Re: Anonymizing Scam
John Young writes: Criticism of anonymizers and remailers and this list is a healthy as criticizing any reputable, and disreputable, private or publice means of communication. Fending off criticism by saying past performance and reputation deserves trust is a hoot and is also a hackneyed reply of someone who is concealing betrayal, or to put it more politely, has not yet learned how to earn trust continuously rather than bank it for unearned profit. These are good points, but the mystery is why you don't apply them to yourself. Why not challenge your own reputation and trustworthiness? You are no better than Lance Cottrell, are you? You serve law enforcement agencies as well as private individuals. You are in much the same position as Lance to learn about sensitive browsing habits which would be of interest to the government. You are no more deserving of trust than he or anyone else. Rather than make accusations about other people, why not eliminate the middleman and make accusations about yourself? End your hypocrisy. Say, I may be sucking up to law enforcement agencies. I may be recording people's browsing habits and supplying them to interested parties, with appropriate compensation. I am not deserving of trust, in fact I may be concealing betrayal. Nothing I have done in the past should be interpreted in any way to assume that I will not change in the future and begin selling out my friends and those who rely on me. You believe that this is the attitude we should take towards you, don't you? Why not come forward and say it. If you don't think we should trust you, say so. If you don't think you deserve our trust, admit it. You don't need to search out other people's flaws when your own are so much closer at hand.
Re: Anonymizing Scam
The following message by Lance Cottrell responding to John Young's accusations was sent to the cypherpunks list but apparently never appeared here. Date: Sat, 24 Nov 2001 00:15:16 -0800 To: R. A. Hettinga [EMAIL PROTECTED], Digital Bearer Settlement List [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] From: Lance M. Cottrell [EMAIL PROTECTED] Subject: Re: Anonymizing Scam Given how widely know my email address is, I am saddened that people would post this kind of unsubstantiated rumor without any attempt to check on the validity. Anonymizer has always offered its services to all comers. This has always included law enforcement. They have used our services to keep an eye on certain websites for many years, without tipping them off to the focus of their interests. Seeing fbi.gov in the log files is a bit of a giveaway. They have no special access to our systems, and no ability to monitor our users. Describing our policy of open access as sucking up to the TLAs is absurd. I would have thought my history in this field would have earned me some consideration before jumping to that kind of conclusion. Does government and industry have no rights to, or needs for, privacy? It seems a hypocritical position for Cypherpunks to take. -Lance Cottrell At 5:34 PM -0500 11/23/01, R. A. Hettinga wrote: --- begin forwarded text Status: U Date: Fri, 23 Nov 2001 16:02:10 -0800 To: [EMAIL PROTECTED] From: John Young [EMAIL PROTECTED] Subject: Anonymizing Scam Sender: [EMAIL PROTECTED] Below are strange statements coming from Lance Cottrell. Is there no anonymizer that is not sucking up to the TLAs? Worse, has there ever been? - http://www.cnn.com/2001/TECH/internet/11/20/privacy.reut/index.html One company that is still making money off privacy is Anonymizer.com, a San Diego-based company that offers anonymous Web surfing for $50 a year, or $5 a month. The company has 20,000 active subscribers, said President Lance Cottrell. We're still seeing very strong growth, Cottrell said. Most people are looking to prevent their boss, insurance company, spouse, ISP (Internet Service Provider) from knowing where they're going. Even so, Anonymizer.com began a push six months ago to market its service to corporations, including law and investigation firms, and the U.S. government, he said. Intelligence agencies have been using us for years, especially since September 11, Cottrell said. They use us to keep an eye on bad guy sites with covert monitoring. - The pattern: initial big deal about helping the public protect its privacy, then boom, a later revelation it was impossible to continue ... well, the reasons vary, but the cover story is always the need for money, the Judas rationale. Meanwhile, the fabulous surfing data archive allegedly inviolate, or never retained, or no way to ever know who was using the service, that is the data all free-gift marketers aim to collect. Were any anonymizing archives ever trashed or truly protected against concurrent snarfing? Is Safeweb laughing like ZKS, like Lance? First, the US, then EU, then CN, all the way to MD. What does this say about commercial anonymizing services, and remailers? And crypto, especially free PGP, and the honeypot AES? --- end forwarded text -- - R. A. Hettinga mailto: [EMAIL PROTECTED] The Internet Bearer Underwriting Corporation http://www.ibuc.com/ 44 Farquhar Street, Boston, MA 02131 USA ... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience. -- Edward Gibbon, 'Decline and Fall of the Roman Empire' -- Lance M. Cottrell [EMAIL PROTECTED] Anonymizer, Inc. President Voice: (619) 725-3180 X304 Fax: (619) 725-3188 www.Anonymizer.com
