Re: NYT/CyberTimes on CWD article

On  6 Jul 96 at 16:56, eli+@gs160.sp.cs.cmu.edu wrote:

> >http://www.nytimes.com/library/cyber/week/0706patrol-reporters.html
> >              "If we believe the encryption scheme has
> >              been compromised, we will make another
> >              one."
[..]
> They have to give you the list, and they have to give you software
> that uses it, so there's no way to achieve complete secrecy.  I think
> the best they can do is to distribute a list of hashed URLs.

What? After they paid for the rights to use "Infinite Vigniere Key" 
Technology....

I'm surprised that they went so far as to try to encrypt the naughty 
URLs list (but some kids would get off on just reading the list alone 
anyway).

Hashing could be problematic... how to differentiate between a site 
and it's users.  www.pornopix.com is obvious, but the directory tree 
of www.localisp.com/~perv/mypix/ is harder to filter out with hashing 
if subdirectories or specific images are called up, unless the 
software has a way to differentiate between sites and specific users 
or directories on those sites.

(I wonder if the software can tell that ~perv/ and /users/home/perv/ 
or /home/perv/ can be the same directory on some systems? That would 
be an interesting flaw. Has anyone hacked with the software?)

Another problematic with Net-Nurse type software: a database of 
naughty sites and naughty users... a real goldmine for prosecutors.


Rob.
---
No-frills sig.
Befriend my mail filter by sending a message with the subject "send help"
Key-ID: 5D3F2E99 1996/04/22 wlkngowl@unix.asb.com (root@magneto)
        AB1F4831 1993/05/10 Deranged Mutant <wlkngowl@unix.asb.com>
Send a message with the subject "send pgp-key" for a copy of my key.

On Sun, 7 Jul 1996, Deranged Mutant wrote:

> 
> Another problematic with Net-Nurse type software: a database of 
> naughty sites and naughty users... a real goldmine for prosecutors.

My soon-to-be-former colleagues hardly need such software to find naughty 
sites.  Anyway, that takes all the fun out of it!

Brian 

> 
> 
> Rob.
> ---
> No-frills sig.
> Befriend my mail filter by sending a message with the subject "send help"
> Key-ID: 5D3F2E99 1996/04/22 wlkngowl@unix.asb.com (root@magneto)
>         AB1F4831 1993/05/10 Deranged Mutant <wlkngowl@unix.asb.com>
> Send a message with the subject "send pgp-key" for a copy of my key.
> 

Not a lawyer on the Net, although I play one in real life.
**********************************************************
Flame away! I get treated worse in person every day!!

Excerpts from internet.cypherpunks: 7-Jul-96 Re: NYT/CyberTimes on CWD
a.. by "Deranged Mutant"@unix.a 
> (I wonder if the software can tell that ~perv/ and /users/home/perv/ 
> or /home/perv/ can be the same directory on some systems? That would 
> be an interesting flaw. Has anyone hacked with the software?)

The software can't tell. Take webcom.com, where some ~perv directories
are blocked and some /users/perv directories are blocked by CyberPatrol.

-Declan