists.cpunks.org

CDR: Earn $235 - $760 Or More Weekly At Home Guaranteed!
by Income Opportunity 23 Nov '00

23 Nov '00

Earn $235 - $760 Or More Weekly Home Workers Needed Nationwide Hundreds of companies are currently looking for telecommuters. There is no experience needed and you can start right away. This is NOT your average get-rich-quick program. In fact, none of the companies require any special fees to get started. Many offer free training. Start earning money in your spare time. You set the hours, you decide how much you want to make. Email home4work(a)earthlink.net with "Work At Home" in the subject heading for complete details. Best Wishes Home Workers Directory P.S. Opportunity available only to U.S. Residents over the age of 18. 3VABW2E5QW

1 0

CDR: Goy Any Good Kid Porn sites
by Charlene 23 Nov '00

23 Nov '00

I wanna see if u had any good free Kid porn sites-REPLY TO chrisbrigg(a)yahoo.com thanks

2 1

CDR: ^phdhweqjhe `dpeq`...
by Ivan 23 Nov '00

23 Nov '00

Óâàæàåìûå Äàìû è Ãîñïîäà! Íàø ñåðâåð ïðåäëàãàåò Âàì Þðèäè÷åñêèå àäðåñà. Àäðåñà ïðåäíàçíà÷åíû äëÿ ðåãèñòðàöèè ïðåäïðèÿòèé â ãîðîäå Ìîñêâå. Íàøè ñïèñêè ïîñòîÿííî ïîïîëíÿþòñÿ íó è êîíå÷íî æå óáûâàþ. Äàæå ðàáîòà íà ïðÿìóþ ñ ñîáñòâåííèêàìè íå âñåãäà 100% ãàðàíòèÿ. Âîò ïî÷åìó ìû äàåì ãàðàíòèþ íà àäðåñà êóïëåííûå ó íàñ. Óñëîâíî ãîâîðÿ, ñðîêîì íà 45 äíåé, â ñëó÷àå èñòå÷åíèÿ ýòîãî ñðîêà ìû âñå ðàâíî ðàññìàòðèâàåì âîïðîñ êîìïåíñàöèè ïîòåðü. Â ãàðàíòèþ âõîäèò: 1. Âîçâðàò äåíåã. 2. Îáìåí íà äðóãîé àäðåñ. 3. Ðåøåíèå âîïðîñà ïðîõîæäåíèÿ (åñëè åñòü òàêàÿ âîçìîæíîñòü). Àäðåñà, èìåþùèåñÿ â íàëè÷èè: 9 - ã. Ìîñêâà, ßêîâîàïîñòàëüñêèé ïåð., ä. 11/13, ñòð.1 - ? - ñîáñòâåííèê 9 - 109147, ã. Ìîñêâà, óë. Ìàðñèñòñêàÿ, ä. 20, ñòð.8 - ? - ñîáñòâåííèê 10 - 123056, ã. Ìîñêâà, óë. Á. Ãðóçèíñêàÿ, ä.60, ñòð.1 - 130 - ñîáñòâåííèê 13 - ã. Ìîñêâà, Ïðèíèøíèêîâ ïåð., ä. 19à - 100 14 - ã. Ìîñêâà, óë. 3-ÿ ßìñêîãî ïîëÿ, ä. 18, ñòð.1 - 100 19 - 105484, ã. Ìîñêâà, óë. 16 Ïàðêîâàÿ, ä. 21, êîðï.1 - ? - ñîáñòâåííèê 20 - 111524, ã. Ìîñêâà, Ýëåêòðîäíàÿ óë., ä. 14, ñòð. 2. - 120 - ñîáñòâåííèê 21 - 109428, ã. Ìîñêâà, 1-é Êàçàíñêèé ïðîñåê, äîì 4à. - ? - ñîáñòâåííèê 21 - ã. Ìîñêâà, Ðÿçàíñêèé ïð-ò., ä. 4, ñòð. 4 - 100 22 - 111024, ã. Ìîñêâà, Ïåðîâñêèé ïðîåçä, ä. 2, ñòð.3 - 100 23 - ã. Ìîñêâà, óë. Ñàéêèíà, ä. 9/1 - 100 25 - 115533, ã. Ìîñêâà, óë. Âûñîêàÿ, ä. 3 - 140 - ñîáñòâåííèê 25 - 113114, ã. Ìîñêâà, óë. Äåðáåíåâñêàÿ, ä. 1/2, ñòð.8 - 110 37 - ã. Ìîñêâà, óë. Çàãîðüåâñêàÿ, ä.10, ñòð.2 - 100 Â ñëó÷àå èçìåíåíèÿ íàøåãî òåëåôîíà èëè àäðåñà Âû ìîæåòå çàéòè íà íàøó ñòðàíè÷êó è óçíàòü íóæíóþ, ñâåæóþ äëÿ Âàñ èíôîðìàöèþ. WWW: http://address095.bizlnd.com E-mail: address(a)over.ru Ãîðÿ÷àÿ ëèíèÿ: 798-1972 (ñ 10.00 äî 18.00). P.S. Ïðîñèì èçâèíåíèÿ çà òàê íàçûâàåìûé ñïàì. Åñëè äàííàÿ èíôîðìàöèÿ íå ïðåäñòàâëÿåò äëÿ Âàñ öåííîñòè, ïðèøëèòå íàì ïèñüìî íà admin_suport(a)usa.net ñ óêàçàíèåì Âàøèõ ïî÷òîâûõ ÿùèêîâ.

