- cypherpunks-legacy - lists.cpunks.org

More detailed queries of what Google stores
by Adam Fields 06 Jul '18

06 Jul '18

I asked two very specific questions in a conversation with John Battelle, and he's received unequivocal answers from Google: 1) "Given a list of search terms, can Google produce a list of people who searched for that term, identified by IP address and/or Google cookie value?" 2) "Given an IP address or Google cookie value, can Google produce a list of the terms searched by the user of that IP address or cookie value?" The answer to both of them is "yes". http://battellemedia.com/archives/002283.php -- - Adam ** Expert Technical Project and Business Management **** System Performance Analysis and Architecture ****** [ http://www.everylastounce.com ] [ http://www.aquick.org/blog ] ............ Blog [ http://www.adamfields.com/resume.html ].. Experience [ http://www.flickr.com/photos/fields ] ... Photos [ http://www.aquicki.com/wiki ].............Wiki [ http://del.icio.us/fields ] ............. Links ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] More detailed queries of what Google stores
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

Re: Piercing network anonymity in real time
by StealthMonger 06 Jul '18

06 Jul '18

Ivan Krstic <krstic(a)fas.harvard.edu> writes: > Calling this "piercing network anonymity in real time" is highly > misleading; in reality, it's more like "making it bloody obvious > that there's no such thing as network anonymity". No. Ever hear of Chaum's "Dining Cryptographers" [1]? Anonymity right there at the table. Been around for almost twenty years. Strong anonymity is available today using chains of random-latency, mixing, anonymizing remailers based on mixmaster [2], of which there is a thriving worldwide network [3]. > The best one can hope for today is a bit of anonymous browsing and > IM with Tor ... Tor is indicted by its own documentation: ... for low-latency systems like Tor, end-to-end traffic correlation attacks [8, 21, 31] allow an attacker who can observe both ends of a communication to correlate packet timing and volume, quickly linking the initiator to her destination. [4] [1] "The Dining Cryptographers Problem: Unconditional Sender Untraceability," D. Chaum, (invited) Journal of Cryptology, vol. 1 no. 1, 1988, pp. 65-75. ftp://ftp.csua.berkeley.edu/pub/cypherpunks/papers/chaum.dining.cryptograph… s.gz http://www.e-ztown.com/cryptopapers.htm http://citeseer.nj.nec.com/context/143887/0 [2] http://sourceforge.net/projects/mixmaster/. [3] See usenet newsgroup alt.privacy.anon-server. [4] http://tor.eff.org/cvs/tor/doc/design-paper/challenges.pdf --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

Re: (micro)payments for anonymous routing in Tor?
by Josh Albrecht 06 Jul '18

06 Jul '18

> I have to comment here that all of the foregoing discussion gives me > the impression that implementing such a system would add considerable > overhead to the tor network. If people are complaining about slowness > now, then why would anyone want to add to the overhead? The total > throughput of the tor network would not be increased by a priority system, > and it's conceivable that it might be decreased a bit due to the extra > overhead, especially where that overhead incurs extra network traffic. The network overhead is pretty small. Payments are only sent every N packets, not every packet, and the number of extra bits needed for the coins is not excessive. It's possible as you say that the total throughput might not be increased by this incentive scheme, but I think that is unlikely. More people would probably run relays if they got something in return (whether that is money or faster access, which are sort of interchangeable here) > uniformly distributed. Servers with published peak data rates > greater than, for example, 4,000 KB/s are very few in number. Such a "paid" > system would essentially guarantee that the traffic of operators of those > servers would have a high priority all the time because they would be unlikely > ever to use much of their accumulated credit. That means those folks could > download huge files, always at a high priority, which might make their traffic > more identifiable as being possibly/probably their traffic. Actually, I think that the issues of reduced anonymity/higher speed and whether you run a relay or not are directly related. Nothing forces a relay operator to use the faster bandwidth that is accumulated by his relay if there is a fear that it will make him less anonymous. Alternatively, he might wish to take it out in the form of a monetary payment (instead of faster service). Similarly, a client could get super fast access by paying, and so the partitioning actually breaks the set of users into those going for speed, and those striving for more anonymity (as opposed to clients vs server operators). However, you are right that, depending on how this was implemented, it could partition the network into fast/slow user sets that might make it easier for some attacks. > Frankly, at this point I don't think such a system of "payment" for > relay priority is worth the cost in either development time and effort or > anonymity and prospective user discouragement. Many of the people in this > world who have the greatest need for the benefits of a system like tor are > also the people least likely to be able to run a relay without fear of > harassment or worse from the states that rule them. I think that people would contribute unpaid bandwidth to the network for the same reason that they do now (altruism), especially if it were the default setting (how many people really change the defaults?). However, I see the incentives (bandwidth/monetary) as important to get lots more people using Tor in the first place, which would hopefully increase the total amount of free/unpaid bandwidth available through the network. > The tor developers have, I believe, far more urgent matters to deal > with than creating a priority system, and I don't think any priority system > design has yet been shown not to have potential negative effects on the tor > community. I agree 100%. I'm not at all proposing that the developers add this in to Tor, they definitely have more important things to be working on right now. But I think that this kind of work is important for further into the future--incentives (whether they are monetary or performance-related) are going to be crucial to scaling the Tor network. And scaling the network is important for everyone's security. Without wide adoption of Tor, there are a lot of attacks that are very easy against the network, and the lack of public understanding and recognition makes it more likely that Tor could suddenly become illegal in more and more countries. So, I just think that scaling is going to be very important, and we should be thinking about what that will entail now, so that we can start thinking and planning for it. Thanks for the comments everyone. - Josh ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

