- cypherpunks-legacy - lists.cpunks.org

Hardening lists against spam attacks
by Bill Frantz 17 Dec '03

17 Dec '03

The Christmas attack against this list shows the need to develop lists which are resistant to attacks. If cyberspace is to become the town square of the next century, we need to be able to discourage brown shirts attacks on political gatherings. If lists are to be a major part of the political life of the community, then they must be resistant to attacks from knowledgeable, well financed attackers, not just the shits who were the most recent perps. There are several principles which should be observed: (1) Since attacks are based on sending to the list, receiving the list should remain substantially unchanged. (2) Spam attacks should be throttled at the source, so they do not act as a denial of service attack on the list server. Here is a sketch of a protocol which attempts to achieve these goals: (1) All messages sent to the list must be encrypted with the list's public key. This requirement is primarily to protect the posting token (see below). However, it alone will probably reduce the problem. Certainly it will eliminate the effectiveness of the "subscribe the list to some other list" attacks. (2) In order to post to the list, the poster must have a valid posting token. These tokens are available, in limited number, anonymously. Tokens remain valid unless canceled for abuse. However, if too many posts are received with a given token, TCP performance on sockets using that token may become arbitrarily slow (or the circuit may be dropped). (3) In order to limit the number of posting tokens, the list server will only issue a few per day. The lucky few who get them, everyone who asks under normal circumstances, may be determined by an algorithm designed to limit token collection by future attackers. (This area is where this proposal needs work!) ------------------------------------------------------------------------- Bill Frantz | Client in California, POP3 | Periwinkle -- Consulting (408)356-8506 | in Pittsburgh, Packets in | 16345 Englewood Ave. frantz(a)netcom.com | Pakistan. - me | Los Gatos, CA 95032, USA

16 26

Re: premail.
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

Anonymous wrote: > > A scenario: > > 1) The spooks put a bug (named Eve) on the link between > kiwi.cs.berkeley.edu and the Internet. > > Whenever kiwi.cs.berkeley.edu sents out the pubring.pgp Eve intercepts > it and replaces it with a file of the spooks' choosing. This file will > selectively replace the public pgp keys of some of the remailers (say exon) > in pubring.pgp with keys to which the spooks know the private key. > > 2) A similar bug is put on the link between the exon remailer and the > internet. All email to exon is intercepted, and if found to be encrypted > with the spooks' PGP key, it is decrypted, saved, re-encrypted with exon's > real PGP key and sent on. > > It is only a scenario. I am still using premail to send this. > A good scenario. A truly paranoid premail users should verify who signed the remailer keys. If you trust the signators and they signed the keys, you are "safe". Just do pgp -kvv some(a)remailer.com and see what comes up. Maybe remailer operators should asks someone reputable to sign their remailers' keys so that the users can easily verify the signatures. - Igor.

4 4

Anonymous Post Control
by ph＠netcom.com 17 Dec '03

17 Dec '03

It's hard to filter anonymous posters. I want to see what a few of them have to say so I can't filter on the remailers. If anonymous posters PGP sign their posts, it is still hard to filter using a lame filter software such as that which comes to Eudora. It would be nice if toad.com would verify signatures and insert a header into the messages with the PGP User Id of every poster. Then it would be very easy for many people to filter the messages using widely available off-the-shelf mail software. (I volunteer to adapt majordomo for this task if it seems like a good idea.) Peter Hendrickson ph(a)netcom.com

4 3

Re: what is a law if it cant be enforced?
by Ryan Russell/SYBASE 17 Dec '03

17 Dec '03

As long as it can be selectivley enforced, that's all they need. Ryan ---------- Previous Message ---------- To: cypherpunks cc: From: mrwilhe @ odin.cmp.ilstu.edu @ smtp Date: 12/30/96 07:43:01 PM Subject: what is a law if it cant be enforced? can our gov possibly enforce this crypto law? --esp over the net? I think what happend is the dod released the net (arpanet/Internet) to the people without looking at the implications that could arise. The people now control the net and not the gov--and they don't like it! anyway our government is ruled by the people for the people--so we should not have any kind of special laws--ones that only apply to the net and not the rest of the world, after all we have a thing called free speech! fsh

