- cypherpunks-legacy - lists.cpunks.org

Modern-day Bletchley Park to tackle terror finance networks
by R. A. Hettinga 10 Feb '06

10 Feb '06

--- begin forwarded text Date: Fri, 10 Feb 2006 20:22:03 -0500 To: Philodox Clips List <clips(a)philodox.com> From: "R. A. Hettinga" <rah(a)shipwright.com> Subject: Modern-day Bletchley Park to tackle terror finance networks <http://www.guardian.co.uk/print/0,,5397312-111274,00.html> Modern-day Bletchley Park to tackle terror finance networks Patrick Wintour, chief political correspondent and Ashley Seager in Moscow Saturday February 11, 2006 Guardian Gordon Brown will next week announce plans to create a modern-day Bletchley Park of experts working at unravelling terrorist finance networks just as wartime codebreakers collaborated on cracking Nazi codes. The chancellor will emphasise that cutting off the cash flow that subsidises terrorism will play a vital role in preventing further attacks. He will commit new money to establish the centre, which will bring together some of the top financial experts in the country, and will announce new measures to close loopholes exploited by terrorist moneymen. "As chancellor ... I have found myself immersed in measures designed to cut off the sources of terrorist finance," Mr Brown will say. "And I have discovered that this requires an international operation using modern methods of forensic accounting as imaginative and pathbreaking for our times as the Enigma codebreakers at Bletchley Park achieved more than half a century ago." Since 9/11, the UK has frozen #80m in terrorist assets, including money in more than 100 organisations linked to al-Qaida. This week, America blocked the US assets of five people and four groups based in Britain for alleged collections to a group that Washington suspects has ties to al-Qaida. Mr Brown wants his fellow rich-world finance ministers to prioritise the battle with terrorist financing at this weekend's G8 meeting that Russia is chairing in Moscow. He has also written to the Financial Action Task Force (FATF), which spearheads action against the abuse of the financial system by terrorists, to propose that the UK takes over the presidency of the body next year. The main theme of Mr Brown's speech to the Royal United Services Institute on Monday, will be the balance between security and liberty and the gradual move to a framework of stronger laws and powers to tackle terrorists. Specifically, Mr Brown will announce: 7 a review of measures to stop charities being abused by those financing terror; 7 proposals to tackle terrorist abuse of bureaux de change and wire transfers; 7 guidance to banks and financial institutions on how to fulfil their obligations to tackle suspicious transactions; 7 a commitment to continue strengthening the pre-emptive asset-freezing regime, with a review of the need for further new legislation or a single asset-freezing office. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Don't blame on me
by Alyson W. Atkinson 10 Feb '06

10 Feb '06

dissuade onmollycoddle aclaudio someacademy someknives notashame butbritain ,yea butdial it donahue ordeflater theektachrome ,bavaria itconceive adana thetaverna trydryden seeduluth ininstinctual orcommendation !madison it'skrieger butcondensible not

1 0

[Clips] Gonzales: NSA may tap 'ordinary' Americans' e-mail
by R. A. Hettinga 10 Feb '06