"Nuremberg Files"-type case involving Conservatives wanting
by dburt＠n2h2.com 06 Jul '18

06 Jul '18

Leftist "Wanted List" Removed Date: Tue, 27 Nov 2001 08:53:59 -0800 To: <mnemonic(a)well.com>, <declan(a)well.com>, <volokh(a)law.ucla.edu> I'd like to hear what the Oregon branch of the ACLU thinks about this, after they advocating closing "The Nuremberg Files": Attorney Calls on Justice Dept to Close Hate Site By Lawrence Morahan CNSNews.com Senior Staff Writer November 26, 2001 (CNSNews.com) - A prominent First Amendment lawyer called on the U.S. Justice Department to conduct an immediate investigation of an Internet site that advocates "a horrible death by any means" for people who oppose homosexual activism. The web site, usqueers.com, is in violation of state and federal law for advocating the murder of specific individuals, including former President Ronald Reagan and Sen. Strom Thurmond, First Amendment attorney John B. Thompson said. "This is clearly left-wing domestic terrorism which Justice [Department officials] and the FBI must move on immediately with a shut down of the site and an arrest of B. Allen Ross, who operates the site from San Diego," Thompson said in a Nov. 25 letter to Attorney General John Ashcroft. http://www.cnsnews.com/ViewCulture.asp?Page=/Culture/archive/200111/CUL2001… Website Urges Death for 'Heterosexual Supremacists' By Susan Jones CNSNews.com Morning Editor November 26, 2001 (CNSNews.com) - A former U.S. president and a sitting U.S. senator are among the targets of a website that advocates "a horrible death by any means" for people it describes as heterosexual supremacists. Former President Ronald Reagan and Sen. Jesse Helms (R-N.C.) are among those described as "het supremacists" by usQueers.com. http://www.cnsnews.com/ViewCulture.asp?Page=\Culture\archive\200111\CUL2001… ----------------------------------- David Burt, Public Relations N2H2, Inc. E-mail:dburt@n2h2.com Web: http://www.n2h2.com Address: 900 4th Avenue, Suite 3600 Seattle, WA 98164 Office Phone: 206 892-1130 Cell Phone: 206 915-1283 Fax: 509 271-4226 ----------------------------------- ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. Declan McCullagh's photographs are at http://www.mccullagh.org/ To subscribe to Politech: http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ ------------------------------------------------------------------------- ----- End forwarded message -----

1 0

FC: Bombastic conservative demands that DOJ censor usqueers.com
by Declan McCullagh 06 Jul '18

06 Jul '18

The usqueers.com page in question: http://www.usqueers.com/commentary/die_soon.html Excerpt: >Ronald Reagan, ex-President, deserves to experience a horrible death soon, >and is getting what he deserves. We're listing him as wounded because the >way he is dying is horrible (Alzheimer's) and irreversible, even if he >isn't aware of it anymore, and not soon enough we will happily add him to >our Good Riddance! section. Attorney John B. Thompson, who wrote the letter to DOJ, has a fascinating history of, for instance, reportedly attacking CBS over what he viewed as threats the network's comedy show made on the life of George W. Bush: http://www.freerepublic.com/forum/a3992e0b40d02.htm Thompson wrote a letter to FCC complaining about Howard Stern: http://www.cluebot.com/articles/01/09/14/2010224.shtml >a special tip-of-the-hat to [Thompson] who, in the face of the death of >thousands of Americans, has taken time out of his busy schedule to >petition the FCC to censor Howard Stern, whom he terms a 'child molestor' >and 'pornographer'. It's nice to know some people have their priorities >straight. I'm not sure why CNSNews.com would call Thompson a "prominent First Amendment lawyer." He seems to be a prominent 1A lawyer in much the same way that Louis Freeh was a prominent privacy advocate. In his email below, David Burt is talking about when the ACLU's Oregon affiliate (not the national ACLU) filed an amicus brief arguing that a federal judge close the Nuremberg anti-abortion site (http://www.politechbot.com/p-01860.html) -Declan ---

