textfiles/magazines/CUD/cud0449.txt

Computer underground Digest    Wed Oct 7, 1992   Volume 4 : Issue 49

       Editors: Jim Thomas and Gordon Meyer (TK0JUT2@NIU.BITNET)
       Archivist: Brendan Kehoe
       Shadow-Archivist: Dan Carosone
       Copy Editor: Etaion Jhrdleau, Sr.

CONTENTS, #4.49 (Oct 7, 1992)
File 1--Viruses--Facts and Myths
File 2--Defense Conversion Hearing
File 3--FBI Wiretap Scheme Examined
File 4--Intl. Piracy
File 5--SysLaw Announcement
File 6--Cu News: Dept Store Fraud / "MY PC PAL"
File 7--Brazilian Politics in Need of Encryption?
File 8--Police Charge Toronto Teenager in 911 Case

Cu-Digest is a weekly electronic journal/newsletter. Subscriptions are
available at no cost from tk0jut2@mvs.cso.niu.edu. The editors may be
contacted by voice (815-753-6430), fax (815-753-6302) or U.S. mail at:
Jim Thomas, Department of Sociology, NIU, DeKalb, IL 60115.

Issues of CuD can also be found in the Usenet comp.society.cu-digest
news group; on CompuServe in DL0 and DL4 of the IBMBBS SIG, DL1 of
LAWSIG, and DL0 and DL12 of TELECOM; on Genie in the PF*NPC RT
libraries; from America Online in the PC Telecom forum under
"computing newsletters;" on the PC-EXEC BBS at (414) 789-4210; and by
anonymous ftp from ftp.eff.org (192.88.144.4) and ftp.ee.mu.oz.au
Back issues also may be obtained from the mail server at
mailserv@batpad.lgb.ca.us
European distributor: ComNet in Luxembourg BBS (++352) 466893.

COMPUTER UNDERGROUND DIGEST is an open forum dedicated to sharing
information among computerists and to the presentation and debate of
diverse views.  CuD material may  be reprinted for non-profit as long
as the source is cited.  Some authors do copyright their material, and
they should be contacted for reprint permission.  It is assumed that
non-personal mail to the moderators may be reprinted unless otherwise
specified.  Readers are encouraged to submit reasoned articles
relating to computer culture and communication.  Articles are
preferred to short responses.  Please avoid quoting previous posts
unless absolutely necessary.

DISCLAIMER: The views represented herein do not necessarily represent
            the views of the moderators. Digest contributors assume all
            responsibility for ensuring that articles submitted do not
            violate copyright protections.

----------------------------------------------------------------------

Date: 25 Sep 92 00:57:29
From: The Dark Adept <drkadpt@DRKTOWR.CHI.IL.US>
Subject: File 1--Viruses--Facts and Myths

                       Viruses--Facts and Myths
                          by The Dark Adept

This whole virus thing is a joke.  Let me tell you why:

What is a virus?
----------------
A virus is a tiny program that attaches itself to other programs.  It does
in fact operate as a biological virus does.  It finds a victim program and
infects it with a copy of itself.  Then when the victim program is
unsuspectingly run, the virus now inside it is activated.  At this point,
it can do one of two things: infect another program, or cause mischief.

What do viruses do?
-------------------
Well, a number of things.  Some erase your disks.  Others print silly
messages to your screen.  In any case, a virus is not written like other
programs are.  It uses things that other programs normally don't.  If your
computer is infected by a virus, whenever you turn on the machine that
virus is in the memory, and even if all it does is print "I want a cookie,"
it can still interfere with other programs since they don't expect it to
be there.

How do people catch viruses?
----------------------------
Yikes!  Here's where all the rumors are!  You cannot get a virus from a modem,
a printer, a CRT, etc.  Viruses only come from other programs.  So, whenever
you add a program to your hard disk or run one off of a floppy, you stand
a chance of catching a virus.  Data files (files that are not programs, like
text for your wordprocessor) cannot contain viruses.  Only programs can
contain viruses.  On IBM PC's, programs usually end in ".exe" or ".com" and
are the files that you run.  The programs are the only ones that can contain
viruses.

The only way to activate the virus is to run the program.  Say for example
you got a new program called "game.exe".  You put it on your hard drive,
but you never run it (i.e., you never tried it).  Even if game.exe has a virus
in it, you WILL NOT catch it.  The program has to be run at least once to make
the virus active.

Another thing is batch files.  These are files on IBM PC's that end in ".bat".
These DO NOT contain viruses.  However, .bat files run other programs.  So
if the .bat file runs a program that has a virus, the virus WILL be activated.
The cause is NOT the .bat file, but the program that was run BY the .bat
file.

