"UN wary of US influence on the Internet
7/16/2005 11:06:30 AM, by Ken "Caesar" Fisher
Following on the heels of the US government's announcement that they intend to
retain control over the root DNS system, the UN has released a report which
challenges the US's dominant role in all things Internet. This is nothing new: the
UN has banged on America's door before, but in 2003 the discussion of control was
tabled for 2005. Now the Working Group on Internet Governance has released their
report (PDF), setting the stage for another round in the fight over who best
controls the administration of the 'net. The group has outlined the following core
principles for the future:
The WGIG recognized that any organizational form for the governance
function/oversight function should adhere to the following principles:
-No single Government should have a pre-eminent role in relation to international
Internet governance.
-The organizational form for the governance function will be multilateral,
transparent and democratic, with the full involvement of Governments, the private
sector, civil society and international organizations.
-The organizational form for the governance function will involve all stakeholders
and relevant intergovernmental and international organizations within their
respective roles.
The WGIG proposed four models for governance building upon these principles
(beginning on page 13), which to me seems like a strong sign that there's a relative
lack of insight to the problem at the WGIG. It only speaks to the problems of a UN
solution that, when the UN tries to come up with a plan, they come up with four of
them. In some ways this proves the US government's point that it can act swifter and
more efficiently at this time. But can the US retain control forever? It wouldn't
seem so, but at the moment the UN seems more interested in principles than practice,
and I don't expect practice to change in the near future."
http://tinyurl.com/7lamx
xxxxxxxxxxxxxxxxxxxxxxx
Lisää tietoa USA:n kontrollista tietoverkoissa:
http://www.fas.org/irp/program/process/echelon.htm
*ECHELON is a term associated with a global network of computers that automatically
search through millions of intercepted messages for pre-programmed keywords or fax,
telex and e-mail addresses.* Every word of every message in the frequencies and
channels selected at a station is automatically searched. The processors in the
network are known as the ECHELON Dictionaries. ECHELON connects all these computers
and allows the individual stations to function as distributed elements an integrated
system. An ECHELON station's Dictionary contains not only its parent agency's chosen
keywords, but also lists for each of the other four agencies in the UKUSA system
[NSA, GCHQ, DSD, GCSB and CSE]"
-------------
http://www.heise.de/tp/r4/artikel/6/6929/1.html
"This review by Duncan Campbell, author of the European Parliament's 1999
"Interception Capabilities 2000" report[1] , is intended to help clear up the
confusion, to say what Echelon is (and isn't), where it came from and what it does.
Echelon, or systems like it, will be with us a long time to come."
"Echelon is a system used by the United States National Security Agency (NSA) to
intercept and process international communications passing via communications
satellites. It is one part of a global surveillance systems that is now over 50
years old. Other parts of the same system intercept messages from the Internet, from
undersea cables, from radio transmissions, from secret equipment installed inside
embassies, or use orbiting satellites to monitor signals anywhere on the earth's
surface. The system includes stations run by Britain, Canada, Australia and New
Zealand, in addition to those operated by the United States. Although some
Australian and British stations do the same job as America's Echelon sites, they are
not necessarily called "Echelon" stations. But they all form part of the same
integrated global network using the same equipment and methods to extract
information and intelligence illicitly from millions of messages every day, all over
the world."
xxxxxxxxxxxxxxxxxxxxxxxxx
Ja lisää huolestuttavaa tietoa:
*Microsoft Installs US Spy Agency with Windows*
Research Triangle Park, NC - 31 August 1999 - Between Hotmail hacks and
browser bugs, Microsoft has a dismal track record in computer security.
Most of us accept these minor security flaws and go on with life. But
how is an IT manager to feel when they learn that in every copy of
Windows sold, Microsoft may have installed a 'back door' for the
National Security Agency (NSA - the USA's spy agency) making it orders
of magnitude easier for the US government to access their computers?
*While investigating the security subsystems of WindowsNT4, Cryptonym's
Chief Scientist Andrew Fernandes discovered exactly that - a back door
for the NSA in every copy of Win95/98/NT4 and Windows2000. (nykyään myös XP)*
Building on
the work of Nicko van Someren (NCipher), and Adi Shamir (the 'S' in
'RSA'), Andrew was investigating Microsoft's "CryptoAPI" architecture
for security flaws. Since the CryptoAPI is the fundamental building
block of cryptographic security in Windows, any flaw in it would open
Windows to electronic attack.
