From: The Butler / Ripco BBS
Subject: An Introduction to the Computer Underground
Date: February 26, 1991
*******************************************************************************
* *
* An Introduction to the Computer Underground *
* *
* Brought to you by, *
* *
* The Butler... *
* *
* 2/26/91 *
*******************************************************************************
The Computer Underground consists of mainly two forms of media, printed
and electronic, both will be discussed in this file. I use the word
underground because some of the contents of this file are not the types of
titles you would run across at your local bookstore or newsstand. The kind of
information that makes up underground publications is mainly technical in
nature, but, definitely not limited to that. One can also find tidbits about
off-the-wall political views, drugs, weapons, and other topics that are not
normally in the mainstream of our society.
The Computer Underground...
Com-put-er Un-der-ground \kem-`pyt-er\ \`en-der-`grand\ (1970's)
A group organized in secrecy, hidden behind aliases, to promote the free
exchange of information regarding anything and everything including but
not limited to Computers, Telephones, Radios, Chemicals, and ideas.
The CU is made up of men and women all over the globe and of all ages. Most
of those involved in the CU consider it a hobby, but, there are those that
are involved strictly for illegal purposes, i.e. Selling Pirated Software. I,
like most people involved enjoy the information that can be obtained through
all of the different avenues in the CU, i.e. Bulletin Boards, Underground
Periodicals, Network Digests, and General Discussions between members.
The most common way members communicate is through Bulletin Boards. If you are
reading this you know what a BBS is because this will not be released in
printed form. There are thousands of BBSes around the world run by people for
many reasons including: legitimate businesses, Software Technical Support,
Hobby related, Pirated Software, Message Centers, etc...Some of the more common
ones are RIPCO, Face-2-Face, Exec-PC, The Well, etc...
Currently there are many regular electronic magazines that are being published
and there have been many that have discontinued for one reason or another.
Some current ones include: PHRACK, NIA, PHANTASY, CUD, etc...Some discontinued
ones include: PIRATE, PHUN, NARC, etc...
There is a current debate about whether or not an electronic media has the same
constitutional rights as the printed one. That is for our congressmen to
decide, but you could voice your opinion. I personally can't see the differ-
-ence. Now, don't get me wrong I do not support the publishing of Long-
distance codes or anything of that nature, but, I do support the exchange of
other information, i.e. how to unprotect a game, how to make a smoke bomb,
etc...
There are also "Underground Publications" like TAP, 2600, Cybertek, etc.
These magazines are published in hard copy and deal with every considerable
topic regarding the CU. Most of these magazines publish completely legal
information that is obtained from public sources and is available to anyone
and everyone.
I doubt that any of the following sources of information would mind if you use
an alias to order any of their material, so I would recommend that you do
just in case! You might even want to get yourself a private mail box for all
of this "underground" information. I would also advise you to use a money
order when purchasing anything also. They usually cost an extra 50 cents at
the post office. Don't worry about using money orders with these people because
I have personally made purchases from many of them without trouble.
The following information is provided to enable you to become more familiar
with the CU and unusual information in general. Have fun and try not to
get yourself in trouble.
Now for the meat of this Article!!!!
E L E C T R O N I C M A G A Z I N E S
PHRACK Predecessor to Phrack Classic
Author: Knight Lightning & Taran King
Network Address:c483307@umcvmb.missouri.edu
Other Address:
BBS: None
Last Issue: Phrack #30
PHRACK CLASSIC
Author: Doc Holiday, Crimson Death & Various Contributors
Network Address: pc@well.uucp or cdeath@stormking.com
Other Address:
BBS: None
Last Issue: Phrack Classic #32 11/90
LOD Legion Of Doom Technical Journals
Author: Eric Bloodaxe, Lex Luthor, Prime Suspect, Phase Jitter,
Professor Phalken, Skinny Puppy.
