- cypherpunks-legacy - lists.cpunks.org

CDR: RE: digital angel (tracking device)
by Trei, Peter 01 Nov '00

01 Nov '00

> Sampo A Syreeni[SMTP:ssyreeni@cc.helsinki.fi] wrote > On Sun, 29 Oct 2000, Eric Murray wrote: > > >>The unit can be turned off by the wearer, thereby making the monitoring > >>voluntary. It will not intrude on personal privacy except in > applications > >>applied to the tracking of criminals. > > > >Heh. > > > >>Digital Angel[tm] measures bodily parameters. It does not interact with > >>the body chemically or biologically. Designed to be completely harmless, > >>Digital Angel will not interfere with bodily functions in any way... > > > >at least in this version. > > And pulling the last two together, we have Digital Angel/IE (Instant > Execution), for those really Bad Seeds. The plus model will zap the > offender if brought near Digital Angel/FC (For Children). > > Sampo Syreeni <decoy(a)iki.fi>, aka decoy, student/math/Helsinki university > Go check out Harlan Ellison's short story "Repent Harlequin! cried the Tick Tock Man". This is really life imitating art. Peter Trei

2 1

CDR: RE: California bars free speech of those cutting deals on votes
by Fisher Mark 01 Nov '00

01 Nov '00

>Radio is cheap and hot. When was the last time you heard a Libertarian >sentiment on radio (except talk radio). The closest I've heard are the "Vote >Freedom" ads by Charleton Heston. Last week I heard 2 different ads for Indiana LP candidates on a station that plays hip-hop, alternative, and pop music (Radio Now FM 93.1, Emmis Communications). The ads were paid for locally, IIRC. =============================================== Mark Leighton Fisher fisherm(a)tce.com Thomson Consumer Electronics Indianapolis IN "Display some adaptability." -- Doug Shaftoe, _Cryptonomicon_

1 0

CDR: RE: Zero Knowledge changes business model (press release)
by Carskadden, Rush 01 Nov '00

01 Nov '00

I remember running into a case where there was a system in place that worked somewhat like an encrypted CVS system. There was a central document czar, like you said, and when he left, the company realized how foolish it was to put a single employee in charge of the key. So then (not seeming to have truly learned from their mistakes) they gave copies of the new private key to members of the executive team. Then an executive left. I will not soon forget hearing of thousands of pages of documentation being systematically decrypted with the old key, and re-encrypted with a new key. The process apparently took quite an amount of time. I also remember my squeamishness about the fact that the CVS-like system was designed to encrypt and decrypt on the fly based on some cheesy authentication, so as to provide a way to maintain this system without having to talk to the key holders every time you needed to make a change. The entire system was a big messy nightmare, and when considered carefully, really didn't provide much in the way of security. It would have been much easier for them to put a system in place that required multiple people to sign off on a document for it to be encrypted or decrypted. I took a lot of notes at the time on how I thought this sort of system could be implemented... I should dig it up and see what I was thinking. ok, Rush -----Original Message----- X-Loop: openpgp.net From: Eric Murray [mailto:ericm@lne.com] Sent: Wednesday, November 01, 2000 3:21 PM To: Multiple recipients of list Subject: Re: Zero Knowledge changes business model (press release) On Wed, Nov 01, 2000 at 03:56:56PM -0500, David Honig wrote: > > At 12:13 PM 10/31/00 -0500, Tim May wrote: > >How about: > > > >-- no key escrow, no split keys, no trusted third parties > > I don't see any way around the fact that some companies will want to have > key escrow of some form for employees who disappear, e.g., car accident, > pickpocket stole the key-carrier, etc. I think companies will want this > because of the risks of financial damage to the company. > > Although its hazardous if done wrong [cf recent PGP problems], is > tarnished by the Fedz/Denning/etc, and might have no use in a personal > privacy tool (your diary dies with you), isn't it too dogmatic to rule out > key escrow for tools intended for use by groups? > > Are there equivalent methods which don't use escrowed keys, which I > am unaware of? I beleive it was Eric Hughes who at a Cypherpunks meeting about four years ago, said "the solution isn't key escrow, it's document escrow". Which makes sense- a business doesn't (or shouldn't) allow employees to keep a single copy of an important document on their hard drive. It should be replicated in other known places in case of disaster (drive failure, stolen computer, employee hit by bus, etc). Just because documents are encrypted doesn't mean that this practice is abandoned. One can envision a system where there's a corporate "document czar" who is regularly given docs from various employees and who then encrypts them in his own key. When and where the docs get decrypted is determined by corporate policies. No key escrow required. I don't know of any existing system like this, but formal corporate document control isn't my field. -- Eric Murray Consulting Security Architect SecureDesign LLC http://www.securedesignllc.com PGP keyid:E03F65E5

