Re: JAP back doored

2003-09-03 Thread Adam Shostack
On Tue, Sep 02, 2003 at 12:47:34PM -0700, Steve Schear wrote: | http://www.heise.de/newsticker/data/jk-02.09.03-005/ | | German police have searched and seized the rooms (dorm?) of one of the JAP | developers. They were on the look for data that was logged throughout the | period when JAP had

Re: JAP back doored

2003-09-02 Thread ken
This piece of political PR was sent to a mailing list intended for internal reporting of computer problems at a university, so was obviously automatically grabbed. Maybe someone sold them a list of ac.uk addresses. Dr Sean Gabb wrote: 2nd September 2003 Dear Educator, We are writing to

Look who's spamming now. [was falsely Re: JAP back doored]

2003-09-02 Thread ken
Whoops - apologies for stupid posting here caused by /me/ being a prat with my mail program. Though the message body it isn't entirely off-topic here - the subject line is quite unrelated to it. Mea culpa. Ken ken wrote: This piece of political PR was sent to a mailing list intended for

Re: JAP back doored

2003-09-02 Thread Steve Schear
http://www.heise.de/newsticker/data/jk-02.09.03-005/ German police have searched and seized the rooms (dorm?) of one of the JAP developers. They were on the look for data that was logged throughout the period when JAP had to log specific traffic. The JAP-people say that the seizure was not

RE: JAP back doored

2003-08-23 Thread John Kelsey
At 05:54 AM 8/22/03 +0200, Thomas Shaddack wrote: On Thu, 21 Aug 2003, Vincent Penquerc'h wrote: Still useful to protect against third party eavesdroppers, I guess. Could it be at least somehow useful as a part of some bigger scheme, a layer of a cake? Can a distributed multilayered proxy be

RE: JAP back doored

2003-08-22 Thread Thomas Shaddack
On Thu, 21 Aug 2003, Vincent Penquerc'h wrote: Still useful to protect against third party eavesdroppers, I guess. Could it be at least somehow useful as a part of some bigger scheme, a layer of a cake? Can a distributed multilayered proxy be built with some less-than-trusted components? Short

Re: JAP back doored

2003-08-21 Thread Morlock Elloi
This is a terrible day for privacy advocates that used the once (perhaps This is the great day for *true* privacy advocates worldwide. In face of huge difficulties and dangers in providing real anonymity, some human rights/wrongs organisations capitalised (in several ways) on the need for

Re: [Full-Disclosure] JAP back doored

2003-08-21 Thread Thor Larholm
RIP The userbase of any anonymity service stays, and dissappears, with the trust. - Original Message - From: error [EMAIL PROTECTED] To: [EMAIL PROTECTED] X-Orig-To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Thursday, August 21, 2003 7:20 PM Subject: [Full-Disclosure] JAP back doored

JAP back doored

2003-08-21 Thread error
This is a terrible day for privacy advocates that used the once (perhaps never true) anonymous Java Anonymous Proxy. According to a story ( http://theregister.co.uk/content/55/32450.html) by The Register (It was also posted to (http://securityfocus.com/archive/1/334382/2003-08-18/2003-08-24/0)

RE: JAP back doored

2003-08-21 Thread Vincent Penquerc'h
CAMsg::printMsg(LOG_INFO,Loading Crime Detection Data\n); CAMsg::printMsg(LOG_CRIT,Crime detected - ID: %u - Content: \n%s\n,id,crimeBuff,payLen); Well, people say the JAP team hid it, but with that (assuming the strings appeared verbatim in the binary), they made sure someone would spot