- cypherpunks-legacy - lists.cpunks.org

Hack Attack Gums Up Authorize.Net
by R. A. Hettinga 27 Sep '04

27 Sep '04

<http://www.wired.com/news/print/0,1294,65039,00.html> Wired News Hack Attack Gums Up Authorize.Net By Noah Shachtman Story location: http://www.wired.com/news/infostructure/0,1377,65039,00.html 01:56 PM Sep. 21, 2004 PT Hackers have crippled one of the internet's biggest credit card processors, and tens of thousands of online merchants are losing business while the company struggles to recover. Since last Wednesday, Authorize.Net has been relentlessly pounded by distributed denial of service, or DDoS, attacks. The massive, coordinated waves of internet traffic have repeatedly overwhelmed the company's servers. Authorize.Net's customers have had to improvise: Some are confirming their credit card orders over the phone, others have gone with little or no sales for nearly a week. "I'm losing four grand a day in revenue," said David Hoekje, president of PartsGuy.com, an online heating and air conditioning parts dealer. "My year is a bell curve, and we're on the upwards slope now. This is 5 percent of my year, gone." As of Tuesday afternoon, there still seemed to be no end in sight to the hacker strikes against Authorize.Net. Security experts say that there's little a company can do to defend itself against these kinds of attacks. But company officials insist they're trying. "We're actively trying to deal with it. And we're working hard to minimize the disruptions to our merchants," Authorize.Net marketing director David Schwartz said. The company has turned to the FBI, as well as outside consultants, for help, he added. With about 90,000 customers, Authorize.Net is one of the internet's best-known, most widely used credit card processing services, focusing mostly on smaller merchants. Earlier this year, the firm was bought by the Burlington, Massachusetts, online payment and fraud-detection firm Lightbridge for $82 million. But since the sale, Lightbridge has been hit by a series of body blows. In August, CEO Pamela Reeve resigned; last week, the company announced it was laying off 65 people -- a 12 percent cut in its workforce. And now, "these unforeseen and malicious DDoS attacks," as a company message called them. "We know how hard it is," said Michael Adberg, co-founder of WeaKnees.com. The site, which sells TiVo upgrades and DirecTV installations, was itself the target of a DDoS attack last October. "But we're surprised that such a large company wasn't better prepared than we were." He added, "They have really let us down." For the moment, Adberg and his associates have been phoning customers who place orders over the website, confirming their information and only later processing their payments with Authorize.Net. "But there will be a few customers who we'll ship their orders, and we won't charge them," Adberg said. "Maybe 10 percent will slip through the cracks." The lost revenue is only part of the problem, however. Even if sales are saved, the company image can be scuffed by such a move. "Imagine placing an order with Amazon, but not being able to pay online, and then having to call a customer support person so they can charge you," said a network chief at one of Authorize.Net's customers. The payment processor has been able to take care of some transactions, through slight modifications to its domain name. But these tactics have only been partially effective. And, in the long run, wholesale changes to web addresses are bad for business, explains Drew Copley, a senior research engineer at eEye Digital Security. "You can lose money, lose customers, because they can't find you." Information from attacking PCs can be slowed down; internet protocol addresses of other offending computers can be blocked. But, in the face of a large-scale strike, there's little that can be done, observed Copley, who built one of the first DDoS tools for Windows. "When you get 10,000, 50,000 computers all firing at once, for attacks like that, there is no simple solution," he added. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com

1 0

RE: Mystification of Identity: You Say Yusuf, I Say Youssouf...
by Tyler Durden 27 Sep '04