1 0

CDR: RE: nsa watch
by Carskadden, Rush 01 Nov '00

01 Nov '00

"Netsec differs from its competitors in that it designs and builds its own hardware- and software-management systems, and it produces its own crypto-acceleration cards, Mr. Harold says. The company installs, monitors, and runs the systems for fees starting at $12,000 per solution." Hrmm.... do I really want a crypto solution built and managed by NSA guys? ok, Rush -----Original Message----- X-Loop: openpgp.net From: David Honig [mailto:honig@sprynet.com] Sent: Wednesday, November 01, 2000 3:49 PM To: Multiple recipients of list Subject: nsa watch from elsewhere: FORMER NSA EMPLOYEES LAUNCH CYBER SECURITY BUSINESS http://www.redherring.com/vc/2000/1019/vc-spies101900.html MEANWHILE, NSA SEEKS NEW EMPLOYEES ON-LINE. (submitted by Jeremy Compton) http://www.nsa.gov/programs/employ/index.html

1 0

CDR: nsa watch
by David Honig 01 Nov '00

01 Nov '00

from elsewhere: FORMER NSA EMPLOYEES LAUNCH CYBER SECURITY BUSINESS http://www.redherring.com/vc/2000/1019/vc-spies101900.html MEANWHILE, NSA SEEKS NEW EMPLOYEES ON-LINE. (submitted by Jeremy Compton) http://www.nsa.gov/programs/employ/index.html

1 0

CDR: Re: California bars free speech of those cutting deals on votes
by Anonymous 01 Nov '00

01 Nov '00

Tim May wrote: > (In that I'll feel better in coming years being able to think to > myself: "I didn't vote for that Bush clown...I voted my principles!") > However, as any vote is of marginal importance, as with the > amelioration issue you mention, I'm still undecided. Needless to say, > neither Gore nor Nader are in my universe of choices, however. Aside from whatever emotional gains you might make by voting for Browne on grounds of principle, that action has the added (albeit marginal) benefit of increasing Libertarian party legitimacy in the public eye. Admittedly, a single vote will have no effect on percentages in a national election, but in the local arena, helping the party achieve 5% or even 1% of the vote will frequently secure ballot access next time around.

2 1

None
by CustomerService＠exotrope.net 01 Nov '00

01 Nov '00

1 0

CDR: e-jihad
by anonymous＠openpgp.net 01 Nov '00

01 Nov '00

EXPERTS FEAR CYBERWARS SPREAD Tuesday,October 31,2000 By NILES LATHEM The growing electronic war between Israeli and pro-Palestinian hackers threatens to shut down large portions of the Internet, government and industry, experts warned last night. The FBIs National Infrastructure Protection Center, the agency that combats cybercrimes, recently sent out an advisory warning that the tit-for-tat attacks that have shut down and defaced Israeli government and Hezbollah and Hamas Web sites in the last month could "spill over," into the United States. "Due to the credible threat of terrorist acts in the Middle East region and the conduct of these Web attacks, users should exercise increased vigilance to the possibility that U.S. government and private-sector Web sites may become potential targets," the FBI advisory said. "In recent days, the overall threat condition for U.S. military forces in the Middle East has increased due to new credible threats of terrorist acts in the region. Similarly NIPC views the current conditions as creating the possibility for related cyberattack activity against U.S. sites," it said. The cyberwar, or "e-Jihad" as the Palestinian side calls it, began earlier this month, when the Israeli-Palestinian conflict exploded. Sophisticated Israeli hackers defaced a Hezbollah Web site that was trying to incite anti-Israel violence among Palestinians. The attacks escalated when Islamic militants based in Lebanon, London and the United States set up special "attack Web sites," in which users could send special jamming software via e-mail. The attacks shut down top Israeli government Web sites for days. ATT, which helped Israeli sites get back online, has become a recent target, according to recent message traffic from the Palestinian side. Ben Venzke, an intelligence analyst for the Virginia-based iDefense, a computer security firm that is tracking the cyberwar, said hackers going by the names Dodi, ReAList and Nir-MN are turning to increasingly sophisticated programs and are now threatening to unleash devastating viruses and software. http://www.nypostonline.com/news/14989.htm

1 0

None
by CustomerService＠exotrope.net 01 Nov '00

01 Nov '00

1 0

CDR: RE: [press release[
by Trei, Peter 01 Nov '00

01 Nov '00

> ---------- > dakin@nationalpost.com[SMTP:dakin@nationalpost.com] > And now a question for you Americans on the list: > > The CIA is Langley; the NSA HQ is in Fort Meade, Maryland -- what > agency has headquarters in Reston, Va? > > Thanks. > > David Akin > USGS NIMA (US Geological Survey, National Imagery and Mapping Agency) is the only one I know of that is actually in Reston. There are others in the region, such as NRO (actually in Chantilly). Peter Trei PS: Don't use the toad.com address.

1 0