1 0

Professor Asks for Constitutional Review of New Encryption Regs
by John Gilmore 17 Dec '03

17 Dec '03

[Thanks to all the local c'punks for your support of this court case! If we do end up asking for a temporary restraining order, there'll probably be another hearing soon. I'll give you as much notice as I have. --gnu] PROFESSOR ASKS FOR CONSTITUTIONAL REVIEW OF NEW ENCRYPTION REGS "Shell Game" Attempts to Continue Unconstitutional Rules December 30, 1996 Electronic Frontier Foundation Contacts: Shari Steele, Staff Attorney +1 301 375 8856, ssteele(a)eff.org John Gilmore, Founding Board Member +1 415 221 6524, gnu(a)toad.com Cindy Cohn, McGlashan & Sarrail +1 415 341 2585, cindy(a)mcglashan.com San Francisco - Laywers for Professor Dan Bernstein today asked the Government to delay enforcement of new encryption restrictions until they can be reviewed by a court for Constitutionality. The new regulations contain the same features struck down earlier this month by Judge Marilyn Hall Patel. "The government apparently decided to ignore Judge Patel's findings.", said Cindy Cohn, lead attorney in the case. "Instead of listening to Judge Patel's analysis and attempting to fix the regulations, they simply issued new ones with the same problems. We are giving them a a chance to fix this before we bring the issue up in court." President Clinton ordered on November 15 that the regulations be moved from the State Department to the Commerce Department. Judge Patel's decision of December 6 (released December 16th) struck down the State Department regulations as a "paradigm of standardless discretion" that required Americans to get licenses from the government to publish information and software about encryption. Over Christmas, the Clinton Administration published its new Commerce Department regulations, containing all the same problems, and put them into immediate effect today. The new regulations once again put Professor Bernstein at risk of prosecution for teaching a class on encryption and publishing his class materials on the Internet. His class begins on January 13 at the University of Illinois at Chicago. Professor Bernstein's letter of today proposes that the Government agree to delay enforcement of the new regulations while Judge Patel reviews them for Constitutionality. Failing that, Professor Bernstein will ask the court for a temporary restraining order to block their enforcement. "The government is forcing us to go back to Judge Patel again to have the new regulations declared facially unconstitutional." said Ms. Cohn. "This time we believe that a nationwide injunction against their enforcement is merited." "The new encryption rules are a pointless shell game," said John Gilmore, co-founder of the Electronic Frontier Foundation, which backed the suit. "Industry and Congress had asked that the draconian State Department regulations be eliminated in favor of existing, reasonable, Commerce Department regulations. Judge Patel invalidated the State Department regulations because they were draconian. Rather than address the concerns of either, President Clinton moved the draconian regulations into the Commerce Department -- and made them tougher in the process. It's his political decision whether to ignore and anger industry leaders, but he can't ignore a federal district court judge." Civil libertarians have long argued that encryption should be widely deployed on the Internet and throughout society to protect privacy, prove the authenticity of transactions, and improve computer security. Industry has argued that the restrictions hobble them in building secure products, both for U.S. and worldwide use, risking America's current dominant position in computer and communications technology. Government officials in the FBI and NSA argue that the technology is too dangerous to permit citizens to use it, because it provides privacy to criminals as well as ordinary citizens. Background on the case The plaintiff in the case, Daniel J. Bernstein, Research Assistant Professor at the University of Illinois at Chicago, developed an "encryption algorithm" (a recipe or set of instructions) that he wanted to publish in printed journals as well as on the Internet. Bernstein sued the government, claiming that the government's requirements that he register