27 Sep '04

Many Cypherpunks view the need to take up crypto arms to stem off an Orwellian, hyper-evil and hyper-competent dictatorship. I'm thinking a more likely (and no less threatening) scenario is one like "Brazil" (ie, the movie). Don't forget, the World Trade Center management was on the Intercom trying to tell everyone to "Remain inside the Building...It's safest Inside the Building". Fuck. Here on Wall Street I'm a dead man. -TD >From: "Roy M. Silvernail" <roy(a)rant-central.com> >Reply-To: roy(a)rant-central.com >To: Tyler Durden <camera_lumina(a)hotmail.com> >CC: "cypherpunks(a)al-qaeda.net" <cypherpunks(a)al-qaeda.net> >Subject: RE: Mystification of Identity: You Say Yusuf, I Say Youssouf... >Date: Sun, 26 Sep 2004 19:35:38 -0400 > >On Sun, 2004-09-26 at 18:55, Tyler Durden wrote: > > Holy shit. So it really boiled down to mere spelling? > > > > So if there's a single "Mohammed Ali" who is a terrorist in the whole >world, > > then no single Mohammed Ali will be able to fly into and out of the US? >How > > many Mohammed Ali's are there in the world? How many Yousef Islam's? > >Or Yusef Islam? Or Yousuf Islam? It's not just spelling, its >Anglo-English interpretation of the phonetic names. Remember a few >years back when the Associated Press made a (not big, but noticable) >deal out of changing the sanctioned spelling of Qadaffi's name? > >Now we have an entire bureaucracy working on the assumption that "names" >are both is-a-person credentials and immutably tranliterable to the >Anglo-English alphabet. > >The mind just *boggles*! >-- >Roy M. Silvernail is roy(a)rant-central.com, and you're not >"Progress, like reality, is not optional." - R. A. Hettinga >SpamAssassin->procmail->/dev/null->bliss >http://www.rant-central.com _________________________________________________________________ Dont just search. Find. Check out the new MSN Search! http://search.msn.click-url.com/go/onm00200636ave/direct/01/

1 0

locustworld + padlock
by Eugen Leitl 27 Sep '04

27 Sep '04

http://www.viatech.com/en/resources/pressroom/2004_archive/pr040923lw_secur… esh.jsp VIA and LocustWorld Secure Wireless Mesh Networks with VIA PadLock High-Speed Encryption On-die security features in the latest VIA processors enable AES Encryption at blistering speeds from LocustWorld.s MeshAP-Pro Taipei, Taiwan, September 23rd 2004 - VIA Technologies, Inc, a leading innovator and developer of silicon chip technologies and PC platform solutions, today announced that the MeshAP-Pro from LocustWorld is the first commercial product to support the hardware-based VIA PadLock ACE (Advanced Cryptography Engine), allowing it to encrypt and decrypt data traveling through the mesh at very high speeds. .Security is a vital part of any wireless network and is an increasingly important issue as adoption of last mile technologies, such as mesh networking, mature and become more widespread,. commented Wai Sing Lee, a security consultant at Frost & Sullivan. .Strong cryptography and certification can be used to build a highly secure wireless network.. The LocustWorld MeshAP-Pro application is used by commercial wireless network operators around the world to provide widespread wireless broadband Internet services over wide areas where each node in the mesh network automatically interconnects with its neighbors to form a large scale, self organizing network. Traffic over the network is encrypted using digital certificates and dynamically generated private keys, making the mesh extremely secure, so as traffic increases, gateways become loaded with the overhead of handling multiple simultaneous cryptographic connections. By utilizing the VIA PadLock ACE, LocustWorld MeshAP-Pro enables meshbox gateways to deliver additional performance in extremely heavily loaded networks while maintaining uncompromisingly high-level certificated security throughout the mesh. .Using the on-die AES encryption from the latest VIA processors we can achieve an encryption layer with hardly any overhead on the CPU,. said Richard Lander, CEO of LocustWorld. .Network performance using the VIA PadLock ACE is close to the speed of un-encrypted communications, achieving high-strength encryption without the associated performance impact, even on large networks with high traffic. The result is virtually transparent encryption.. .The MeshAP-Pro is a great example of how compact power efficient devices based on VIA processors can enable industry leading security without affecting normal system performance,. said Steven S. Lee, Head of the VIA Embedded Platform Division, VIA Technologies, Inc. .Together with innovators like LocustWorld, we are taking the lead in the move to ubiquitous security where security operations can be carried out natively by every system in a network.. Inter-operation between VIA PadLock ACE enabled nodes and other nodes that execute their encryption through software is ensured by the use of industry standard AES encryption, so. mesh administrators can utilize VIA PadLock ACE enabled systems for heavily used nodes to interconnect and make certificated encrypted connections with older or peripheral nodes with lower data throughput capacity. "The VIA PadLock ACE is a great tool, enabling us to extend the power, speed and scale of our wireless mesh networks further, without losing out on performance,. added Jon Anderson, CTO of LocustWorld. .The VIA PadLock ACE-assisted Wireless Mesh gives high speed, secure, wireless networking a very significant performance boost." The LocustWorld MeshAP-Pro has been certified through the VIA PadLock Certification Program that is designed to assist independent software developers in optimizing their products for the VIA PadLock Hardware Security Suite. More information on the VIA PadLock ACE is available from the VIA PadLock Hardware Security Suite website. About the VIA PadLock Security Initiative Comprising the VIA PadLock Hardware Security Suite and VIA PadLock Software Security Suite, the VIA PadLock Security Initiative is focused on providing key hardware and application level security building blocks that can be easily integrated into any computing and communications infrastructure. The VIA PadLock Hardware Security Suite is integrated into VIA C5P Nehemiah core processors and features the VIA PadLock RNG for high quality key generation and the VIA PadLock ACE (Advanced Cryptography Engine) for high speed performance of the US government approved Advanced Encryption Standard (AES). The VIA PadLock Software Security Suite consists of the VIA PadLock SDK, the VIA PadLock ZIP utility and source code and the VIA PadLock Tru-Delete utility and source code. More information on the VIA PadLock Security Initiative may be found at the VIA website http://www.via.com.tw/en/padlock/padlock_initiative.jsp. About LocustWorld LocustWorld produces the MeshAP-Pro, providing hardware, software and services that allow customers to build complete mesh networking solutions. Based in the UK, LocustWorld addresses the demand for mesh networking using their own resources assisted by a network of regional service providers. LocustWorld has gained world-wide recognition as leaders in wireless mesh networking, with live installations and public references and many happy customers. More information about LocustWorld and reference installations can be found at www.locustworld.com -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