1 0

CDR: link padding & traffic analysis (Re: ZKS -- the path to world domination)
by Adam Back 22 Nov '00

22 Nov '00

Obfuscation writes: > Adam Back writes: > > It's as strong as we could make it. Private interactive > > communications are a hard problem. As Wei and I were discussing in > > the "PipeNet protocol" thread in the last couple of weeks, there are 4 > > main properties you're trying to optimise over: > > > > 1. security (resistance to traffic analysis) > > 2. performance > > 3. bandwidth efficiency (cost) > > 4. DoS resistance > > > > It appears pretty hard to get more than one of these properties with > > theoretical optimality. PipeNet gets the first one with good > > theoretical security, but none of the others are good. Freedom makes > > an engineering tradeoff which does reasonably on all 4. > > What about adding link padding? Can you say something about why > this doesn't help, or costs too much? So the attack you described without link padding involves the attacker either: - eavesdropping on all links into and out of the network (untargetted attack) - or eavesdropping on a targetted or suspected user - and then eavesdropping on all exit nodes - or, on selected web sites you think the user visits - or trying to work backwards from an exit node or web site to a user - by eavesdropping on entry nodes If the attacker can observe those things, he can observe the effects of network congestion because freedom is not synchronous. (Making freedom synchronous would adversely affect performance and make it much more vulnerable to DoS.) The attacker therefore already has the necessary taps to match up congestion patterns between the client to first hop link and the exit node or web site request. If congestion is too noisy or uniform to discern anything, he can go create some selective congestion by ping flooding (or inducing more plausibly deniable types of congestion) on that link. And observe the effects. He can very easily hide the source of his congestion attempts by creating it using the freedom network. The attacker can also substitute the need for extensive network taps by measuring congestion inside the freedom network to narrow down where a user is coming from. Any unpriviledged user can measure congestion in real time using the freedom protocol by creating routes over all combinations of hops, pairs of hops and triples of hops. This may allow a user to work backwards from an exit node to an entry node with only one network tap. So the main cost increase for the attacker of link padding is the complexity of the analysis. But it doesn't add many bits. It would probably be easiest to do what the Onion Routing analysis used: plot some graphs of the timing data. You would probably be able to visually see the traffic analysis patterns. Automating the analysis would be a little harder due to the noise. Next the cost of link padding. Clearly it costs. ISPs use "bandwidth aggregation" figures to estimate their bandwidth requirements based on online users. This figure means what percentage of their modem bandwidth a user uses while online (not 56 kbits on a 56kbaud modem because the user pauses between downloads etc). This figure varies and changes over time. With a bandwidth aggregation factor of 6:1 it would cost 6 times as much bandwidth. On top of that you don't want to change bandwidth utilisation in response to demand or you leak information about routes opening and closing. So you need to have some surplus padding available for users to use as they open connections. So how does one fix it if link padding alone doesn't work? As I suggested doing this efficiently and practically is an open problem. PipeNet style synchronous works, or latency padding (which comes to the same thing), but as discussed earlier these have pretty severe performance implications. So the challenge is, to find a more efficient hybrid or alternate design which retains as much as possible PipeNet or DCNet security properties, but improves performance and reduces bandwidth costs, if such networks exists. Adam > Without it, someone monitoring your system can see which ZKS node you are > talking to. If they then monitor that node they can see that whenever > you send an incoming message, there comes an outgoing message, so they > can see the next node you are talking to, and so on. > > With link padding, they couldn't do this. They'd have to interrupt > your data stream and then monitor *all* the outgoing traffic from *all* > the ZKS nodes and see which one got interrupted. This sounds like a > much more expensive attack. It is an active attack as well, while the > previous one is passive and could be done by a Carnivore system.

1 0

CDR: Get Paid To Read Email!
by monodemo＠21cn.com 22 Nov '00

22 Nov '00

This is awesome! Yan Jia here! I just had to tell you about SendMoreInfo.com! You get paid to read email! They send you information about things you are interested in and they pay you to check it out! Here's the link: http://www.sendmoreinfo.com/id/1751906 I know you are going to love this web site! Talk to you soon!

