Re: Rescheduled: P2P file sharing national security and personalsecurity risks

2003-06-16 Thread Sean Donelan

On Mon, 16 Jun 2003, Peter Galbavy wrote:
> By trying to get around this and requiring soft targets, such as
> under-represented (OK - under-lobbied to be accurate) industry segments like
> ISPs, to do this work 'unpaid' is a way of making the politicians look
> competent and make any self-policed industry look bad when something is
> missed or goes wrong.

Except this is not "self-policing."  ISPs are not being asked to police
what ISPs do.  For the most part ISPs don't attack their customer's (or
anyone else's) computers.  Remember, the traffic generally flows THROUGH
the ISP's network, it doesn't come FROM the ISP.

ISPs are being asked to control what their customers can do.

Yet another analogy, its a bit like asking grocery stores to "self-police"
their customer's eating habits.  Should grocery stores be responsible that
the public only buys healthy food or holding the grocery store liable for
the hospital bills when customers buy junk food. ISPs generally exert
even less control over their customers than a grocery store, and don't
have double coupons.

Most ISPs don't police (or self-police) their customers' use of the
Internet.  Like a grocery store, if a customer is harassing other
customers, the grocery store may ask them not to come back.  But
generally the customer just moves on to another grocery store.  Its
up to the police to arrest people engaged in criminal activity.





RE: Rescheduled: P2P file sharing national security and personalsecurity risks

2003-06-14 Thread Charles Sprickman

On Sat, 14 Jun 2003, McBurnett, Jim wrote:

> Do we take the bad with the good? do we allow P2P when it can create
> security issues?

Who cares about P2P?  Hasn't malware like Outlook Express been responsible
for far more information leakage than P2P software?  I'll run Acquisition
on my machine long before I'd even think of touching Outlook.

The *only* reason this is being looked at as a security measure is because
the RIAA and MPAA have convinced everyone that P2P = Anarchy, and Anarchy
leads to planes flying into buildings.

A rational person could come up with a much better reason to investigate
whether MS should be allowed to be used at the Pentagon, the CIA, and in
the battlefield instead of wasting time chasing the Napster ghost.

Charles

> I've said enuf.
> J
>
>
>
> From: Stephen J. Wilcox
> Hmm where do you draw the line.. peer2peer file sharing, MS Networking, SMTP,
> telephones, snail mail, visiting foreign countries, meeting people at all.. ?
>
> Seems a bit silly to me to be having the conversation at all, its people who
> willingly leak this information not the mechanism used thats at fault
>
> Steve
>
>
> On Fri, 13 Jun 2003, Richard Irving wrote:
>
> >   After all, how many meetings are there going to
> > be assessing the risk SMTP has on National Security ?
> >
> >   Or, as you mentioned, MS file sharing...
> >
> >   And, remember, SMTP is -already- proven guilty of said Risk,
> > and a far more -probable- culprit in future compromises... !
> >
> > Reality Check.
> >
> > My .02c
> >
> > .Richard.
> >
> >My, what interesting times we live in,
> >   and darn it, important people noticed me! :{
> >
> > Sean Donelan wrote:
> > >
> > > June 10, 2003
> > >
> > > NOTICE OF RESCHEDULED FULL COMMITTEE HEARING
> > > The Senate Committee on the Judiciary scheduled for Wednesday, June 11,
> > > 2003, at 2:00 p.m., on .The Dark Side of a Bright Idea: Could Personal
> > > and National Security Risks Compromise the Potential of P2P File-Sharing
> > > Networks?. has been rescheduled for Tuesday, June 17, 2003 at 2:00 p.m.
> > > in Room 226 of the Senate Dirksen Building.
> > >
> > > By order of the Chairman
> > >
> > >
> > >
> > >
> > >
> > > I wonder if anyone is going to mention that Microsoft Network Neighborhood
> > > file sharing is a form of P2P file sharing.
> >
> >
> >
>
>


Re: Rescheduled: P2P file sharing national security and personalsecurity risks

2003-06-14 Thread Stephen J. Wilcox


Hmm where do you draw the line.. peer2peer file sharing, MS Networking, SMTP, 
telephones, snail mail, visiting foreign countries, meeting people at all.. ?

Seems a bit silly to me to be having the conversation at all, its people who 
willingly leak this information not the mechanism used thats at fault

Steve


On Fri, 13 Jun 2003, Richard Irving wrote:

>   After all, how many meetings are there going to
> be assessing the risk SMTP has on National Security ?
> 
>   Or, as you mentioned, MS file sharing...
> 
>   And, remember, SMTP is -already- proven guilty of said Risk,
> and a far more -probable- culprit in future compromises... !
> 
> Reality Check.
> 
> My .02c
> 
> .Richard.
> 
>My, what interesting times we live in,
>   and darn it, important people noticed me! :{
> 
> Sean Donelan wrote:
> > 
> > June 10, 2003
> > 
> > NOTICE OF RESCHEDULED FULL COMMITTEE HEARING
> > The Senate Committee on the Judiciary scheduled for Wednesday, June 11,
> > 2003, at 2:00 p.m., on .The Dark Side of a Bright Idea: Could Personal
> > and National Security Risks Compromise the Potential of P2P File-Sharing
> > Networks?. has been rescheduled for Tuesday, June 17, 2003 at 2:00 p.m.
> > in Room 226 of the Senate Dirksen Building.
> > 
> > By order of the Chairman
> > 
> > 
> > 
> > 
> > 
> > I wonder if anyone is going to mention that Microsoft Network Neighborhood
> > file sharing is a form of P2P file sharing.
> 
> 
> 



Re: Rescheduled: P2P file sharing national security and personalsecurity risks

2003-06-13 Thread Eric A. Hall


on 6/13/2003 1:19 PM Richard Irving wrote:

> But, for this to make it to the NS Risk Assessment groups just
> demonstrates the licentious influence between the Current
> Administration Policies and "Money Men".

