- cypherpunks-legacy - lists.cpunks.org

DoD Zips Echelon
by John Young 17 Dec '03

17 Dec '03

DoD News Briefing Tuesday, April 21, 1998 - 1:45 p.m. (EDT) Briefer: Captain Mike Doubleday, USN, DASD (PA) Q: Can you comment about a report recently to the European parliament concerning the development these last years of U.S. and British eavesdropping system called Echelon. A: I'm sorry to say I have absolutely nothing on that.

1 0

Re: What is this nonsense? (Anti DVD piracy chip)
by Alan Olsen 17 Dec '03

17 Dec '03

At 02:16 PM 9/13/96 +0200, Gary Howland wrote: >Taken from a recent Edupage: > >> SGS-THOMSON TAKES AIM AT DVD PIRACY >> SGS-Thomson Microelectronics has developed a computer chip that prevents >> would-be DVD pirates from making unlawful copies of movies from digital >> video disc players. The chip scrambles the disk's coding if it's duplicated >> on a VCR. (Investor's Business Daily 11 Sep 96 A6) > >Anyone know anything about this? Sounds like nonsense to me ... Probibly a variation on the Macrovision copy protection scheme. Of course they do not care that such copyprotection methods usually cause a loss in signal quality. (Which is why people buy laser discs in the first place.) Hopefully it will be something that never succeeds in the marketplace. (Although i expect it to be imposed whether the consumer wants it or not or how bad it screws up the signal.) --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "Microsoft -- Nothing but NT promises."

1 0

Re: did you go to school?
by Jim Ray 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: robert(a)precipice.v-site.net, cypherpunks(a)toad.com, remailer-operators(a)c2.org Date: Fri Sep 13 17:07:32 1996 "Hipcrime" Detweilled: ... > JMR, it's hard to believe that your English education is SO LACKING, > that you missed the fact, that in my sentence quoted above, the word > "ours" refers to MANKIND IN GENERAL, not me personally. > > Go sit in the corner with the duncecap on, and don't come out until you > can read an 8th grade piece of literature (with full comprehension). > [This doesn't deserve comment, and I have already killfiled this asshole-liar-who-is-unable-to-admit-when-he's-wrong, but...] 1. Go run a remailer if you proclaim that you like them so much. 2. Private property that belongs to "mankind in general"? A new one on me. Webster's may help you understand English, but your debate skills are akin to your personality, and yes, once again, that was private email. JMR -- "who is beginning to get used to this from the net.jerk population. Regards, Jim Ray -- DNRC Minister of Encryption Advocacy "As govt.s grow arithmetically, corruption grows exponentially." -- Ray's Law of official corruption. Defeat the Duopoly! Stop the Browne out. Harry Browne for President. Jo Jorgensen for Vice-president. http://www.HarryBrowne96.org/ http://www.twr.com/stbo ___________________________________________________________________ PGP id.E9BD6D35 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 I will generate a new (and bigger) PGP key-pair on election night. <mailto:liberty@gate.net> http://www.shopmiami.com/prs/jimray ___________________________________________________________________ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMjnNGm1lp8bpvW01AQFp/AP/UlGf+g56m/KjFOV6sTvD0+xTrAoQ9WFp TThhZ9OLgQ2FQqEBJZ/vfGSUf7OxpYd5Q8cynLsnRXvH+9+z0XpzStC8KYyCuv5E VFu10VeTs4egEX3dy6JSmFgZehJxDNsu/nVceTLmVX54JC+qMJ8hC7PPRZtvrSCy LU8E9pWJMEY= =8Cyf -----END PGP SIGNATURE-----

1 0

Forwarded message from Christopher Klaus (SYN Flooding [info])
by Mycroft 17 Dec '03

