Re: Wiretap Act Does Not Cover Message 'in Storage' For Short Period (was Re: BNA's Internet Law News (ILN) - 2/27/03)

2003-03-03 Thread Bill Stewart
That's outrageous - if the explanation is correct,
then either the judge didn't have a clue about modern communication technology,
or the judge did have a clue and was deciding that it's ok for the Feds to
wiretap all IP traffic, including email and Voice Over IP,
all compressed voice, including Voice over ATM and Voice Over Frame,
and any uncompressed digital communications equipment that includes a FIFO,
(at least if you can shove the wiretap in next to the FIFO.)
The VOIP standards have needed to address encryption for a long time;
VOIP over IPSEC is a partial solution, but most people in the industry
aren't really comfortable with the scalability or quality of service issues,
because there's too much layering, performance measurement is hard,
routers that do both tend to run out of CPU, and the field's moving too fast.
(And the Oulu folks just found a bunch of vulnerability in SIP
http://theregister.com/content/55/29507.html .)
At 12:53 PM 02/27/2003 -0500, R. A. Hettinga wrote:
At 9:01 AM -0500 on 2/27/03, BNA Highlights wrote:

 WIRETAP ACT DOES NOT COVER MESSAGE 'IN STORAGE' FOR SHORT
 PERIOD
 BNA's Electronic Commerce  Law Report reports that a
 federal court in Massachusetts has ruled that the federal
 Wiretap Act does not prohibit the improper acquisition of
 electronic communications that were in storage no matter
 how ephemeral that storage may be. The court relied on Konop
 v. Hawaiian Airlines Inc., which held that no Wiretap Act
 violation occurs when an electronic communication is
 accessed while in storage, even if the interception takes
 place during a nanosecond 'juncture' of storage along the
 path of transmission.  Case name is U.S. v. Councilman.
 Article at
 http://pubs.bna.com/ip/BNA/eip.nsf/is/a0a6m6y1k8
 For a free trial to source of this story, visit
 http://web.bna.com/products/ip/eplr.htm
--
-
R. A. Hettinga mailto: [EMAIL PROTECTED]
The Internet Bearer Underwriting Corporation http://www.ibuc.com/
44 Farquhar Street, Boston, MA 02131 USA
... however it may deserve respect for its usefulness and antiquity,
[predicting the end of the world] has not been found agreeable to
experience. -- Edward Gibbon, 'Decline and Fall of the Roman Empire'



Re: Press Coverage, Snarky Media Personalities, and War

2003-03-03 Thread Bill Stewart
At 11:21 AM 03/02/2003 +0100, Eugen Leitl wrote:
On Sun, 2 Mar 2003, Dave Howe wrote:

 you find the author of one of those 10,000 verified email addresses! cds
 you blow up his car, burn down his house, paint little targets on his kids,
 and cut his telephone connection.
Given that a hit job by Russian mafia ran for about 5 k$ not so very long
ago, the apparent immunity to mayhem by so many who've been begging for it
for a oh so long time restores my faith into fundamental niceness of the
average monkey.
A few years ago there were a couple of New Jersey spammers who got murdered.
The news articles seem to have all expired, and I've forgotten whether
they were Russians or the people assumed to have hit them were, or both,
but apparently they were running a pumpdump stock scam and somebody
didn't appreciate having been conned into losing a lot of money.
So what they really need to sell is 90 million email addresses verified
not to belong to vengeful Russian mobsters...


Re: Press Coverage, Snarky Media Personalities, and War

2003-03-03 Thread Harmon Seaver
On Mon, Mar 03, 2003 at 04:16:37AM +0100, Thomas Shaddack wrote:
  Given that a hit job by Russian mafia ran for about 5 k$ not so very long
  ago, the apparent immunity to mayhem by so many who've been begging for it
  for a oh so long time restores my faith into fundamental niceness of the
  average monkey.
 
 Alternate hypothesis could be that there are so many such vermins that
 taking them out this way would be about as effective as taking out ants
 with a BB gun (though it'd be surely a nice way to kill the afternoon).

  Reminds me of when I was a kid and I'd spend the day out in the rafters of the
corn crib just before they started filling it with the Fall harvest. It was
great fun -- I'd get a free couple boxes of .22 shorts and sit there with my .22
single shot, blasting mice and rats. What was most interesting was that after I
shot a rat, it was only a short wait until another would come out to retrieve
the corpse. When I was younger, I had the delusion that it was because the
family wanted to give their loved one a proper burial. 

-- 
Harmon Seaver   
CyberShamanix
http://www.cybershamanix.com



Re: pledge of allegiance in schools

2003-03-03 Thread Declan McCullagh
On Sat, Mar 01, 2003 at 04:40:14PM -, lcs Mixmaster Remailer wrote:
 The polls done by these news sites are not designed to gain an 
 accurate, statistically valid measure of opinion, rather they 
 are designed as user participation devices to get involvement 
 by the user with the web site. Like Rush Limbaugh or Donahue, 

Yep, that's about right. One addition is that during the advertising
peak, it was also a cheap and easy way to boost revenue. One major news
about which I have personal knowledge once decided the best poll
questions were Mac vs. PC and gun rights vs. gun control. (Maybe
nowadays Microsoft vs. Linux would be up there too.)