Network Address: None
Other Address:
BBS:
Last Issue: LOD Tech Journal #4 May 20, 1990
PHUN Phreakers/Hackers Underground Network
Author: Red Knight
Network Address: N/A
Other Address:
BBS:
Last Issue: P/HUN #5 05/07/90
ATI Activist Times, Incorporated
Author: Ground Zero
Network Address: gzero@tronsbox.xei.com
Other Address: ATI P.O. Box 2501 Bloomfield, NJ 07003
BBS:
Last Issue: ATI #53 12/05/90
NIA Network Information Access
Author: Guardian Of Time & Judge Dredd
Network Address: elisem@nuchat.sccsi.com
Other Address:
BBS:
Last Issue: NIA #70 02/91
PHANTASY
Author: The Mercenary
Network Address: None
Other Address: The I.I.R.G. 862 Farmington Ave, Suite-306,
Bristol, Ct 06010
BBS: Rune Stone 203-485-0088
Last Issue: Phantasy V1N4 1/20/91
PIRATE
Author: Various Authors
Network Address: N/A
Other Address:
BBS: N/A
Last Issue: V1 #5 April 1990
ANE Anarchy 'N' Explosives
Author: Various Authors
Network Address: N/A
Other Address:
BBS: N/A
Last Issue: #7 06/16/89
NARC Nuclear Phreakers/Hackers/Carders
Author: The Oxidizer
Network Address: N/A
Other Address:
BBS:
Last Issue: NARC #7 Fall 1989
SYNDICATE REPORTS
Author: The Sensei
Network Address:
Other Address:
BBS:
Last Issue:
This is not an attempt to list all of the known magazines but just some of the
more popular ones. If I left a particular one out that you feel should of been
included I apologize.
All of the above magazines can be found in the CUD archives and at many of the
Bulletin Board Systems listed at the end of this file.
P R I N T E D M A G A Z I N E S
Author: Emmanuel Goldstein
Network Address: 2600@well.sf.ca.us
Other Address: 2600 Magazine, P.O. Box 752, Middle Island, NY 11953
2600 Magazine is published quarterly, 48 pages per issue.
Subscriptions are $18 U.S. for a year in the U.S. and Canada,
$30 overseas. Corporate subscriptions are $45 and $65 respectively.
Back issues are available for $25 per year, $30 per year overseas
and they go back to 1984.
Phone 516-751-2600
Fax 516-751-2608
TAP/YIPL Formerly YIPL "Youth International Party Line"
Now TAP "Technical Assistance Party"
TAP Magazine
P.O. Box 20264
Louisville, KY 40250
Most all issues will cost $1.00 for US Citizens and $2.00
for overseas. Terms are CASH, postal money order,
or regular money order with the payee left blank.
BBS: 502-499-8933
Cybertek Magazine
Published by OCL/Magnitude
P.O. Box 64
Brewster NY 10509
$2.50 for sample issue
$15 year for 6 issues
Mondo 2000 (Formerly Reality Hackers Magazine / High Frontiers)
P.O. Box 10171
Berkley, CA 94709-5171
Phone 415-845-9018
Fax 415-649-9630
$24 for five issues
Frank Zappa subscribes to Mondo 2000!!!
Fact Sheet Five
6 Arizona Ave
Rensselaer, NY 12144-4502
$3.50 for a sample issue.
$33 a year for 8 issues
Phone 518-479-3707
Fact Sheet Five reviews any independent news media, i.e. 2600, TAP,
Books, Music, Software, etc.
Full Disclosure by Glen Roberts
P.O. Box 903-C
Libertyville, Illinois 60048
Free sample issue
$18 for 12 issues
Deals with Privacy, electronic surveillance and related topics.
Anvil
P.O. Box 640383f
El Paso, TX 79904
Computer Security Digest
150 N. Main Street
Plymouth, MI 48170
Phone 313-459-8787
Fax 313-459-2720
$125 U.S. per year.
Overseas $155 U.S. per year.