1 0

CDR: Special FREE membership offer Win a $100 Shopping Spree (ADV) -YHYI
by Abundant.Future＠cyberpass.net 22 Nov '00

22 Nov '00

All our mailings are sent complying to the proposed United States Federal requirements for commercial e-mail: Section 301 Paragraph (a)(2)(C) of S. 618. Please see the bottom of this message for further information and removal instructions. Hi, This is a Special FREE membership offer to the unique Post-Launch Program of a leading Internet Company. With our Post-Launch program, you can: * Receive 30-50% discounts off retail prices at over 75 brand name stores * Business opportunity building towards high residual income (guaranteed minimum of $10,000 per month) * Extensive free training sites and internet resources * 6000+ VIP members working to build your downline each month. * Be part of an Internet Company that is growing about 3 times in size every 60 days * Complete membership support, working towards your business success How would you like an existing downline and team in place to assist you to develop a network BEFORE you even invest any money? YOU could easily have 500 members under YOU in a month!! You have nothing to lose and potentially a lot to gain!!! To receive your Special FREE membership to the Post-Launch, just email mailto:abundantfuture@yahoo.com?subject=Post-Launchgl2111 In the Message, enter your First and Last Names. We will immediately confirm your position and enter you into a lucky draw to win a $100 shopping spree. What our members are saying: Richard: New Member I count myself as a veteran internet marketer having been in the business for 9 mths now. I think the club is one of the best programs I have seen and I have a knack for choosing programs that work. Cathy: Director This is one of the fastest growing clubs that I have ever seen! Everyone here is a TEAM player and you have the help and support of everyone in the organization. Jacquie: Director I actually joined just for the great discounts and to see what it was like. But then I noticed that all these people were joining the Club and then even more people and then even more!! I realized right away (like 1 hour) that I did not want to miss any opportunity that was offered to me, so I signed up. I secured my spot and sure enough people kept signing up and they were all placed under me. You will not find the same opportunity to change your future or the kind of support that the people in the Club will give you anywhere else. The Club is the best opportunity there is. Period. I am convinced of that. NOTHING.....NOTHING...NOTHING COMPARES!!!!! For additional information regarding the proposed United States Federal requirements for commercial e-mail: Section 301, Paragraph (a)(2)(C) of S. 618 please see: www.senate.gov / ~murkowski / commercailmail / EMailAmendText.html Per Section 301, Paragraph (a)(2)(C) of S. 618, further transmissions to you by the sender may be stopped at NO COST to you by emailing mailto:abundantfuture@yahoo.com?subject=REMOVEgl2111

1 0

CDR: Complete Guidebook and Workplace Violence Prevention Video series
by WBNixon＠aol.com 22 Nov '00

22 Nov '00

Good Morning! I am Barry Nixon, Executive Director, The National Institute for the Prevention of Workplace Violence and am creating a workplace violence superstore on line with the intent to have a wide array of workplace violence prevention products for sale. Your video series would be an excellent addition to the online superstore so could you please send me information about the steps necessary to make this happen. I can be contacted via email at WBNixon(a)AOL.com, telephone at 949-770-5264 and fax 949-597-0977.

3 2

CDR: "you need killing"
by An Metet 22 Nov '00

22 Nov '00

Reading back over my collection of cypherpunk list mail from 1994, I came across this in a message from Tim May: "(I don't often dwell on [the benefits of crypto-anarchy] on this list, partly because I already have in the past, and in the "Crypto-Anarchist Manifesto" and other rants at the soda.berkeley.edu archive site, and partly because the Cypherpunks list is somewhat apolitical...apolitical in the sense that we have libertarians, anarcho-syndicalists, anarcho-capitalists, Neo-Pagans, Christian Fundamentalists, and maybe even a few unreconstructed Communists on the List, and espousing some particular set of beliefs is discouraged by common agreement.) Ah, how things have changed.

2 1

CDR: Re: ICANN should approve more domains, from Wall Street Journal
by Bill Stewart 22 Nov '00