-Declan



Re: interesting (fwd)

2003-03-03 Thread Bill Frantz
At 7:43 PM -0800 3/1/03, Tim May quoted:

A human being should be able to
change a diaper - yes,
plan an invasion - does another group of 4th grader's club house count?,
butcher a hog - yes,
conn a ship - small ones,
design a building - small ones,
write a sonnet - no,
balance accounts - yes,
build a wall - yes,
set a bone - my training stops when the bone gets to the hospital,
comfort the dying - I've done too much of that recently,
take orders - yes,
give orders - yes,
cooperate - yes,
act alone - yes,
solve equations - at least some of them,
analyze a new problem - many of them,
pitch manure - yes,
program a computer - yes,
cook a tasty meal - yes,
fight efficiently - more or less depending,
die gallantly - I'm in no hurry to make a demonstration.
Specialization is for insects. --Robert A.
Heinlein

I guess I have to work on the sonnets.  (The networking version would be
easier.)

Cheers - Bill


-
Bill Frantz   | Due process for all| Periwinkle -- Consulting
(408)356-8506 | used to be the | 16345 Englewood Ave.
[EMAIL PROTECTED] | American way.  | Los Gatos, CA 95032, USA



Re: Roger Needham Died - from The Register

2003-03-03 Thread Matt Blaze
Sad, sad news.

Roger's pioneering contributions to our art speak (volumes) for
themselves, and our field is diminished by the loss of his future
insights.

But I will miss him most for his enormous generosity, his sharp wit,
and his personal integrity.

-matt



 
 Obit: Roger Needham
 By Guy Kewney, Newswireless.net
 Posted: 02/03/2003 at 12:13 GMT
 
 Sadly, we record the death of Roger Needham, computer pioneer...
 
 There isn't much more to say, except that the man who was the reason 
 Microsoft set up its research centre in Cambridge, England, has had to lay 
 down his life's work. Cancer ended a legend.
 
 He once told me that it was his idea that Microsoft stopped spending money 
 on patenting its research ideas, and instead, to make the results available 
 to other researchers. I wish I'd known him long enough to have some other 
 stories to pass on myself; he left a long legacy of people who attributed 
 their inspiration to having worked with him.
 
 Here's what his CV at Microsoft Research says:
 
 Roger M Needham, born 1935, was in computing at Cambridge since 1956. His 
 1961 PhD thesis was on the application of digital computers to problems of 
 classification and grouping. In 1962 he joined the Computer Laboratory, 
 then called the Mathematical Laboratory, and has been on the faculty since 
 1963. He took a leading role in Cambridge projects in operating systems, 
 time sharing systems, memory protection, local area networks, and 
 distributed systems over the next twenty years.
 
 Roger worked at intervals on a variety of topics in security, (his main 
 research interest while with Microsoft) being particularly known for work 
 with Schroeder on authentication protocols (1978) and with Burrows and 
 Abadi on formalism for reasoning about them (1989).
 
 Roger graduated from the University of Cambridge in Mathematics and 
 Philosophy in 1956, and then took the Diploma in Numerical Analysis and 
 Automatic Computing in 1957. He had been in computing at Cambridge ever 
 since. He succeeded Maurice Wilkes as Head of the Computer Laboratory from 
 1980 to 1995, was promoted Professor in 1981, elected to the Royal Society 
 in 1985 and the Royal Academy of Engineering in 1993. He was appointed 
 Pro-Vice-Chancellor in 1996.
 
 I only met him a couple of times, both times when Microsoft was doing 
 corporate hospitality to publicise the work it was doing in the Cambridge 
 research facility. He was as knowledgeable as any rumour could have 
 suggested; and as tolerant of an ignorant journalist as any academic could 
 ever be. And I shall never get to know him, now.
 
 Guy Kewney is the editor/publisher of Newswireless.Net
 
 ---
 
 
 -
 The Cryptography Mailing List
 Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]



Re: Press Coverage, Snarky Media Personalities, and War

2003-03-03 Thread Thomas Shaddack
 Given that a hit job by Russian mafia ran for about 5 k$ not so very long
 ago, the apparent immunity to mayhem by so many who've been begging for it
 for a oh so long time restores my faith into fundamental niceness of the
 average monkey.

Alternate hypothesis could be that there are so many such vermins that
taking them out this way would be about as effective as taking out ants
with a BB gun (though it'd be surely a nice way to kill the afternoon).

However, the Nigerians would decidedly deserve some harsh measure. There
was already a small step in the right direction here - a retired victim of
one of the Nigerian scams shot dead a Nigerian ambassador here after
prolonged attempts to get his money back. (AFAIK, the consul repeatedly
assured him that he will get his money, which wasn't happening over and
over, until the last fateful day when the money, promised by Nigerian
government itself, hadn't arrived again.) See
http://www.google.com/search?num=50hl=enlr=ie=ISO-8859-1q=diplomat+shot+prague+scam



Re: interesting (fwd)

2003-03-03 Thread Tim May
On Sunday, March 2, 2003, at 08:12 PM, Bill Frantz wrote:

At 7:43 PM -0800 3/1/03, Tim May quoted:

A human being should be able to
change a diaper - yes,
plan an invasion - does another group of 4th grader's club house 
count?,
butcher a hog - yes,

No, I don't use that quote...though it's been floating around the Net 
for many years.

I realize you are referring to Tim May included quoted text from Steve 
Schear who used a quote by Heinlein, but your form above suggests I 
was using the quote. I rotate a lot of quotes, but not that one.

A minor nit, but Steve Schear deserves the credit for using the quote, 
not me.

