Re: Anonymizing Scam

2001-11-27 Thread Nomen Nescio

John Young writes:
 Criticism of anonymizers and remailers and this list is a healthy
 as criticizing any reputable, and disreputable, private or publice
 means of communication.

 Fending off criticism by saying past performance and reputation
 deserves trust is a hoot and is also a hackneyed reply of someone
 who is concealing betrayal, or to put it more politely, has not
 yet learned how to earn trust continuously rather than bank it
 for unearned profit.

These are good points, but the mystery is why you don't apply them to
yourself.  Why not challenge your own reputation and trustworthiness?
You are no better than Lance Cottrell, are you?  You serve law enforcement
agencies as well as private individuals.  You are in much the same
position as Lance to learn about sensitive browsing habits which would
be of interest to the government.  You are no more deserving of trust
than he or anyone else.

Rather than make accusations about other people, why not eliminate the
middleman and make accusations about yourself?  End your hypocrisy.  Say,
I may be sucking up to law enforcement agencies.  I may be recording
people's browsing habits and supplying them to interested parties,
with appropriate compensation.  I am not deserving of trust, in fact I
may be concealing betrayal.  Nothing I have done in the past should be
interpreted in any way to assume that I will not change in the future
and begin selling out my friends and those who rely on me.

You believe that this is the attitude we should take towards you, don't
you?  Why not come forward and say it.  If you don't think we should
trust you, say so.  If you don't think you deserve our trust, admit it.
You don't need to search out other people's flaws when your own are so
much closer at hand.




Re: Anonymizing Scam

2001-11-26 Thread Anonymous

The following message by Lance Cottrell responding to John Young's
accusations was sent to the cypherpunks list but apparently never
appeared here.



Date: Sat, 24 Nov 2001 00:15:16 -0800
To: R. A. Hettinga [EMAIL PROTECTED],
Digital Bearer Settlement List [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
From: Lance M. Cottrell [EMAIL PROTECTED]
Subject: Re: Anonymizing Scam

Given how widely know my email address is, I am saddened that people 
would post this kind of unsubstantiated rumor without any attempt to 
check on the validity.

Anonymizer has always offered its services to all comers. This has 
always included law enforcement. They have used our services to keep 
an eye on certain websites for many years, without tipping them off 
to the focus of their interests. Seeing fbi.gov in the log files is 
a bit of a giveaway. They have no special access to our systems, and 
no ability to monitor our users.

Describing our policy of open access as sucking up to the TLAs is 
absurd. I would have thought my history in this field would have 
earned me some consideration before jumping to that kind of 
conclusion. Does government and industry have no rights to, or needs 
for, privacy? It seems a hypocritical position for Cypherpunks to 
take.

-Lance Cottrell


At 5:34 PM -0500 11/23/01, R. A. Hettinga wrote:
--- begin forwarded text


Status:  U
Date: Fri, 23 Nov 2001 16:02:10 -0800
To: [EMAIL PROTECTED]
From: John Young [EMAIL PROTECTED]
Subject: Anonymizing Scam
Sender: [EMAIL PROTECTED]

Below are strange statements coming from Lance Cottrell.
Is there no anonymizer that is not sucking up to the TLAs?
Worse, has there ever been?

-


http://www.cnn.com/2001/TECH/internet/11/20/privacy.reut/index.html

One company that is still making money off privacy is
Anonymizer.com, a San Diego-based company that offers
anonymous Web surfing for $50 a year, or $5 a month. The
company has 20,000 active subscribers, said President Lance
Cottrell.

We're still seeing very strong growth, Cottrell said. Most
people are looking to prevent their boss, insurance company,
spouse, ISP (Internet Service Provider) from knowing where
they're going.

Even so, Anonymizer.com began a push six months ago to
market its service to corporations, including law and investigation
firms, and the U.S. government, he said.

Intelligence agencies have been using us for years, especially
since September 11, Cottrell said. They use us to keep an eye
on bad guy sites with covert monitoring.

-

The pattern: initial big deal about helping the public protect its
privacy, then boom, a later revelation it was impossible to
continue ...  well, the reasons vary, but the cover story is always
the need for money, the Judas rationale.

Meanwhile, the fabulous surfing data archive allegedly inviolate, or
never retained, or no way to ever know who was using the
service, that is the data all free-gift marketers aim to collect.

Were any anonymizing archives ever trashed or truly protected
against concurrent snarfing? Is Safeweb laughing like ZKS,
like Lance? First, the US, then EU, then CN, all the way to
MD.

What does this say about commercial anonymizing services,
and remailers? And crypto, especially free PGP, and the honeypot
AES?

