![]() |
||||
| ||||
![]() |
||||
|
||||
![]() |
![]() Saturday, March 15, 2003 via Defense Tech SECURITY SAGES SAY "SO WHAT" TO NET TERROR
Note: Original contains a number of links that I didn't copy -- click on the via line to go to the original for those. posted by Gary Williams at 11:43 PM | link | ![]() So, where are you?I've been fooling with GeoURL for a couple of days. Nothing seemed to work, so I finally sent mail to GeoURL and Joshua Schacter (one of the founders of GeoURL AND a founder of memepool!) wrote back and told me that underscores aren't legal in domain names (tfs_reluctant.blogspot.com) and therefore the Perl library he's using in GeoURL was getting borked trying to find the site -- oops! So I went to blogger and tried looking up "domain name with _" and several variants, and got nothing found. So I wrote email to blogger (pyra) asking what I could do.And, after a couple of Premier League soccer games and a couple of hours watching cars go round at Sebring, I figured out a solution. I added the location meta-tags to my homepage index.htm and told GeoURL to map that -- which worked. So I changed the GeoURL link over there to the right in the links list (under the store link) to reference my homepage (which doesn't have any underscores 0_0 and it works). Or you can click here to see my net neighbors: GeoURL So, having done that, I started poking around the nearby sites to see what's there. These two guys seem worthwhile (I think I'll add 'em to my web-link list)Random Thoughts and Geek Ramblings. Not only that, but the nearest link is to the weather station, which has a nice radar map display and a note about how the map site they used to use no longer works, so their using the US Weather Service radar map. And they had a link to show a map of where they are. So I clicked that and went to MapQuest via the latitude and longitude (which is what must be used for GeoURL to find you). So I typed in my lat/long and got a map to my house. So I clicked on the Aerial Photo link and got the photo of my house shown on the left (my house is the one towards the top). Wow! An aerial photo of my house! (Apparently this was taken last summer, since you can see the square of garden area above the house!) posted by Gary Williams at 10:22 PM | link | How long does a worm live on the net?from John Sage on intrusions@incidents.org:Donald, Ken et al: On Sat, Mar 15, 2003 at 01:22:04PM -0700, Smith, Donald wrote: > I was asked the other day how long before all the mssql worms > were going to be cleaned and "off" the network. > > Ken, has captured a synscan1.6 from a RAMEN infected host! > (synfin; fromport = toport; scanned ips range TO 255) > > That's vulnerability and worm is over 3 years old. > Just thought some of us would get a laugh from it;-) Just occured to me while reading this: consider the "obsolete" PC, retired by one organization and finally donated to somewhere else without thorough cleaning; reinstalled somewhere else; fired up at its new home, and *poof* - a vector for viruses and trojans that may have lain dormant for a long time. Also consider that in cracker circles, the source for all sorts of stuff is still out there, just waiting for some enterprising young experimenter to put an ancient problem back into circulation :-/ I would really expect anything to ever go away... - John -- "You must define an operating system environment, or the configuration file build will puke." ![]() 1/5 Scale Sherman TankJust imagine the looks on your neighbors faces when you rumble into the midst of their barbecue in a Panzer, and paste the beer cooler with your 37mm potato cannon. That'll teach 'em to drink imported beer on the 4th of July. PDF plans are available, if you want to build your own 1/5th scale Sherman tank... posted by Gary Williams at 5:21 PM | link | via CBC News posted by Gary Williams at 4:21 PM | link | ![]() Meet the 'gun with brains'Say hello to the Intelligent Fire Arm, a unique and thoroughly South African device that could change the way we think about guns – and the people who wield them. Although still in prototype form, it will soon enter manufacture.posted by Gary Williams at 3:58 PM | link | via ABCNEWS.com : Ex-CIA Officers Questioning Iraq Data posted by Gary Williams at 2:01 PM | link | via Social Science Resources: Security Services
Note: Each of the bullet lines begins with a link to the source. To see the page with the links, click the via line, or the [more] or click here. posted by Gary Williams at 12:54 PM | link | ![]() Practical CryptographyNiels Ferguson and Bruce Schneierposted by Gary Williams at 12:36 PM | link | via abuddhas memes posted by Gary Williams at 2:10 AM | link | via Living Code - Biology & information. Corante posted by Gary Williams at 1:44 AM | link | Friday, March 14, 2003 via Raging Platypus - Geeks drink it for breakfast Think it's a parody of Raging Cow?But the light of the stars disoriented him, and the Creator became confused. And out of the space between water and earth came a most unusual creature. For it did lay eggs like a hen but have fur like a dog. Its hind had the tail of a beaver, but its head had the bill of a duck. And the Creator flew into such a rage, cursed his creation, hid it under a rock, and hoped no one would notice.posted by Gary Williams at 11:59 PM | link | via William Gibson posted by Gary Williams at 11:39 PM | link | via Amish Tech Support - At least one of my personalities is sane. posted by Gary Williams at 11:05 PM | link | via Al Martin Raw Bush, Propaganda Minister O'Reilly, The P-Word and the Weiner Nation, by Al MartinThe only one that looked alert was Ari Fleischer and the problem is that although they powdered up Bush something fierce, they didn’t do anything to Ari’s head. They should have put more powder on the top of his head because every time he moved his head around it created a flash and glare off the top of his head. It even seemed to annoy Bush a little bit. He’d give him this look like “why don’t you turn your head down 50 watts?”posted by Gary Williams at 9:28 PM | link | via NEWS of the WEIRD - Current News posted by Gary Williams at 9:16 PM | link | via The Word Spy posted by Gary Williams at 8:22 PM | link | Slashdot: News for nerds, stuff that matters quote of the day: All newspaper editorial writers ever do is come down from the hills after the battle is over and shoot the wounded.posted by Gary Williams at 7:53 PM | link |Comic Of The Day![]() via Pharma Watch Life in the elementary school classroom for delinquent pharmaceutical companies