Re: Anonymizing Scam
On Monday, November 26, 2001, at 06:24 PM, Anonymous wrote: The following message by Lance Cottrell responding to John Young's accusations was sent to the cypherpunks list but apparently never appeared here. Date: Sat, 24 Nov 2001 00:15:16 -0800 To: R. A. Hettinga [EMAIL PROTECTED], Digital Bearer Settlement List [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] From: Lance M. Cottrell [EMAIL PROTECTED] Subject: Re: Anonymizing Scam Describing our policy of open access as sucking up to the TLAs is absurd. I would have thought my history in this field would have earned me some consideration before jumping to that kind of conclusion. Does government and industry have no rights to, or needs for, privacy? It seems a hypocritical position for Cypherpunks to take. It seems a hypocritical position for Cypherpunks to take. Assuming that John Young speaks for Cyphepunks is bizarre. --Tim May The only purpose for which power can be rightfully exercised over any member of a civilized community, against his will, is to prevent harm to others. His own good, either physical or moral, is not a sufficient warrant. --John Stuart Mill
Re: Anonymizing Scam
Nomen makes a reasonable point. There is nothing objectionable about Lance selling anonymizer.com accounts to the Feds (or with a crypto-company selling crypto-ware to the Feds, not least since they'll get the software or service one way or another). If you treat 'em the same way you treat any other paying company, and I suspect that is the case with Lance, John's allegation of sucking up to espionage and law enforcement agencies is uncalled for. -Declan On Fri, Nov 23, 2001 at 11:10:08PM +0100, Nomen Nescio wrote: John Young writes: Below are strange statements coming from Lance Cottrell. Is there no anonymizer that is not sucking up to the TLAs? Worse, has there ever been? Are you implying that Lance Cottrell is making anonymous surfing data available to security agencies? That is a strong accusation and if you want to make it, you should do so explicitly. You are calling him a liar and a fraud. Nothing in the article you quote gives you any foundation for such a claim. All it says is that agencies are using Anonymizer to browse anonymously, just like its other customers. Any crypto technology, if it is truly useful, can be used by government agencies as well as others. One might as well accuse you of conspiracy since cryptome often serves TLAs: You fraud! You are saving people's access patterns to your files and making them available to the police! How dare you! These accusations are as unfounded as those you made against Lance. Those who make such claims should provide evidence and not innuendo. http://www.cnn.com/2001/TECH/internet/11/20/privacy.reut/index.html One company that is still making money off privacy is Anonymizer.com, a San Diego-based company that offers anonymous Web surfing for $50 a year, or $5 a month. The company has 20,000 active subscribers, said President Lance Cottrell. We're still seeing very strong growth, Cottrell said. Most people are looking to prevent their boss, insurance company, spouse, ISP (Internet Service Provider) from knowing where they're going. Even so, Anonymizer.com began a push six months ago to market its service to corporations, including law and investigation firms, and the U.S. government, he said. Intelligence agencies have been using us for years, especially since September 11, Cottrell said. They use us to keep an eye on bad guy sites with covert monitoring. - The pattern: initial big deal about helping the public protect its privacy, then boom, a later revelation it was impossible to continue ... well, the reasons vary, but the cover story is always the need for money, the Judas rationale. Meanwhile, the fabulous surfing data archive allegedly inviolate, or never retained, or no way to ever know who was using the service, that is the data all free-gift marketers aim to collect. Were any anonymizing archives ever trashed or truly protected against concurrent snarfing? Is Safeweb laughing like ZKS, like Lance? First, the US, then EU, then CN, all the way to MD. What does this say about commercial anonymizing services, and remailers? And crypto, especially free PGP, and the honeypot AES?