ADV: Announcement To All Staff
by Admin 21 Sep '04

21 Sep '04

Attention All Nonprofit Organizations: Members, Staff and Associates: You Must Respond By 5 P.M. Wednesday, September 22, 2004. Through a special arrangement, Avtech Direct is offering a limited allotment of BRAND NEW, top of-the-line, name-brand desktop computers at more than 50% off MSRP to all Nonprofit Members and Staff, who respond to this message before 5 P.M., Wednesday, September 22, 2004. All desktop are brand-new, packed in their original boxes, and come with a full manufacturer's warranty plus a 100% satisfaction guarantee. These professional grade Desktops are fully equipped with 2004 next generation technology, making these the best performing computers money can buy. Avtech Direct is offering these feature rich, top performing Desktop Computers with the latest Intel technology at an amazing price to all who call: 1-800-884-9510 by 5 P.M. Wednesday, September 22, 2004 The fast and powerful AT-2400 series Desktop features: * Intel 2.0Ghz Processor for amazing speed and performance * 128MB DDR RAM, --- Upgradeable to 1024 * 20 GB UDMA Hard Drive, --- Upgradeable to 80 GB * 52X CD-Rom Drive, --- Upgradeable to DVD/CDRW * 1.44 Floppy disk drive * Next Generation Technology * ATI Premium video and sound * Full Connectivity with Fax modem/Lan/IEE 1394/USB 2.0 * Soft Touch Keyboard and scroll mouse * Internet Ready * Network Ready * 1 Year parts and labor warranty * Priority customer service and tech support MSRP $699 ........................................ Your Cost $297 How to qualify: 1. You must be a Member, Staff or Associate of a Nonprofit. 2. All desktop computers will be available on a first come first serve basis. 3. You must call 1-800-884-9510 by 5 P.M. Wednesday, September 22, 2004 and we will hold the desktops you request on will call. 4. You are not obligated in any way. 5. 100% Satisfaction Guaranteed. Call Avtech Direct 1-800-884-9510 before 5 P.M. Wednesday, September 22, 2004 Visit our website at http://www.avtechdirectcomputers.com If you wish to unsubscribe from this list, please go to: http://www.computeradvice.org/unsubscribe.asp Avtech Direct 22647 Ventura Blvd., Suite 374 Woodland Hills, CA 91364

1 0

Re: Geopolitical Darwin Awards
by Major Variola (ret) 21 Sep '04

21 Sep '04

At 11:42 AM 9/20/04 -0500, J.A. Terranson wrote: >On Sun, 19 Sep 2004, Major Variola (ret) wrote: > >> (Remember the >> Hiroshima bomb was *not* tested, so sure were the scientists. Trinity > >My understanding (and I am *positive* someone will correct me if I'm >wrong) was that there was a shortage of both fissionable materials and >appropriate [altimeter] fuse mechanisms, making testing a outside of enemy >territory a losing proposition. Fissiles were expensive, still are, but the design of U-gun is better (if you can afford the enrichment) because of U's lower spontaneous fission rate, ie fewer spare neutrons to spoil the fun. Even pure Pu-239, the result of short irradiation, has a problem with premature ejaculation.

