- cypherpunks-legacy - lists.cpunks.org

Whistleblowing on the Internet
by Geoffrey Gussis 17 Dec '03

17 Dec '03

I'm writing a paper for my ethics class on Whistleblowing, and specifically how it has been aided by the Internet. If anyone knows of any resources, pointers, etc., I would greatly appreciate it. The results will be published on-line, and I can send a copy to anyone who is interested as well. I am interested in information covering both the private sector and the government as well. I do know that the Federal Government has an online BBS where you can send in information on fraud, etc. What I have uncovered so far: + As far as a Lexis/Nexis search goes, I only found a few articles, and they centered around the Tobacco Papers, and the Scientology debate. + I located the Whistleblowing FAQ and contacted its author, but its last update was in 1994 and it is no longer being maitained. + I visited a couple of other related Internet sites (I searched using many search engines), but they don't really have examples of using the Internet for whistleblowing purposes. + I am also aware of the majority of Anonymity/Privacy sites on the Internet, and will definitely be utilizing them in the paper. Overall, I am quite surprised that there isn't a whistleblowing clearinghouse on the Internet; a site sponsored by a non-profit that lists email addresses and secure forms for sending anonymized email to those areas of the public and private sector that deal with whistleblowing. As the Internet is a great medium for information dissemination, and offers significant privacy advantages, I really expected to find much more. Is anyone else working in this area? Any help would be greatly appreciated. Cheers, Geoffrey Gussis 2L - Washington University School of Law ___________________________________________________________________ Internet Law Projects at http://www.digidem.com/legal/ + Worldwide Top-Level Domain/Trademark Dispute Resolution Policies + Businesses on the Internet (BOTI) Legal Research Initiative + Legal Links in Electronic Commerce and Interactive Entertainment