Tell me more about these things...
----------------------------------
Ok.  Viruses can only be made for specific machines.  By this I mean
that a virus that infects IBM PC's will NOT be able to infect Macs.
There may be a tiny tiny chance if your Mac is running something like
an IBM Emulator that a virus may cause problems, but in general, if
you have a non-IBM compatible computer, and you can't run IBM software,
then you can't catch IBM viruses and vice-versa.

For the most part, only personal computers (i.e., IBM PC's and Macs) are
affected by viruses.  On IBM's, they are usually limited to DOS, so if
you are running Unix on a 386 you don't really need to worry (yet).
However, various flaws in NFS security and other technical aspects of
computers mean that viruses could someday appear in other types of
computers.

The reason why personal computers have this problem and others don't is
because of how they are designed.  Personal computers of the past were
designed for one user running only one program.  So, they could use all
the memory since it wouldn't hurt anyone else.  On a mainframe or a Unix
system, the hardware (and software) know that many people will be using
it, so they are only allowed to use the memory given to them, and if
they try and use another section of memory, the computer stops them.  Viruses
need access to memory that they shouldn't have, and on a personal computer,
there is nothing to stop them from getting it.

How do I *avoid* viruses?
-------------------------
That's like asking "how do I avoid VD?"  The answer is "don't stick it in
your slot unless you know where it's been."  If you buy the software from
a computer store, you don't have to worry.  Once in a million there might
be some type of problem, but in general, store purchased software will
NEVER have a virus.

If you copy a program from a buddy, then you might have to think twice.
Where did he get it from?  How many times has it been in someone else's
computer?  The same goes for software you download with a modem.

The only way to complete ensure you never get a virus with 100% certainty
is to allow no outside contact with your computer.  This is called a
"sterile environment" or a "Kosher komputer".  This means that you cannot
use disks in your computer that have been in other computers, and you cannot
put any type of software in your computer that has not been purchased
from a store.  In other words, the only "safe software" is "no software".

If you noticed, computer viruses operate a lot like biological viruses.
In fact, they mostly operate like venereal disease.  So look at viruses
the same way as you would at VD. The only 100% assurance you have against
infection is abstinence (from using outside programs and disks).  If
for some reason you cannot do this, then you must protect yourself.

How do I protect myself?  Is there a "computer condom"?
-------------------------------------------------------
In a nutshell, the answer is NO NO NO!!  Do not believe those
ads for anti-virus this and that.  It's crap.  Like a condom, they
*help* protect against infection, but there are no guarantees.  Whenever
you put something in your (disk) slot, you still run a chance of being
infected - the "condom" may break or be infected itself.

Well, what are the different types of protection available?
-----------------------------------------------------------
There are 3 main types of "anti-virus" software available:

o  Scanners
o  Detectors
o  Removers

+++Scanners+++
--------------
Each virus has what the anti-virus geeks call a "footprint".  What this
means is that there is a sequence of "characters" that uniquely identify
the virus.  For example, say someone gave you a book with no title or
description or whatnot and said, "Can you tell me if this is Hamlet by
Billy Shakespeare?"  Being a virus wizard, you would say "Sure!"  What
you would do is then look at all the text for the words "to be or not to be".
If you found them, then the book would be Hamlet.  This is what virus scanners
do.  They are programmed with an identifying "phrase" or footprint for
all known viruses.  Then they look at each of your programs.  If one
of them contains "to be or not to be" then it means that the Hamlet virus
has infected your program.

Those of you who have drank your coffee this morning might realize that
this doesn't help an awful lot.  For one thing, what if the text isn't
Hamlet but a review of Hamlet that has a sentence "Hamlet's soliloquy which
begins with 'to be or not to be' is the most moving part of the play." Well,
the virus scanner would see "to be or not to be" and think it is a virus!
Of course, it would be wrong.  Another thing is say I write a new virus,
and the anti-virus cronies haven't seen it yet.  Its footprint wouldn't
be in the scanner.  So the scanner wouldn't know it was a virus.

A final problem is that the scanner will only really protect you if it
scans the program *correctly* before you ever run it.  Once you run it,
if you haven't scanned it or the scanner didn't pick anything up, and there
is a virus inside, you're toast.  After you run the program, if you then
run the scanner, sure it will pick it up, but that's like going to the
doctor who tells you that you have the clap after you've got it.  The
scanner is most effective when used before ever running the program.  It
is also useful for giving your system a "check-up" every once in a while
to make sure something didn't slip by.  However, again, now you already
have contracted the virus and now must worry about getting rid of it.

So, if you're going to use a scanner, remember this:
+  You must have a current version so that the new footprints are in there.
+  It works best when you scan programs *BEFORE* they are run for the
   first time.
+  It might miss some or give you false results, so don't rely on it
   completely.