17 Dec '03

------- start of forwarded message (RFC 934 encapsulation) ------- Content-Length: 3804 Return-Path: owner-bugtraq(a)NETSPACE.ORG Received: from brimstone.netspace.org ([128.148.157.143]) by chrome.DataSphere.NeT (8.7.5/8.7.3) with ESMTP id NAA05258 for <mycroft(a)DATASPHERE.NET>; Fri, 13 Sep 1996 13:20:11 -0700 (PDT) Received: from netspace.org ([128.148.157.6]) by brimstone.netspace.org with ESMTP id <24730-24839>; Fri, 13 Sep 1996 14:27:52 -0500 Received: from netspace.org (netspace [128.148.157.6]) by netspace.org (8.7/8.6.12) with SMTP id OAA28644; Fri, 13 Sep 1996 14:27:19 -0400 Received: from NETSPACE.ORG by NETSPACE.ORG (LISTSERV-TCP/IP release 1.8b) with spool id 397572 for BUGTRAQ(a)NETSPACE.ORG; Fri, 13 Sep 1996 14:23:31 -0400 Received: from netspace.org (netspace [128.148.157.6]) by netspace.org (8.7/8.6.12) with SMTP id OAA27584 for <BUGTRAQ(a)NETSPACE.ORG>; Fri, 13 Sep 1996 14:19:44 -0400 Approved-By: ALEPH1(a)UNDERGROUND.ORG Received: from phoenix.iss.net (phoenix.iss.net [204.241.60.5]) by netspace.org (8.7/8.6.12) with SMTP id LAA05934 for <bugtraq(a)netspace.org>; Fri, 13 Sep 1996 11:02:26 -0400 Received: (from cklaus@localhost) by phoenix.iss.net (8.6.13/8.6.12) id KAA06507 for bugtraq(a)netspace.org; Fri, 13 Sep 1996 10:58:24 -0400 X-Mailer: ELM [version 2.4 PL24 PGP2] Content-Type: text Approved-By: Christopher Klaus <cklaus(a)ISS.NET> Message-ID: <199609131458.KAA06507(a)phoenix.iss.net> Reply-To: Christopher Klaus <cklaus(a)iss.net> From: Christopher Klaus <cklaus(a)iss.net> Sender: Bugtraq List <BUGTRAQ(a)NETSPACE.ORG> To: Multiple recipients of list BUGTRAQ <BUGTRAQ(a)NETSPACE.ORG> Subject: SYN Flooding [info] Date: Fri, 13 Sep 1996 10:58:24 -0400 [Below we have a software tool that will recognize SYN floods and correct the problem.] Possible solution to SYN Flooding attacks The attack is on! Both 2600 and Phrack, 2 of the biggest well-known underground hacking magazines, have posted exploit code to do one of the nastiest denial of service attacks that the Internet has seen so far. Hundreds of people have access to these programs to bring down services on the Internet. Many of these people are targeting their attacks at various organizations such as ISP. Panix, an ISP, has been under attack for quite a few days now and they have not been able to receive email. Many other ISPs are suffering from the SYN flood attack. This attack is being discussed on many mailing lists, newsgroups, and Thursday's Wall Street Journal (9/12/96). Fortunately a solution already exists as we discuss below. Everyone connected to the Internet relies on TCP/IP. When you establish a connection with TCP, you do a 3-way handshake. The connecting host sends a SYN packet to the receiving host. The receiving host sends a SYN|ACK packet back and to fully establish a connection, the connecting host finally responds with an ACK packet. In a SYN flood attack, an attacker host sends many SYN packets and does not respond with an ACK to the SYN|ACK's. As the receiving host is waiting for more and more ACK's, the buffer queue will fill up and the receiving machine can no longer accepts legitimate connections. This means that attackers can block your email, web, or any other service you are providing on the Internet. To even make this attack worse, the code exploiting the problem randomizes the source address of the attacking host. Thus, the receiving machine gets packets that appear to be from all over the Internet, hiding the location of the attacker. Solution There are several things we can do to stop these attacks from being effective. With the routers for most ISP, they should be blocking any non-internal addresses from leaving their network and going to the Internet. This will stop an attacker if their ISP implements this. Unfortunately, this does not stop an attack from areas on the Internet that do not block that. But at least the ISP can feel comfortable to know that an attacker can not launch his attack from that ISP. Here are two methods of helping eliminate the problem. Some of the exploit code I have seen does not pick a random source port. It would be easy to block the attack with a router denying any packets coming from a specific source port. This may not be too effective because of the trivial nature of adding code to randomize the source port, sequence number, source address, and TTL. But it might help you temporarily if you notice the attacks have any pattern that can be blocked by router rules. Another way to fix this is to set the kernel maximum number of half open connections allowed (SO_MAXCONN) to a higher number than the default value. We have a tool that will look for SYN packets that do not get followed with ACK and clean the half open connections by sending a RST packet. This unclogs the port and allows legitimate connections to happen. This tool is called RealSecure (tm). To obtain a copy of the RealSecure tool, send email to majordomo(a)Iss.net and within the body of the message, type: subscribe realsecure RealSecure (tm) is a comprehensive attack recognition and real time response tool that ISS is alpha testing and will expire in 60 days. - -- Christopher William Klaus Voice: (770)395-0150. Fax: (770)395-1972 Internet Security Systems, Inc. "Internet Scanner finds Ste. 660,41 Perimeter Center East,Atlanta,GA 30346 your network security holes Web: http://www.iss.net/ Email: cklaus(a)iss.net before the hackers do." ------- end ------- -- [:]====================================================================[:] [\] Mycroft <mycroft(a)datasphere.net> >>>>>[DataSphere]<<<<< [=] [=] Key fingerprint = DD B1 A7 D9 2D DF A0 F7 23 C2 6B EC 5A AD 01 A9 [\] [:]====================================================================[:]