2 1

FINALLY, FRESH & CLEAN !!
by FRIEND＠hotmail.com 17 Dec '03

17 Dec '03

IT WAS JUST RELEASED!! INTRODUCING...MILLIONS VOL. 1 We took a total of over 92 million email addresses from many of the touted CD's that are out there (bought them all - some were $300+)! We added the millions we had in storage to those. When we combined them all, we had in excess of 100+ million addresses in one huge file. We then ran a super "sort/de-dupe" program against this huge list. It cut the file down to less than 25 million!!! Can you believe that? It seems that most people that are selling CD's are duping the public by putting numerous files of addresses in the CD over and over. This created many duplicate addresses. They also had many program "generated" email addresses like Compuserve, MCI, ANON's, etc. This causes a tremendous amount of undeliverables, and for those that use Stealth programs, clogs up servers quickly with trash, etc. We then ran a program that contained 150+ keywords to remove addresses with vulgarity, profanity, sex-related names, postmaster, webmaster, flamer, abuse, spam, etc., etc. Also eliminated all .edu, .mil, .org, .gov, etc. After that list was run against the remaining list, it reduced it down to near 16 million addresses! So, you see, our list will save people hundreds of dollars buying all others that are out there on CD and otherwise. Using ours will be like using the 100+ million that we started with, but a lot less money and alot less time!! We also purchased Cyber-Promos ($995.00) CD. We received it just prior to finishing production work on the new CD. We had our people take a random sample of 300,000 addresses from the touted 2.9 that they advertised. We used a program that allows us to take a random sample of addresses from any list. We were able to have the program take every 9th address, thus giving us a 300,000 list of Cyber's email addresses from top to bottom. We did not clean these, but we did create 3 seperate files named cyber1.txt, cyber2.txt, & cyber3.txt of 100,000 addresses each. This will give all people that use the list a opportunity to send mail to the list before deciding if their CD is all it's hyped to be. We also included a 2+ million "Remove/Flamer" file broke into seperate files for ease of extracting and adding to your own database of removes. "You can buy from the REST or you can buy from the BEST. Your choice. _____________________________ What others are saying: "I received the CD on Friday evening. Like a kid with a new toy, I immediately started bulking out using the new email addresses. Over the course of the weekend, I emailed out over 500,000 emails and I received less than TWENTY undeliverables!! I am totally satisfied with my purchase!! Thanks Premier!!" Dave Buckley Houston, TX "This list is worth it's weight in gold!! I sent out 100,000 emails for my product and received over 55 orders! Ann Colby New Orleans, LA **************************************** HERE'S THE BOTTOM LINE Here is what you get when you order today! >> 16 Million Email Addresses... 1 per line in simple text format on a CD. Files are in lots of 100,000 (no codes needed to open files). All files are separated by domain name for your convenience. PLUS you receive a tremendous REMOVE list! AND the a sampling of CyberPromo's HOT list. >>> NOW ONLY $149.00! This price is effective for the next seven days, thereafter the price will be $199.00 so ORDER NOW! All lists are completely free of any Duplicates. We also on a continual basis, add New Names and Remove Undeliverables and Remove Requests. The result is the Cleanest Email Addresses Available Anywhere to use over and over again, for a FRACTION of the cost that other companies charge. Typical rates for acquiring email lists are from 1 cent to as high as 3 cents per email address - that's "INFORMATION HIGHWAY" ROBBERY!. Don't even hesitate on this one or you will miss out on the most effective way to market anywhere..PERIOD! To order our email package, simply print out the EZ ORDER FORM below and fax or mail it to our office today. We accept Visa, Mastercard, Discover, Checks by Fax and Mail. _________________ EZ Order Form _____Yes! I would like to order MILLIONS Vol. 1 email addresses for only $149.00. *Please select one of the following for shipping.. ____I would like to receive my package OVERNIGHT. I'm including $15 for shipping. (outside US add an additional $25 for shipping) ____I would like to receive my package 2 DAY delivery. I'm including $10 for shipping. (outside US add an additional $25 for shipping) DATE_____________________________________________________ NAME____________________________________________________ COMPANY NAME___________________________________________ ADDRESS_________________________________________________ CITY, STATE, ZIP___________________________________________ PHONE NUMBERS__________________________________________ FAX NUMBERS_____________________________________________ EMAIL ADDRESS___________________________________________ TYPE OF CREDIT CARD: ______VISA _____MASTERCARD CREDIT CARD# __________________________________________ EXPIRATION DATE________________________________________ NAME ON CARD___________________________________________ AMOUNT $____________________ (Required) SIGNATURE:x________________________ DATE:x__________________ You may fax your order to us at: 1-704-784-5595 CHECK BY FAX SERVICES! If you would like to fax a check, paste your check below and fax it to our office along with all forms to: 1704-784-5595 ****************************************************** ***24 HOUR FAX SERVICES*** PLEASE PASTE YOUR CHECK HERE AND FAX IT TO US AT 1-704-784-5595 ******************************************************* If You fax a check, there is no need for you to send the original check. We will draft up a new check, with the exact information from your original check. All checks will be held for bank clearance. If you feel more comfortable sending payment through the mail, please send all forms and Check or Money Order to: CONSUMER CONNECTIONS 10223-B UNIV. CITY BLVD. #197 CHARLOTTE, NC 28213

1 0

ADMIN: Problems with the list goto the owner, not the list!
by Hugh Daniel 17 Dec '03

17 Dec '03

In the future please send all messages of the form ~something is wrong with the list~ to owner-cypherpunks(a)toad.com and NOT the list its self. We already have enough off topic and puerile traffic cluttering up the list. If you think you see a _very_ major problem then please do email me directly. Now please get back to building the better world we sometimes still talk about building... ||ugh Daniel Majordomo Owner & Potty Trainer hugh(a)toad.com