+++Detectors+++
---------------
What the detectors do is watch for virus activity.  For example, some
viruses try and erase your hard disk.  What a detector does is sit in
the background and watches for an illegal or abnormal attempt to do
something to the hard disk.  Then all sorts of alarms and bells go off
("Warning Will Robinson!  Warning!") and the detector tries to stop
the virus from doing it.  Some will also ask you if you want to allow
whatever action is taking place since you might actually be trying to
format your hard disk.

Another thing that some detectors do is a checksum/byte count check on
your files.  Remember that a virus *adds* itself to another program.
So what the detector does is make a list of all the programs on your drive
and remembers what they look like.  Then, when a virus changes one, the
detector notices this, and gives you a warning like "Program games.exe
failed checksum!" and asks you if you still want to run it.

You must know that the detector only checks program files.  It would be a
real pain if every time you changed your term paper the detector went off.
However, this is not a weakness since only program files can contain
the viruses.

It may seem that detectors are the answer, but they are not.  Remember,
the detector only detects virus activity.  This means that you already
have a virus running around in your system.  It will help stop the damage,
but the infection is already there.  Another problem is that you must
remember that the detector is hiding in the background watching.  Some
programs don't expect the detector to be there, and freak out (just like
they don't expect the viruses to be there either).  So the detector might
interfere with other programs.  The better detectors are well-written so
as to avoid this, but even then there might be problems.

So, if you are going to use a detector, remember this:
+  Detectors help stop damage caused by viruses.
+  If it detects virus activity, you are already infected.
+  You must buy a good one so that all types of virus activity are
   detected.
+  The detector may interfere with other programs.


+++Removers+++
--------------
Also called "disinfectors."  What these programs do is get rid of
the virus infection in your computer.  Once you have detected an infection,
you have to get rid of it.  However, like with cancer, that means cutting
something out usually.  Nine times out of ten, a disinfector will have to
delete *ALL* the programs that are infected.  Gone. Erased.  Never to come
back.  Some can get out the virus without deleting files, but this is
rare.  It depends on how good the disinfector is and what type of virus
it is.  The remover is probably the most crucial piece of anti-virus
software.

So, if you are going to use a remover (and you should), remember this;
+  Files (maybe important ones) will be deleted, so you need backup
   copies of your software at all times (you should have this anyhow).

Who makes this and where can I get it?  What do *you* use?
----------------------------------------------------------
There are a lot of companies who make this type of software.  I've tried
a bunch, and my *personal* favorite is made by Central Point Software.

It comes in two types of packages:
+  PC Tools Deluxe
+  Central Point Anti-Virus

PC Tools deluxe has 2 main anti-virus items: PCBackup and VDefend.  What
PCBackup does is backup your hard drive.  You should be doing this anyhow.
What it also does, however, is there is an option to scan as it backs up.
What this means is before it backs up the program, it checks it for
a virus like a scanner would.  This is important.  Say you backup your
disk every month.  Then like 3 weeks later you find that your word
processor and some other programs are infected by a virus.  You disinfect
your disk, and go to install the back up copies.  What if the backups are
infected?  You're back to square one.  PCBackup helps to ensure that your
backups are virus-free.  And, like I said under scanners, you need the
current version.  Well, good news.  The data file where all the footprints
are is updated regularly and can be obtained at no cost (last time I checked)
from Central Point via modem.  So you don't need to buy a new copy of
PC Tools every month, just get the new footprint file.

VDefend is a virus detector with a lot of neat options.  It is also part
of the PC Tools Deluxe package.  PC Tools deluxe is a nice product and
well written and I like it.  If you like Norton's software, that is good,
too, and so are many others.  I just happen to prefer PC Tools.  So, you
get a lot more for your money than virus detection.  Check it out at
your software store.

Now, the mother of all anti-virus software is Central Point Anti-Virus.
This is a killer package.  All you could want and more.  I've used it a
couple of times, but it is more than I need.  Either I'm not paranoid
or I'm too trusting.  However, if you want state-of-the-art TopGrade A-1
anti-virus protection, this is it.  It also has a disinfector built in
and a lot of other goodies.

Now, why do I prefer these packages?  I'll be honest with you.  A lot
of the other anti-virus companies are in it strictly for the money.  The
bigger the virus scare, the more money they make.  Remember the
Michaelangelo virus?  That was a load of crap.  It was a simple virus.
There are a lot more dangerous ones out there, and they are more widespread.
These companies make *only* anti-virus packages, so they need the hype
to survive.  Central Point and a few others are not in the anti-virus
industry per se.  They are regular software companies who also offer
anti-virus software.  Their programming experience is more widespread
than those who concentrate on viruses alone, and this means that their
software should be better in general.  Why?  Well, look at it this way:
Say you want to add an equalizer to your stereo.  Now, do you want the
salesperson to know about stereos in general, or just about equalizers?
Shouldn't he know how equalizers interact with the rest of the system?
A software company that creates various pieces of software will know how
they interact and perform.