as an arms dealer and seek government permission before publication was a violation of his First Amendment right of free speech. This was required by the Arms Export Control Act and its implementing regulations, the International Traffic in Arms Regulations. The new regulations have the same effect, using the International Emergency Economic Powers Act, the Export Administration Regulations, and a "state of national emergency" that President Clinton declared in 1994 and has re-declared annually. In the first phase of this litigation, the government argued that since Bernstein's ideas were expressed, in part, in computer language (source code), they were not protected by the First Amendment. On April 15, 1996, Judge Patel rejected that argument and held for the first time that computer source code is protected speech for purposes of the First Amendment. On December 6, Judge Patel ruled that the Arms Export Control Act is a prior restraint on speech, because it requires Bernstein to apply for and obtain from the government a license to publish his ideas. Using the Pentagon Papers case as precedent, she ruled that the government's "interest of national security alone does not justify a prior restraint." Judge Patel also held that the government's required licensing procedure fails to provide adequate procedural safeguards. When the Government acts legally to suppress protected speech, it must reduce the chance of illegal censorship by the bureacrats involved -- in this case, the State Department's Office of Defense Trade Controls (ODTC). Her decision states, "Because the ITAR licensing scheme fails to provide for a time limit on the licensing decision, for prompt judicial review and for a duty on the part of the ODTC to go to court and defend a denial of a license, the ITAR licensing scheme as applied to Category XIII(b) acts as an unconstitutional prior restraint in violation of the First Amendment." She also ruled that the export controls restrict speech based on the content of the speech, not for any other reason. "Category XIII(b) is directed very specifically at applied scientific research and speech on the topic of encryption." The new regulations continue to insist that the Government is regulating the speech because of its function, not its content. The judge also found that the ITAR is vague, because it does not adequately define how information that is available to the public "through fundamental research in science and engineering" is exempt from the export restrictions. "This subsection ... does not give people ... a reasonable opportunity to know what is prohibited." Judge Patel also adopted a narrower definition of the term "defense article" in order to save it from unconstitutional vagueness. ABOUT THE ATTORNEYS Lead counsel on the case is Cindy Cohn of the San Mateo law firm of McGlashan & Sarrail, who is offering her services pro bono. Major additional pro bono legal assistance is being provided by Lee Tien of Berkeley; M. Edward Ross of the San Francisco law firm of Steefel, Levitt & Weiss; James Wheaton and Elizabeth Pritzker of the First Amendment Project in Oakland; and Robert Corn-Revere, Julia Kogan, and Jeremy Miller of the Washington, DC, law firm of Hogan & Hartson. ABOUT THE ELECTRONIC FRONTIER FOUNDATION The Electronic Frontier Foundation (EFF) is a nonprofit civil liberties organization working in the public interest to protect privacy, free expression, and access to online resources and information. EFF is a primary sponsor of the Bernstein case. EFF helped to find Bernstein pro bono counsel, is a member of the Bernstein legal team, and helped collect members of the academic community and computer industry to support this case. Full text of the lawsuit and other paperwork filed in the case is available from EFF's online archives at: http://www.eff.org/pub/Privacy/ITAR_export/Bernstein_case/ The full text of today's letter from Professor Bernstein to the Government, and proposed stipulation, are at: http://www.eff.org/pub/Privacy/ITAR_export/ Bernstein_case/Legal/961230.letter http://www.eff.org/pub/Privacy/ITAR_export/ Bernstein_case/Legal/961230_proposed.stipulation The new Commerce Department Export Administration Regulations are available at: http://www.eff.org/pub/Privacy/ITAR_export/961230_commerce.regs