posted by Gary Williams at 2:32 AM | link | John Gilmore: Sen. Wyden's CAPPS 2 amendment is bullshitFrom Declan McCullagh's PolitechHere's my article that John is talking about: http://news.com.com/2100-1029-992572.html Text of Sen. Wyden's amendment: http://wyden.senate.gov/leg_issues/amendments/capps_amendment.pdf?tag=nl -Declan --- To: declan@well.com, gnu@new.toad.com Subject: Sen. Wyden's CAPPS 2 amendment is bullshit Date: Thu, 13 Mar 2003 20:14:49 -0800 From: John Gilmore <gnu@toad.com> I read your report on Sen. Wyden's anti-CAPPS-2 amendment. Thanks for pointing it out. Unfortunately it looks like a stalking horse, rather than a real reform. First, the amendment doesn't stop CAPPS 2. It merely requires a report to two congressional committees on it. The public will never even get to see this report, unless the committees decide to release it, and CAPPS 2 will continue. Second, the "Air Cargo Security Act" bill that this is attached to is yet another insane secret-law assume-everyone-is-a-criminal program. You can read it here: http://thomas.loc.gov/cgi-bin/query/z?c108:S.165: This time they're going after cargo aircraft, creating a "Know Your Customer" program for people who ship cargo, demanding background checks for every person who works for any cargo shipping firm, "appropriate screening" (blacklisting) for all flight crews, and any "additional measures deemed necessary and appropriate by the" head of TSA -- in his sole judgement. The best part is at the bottom, hidden in the usual sort of "The second word in the fourth sentence of the Blather Bill of 1927 shall be struck out and replace by 'and'" style. It says:
That last (4) clause eliminates the Freedom of Information Act, the Administrative Procedures Act, the Government in the Sunshine Act, and the Federal Advisory Committee Act from applying to this bill. That's every one of the "open government" laws we have. Pretty good for three lines of text. These two legalese paragraphs say, in plain English:
This kind of exemption from public oversight is EXACTLY how CAPPS 2 has gotten as far as it has. This is a screw-the-public bill. It's a secret law bill. It creates a dictatorship, not a democracy. It says that between them, the TSA and the airlines can come up with whatever cozy rules are mutually beneficial -- and the public will get zero chance to even see what the rules are, let alone to have them changed. The passenger airlines have done this in requiring ID checks that prevent people from reselling their tickets, so the public can't avoid airline $100 change fees and use-it-or-lose-it ticket policies. The feds get more power and the airlines get more money; what are we complaining about? Rather than exempting whole new sections of the law from public oversight, Congress should be opening up the sections of the law which are now unconstitutionally kept secret from the public. John Gilmore (suing TSA to overturn unpublished travel ID rules and CAPPS 2) http://cryptome.org/freetotravel.htm ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. To subscribe to Politech: http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ Like Politech? Make a donation here: http://www.politechbot.com/donate/ ------------------------------------------------------------------------- Declan McCullagh's photographs are at http://www.mccullagh.org/ ------------------------------------------------------------------------- posted by Gary Williams at 1:25 AM | link | via Coffee Blog GeoURL and our neighbors
I read this yesterday. I've seen the same kind of thing at Mandarin Design, but yesterday I got interested and followed the GeoURL link and signed up. (I've put the tag they supplied over on the link list, below my store link.) Unfortunately, I haven't yet got it to work -- although the latitude and longitude finders look right to me, and it was easy to add the meta tags to my template. Oh, well, if it doesn't work soon, I'll poke at it tomorrow and make it work. Anyways, Coffee Blog seems to combine cooking and science, both things I like to read about, so I've added it to my science and thinkers list. Now, if I can just get GeoURL to work... posted by Gary Williams at 12:59 AM | link | Three Laws Of Thermodynamics, As A Poker GameI've been reading Uncertain Principles, where he's talking about sumarizing his class in mechanics in a 15-minute talk, and it reminded me of my days in physics. So here are the three laws of thermodynamics (I wasted a lot of my first year in college playing poker, so there's a certain dynamics...):
Simple, 'eh? posted by Gary Williams at 12:11 AM | link | Thursday, March 13, 2003 via abuddhas memes Huxley and the absurd"Huxley had, in fact, a well-developed sense of the absurd...that the universe is radically weird. Comments to this effect turn up again and again in Huxley's writing: "the astonishingness of the most obvious things," "the unutterably odd facts of human experience," etc. He was much tickled to find, when typing one day, that his left hand had slipped from "c" to "v," giving him the phrase: "the human vomedy.""posted by Gary Williams at 10:41 PM | link | Play 20 QuestionsCool game. Click on the headline and hope the server's not too busy... posted by Gary Williams at 8:27 PM | link |AP protests government seizure of packageFrom Declan McCullagh's Politech---