HAC-TIC Dutch Hacking Magazine
Network Address: ropg@ooc.uva.nl
Other Address: Hack-Tic P.O. Box 22953 1100 DL Amsterdam
Phone: +31 20 6001480
Privacy Journal
P.O. Box 15300
Washington D.C. 20003
Phone 202-547-2865
Monitoring Times
140 Dog Branch Road
Brasstown, North Carolina 28902
B O O K S
Anarchist Cookbook???
Poor Man's James Bond by Kurt Saxon
Big Secrets by William Poundstone
Bigger Secrets by William Poundstone
How to get anything on anybody by Lee Lapin
Signal--Communication Tools for the Information Age A Whole Earth Catalog
(Highly Recommended!!!)
Neuromancer by William Gibson
Out of The Inner Circle by Bill Laundreth
Hackers by Steven Levy
The Cookoo's Egg by Clifford Stoll
The Shockwave Rider
Information for sale by John H. Everett
Hackers Handbook III by Hugo Cornwall
Datatheft by Hugo Cornwall
The International Handbook on Computer Crime by U. Sieber
Fighting Computer Crime by D. Parker
Foiling the System Breakers by J. Lobel
Privacy in America by D. Linowes
Spectacular Computer Crimes by Buck BloomBecker
Steal This Book by Abbie Hoffman
M I S C E L L A N E O U S C A T A L O G S
Loompanics LTD
P.O. Box 1197
Port Townsend, WA 98368
Paladin Press
????
Consumertronics
2011 Crescent DR.
P.O. Drawer 537
Alamogordo, NM 88310
Phone 505-434-0234
Fax 500-434-0234(Orders Only)
Consumertronics sells manuals on many different hacking/phreaking related
topics, i.e. "Voice Mail Box Hacking", "Computer Phreaking", etc.
Eden Press Privacy Catalog
11623 Slater "E"
P.O. Box 8410
Fountain Valley, CA 92728
Phone 1-800-338-8484 24hrs, 7 days a week.
Here is the opening paragraph from their catalog:
Welcome to the Privacy Catalog, Over 300 publications explore every aspect of
privacy in ways that are not only unique, but also provocative. Some books may
seem "controversial", but that results only from the fact that people can enjoy
many different views of the same subject. We endeavor to offer views that will
prove both helpful and thoughtful in the many areas where privacy may be a
concern.
Criminal Research Products
206-218 East Hector Street
Conshocken,PA 19428
Investigative equipment and electronic surveillance items.
Ross Engineering Associates
68 Vestry Street
New York,NY 10013
Surveillance items
Edmund Scientific CO.
101 E. Gloucester Pike
Barrington, NJ 08007
Catalog of gadgets and devices including items which are useful to the
surveillance craft.
Diptronics
P.O. BOX 80
Lake Hiawatha, NJ 07034
Microwave TV Systems
Catalog costs $3
Garrison
P.O. BOX 128
Kew Gardens, NY 11415
Locksmithing tools and electronic security gadgets.
Catalog costs $2.
Bnf Enterprises
P.O. BOX 3357
Peabody, MA 01960
General electronics supplier.
Mouser Electronics
11433 Woodside avenue
Santee, CA 92071
Sells most electronic components parts and equipment.
Benchmark Knives
P.O. BOX 998
Gastonia, NC 28052
Call for a free catalog. (704-449-2222).
Excalibur Enterprises
P.O. BOX 266
Emmans, PA 18049
Night vision devices.
Catalog costs $5
DECO INDUSTRIES
BOX 607
Bedford Hills, NY 10157
Sells mimiture Electronic Kits
Matthews Cutlery
38450-A N. Druid Hills RD.
Decatur, GA 30033
Their catalog contains over 1000 knives and costs $1.50.
U.S. Cavalry Store
1375 N. Wilson Road
Radcliff, KY 40160
Military & paramilitary clothing & gear.
Catalog costs $3.
The Intelligence Group
1324 West Waters Avenue
Lighthouse Point, FL 33064
Sells video equipment used for investigative purposes.