1 0

Constitutionality of new regs.
by Bovine Remailer 17 Dec '03

17 Dec '03

One issue which I haven't seen anybody address is the provision to make export licenses easier to obtain for those companies which show a credible business plan that supports GAK. 1) Isn't this showing favouritism in an administrative decision to people who support the government's political agenda. 2) If the export of a certain encryption `item' is inimical to `National Security', isn't the harm to the `National Security' the same regardless of whether the exporter plans to produce GAK products in the future or not? Based on these two points shouldn't this aspect of the regulations considered as being `arbitrary' and hence unconstitutional. A further thought. If you obtain an export license by showing the government a business plan that supports GAK, but then do not follow your business plan, how will the goverment `get' you?

2 1

Shell Game News
by John Young 17 Dec '03

17 Dec '03

Online reports on the new crypto regs. MSNBC features Bernstein's challenge, with multiple sidebars. http://www.msnbc.com/news/49260.asp http://usatoday.com/news/washdc/ncs20.htm (AP brief)

1 0

Thermojetic Herbal BreakThrough!!!
by jguarnie＠ix7.ix.netcom.com 17 Dec '03

17 Dec '03

******SORRY FOR THE INTRUSION THIS IS A ONE TIME MESSAGE***** ********YOU WILL NOT BE CONTACTED AGAIN******** !!!!!!!!!! THERMOJETICS HERBAL BREAKTHROUGH !!!!!!!!!! ** FINALLY AN ALL NATURAL DIET/NUTRITIONAL PROGRAM ** **100% GUARANTEED TO WORK ** A Major breakthrough was the discovery and the use of some very special herbs. "THERMOJETICS" Contains twenty-one different herbs from around the world including important chinese herbs and herbs from the Amazon Rain Forest. Each herb is specially chosen to work in harmony with the others to creat a powerful yet perfectly balanced product. Herbs are nature's nutritional bounty. They are rich sources of vitamins minerals,fiber, and related nutrients essential for good health... Yes Lose Up To 30 lbs In 30 days, 100% guarantee programs start at $29.95 plus Shipping & Handling {30 DAY SUPPLY APROX.} LOSE 2 to 6 POUNDS A WEEK!!!! The Herbalife program does not use Drugs, Medications, Hormones or other Synthetic agents to promote weight loss.{Non Addicting} INCREASE YOUR METABOLISM WHILE DECREASING YOUR APPETITE!!! Our program is nutritionally complete so individuals can loss weight safely and effectively, and just as important keep the weight off..../ "Liquid Protein" diets, which use nutritionally unbalanced protein-based drinks, or starvation diets, which reduce calories so low [less than 500 Calories daily] that people literally starve to lose weight,are both extremely unhealthy and have less than 20% long-term success. Save Money & Time While Dieting Why join other weight loss clubs,or expensive diet programs where they charge you each time you vist or a monthly fee "plus" the cost of their products,or use an inadequate store bought drink or other diet plan....OUR PROGRAM WORKS !!! 100% GUARANTEED. you have nothing to lose except those extra pounds....and you don't have to interrupt your busy lifestyle, no office or club meetings to attend no need to go to the store for more diet products {we ship directly to you, usually within 48hrs..} Programs are aproximately a thirty day supply of product.Usually the money you save on your grocery bill while dieting more than pays for the programs.... Over 16 Years Of Healthy, Fit & Content Customers... Dr.Recommended...Absolutely. Herbalife has a Medical and Sientific Advisory Board that tests and researches Herbalifes products and continually monitors reports of results sent by customers and distributors. In addition, many physicians and other health professionals in all parts of the world use Herbalife both in their personal lives and in their practices. WHAT IS HERBALIFE??? Herbalife is a scientifically formulated, herbal-based,calorie-reduced nutrition program. The Herbalife program has been used for weight control and health enhancement since 1980, by not hundreds but "literlly MILLIONS" of individuals around the world. WHO SENT YOU THIS MESSAGE:? We Are Janice And Anthony Guarnieri { NATURALLY YOU } and are Independent Distributors of the Herbalife Company Whose Products are only available soley through their independent distributors such as Ourselfs. We are actual Real Life People who have followed this program and proven it does work....WANT MORE INFORMATION ABOUT US,HERBALIFE,& THESE NUTRITIONAL/DIET PROGRAMS Check "NATURALLY YOU" Out On The Web: http://guarnieri.com/naturaly.htm There you can find out way more information then we can tell you in this letter, & Link to the "Herbalife Home Page" to find out more about Herbalife.and meet us personaly at our own Page if you like. *** NATURALLY YOU WEIGHT LOSS PROGRAMS *** #1 START NOW PROGRAM $29.95 plus S & H Comes with both the Green & Beige Thermojetics tablets. {21 natural herbs,three natural anti virals [natures infection fighters],contains "valerian root" a natural calmer. All natural tablets you take,twice daily usually at 10 am and 3 pm {three green & 1 beige tablets}they nourish your body's metabolism while supressing your appetite..gives a full feeling before finishing the meal helps produce a more desirable energy balance in the body so excess fat mat be reduced.} #2 FAST PROGRAM $49.90 plus S & H Comes with the Green & Beige Thermojetics tablets, and also Cell Activator capsules"THERMO BOOSTER" taken with the green & beige speeds up the process of Thermos by increasing the absorption rate. Cell Activator "reactivates"the process, making your nutrients much better utilized by your body.Helps your body absorb more from the foods you take in so you need less intake of foods to satisfy your body's nutritional needs....Add this to your program & watch how your results TAKE OFF!