2 1

BXA Encryption Export Seminar - San Jose, April 28
by John Gilmore 17 Dec '03

17 Dec '03

I think some cypherpunk representatives should attend this seminar. It's often useful to hear what the BXA is saying when they talk to exporters instead of a court or the press. You will probably learn something about crypto export law, too. If you have a portable cassette recorder, see if you can record it for future reference "and for others at my company". I'd go, but I have a bunch of committments on that date. Let me know how it turns out! John Bureau of Export Administration - U.S. Department of Commerce presents ENCRYPTION CONTROLS SAN JOSE, CA April 28, 1998 * 8:30 AM - 5:00 PM Hyatt San Jose * San Jose, CA ENCRYPTION CONTROLS - As a result of the release of new rules governing the export of encryption items previously controlled on the U.S. Munitions List, the export licensing responsibilities were transferred to the Department of Commerce (except those specially designed, developed, configured, adapted, or modified for military applications). This full-day program is being held to instruct and assist the exporting community with this change in jurisdiction. Representatives from BXA and the National Security Agency (NSA) will explain: the background and current U.S. policy, the main elements of the controls, License Exception KMI and the licensing process for encryption cases, and legislative initiatives and other issues to watch in the future. WHO SHOULD ATTEND? - This seminar is designed for exporters, freight forwarders, carriers, international trade consultants, attorneys, and others who support and advise exporters. If your organization is involved in a technology-related industry, especially computers, electronics, defense goods/services, etc., this seminar is a must. ENCRYPTION AGENDA 8:30-8:35 Opening 8:35-8:45 Overview of morning 8:45-9:00 Encryption Policy * What is it? * How does it affect your company? 9:00-9:15 Encryption Regulations * What's new? * What's different * How to classify an encryption product 9:15-10:15 Encryption Licenses and the inter-agency review process * Validated * Encryption Licensing Arrangements * Foreign Nationals 10:15-10:30 BREAK 10:30-11:00 Mass Market Encryption Software * Helpful Hints 11:00-12:00 License Exceptions: TMP - GOV - BAG for encryption items 12:00-1:00 LUNCH 1:00-1:45 License Exception Key Management Infrastructure (KMI) * Recoverable encryption items * Non-recoverable 56-bit DES with a plan 1:45-2:15 Key Recovery Agents 2:15-2:45 Exports over the Internet 2:45-3:00 BREAK 3:00-3:30 Next Steps 3:30-4:00 License practice/policy 4:00-4:45 Questions & Answers ABOUT THE INSTRUCTORS - The instructors are experienced export administration specialists and licensing officers from BXA's Washington, DC headquarters and Western Regional Office. The instructors - who played a major role in drafting the new encryption regulations - are available throughout the seminar to answer your questions. ACCOMMODATIONS - Special conference rates have been arranged with the Hyatt San Jose for those who need rooms. Please make your reservations directly with the hotel by calling (408) 993- 1234 or toll free (800) 233-1234. Mention the "BXA Seminar." Note: The hotel is conveniently located minutes from San Jose Airport and is also easily accessible by automobile. The Hyatt offers free parking. QUESTIONS?- For more information on the Encryption Controls topics, please call BXA's Western Regional Office at (714) 660-0144. For information about registration, contact the Federation of International Trade Associations at (800) 969-FITA or (703) 620-9098. REGISTRATION Note: Space is limited and will be accepted on a space availability basis . The Registration Fee for the Seminar is $125/person and includes continental breakfast, AM & PM breaks, luncheon and seminar materials. The registration fee is not refundable after April 22, 1998. Cancellation prior to that date is subject to a $25 administrative charge. To guarantee placement for the Encryption Controls Seminar in San Jose, FAX your registration to (703) 391-0159, and charge the fee on a MC, VISA or American Express, or mail your registration with your check payable to FITA-BXA to FITA, 1851 Alexander Bell Drive, Suite 400, Reston, VA 20191. Attendee Name(s): ____________________________________________________________ Company Name: ____________________________________________________________ Street Address: ____________________________________________________________ City, State, Zip: ____________________________________________________________ Phone: _______________________ Fax: _________________________ [ ] Enclosed is my check for $___________ ($125/person) [ ] We prefer to pay by credit card: ____ MC, ____ Visa, ____ AMEX Amount $_________ Acct #_______________________________ Expiry date:__________ Cardholder Name: ___________________________________________________ Cardholder Signature:________________________________________________ Sponsored by The Federation of International Trade Associations (FITA) (For information about FITA, call toll-free (800) 926-FITA)

1 0

PGP and crypto News from France
by Anonymous Sender 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------- PLEASE REPLY ONLY TO : <pplf(a)usa.net> - ---------------------------------------------------------- SUBJET : PGP and crypto News from France Hi all, We're glad to announce an english "PGP and crypto News from France" on the PGP FOR FRENCH site, and a "beta" ;-) translation of our little PGP History, here : http://www.geocities.com/SiliconValley/Bay/9648/pgpnews.htm Bye - -------------------------------------------------------------------- PGP pour les francais / PGP even for the French <pplf(a)usa.net> http://www.geocities.com/SiliconValley/Bay/9648 PGPkey 14A0 4A67 0431 2402 684D 6EBA 537F 664D 3F80 0D58 http://www.geocities.com/SiliconValley/Bay/9648/pplf.txt - --------------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.5.3i for non-commercial use <http://www.pgpi.com> iQA/AwUBNTRhsVN/Zk0/gA1YEQJQHACfWWAhaHVKblH2S0VSazSw94F8FXUAoPt+ bxFrPDrfbgcPQgLD3NgULSA2 =8Wr+ -----END PGP SIGNATURE-----