Normally, Windows components are stripped of identifying information. If the
computer is calculating "number_of_hours = 24 * numberofdays", the only
thing a human can understand is that the computer is multiplying "a = 24 * b".
Without the symbols "number_of_hours" and "number_of_days", we may have no
idea what 'a' and 'b' stand for, or even that they calculate units of time.
In the CryptoAPI system, it was well known that Windows used special numbers
called "cryptographic public keys" to verify the integrity of a CryptoAPI
component before using that component's services. In other words, programmers
already knew that windows performed the calculation "component_validity =
crypto_verify(23479237498234...,crypto_component)", but no-one knew exactly
what the cryptographic key "23479237498234..." meant semantically.
*Then came WindowsNT4's Service Pack 5. In this service release of software
from Microsoft, the company crucially forgot to remove the symbolic
information identifying the security components. It turns out that there are
really two keys used by Windows; the first belongs to Microsoft, and it allows
them to securely load CryptoAPI services; the second belongs to the NSA. That
means that the NSA can also securely load CryptoAPI services... on your
machine, and without your authorization. *
The result is that it is tremendously easier for the NSA to load unauthorized
security services on all copies of Microsoft Windows, and once these security
services are loaded, *they can effectively compromise your entire operating
system.* *For non-American IT managers relying on WinNT to operate highly secure
data centers, this find is worrying.* "
http://www.geocities.com/~budallen/backdoor.html
------------
http://www.techweb.com/wire/story/TWB19990903S0014
*NSA Builds Security Access Into Windows*
By Duncan Campbell, TechWeb.com
A careless mistake by Microsoft programmers has shown that special access codes for
use by the U.S. National Security Agency (NSA) have been secretly built into all
versions of the Windows operating system.
Computer-security specialists have been aware for two years that unusual features
are contained inside a standard Windows driver used for security and encryption
functions. The driver, called ADVAPI.DLL, enables and controls a range of security
functions including the Microsoft Cryptographic API (MS-CAPI). In particular, it
authenticates modules signed by Microsoft, letting them run without user
intervention.
At last year's Crypto 98 conference, British cryptography specialist Nicko van
Someren said he had disassembled the driver and found it contained two different
keys. One was used by Microsoft to control the cryptographic functions enabled in
Windows, in compliance with U.S. export regulations. But the reason for building in
a second key, or who owned it, remained a mystery.
*Now, a North Carolina security company has come up with conclusive evidence the
second key belongs to the NSA.* Like van Someren, Andrew Fernandes, chief scientist
with Cryptonym of Morrisville, North Carolina, had been probing the presence and
significance of the two keys. Then he checked the latest Service Pack release for
Windows NT4, Service Pack 5. He found *Microsoft's developers had failed to remove
or "strip" the debugging symbols used to test this software before they released
it.* Inside the code were the labels for the two keys. One was called "KEY." The
other was called "NSAKEY."
Fernandes reported his re-discovery of the two CAPI keys, and their secret meaning,
to the "Advances in Cryptology, Crypto'99" conference held in Santa Barbara.
According to those present at the conference, *Windows developers attending the
conference did not deny the "NSA" key was built into their software. But they
refused to talk about what the key did, or why it had been put there without users'
knowledge.*
But according to two witnesses attending the conference, *even Microsoft's top
crypto programmers were stunned to learn that the version of ADVAPI.DLL shipping
with Windows 2000 contains not two, but three keys. Brian LaMachia, head of CAPI
development at Microsoft was "stunned" to learn of these discoveries, by outsiders*
This discovery, by van Someren, was based on advance search methods which test and
report on the "entropy" of programming code.
Within Microsoft, access to Windows source code is said to be highly
compartmentalized, making it easy for modifications to be inserted without the
knowledge of even the respective product managers.