--Tim May



Re: Wiretap Act Does Not Cover Message 'in Storage' For Short Period (was Re: BNA's Internet Law News (ILN) - 2/27/03)

2003-03-03 Thread R. A. Hettinga
--- begin forwarded text


Status: RO
From: Somebody
To: R. A. Hettinga [EMAIL PROTECTED]
Subject: Re: Wiretap Act Does Not Cover Message 'in Storage' For Short   Period (was 
Re: BNA's Internet Law News (ILN) - 2/27/03)
Date: Sun, 2 Mar 2003 14:09:05 -0500

Bob,

Technically, since their signal speed is slower than light, even
transmission lines act as storage devices.

Wire tapping is now legal.


Somebody
- Original Message -
From: R. A. Hettinga [EMAIL PROTECTED]
To: Clippable [EMAIL PROTECTED]
Sent: Sunday, March 02, 2003 3:04 PM
Subject: Re: Wiretap Act Does Not Cover Message 'in Storage' For Short
Period (was Re: BNA's Internet Law News (ILN) - 2/27/03)



 --- begin forwarded text


 Status: RO
 Date: Sun, 02 Mar 2003 14:27:00 -0500
 To: Tim Dierks [EMAIL PROTECTED], R. A. Hettinga [EMAIL PROTECTED],
[EMAIL PROTECTED]
 From: Ronald L. Rivest [EMAIL PROTECTED]
 Subject: Re: Wiretap Act Does Not Cover Message 'in Storage' For Short
   Period (was Re: BNA's Internet Law News (ILN) - 2/27/03)


 Yes, I was amazed at this ruling as well.

 This ruling seems to fly in the face of the likely intent of
 Congress when it passed Wiretap Act.

 If things continue in this direction, we will soon have
 rulings and regulations that say:

  -- Carriers must put all calls in storage for a minimum
 period of time, sufficient to allow wiretapping.
 (Indeed, regulation may not be necessary, as digitization and
  buffering of communications is common practice; the
  transient use of storage to effect communications
  efficiency and reliability should not provide a wiretap
  loophole.)

  -- Wiretapping is OK for any phone calls that are routed
 through a satellite.

  -- It is OK for the government to house soldiers in your
 house, as long as there is even the tiniest opening somewhere in
 your house (e.g. a window open, or a chimney flue)
 so that inside and outside connect.

  -- Etc.

 I can also see a market developing for storage-free communications
 carriers.  What happens when you inquire of your carrier as to
 whether it can provide such a guarantee or option?

  Cheers,
  Ron

 At 09:42 PM 3/1/2003, Tim Dierks wrote:
 At 01:39 PM 2/27/2003 -0500, R. A. Hettinga wrote:
 At 9:01 AM -0500 on 2/27/03, BNA Highlights wrote:
   WIRETAP ACT DOES NOT COVER MESSAGE 'IN STORAGE' FOR SHORT
   PERIOD
   BNA's Electronic Commerce  Law Report reports that a
   federal court in Massachusetts has ruled that the federal
   Wiretap Act does not prohibit the improper acquisition of
   electronic communications that were in storage no matter
   how ephemeral that storage may be. The court relied on Konop
   v. Hawaiian Airlines Inc., which held that no Wiretap Act
   violation occurs when an electronic communication is
   accessed while in storage, even if the interception takes
   place during a nanosecond 'juncture' of storage along the
   path of transmission.  Case name is U.S. v. Councilman.
   Article at
   http://pubs.bna.com/ip/BNA/eip.nsf/is/a0a6m6y1k8
   For a free trial to source of this story, visit
   http://web.bna.com/products/ip/eplr.htm
 
 This would seem to imply to me that the wiretap act does not apply to any
 normal telephone conversation which is carried at any point in its
transit
 by an electronic switch, including all cell phone calls and nearly all
 wireline calls, since any such switch places the data of the ongoing call
 in storage for a tiny fraction of a second.
 
   - Tim
 
 
 
 -
 The Cryptography Mailing List
 Unsubscribe by sending unsubscribe cryptography to
 [EMAIL PROTECTED]

 Ronald L. Rivest
 Room 324, 200 Technology Square, Cambridge MA 02139
 Tel 617-253-5880, Fax 617-258-9738, Email [EMAIL PROTECTED]

 --- end forwarded text


 --
 -
 R. A. Hettinga mailto: [EMAIL PROTECTED]
 The Internet Bearer Underwriting Corporation http://www.ibuc.com/
 44 Farquhar Street, Boston, MA 02131 USA
 ... however it may deserve respect for its usefulness and antiquity,
 [predicting the end of the world] has not been found agreeable to
 experience. -- Edward Gibbon, 'Decline and Fall of the Roman Empire'


--- end forwarded text


-- 
-
R. A. Hettinga mailto: [EMAIL PROTECTED]
The Internet Bearer Underwriting Corporation http://www.ibuc.com/
44 Farquhar Street, Boston, MA 02131 USA
... however it may deserve respect for its usefulness and antiquity,
[predicting the end of the world] has not been found agreeable to
experience. -- Edward Gibbon, 'Decline and Fall of the Roman Empire'



Re: Press Coverage, Snarky Media Personalities, and War

2003-03-03 Thread Frog
On Mon, 3 Mar 2003 04:16:37 +0100 (CET), Thomas Shaddack [EMAIL PROTECTED] wrote:

 Given that a hit job by Russian mafia ran for about 5 k$ not so very long
 ago, the apparent immunity to mayhem by so many who've been begging for it
 for a oh so long time restores my faith into fundamental niceness of the
 average monkey.

Alternate hypothesis could be that there are so many such vermins that
taking them out this way would be about as effective as taking out ants
with a BB gun (though it'd be surely a nice way to kill the afternoon).