10 Feb '06

--- begin forwarded text Delivered-To: clips(a)philodox.com Date: Fri, 10 Feb 2006 12:21:03 -0500 To: Philodox Clips List <clips(a)philodox.com> From: "R. A. Hettinga" <rah(a)shipwright.com> Subject: [Clips] Gonzales: NSA may tap 'ordinary' Americans' e-mail Reply-To: rah(a)philodox.com Sender: clips-bounces(a)philodox.com <http://news.com.com/2102-1028_3-6035637.html?tag=st.util.print> CNET News Gonzales: NSA may tap 'ordinary' Americans' e-mail By Anne Broache WASHINGTON--Agents operating a controversial National Security Agency surveillance program may have inadvertently spied on the e-mails and phone calls of Americans with no ties to terrorists, Attorney General Alberto Gonzales said Monday. Gonzales stressed that the program is "narrowly focused" and that adequate steps are taken to protect privacy, though he said he was unable to describe such procedures because of the program's classified nature. Credit: Anne Broache Attorney General Alberto Gonzales fields Senate questions on Monday. The admissions came as part of the first of what will likely be several public hearings before the U.S. Senate Judiciary Committee. A full slate of Democrats and Republicans rotated 10-minute stints questioning Gonzales, the day's sole witness, about the secret eavesdropping program. A CNET News.com survey published Monday lists which telecommunications companies say they are not cooperating with the NSA. The Bush administration has said repeatedly that the program, which has transpired without prior court approval since shortly after the Sept. 11 attacks, only monitors communications in which at least one party is located outside the United States and is a member or agent of al-Qaida or groups associated with terrorists. Meanwhile, it has stuck to a three-pronged defense of the program, which Gonzales outlined repeatedly on Monday: the U.S. Constitution, a Congressional resolution passed shortly after Sept. 11 that authorizes the use of military force against al-Qaida and its allies, and a Supreme Court interpretation of that resolution. But Gonzales shunned all questions he deemed "operational" matters, such as how many people have been subject to the tapping, how the government goes about cooperating with telecommunications companies and Internet service providers from a legal perspective, and whether additional secret surveillance programs have been authorized by the same logic. "Can you assure us that no one is being eavesdropped upon in the United States other than someone who has a communication that is emanating from foreign soil by a suspected terrorist, al-Qaida or otherwise?" Sen. Joseph Biden, a Delaware Democrat, asked at one point early in the daylong hearing. "I can't give you absolute assurance," Gonzales replied, before adding, "What I can assure the American people is we have a number of safeguards in place so we can say with a high degree of certainty that those procedures are being followed." Democrats dominated the criticism about the program's lack of court authorization and suspected illegality, but Committee Chairman Arlen Specter, a Pennsylvania Republican, also strongly encouraged the attorney general to consider seeking court review for the entire program. "The concern is that there is a broad sweep which includes people who have no connection with al-Qaida," he said. "What assurances can you give to this committee and, beyond this committee, to millions of Americans who are vitally interested in this issue and following these proceedings?" Said Gonzales, "The program as operated is a very narrowly tailored program, and we do have a great number of checks in place." He said later in the hearing that he was unable to give "specific information about collected, retained and disseminated" communications, except to say that it is done so "in a way to protect privacy interests of all Americans." Support for the program appeared to split down party lines. Several Republicans said they generally supported the administration's efforts and understood the importance of the eavesdropping operations. "I suspect few members of Congress would vote to eliminate this program or cut its funding," said Sen. Orrin Hatch of Utah. The committee's top Democrat, Sen. Patrick Leahy of Vermont, said bluntly that the secret surveillance program is not authorized by a 1978 law called the Foreign Intelligence Surveillance Act (FISA), which he called the "exclusive source of authority for wiretapping for intelligence purposes." "Wiretapping that is not authorized under that statute is a federal crime," he said. "That is what the law says, and that is what the law means." Leahy chided the attorney general for the administration's lack of consultation with Congress on the legality of the program. "Thank heavens we actually have a press that tells us what you all are doing, because you all are certainly not," he said without disguising any hint of disapproval. Sen. Dianne Feinstein, a California Democrat, said she, too, was concerned that too few members of Congress had been adequately briefed about the program, a phenomenon that gave her reason to believe "this program is much bigger and much broader than you want anyone else to know," she said. Sen. Edward Kennedy, a Massachusetts Democrat, argued that by circumventing FISA, the Bush administration could be jeopardizing national security in the long run. If the wiretapping program is illegal, he said, front-line NSA employees could be prosecuted, and evidence gathered through the process could be tossed, meaning that "some of those toughest, cruelest and meanest members of al-Qaida may be able to use illegality in the court system to escape justice." But even some Republicans who said they supported the program also admitted they believed it would be more effective and better accepted by the public if Congress explored new legislation to give it a formal legal blessing. "Presidents are always stronger in the condition of foreign affairs when Congress is onboard," said Sen. Mike DeWine, an Ohio Republican. He broached the idea of amending FISA so that it would exclude the sort of communications the administration said it has been tapping through the NSA program. The administration will "listen and consider your ideas," Gonzales said. Specter said he expected to schedule a second day of hearings to allow senators to ask the attorney general additional questions about the situation. Other members of the committee indicated they hoped to bring in additional witnesses, such as former Attorney General John Ashcroft, for questioning. The Senate Select Committee on Intelligence is planning a hearing of its own later this week with the attorney general and NSA Director Michael Hayden, DeWine said, but that session will be closed to the public. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' _______________________________________________ Clips mailing list Clips(a)philodox.com http://www.philodox.com/mailman/listinfo/clips --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