No researchers have yet discovered a programming module which signs itself with the
NSA key. *Researchers are divided about whether it might be intended to let U.S.
government users of Windows run classified cryptosystems on their machines or
whether it is intended to open up anyone's and everyone's Windows computer to
intelligence gathering techniques deployed by the NSA's burgeoning corps of
"information warriors." " *
zzzzzzzzzzzzzzzzzzzzzzzzzzz
Eli lyhyesti ja suomeksi:
1) USA haluaa Internetin kontrolliinsa
2) Echelon niminen järjestelmä tarkkailee Internetin liikennettä (ja ilmeisesti
muutakin sähköistä viestintää). Projektissa mukana useita maita, vetäjänä USA.
(kirjesalaisuus... think not)
3) Jokaisessa Windowsissa 95 OSR2:sta lähtien on ollut USA tiedustelupalveluun
NSA:han liittyvä 'salainen' palikka. Sen tarkoituksesta ei ole tarkempaa tietoa (ei
pidä sekoittaa aikaisempaan urbaaniin legendaan eräästä tiedostosta, jonka nimessä
myös oli kirjaimet NSA)
------
Miksikö tämä sitten risoo, raastaa persettä ja niin edelleen. No esimerkiksi siksi
että WIndows on ainoa käyttis, jolle on riittävän laaja ohjelmatuki pelikäytössä ja
olisin siihen muutenkin tyytyväinen (2000Pro lähtien asiallisen vakaita), mutta
niihin on sitten ollut pakko tunkea mitä sattuu.
XXXXXXXXXXXXXXXXXXXXXXX
*Miksi tuollainen kontrollin mahdollisuus sitten huolestuttaa, sillä "enhän minä
mitään ole tehnyt" *
Lukekaapa alla olevat kommentit. Eräs heistä on G.W. Bushin "takapiru". Valkoisessa
talossa päivä alkaa rukouksella. Bush vanhempi sanoi presidenttinä ollessaan:
"Ateistit, en tiedä mitä he ovat, mutta ainakaan he eivät ole oikeita amerikan
kansalaisia". USA:n armeijassa rivisotilaita on jo sorsittu, mikäli heidän
suhtautumisensa uskontoon on liian passiivinen. Valkoisessa talossa rukousaamuihin
osallistumatta jättäneitä oudoksutaan (asiasta kertoi valkoisessa talossa
työskentelevä juutalainen, joka ei ymmärtänyt, miksi hänen olisi pitänyt osallistua
kristtyjen tilaisuuteen). Pitkän tauon jälkeen USA on alkanut jälleen rikastaa
ydinmateriaalia asekäyttöön.
"Millions of people throughout history have been maimed, tortured, and killed in the
name of religion, but the Christian Inquisition is of particular importance to us
today. The Christian church still exists and could lapse into barbarism, hate, and
intolerance again. Simply read the words of its hate-mongers:
Randall Terry , founder of Operation Rescue:
*I want you to let a wave of hatred wash over you. Yes, hate is good… Our goal is a
Christian Nation.* We have a Biblical duty; we are called by God, to conquer this
country. *We don’t want equal time. We don’t want pluralism. *
Jerry Falwell, founder of the Moral Majority: *Just give me the Supreme Court.*
Ralph Reed, former executive director of the Christian Coalition:
“I do guerrilla warfare. I paint my face and travel at night. You don’t know until
you’re in a body bag. You don’t know till election night.”
*henkilö joka tietääkseni on Bushin taustavaikuttaja* =>
Pat Robertson, GOP presidential candidate, 1988:
*When the Christian majority takes over this country, there will be no more satanic
churches, no more free distribution of pornography, no more abortion on demand, and
no more talk of rights for homosexuals. After the Christian majority takes control,
pluralism will be seen as immoral and evil and the state will not allow anyone to
practice it. *
*Tietenkään maailma ei muutu hetkessä, mutta lisääntyvä kontrollikyky luo riskejä
varsinkin, kun ihmiset ovat rauhallisen, suvaitsevaisuuden kauden aikana tottuneet
luottamaan liikaa esivaltaan.*
Milloin poliisi hakee sinut ei-kristillisten mielipiteiden tai muun erilaisuuden
takia uudelleenkoulutusleirille...