Date: Thu, 13 Mar 2003 15:48:23 -0500 From: "Paul Levy" <PLEVY@citizen.org> To: <declan@well.com> Subject: Re: [IP] AP Protests Gov't Seizure of Package Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Content-Disposition: inline maybe when AP reporters threaten the government's ability to propagandize the public for its position on issues relating to terrorism, they are enemy combatants and lose the protection of the constitution Paul Alan Levy Public Citizen Litigation Group 1600 - 20th Street, N.W. Washington, D.C. 20009 (202) 588-1000 http://www.citizen.org/litigation/litigation.html >>> Dave Farber <dave@farber.net> 03/13/03 03:29PM >>> ------ Forwarded Message From: Richard Forno <rforno@infowarrior.org> Date: Thu, 13 Mar 2003 14:17:41 -0500 To: Dave Farber <dave@farber.net> Subject: AP Protests Gov't Seizure of Package AP Protests Gov't Seizure of Package The Associated Press Thursday, March 13, 2003; 9:44 AM Government agencies opened a package mailed between two Associated Press reporters last September and seized a copy of an eight-year-old unclassified FBI lab report without obtaining a warrant or notifying the news agency. The Customs Service intercepted a package sent via Federal Express from the Associated Press bureau in Manila to the AP office in Washington, and turned the contents over to the FBI. FBI spokesman Doug Garrison said the document contained sensitive information that should not be made public. However, an AP executive said the package contained an unclassified 1995 FBI report that had been discussed in open court in two legal cases. "The government had no legal right to seize the package," said David Tomlin, assistant to the AP president. The package was one of several communications between Jim Gomez in Manila and John Solomon in Washington, AP reporters who were working on terrorism investigative stories. It was the second time that Solomon's reporting was the subject of a government seizure. In May 2001 the Justice Department subpoenaed his home phone records concerning stories he wrote about an investigation of then-Sen. Robert Torricelli. < snip > http://www.washingtonpost.com/wp-dyn/articles/A19862-2003Mar13.html ------ End of Forwarded Message ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. To subscribe to Politech: http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ Like Politech? Make a donation here: http://www.politechbot.com/donate/ ------------------------------------------------------------------------- Declan McCullagh's photographs are at http://www.mccullagh.org/ ------------------------------------------------------------------------- posted by Gary Williams at 7:48 PM | link | Congress mulls P2P porn restrictionsFrom Declan McCullagh's Politech[Yes, let's require everyone around the globe to rate files shared via Kazaa and other P2P networks. That'll work well! Great idea! --Declan] --- http://news.com.com/2100-1025-992471.html Congress mulls new P2P porn restrictions By Declan McCullagh March 13, 2003, 10:37 AM PT WASHINGTON--Members of Congress on Thursday said new laws aimed at restricting pornography on peer-to-peer networks might be necessary, as police vowed to step up enforcement efforts. During a hearing of the House Government Reform Committee, politicians complained of two problems: The allegedly widespread distribution of illegal child pornography on peer-to-peer (P2P) networks, and the ease by which a youth could stumble across sexually explicit files that may be legal for adults but inappropriate for minors. "We have a rating system for videogames. We have a rating system for music," said Rep. Adam Putnam, R-Fl., who suggested a government-mandated system would be appropriate for files on P2P networks. Otherwise, Putnam warned, P2P users could "prey on spelling errors of third graders looking for Pokemon." [...] ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. To subscribe to Politech: http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ Like Politech? Make a donation here: http://www.politechbot.com/donate/ ------------------------------------------------------------------------- Declan McCullagh's photographs are at http://www.mccullagh.org/ ------------------------------------------------------------------------- posted by Gary Williams at 6:22 PM | link | via CBS MarketWatch Intel's new brand stirs up the message boards - FARK rejoicesSAN FRANCISCO (CBS.MW) - As much as Intel longs hope Centrino turns out to be more than meets the eye, it's not some new-fangled Transformer. And it's certainly not a teenage rebel from an alternate dimension a la the "Teenage Mutant Ninja Turtles."posted by Gary Williams at 6:11 PM | link | via nature.com Teat-seeking robot to help cows milk themselvesSoft-touch technology could increase yields while farmers lie in.posted by Gary Williams at 4:56 PM | link |