1 0

Re: PANIX.COM down: denial of service attack
by Alan Olsen 17 Dec '03

17 Dec '03

At 10:13 AM 9/13/96 -0400, pjb(a)ny.ubs.com wrote: >> "As to who might be targeting Panix, the firm's Mr. Rosen speculated it > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > >It could, of course, also be someone, from a set of several million, that >find Mr. Rosen to be such as odious prick that they did it just to drive him >out of their misery. Just thinking out loud.. Or it could be any of the readers of 2600 (which published an article on SYN floods in the last issue). --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon "Microsoft -- Nothing but NT promises."

2 1

Re: Workers Paradise. /Political rant.
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:06 PM 9/13/96, Asgaard wrote: >From a >pure egotistical viewpoint I really should join the present calls >for, as the debate goes here in Sweden, transforming the enemployed >into 'maids and servants'. But I don't. I think it would backlash; >the 'lower classes' would come back at us and cut our throats >eventually (say, when 70% are serving the remaining 30%). The 70% already _are_ cutting the throats of the other 30%. It's called a 60%+ tax rate. This is the sum of: federal income tax, state income tax, city tax, sales tax, gas tax, energy tax, property tax, entertainment tax, special excise taxes on alcohol, cigarettes, etc., and miscellaneous other taxes tacked on...not to mention the "double taxation" of certain forms of income--every dollar Intel earns is taxed first at 48% by the Feds and the State of California, then what's left is taxed at 35-40% when it reaches the owners of the company. (Oh, and buyers of PCs containing Intel chips pay 8.25% for the privilege of buying the PC.) The masses have realized, as De Tocqueville predicted 150 years ago, that they can use the democratic process to pick the pockets of others. This is why I have no faith in "democracy," and consider crypto anarchy to be the best way to undermine this flawed system. >With the present rate of increase in world population the planet >will go to hell anyway. But suppose the population problem could >be fixed. Then, with technology escalating towards singularity, Cf. what sociologists call "the demographic transition." Countries that value learning and wealth are _not_ facing a population problem. In fact, many such countries are now at "below replacement" birth levels. >machines doing almost all labor, there could certainly exist a >system where the 'dumb' and 'lazy' could be fed and housed properly >without anybody complaining. Those who want to become maids and >servants for some extra pocket money, well, good luck to them. One need not wait for this fanciful "singularity"--by any reasonable standards of providing minimal food and minimal shelter, the unemployed poor of today are receiving this. Ask a peasant of, say, 18th century Europe if he'd consider himself sheltered and fed if he could have an apartment in a building, a microwave oven, a television, a MacDonald's nearby, and enough extra spending money for some beer. I predict that "the masses fed by the nanotechnological singularity" will be just as likely to riot and burn down their own neighborhoods as the "masses fed by industrialization and distribution" are prone to do today. (The point being that people want more than "basic food and shelter," but are often unwilling to make the commitments and sacrifices in their lives to gain the wherewithal to earn significant salaries.) >But to force people into menial service jobs just to literally >survive is not to my taste. No, give them minimal shelter for >nothing and from there on let the market anarcho-capitalistic >struggle begin, for obtaining a higher than minimum material >standard or reputational standing. There is a basic error here, one that I see often. Who says that the "anarcho-capitalists" will freely give away, say, some vast fraction of their profits so as to subsidize the overall society? Any more so than the owners of flour mills and computer chip companies give away 99% of their profits. And crypto anarchy means it will not be clear who is making what, who is generating what income, and where it is located. And the producers of wealth will be able to move accounts, resources, and even factories around the world. If one jurisdiction socks them with exorbitant taxes (which may be anything more than a nearly ignorable 10% overall tax), they can move. Regulatory arbitrage strikes again. Ask your fellow Swedes about the drain of talent out of Sweden in the 60s and 70s...the flight of Bergmann, actors and actresses, corporations, and even ABBA. (Though I understand most of ABBA moved back to Sweden and is now chummy with the Queen.) --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

