- cypherpunks-legacy - lists.cpunks.org

CDR: Re: Carnivore All-Consuming
by David Honig 20 Nov '00

20 Nov '00

At 10:34 PM 11/19/00 -0500, Jim Dixon wrote: >> A PC, using off-the-shelf HW, is capable of filtering a full 100 Mbps link >> (144K packets/sec) as demonstrated by the BlackICE products >> http://www.networkice.com/html/blackice_sentry.html > >First, like any other manufacturer's claims, these should be treated >with some skepticism. > >Second, this is an intrusion detection system. I suspect that they >are looking for something simpler than what Carnivore is trying to >detect. Run a raw tcpdump on a machine with 2 cpus, maybe filter online with something simple (like IP addr) and reconstruct offline. You're not analyzing on line, you're recognizing addresses and DMAing buffers which are flushed to nonvolitile storage. Re: monitoring an OC-XXX with overt access is just a matter of how much you can pay for fast electronics. Take a look at the Caida.org folks' work on monitoring backbones. Carnivore in its current state may well be a point-tool intended for leaf-node ISPs, but you can certainly extrapolate to Carnivore 2.0 for Gigabit Ether. "Just plug your boxes through ours and you'll be CALEA-compliant, and no more hassles from us.." An optical tap (essentially a fiber optic beamsplitter) would be fairly fail-safe to the ISP. >Third, even if you believe that they can really analyse data at >100 Mbps, this still doesn't give them the ability to handle more >than one PoP with two DS3 connections. This is still orders of >magnitude away from being able to handle a major site with >multiple 2.5G connections, let alone all of the traffic handled by >a major ISP. > >The original claim was that Carnivore could monitor all of an ISP's >traffic. This isn't true for most ISPs. And the amazing growth >rates that we are seeing in bandwidth and network complexity make it >exceedingly unlikely that Carnivore or anything like it will ever >catch up. > >Qwest deployed 14,000 miles of fibre some years ago. This was >packaged as conduits carrying 48 fiber pairs, each pair using >wave division multiplexing to carry 8 to 16 optical channels, with >each channel running at 10 Gbps. That's 160 Gbps per fiber, >7,680 Gbps per conduit. Qwest is one of many carriers. 160 Gbps >over a fiber pair isn't state of the art. Qwest has many conduits. > >If a PC can monitor 100M of bandwidth, it would take, uhm, about >seventy seven thousand PCs to monitor one of Qwest's conduits. Not >that I believe that one PC can monitor traffic at 100 Mbps. > >> >The overall capacity and the complexity of the Internet is increasing >> >at an explosive rate. For better or for worse, this far exceeds the >> >growth in any government's capability of monitoring Internet traffic. > >-- >Jim Dixon VBCnet GB Ltd http://www.vbc.net >tel +44 117 929 1316 fax +44 117 927 2015 > > >

1 0

CDR: Court system greased lightning.
by George＠Orwellian.Org 20 Nov '00

20 Nov '00

Wow, a FL 3-judge panel already passed Gore's appeal up to the FL Supreme Court. Another basis of appeal can only start after Harris certifies the result tomorrow. It will be interesting to see if Dubya emerges after certification. Obviously, Gore won the most votes as people _tried_ to vote. O'Reilly will be on (not a repeat) Sat 8 P.M. FoxNewsChannel. Someone was flying a plane with a banner ad showing Gore in Grinch Green[Tm] on a broomstick, text, "Surrender Gorethy!" Danger! Do not tease Happy Fun Ball.

2 1

CDR: Refinancing your house can SAVE you big dollars! 17558
by return63＠uole.com 20 Nov '00

20 Nov '00

1 0

CDR: 100 PlayStation2 Available for Immediate shipping!
by playstationsNow＠yahoo.com 20 Nov '00

20 Nov '00

1 0

CDR: Redux:ABCNews.com on election eve: blunder, or forecast?
by anonymous＠openpgp.net 20 Nov '00