7/16/2005 11:06:30 AM, by Ken "Caesar" Fisher
Following on the heels of the US government's announcement that they intend to
retain control over the root DNS system, the UN has released a report which
challenges the US's dominant role in all things Internet. This is nothing new: the
UN has banged on America's door before, but in 2003 the discussion of control was
tabled for 2005. Now the Working Group on Internet Governance has released their
report (PDF), setting the stage for another round in the fight over who best
controls the administration of the 'net. The group has outlined the following core
principles for the future:
The WGIG recognized that any organizational form for the governance
function/oversight function should adhere to the following principles:
-No single Government should have a pre-eminent role in relation to international
Internet governance.
-The organizational form for the governance function will be multilateral,
transparent and democratic, with the full involvement of Governments, the private
sector, civil society and international organizations.
-The organizational form for the governance function will involve all stakeholders
and relevant intergovernmental and international organizations within their
respective roles.
The WGIG proposed four models for governance building upon these principles
(beginning on page 13), which to me seems like a strong sign that there's a relative
lack of insight to the problem at the WGIG. It only speaks to the problems of a UN
solution that, when the UN tries to come up with a plan, they come up with four of
them. In some ways this proves the US government's point that it can act swifter and
more efficiently at this time. But can the US retain control forever? It wouldn't
seem so, but at the moment the UN seems more interested in principles than practice,
and I don't expect practice to change in the near future."
http://tinyurl.com/7lamx
xxxxxxxxxxxxxxxxxxxxxxx
Lisää tietoa USA:n kontrollista tietoverkoissa:
http://www.fas.org/irp/program/process/echelon.htm
*ECHELON is a term associated with a global network of computers that automatically
search through millions of intercepted messages for pre-programmed keywords or fax,
telex and e-mail addresses.* Every word of every message in the frequencies and
channels selected at a station is automatically searched. The processors in the
network are known as the ECHELON Dictionaries. ECHELON connects all these computers
and allows the individual stations to function as distributed elements an integrated
system. An ECHELON station's Dictionary contains not only its parent agency's chosen
keywords, but also lists for each of the other four agencies in the UKUSA system
[NSA, GCHQ, DSD, GCSB and CSE]"
-------------
http://www.heise.de/tp/r4/artikel/6/6929/1.html
"This review by Duncan Campbell, author of the European Parliament's 1999
"Interception Capabilities 2000" report[1] , is intended to help clear up the
confusion, to say what Echelon is (and isn't), where it came from and what it does.
Echelon, or systems like it, will be with us a long time to come."
"Echelon is a system used by the United States National Security Agency (NSA) to
intercept and process international communications passing via communications
satellites. It is one part of a global surveillance systems that is now over 50
years old. Other parts of the same system intercept messages from the Internet, from
undersea cables, from radio transmissions, from secret equipment installed inside
embassies, or use orbiting satellites to monitor signals anywhere on the earth's
surface. The system includes stations run by Britain, Canada, Australia and New
Zealand, in addition to those operated by the United States. Although some
Australian and British stations do the same job as America's Echelon sites, they are
not necessarily called "Echelon" stations. But they all form part of the same
integrated global network using the same equipment and methods to extract
information and intelligence illicitly from millions of messages every day, all over
the world."
xxxxxxxxxxxxxxxxxxxxxxxxx
Ja lisää huolestuttavaa tietoa:
*Microsoft Installs US Spy Agency with Windows*
Research Triangle Park, NC - 31 August 1999 - Between Hotmail hacks and
browser bugs, Microsoft has a dismal track record in computer security.
Most of us accept these minor security flaws and go on with life. But
how is an IT manager to feel when they learn that in every copy of
Windows sold, Microsoft may have installed a 'back door' for the
National Security Agency (NSA - the USA's spy agency) making it orders
of magnitude easier for the US government to access their computers?
*While investigating the security subsystems of WindowsNT4, Cryptonym's
Chief Scientist Andrew Fernandes discovered exactly that - a back door
for the NSA in every copy of Win95/98/NT4 and Windows2000. (nykyään myös XP)*
Building on
the work of Nicko van Someren (NCipher), and Adi Shamir (the 'S' in
'RSA'), Andrew was investigating Microsoft's "CryptoAPI" architecture
for security flaws. Since the CryptoAPI is the fundamental building
block of cryptographic security in Windows, any flaw in it would open
Windows to electronic attack.
Normally, Windows components are stripped of identifying information. If the
computer is calculating "number_of_hours = 24 * numberofdays", the only
thing a human can understand is that the computer is multiplying "a = 24 * b".