Two words: volume discount



Re: interesting (fwd)

2003-03-03 Thread Steve Schear
At 09:38 PM 3/2/2003 -0800, you wrote:
On Sunday, March 2, 2003, at 08:12 PM, Bill Frantz wrote:

At 7:43 PM -0800 3/1/03, Tim May quoted:

A human being should be able to
change a diaper - yes,
plan an invasion - does another group of 4th grader's club house count?,
butcher a hog - yes,
No, I don't use that quote...though it's been floating around the Net for 
many years.

I realize you are referring to Tim May included quoted text from Steve 
Schear who used a quote by Heinlein, but your form above suggests I was 
using the quote. I rotate a lot of quotes, but not that one.

A minor nit, but Steve Schear deserves the credit for using the quote, not me.
I'd love to take the credit Tim, but in this case I think it was you that 
used the quote (at least it was with your email when it arrived as the 
.sig)  Strange.

steve



Re: interesting (fwd)

2003-03-03 Thread Tim May
On Monday, March 3, 2003, at 08:17 AM, Steve Schear wrote:

At 09:38 PM 3/2/2003 -0800, you wrote:
No, I don't use that quote...though it's been floating around the Net 
for many years.

I realize you are referring to Tim May included quoted text from 
Steve Schear who used a quote by Heinlein, but your form above 
suggests I was using the quote. I rotate a lot of quotes, but not 
that one.

A minor nit, but Steve Schear deserves the credit for using the 
quote, not me.
I'd love to take the credit Tim, but in this case I think it was you 
that used the quote (at least it was with your email when it arrived 
as the .sig)  Strange.

steve
Oh, my apologies, especially to Bill. I forget which rotating quotes I 
have, unless I explicitly choose them.

You are right, it's in my list. And is included below.

Sorry.





--Tim May
A human being should be able to change a diaper, plan an invasion, 
butcher a hog, conn a ship, design a building, write a sonnet, balance 
accounts, build a wall, set a bone, comfort the dying, take orders, 
give orders, cooperate, act alone, solve equations, analyze a new 
problem, pitch manure, program a computer, cook a tasty meal, fight 
efficiently, die gallantly. Specialization is for insects. --Robert A. 
Heinlein



CAPPS II protest - Boycotting collaborating airlines

2003-03-03 Thread Bill Stewart
One of the recent reactions to the air traveller privacy invasions
by various Federal agencies is a boycott of airlines that collaborate
with trial projects.  Delta Airlines are the test player for CAPPS II,
so the Boycott Delta project has launched an informational web site.
Here's the press release from our friendly neighborhood Usual Suspect,
who also managed a Boycott Adobe website to pressure Adobe to drop charges
against Dmitry Sklayrov.  As an added bonus, you can go to the boycottdelta
website and enjoy the Poindexteresque campaign logo.
http://boycottdelta.org/images/deltaeyebanner.gif
From: Bill Scannell [mailto:[EMAIL PROTECTED]
Sent: Monday, March 03, 2003 2:45 PM
Subject: Re: Email on your BoycottDelta ?
In response to Delta Air Line's utter lack of concern with the privacy of
their customers demonstrated by their participation in a test of the CAPPS
II system, a Delta disinvestment campaign has been launched at:
http://www.boycottdelta.org .

The idea of citizens having to undergo a background investigation that
includes personal banking information and a credit check simply to travel in
his or her own country is invasive and un-American.  The CAPPS II system
goes far beyond what any thinking citizen of this country should consider
reasonable.
If enough people refuse to fly Delta, then it is likely that other airlines
will refuse to implement this sadly misguided and anti-democratic system.
The boycott will remain in full effect until Delta Air Lines publicly
withdraws from any involvement with the testing of CAPPS II.
Press/Analyst Contact:  Bill Scannell ([EMAIL PROTECTED])



Re: Trivial OTP generation method? (makernd.c)

2003-03-03 Thread Thomas Shaddack
 FIPS-140 is your friend.  They did the math.
 Cheers - Bill

fips140.c is a cool toy, thanks :) However, a bit unusable for my
purposes; the tests I run on data from /dev/dsp always fail. (I am using
the tuner card, tuned to between the channels; visual test (cat /dev/dsp)
looks like a noise.) If I use the test on processed data, the test
understandably doesn't fail even if the input before MD5ing is all-zeroes.

The makernd output data pass the test in all cases, though.



Re: Meet CIA's Buster The Terrorist logo

2003-03-03 Thread Tim May
On Monday, March 3, 2003, at 02:23 PM, Bill Stewart wrote:

No, that's not exactly what they said, but you should never miss an
opportunity to bash them when they're being stupid anyway :-)
The obvious question, besides how long before it's off the website, 
is
So can *you* find the secret steganographic message in the logo?...

-Original Message-
From: Dave Farber [mailto:[EMAIL PROTECTED]
Subject: [IP] grab it while you can CIA Terrorist-Busterslogo
-- Forwarded Message
From: Tim Bishop [EMAIL PROTECTED]
For ip, if you want:
http://www.cia.gov/terrorism/buster.html

Cool! I've been reading the Buster comics since I was a kid, back 
when Buster was mainly just overthrowing Mossedegh and installing the 
Shah, back when Buster was killing Lumumba and other Axis of Evil 
henchmen in Africa and the rest of the Turd World.