Further, an investigation into the history of some of these companies,
like McAfee and Associates, brings up questions about their competence
in this type of work.  I ask you to draw your own conclusions, but as
a hint as to what I am referring, try and see what type of work McAfee
was involved in before viruses.

However, since I took a shot at McAfee, I must also state this: I have
known people to use McAfee's software and be 100% satisfied with no
complaints.  They like McAfee's software and continue to use it. It
works for them and meets their needs.  I hate both McAfee and his software,
and I refuse to use it ever, so you must decide for yourself.

Out of the general software houses, I like Central Point's goods.  So those
are my reasons for why I chose it: 1) It is one of the reputable companies,
and, 2) Out of those reputable companies, this software has what I want.

Some people will say "You are picking on the little guys trying to start out."
Maybe.  I wouldn't if this were a word processor where if something is
screwy in version 1, you can live til version 2.  But this is for your
protection.  Would you rather buy a gun made by Smith and Wesson or
Uncle Bob's Bullet Co.?  When it comes down to protection, you don't
want any misfirings, and you must rely on reputation.

So, if you are going to buy "anti-virus" software, remember this:
+  Well-known, reputable, and experienced companies with good user
   support like Central Point, Norton, etc. are preferred.
+  Out of those companies, pick the one that best suits *your* needs.
   Everyone's system differs.  You might love using Norton's backup
   program, so you just want virus protection and not the full PCTools.
   Etc., etc., etc.  Look at all the software and see what you need and
   want.

Myths
-----
Finally, I would like to expose some myths and misconceptions about
viruses:

"They threaten net connectivity"
--------------------------------
If by "net" you mean the Internet, this is 100% false.  The machines
connected to the net do NOT run programs from other machines, so cannot
be infected by them.  They merely store programs from other machines.  It
would be like if a friend asked you to put that game.exe program on your
disk and hold it for him until he had space on his.  As long as you
don't use it, you won't be injured by just storing it.

Another thing to remember is that most viruses are for personal computers
and most machines on the Internet are NOT personal computers, so the
viruses won't affect them anyhow.

The only role that the Internet plays in virus propagation (the spreading
of viruses) is that if someone gets a program from the Internet for his PC
and runs it he might get infected.  But remember that you could also
get infected by getting a program from a friend.  The Internet, therefore,
is not threatened by nor the cause of virus contamination.

However, if by "net" you mean the LAN at work, then this is true.  A lot
of viruses spread rapidly through LAN networks, so if one machine gets
infected, all of them can.  This is because all the personal computers
on the LAN run the same programs.  Again, the cause here is the running
of the program by computers on the net.  Internet computers generally
do not run the programs that contain viruses.

If some idiot says that their Internet connection should be severed due
to virus propagation, that would be like saying we should shut down Lake
Shore Drive in Chicago since a bank robber might drive down it to get
away.  Sure it provides a path for viruses (bank robbers), but 99% of
the time it is providing a path for legitimate purposes (law abiding
citizens).

"BBS's are the major cause of virus spreading"
----------------------------------------------
FALSE FALSE FALSE!!  The major cause of virus spreading is LAN's and
also copying from friends.  BBS's merely store programs that you can copy
and most people who run BBS's try and make sure none of them have viruses.
A BBS is just copying from a friend over a modem.  BBS's do not need to
be shut down or restricted because of viruses.  It is up to *you* to
protect yourself from *any* program contamination no matter where
you copy the program from (i.e., a friend or BBS).

Some of you may have heard of Virus Exchange BBS's.  Let me explain what
this is:

Any type of program ever written starts out as a "source file".  This is
a regular text file made by a word processor that contains instructions
for a computer.  This source file must be fed into either an "assembler" or
a "compiler" to become a program that can run.  This is true whether the
program is a spreadsheet or a virus (viruses are programs, just very very
tiny ones).

Now the source file can have all of the program in it, or just part.  The
rest would be in other source files.  So, for example, if you look at your
wordprocessor in two parts you might see that one thing it does is let you
type stuff in, and the other part is it lets you print things out.  So
it might have 2 source files: 1) tells the computer how to let you type
things in, and 2) tells the computer how to print things out.

A virus is made up of two basic parts: an infector and a destructor.
The INFECTOR is the part of the program which hides the virus and makes
it spread.  The DESTRUCTOR is the mischief maker.  This is the part
that draws crazy pictures on your screen or erases a file on you.

Now on these virus exchange BBS's, they 99% of the time just have virus
SOURCE FILES not virus programs.  The source files CANNOT cause infection.
They must be fed to an assembler or a compiler first to become a program.
Remember that for a virus to become active it must be run as a program.
These BBS's do not distribute virus programs, but virus source files.

Furthermore, most of the source code for viruses on these BBS's is just
the INFECTOR part.  This is what the programmers are interested in.  This
is where the innovation and creativity and "wow! Nice piece of code!"
happens.  The DESTRUCTOR is very basic and any idiot can do one: "del *.*".
People who run VXB's (Virus eXchange Boards) are interested in code for the
INFECTOR and the DESTRUCTOR is worthless.