![]() ![]() The Great Dark SpotMarch 12, 2003: For more than a century astronomers thought that the Great Red Spot was the biggest thing on Jupiter. Not anymore. Images from NASA's Cassini spacecraft have revealed something at least as large.posted by Gary Williams at 2:48 PM | link | via The Register posted by Gary Williams at 1:51 PM | link | via McGraw-Hill Construction | ENR - U.S. Agency Seeks Bids for Rebuilding Iraq posted by Gary Williams at 1:44 PM | link | via DoD News: DoD Announces Number For Oil Well Fire Contractors posted by Gary Williams at 1:41 PM | link | Paypal knocked for seizing more sites' moneyFrom Declan McCullagh's PolitechPrevious Politech message: "Anti-abortion activist complains Paypal seized his account" http://www.politechbot.com/p-04524.html Alternatives? Politech has accepted donations through E-Gold or GoldMoney for the last year or so (http://www.politechbot.com/donate/). I'll compile and send along other suggestions. -Declan --- From: Eric Cordian <emc@artifact.psychedelic.net> Message-Id: <200303112128.h2BLSIH01886@artifact.psychedelic.net> Subject: Paypal Strikes Again To: declan@well.com Date: Tue, 11 Mar 2003 13:28:18 -0800 (PST) Hi, The folks on whatreallyhappened.com are reporting that Paypal has closed their account, exercising its "sole discretion" according to the user agreement to close their account and embargo their funds for six months. http://www.whatreallyhappened.com/lindex.html Since whatreallyhappened.com is a link farm of news stories featuring a variety of views on the impending War with Iraq, and Paypal just pulled this same trick with an anti-abortion activist, it would appear that Paypal is employing its user agreement selectively for political purposes. While Paypal as a private company certainly has the right to choose with whom it does business, tying up donations people have made to support a political cause for half a year does seem a tad dishonest. -- Eric Michael Cordian 0+ O:.T:.O:. Mathematical Munitions Division "Do What Thou Wilt Shall Be The Whole Of The Law" --- Date: Wed, 12 Mar 2003 11:13:54 -0800 To: declan@well.com From: "A.Lizard" <alizard@ecis.com> Subject: Paypal strikes again! From anti-abortion to anti-war. What business does a money transfer agent have deciding whether to pay funds or not based on the account holder's politics? And what is PayPal likely to decide is "objectionable" next? On what objective criteria? If you know anyone using PayPal to raise funds for a political site regardless of politics, better let them know about this. Given that PayPal is apparently using political criteria to decide who its OK to transfer money to, other than hearing a sucking sound on the Internet as every political organization not aligned with the Bush Administration using PayPal to accepts donations to pull all their money out and instruct their banks not to accept demands for funds from PayPal, I'm expecting the next response to be a demand for federal regulation of PayPal-like services. A.Lizard >PayPal switches off indy news site account >By Drew Cullen >Posted: 12/03/2003 at 08:39 GMT http://www.theregister.co.uk/content/6/29717.html >A US independent news site which relies upon reader donations has had some >of its air supply cut off by PayPal. >In a email sent to WhatReallyHappened.com >http://www.whatreallyhappened.com/ yesterday, PayPal's Orwellian-sounding >"Merchant Risk Department" wrote: >As you know, the PayPal User Agreement states that PayPal, at its sole >discretion, reserves the right to close an account at any time for any >reason. We write to inform you that, after a review of your site, and in >accordance with the User Agreement, your account has been closed. Your >funds will be held for 180 days from the date of the last transaction on >the account. After 180 days have expired, we will refund your funds by >mailing a check to the address linked to your account. . . . rest at the URL --- From: "Scoop Editor - Alastair Thompson" <alastair@scoop.co.nz> To: Declan McCullagh <declan@well.com> Date: Thu, 13 Mar 2003 12:22:11 +1300 MIME-Version: 1.0 Dear Declan, Looks like a case for the Politech community to ruminate on. http://www.whatreallyhappened.com/paypal.html Paypal closed off this 911 advocacy websites account - and they are fighting back. As they have a huge audience in the blogging and independent media community this news is spreading like wildfire. Indymedia are now debating ending their association with Paypal too.. and I suspect hundreds of other independent media sites (including us) are considering the same thing. The sad thing is they do provide a very easy to use and well maintained and supported service... and they have massive market share. Their conduct is difficult to understand in the circumstances. One alternative service some indymedia are considering using is. http://www.affero.com Which has some additional capabilities which are useful for online publishers. It would be useful if members of the forum might be able to suggest other alternatives. We have been advised by one person to open our own Visa Merchant account but are very reluctant to do so. A service like the one Paypal has been providing seems like it is in huge demand.... but it does need to be secure and reliable... which sadly Paypal appears not to be. regards Alastair Thompson Scoop Alastair Thompson Scoop Editor Scoop Media Wellington http://www.Scoop.co.nz 021 70 70 44 ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. To subscribe to Politech: http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ Like Politech? Make a donation here: http://www.politechbot.com/donate/ ------------------------------------------------------------------------- Declan McCullagh's photographs are at http://www.mccullagh.org/ ------------------------------------------------------------------------- posted by Gary Williams at 12:31 PM | link | via The New York Times (registration required) posted by Gary Williams at 12:01 PM | link | via Afghanistan Recovery RECENT NEWS This is the United Nations development agency in Afghanistan. Someday soon, there will be more Afghani sites. posted by Gary Williams at 3:06 AM | link | from Johannes Ullrich via intrusions@incidents.org Code Red returnsWe are tracking a new variation of our old friend Code Red.
