From: Christian Siebert on
> wondering when the madness would stop.
>
> It never did.


As I said, the results of keyword monitoring were stunning.


If you look up computer security literature and read up on security incidents,
you'll notice none are more articulate about inside-employee incidents other
than to describe the people as "disgruntled employees".

Wrong.

I'll go over some of the major categories of incidents I encountered.
Keyword monitoring is abstract to most people; these results show
how powerful the technique is.



Here are two from the category:

o People innocently trying to get work done.

This usually happens between the programmer and a third-party vendor.

SISS stands for 'Salomon Information Security Services'.

The configurations and passwords to Salomon's network control devices - the
heart of the network - flew out of our Internet connection to vendor Cisco
in a seemingly unstoppable whirlwind. This was the fourth report in a row.


********** begin excerpt from 'Corruption at Salomon Brothers' **********

*******************************************************************************
*******************************************************************************
*******************************************************************************

SECURITY INCIDENT REPORT, 6/27/96

ROUTER PASSWORDS
BRIDGE AND ROUTER CONFIGURATIONS
NOC SYSTEMS SECURITY
---------------------------------

This is a security incident report regarding the Internet (a public wire)
traffic of Salomon Brothers, which is monitored for security/compliance.

NOTE: THESE INCIDENTS HAVE NOT STOPPED DESPITE REPEATED SISS REPORTS!

This report should be taken as a complaint that insufficient procedures
have been put in place to ensure current and new Salomon personnel are
mad


From: Risto Lankinen on
your lemmings. Keep
beating the Drums so we can march into your ocean of insanity.


"Zero Tolerance" is an extremely dangerous attitude to have regarding crime.

Zero Tolerance by definition means excessive vigilancy.


# "War on Drugs Runs Up Against the 4th Amendment"
# By Tony Mauro, USA Today
#
# J. LeWayne Kelly went to the Austin, Texas, airport two months ago.
#
# But because he's black, dressed casually and wore expensive cowboy boots,
# he soon was surrounded by strangers---police who suspected him of being
# a drug courier.
#
# Mr. Kelly had gone to the airport only TO PICK UP A FRIEND.
#
# He felt numb, agreed to be searched because he didn't want to get beaten.
#
# Kelly tried an experiment. He had a white friend WEAR THE SAME OUTFIT he
# had worn that day and retrace his steps at the airport.
#
# Police gave the friend not even a glance.
#
# His lawyer filed a class-action suit in a Texas state court.
#
# "The Supreme Court has hobbled the Fourth Amendment so much that I
# never even thought about filing in Federal court."


A major foobar in Zero Tolerance mania occurred
when the government seized a ship over a couple joints.

The government had seized the ship from itself.


The Drug War. The Drug War. The Drug War. The Drug War. The Drug War.

Hear it enough times and you believe it is a national securi


From: fortune.bruce on
Administration, we're going to return to what works. We're
# going to replace the President's inattention to dangerous drugs with a
# clear and forceful policy of zero tolerance."
#
# "That's ZERO TOLERANCE."
#
# "ZERO TOLERANCE for drug smugglers. ZERO TOLERANCE for drug pushers.
# ZERO TOLERANCE for drugs in the workplace and drugs in school. And
# ZERO TOLERANCE for illegal drugs, period."
#
# "ZERO! ZERO! ZERO!"
#
# "We will REDOUBLE our efforts to put drug criminals behind bars."
#
# "We will only appoint judges who will throw them in jail."

Thank Gawd he didn't become President.

* July Fourth, 1997, C-SPAN Congressional Television
*
* Mark Klaas, father of 12-year-old Polly Klaas, who was murdered by a
* repeat-offender that was paroled from prison, said in support of prevention
* programs: "Building more prisons to fight crime is like building more
* cemeteries to fight the spread of AIDS. It's a bad quick fix. Police
* chiefs across the country support [me] this 4 to 1. Unfortunately, Congress
* can't act "soft" on crime, and is about to pass a very bad bill on
* juvenile crime."

More bizarre distortions in our social fabric due to Zero Tolerance:

6/10/97 MSNBC: California: a ten-year-old girl who reported a classmate
for having a joint


From: Phil Carmody on
increased costs
to the end-user."


http://www.crypto.com/key_study/report.shtml

The Risks of Key Recovery, Key Escrow,
and Trusted Third-Party Encryption

Hal Abelson[1]
Ross Anderson[2]
Steven M. Bellovin[3]
Josh Benaloh[4]
Matt Blaze[5]
Whitfield Diffie[6]
John Gilmore[7]
Peter G. Neumann[8]
Ronald L. Rivest[9]
Jeffrey I. Schiller[10]
Bruce Schneier[11]

Final Report -- 27 May 1997[12]

Executive Summary

A variety of ``key recovery,'' ``key escrow,'' and ``trusted third-party''
encryption requirements have been suggested in recent years by government
agencies seeking to conduct covert surveillance within the changing environ-
ments brought about by new technologies. This report examines the fundamental
properties of these requirements and attempts to outline the technical risks,
costs, and implications of de


From: quasi on
crypto
* has been available for years worldwide over the Internet and from some
* companies. Terrorists and other criminals already have it.
*
* The genie is out of the bottle.
*
* The only thing the McCain-Kerrey bill does is cripple American companies'
* abilities to compete worldwide."


As FBI director Louis Freeh said: "We are at a crossroads."

Indeed we are.

Netscape has had to ink a deal with a German crypto company.
Sun has arranged a third-party deal in Europe too.
RSA has announced similar plans.

It is estimated the U.S. crypto companies and employees will lose four billion
dollars by the year 2000.


But as you know, there is a larger concern too.

The level of our nakedness before the
government's massive surveillance systems.

* Privacy: Experience, Understanding, Expression
* by Orlo Strunk, Jr., 1982, ISBN 0-8191-2688-8
*
* I make decisions and commitments on the basis of my own inner subjective
* feelings --- not regarding popular opinion or the requirements of social
* role very much. I tend to keep the nature of my personal relationships
* very private --- I don't bring my family life, love life, etc into public
* view.
*
* When I invite othe