Without the symbols "number_of_hours" and "number_of_days", we may have no
idea what 'a' and 'b' stand for, or even that they calculate units of time.
In the CryptoAPI system, it was well known that Windows used special numbers
called "cryptographic public keys" to verify the integrity of a CryptoAPI
component before using that component's services. In other words, programmers
already knew that windows performed the calculation "component_validity =
crypto_verify(23479237498234...,crypto_component)", but no-one knew exactly
what the cryptographic key "23479237498234..." meant semantically.
*Then came WindowsNT4's Service Pack 5. In this service release of software
from Microsoft, the company crucially forgot to remove the symbolic
information identifying the security components. It turns out that there are
really two keys used by Windows; the first belongs to Microsoft, and it allows
them to securely load CryptoAPI services; the second belongs to the NSA. That
means that the NSA can also securely load CryptoAPI services... on your
machine, and without your authorization. *
The result is that it is tremendously easier for the NSA to load unauthorized
security services on all copies of Microsoft Windows, and once these security
services are loaded, *they can effectively compromise your entire operating
system.* *For non-American IT managers relying on WinNT to operate highly secure
data centers, this find is worrying.* "
http://www.geocities.com/~budallen/backdoor.html
------------
http://www.techweb.com/wire/story/TWB19990903S0014
*NSA Builds Security Access Into Windows*
By Duncan Campbell, TechWeb.com
A careless mistake by Microsoft programmers has shown that special access codes for
use by the U.S. National Security Agency (NSA) have been secretly built into all
versions of the Windows operating system.
Computer-security specialists have been aware for two years that unusual features
are contained inside a standard Windows driver used for security and encryption
functions. The driver, called ADVAPI.DLL, enables and controls a range of security
functions including the Microsoft Cryptographic API (MS-CAPI). In particular, it
authenticates modules signed by Microsoft, letting them run without user
intervention.
At last year's Crypto 98 conference, British cryptography specialist Nicko van
Someren said he had disassembled the driver and found it contained two different
keys. One was used by Microsoft to control the cryptographic functions enabled in
Windows, in compliance with U.S. export regulations. But the reason for building in
a second key, or who owned it, remained a mystery.
*Now, a North Carolina security company has come up with conclusive evidence the
second key belongs to the NSA.* Like van Someren, Andrew Fernandes, chief scientist
with Cryptonym of Morrisville, North Carolina, had been probing the presence and
significance of the two keys. Then he checked the latest Service Pack release for
Windows NT4, Service Pack 5. He found *Microsoft's developers had failed to remove
or "strip" the debugging symbols used to test this software before they released
it.* Inside the code were the labels for the two keys. One was called "KEY." The
other was called "NSAKEY."
Fernandes reported his re-discovery of the two CAPI keys, and their secret meaning,
to the "Advances in Cryptology, Crypto'99" conference held in Santa Barbara.
According to those present at the conference, *Windows developers attending the
conference did not deny the "NSA" key was built into their software. But they
refused to talk about what the key did, or why it had been put there without users'
knowledge.*
But according to two witnesses attending the conference, *even Microsoft's top
crypto programmers were stunned to learn that the version of ADVAPI.DLL shipping
with Windows 2000 contains not two, but three keys. Brian LaMachia, head of CAPI
development at Microsoft was "stunned" to learn of these discoveries, by outsiders*
This discovery, by van Someren, was based on advance search methods which test and
report on the "entropy" of programming code.
Within Microsoft, access to Windows source code is said to be highly
compartmentalized, making it easy for modifications to be inserted without the
knowledge of even the respective product managers.
No researchers have yet discovered a programming module which signs itself with the
NSA key. *Researchers are divided about whether it might be intended to let U.S.
government users of Windows run classified cryptosystems on their machines or
whether it is intended to open up anyone's and everyone's Windows computer to
intelligence gathering techniques deployed by the NSA's burgeoning corps of
"information warriors." " *
zzzzzzzzzzzzzzzzzzzzzzzzzzz
Eli lyhyesti ja suomeksi:
1) USA haluaa Internetin kontrolliinsa
2) Echelon niminen järjestelmä tarkkailee Internetin liikennettä (ja ilmeisesti
muutakin sähköistä viestintää). Projektissa mukana useita maita, vetäjänä USA.