20 Nov '00

It seemed like our United New World Trading Order of Internationally Banking Trilateral Masters were playing the cards close to their chest this election. Democracy was now showing the seams of the media's 1998 premature release of the names of our (as yet) unelected masters. Had no-one told the media whores at ABC that coming in the mouths of your 'consumer base' is considered bad taste? One of the more prophylactic measures instituted by the pimps on the hill was to stop revealing the results of the elections to the press the week before they were counted, but this wasn't enough. Somewhere in America, perhaps in your town, perhaps in your very school, a little girl had stopped believing in democracy! The public faith in the democratic process, which had always been strong, was now in danger of collapse. If election results were so easily 'predicted', where was the incentive to vote? And if the public didn't vote, they'd turn their energies to lobbying for special interests, leaving the pimps as redundant as betamax. Panic (and dare I say anarchy) reigned in the dimly lit back rooms of Washington D.C. Somebody, anybody had to _do_ something, and do it now! But, as always, the pimps had a solution. They asked the media to pull one more trick for them. There would be an election, with two candidates so closely matched that the public would be unable to decide between them. They would have the same policies, make the same promises, and wear the same suits. The election would be so close, that a handful of voters would decide the next President Of The United States. The media would tease the public again and again with the final result, before snatching it back in a tantric, fiery renewal of the democratic spirit. And thus, The American Way was saved... --------Forwarded Message-------- Date:Thu, 05 Nov 1998 08:56:34 -0500 To:politech@vorlon.mit.edu From:Declan McCullagh <declan(a)well.com> Subject:FC: ABCNews.com on election eve: blunder, or forecast? Reply-To:declan@well.com

1 0

CDR: Tracking devices will be able to follow your every move
by An Metet 20 Nov '00

20 Nov '00

http://www.kentuckyconnect.com/heraldleader/news/111900/yourmonydocs/19Tech… Published Sunday, November 19, 2000, in the Herald-Leader Tracking devices will be able to follow your every move By Anick Jesdanun ASSOCIATED PRESS NEW YORK Imagine walking by a Starbucks in an unfamiliar city. Your cell phone rings, and a coupon for coffee, good only at that location, pops up on the screen. How did your phone know you were near that particular Starbucks? What else does it know about you? Enter location tracking, coming to a mobile device near you. Features that one day can pinpoint your whereabouts to within the length of a football field raise enormous privacy concerns, but they also offer enormous benefits. The challenge will be determining where to draw the line. Consider a recently unveiled technology called Digital Angel. With Digital Angel, a microchip worn close to the body promises to record a person's biological parameters and send distress signals during medical emergencies. But misused, these types of capabilities could amount to virtual stalking. Cell phones, hand-held devices, even car navigation systems will soon have detailed tracking abilities, if they do not already. Services could begin appearing within a year or so. Much of the drive will come from a federal law that requires that cell phones identify callers' locations, in order to expedite 911 emergency responses. If the industry has to install expensive equipment anyway, why not use it to make money? ``There's going to be a dramatic increase in the amount of tracking that's made possible, in part by services they don't know they have,'' said Daniel J. Weitzner of the World Wide Web Consortium, which sets technical standards for the Web. Such tracking will let someone visit a Web site and automatically get weather, movie showings or neighborhood restaurants, based on their current location. If they're lost, they will be able to ask for turn-by-turn directions. Those short of cash can be pointed to the nearest bank machine. But if the information is stored, location tracking could result in a 24-hour-a-day record of a person's whereabouts. So what if a divorce lawyer wants to check if someone's been cheating, or if a social service agent wants to know how many times a person has visited a candy store with their child? ``You have to ask, `Who gets how much information?''' said Jason Catlett, chief executive of Junkbusters Corp., a non-profit privacy monitoring group in Green Brook, N.J. ``Telephone records are routinely subpoenaed. They can be very intrusive, but far more intrusive is a complete log of your physical movement.'' But companies looking to gain business from location tracking insist that the worst-case scenarios presented are impractical to implement in reality. ``There's no way a database is large enough or cost effective for Starbucks to monitor everyone's location on the off chance they can acquire a customer,'' said Jason Devitt, chief executive of Vindigo, which offers 11 city guides through Palm organizers. Lee Hancock, founder and chief executive of go2 Systems Inc., said any short-term gains from such tactics would be offset by losses if they alienate customers. Leading wireless and advertising companies agree that they must tread carefully because mobile devices are inherently more personal than desktop computers. At DoubleClick Inc., whose ad-targeting system generated much of the Net's privacy complaints, officials won't deliver location-based ads right away. The company wants to develop privacy standards first, using lessons from the desktop. ``We've all learned what to do and what not to do, and we can port that over to the wireless market,'' said Jamie Byrne, strategic director for emerging platforms at DoubleClick. Any such ads will likely target a metropolitan region, rather than a city block, because audiences for block-by-block ads would be too small, Byrne said. Ultimately, he said, such targeting will help subsidize wireless services that customers want. Jonathan Fox, director of business development at advertising company Engage Inc., says location-based profiles would not carry names and other personal information. TRUSTe, which runs a seal-of-approval program for Internet privacy policies, is looking to develop guidelines for mobile applications. ``It's more difficult to retrofit policies if you're already down the road,'' said Robert Lewin, TRUSTe chief executive. ``Here, we have the opportunity to do it right the first time.'' In many ways, a person's whereabouts are already being tracked. Employee security cards record when people enter buildings. Discount grocery programs track what people buy, where and when. Electronic toll-payment systems know when someone traverses a tunnel or bridge. Current phones can pinpoint callers to a few miles by determining the location of the cell tower used to handle the call. Palm VII organizers use similar techniques to narrow a user to a particular zip code, and an optional global-positioning receiver can pinpoint that person even further. Marketers can also get clues from the items people search for or the sites they visit a city guide, for instance, tells in what city a person is likely located or where they plan to visit. But for the most part, marketers have yet to take full advantage of such knowledge, and consumers have yet to complain. ``We're providing value,'' Palm spokesman Ted Ladd said. ``Mobile users are inherently in a hurry.'' Wireless providers are not likely to have a use for storing location information, except perhaps for applications that help with driving directions by determining where you came from. Paul Reddick, vice president of product management and development with Sprint PCS, said such storage is not practical, necessary or even desirable. ``It takes years to build a brand and build trust,'' he said, ``and you can blow it pretty fast.''