This version appears to use the same .ida overflow as the original Code Red. However, reports indicate that it installs a backdoor as well. So far, we see approximately twice the number of sources as we usually have this time of the month. Last month, we tracked about 30,000 Code Red infected machines scanning from March 1st to March 19th. So far, we see more than 50,000 systems scanning port 80, in addition to our continuous background of 13,000 sources. At this time, I am not planning on raising the infocon to yellow, as this appears to be essentially a variation of an old threat and it is unlikely that we will alert anybody new. I do not expect any widespread effects on network performance. Please verify that all IIS servers are patched and unnecessary file type associations are removed. Filtering port 80 is recommended if possible. via Living Code - Biology & Information posted by Gary Williams at 2:04 AM | link | via Lagniappe posted by Gary Williams at 1:44 AM | link | via medpundit posted by Gary Williams at 12:22 AM | link | Wednesday, March 12, 2003 via BBB: Come for the bunny photographs. Stay for the Warmongery America the bunny!America is the original no-tribe state. While today there are others, let’s not lose sight or forget just how rare a thing like America really is: posted by Gary Williams at 11:15 PM | link | via Bloggers and Blogs: Welcome!
To take the survey, click here. posted by Gary Williams at 8:54 PM | link | ![]() posted by Gary Williams at 3:29 PM | link | via News - Halifax - canada.com network posted by Gary Williams at 3:14 PM | link | via intrusions@incidents.org: Hello, I have been watching this recent spike in CodeRed activity and one thing I am noticing is the lack of TCP session establishment. I am seeing common get strings like this showing up at my firewalls without ever establishing a TCP three way handshake. I have seen several hundred packets with in the last two days similar to this at my firewalls. 47 45 54 20 2F 64 65 66 61 75 6C 74 2E 69 64 61 GET /default.ida 3F 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 ?XXXXXXXXXXXXXXX 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 XXXXXXXXXXXXXXXX 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 XXXXXXXXXXXXXXXX 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 XXXXXXXXXXXXXXXX Snip---------------------------------------------------------------------------------------------------------------------------- I find it awfully strange that there is no handshake (not even a single SYN to try and establish a session) but these packets show up anyway. I also am not seeing an increase of port 80 scans in my firewall logs or with any of my IDS sensors. Is anybody else out there seeing the same things we are? Thanks! vjl
posted by Gary Williams at 2:45 PM | link | ![]() Why 91% > 91% (if you're US AIR)Learn how percentages work if you're a bankrupt airline (also good for AMTRACK, apparently): http://www.usairways.com/promotions/specials/shuttle.htm. posted by Gary Williams at 2:31 PM | link |Online Comics Directory(via memepool.com) Online Comics at OnlineComics.net posted by Gary Williams at 2:13 PM | link |via Chico State CSUC Underwater Basket Weaving DepartmentUBW 001: Introduction to Underwater Basket Weavingposted by Gary Williams at 2:07 PM | link | ![]() Apple iMac - the PC you really want, says MSNposted by Gary Williams at 1:18 PM | link | via The Register posted by Gary Williams at 12:17 PM | link | NSA Publishes Router Safety GuideIf you're interested in what the National Security Agency thinks is the right thing to do for your Cisco (and other brand) routers, click here. posted by Gary Williams at 12:10 PM | link |World's most stupid security measure contest this weekFrom Declan McCullagh's Politech[I have the honor of being a judge in this competition. Please send your suggestions to stupidsecurity@privacy.org. --Declan] --- Date: Tue, 11 Mar 2003 16:37:47 +0000 To: Declan McCullagh <declan@well.com> From: Simon Davies <s.g.davies@lse.ac.uk> Hi Declan, it would be terrific if you could get this out on Politech. Best wishes Simon PRIVACY INTERNATIONAL ONE WEEK LEFT TO HELP FIND THE WORLD'S MOST STUPID SECURITY MEASURE Global competition will identify absurd and pointless security requirements http://www.privacyinternational.org/activities/stupidsecurity/ 11th February 2003 Embargo: Immediate release The human rights watchdog Privacy International has launched a competition to discover the world's most pointless, intrusive, annoying and self-serving security measures. The "Stupid Security" award aims to highlight the absurdities of the security industry. Privacy International's director, Simon Davies, said his group had taken the initiative because of "innumerable" security initiatives around the world that had absolutely no genuine security benefit. "The situation has become ridiculous" said Mr Davies. "Security has become the smokescreen for incompetent and robotic managers the world over". "I have stood for ages in a security line at an inconsequential office building and grilled relentlessly only to be given a security pass that a high school student could have faked. And I resent being forced to take off my shoes at an airport that can't even screen its luggage" he said. Even before 9/11 a whole army of bumbling amateurs has taken it upon themselves to figure out pointless, annoying, intrusive, illusory and just plain stupid measures to "protect" our security. It has become a global menace. From the nightclub in Berlin that demands the home address of its patrons, to the phone company in Britain that won't let anyone pay more than