1 0

[ISN] InfoSec News List Information
by InfoSec News 06 Jul '18

06 Jul '18

Just a little note, if you know of another site archiving ISN posts, please drop me a line so I can list them on the webpages and such. Thanks! William Knowles wk(a)c4i.org -=- InfoSec News is a privately run, medium traffic list that caters to distribution of information security news articles. These articles will come from newspapers, magazines, online resources, and more. To subscribe to ISN, send mail to majordomo(a)attrition.org with "subscribe isn" in the BODY of the mail. To unsubscribe to ISN, send mail to majordomo(a)attrition.org with "unsubscribe isn" in the BODY of the mail. The subject line will always contain the title of the article, so that you may quickly and effeciently filter past the articles of no interest. This list will contain: Articles catering to security, hacking, firewalls, new security encryption, products, public hacks, hoaxes, legislation affecting these topics and more. Information on where to obtain articles in current magazines. Security Book reviews and information. Security conference/seminar information. New security product information. And anything else that comes to mind.. Feedback is encouraged. The list maintainers would like to hear what you think of the list, What could use improving, and which parts are "right on". Subscribers are also encouraged to submit articles or URLs. If you submit an article, please send either the URL or the article in ASCII text. Further, subscribers are encouraged to give feedback on articles or stories, which may be posted to the list. Anonymous feedback is welcome. Please do NOT: * subscribe vanity mail forwards to this list * subscribe from 'free' mail addresses (ie: juno, hotmail) * enable vacation messages while subscribed to mail lists * subscribe from any account with a small quota All of these generate messages to the list owner and make tracking down dead accounts very difficult. I am currently receiving as many as 50+ returned mails a day. Any of the above are grounds for being unsubscribed. You are welcome to resubscribe when you address the issue(s). This is not a whim! Other moderaters have begun to do the same. Special thanks to the following for continued contribution: William Knowles, Aleph One, Will Spencer, Jay Dyson, Nicholas Brawn, Felix von Leitner, Robert G. Ferrell, Phreak Moi, Brian Martin, Marjorie Simmons, Richard Forno Darren Reed, and other contributers. ISN Archives: http://www.landfield.com/isn http://lists.jammed.com/ISN/ http://www.interrorem.com/arch/isn/ http://marc.theaimsgroup.com/?l=isn&r=1&w=2 ISN is Moderated by William Knowles wk(a)c4i.org. ISN is a private list. Moderation of topics, member subscription, and everything else about the list is solely at his discretion. The ISN membership list is NOT available for sale or disclosure. ISN is a non-profit list. Sponsors are only donating to cover bandwidth and server costs. - ISN is currently hosted by Attrition.org To unsubscribe email majordomo(a)attrition.org with 'unsubscribe isn' in the BODY of the mail. --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: BIS Disk Full
by Paul Lambert 06 Jul '18

06 Jul '18

>Is it this? >http://snap.bis.doc.gov/ The correct URL is: http://www.bis.doc.gov/Encryption/PubAvailEncSourceCodeNofify.html This site contains the full process "to export encryption source code that would be considered publicly available" The site has you e-mail to three addresses: crypt(a)bis.doc.gov, enc(a)ncsc.mil, web_site(a)bis.doc.gov You can also send a disk to both to 14th Street and Pennsylvania Avenue and Fort Meade.... I've submitted twice and never gotten an acknowledgement ... can't imagine that they are that busy. Paul >-----Original Message----- >From: Declan McCullagh [mailto:declan@well.com] >Sent: Sunday, June 01, 2003 8:52 PM >To: Anonymous >Cc: cypherpunks(a)lne.com >Subject: Re: BIS Disk Full > > >URL? > >Is it this? >http://snap.bis.doc.gov/ > >Email to crypt@bis does not bounce, at least not immediately. > >-Declan > >On Sat, May 31, 2003 at 01:34:00PM -0700, Anonymous wrote: >> I tried to notify the BIS that I was posting some code and I >got this >> error back: >> > <web_site(a)bis.doc.gov>: >> > 170.110.31.61 failed after I sent the message. >> > Remote host said: Can't create transcript file >./xfh4VJhUa02511: No >> > space left on device >> > >> > <crypt(a)bis.doc.gov>: >> > 170.110.31.61 failed after I sent the message. >> > Remote host said: Can't create transcript file >./xfh4VJhVC02512: No >> > space left on device >> Are our rights suspended until they get their system fixed? :-) ----- End forwarded message -----

1 0

More detailed queries of what Google stores
by Adam Fields 06 Jul '18

06 Jul '18

I asked two very specific questions in a conversation with John Battelle, and he's received unequivocal answers from Google: 1) "Given a list of search terms, can Google produce a list of people who searched for that term, identified by IP address and/or Google cookie value?" 2) "Given an IP address or Google cookie value, can Google produce a list of the terms searched by the user of that IP address or cookie value?" The answer to both of them is "yes". http://battellemedia.com/archives/002283.php -- - Adam ** Expert Technical Project and Business Management **** System Performance Analysis and Architecture ****** [ http://www.everylastounce.com ] [ http://www.aquick.org/blog ] ............ Blog [ http://www.adamfields.com/resume.html ].. Experience [ http://www.flickr.com/photos/fields ] ... Photos [ http://www.aquicki.com/wiki ].............Wiki [ http://del.icio.us/fields ] ............. Links ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] More detailed queries of what Google stores
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0