22 Nov '00

I was disappointed that the IETF Ad Hoc Committee wasn't able to generate their political clout to get their earlier 7-new-TLD plan implemented a couple years ago. However, one strong similarity between their plan and ICANN's is that both first rounds of new TLDs were pretty lame, and if this wasn't done deliberately, it should have been, because it's a Good Thing. It's how you get a practice round before getting to the far more controversial valuable namespaces, like .inc, .ltd/gmbh/sa, .mp3, .sex and .microsoft. The limitations on the number of TLDs aren't particularly technical; if you allow an infinite number of them, you replicate all the problems with .com under . , and don't have a level of indirection available to fix them with. It's worth going slowly. The more important questions are the openness of the namespaces; I'm glad that ICANN rejected the WHO's .health and Nader's .union, because they allow political groups to decide who can join based on their political correctness positions (would WHO allow .accupuncture.health? .joes-herbal-remedies.health? .snakeoil.health? .homeopathy.health? Nader's group wouldn't allow a company-dominated union, and might even have trouble with the Wobblies.) The $50K application fee was pure exploitation of their position; I don't think they're making any excuses for that. The big problem is that it limits the kinds of TLDs that can be applied for to commercial players - experimental namespace use like .geo is valuable, and hard to get funding for. And like taxi monopoly medallions in New York City, once you've charged somebody big money for their chance, it's politically difficult to charge somebody else less or nothing later. Bill Stewart At 08:58 AM 11/20/00 -0800, Declan McCullagh wrote: >[My op-ed, below, appeared in today's paper. An HTML-formatted copy is at: >http://www.cluebot.com/article.pl?sid=00/11/20/1714249 --Declan] > > The Wall Street Journal > Monday, November 20, 2000 > > ICANN Use More Web Suffixes > By Declan McCullagh > Op-Ed > ..... > One reason is that the new suffixes approved by the Internet > Corporation for Assigned Names and Numbers are woefully inadequate. > Instead of picking GTLDs that would meet market demand, ICANN decided > to approve the lackluster set of .aero, .biz, .coop, .info, .museum, > .name, and .pro instead. (If these were proposed brand names, you can > bet most would fail the first focus group test.) Any more additions, > ICANN's board members indicated, would not be approved until late > 2001. > > This is absurd. Technology experts occasionally wrangle over how many > GTLDs the current setup can include, with the better estimates in the > millions, but few doubt that the domain name system can handle tens of > thousands of new suffixes without catastrophe. .... > Another problem is a predictable one: Politics. In the past, some of > ICANN's duties had been handled by various federal agencies. Unlike > what some regulatory enthusiasts have suggested, however, the solution > is not encouraging the government to again become directly involved in > this process. A wiser alternative is a complete or near-complete > privatization of these functions. Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

2 1

CDR: Missouri AG needing postnatal abortion
by Anonymous 22 Nov '00

22 Nov '00

Seems this AG needs to be whittled down to size. Online License Peddler Shut Down Offered $350 International Permits to Bad Drivers, Officials Say Nov. 17, 2000 By Joe Beaird JEFFERSON CITY, Mo. (APBnews.com) -- The attorney general of Missouri has persuaded an Internet service provider to shut down a Web site that sells international drivers licenses to people, regardless of their driving history. "Drivelegal.com is now officially road kill," said Scott Holte, a spokesman for the Missouri Attorney Generals Office. "Theyre off the Internet right now. We got their server to pull the plug on them." Drivelegal.com, which was taken off the Internet on Thursday, allegedly issued international licenses for $350 to drivers with revoked or suspended licenses. "Its patently illegal for them to be promoting this as a way for people with DUIs driving under the influence convictions and other things to get around the law," Holte said. Although the Web site is based in California, the Missouri Attorney Generals Office took action against the operation because it claimed that Drivelegal.com was making false claims that violated Missouris consumer protection laws. Threat of jail, fines Drivelegal.com says on its Web site that international drivers licenses could be used to drive legally in any state or province. But Missouri contends that the IDL is only a supplemental permit to be used in conjunction with a government-issued one. "Make no mistake about it," Attorney General Jay Nixon said in a statement. "Anyone whose license has been suspended or revoked who buys one of these IDLs from Drivelegal.com will not only be $350 poorer, they will be running the risk of jail time and fines for operating a vehicle without a valid license." Few consumers had complained about the Web service in Missouri. The investigation actually started in response to a meeting with officials in the states division of motor vehicles. Owner: Im just following the law Tim Thorn, who runs Drivelegal.com, told APBnews.com that his business was legal and questioned why Missouri was attacking it. "Im just following the law as its written," Thorn said. "So I dont know really know what hes going on about. ... Ive been doing this for years without a problem." Even after getting Drivelegal.com offline, Nixons office is still seeking a temporary injunction to keep Drivelegal.com from operating in Missouri and is hoping to permanently ban them from the state. No court dates have been set. Thorn, who lives in Southern California, could face civil penalties of up to $1,000 for each time his company violates Missouri law. Reached after the shutdown, he was despondent. "I just found out," he told APBnews.com. "It sucks. I didnt do anything wrong." No recourse Internet service provider Hypermart sent Thorn an e-mail recently telling him he had 48 hours to remove his site from their servers. "I cant even log in to download materials," Thorn complained. Because service providers write detailed terms of service that allow them to terminate their user contracts for many reasons, Thorn said he did not believe he would succeed in fighting the shutdown order. "I dont really have any recourse," he said.

4 3