twenty pounds a month from a bank account, the world has become infested with bumptious administrators competing to hinder or harass us. And often for no good reason whatever. Unworkable security laws and illusory security measures do nothing to help issues of real public concern. They only hinder the public and intrude unnecessary into our private lives. Until March 15th 2003 Privacy International is calling for nominations to name and shame the worst offenders. Nominations in the form of stories and anecdotes are most welcome. The competition will be judged by a panel of well-known security experts, public policy specialists, privacy advocates and journalists. The competition is open to anyone. Nominations can be sent to stupidsecurity@privacy.org Winners will be announced at the 13th Computers, Freedom & Privacy conference in New York on April 4th. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - NOTES TO EDITORS - Privacy International (PI) is a human rights group formed in 1990 as a watchdog on surveillance by governments and corporations. PI is based in London, and has an office in Washington, D.C. Together with members in 40 countries, PI has conducted campaigns throughout the world on issues ranging from wiretapping and national security activities, to ID cards, video surveillance, data matching, police information systems, and medical privacy, and works with a wide range of parliamentary and inter-governmental organisations such as the European Parliament, the House of Lords and UNESCO. - PI's website is www.privacyinternational.org The award page can be found at: http://www.privacyinternational.org/activities/stupidsecurity/ - The competition will be judged by a panel of well-known security experts, public policy specialists, privacy advocates and journalists. Details are on the PI competition page above. - Simon Davies can be reached at simon@privacy.org and in the UK on 07958 466 552 ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. To subscribe to Politech: http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ Like Politech? Make a donation here: http://www.politechbot.com/donate/ ------------------------------------------------------------------------- Declan McCullagh's photographs are at http://www.mccullagh.org/ ------------------------------------------------------------------------- posted by Gary Williams at 11:59 AM | link | Code Red variants a tool for attackers?From James Slora on the intrusions@incidents.org mailing list:Isn't it odd that Code Red variants have been continuously circulating for a couple of years and have tapered off to next to nil, but a slightly modified new version has become so prevalent? I see a really obvious pattern in my Code Red hits. Systems that both respond to pings and have live web servers (whether IIS or not) have received a dozen or so hits each in the past two days, while systems that do not respond to pings or that do not have web servers have only received a max of four hits (counted by TCP 80 SYNs on non-web systems and by actual Code Red requests on web servers). Systems with web servers (whether IIS or not) also received more hits. No pings accompany the Code Red hits of course. This says to me that some Code Red attacks may be aimed at a hit list built from previous very cursory recon. This same pattern has been true of Nimda attacks over the past few months. I get almost no Nimda hits on systems that ignore pings, while responding systems sometimes experience large volumes of Nimda hits. Again, systems with web servers (whether or not they are IIS) get far more TCP 80 SYNs. My hypothesis is that the worms themselves are always not the point, and that they may be primarily used as an attack vehicle that will draw little specific attention to the attackers because we have all become so tired of the commonness of the worms and because the worms provide such easy explanations for system compromises. Unaware admins of compromised systems run AV, detect and delete Code Red or Nimda, and allow the custom botnet tools to continue working because they were never noticed. I've encountered this attitude several times in response to abuse reports, even when the attacks being reported are clearly not Code Red or Nimda. Of course there are still plenty of systems that can be compromised by the worms themselves, but this may be more of a bonus activity rather than the primary point. Will we now see a resurgence of Nimda hits to take advantage of the root . exe files copied by Code Red? I'd bet yes. Update: Kevin Timm replies on the same list: Interesting hypothesis and I would have to say I agree with it somewhat. I've have seen mutations of Nimda and CR alike. Some of these mutations were the same exploit but the session was spilced with maybe the GET being one session and the rest others. I've seen mutations on several networks where a space was in the c+dir string and other small changes. If I was a hacker of malicious intent I would try to hide under the noise at least for setting up large controllable networks to be used for other purposes. I am actually surprised that more attacks do not involve installing trojans that could be connected to through brokered connections over http or https. FWIW I've seen a couple directed and co-ordinated attacks that were true tasteful connections (so spoofing was not done). The unusual thing was that these events were very geographically disperse and featured many different OS types (Windows, Mac, Linux ). The attacks themselves were juvenile and had the same attack signature. These attacks however do demonstrate the potential capability.