anonymity for principals
by Major Variola (ret) 10 Feb '06

10 Feb '06

My first grader's school newletter mentioned anonymity as a problem for net-enabled kids. Predators, horseman, etc., you know the routine. I wrote a reply (cc'd to more than her principal so it was not ignorable) explaining that anonymity is possible with fax, phone, and snailmail, and that it was a fundamental American right (albeit I restrained from using the radical concept of a right, clearly usurped by a dumbass Yale graduate who's killed more than Atta, an army of one) in principle and practice to express oneself without recourse. A trivial reply to a trivial offense but one must keep the faith. Been a while since I've pulled a crucifix from the roadside, ya know. (The flying spaghetti monster kinda faith, of course, but still.) [Direct questions about "why State schools" to dev/null and save us all some trouble] Maybe I should fax some dead Iraqi kids to them... ........... Impeach or frag.

3 2

SU-per Hu^ge 0ffers 2dIWXO
by Frances Coon 10 Feb '06

10 Feb '06

Huge selection of meds available at attractive prices. Highest quality assured. Try us out today.. http://uk.geocities.com/feliks90781modestine3677/ 3xl

1 0

[declan@well.com: [Politech] Feingold, Kennedy ask AT&T and others if they're in bed with NSA [priv]]
by Eugen Leitl 10 Feb '06

10 Feb '06

----- Forwarded message from Declan McCullagh <declan(a)well.com> -----

2 1

[declan@well.com: [Politech] Details of how Australian "e-passports" will work [priv]]
by Eugen Leitl 10 Feb '06

10 Feb '06

----- Forwarded message from Declan McCullagh <declan(a)well.com> -----

1 0

[declan@well.com: [Politech] Lawsuit challenges law targeting Internet "annoyances" [fs]]
by Eugen Leitl 10 Feb '06

10 Feb '06

----- Forwarded message from Declan McCullagh <declan(a)well.com> -----

1 0

[dewayne@warpspeed.com: [Dewayne-Net] THE END OF THE INTERNET?]
by Eugen Leitl 10 Feb '06

10 Feb '06

----- Forwarded message from Dewayne Hendricks <dewayne(a)warpspeed.com> -----

2 1

Message Level Assembles Advisory Board of Internet Security Visionaries
by R. A. Hettinga 09 Feb '06