Things got more exciting when Buster was sent by Langley down to 
Managua to mine its harbors...it was cool when Buster got to go out on 
missions with the Navy SEALs to stop those Evil Doers in Nicaragua who 
had shown their evil colors by democratically electing Daniel Ortega! 
If only we'd mined French harbors after Chirac was elected we might not 
have so many loyalty problems from those cheese-eating surrender 
monkeys. And the bombing of the La Belle discotheque in 1986 was just a 
minor effort by Buster, but it turned out to have excellent 
consequences. What a series!

However, my collection of Buster comics is incomplete. I'm missing 
Issue #103, the one where Buster helps the Cuban freedom fighters blow 
up a civilian Air Cubana flight. I think the Cubans in Miami bought up 
all the copies, putting it in short supply. I know the Voice of 
America, the publisher, has re-printed all the Busters, but the new 
ones just aren't as collectible. And what's with the CD-ROM business? 
Like, how may Turd Worlders even have CD readers to read about Buster 
and become loyal to the U.S.?

Another rare issue is #225, the one where Buster is sent to Afghanistan 
to arm them with Stinger missiles capable of shooting down commercial 
jetliners. By the way, I hear that Buster #300, due out soon, will 
deal with Buster's help with one of these Stingers in the Reichstag 
shootdown of an Air France 747 in Seattle, a necessary step to ensure 
the loyalty of all Americans in the noble struggle against (Some) 
Terrorists. This is supposed to be the issue where Buster finally 
leaves the field and becomes Director of Internal Security for the 
Reich.

Buster, A Super-Hero We Can Trust!



--Tim May
Stupidity is not a sin, the victim can't help being stupid.  But 
stupidity is the only universal crime;  the sentence is death, there is 
no appeal, and execution is carried out automatically and without 
pity. --Robert A. Heinlein



Re: CAPPS II protest - Boycotting collaborating airlines

2003-03-03 Thread Tim May
On Monday, March 3, 2003, at 03:22 PM, Bill Stewart wrote:
From: Bill Scannell [mailto:[EMAIL PROTECTED]
Sent: Monday, March 03, 2003 2:45 PM
Subject: Re: Email on your BoycottDelta ?
In response to Delta Air Line's utter lack of concern with the privacy 
of
their customers demonstrated by their participation in a test of the 
CAPPS
II system, a Delta disinvestment campaign has been launched at:

http://www.boycottdelta.org .

The idea of citizens having to undergo a background investigation that
includes personal banking information and a credit check simply to 
travel in
his or her own country is invasive and un-American.  The CAPPS II 
system
goes far beyond what any thinking citizen of this country should 
consider
reasonable.
I believe a big part of the motivation for CAPPS II is to get access to 
more and more of the credit and banking information. People have to 
travel, and if by traveling they have to consent to having their bank 
information turned over to Big Brother, guess who benefits?

CAPPS II is just one of the input sources for Total Information 
Awareness, the computerized realization of Orwell's worst nightmares.

I expect the same sort of voluntary mandatory waiver of privacy 
rights will soon be happening with driver's licenses, gun purchases, 
and even enrollment in schools.

No, you don't have to sign this waiver authoring the Department of 
Homeland Security to examine your bank accounts, your credit card 
purchases, your Customer Courtesy Card purchases at grocery stores, 
your video rental records. You are free not to sign the waiver. And we 
are free not to give you a driver's license. Driving is a privilege 
granted by the state, not a right!

If you don't sign this waiver, your child cannot be enrolled at 
Winston Smith Elementary. You don't want terrorist children in our 
school, now do you?

And so on.

I've already created a .sig to use for my support of this boycott.

May Delta Airlines be the next turkey to declare bankruptcy!!

--Tim May

Join the boycott against Delta Airlines for their support of the Big 
Brotherish CAPPS II citizen-unit tracking program.

http://www.boycottdelta.org
http://boycottdelta.org/images/deltaeyebanner.gif
With our help, Delta Airlines may be joining United and US Air in the  
bankruptcy scrap heap.



Re: CAPPS II protest - Boycotting collaborating airlines

2003-03-03 Thread Tim May
On Monday, March 3, 2003, at 04:59 PM, Tim May wrote:
I believe a big part of the motivation for CAPPS II is to get access 
to more and more of the credit and banking information. People have to 
travel, and if by traveling they have to consent to having their bank 
information turned over to Big Brother, guess who benefits?

CAPPS II is just one of the input sources for Total Information 
Awareness, the computerized realization of Orwell's worst nightmares.
Not coincidentally, Delta seems to have reached an agreement with other 
airlines, with Big Brother no longer objecting. Gee, I wonder why Big 
Bro no longer objects?

(AP)

Big Airlines Submit New Alliance Plan

  By LESLIE MILLER  03/03/2003 19:17:26 EST

  Delta, Northwest and Continental airlines are again proposing a 
marketing alliance that would allow them to sell seats on each other's 
flights, this time with new conditions aimed at keeping air travel 
competitive, the government announced Monday.

The Nos. 3, 4 and 5 airlines struck a more defiant tone in January, 
saying they would go ahead with the alliance and ignore government 
restrictions that would prevent them from dominating air travel in 
certain markets.

But instead of fighting, the airlines met with Department of 
Transportation officials and worked out a new proposal.

--end excerpt--



Join the boycott against Delta Airlines for their support of the Big 
Brotherish CAPPS II citizen-unit tracking program.

http://www.boycottdelta.org
http://boycottdelta.org/images/deltaeyebanner.gif
With our help, Delta Airlines may be joining United and US Air in the  
bankruptcy scrap heap.