Kevin posted by Gary Williams at 11:07 AM | link | MESSAGE TO ALL THE ANTIWAR PROTESTOR'SApparently the folks on the right have discovered the IndyMedia sites: this letter came to the Santa Cruz IndyMedia mailing list:Return-Path: <imc-sc-admin@lists.indymedia.org> Received: from sarai.indymedia.org (sarai.indymedia.org [207.8.152.244]) by ns1.corninglink.com (8.11.6/8.10.1) with ESMTP id h2C99Dv14300 for <gwms@corninglink.com>; Wed, 12 Mar 2003 04:09:13 -0500 (EST) Received: from sarai.indymedia.org (localhost [127.0.0.1]) by sarai.indymedia.org (Postfix) with ESMTP id 313523A24C0; Wed, 12 Mar 2003 04:09:12 -0500 (EST) Delivered-To: imc-sc@lists.indymedia.org Received: from imf13bis.bellsouth.net (mail313.mail.bellsouth.net [205.152.58.173]) by sarai.indymedia.org (Postfix) with ESMTP id 059643A22F5 for <imc-sc@lists.indymedia.org>; Wed, 12 Mar 2003 04:08:58 -0500 (EST) Received: from oemcomputer ([66.20.96.203]) by imf13bis.bellsouth.net (InterMail vM.5.01.04.25 201-253-122-122-125-20020815) with SMTP id <20030312091057.ZGPV28153.imf13bis.bellsouth.net@oemcomputer> for <imc-sc@lists.indymedia.org>; Wed, 12 Mar 2003 04:10:57 -0500 Message-ID: <049201c2e875$2b2ecbe0$cb601442@oemcomputer> From: "JT Venda" <jtvenda@bellsouth.net> To: <imc-sc@lists.indymedia.org> Subject: [Imc-sc] Fw: MESSAGE TO ALL THE ANTIWAR PROTESTOR'S Sender: imc-sc-admin@lists.indymedia.org ----- Original Message ----- From: JT Venda To: i_try_harder@yahoo.com Sent: Tuesday, March 11, 2003 8:11 PM Subject: Fw: MESSAGE TO ALL THE ANTIWAR PROTESTOR'S ----- Original Message ----- From: JT Venda To: jtvenda@bellsouth.net Sent: Tuesday, March 11, 2003 1:13 PM Subject: Fw: MESSAGE TO ALL THE ANTIWAR PROTESTOR'S ----- Original Message ----- From: JT Venda To: jtvenda@bellsouth.net Sent: Tuesday, March 11, 2003 1:02 PM Subject: MESSAGE TO ALL THE ANTIWAR PROTESTOR'S Yes, you have the freedom of rights to express disapproval of the war but might I remind you of how you came about these beloved rights! It was the blood shed of our great country that fought in wars to give you this freedom to stand and speak out. I know of no American people who love war but we have the knowledge and good old common sense to know when it is necessary. May I remind you that this is not Vietnam! The Vietnam war was not a threat to our National security, this one my friends is! There has been more than a threat, our country has already been attacked by evil men. Sadam has been linked to the terrorist groups and some of you are too blind to see this. I remember the day the planes flew into our trade towers. I witness the 2nd plane as it was flying toward the 2nd building, feeling helpless to know there was nothing I could do but watch in horror. I still feel the stab of pain in my heart for the people in those buildings. I had no family or friends in those buildings. Why should I care? Because they are American citizens therefore they are my family. I care and it hurt to sit by and was able to do nothing! All of America could do nothing but watch in disbelief. Well, my friends, TODAY WE CAN DO SOMETHING! We can make sure this never happens again. I am ashamed of the actions that some of our people have taken. It is one thing to express your freedom of speech, and another to explot yourself before all the world in bad mouthing our president for trying to fight this evil and keeping our country safe. You are either against evil or you stand for evil! Sorry, but past history shows it takes the act of war to bring about peace. When you are dealing with a madman, it takes force. Has everyone forgotten Hitler? I guess so, because most of you have forgotten Sept.11th. Are we suppose to wait for this latter day Hitler to follow in the foot steps of the former one? Sadam has slaughtered his own people and the people of surrounding countries. Is presiden Bush suppose to wait until we see the slaughter of millions like Hitler did? It has already been shown what happens when America does nothing! Our embassy in Africa was bombed..We did nothing! The USS Cole was attacked..We did nothing! The world trade towers were bombed in 1994..We did nothing! Finally, on Sept. the 11th, they acomplished what they set out to do the first time. They brought them down. You try to cling to the fact that Sadam and Irag had nothing to do with the attack on America. Keep living in your fantasy world! I knew from the day of the attack that Irag was in behind this. They think of America as the great satan. Do you really believe that anthrax was made in a cave? Are you not aware that Sadam pays $25,000 to the suicide bombers family? Yes, he believes in giving rewards for the murder of innocent people! The word of God says that money is the root of all evil! Well, the money and the clout is speaking out today and they are showing whose side they are on...evil! You either go against this evil or you uphold the evil. To love God is to hate evil! You shut your eyes and turn your head away from all the killings and hope that Sadam will only continue to kill his own. For now you might be sleeping in a safe nation, but you are too blind to know if we DO NOTHING, we will be attacked again. Hitler started killing his own to take over Germany. Then he proceeded forward to the killing of millions of Jews. Who was next on his list? Christians! Who is the most Christian nation in the world? America!! One final word to all you antiwar whiners..right now you might sleep in your warm safe bed in your safe nation..but what kind of world are you leaving your children and your grandchildren and their children? May God help open the blind eyes of the ignorant Hollywood bunch and their follower's! Please pass this message on if you truly love your freedom in our great country called AMERICA!! JT VENDA Tupelo,Ms posted by Gary Williams at 10:37 AM | link | via The New York Times (registration required) I Vant to Be AloneJust when you thought it couldn't get more Strangelovian, it does. The Bush bullies, having driven off all the other kids in the international schoolyard, are