2 1

Re: Geopolitical Darwin Awards
by Tyler Durden 21 Sep '04

21 Sep '04

Who, the Iranians? Which ones are fanatics? I'll grant there are some fanatics left in Iran, but Iran seems increasingly dominated by fairly sleezy clergy/judges. Like any government, theirs is deteriorating into a mere racket. And if you ask me, fanaticism never lasts very long anywhere, only for about a generation during turbulent times. Iran in particular is a special case...seems to me their cultural momentum will always outweigh any temporary fanaticism. A country that has a small but thriving prostitution industry can't be all that fanatical. -TD >From: "James A. Donald" <jamesd(a)echeque.com> >To: "cypherpunks(a)al-qaeda.net" <cypherpunks(a)al-qaeda.net> >Subject: Re: Geopolitical Darwin Awards >Date: Thu, 16 Sep 2004 10:50:37 -0700 > > -- >On 15 Sep 2004 at 2:38, Thomas Shaddack wrote: > > Maybe they are playing a different game. They [Iran] couldn't > > use the eventually produced nukes anyway, without being > > showered back with the same kind > >They are fanatics. They expect to get a six pack of virgins. >And they will say "Hey, it was not us, it was these terrorists >who happen to have somehow stolen some nukes from persons >unknown. We are completely opposed to terrorism, and are fully >cooperating with foreign investigations." > > > --digsig > James A. Donald > 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG > /Y5bZ5vcTSLqigJSE6PrHkJplrE/rkCOv5ZqjTCd > 4hlcKGlAs6dJgsGrsyIqiOz5Qfdc2wMId/LdnAnXG _________________________________________________________________ FREE pop-up blocking with the new MSN Toolbar get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/

7 9

Re: Geopolitical Darwin Awards
by Major Variola (ret) 20 Sep '04

20 Sep '04

t 11:38 PM 9/20/04 -0400, R. A. Hettinga wrote: >At 8:11 PM -0700 9/20/04, Major Variola (ret) wrote: >>2. UBL's mom was a low-caste yemeni, dig? > >Actually, UBL's *dad* was a low-caste Yemeni, too. > >And your point is? That you can be wealthy and still find something of the underdog in you, which you can resublimate... >-- Islam is a dead >religion. It just doesn't know it yet. Lets hope that's true for all of them...

1 0

But they were using 3DES!
by Major Variola (ret) 20 Sep '04

20 Sep '04

September 20, 2004 ATM Stolen in Third Such Theft in a Month An automated teller machine was stolen from a gas station early Sunday, the third such theft in Orange County since mid-August, police said. The machine was stolen from an Arco just before 4 a.m., using the same method as in the earlier incidents, sheriff's Lt. Ted Boyne said. "They come, and in 30 seconds, they have the ATM in back of an SUV." http://www.latimes.com/news/local/orange/la-me-ocbriefs20.2sep20,1,6358360.… Moral of the story: do the math.

1 0

Re: Geopolitical Darwin Awards
by Major Variola (ret) 20 Sep '04

20 Sep '04

At 05:07 PM 9/19/04 -0700, James A. Donald wrote: > >I don't recall the American revolutionaries herding children >before them to clear minefields, nor surrounding themselves >with children as human shields. The yank minutemen were not above taking children as soldiers, any more than Dan'l Boone was above taking a 14 year old as a wife.

2 1

Re: Geopolitical Darwin Awards
by Major Variola (ret) 20 Sep '04

20 Sep '04

At 04:57 PM 9/19/04 -0700, James A. Donald wrote: >But the Saudi Arabian elite, of among which Bin Laden was born with a >silver spoon in his mouth, are not getting screwed over. 1. you don't get religion 2. UBL's mom was a low-caste yemeni, dig?

2 1