Meet CIA's Buster The Terrorist logo

2003-03-03 Thread Bill Stewart
No, that's not exactly what they said, but you should never miss an
opportunity to bash them when they're being stupid anyway :-)
The obvious question, besides how long before it's off the website, is
So can *you* find the secret steganographic message in the logo?...
-Original Message-
From: Dave Farber [mailto:[EMAIL PROTECTED]
Subject: [IP] grab it while you can CIA Terrorist-Busterslogo
-- Forwarded Message
From: Tim Bishop [EMAIL PROTECTED]
Date: Mon, 03 Mar 2003 13:57:05 -0800
To: [EMAIL PROTECTED]
Subject: CIA Terrorist-Busters logo
Dave,

For ip, if you want:

http://www.cia.gov/terrorism/buster.html

This is how the CIA is using their time? I bet the graphic comes off their
website by the end of the day.
Via Strangelove.

Thanks,
Tim
mailto://[EMAIL PROTECTED]
http://geodog.thebishop.net/


Re: Cavium Security Processor

2003-03-03 Thread Bill Stewart
At 11:23 AM 03/03/2003 -0500, Tyler Durden wrote:
Maybe they actually plan on making their money from selling those SDKs! 
(Perhaps they hope for some trickle down from the all the $ startups get 
for making Powerpoint slides.)
And I see they don't really have an architecture suitable for SONET-mapped 
services...gotta be 1GbE or 2GbEs maped over OC-48 or a single 10GbE 
(802.11 WAN).
and some time around then, also wrote
 You'd need a chip for every POS/PPP/HDLC connection in the SONET signal.
 This could be a single connection (unlikely, OC-192c is rare), or hundreds
 (DS-1s? If not, 16 STS-3cs).
I don't know the SPI-3 / SPI-4 interfaces, but it sounds like this is
meant to sit on the electronics side of things, not the optics,
which you'd handle on separate components.
Devices that say 2-10Gbps are usually either talking about GigE
(2Gbps for bidirectional) or OC48 or up to OC192 / 10GigE
(though that really needs 20Gbps to cover both directions.)
This really is an appropriate scale for a device -
if you want to encrypt individual data streams on an OC48,
you do that at the edges before feeding them to routers or muxes,
so your PPP comment isn't relevant.  It's an IPSEC processor,
which says it's handling a combined big fat IP stream on a router/switch,
not a bunch of layer 2 encapsulations of individual IP streams,
so it's for people like big ISPs and big hosting centers and big LANs.
If you're trying to do link encryption on arbitrary muxed SONET,
that's a job for a physical layer raw-bits link encryptor, not IPSEC.





Re: Cavium Security Processor

2003-03-03 Thread Tyler Durden
Bill Stewart wrote:

This really is an appropriate scale for a device -
if you want to encrypt individual data streams on an OC48,
you do that at the edges before feeding them to routers or muxes,
so your PPP comment isn't relevant.  It's an IPSEC processor,
which says it's handling a combined big fat IP stream on a router/switch,
not a bunch of layer 2 encapsulations of individual IP streams,
so it's for people like big ISPs and big hosting centers and big LANs.
If you're trying to do link encryption on arbitrary muxed SONET,
that's a job for a physical layer raw-bits link encryptor, not IPSEC.
OK, I have to admit that my knowledge decreases exponentially after SONET 
hands of the signal.

But basically I was thinking about Packet-over-SONET (POS), which is PPP 
encapsulated HDLC framed IP. So after the POS link was terminated, I 
imagined that this little device would basically now look at the raw IP and 
do some pre-processing before the packets hit either an NP or switch fabric. 
However, in the vast majority of commercial POS links, they're not mapped 
over a pipe as big as STS-48c...they'd be mapped over STS-3c or below. This 
would mean the device is not super-suitable for most SONET-mapped 
applications.

But I guess that's OK...it's not supposed to be. It's really geared for 
MAN/WAN Ethernet (which once in a while is mapped over SONET). But it always 
pisses me off when GbE=WAN in marketing product literature. Nobody actually 
runs GbE outside their TSB (Tall Shiny Building) or campus...yet (and to 
date there's no strong indication they will).












From: Bill Stewart [EMAIL PROTECTED]
To: Tyler Durden [EMAIL PROTECTED]
CC: [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: Re: Cavium Security Processor
Date: Mon, 03 Mar 2003 14:14:15 -0800
At 11:23 AM 03/03/2003 -0500, Tyler Durden wrote:
Maybe they actually plan on making their money from selling those SDKs! 
(Perhaps they hope for some trickle down from the all the $ startups get 
for making Powerpoint slides.)
And I see they don't really have an architecture suitable for SONET-mapped 
services...gotta be 1GbE or 2GbEs maped over OC-48 or a single 10GbE 
(802.11 WAN).
and some time around then, also wrote
 You'd need a chip for every POS/PPP/HDLC connection in the SONET signal.
 This could be a single connection (unlikely, OC-192c is rare), or 
hundreds
 (DS-1s? If not, 16 STS-3cs).

I don't know the SPI-3 / SPI-4 interfaces, but it sounds like this is
meant to sit on the electronics side of things, not the optics,
which you'd handle on separate components.
Devices that say 2-10Gbps are usually either talking about GigE
(2Gbps for bidirectional) or OC48 or up to OC192 / 10GigE
(though that really needs 20Gbps to cover both directions.)
This really is an appropriate scale for a device -
if you want to encrypt individual data streams on an OC48,
you do that at the edges before feeding them to routers or muxes,
so your PPP comment isn't relevant.  It's an IPSEC processor,
which says it's handling a combined big fat IP stream on a router/switch,
not a bunch of layer 2 encapsulations of individual IP streams,
so it's for people like big ISPs and big hosting centers and big LANs.
If you're trying to do link encryption on arbitrary muxed SONET,
that's a job for a physical layer raw-bits link encryptor, not IPSEC.