(kirjesalaisuus... think not)
3) Jokaisessa Windowsissa 95 OSR2:sta lähtien on ollut USA tiedustelupalveluun
NSA:han liittyvä 'salainen' palikka. Sen tarkoituksesta ei ole tarkempaa tietoa (ei
pidä sekoittaa aikaisempaan urbaaniin legendaan eräästä tiedostosta, jonka nimessä
myös oli kirjaimet NSA)
------
Miksikö tämä sitten risoo, raastaa persettä ja niin edelleen. No esimerkiksi siksi
että WIndows on ainoa käyttis, jolle on riittävän laaja ohjelmatuki pelikäytössä ja
olisin siihen muutenkin tyytyväinen (2000Pro lähtien asiallisen vakaita), mutta
niihin on sitten ollut pakko tunkea mitä sattuu.
XXXXXXXXXXXXXXXXXXXXXXX
*Miksi tuollainen kontrollin mahdollisuus sitten huolestuttaa, sillä "enhän minä
mitään ole tehnyt" *
Lukekaapa alla olevat kommentit. Eräs heistä on G.W. Bushin "takapiru". Valkoisessa
talossa päivä alkaa rukouksella. Bush vanhempi sanoi presidenttinä ollessaan:
"Ateistit, en tiedä mitä he ovat, mutta ainakaan he eivät ole oikeita amerikan
kansalaisia". USA:n armeijassa rivisotilaita on jo sorsittu, mikäli heidän
suhtautumisensa uskontoon on liian passiivinen. Valkoisessa talossa rukousaamuihin
osallistumatta jättäneitä oudoksutaan (asiasta kertoi valkoisessa talossa
työskentelevä juutalainen, joka ei ymmärtänyt, miksi hänen olisi pitänyt osallistua
kristtyjen tilaisuuteen). Pitkän tauon jälkeen USA on alkanut jälleen rikastaa
ydinmateriaalia asekäyttöön.
"Millions of people throughout history have been maimed, tortured, and killed in the
name of religion, but the Christian Inquisition is of particular importance to us
today. The Christian church still exists and could lapse into barbarism, hate, and
intolerance again. Simply read the words of its hate-mongers:
Randall Terry , founder of Operation Rescue:
*I want you to let a wave of hatred wash over you. Yes, hate is good… Our goal is a
Christian Nation.* We have a Biblical duty; we are called by God, to conquer this
country. *We don’t want equal time. We don’t want pluralism. *
Jerry Falwell, founder of the Moral Majority: *Just give me the Supreme Court.*
Ralph Reed, former executive director of the Christian Coalition:
“I do guerrilla warfare. I paint my face and travel at night. You don’t know until
you’re in a body bag. You don’t know till election night.”
*henkilö joka tietääkseni on Bushin taustavaikuttaja* =>
Pat Robertson, GOP presidential candidate, 1988:
*When the Christian majority takes over this country, there will be no more satanic
churches, no more free distribution of pornography, no more abortion on demand, and
no more talk of rights for homosexuals. After the Christian majority takes control,
pluralism will be seen as immoral and evil and the state will not allow anyone to
practice it. *
*Tietenkään maailma ei muutu hetkessä, mutta lisääntyvä kontrollikyky luo riskejä
varsinkin, kun ihmiset ovat rauhallisen, suvaitsevaisuuden kauden aikana tottuneet
luottamaan liikaa esivaltaan.*
Milloin poliisi hakee sinut ei-kristillisten mielipiteiden tai muun erilaisuuden
takia uudelleenkoulutusleirille...
Vastaukset 1
Vanhimmat
USA:n maailmanlaajuinen Echelon-järjestelmä seuloo tässä maailmassa joka ikisen sähköpostin, puhelun, telefaxin, radioliikenteen, ja siihen ei lupia kysytä miltään hallitukselta. Myös suomalaiset operaatorit ovat yhteistyössä Echelon-järjestelmässä, mitä ei tietenkään ikinä myönnetä.
Suomessa on samaan aikaan käyty oikeutta niitä ja näitä vastaan tietosuojalain rikkomisesta. NAURETTAVAA. Käräjistä tietoisella Echelon-väellä on ollut tosi hauskaa.