7 6

NANDO: Backup Program
by E. Allen Smith 17 Dec '03

17 Dec '03

Unfortunately, they're only using DES - probably because they do serve international customers. > _________________________________________________________________ > The Peanut Roaster > _________________________________________________________________ > HIAWATHA BRAY: ON-LINE BACKUP SAVES THE DAY > __________________________________________________________________________ > Copyright &copy 1996 Nando.net > Copyright &copy 1996 The Boston Globe [...] > (Sep 6, 1996 01:17 a.m. EDT) -- It's written in almost every computer > instruction manual and technical guide. It's encouraged, sometimes > even mandated, by MIS lords. Yet it's almost universally ignored. [...] > Fortunately, just before the drive when south I had taken up an offer > from a company called Connected Corp., of Framingham, Mass., which > markets an appealing product called DataSafe. [...] > DataSafe is an on-line data backup system. You load the DataSafe > software onto your computer then connect via the Internet to > Connected's data center. The system asks for a credit card number and > a password of your choosing. Once done, DataSafe searches your hard > drive, identifies every data file, and uploads them to the DataSafe > computer. The system doesn't back up your applications, such as your > copy of WordPerfect; just the data files you've created with the > software. DataSafe stashes your stuff in two separate computers to > ensure nothing is lost. [...] > But a dead hard disk works wonders on one's powers of concentration. > With all my original data gone, it was time to find out whether this > DataSafe really worked. I reinstalled the DataSafe software onto my > new hard drive, made the connection with Connected, and waited to > receive my files. No dice. I'd forgotten the password. And Connected > refused to give it to me or provide me with a new one. That's because > the backed-up data is encrypted, and the password is the key. Even the > folks at Connected can't crack the encryption without your password. > They designed the system that way to reassure customers that nobody > can tamper with the data stored there. [...] > But many, perhaps most, people can't afford to lose a fragment of > data. For them, on-line data backup systems like DataSafe may be the > answer. The company charges $14.95 a month to store 50 megabytes of > data. The software can be set to automatically back up all new and > modified files every day whenever you choose. [...] > Businesses can use the system as an inexpensive data network. Just > create an account, then give the password to everybody in your > company. Now you can store commonly-used files on the backup server, > where they can be downloaded by anyone who needs them. > Connected isn't the only company that has figured this out. MCI Corp. > is selling an Internet-based data backup service. So is McAfee > Associates, the maker of anti-virus software. Many people will > hesitate to store their computer files with a stranger, encryption or > no encryption. But if that makes you uneasy, imagine how you'd feel if > your hard disk crashed. Unless you're a columnist, it could be a > disaster. > (Hiawatha Bray is a member of the Globe staff. You can send him > electronic mail at Bray(a)globe.com.) [...] > Copyright &copy 1996 Nando.net

1 0

Pipeline Down
by jyy＠gnn.com 17 Dec '03

17 Dec '03

Pipeline appears to be down. Maybe a SYN sin, maybe just a Sunday sin. If any unanswered messages to jya(a)pipeline.com, try jyy(a)gnn.com

1 0

Re: common sense (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 13 Sep 1996 11:33:24 -0700 > From: Dale Thorn <dthorn(a)gte.net> > Subject: Re: common sense > > HipCrime wrote: > > And rather than "dispensing drugs in clinics," why not simply > > scrap the drug laws entirely? People have a *right* to do as > > they please with their bodies. > > Let's hear it for common sense. It's the first decent posting I've > > seen to this list. > > -- HTTP://www.HIPCRIME.com > > A question for you: In the Civil Rights era (1960's mostly), we dealt > with the question of whether people had the "right" to not only choose > their neighbors, but whether they could extend that logic, so once they > move in, whether they could "enforce" the status quo by preventing other > people from moving in if those other people didn't "fit in" somehow. > > If drugs and/or other items of Vice are liberalized, there will be a > tremendous marketing opportunity created, and new stores and new > departments within existing stores will pop up everywhere offering the > newly-liberalized goods and services. So my question is, since there are > "dry" areas in the country now, where the citizens can vote to exclude > alcohol sales, for example, will drugs, prostitution, gambling, etc. > fall within the purvey of citizen democracy as in the "dry" county > example, or will there be new problems with this analogy, and will any > of those new problems relate to the Civil Rights issues I mentioned > previously? > History already has examples of such incidences. Alaska, California, and other states have tried various levels of legalization. To date I believe that all such experiments have ended because of federal pressure on the uncooperative states. The Indians 'right by treaty' to operate gambling casino's is another good example of a contemporary situation. Jim Choate

1 0

unwanted mail..what can I do?
by AwakenToMe＠aol.com 17 Dec '03

17 Dec '03

I recieved mail from netfree.com.. I tried mailing it back (it def. had a forged address, but I got the netfree from the mail header.....) So anyway..... I tried sending to root@netfree....my mail was rejected (not unknown ...it was rejected by the system) said it wasnt authorized... so I tried support@netfree...same thing. It ISSSSS rather annoying...any sugestions?

2 1