Re: NSA knows who you've called.

2006-05-12 Thread William Allen Simpson

Perry E. Metzger wrote:

http://www.usatoday.com/news/washington/2006-05-10-nsa_x.htm


Legal analysis from Center for Democracy and Technology at:

http://www.cdt.org/publications/policyposts/2006/8

--
William Allen Simpson
Key fingerprint =  17 40 5E 67 15 6F 31 26  DD 0D B9 9B 6A 15 2C 32

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


Re: NSA knows who you've called.

2006-05-12 Thread dan

Perry E. Metzger writes:
-+
 | 
 | And a personal note to you all:
 | 
 | Let me again remind people that if you do not inform your elected
 | representatives of your displeasure with this sort of thing,
 | eventually you will not be in a position to inform them of your
 | displeasure with this sort of thing.
 | 

Perry,

While I agree with you, the public does not,
so far as I can tell, find itself willing to
risk insecurity for the benefit of preserving
privacy, as this article in today's Boston
Globe would tend to confirm.

http://www.boston.com/news/nation/articles/2006/05/12/most_put_security_ahead_of_privacy/

   Most put security ahead of privacy
   (By Bruce Mohl, Globe Staff)
   Mark Jellison, a Verizon customer in Quincy, isn't fazed that his
   phone company may have turned over his calling records and those of
   millions of others to the National Security Agency as part of an
   effort to thwart terrorism.

   snip


--dan


-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


Re: NSA knows who you've called.

2006-05-12 Thread Perry E. Metzger

[EMAIL PROTECTED] writes:
 While I agree with you, the public does not,
 so far as I can tell, find itself willing to
 risk insecurity for the benefit of preserving
 privacy, as this article in today's Boston
 Globe would tend to confirm.

I'm sure. On the other hand, I think it is our place, as security
professionals, to explain why the tradeoff is a false one. Respect for
individual rights is not something we do in good times because it is a
luxury we can afford when there is stability. It is something we need
most in bad times, because it is what keeps us safe and maintains
stability itself.


Perry

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


There are no limits to human stupidity.

2006-05-12 Thread Perry E. Metzger

The following message is, sadly, real. The URLs have been altered a
bit to conceal some personal information of the bank customer. (The
HTML version, naturally, just provides click throughs instead of
saying copy and paste this into your browser.)

I would comment on it, but really, what more can I say?

Perry

From: Chase Credit Cards [EMAIL PROTECTED]
Subject: Your Chase Credit Card
To: [EMAIL PROTECTED]
Date: Fri, 12 May 2006 XX:XX:XX EDT

To view this message in your web browser, please copy and paste
the link below into your browser.
http://email.chase.com/Z

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
CHASE - Chase Fraud Detector(SM)
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Identity Theft Claims a New Victim Every 4.5 Seconds.(1)

Don't let it happen to you.
Let us help protect you with Chase Fraud Detector(SM)
and get 60 days free!

Chase Fraud Detector(SM) provides you the added security and
protection of:

- Customized Fraud Alerts -- Tell us what to watch for and we'll
  alert you of any suspicious activity on your card. If it's not
  yours, we'll fix it. You'll never be held liable for fraudulent
  charges, but they may be a warning sign of a larger problem --
  Identity Theft.(2) To find out more, please copy and paste the
  link below into your browser.
http://email.chase.com/Z
- Your Fraud Advisor will get you a merged credit report and
  scores from all 3 major credit bureaus, file disputes for you
  and more. To find out more, please copy and paste the link
  below into your browser.
http://email.chase.com/Z
- ID Theft Insurance -- Coverage up to $25,000 for certain
  expenses related to identity theft, including lost wages and
  approved legal fees, at no additional cost to you.(3) To learn
  more, please copy and paste the link below into your browser.
http://email.chase.com/Z
  
All users on the account will be protected with this optional
service.

To learn more about Chase Fraud Detector(SM), please copy and
paste the link below into your browser.
http://email.chase.com/Z

The only thing worse than having your identity stolen is the
hassle of getting back. Get the protection of Chase Fraud
Detector and 60 days free!

To sign up, please copy and paste the link below into your
browser.
http://email.chase.com/Z

***
E-mail Security Information
*** 
 
E-mail intended for: 

 Q.

If you are concerned about the authenticity of this message,
please call the phone number on the back of your credit card or
copy and paste the link below into your browser.
http://email.chase.com/Z

If you would like to learn more about e-mail security or want to
report a suspicious e-mail, please copy and paste the link below
into your browser.
http://email.chase.com/Z

Note: If you are concerned about clicking links in this e-mail,
the Chase Online services mentioned above can be accessed by
typing http://email.chase.com/Z directly into your browser.

-
TERMS AND CONDITIONS:

(1) Identity Theft Resource Center, Facts  Statistics,
www.idtheftcenter.org/facts.shtml

(2) Your liability for unauthorized use of your credit card is
$50; however, MasterCard and Visa do not permit their members,
including Chase to impose even that charge. A complete
explanation can be found in the Membership Agreement. For any
questions regarding this service, please call toll-free Chase
Fraud Detector customer service at 1-800-621-0361. The benefits
and any information provided are subject to change from time to
time, with prior notice, and any products or services are subject
to availability. Chase Fraud Detector is a registered service
mark of JPMorgan Chase  Co. The Chase name and logo are
registered marks of JPMorgan Chase  Co.
You will be contacted at the day and/or evening phone number on
file with Chase. In the event that Chase cannot contact you
personally or is unable to leave a message, you will be notified
by mail at the billing address on file with Chase. Chase will
attempt to notify you when selected transaction categories occur
on your account, but cannot guarantee that the merchant with whom
you did business correctly describes the transaction to us. 

(3) Insurance is underwritten by Travelers Casualty and Surety
Company of America and its property casualty affiliates,
Hartford, Connecticut 06183. Coverage for all claims or losses
depends on actual policy provisions.

Neither Chase, nor any of their affiliates, is the provider of
any insurance. 

Many government records are available free or at a nominal cost
from government agencies. Credit reporting agencies are required
by law to give you a copy of your credit report upon request, at
no charge or for a nominal fee.

ABOUT THIS MESSAGE:
This message was delivered to you as a Chase credit card customer
to provide you account updates and information about your card