1 0

CDR: Need Money? Aggressive lenders Say YES to Home Loans! 16863
by return61＠uole.com 20 Nov '00

20 Nov '00

1 0

Re: Public Key Infrastructure: An Artifact...
by obfuscation＠beta.freedom.net 20 Nov '00

20 Nov '00

Bram Cohen <bram(a)gawth.com> writes: > Unless that problem is fixed, man in the middle is hardly made more > difficult - for example, Mallory could break into some random machine on > the net and steal it's public key, then hijack local DNS and when someone > goes to amazon.com redirect them to amazon.hackeddomain.com, and then > proxy to amazon.com - now even SSL says the connection is safe. Are you sure that works? I would think the SSL client would do a connection to the URL the user typed, www.amazon.com, and check the name in the cert to see if it (approximately) matches. If some DNS redirection is done in the background so that amazon.com gets mapped to amazon.hackeddomain.com, the client will not be aware of this (will it?) and so it will still throw up a warning when it sees a cert for hackeddomain.com on a connection to amazon.com. Ob

2 1

CDR: Lo siento . . . por la feria SIMO
by moviles＠hispavista.com 20 Nov '00

20 Nov '00

Muy Sres. nuestros: Hemos recibido su amable correo-e. En los prsximos dmas nos pondremos en contacto con Vd. En estos momentos no podemos hacerlo debido de tantas demandas hemos recibido y a que estamos en al Feria S.I.M.O en Madrid (Stand n: 8086* Pabellon n: 8). No podemos presentar en estos dmas la lista de precios en nuestro WEB http://www.wapshop.es por la fuerte subida y la fluctuacisn de moneda (US $ = Dslar). Sentimos no poderles por estas circunstancias dar una respuesta mas favorable. Le contestaremos su noticia lo antes posible. Muy atentamente, WAPSHOP S.L. Dept. Informacisn http://www.wapshop.es ------------------------------------------------------------------------------------------------------------------- Si quiere borrarse de la lista ir a: http://dowjones.st/to/wapshop Atencion este servicio de remove es ofrecido por RemovingNet, que no es beneficiario de este email comercial. Este servicio es un servicio gratuito para facilitar las bajas de las listas de distribucion. If it wants to erase of the list to go a: http://dowjones.st/to/wapshop Attention east service of remove is offered by RemovingNet, that is not beneficiary of this commercial email. This service is a gratuitous service to facilitate the losses of the distribution lists.

1 0

CDR: Latest Stock Pick..."NRGE" - Buy Alert! 15493
by marketing24＠uole.com 20 Nov '00

20 Nov '00

1 0