Uhh, this is a senate committee, not an administrative effort. And folks
like Berman (the RIAA vigilante bill) and Feinstein (the MPAA) are
Democrats. And you misused "licentious".

http://news.com.com/2100-1023-954591.html shows that this kind of effort
has been going for a while.

-- 
Eric A. Hallhttp://www.ehsco.com/
Internet Core Protocols  http://www.oreilly.com/catalog/coreprot/



Re: Rescheduled: P2P file sharing national security and personalsecurity risks

2003-06-13 Thread sgorman1


Not sure what is scarier the money to influence government or the money spent on 
litigation.  The latest tactic is using a legal bit called self help.  Usually self 
help is used if someone steals your car and you find it in their driveway, you can 
trespass on their property to retrieve your property.   

The RIAA version of this is they can hack into p2p systems and spike files, tamper 
with search results, and generally wreak havoc on anything that has a copyrighted file 
on it.  Even scarier I was listening to a panel of lawyers who all thought this was a 
great idea.  

It did not seem to bother them at all that these actions would/could wreck the system 
for all the legitmate users or that the burden of proving that legit systems had been 
hacked/screwed would be on the system owner and not the RIAA.  Maybe we should set up 
tire shredders on the interstate and then check all the wrecked cars to see if they 
were stolen or carrying drugs.


- Original Message -
From: Richard Irving <[EMAIL PROTECTED]>
Date: Friday, June 13, 2003 2:19 pm
Subject: Re: Rescheduled: P2P file sharing national security and personal security 
risks

> 
> IMHO:
> 
>  No more, or less, than SMTP.
> 
>  It is -that- simple.
> 
> (Of course, SMTP is how China got
>   Nuclear Secrets out of America :( )
> 
> FWIW: This is more tempestuous reactions at High Levels,
> that would normally have been laughed off.
> 
> Except P2P's are annoying the Recording Industry execs,
>  and they have $$$ on the line, so.
> 
>  $$$ has a way a bringing things to light that would
> otherwise simply have been ignored
> 
>  But, for this to make it to the NS Risk Assessment groups just
> demonstrates the licentious influence between the Current
> Administration Policies and "Money Men".
> 
>  After all, how many meetings are there going to
> be assessing the risk SMTP has on National Security ?
> 
>  Or, as you mentioned, MS file sharing...
> 
>  And, remember, SMTP is -already- proven guilty of said Risk,
> and a far more -probable- culprit in future compromises... !
> 
> Reality Check.
> 
> My .02c
> 
> .Richard.
> 
>   My, what interesting times we live in,
>  and darn it, important people noticed me! :{
> 
> Sean Donelan wrote:
> > 
> > June 10, 2003
> > 
> > NOTICE OF RESCHEDULED FULL COMMITTEE HEARING
> > The Senate Committee on the Judiciary scheduled for Wednesday, 
> June 11,
> > 2003, at 2:00 p.m., on .The Dark Side of a Bright Idea: Could 
> Personal> and National Security Risks Compromise the Potential of 
> P2P File-Sharing
> > Networks?. has been rescheduled for Tuesday, June 17, 2003 at 
> 2:00 p.m.
> > in Room 226 of the Senate Dirksen Building.
> > 
> > By order of the Chairman
> > 
> > 
> > 
> > 
> > 
> > I wonder if anyone is going to mention that Microsoft Network 
> Neighborhood> file sharing is a form of P2P file sharing.
> 
> 
> 
> 



Re: Rescheduled: P2P file sharing national security and personalsecurity risks

2003-06-13 Thread Richard Irving
IMHO:

 No more, or less, than SMTP.

 It is -that- simple.

(Of course, SMTP is how China got
  Nuclear Secrets out of America :( )
FWIW: This is more tempestuous reactions at High Levels,
that would normally have been laughed off.
Except P2P's are annoying the Recording Industry execs,
 and they have $$$ on the line, so.
 $$$ has a way a bringing things to light that would
otherwise simply have been ignored
 But, for this to make it to the NS Risk Assessment groups just
demonstrates the licentious influence between the Current
Administration Policies and "Money Men".
 After all, how many meetings are there going to
be assessing the risk SMTP has on National Security ?
 Or, as you mentioned, MS file sharing...

 And, remember, SMTP is -already- proven guilty of said Risk,
and a far more -probable- culprit in future compromises... !
Reality Check.

My .02c

.Richard.

  My, what interesting times we live in,
 and darn it, important people noticed me! :{
Sean Donelan wrote:
June 10, 2003

NOTICE OF RESCHEDULED FULL COMMITTEE HEARING
The Senate Committee on the Judiciary scheduled for Wednesday, June 11,
2003, at 2:00 p.m., on .The Dark Side of a Bright Idea: Could Personal
and National Security Risks Compromise the Potential of P2P File-Sharing
Networks?. has been rescheduled for Tuesday, June 17, 2003 at 2:00 p.m.
in Room 226 of the Senate Dirksen Building.
By order of the Chairman





I wonder if anyone is going to mention that Microsoft Network Neighborhood
file sharing is a form of P2P file sharing.