{usually take two cell activator capsules with the green & beige tablets} #3 FASTER PROGRAM $69.85 plus S & H Comes with the Green,& Beige Thermojetics tablets,The Cell Activator capsules & the Yellow Thermojetics tablets.... Keep the "THERMO" effect going for 24 hours! Made to take at night and before you goto bed. Lose weight while you sleep! Non-stimulating effect. From Citrin [Garcinia] and Chromium AN ESSENTIAL MINERAL THAT HELPS REGULATES BLOOD SUGAR. Some Herbologists claim it retards the ability of the hormon that allows us to store fat...{usually take 1 tablet in the evening, & 1 tablet before going to bed} #4 FASTEST PROGRAM $89.85 plus S & H Comes with the Green,Beige,& Yellow Thermojetics tablets,The Cell Activator capsules...& The FORMULA 1-MEAL REPLACEMENT SHAKE "New and Improved!"Tastes incredible! Our original weight-loss program, reformulated to contain Aminogen. Uses the same patented enzyme system. derived from plants to help breakdown and better assimilate protein, Very high in nutrients. Provides up to 1,500 calories worth of vitamins, minerals, proteins and carbohydrates, but does so in just 80 calories with less than one gram of fat! Also high in fiber and contains all essential aminio acids. HAS NO REFINED SUGAR. Available in Dutch Chocolate, Wild Berry, French Vanilla, and Tropical Fruit. ----------------------------------------------------------------- What you are actually doing with these programs is not only losing weight,but replacing your everyday processed,artificial,imitated, presevetived,foods available today, with all natural Herbal foods, proteins,vitamins,minerals,carbohydrates,& nutrients, Herbalife products are not intended to be a cure for disease,but when the body receives ALL nutrition in the CORRECT BALANCE at the celluar level,it is absolutely amazing what happens to all bodily functions! Naturally you 29850 Lorraine Warren, Michigan. 48093 810-751-2226 810-751-2226 fax --------------------------------------------------------------- We Are Independent Distributor For The Herbalife Company ---------------------------------------------------------------- ***Please Print This Form Out Before Entering Your Information*** Naturally You Ordering Form:>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> Please Enter The Following Information: _____________________________ E-Mail Address /_____________________________/ ...So we can get back in touch with you. NAME:____________________________________________________________ ADDRESS__________________________________________________________ SPACE,APT# ADDRESS_______________________________________________ CITY, STATE,PROV. COUNTRY________________________________________ ZIP CODE:________________________ ------------------------------------------------------------------- PLEASE PUT A " X " IN THE BOX NEXT TO THE DIET PROGRAM YOU WISH TO ORDER: { all programs are a 30 day aprox. supply of product } START NOW PROGRAM $35.95___ QUANTITY___ FAST PROGRAM $55.90___ QUANTITY___ FASTER PROGRAM $75.85___ QUANTITY___ FASTEST PROGRAM $95.85___ QUANTITY___ [Formula 1-shake Flavor:] Dutch Chocolate____,French Vanilla____, [Choose one flavor]per program. Wild Berry____,Tropical Fruit____. { All Prices Include The Shipping & handling Fee } ----------------------------------------------------------------- *ALL PROGRAMS COME WITH:"The herbalife Good health Through Intelligent Nutrition Catalog"{contains information about all herbalifes products and how and why they help you}. *A Thermojetics Energy Guide *Recipes For The Meal Replacement Shakes *"Themo Tips"Instructions For Getting The Maximum Benefits Out Of These Programs. *Assorted Testimonials About Herbalife Products *A FREE GIFT!! ***100% MONEY BACK GUARANTEE!!!*** *Personal instructions about your individual program you have chosen. !!ATTENTION ORDER SOON SO YOU CAN RECEIVE AND FILL OUT THE HERBALIFE FREE HAWAII VACATION ENTRY FORM:{must be mailed back to us at Naturally You by January 7th to make the january 15th drawing date.} ------------------------------------------------------------------ PAYMENT METHOD:Please Indicate Which Method Of Payment You Wish To Use:{all orders shipped ground parcel post} [with the exception of out of U.S.A.orders:} place a " x " in the apropriat box. C.O.D. SHIPPED DIRECTLY TO YOU___ {we pay the c.o.d.charge you only pay the S&H fee} CHECK, OR MONEY ORDER U.S. FUNDS ONLY___ CHARGE CARD: VISA, MASTER CARD OR NOVUS/DISCOVER___ {Sorry we are "only" able to take charge orders live over the phone, for security reasons we only take charge card orders "live": Please E-Mail your Request & You Will Be Given A Phone # To Call Collect [no charge to you] To Charge Your Order} **INDIVIDUAL PRODUCTS ARE AVAILABLE ON REQUEST** Please send individual request to naturaly(a)guarnieri.com, or to our address below with method of payment..Thank You ---------------------------------------------------------------- Please Print Then Fill Out This Form & Send It To The Address Below With Your Order & Method Of Payment: TO: ORDERING DEPT. C/0 NATURALLY YOU 29850 LORRAINE BLVD WARREN, MI. 48093 Thank You And Happy Holidays, From all Of Us At Naturally You P.S It was brought to our attention that some customers wanted to Mix & Match their orders No Problem use our Reorder Form off the Web Page At {http://guarnieri.com/reorder.htm}or E-mail Your personal requsts...."We Aim To Please" Thank You.... {EXAMPLE: You Want The #1 program & The Meal Replacement Shake} --------------------------------------------------------------- E-Mail us at: naturallyyou(a)guarnieri.com To Return To Naturally You's Home Page http://guarnieri.com/naturaly.htm