In other words, they are merely giving out the blueprints and not the
bomb itself.

Some jerks argue that this in itself should be illegal.  Well, another
article will deal with that, so please hold comments on this
aspect until after I have presented my position.

For right now, let me just say that in a nutshell, Virus Exchange BBS's do
NOT DIRECTLY cause infections.  I think even the so-called "experts" would
agree with that.

"The first virus was written by..."
-----------------------------------
No one knows.  However, if you were to ask me, I will say the first
virus was written by the first person who made copy-protection.  Why?
Having the benefit of looking at both copy-protection and virus source
code, I can tell you that they do things the same way.  The infector
part of the virus wants to hide itself and so does the copy-protection.
They both use the same types of methods to do so.  Both also make programs
unusable if certain conditions are met.  If it is a copy, the copy-protection
stops it from working properly.  If it is an infected program that meets
the criteria for the destructor part of the virus to start, the virus
kicks in the destructor and does its job.

Again, please notice I am comparing the copy-protection with the infector, and
not the word processor with the destructor.  The copy-protection and the
infector only differ in that the infector affects more than one program
and that the actual reason for both being there (the word-processor vs.
the destructor) are different.  They both perform the same job - protection
and sustenance of the main program.

From this idea of small programs that operate to protect a piece of software
known as copy-protection sprang forth the first viruses.  So next time
you buy a piece of copy protected software you know who to thank for
your screwed up harddrive ("wah! but we don't write them!" no, but
you gave them the idea and techniques! Plus, copy protection is for loser
companies that don't give decent support to registered users thereby
creating a huge incentive to register a product.  Enuff said.).

Another important similarity is that the techniques for removing copy
protection from a program and removing a virus from an infected file while
retaining the file are very similar (I've done both a few times).

"We're all doomed!! It's Michaelangelo!!"
-----------------------------------------
Yeah, eat me.  I have been using computers for about 11 years.  I have
been on everything from a Timex Sinclair to a Cray.  I've had things on
my system you wouldn't feed to your dog.  How many times have I been
infected by a virus? ZERO

I deal with over 100 computer-related people per day (I'm a graduate
student in Computer Science).  Here is what contact I've had with virus
infection:

When I was an undergrad at the University of Illinois at Champaign-Urbana
(I started out in Electrical Engineering), the Mac labs got infected by
a virus.  Rumor has it that it was caused by someone using an infected
copy of MacPlaymate (an X-rated video game for Macs) on one of the computers.

Last year, the PC-LAN at Loyola University of Chicago was slightly infected
by Michaelangelo, and one of the professors' PC's caught it because a student
handed in his infected programming assignment (it got infected because he
wrote it on the LAN).  So, everyone who handed in their program got infected
if they reran the program when it was returned.  Like 2 more people got
infected this way.

A friend of mine got infected by using an infected copy of a pirated video
game (serves him right hehehe!).

So, for someone who uses a computer every day and knows mostly computer
people, I have personally know 4 people and 2 sites that were infected
by viruses, and this is over 11 years.

Total damage?  Not much.  Nothing Anti-Virus and equivalent type software
couldn't fix and a quick restore from some backups.

So next time they yell "The sky is falling," tell them to line their
pockets somewhere else.  You should protect yourself, but it's not the
end of the world.

In fact the only time my harddrive got erased on accident was when I was
installing OS/2.  It was my fault for not reading the directions. Oops!

"They endanger National Security and the military!"
---------------------------------------------------
Hahahahahahaha!  All I have to say is that most viruses (like 99.9%)
attack only personal computers, and any military or government that depends
on personal computers for national security and weaponry has more problems
than viruses.  And furthermore, what are they doing letting missile officers
run MacPlaymate on the missile control computer anyhow?

Conclusion
----------
I just hoped I made this virus thing clearer.  This is not based
on any virus "expertise" I have, just a thorough knowledge of
computers and my experience with them (which is extensive).  I am not a
"virus expert" nor am I a virus author. But next time someone tries to
scare you or calls themselves a "virus professional" call them an idiot.
Just use common sense, make backups, and maybe get a piece of software from
a good company.  No one is "out to get you".  Most of the virus authors
are teenagers and are actually nice guys who just like to write intricate
programs -- they don't even spread them around!  PHALCON/SKISM is a good
example.  They don't even want to format a hard drive, just have a little
fun programming.  Once in a while one of their "projects" might get out
of hand, but they're not there to make your life miserable.  Sure I'd be
pissed at em if Flight Simulator got infected, but no biggie.  Just clean
up and reinstall.  Don't blame someone else if you don't make backups.

So have phun, and: "Don't worry; be happy!"