1 0

eligable receiver
by David Honig 17 Dec '03

17 Dec '03

THE WASHINGTON TIMES April 16, 1998 Bill Gertz Computer hackers could disable military; System compromised in secret exercise Senior Pentagon leaders were stunned by a military exercise showing how easy it is for hackers to cripple U.S. military and civilian computer networks, according to new details of the secret exercise. Using software obtained easily from hacker sites on the Internet, a group of National Security Agency officials could have shut down the U.S. electric-power grid within days and rendered impotent the command-and-control elements of the U.S. Pacific Command, said officials familiar with the war game, known as Eligible Receiver. "The attack was actually run in a two-week period and the results were frightening," said a defense official involved in the game. "This attack, run by a set of people using standard Internet techniques, would have basically shut down the command-and-control capability in the Pacific theater for some considerable period of time." Pentagon spokesman Kenneth Bacon said, "Eligible Receiver was an important and revealing exercise that taught us that we must be better organized to deal with potential attacks against our computer systems and information infrastructure." The secret exercise began last June after months of preparation by the NSA computer specialists who, without warning, targeted computers used by U.S. military forces in the Pacific and in the United States. The game was simple: Conduct information warfare attacks, or "infowar," on the Pacific Command and ultimately force the United States to soften its policies toward the crumbling communist regime in Pyongyang. The "hackers" posed as paid surrogates for North Korea. The NSA "Red Team" of make-believe hackers showed how easy it is for foreign nations to wreak electronic havoc using computers, modems and software technology widely available on the darker regions of the Internet: network-scanning software, intrusion tools and password-breaking "log-in scripts." According to U.S. officials who took part in the exercise, within days the team of 50 to 75 NSA officials had inflicted crippling damage. They broke into computer networks and gained access to the systems that control the electrical power grid for the entire country. If they had wanted to, the hackers could have disabled the grid, leaving the United States in the dark. Groups of NSA hackers based in Hawaii and other parts of the United States floated effortlessly through global cyberspace, breaking into unclassified military computer networks in Hawaii, the headquarters of the U.S. Pacific Command, as well as in Washington, Chicago, St. Louis and parts of Colorado. "The attacks were not actually run against the infrastructure components because we don't want to do things like shut down the power grid," said a defense official involved in the exercise. "But the referees were shown the attacks and shown the structure of the power-grid control, and they agreed, yeah, this attack would have shut down the power grid." Knocking out the electrical power throughout the United States was just a sideline for the NSA cyberwarriors. Their main target was the U.S. Pacific Command, which is in charge of the 100,000 troops that would be called on to deal with wars in Korea or China. "The most telling thing for the Department of Defense, when all was said and done, is that basically for a two-week period the command-and-control capability in the Pacific theater would have been denied by the 'infowar' attacks, and that was the period of the exercise," the official said. The attackers also foiled virtually all efforts to trace them. FBI agents joined the Pentagon in trying to find the hackers, but for the most part they failed. Only one of the several NSA groups, a unit based in the United States, was uncovered. The rest operated without being located or identified. The attackers breached the Pentagon's unclassified global computer network using Internet service providers and dial-in connections that allowed them to hop around the world. "It's a very, very difficult security environment when you go through different hosts and different countries and then pop up on the doorstep of Keesler Air Force Base [in Mississippi], and then go from there into Cincpac," the official said, using the acronym for the Commander in Chief, Pacific. The targets of the network attacks also made it easy. "They just were not security-aware," said the official. A second official found that many military computers used the word "password" for their confidential access word. ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu Clarke's Third Law: Any sufficiently advanced technology is indistinguishable from magic.

1 0

File System Encryption
by drifter＠c2.net 17 Dec '03

17 Dec '03

I'm aware of the three main disk encryption programs SFS, SECDRV, and SECDEV, but I need to find a solution that works with Windows 95 32bit or Windows NT 4.0. I'm currently using SFS 1.17 and Secure Drive under Win-95, but am unable to continue to work in dos compatability mode due to severe performance hits. I am open to commercial products that have passed peer review, but know of none. If anyone could suggest a solution (outside of switching OS's), I would be *most* gratefull. Please respond to the list, as I am a subscriber under another account. The Drifter