09 Feb '06

--- begin forwarded text Date: Thu, 9 Feb 2006 23:02:56 -0500 To: Philodox Clips List <clips(a)philodox.com> From: "R. A. Hettinga" <rah(a)shipwright.com> Subject: Message Level Assembles Advisory Board of Internet Security Visionaries <http://www.emediawire.com/printer.php?prid=344596> eMediaWire Message Level Assembles Advisory Board of Internet Security Visionaries - Choice They See: Sender-Based Email Validation or 'Game Theory Escalations' Message Level, Inc. announced today the formation of a technical advisory board, drafting three of the Internet's most recognized authorities in network risk management, secure network operations and network performance, a trio joined by their recognition that sender-based email authentication is an inevitable security design that maps fully to traditional business process protocols. Cambridge, MA (PRWEB) February 9, 2006 -- Message Level, Inc. announced today the formation of a technical advisory board, drafting three of the Internet's most recognized authorities in network risk management, secure network operations and network performance, a trio joined by their recognition that sender-based email authentication is an inevitable security design that maps fully to traditional business process protocols. Joining the company's technical advisory board are Mr. Bob Anita, Dr. Dan Geer and Mr. John Quarterman. Bob Antia is CTO of KSR, a managed security services provider; former VP of Information Technologies and Risk at Guardent; former Chief Security Officer's principal at Verisign; and board member of JP Morgan's Council of Communications Advisors and the FCC's National Infrastructure Reliability Council FG1B Committee on Cyber Security. Mr. Antia has also served as Chief Technical Architect for Exodus Communications and Director of Operations Technology for Cable and Wireless America. Dr. Daniel E. Geer, Jr., Sc.D., counts among his professional milestones: The X Window System and Kerberos (1988), the first information security consulting firm on Wall Street (1992), convenor of the first academic conference on mobile computing (1993), convenor of the first academic conference on electronic commerce (1995), the "Risk Management is Where the Money Is" speech that changed the focus of security (1998), the Presidency of USENIX Association (2000++), the first call for the eclipse of authentication by accountability (2002), principal author of and spokesman for "Cyberinsecurity: The Cost of Monopoly" (2003), and co-founder of SecurityMetrics.Org (2004). John Quarterman is CEO of InternetPerils, Inc., which provides quantification and visualization products to help financial institutions, banks, telecommunications providers, government, insurers, and enterprises manage their Internet business risks. His network engineering experience began in 1978 on the ARPANET project, the origin of the contemporary Internet, and he has been delineating internetwork performance since the early 1990s. His newest book, about Risk Management Solutions, has just appeared from Wiley. Twice elected to the board of USENIX, he helped orchestrate the funding of UUNET in 1991, one of the world's first two commercial ISPs. Frequent conference speaker, technical trainer, and writer, Mr. Quarterman retains an appointment as an Anti-Phishing Working Group (APWG) research fellow, building aids for visualizing phish server networks. Message Level CTO and founder Brian Cunningham said of the advisory board additions, "We are proud to provide the definitive email authentication solution at a time when this vital communications medium is so imperiled by criminal activity such as phishing and abusive messaging such as spam. We are prouder still to be joined in our enterprise by these senior statesmen of the information security arts." Messrs. Antia, Geer and Quarterman will be advising Message Level on product development and hardening, desktop integration, enterprise deployment, MTA integration and augmentation of Message Level technology for commercial-grade email. As well, the new advisors will be guiding the company in establishment of alliances and partnerships essential for the proliferation of message-level authentication as the preferred mechanism for substantiation of an email message's origin. Message Level CEO Mike McGowan said, "Email as we know it has reached a crossroads in which its credibility is at stake. Solutions proposed thus far have been ineffective, crushed by high cost and complexity and their vulnerability to attacks. Message Level, based on a protocol of irreducible elegance, is a technology whose moment has come. We are grateful that our new advisors, men whose provenances date to the very genesis of the Internet, have recognized the power and effectiveness of the Message Level solution." Message Level, with offices in Bethesda, Maryland and Cambridge, Massachusetts, has been developing its email authentication technologies since 2003 and holds an intellectual property estate dating back to 2003. Message Level technology creates query-able unique identifiers that are returned to the sender or his agents for confirmation before delivery, placing definitive authentication with the sender, a scheme that is both secure and places delivery liability in the sender's hands. Mr. Antia said of the company's authentication system, "The Message Level solution answers the simple question that all email users - enterprises and individuals - are forced to ask: did the sender of the email I am reading actually send this email? What's more, for enterprises that need to audit their communications, it conclusively satisfies the requirement of certifying delivery - and can do so without reliance on a third party. Message Level satisfies both these business processes without complexity for either the sender or receiver. I think the choice is simple. You can either deploy Message Level or enter into game theory escalations with the spammers, phishers and pharmers." Surveying the larger technology conflict that has arisen from the search for a definitive email authentication solution, Dr. Geer said, "Email is the killer app of the Internet in more ways than one. As much as it pains me to admit it, the current models have got to go but before we end up with something authoritarian or worse, let's try to do the right thing: Sender credentials that can be checked by those who want to check but which don't require massive infrastructures that no will ever build. Trust me on this, in e-mail authentication the best has been the enemy of the good for way too long." Speaking to ecommerce enablement engendered by the company's sender-based authentication scheme, Mr. Quarterman said, "Message Level's solution goes beyond recipient-acknowledgement schemes; it enables the receiver to ask the sender whether it sent a specific message. Miscreants who could evade a blacklist or pretend to be on a whitelist by using a different IP address or domain name have a much harder time with this scheme, since it depends on authentication deeper than network node identifiers. Message Level's authentication is strong enough to enable assigning liability to a specific party who sent or received or lost an invoice, and that could catalyze increased electronic commerce on the Internet, even beyond addressing the phishing problem." Message Level Media Contacts: Mike McGowan (703) 981-4718 Brian Cunningham (617) 721-2459 www.messagelevel.com # # # Contact Information Bill McInnis Message Level http://www.messagelevel.com 804-355-5560 ) Copyright, PR Web. All Rights Reserved -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0