P.S. Sara(h) Gordon: Your rebuttal to Phrack touched me.  Right about...



...there.

NOT!

(thanks Sarlo)

Tiny Bibliography
-----------------
40HEX - the Journal of viruses published by PHALCON/SKISM.  Contains
new viruses by P/S and a lot of source code.  Great reading for
programmers, virus authors, and copy-protection people. I've used some
of their disk access tricks for utilities I've written for my 386
system that bypass the device drivers. They also provide an excellent
and professional analysis of virus code with commented source code
from time to time.  Tells ya how the varmints really tick.  4 stars!
(When's the next issue, guys?!?)

Hell Pit BBS - Of Sara(h) Gordon fame.  If you want to see what a
Virus Exchange BBS is like and why all the screaming, bitching, and whining
that Sara(h) and the other people who call themselves "anti-virus"
people is for nothing, give it a call.  Just don't run anything you download.
Most of it is source code, anyhow.  Some of it is Sara(h) Gordon's source code.
I wonder if ACM would approve of her "research" in virus propagation?
I hope Hell Pit is still up.  Sarah(s) crap caused Kato a lot of trouble
including making people think it was a Fed sting operation (lie).

Various hacker nets - like DarkStar, CyberCrime, etc.  A lot
of virus authors can be contacted on these FidoNet type BBS's.  Most of
them will answer any question about viruses you have unless you get
too specific like "Duh, what did you write?" or too idiotic like
"Viruses are terrible!  Look at what Michaelangelo did!" (not much).

That's just a start, but if you're curious about what viruses really are,
don't ask those "anti-virus" goobers, ask the authors.

------------------------------

Date: Mon, 28 Sep 1992 13:29:05 -0400
From: "(Gary Chapman)" <chapman@SILVER.LCS.MIT.EDU>
Subject: File 2--Defense Conversion Hearing

The Department of Defense has set up a Defense Conversion Commission,
which is traveling around the country to conduct hearings on local
conversion requirements.  So far there have been hearings in Atlanta;
Long Beach, California; St. Louis; Dallas; Groton, Connecticut; and
Seattle.  The public hearings last one day, and the commission also
visits sites of major defense contractors and speaks to the local
press about defense conversion.  The commission is scheduled to
release a report on its findings no later than December 31.

On September 24th, the commission held its hearing in Seattle and
testifying on behalf of CPSR and The 21st Century Project was
Professor Philip Bereano, professor of technology and public policy at
the University of Washington.  Phil spoke for ten minutes -- the
alloted time for each hearing witness -- about The 21st Century
Project and its program of democratizing U.S. technology policy and
redirecting research and development programs to peaceful and
environmentally responsible goals.

There were eighteen other hearing witnesses testifying, representing a
broad range of public interest and business organizations, including
Washington State SANE/Freeze, Seattle Women Act for Peace, and the
Washington Association of Churches.  Professional organizations
represented included the Seattle Professional Engineering Employees
Association and the IEEE Engineering Manpower Committee.  There was
also testimony from the King County Diversification Committee, the
local commission on economic conversion.

There are six members of the commission, most of them Pentagon
officials; there is one representative from the Department of Labor,
and one from the President's Council of Economic Advisers.  It is
chaired by David J. Berteau, Deputy Assistant Secretary of Defense for
Production and Logistics, and former director of the DoD's Office of
Economic Adjustment.  The representative from the Department of Labor
(and the only woman on the panel) is Robin Higgins, Assistant
Secretary of Labor for Veteran's Employment and Training, a former
Marine officer, and widow of Colonel William R. Higgns, the Marine
officer captured and executed by Lebanese terrorists in 1988.

For more information about the commission and its work, contact the
Commission on Defense Conversion, 1825 K Street, N.W., Suite 310,
Washington, D.C. 20006, or call (202) 653-1664.

------------------------------

Date: Wed, 30 Sep 1992 17:05:06 PDT
From: "(Nikki Draper)" <draper@CSLI.STANFORD.EDU>
Subject: File 3--FBI Wiretap Scheme Examined

FOR IMMEDIATE RELEASE
Contact: Nikki Draper  (415) 322-3778

     Computer Public Advocacy Group To Examine FBI Wiretap Scheme
                     at October Annual Meeting.

Palo Alto, Calif., October 1, 1992 -- Computer Professionals for
Social Responsibility (CPSR), the national public interest
organization based here, will take an in-depth look at its recent suit
against the Federal Bureau of Investigation (FBI) during CPSR's 1992
Annual Meeting, October 17th and 18th at Stanford University in Palo
Alto, Calif.  CPSR Legal Counsel, David Sobel, will talk about the FBI
suit for the first time since it was filed and moderate a panel
discussion on the politics of cryptography at the annual meeting.  The
CPSR annual meeting is a provocative two-day conference that addresses
critical issues facing society as a result of information technology.

