- cypherpunks-legacy - lists.cpunks.org

Re: WARNING vIRuS!
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Sat, 31 Aug 1996 23:41:58 -0700, Alan Olsen wrote: >> There is a new and VERY dangerous virus called the HAZ-MAT virus! >This is the clueless kind of crap I expect pitched to AOL users and upper >level management. >The only way that you could obtain the effects described above is with Black >Magic and/or Voodoo. (And not even then.) > >I remember a similar hoax going around about 3-4 years ago about viruses in >image files. I guess nothing on the net is ever forgotten entirely. >Especially the urban legends and bullshit. You ever notice how that is? People *never* remember things like "You have to execute something to get a virus". They *always* remember something like "Good Times." Reminds me of the guy who said you could stick all sorts of sensitive data in README.TXT because you can be sure nobody will look in there. - "'Anonymity is bad,' says a source who wishes to remain anonymous." - Nuff' said. * Home: Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp * Autoresponder: send email w/subject of "send resume" or "send PGPKEY" * Work: cadams(a)acucobol.com | V.M. (619)515-4894 | (619)689-6579 * Member in good standing of the GNU whirled hors d'oeuvre

1 0

Re: Moscowchannel.com hack
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Sun, 1 Sep 1996 10:09:32 -0500 (CDT), Igor Chudov @ home wrote: >> > Not really crypto, but related to the DOJ hack in a way. >> > >> > Moscow Channel is a pretty slick, Russian news/commentary >>page. Their Web >> > site was hacked and altered by someone who didn't seem to >>like Russians all >> > Just a matter of time before some builds a dedicated Satan >>type tool that >> > scans for HTTP server holes or messed up file permissions >>to make locating >> > potential victims easy. >> Write your web site to a CD-ROM and hard-code the base >>directory into the >> webserver. > >A hacker who has root can forcibly unmount the cdrom and mount >another >directory on that node. Not a good solution. Hack your system kernel to only allow mounting read-only media to that point. Most hackers wouldn't try "hot-patching" the system kernel. The ones that can probably have better things to do than hack your page. - "'Anonymity is bad,' says a source who wishes to remain anonymous." - Nuff' said. * Home: Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp * Autoresponder: send email w/subject of "send resume" or "send PGPKEY" * Work: cadams(a)acucobol.com | V.M. (619)515-4894 | (619)689-6579 * Member in good standing of the GNU whirled hors d'oeuvre

1 0

More child pornography nonsense
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

> webslingerZ > _________________________________________________________________ > POLICE SEARCH INTERNET FOR CHILD SEX ABUSERS > __________________________________________________________________________ > Copyright &copy 1996 Nando.net > Copyright &copy 1996 Reuter Information Service > STOCKHOLM, Sweden (Aug 31, 1996 00:11 a.m. EDT) - Police across Europe > widened their net Friday to track down a pedophile network which is > spreading increasingly to the hard-to-detect Internet, while at an > international conference, Southeast Asia was cast as a major > destination for child sex tourists. > At the World Congress Against Commercial Sexual Exploitation of > Children, which has attracted over 1,000 delegates to Stockholm from > 130 countries, campaigners outlined measures to crack down on > pedophiles' use of the Internet. > Norway's ombudsman for children, Trond Waage, said to date there was > very little action that could be taken to stop the distribution of > child pornography on the Internet. > But he said the establishment last week of an international body to > monitor child pornography on the net, a task taken on by the Norwegian > branch of Save the Children, was firm action against pedophiles using > the net. > "This is a kind of a cybercop," Waage told reporters. > "We need some visible cops on the net. If you undertake these kinds of > criminal activities someone will monitor you." > Save the Children will try to monitor any child pornography on the > Internet and is encouraging other net surfers to pass on information > that will be handed to the police. Want to bet how fast they'll be mail-bombed? Cops on the net are _not_ popular, no matter what they're doing. This fact is especially true when there's no actual harm taking place (unlike, say, spamming) - the harm has _already_ taken place by the time the material is on the Internet. Should we ban films with violence because they _might_ be snuff films? -Allen