now resorting to imaginary friends.posted by Gary Williams at 10:24 AM | link | via The New York Times Glasnost on War's Looted ArtBy SOPHIA KISHKOVSKYposted by Gary Williams at 10:11 AM | link | National Do-Not-Call List Is LawFrom Declan McCullagh's Politech--- Subject: National Do-Not-Call List is law] From: Jason <jaegner@mindspring.com> To: declan@well.org Date: 11 Mar 2003 20:31:59 -0500 Declan, Apparently, it's become law. http://www.cbsnews.com/stories/2003/03/11/politics/main543573.shtml Naturally: "Telemarketers say the registry will devastate their business. The Direct Marketing Association, an industry group, filed a lawsuit against the FTC last month on grounds the registry unlawfully restricts free speech." Someone should remind the Direct Marketing Association that their right to free speech ends at my front door in much the same way that one's right to swing one's fist ends at another person's face. And if this law will "devastate their business", I submit that perhaps they were in the wrong business to begin with. --Jason ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. To subscribe to Politech: http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ Like Politech? Make a donation here: http://www.politechbot.com/donate/ ------------------------------------------------------------------------- Declan McCullagh's photographs are at http://www.mccullagh.org/ ------------------------------------------------------------------------- posted by Gary Williams at 9:53 AM | link | via Lagniappe posted by Gary Williams at 1:24 AM | link | via Loxoscles posted by Gary Williams at 1:05 AM | link |} You got this far, now here's your prize: Tuesday, March 11, 2003 via Seattle Post-Intellegence: P-I Focus: Bush's initiative still in 'high concept' stage "Comforting the afflicted and afflicting the comfortable"Will faith-based groups discover limits on the traditional religious task, once described by Reinhold Niebuhr as "comforting the afflicted and afflicting the comfortable?"posted by Gary Williams at 11:49 PM | link | via Yahoo! News French Fries Get New Name in CongressThe French Embassy in Washington had no immediate comment, except to say that french fries actually come from Belgium. "Freedom fries" is something they'd think is neat in North Carolina, but hey, the quote from the French embassy. Wil Weaton's blog lead me to this -- nobody's safe while the legislature is in session. posted by Gary Williams at 9:19 PM | link | via Boing Boing: A Directory of Wonderful Things posted by Gary Williams at 9:08 PM | link | via William Gibson posted by Gary Williams at 8:57 PM | link | via The Register The chickens of war cluck towards BaghdadBut are the chickens made of the right stuff? Early indications are not encouraging. "The US Army calls the strategy Operation Kuwaiti Field Chicken - or KFC - but the plan has been put on hold after 41 of the 43 chickens deployed to the Gulf died within a week of arrival."posted by Gary Williams at 3:29 PM | link | Leaving for war...From Declan McCullagh's Politech--- Subject: Into the fire From: Ryan Marsh <me@ryanmarsh.com> To: declan@well.com Content-Type: text/plain Organization: Message-Id: <047332653.22368.431.camel@princess-mononoke> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.2.1 Date: 10 Mar 2003 15:44:13 -0600 Content-Transfer-Encoding: 7bit Declan, Tomorrow morning I leave for Army Basic Training. My MOS (Military Occupation Specialty) will be Airborne Infantry. Up until now I've always utilized my Right to Freedom of Speech, I've always been very interested in, and constructively critical of, U.S. domestic and foreign policy. I will no longer be in the position to excercise those rights liberally as a dissenting citizen. I am now an instrument of war. My duty to my country is now to "obey the orders of the President of the United States and the orders of the Officers appointed over me according to the regulations and the Uniform Code of Military Justice." I am no longer in a position to question, that is why I want every Politech reader to take very seriously the freedoms they hold, and the control they exert over the political process. If you send me to war, send me with decisive force. If you oppose the war I am fighting, please do not oppose me. I might oppose the war too, but I am willing to give my life that you might live in freedom. I am joining up with a healthy realization of what is about to take place in the Middle East (and possibly N. Korea), but I have great hope. I heard an author on C-SPAN Book TV once say (and I'm paraphrasing): A hundred years ago the state of relations between states in Europe was war, fifty years ago the world was fighting a genocidal megalomanic, twenty years ago there was still great question as to whether free markets or planned economies would become the economic foundation of Europe. Let's give them [the Middle East] some time. Long before the idea gained popularity in the media, I was preaching the positive impact that institutions of democracy and a western-friendly gov't in Iraq could have on that entire region. The encouragement it would provide to Iran, the de-throning of Saudi Arabia, the positive impact on Syria, Jordan, and others. I have great hope that one day humanity will look upon turmoil in the Middle East with the same respectful nostalgia we have for WWII, and will finally turn it's attention towards Africa. -ryan -- I stopped reading Wired and now William Gibson and Cory Doctorow don't make any sense. http://ryanmarsh.com ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. To subscribe to Politech: http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ Like Politech? Make a donation here: http://www.politechbot.com/donate/ ------------------------------------------------------------------------- Declan McCullagh's photographs are at http://www.mccullagh.org/ ------------------------------------------------------------------------- posted by Gary Williams at 2:35 PM | link | |
![]() |
|
![]() |
![]() |
|
![]() |
![]() |
||||
![]() |