_
The new MSN 8: advanced junk mail protection and 2 months FREE*  
http://join.msn.com/?page=features/junkmail



Re: Cavium Security Processor

2003-03-03 Thread Peter Gutmann
Mike Rosing [EMAIL PROTECTED] writes:

From http://www.cavium.com/newsevents_Nitrox2PR.htm: Product pricing at 1KU
lot quantities ranges from $295 for the CN2130 to $795 for the CN2560. The
NITROX II Software Development Kit is priced at $9995.

Not priced for a huge number of implementors.  They probably hope to sell a
few hundred develoment kits and maybe 10,000 to 100,000 chips.  They don't
even put their data sheets online. Maybe they're just a scam?

They're for real all right, and have a pretty nice product, but they've fallen
into the same trap that many smart card vendors fall into where they want to
sell their cards for $20 each but price the SDK at $995 and then wonder why
no-one's supporting their hardware.

(Hint to vendors: The cutoff in most organisations at which implementors have
 to get 15 levels of management approval to get something is $70-100.  If your
 SDK costs more than that, you're practically guaranteeing that it's not going
 to be used.  If you want your hardware supported, give away the SDK, or at
 most charge some token amount to deter freeloaders if you're worried about
 that).

Peter.



Re: Cavium Security Processor

2003-03-03 Thread Mike Rosing
On Mon, 3 Mar 2003, Tyler Durden wrote:

 Anyone have any comments?
 This seems to be of only occasional usefulness. You'd need a chip for every
 POS/PPP/HDLC connection in the SONET signal. This could be a single
 connection (unlikely, OC-192c is rare), or hundreds (DS-1s? If not, 16
 STS-3cs).
 -TD

From http://www.cavium.com/newsevents_Nitrox2PR.htm:
Product pricing at 1KU lot quantities ranges from $295 for the CN2130 to
$795 for the CN2560. The NITROX II Software Development Kit is priced at
$9995.

Not priced for a huge number of implementors.  They probably
hope to sell a few hundred develoment kits and maybe 10,000 to
100,000 chips.  They don't even put their data sheets online.
Maybe they're just a scam?

Patience, persistence, truth,
Dr. mike




Announcing Mnet v0.6.1

2003-03-03 Thread Zooko

The Mnet Development Team [1] is pleased to announce the release of Mnet v0.6.1.

Mnet is a universal file space -- a global space in which you can store and 
retrieve files.  The contents of the universal file space are independent of 
any particular server.  It comes with a GUI file browser that looks a bit like 
a classical file-sharing tool such as Napster.  The code is published under the 
Lesser GNU Public License.

The major improvements of v0.6.1 over v0.6 are GUI improvements, faster 
searches, reduced RAM usage and reduced CPU usage.

This is the last release planned from this branch of the Mnet source code.  The 
next planned release will include a completely new, scalable lookup mechanism 
among other substantial changes.

See the Mnet weather report [2] for the current size of the network and 
measurements of the number, kind, and size of files available.

Please view the ChangeLog for more details:

http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/mnet/mnet/ChangeLog?rev=HEADcontent-type=text/vnd.viewcvs-markup

Please visit the download page for precompiled packages for Windows, Mac OS X, 
Linux, FreeBSD, and Solaris.  Also available from the download page are 
instructions for compiling the software from source.

http://mnet.sf.net/download.php

Please use Mnet and report bugs via e-mail to [EMAIL PROTECTED], or by 
using the SourceForge bug tracker:

http://sourceforge.net/tracker/index.php?group_id=43482atid=436453

The availability and persistence of files is strongly influenced by how stable 
the servers are.  If you run a stable Mnet server it will help.

More information is available on the project web page:

http://mnet.sf.net/

Regards,

Zooko

Developer, Mnet Project

[1] The Mnet Development Team is a loosely-organized band of hackers from around 
the planet who work on the project as a volunteer, non-profit operation in the 
public interest.  Each hacker is either single or else associated with a very 
supportive romantic partner.

[2] The Mnet Weather Report is a series of e-mails to the mnet-devel mailing 
list with the mysterious From: address Carnivore.
http://sourceforge.net/mailarchive/forum.php?forum_id=7702



Re: Trivial OTP generation method? (makernd.c)

2003-03-03 Thread Thomas Shaddack

 What's wrong with the old trick of cranking the gain all the way up,
 plugging no microphone at all in, and getting thermal noise?

Some modern soundcards have something like noise gate. From my PCI128 card
I got about one bit of noise, and even that not consistently.

Too high input impedance. Too easy to affect with external signals. Likely
to pick up 50/60 Hz hum.

Otherwise, it's good idea, but its application is likely to depend on the
actual sound hardware used.



Re: Cavium Security Processor

2003-03-03 Thread Tyler Durden
Maybe they actually plan on making their money from selling those SDKs! 
(Perhaps they hope for some trickle down from the all the $ startups get for 
making Powerpoint slides.)
And I see they don't really have an architecture suitable for SONET-mapped 
services...gotta be 1GbE or 2GbEs maped over OC-48 or a single 10GbE (802.11 
WAN).