CPSR filed suit against the FBI in September, after the Bureau failed
to make public documents that would justify the need for its new
wiretap proposal.  The FBI proposal would redesign the telephone
network to make wiretapping easier.  Recognizing the importance of
cryptography policy, CPSR catalyzed a national debate earlier this
year, as to whether or not the FBI and National Security Agency (NSA)
should be involved in setting the technical standards for the computer
and communications industry.

The panel discussion will include a screening and discussion of film
clips from the movie, Sneakers.  Panelists include, Joan Feigenbaum,
Technical Staff, Computing Principles Research, ATT Bell Labs, John
Gilmore, founder of Cygnus Support, and Dave Banisar, CPSR Policy
Analyst.

CPSR's annual meeting will  bring together computer scientists from
across the country to examine the relationship between politics and
technology.  Other topics include:

    *  Teledemocracy & Citizen Participation:
        Beyond the Electronic Town Meeting,

This session is an election year look at the dangers and the
opportunities of electronic democracy.  Speaker, Susan G. Hadden,
professor in the LBJ School of Public Affairs, University of Texas at
Austin, an expert on telecommunications and citizen participation.

    *  Everything's Digital!  Media Convergence: Hope, Hype or Hell?

This session examines the social implications of multimedia
convergence which is the merging of computer, telephone, and video
technology.  Panel discussion with David Bunnell, Editor, New Media,
Denise Caruso, Editor, Digital Media, and Howard Rheingold, Whole
Earth Review

    *  Envisioning Technology Policy in a Democratic Society;

A panel of technologists looks at the development of American
technology policy.  Panelists include, Gary Chapman, The 21st Century
Project, Judy Stern, CPSR/Berkeley, Claire Zvanski, SEIU Local 790.

President of Interval Research, Dave Liddle, will be the keynote
speaker at CPSR's awards banquet Saturday evening.  Liddle will be
speaking on the Computing in the 21st Century.  IBM researcher,
Barbara Simons will be presented with the 1992 Norbert Wiener Award
for Social and Professional Responsibility in Computing.

Founded in 1981, CPSR is a national, non-profit, public interest

------------------------------

Date: 05 Oct 92 19:05:29 EDT
From: Gordon Meyer <72307.1502@COMPUSERVE.COM>
Subject: File 4--Intl. Piracy

Congress Urged to Strengthen International Intellectual Property Laws

 Foreign copyright piracy of computer software, as well as movies,
 books, and music and audio recordings costs U.S. firms between $12
 billion and $15 billion in trade losses each year, says the
 International Intellectual Property Alliance.

 The Alliance told a Senate Judiciary subcommittee on patents,
 copyrights and trademarks that losses in Mexico alone -- which were
 not included in the international study -- topped $150 million
 annually.

 Eric Smith, director of the Alliance, said that although Mexico has
 new intellectual property laws, "the situation in Mexico is still
 quite serious."

 He urged Congress to increase U.S. anti-piracy teams to crack down on
 foreign copying operations and aid to foreign nations to help them
 write tougher laws and enforce them.

 Countries where piracy is particularly prevalent include Italy,
 Taiwan, Eastern Europe, Russia, China, Paraguay, Peru, El Salvador,
 Guatemala and Honduras. Brazil and Venezuela are considered problem
 nations especially for software piracy.

------------------------------

Date: 02 Oct 92 11:13:46 EDT
From: Lance Rose <72230.2044@COMPUSERVE.COM>
Subject: File 5--SysLaw Announcement

           NEW SYSLAW BOOK! MASSIVELY REVISED AND EXPANDED!

 SysLaw, Second Edition: The Legal Guide for Online Service Providers
           by Lance Rose, Esq., and Jonathan Wallace, Esq.

SysLaw provides BBS sysops, network moderators and other online
service providers with basic information on their rights and
responsibilities, in a form that non-lawyers can easily understand.
Subjects covered include the First Amendment, copyrights and
trademarks, the user agreement, negligence, privacy, criminal law,
searches and seizures, viruses and adult materials.  SysLaw not only
explains the laws, it gives detailed advice enabling system operators
to create the desired balance of user services, freedom, and
protection from risk on their systems.

SysLaw is available from PC Information Group, 800-321-8285 or
507-452-2824, and located at 1126 East Broadway, Winona, MN 55987.
You may order by credit card or by mail.  Price is $34.95 plus $3.00
shipping and (if applicable) sales tax.  Price is subject to change
after January 1, 1993.  For additional information, please contact
publisher Brian Blackledge at 800-321-8285.