Columbia Pacific University
1415 Third Street
San Rafael, CA 94901
Bachelors, Masters, and Doctorate degrees
Video & Satellite Marketeer
P.O. BOX 21026
Columbus, OH 43221
Newsletter containing video, vcr, satellite dishes, etc.
Santa Fe Distributors
14400 W. 97'TH Terrace
Lenexa, KS 66215
Radar detectors and microwave tv systems.
(913-492-8288)
Alumni Arts
BOX 553
Grant's Pass, OR 97526
Reproductions of college diplomas.
Catalog costs $3
Merrell Scientific CO.
1665 Buffalo Road
Rochester, NY 14624
Chemical suppliers
Catalog costs $3.
K Products
P.O. BOX 27507
San Antonio, TX 78227
I.D. Documents.
Catalog costs $1.
City News Service
P.O. BOX 86
Willow Springs, MO 65793
Press I.D. cards.
Catalog costs $3.
Matthews Police Supply CO.
P.O. BOX 1754
Matthews, NC 28105
Brass knuckles etc.
Taylor
P.O. BOX 15391
W. Palm Beach, FL 33416
Drivers license, student I.D. cards, etc.
Capri Electronics
ROUTE 1
Canon, GA 30250
Scanner accessories
Liberty Industries
BOX 279 RD 4
Quakertown, PA 18951
Pyrotechnic components
Catalog costs $1
DE VOE
P.O. BOX 32
BERLIN PA 15530
Sells information on making electronic detonators.
Scanner World USA
10 New Scotland Avenue
Albany, NY 12208
Cheap scanner receivers.
H & W
P.O. BOX 4
Whitehall, PA 18052
Human Skulls, arms, legs, etc.
A complete list is available for $1 and Self Addressed Stamped Envelope.
Abbie-Yo Yo Inc.
P.O. Box 15
Worcester MA 01613
This is an old address that I could not verify but, they used to sell the book
"Steal This Book".
For most of these catalogs you could probably play dumb and just send them a
letter asking for a catalog or brochure without paying a cent. Pretending not
to know that their catalogs cost anything.
M I S C E L L A N E O U S R E P O R T S & P A P E R S
Crime & Puzzlement by John Perry Barlow
The Baudy World of the Byte Bandit A Postmodernist Interpretation of the
Computer Underground by Gordon Meyer & Jim Thomas
Concerning Hackers Who Break into Computer Systems by Dorothy E. Denning
The Social Organization of the Computer Underground by Gordon R. Meyer
Computer Security "Virus Highlights Need for Improved Internet Management"
By the United States General Accounting Office. GAO/IMTEC-
89-57
Call 202-275-6241 for up to 5 free copies.
N E T W O R K D I G E S T S
Telecom Digest
Moderator: Patrick Townson
Network Address: telecom@eecs.nwu.edu
Risks Digest
Moderator: Peter G. Neumann
Network Address: Risks@csl.sri.com
Virus-l Digest
Moderator: Kenneth R. Van Wyk
Network Address: krvw@cert.sei.cmu.edu
Telecom Privacy Digest
Moderator: Dennis G. Rears
Network Address: telecom-priv@pica.army.mil
EFF News Electronic Frontier Foundation
Network Address: effnews@eff.org
Other Address: 155 Second Street Cambridge, MA 02141
Phone: 617-864-0665
Computer Underground Digest
Moderators: Jim Thomas & Gordon Meyer
Network Address: tk0jut2@niu
F T P S I T E S C O N T A I N I N G C U M A T E R I A L
192.55.239.132
128.95.136.2
128.237.253.5
130.160.20.80
130.18.64.2
128.214.5.6 "MARS Bulletin Board" Login "bbs"
128.82.8.1
128.32.152.11
128.135.12.60
All of the above accept anonymous logins!