-TD






From: Mike Rosing [EMAIL PROTECTED]
To: Tyler Durden [EMAIL PROTECTED]
CC: [EMAIL PROTECTED]
Subject: Re: Cavium Security Processor
Date: Mon, 3 Mar 2003 07:53:13 -0800 (PST)
On Mon, 3 Mar 2003, Tyler Durden wrote:

 Anyone have any comments?
 This seems to be of only occasional usefulness. You'd need a chip for 
every
 POS/PPP/HDLC connection in the SONET signal. This could be a single
 connection (unlikely, OC-192c is rare), or hundreds (DS-1s? If not, 16
 STS-3cs).
 -TD

From http://www.cavium.com/newsevents_Nitrox2PR.htm:
Product pricing at 1KU lot quantities ranges from $295 for the CN2130 to
$795 for the CN2560. The NITROX II Software Development Kit is priced at
$9995.

Not priced for a huge number of implementors.  They probably
hope to sell a few hundred develoment kits and maybe 10,000 to
100,000 chips.  They don't even put their data sheets online.
Maybe they're just a scam?
Patience, persistence, truth,
Dr. mike



_
Help STOP SPAM with the new MSN 8 and get 2 months FREE*  
http://join.msn.com/?page=features/junkmail



Re: pledge of allegiance in schools

2003-03-03 Thread gann
Did they actually say, This is the exact legal issue at stake, or are they
not allowed to poll against any questions they want, even if dreamed up? Can
they poll for instance on, Is Adam allowed to criticize our polls even
though he is not in threat of inferred squelching?

Maybe those of us who see through this cloud also investigate issues
ourselves, are more intelligent, and can help rally like-minded citizens to
vote, thus allowing some level of sanity to persist, even if only noticeable
over time.

Of course the news is about generating revenue. I doubt that most news
conglomerates were created out of the good will and intentions of portraying
the most important topics as accurately as possible.

For what it's worth, I am in favor of unbiased and fair news coverage and
100% truth in advertising. If you have not been proven to currently have the
best taste in town, then you should be fined for making such a claim.

Erle


Vote for my banner please (number 5):
banner: http://ganns.com/TheGannLetter/Images/YOPER_banner.jpg
anon vote: http://yoper.stibs.cc/cgi-bin/esp?PAGE=vote.esp


- Original Message -
From: Adam Back [EMAIL PROTECTED]
To: Cypherpunks [EMAIL PROTECTED]
Cc: Adam Back [EMAIL PROTECTED]
Sent: Saturday, March 01, 2003 12:17 AM
Subject: pledge of allegiance in schools


 Look at this shit on fox news, look how they bias the question and
 mis-represent the issue.

 They ask Should children be allowed to say the Pledge of Allegiance
 in school?.  As if the children wanted to, and were being prevented!

 http://q13.trb.com

 and the stats after voting no -- 88% yes.

 Adam







Re: CAPPS II protest - Vandalizing collaborating airlines

2003-03-03 Thread Tyler Durden
Just some out of the box thinking here about Delta...

I wonder. Is there some form of petty vandalism that can be performed by a 
Delta passenger that would make his flight MUCH less than profitable for 
Delta? (I mean, one that probably won't get you arrested...)

(Vandalism has always been one of my favorite forms of instant protest.)

-TD






From: Tim May [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: CAPPS II protest - Boycotting collaborating airlines
Date: Mon, 3 Mar 2003 16:59:42 -0800
On Monday, March 3, 2003, at 03:22 PM, Bill Stewart wrote:
From: Bill Scannell [mailto:[EMAIL PROTECTED]
Sent: Monday, March 03, 2003 2:45 PM
Subject: Re: Email on your BoycottDelta ?
In response to Delta Air Line's utter lack of concern with the privacy of
their customers demonstrated by their participation in a test of the CAPPS
II system, a Delta disinvestment campaign has been launched at:
http://www.boycottdelta.org .

The idea of citizens having to undergo a background investigation that
includes personal banking information and a credit check simply to travel 
in
his or her own country is invasive and un-American.  The CAPPS II system
goes far beyond what any thinking citizen of this country should consider
reasonable.
I believe a big part of the motivation for CAPPS II is to get access to 
more and more of the credit and banking information. People have to travel, 
and if by traveling they have to consent to having their bank information 
turned over to Big Brother, guess who benefits?

CAPPS II is just one of the input sources for Total Information Awareness, 
the computerized realization of Orwell's worst nightmares.

I expect the same sort of voluntary mandatory waiver of privacy rights 
will soon be happening with driver's licenses, gun purchases, and even 
enrollment in schools.

No, you don't have to sign this waiver authoring the Department of 
Homeland Security to examine your bank accounts, your credit card 
purchases, your Customer Courtesy Card purchases at grocery stores, your 
video rental records. You are free not to sign the waiver. And we are free 
not to give you a driver's license. Driving is a privilege granted by the 
state, not a right!

If you don't sign this waiver, your child cannot be enrolled at Winston 
Smith Elementary. You don't want terrorist children in our school, now do 
you?

And so on.

I've already created a .sig to use for my support of this boycott.

May Delta Airlines be the next turkey to declare bankruptcy!!

--Tim May

Join the boycott against Delta Airlines for their support of the Big 
Brotherish CAPPS II citizen-unit tracking program.

http://www.boycottdelta.org
http://boycottdelta.org/images/deltaeyebanner.gif
With our help, Delta Airlines may be joining United and US Air in the  
bankruptcy scrap heap.


_
Help STOP SPAM with the new MSN 8 and get 2 months FREE*  
http://join.msn.com/?page=features/junkmail