------------------------------

Date: 03 Oct 92 11:54:38 EDT
From: Gordon Meyer <72307.1502@COMPUSERVE.COM>
Subject: File 6--Cu News: Dept Store Fraud / "MY PC PAL"

 DEPARTMENT STORE COMPUTER FRAUD

 The US Attorney's Office in Sacramento, California has announced an
 indictment against a Fresno department store for using a 'special
 computer program' to alter its financial records. The store,
 Gottschalks, has pled guilty to three criminal counts and has agreed
 to pay 1.5 million dollars in fines for taking illegal tax deductions
 and violating securities exchange laws. The store reportedly
 developed the program to overstate sales, supposedly by nearly half a
 million dollars in one quarter, allowing it to claim a profit when it
 was really operating at a loss. (Information Week, August 3, 1992: 10).

 MY COMPUTER, MY FRIEND.

 Logitech, Inc recently completed a "PC's and People" survey in which
 98% of the 300 computer users surveyed indicated that they feel they
 have personal relationships with their machines. In addition, 13%
 said they ascribe personalities to their machines, while 9% admitted
 that they have named them. At least 50% said they consider their
 computers to be extensions of themselves. (CompuServe Magazine,
 October 1992: 8)

------------------------------

Date: 7 Oct 92 15:24:01
From: Moderators <tk0jut2@mvs.cso.niu.edu>
Subject: File 7--Brazilian Politics in Need of Encryption?

Sometimes those suspected of massive offenses should either learn to
use computers properly or else not commit crimes.  The current
Brazilian political scandals, which threaten to topple President
Fernando Collor de Mello, escalated this week when Brazilian
investigators began exploring the computer files of a man reportedly
at the center of the political corruption, Paulo Cesar ("PC") Farias.
According to an article in England's GUARDIAN WEEKLY (Oct 4, 1992 -
thanks to Bruce Sterling for sending it over), unencrypted data files
may provide considerable information describing the extent of his
involvement in Brazilian corruption.  According to the article:

    Under the filename "Collor", they ((the investigators)) had
    found a list of several of the biggest government ministries,
    beneath each of which were listed in methodical fashion the
    main projects in that ministry, the value of the contracts
    allocated and the commissions charged.

        One of the most interesting entries concerned the Xingo
    hydro-electric power station--the only large development
    project undertaken by the Collor government.

        This project, involving a consortium of large Brazilian
    construction companies, including Mendes Junior and Odebrecht,
    has long aroused suspicion, largely because its costs soared
    $1.5 billion over budget. Now, thanks to PC's meticulous
    accounting, the federal police, working with the tax
    inspectors, believe they will be able to find out where most
    of the extra money went.

        One aspect of the listing remains baffling. At the end of
    each entry PC wrote the name of a star or constellation: the
    Southern Cross, the Great Bear, the Milky Way, Orion.  These
    heavenly bodies, the accountants guess but cannot yet
    demonstrate, are probably codenames for sensitive information
    that PC did not want to entrust to his computer--the names of
    the powerful economic groups paying the commissions.

                            ...........

        Though part of the computer files are damaged, the
    inspectors say they are finding enough evidence to establish
    the size of the corruption network and the president's close
    involvement in it.

Perhaps somebody could send Brazilian crooks a copy of Phil's Pretty
Good Encryption program and the investigators a registered version of
Norton Utilities.

------------------------------

Date: Wed, 7 Oct 92 17:54:07 EDT
From: <Nigel.Allen@LAMBADA.OIT.UNC.EDU>
Subject: File 8--Police Charge Toronto Teenager in 911 Case

Here is a press release that I received from the Metropolitan Toronto
Police. The Toronto Star ran a story (based on the press release) on
its front page today.

                    1992 October 06, 1950 hours
              Teenage Computer Hacker Nabbed by Police

Detectives from the Major Crime Squad at Police Headquarters have
arrested a 15-year-old North York boy and charged him with a number of
computer-related crimes. Investigations have revealed that on some
occasions his pranks paralyzed the Metropolitan Toronto 911 emergency
telephone system.

Last July, a young man called the 911 emergency number from a
location in the west end of Metropolitan Toronto and reported a number
of medical emergencies which caused units from the Metropolitan
Toronto Police, ambulance services and local fire departments to
respond. All of these calls were determined to be false.

On one occasion, he totally monopolized the 911 system and rendered
it inoperable thereby denying citizens access to the 911 lifeline
throughout the Metropolitan Toronto area.

Bell Canada security officers assisted police in their search for the
source of the calls. Acting on a Criminal Code search warrant, police
today entered a North York home, seized a quantity of computers and
arrested a teen-age boy.

He is to appear in Youth Court, 47 Sheppard Avenue East, North York,
Friday, November 6, 1992, charged with theft of telecommunications, 24
counts of mischief and 10 counts of convey false message.

Investigations are continuing.

(end of press release)

Note from NDA: More information may be available from the public affairs
office of the Metropolitan Toronto Police at (416) 324-2222 or from
Detective W. Johnston of the Major Crime Squad at (416) 324-6245.

------------------------------

End of Computer Underground Digest #4.49
************************************