1 0

Re: Moscowchannel.com hack
by pjb＠23kgroup.com 17 Dec '03

17 Dec '03

FWIW, not even root can unmount a file system that is busy. -paul > From cypherpunks-errors(a)toad.com Sun Sep 1 18:17:12 1996 > Subject: Re: Moscowchannel.com hack > To: snow(a)smoke.suba.com (snow) > Date: Sun, 1 Sep 1996 10:09:32 -0500 (CDT) > Cc: joelm(a)eskimo.com, Cypherpunks(a)toad.com > Reply-To: ichudov(a)algebra.com (Igor Chudov) > From: ichudov(a)algebra.com (Igor Chudov @ home) > X-No-Archive: yes > Organization: Bool Sheet Software > X-Mailer: ELM [version 2.4 PL24 ME7] > Content-Type> : > text> > Sender: owner-cypherpunks(a)toad.com > Content-Length: 689 > > snow wrote: > > > > On Sat, 31 Aug 1996, Joel McNamara wrote: > > > > > Not really crypto, but related to the DOJ hack in a way. > > > > > > Moscow Channel is a pretty slick, Russian news/commentary page. Their Web > > > site was hacked and altered by someone who didn't seem to like Russians all > > > Just a matter of time before some builds a dedicated Satan type tool that > > > scans for HTTP server holes or messed up file permissions to make locating > > > potential victims easy. > > Write your web site to a CD-ROM and hard-code the base directory into the > > webserver. > > A hacker who has root can forcibly unmount the cdrom and mount another > directory on that node. Not a good solution. > > - Igor. >

2 1

National ID Card Web Pages
by Dave Banisar 17 Dec '03

17 Dec '03

EXTENSIVE NATIONAL ID CARD WEB SITE IS NOW ON LINE The London-based human rights watchdog Privacy International (PI) has just opened an extensive web page on National ID cards. The initiative comes in the wake of pending efforts in the United States, Canada and United Kingdom to implement national ID card systems. The page contains a 7,000 word FAQ (Frequently Asked Questions) on all aspects of ID cards and their implications. Also included in the PI documents is a paper describing successful campaigns opposing to ID cards in Australia and other countries. The page also has links to numerous other sites and documents. PI Director Simon Davies said he hoped the page would help promote debate about the cards, "ID cards are often introduced without serious discussion or consultation. The implications are profound, and countries planning to introduce them should proceed with caution." "The existence of a card challenges important precepts of individual rights and privacy. At a symbolic and a functional level, ID cards are often an unnecessary and potentially dangerous white elephant. They are promoted by way of fear-mongering and false patriotism, and are implemented with scant regard for serious investigation of the consequences." he said. The URL is : http://www.privacy.org/pi/activities/idcard/ PI has also set up an auto response function for the FAQ document. Its address is: idcardfaq(a)mail.privacy.org Privacy International is an international human rights group concerned with privacy and surveillance issues. It is based in London, UK. For further information contact the Privacy International Washington Office at +1.202.544.9240 or email pi(a)privacy.org. PI's web page is available at: http://www.privacy.org/pi/ _________________________________________________________________________ Subject: National ID Card Web Pages _________________________________________________________________________ David Banisar (Banisar(a)privacy.org) * 202-544-9240 (tel) Privacy International Washington Office * 202-547-5482 (fax) 666 Pennsylvania Ave, SE, Suite 301 * HTTP://www.privacy.org/pi/ Washington, DC 20003