1 0

Musical Instruments WELCOME TO INTERNET'S BEST FULL LINE MUSIC STORE
by mozart＠asianet.net.hk 17 Dec '03

17 Dec '03

We supply worldwide the EXACT SAME musical instruments & accessories that one can purchase from the local importers, wholesalers, stores, and teachers, BUT FOR LESS! 100% SATISFACTION GUARANTEED! We stock US$ millions in all types of musical instruments and accessories from more 3,000 manufacturers. Orders may be placed in any quantity mix, and shipped directly to you. No minimum orders! For DETAILS, mailto:mozart@asianet.net.hk a BLANK message ONLY and type "INFO" in the SUBJECT HEADER. We sincerely apologize if this is an unwanted e-mail. Please hit REPLY and type "REMOVE" in the SUBJECT area and SEND to be removed from this list. _ _ _ _ / \ -A ll brands/models |\___ALAMO__|_|_|_(__MUSIC LTD._//\ \ -L argest selection |/----//---[!|!|!]-----\\-------\\/ / -A ll credit cards [| (L|O|W|E|S|T) |] \_/ -M ost traffic site \\=(P|R|I|C|E|S)=// -O ne-Stop Cyber Shop \\__|*|*|*|____// [_]_[_]

1 0

Re: Zippy, anonymously
by Alan Olsen 17 Dec '03

17 Dec '03

At 04:18 PM 12/31/96 -0500, Adam Shostack wrote: >http://www.metahtml.com/apps/zippy/welcome.mhtml > >Let Zippy provide you with web service. Chaining through the >anonymizer works, too. :) A suggested page is: http://www.metahtml.com/apps/zippy/zippy.mhtml/http://www.nsa.gov:8080/dirn… Pretty damn funny! (At least the version I got...) --- | If you're not part of the solution, You're part of the precipitate. | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0