--- end forwarded text


--
-
R. A. Hettinga mailto: [EMAIL PROTECTED]
The Internet Bearer Underwriting Corporation http://www.ibuc.com/
44 Farquhar Street, Boston, MA 02131 USA
... however it may deserve respect for its usefulness and antiquity,
[predicting the end of the world] has not been found agreeable to
experience. -- Edward Gibbon, 'Decline and Fall of the Roman Empire'


-- 
Lance M. Cottrell  [EMAIL PROTECTED]
Anonymizer, Inc.   President
Voice: (619) 725-3180 X304 Fax: (619) 725-3188
www.Anonymizer.com




Re: Anonymizing Scam

2001-11-26 Thread Tim May

On Monday, November 26, 2001, at 06:24 PM, Anonymous wrote:

 The following message by Lance Cottrell responding to John Young's
 accusations was sent to the cypherpunks list but apparently never
 appeared here.

 

 Date: Sat, 24 Nov 2001 00:15:16 -0800
 To: R. A. Hettinga [EMAIL PROTECTED],
 Digital Bearer Settlement List [EMAIL PROTECTED], 
 [EMAIL PROTECTED],
 [EMAIL PROTECTED], [EMAIL PROTECTED], 
 [EMAIL PROTECTED]
 From: Lance M. Cottrell [EMAIL PROTECTED]
 Subject: Re: Anonymizing Scam
 Describing our policy of open access as sucking up to the TLAs is
 absurd. I would have thought my history in this field would have
 earned me some consideration before jumping to that kind of
 conclusion. Does government and industry have no rights to, or needs
 for, privacy? It seems a hypocritical position for Cypherpunks to
 take.


It seems a hypocritical position for Cypherpunks to
take.


Assuming that John Young speaks for Cyphepunks is bizarre.


--Tim May
The only purpose for which power can be rightfully exercised over any 
member of a civilized community, against his will, is to prevent harm to 
others. His own good, either physical or moral, is not a sufficient 
warrant. --John Stuart Mill




Re: Anonymizing Scam

2001-11-25 Thread Declan McCullagh

Nomen makes a reasonable point. There is nothing objectionable about
Lance selling anonymizer.com accounts to the Feds (or with a
crypto-company selling crypto-ware to the Feds, not least since
they'll get the software or service one way or another). If you treat
'em the same way you treat any other paying company, and I suspect
that is the case with Lance, John's allegation of sucking up to
espionage and law enforcement agencies is uncalled for.

-Declan



On Fri, Nov 23, 2001 at 11:10:08PM +0100, Nomen Nescio wrote:
 John Young writes:
 
  Below are strange statements coming from Lance Cottrell.
  Is there no anonymizer that is not sucking up to the TLAs?
  Worse, has there ever been?
 
 Are you implying that Lance Cottrell is making anonymous surfing data
 available to security agencies?  That is a strong accusation and if you
 want to make it, you should do so explicitly.  You are calling him a
 liar and a fraud.
 
 Nothing in the article you quote gives you any foundation for such
 a claim.  All it says is that agencies are using Anonymizer to browse
 anonymously, just like its other customers.  Any crypto technology, if
 it is truly useful, can be used by government agencies as well as others.
 
 One might as well accuse you of conspiracy since cryptome often serves
 TLAs:  You fraud!  You are saving people's access patterns to your files
 and making them available to the police!  How dare you!
 
 These accusations are as unfounded as those you made against Lance.
 Those who make such claims should provide evidence and not innuendo.
 
 
 
  http://www.cnn.com/2001/TECH/internet/11/20/privacy.reut/index.html
 
  One company that is still making money off privacy is
  Anonymizer.com, a San Diego-based company that offers
  anonymous Web surfing for $50 a year, or $5 a month. The
  company has 20,000 active subscribers, said President Lance
  Cottrell. 
 
  We're still seeing very strong growth, Cottrell said. Most
  people are looking to prevent their boss, insurance company,
  spouse, ISP (Internet Service Provider) from knowing where
  they're going. 
 
  Even so, Anonymizer.com began a push six months ago to
  market its service to corporations, including law and investigation
  firms, and the U.S. government, he said. 
 
  Intelligence agencies have been using us for years, especially
  since September 11, Cottrell said. They use us to keep an eye
  on bad guy sites with covert monitoring. 
 
  -
 
  The pattern: initial big deal about helping the public protect its
  privacy, then boom, a later revelation it was impossible to
  continue ...  well, the reasons vary, but the cover story is always
  the need for money, the Judas rationale.
 
  Meanwhile, the fabulous surfing data archive allegedly inviolate, or
  never retained, or no way to ever know who was using the
  service, that is the data all free-gift marketers aim to collect.
 
  Were any anonymizing archives ever trashed or truly protected
  against concurrent snarfing? Is Safeweb laughing like ZKS,
  like Lance? First, the US, then EU, then CN, all the way to
  MD.
 
  What does this say about commercial anonymizing services,
  and remailers? And crypto, especially free PGP, and the honeypot
  AES?