1 0

Re: Silenced Machine Guns Are Safer Than TWA
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:37 PM 9/2/96, Dave Harman OBC wrote: >tcmay(a)got.net (Skippy) wrote: > >! At 4:33 AM 9/2/96, qut(a)netcom.com (Net God) wrote: >! >! >Contrary to popular fiction, ALL firearms have been permanently >! >registered since the 1968 Gun Control Act. The media monopoly lies when >! >they say the contrary. >! >! Nope. Gun sales between individuals without any paperwork were fully legal >! in some places until recently (and may still be fully legal...I can only >! speak of California). > >So? I was talking about NEW sales of firearms from license holders. Let's >consider improving the future rather than preserving the past, shall >we? My apologies! I assumed when you wrote "since the 1968 Gun Control Act" you meant since the 1968 Gun Control Act. I did not realize that you translate "since the 1968 Gun Control Act" into "NEW sales of of firearms." Sorry. I'll consult my qut-dictionary more often. --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Solid Foundations
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:57 PM 9/2/96, lcs Remailer Administrator wrote: >Well, I just designed a nymserver that's probably more complicated and >difficult to use than any previous one. From this experience, I have >concluded that if you want to design a remailer with real security (as >opposed to a penet-style server), it just won't be easy to use that >remailer manually. Even alpha.c2.org was kind of a pain to use >manually. I therefore think in the long run it's better to bite the >bullet, write as secure a nym server as possible, and expect that ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ >people will use special client software to use the remailer. I strongly agree. It's very important that _foundations_ be as robust and strong as possible. Then on top of this foundation, other layers can be added without the whole structure tumbling down when flaws in the underlying protocols are discovered. This has been one of my pet theories for a long time. Not just the fairly obvious point that foundations need to be robust, but the specific point that one of the strengths of PGP was that it dealt with *text blocks*. Though we all want integration into our favorite programs, by building PGP around a text block there were several advantages. First, a simpler problem than trying to deal with n different programs. Second, a text block has fewer places for flaws to creep in. Third, platform independence. Fourth, any editor or other program that can access text can potentially be used with PGP. Fifth, separating crypto functions from other functions is good, orthogonal, method-oriented design. Sixth, this allows drop-in replacements (where "hooks" are used.) (To understand why these points are so important, one needs to look at programs which integrate crypto directly...independent verification is harder to do, bugs may be less apparent, and delays in supporting other platforms (if ever) are likely, etc..) --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Whistleblowing on the Internet
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

There's also the point that some whistleblowing isn't exactly what some political groups would want to occur. For instance, opponents to unions such as myself aren't going to want a whistleblower to be able conveniently to report their exclusion from a job due to union membership. -Allen From: IN%"adam(a)homeport.org" "Adam Shostack" 27-AUG-1996 02:41:17.66 To: IN%"geoff(a)digidem.com" CC: IN%"cypherpunks(a)toad.com" Subj: RE: Whistleblowing on the Internet Geoffrey Gussis wrote: | Overall, I am quite surprised that there isn't a whistleblowing | clearinghouse on the Internet; a site sponsored by a non-profit that lists | email addresses and secure forms for sending anonymized email to those | areas of the public and private sector that deal with whistleblowing. As | the Internet is a great medium for information dissemination, and offers | significant privacy advantages, I really expected to find much more. Such a clearinghouse is what we call a fat target; something likely to attract attention since wiretapping it could be very useful to an organization that worried about having a whistleblower. As such, the correct attitude towords whistleblowing is to use an anonymous remailer, and send to interested parties. That's how the AT&T deal that sunk the des phones and made clipper a household word was publicized; a member of the list(?) interested party sent a number of interesting documents through remailers to cypherpunks. Adam -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Re: secure file system for Linux?
by mch＠squirrel.com 17 Dec '03

17 Dec '03

> Is there a secure file system (or secure directory branch) for Linux? Yes, you can use CFS, which works on several versions of UNIX as well as Linux. Send email to cfs(a)research.att.com to get a copy. Someone exported it, and it is also available from ftp://ftp.hacktic.nl/pub/crypto/CRYPTOapps/cfs.1.3.tar.gz There is also something called the "loop filesystem" for Linux. I haven't tried it and don't know how well it would integrate into the newer Linux kernels. ftp://tsx-11.mit.edu/pub/linux/BETA/loop -- Mark Henderson -- markh(a)wimsey.bc.ca, henderso(a)netcom.com, mch(a)squirrel.com PGP 1024/C58015E3 fingerprint=21 F6 AF 2B 6A 8A 0B E1 A1 2A 2A 06 4A D5 92 46 cryptography archive maintainer -- ftp://ftp.wimsey.com/pub/crypto ftp://ftp.netcom.com/pub/he/henderso/change-sun-hostid-1.5.0.tar.gz

1 0

secure file system for Linux?
by Mike_Spreitzer.PARC＠xerox.com 17 Dec '03

17 Dec '03

Is there a secure file system (or secure directory branch) for Linux?

3 2