6 7

---> How Can I Pay You For My Order
by 1-800-893-6001＠toll.free 17 Dec '03

17 Dec '03

Turn Key Payment Solutions - Sell From Your Web Site Take Checks By Phone - Fax - Or At Your Web Site - FREE or Take Credit Cards - MasterCard - Visa - AMEX and more... Our site has changed since you last visited, so please take the time to visit again, you will be glad you did. <a href=" http://www.hoststar.com/payments/">Internet Payment Solutions</a> You can call us directly at 1-800-893-6001 or see our site for other contact information. No company offers easier web commerce solutions - Checks by phone Credit card merchant accounts Secure Payment Form Hosting for your web site Free Collection Services ***************************************************************** This mailing was sent by RCS Promotions on behalf of the above client. RCS is not affiliated with the above client, other than to provide a mailing service. Removal options are available at the above listed web site. Questions about names, lists and marketing may be directed to RCS Promotions at 781-892-4191. *****************************************************************

1 0

None Re: Gary Lee Burnore, Registered Sex Offender in Raleigh, NC
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Gary Lee Burnore <gburnore(a)databasix.com> wrote: > In 11/96, I kissed a 17 year old girl. I'm not going to provide you > with a lot of detail because this isn't the place for it. If the girl's mother had heeded the earlier warning she received via e-mail about your behavior several months earlier (the one you called "harassment" at the time), this all could have been prevented. You're lucky that the 11/96 "kiss" is all you were arrested for. You were foolish to continue it knowing that Nancy had already been tipped off. In case you've forgotten, you whined: -> So now the cowards in Ronald Francis's corner (I'm outright expecting the -> culprit to be ronald francis himself) have taken to sending email to -> those who have names listed on databasix's web page. Sending comments to -> a 17 year old that they're going to tell her mother that she's having an -> affair with me. Telling her mother that I'm molesting her daughter. -> Having all sorts of fun. And you threatened to report the anonymous whistleblower to the authorities? What chutzpah! You're molesting a minor, someone tips off her mother, and you threaten to report the person who tipped her off about your behavior? Your claim has now been proven to be a lie. How would the mere fact that the girl had a web page at databasix.com have alerted an outsider to the fact that you were molesting her? Presumably she didn't post her diary on her web page, detailing your sexual activities towards her. Where would "Ronald Francis", or any other random "harasser" have obtained this information? You were too quick to dismiss the idea that all the alleged "harassment" and spam baiting might have originated from a DataBasix insider with detailed knowledge of your private life, as well as the complete list of all DataBasix employees and customers that Belinda Bryan claimed had been "spam baited". Who else is getting ahold of all this inside info, Gary? > I pass no > judgment on whether or not she instigated it. I held myself > responsible. That's why I went to see a counselor and offered to pay > for hers if she wanted to do the same. > > It was at the counselor's office that I learned what had happened was > considered a crime under CA law. I discussed this with the girl and > her mother; neither wanted to get law enforcement involved. But apparently it was serious enough that both your victim and her mother thought you needed psychiatric help. (Plenty of people on usenet could have told you that.) > To date, this ordeal has cost me nearly $30,000.00 in legal fees, lost > wages, and other costs. That however, is nothing compared to the > emotional stress of this. You spent $30K on what was supposedly a misdemeanor charge to which you pled guilty? Someone must have seen you "coming"? Was it Nancy? The maximum penalty for a misdemeanor is what? 6 months + $500? You spent $30K to get off with 3 years probation? On a 6 month sentence, you'd probably have been out in 3 months, and that's assuming you got the maximum sentence. Or was the $30K to get it plea bargained down from a more serious charge? > It goes on and on and on. I thought the shrink was to ensure that if didn't. > You know what's so damn frustrating about this? I chose to talk to a > councelor about this even though I knew it would bring charges. I was > doing the right thing. What statute in California makes it a misdemeanor to kiss a 17 year old girl? (It must make senior proms a lot of fun there if such a law really exists as you claim.) Or does it depend on what part of her body you "kissed" her? It's also interesting that when it was revealed that you had also been arrested in San Francisco for unlawful assembly in blocking traffic, you minimized it and called it a mere "traffic ticket", concealing the fact that you had already been convicted of something more serious. Then when someone finally reveals a second criminal conviction on your record, your sock puppets whine that it's a "half truth". Well, gee, Gary, you were content when the WHOLE truth was being concealed. So much for you "I have nothing to hide" boast!

1 0

Re: eligable receiver
by CJ Parker 17 Dec '03

17 Dec '03

From: David Honig <honig(a)alum.mit.edu> THE WASHINGTON TIMES Computer hackers could disable military; System compromised in secret exercise So when can we expect to hear the first announcements of high-level military resignations over the disgraceful state that they have let our national security fall into while wasting billions of dollars of our money? Please zipfile the announcements forwarded to the list, so that their massive volume does not swamp all of our email accounts. cjp ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

1 0