B U L L E T I N B O A R D S
Ripco 312-528-5020
Face-2-Face 713-242-6853
Rune Stone 203-485-0088 Home of NIA
The Works 617-861-8976
The Well 415-332-6106
Blitzkrieg 502-499-8933 Home of TAP
Uncensored 914-761-6877
Manta Lair 206-454-0075 Home of Cybertek
I N D I V I D U A L N E T W O R K A D D R E S S E S
Aristotle Former Editor of TAP Magazine
uk05744@ukpr.uky.edu or uk05744@ukpr.bitnet
Dorthy Denning Author of "Concerning Hackers Who Break into
Computer Systems"
denning@src.dec.com
Clifford Stoll Author of "Cookoo's Egg"
cliff@cfa.harvard.edu
Craig Neidorf Former Editor of Phrack Magazine
c483307@umcvmb.missouri.edu
Ground Zero Editor of ATI Inc.
gzero@tronsbox.xei.com
M I S C S O F T W A R E
SPAudit Self-Audit-Kit
1101 Connecticut Avenue
Northwest Suite 901
Washington DC 20036
Phone 202-452-1600
Fax 202-223-8756
Free!!!
I would like to thank everyone who gave me permission to use their information
in this file.
The information provided here is for informational purposes only. What you
choose to do with it is your responsibility and no one else's. That means not
me, and not the BBS you downloaded this from!
To my knowledge this is the most comprehensive and upto date list of
underground books, catalogs, magazines, electronic newsletters, and network
addresses available. If there are any additions or corrections to this list
please contact me via the Ripco BBS.
The Butler...
Tampilkan postingan dengan label Hack. Tampilkan semua postingan
Tampilkan postingan dengan label Hack. Tampilkan semua postingan
Rabu, 29 Oktober 2008
Jumat, 24 Oktober 2008
DataVault
#DataVault, Irc Warez (Ty 4 Moving X).txt
-[ How to rip Dynamic Flash Template ]-.txt
10 reasons why PCs crash U must Know.txt
10 Security Enhancements.txt
123456789.txt
16x Dvd+-rw Dl Dvd Writer Comparison Guide.txt
20 Great Google Secrets.txt
23 Ways To Speed WinXP, Not only Defrag.txt
250+ Tech books online.txt
2600 Hertz Single Tone Generator Schematic.txt
36 Graphics & Design Ebooks.txt
8 People Can Use The Same Msn Dial Up Account.txt
A Basic Guide to the Internet.txt
A Basic UNIX Overview.rtf
A BEGINNERS GUIDE TO Hacking Unix.txt
A Cracking Tutorial
A Guide to Internet Security- Becoming an Uebercracker.txt
A Guide to the Easiest Hacking there is.txt
A List of every TeleNet code that there is.txt
A List Of Government BBS Numbers.txt
A List Of Some OF The Most Useful UNIX Hacking Commands.htm
A Novice's Guide to Hacking 2004.txt
A Novice's Guide To Hacking.txt
A Short HACKER SPEAK Glossary.txt
A simple TCP spoofing attack.txt
A Small Guide to Hacking HOTMAIL.txt
A UNIX Hacking Tutorial.txt
A very small tut for RealMedia.txt
A Web Standards Checklist, How to make a proper website.txt
Accessing the bindery files directly.txt
Accessing The Entire Internet On Your 3 Phone, U8110, E616 etc..txt
Advanced Shellcoding Techniques.txt
All about ftp must read.txt
All About Movie Tags (what Is A Dvdrip, Cam Etc.).txt
ALL About Spyware.txt
All mIRC Commands.txt
Almost Everything You Ever Wanted To Know About Security (but.txt
An Architectural Overview of UNIX Network Security.htm
An Extensive Guide to Bell System Man Holes.txt
An Indepth Guide in Hacking UNIX and the concept of Basic Net.txt
An Introduction into TeleScan.txt
An Introduction to Denial of Service.txt
An Introduction to the Computer Underground.txt
An Introductory Guide To TeleNet Commands.txt
Anarchist Cookbook 2004
Anonymity complete GUIDE.rtf
Anonymity of Proxy, Anonymity Of Proxy learn it insideout.txt
Anonymity.txt
ANONYMOUS emails.txt
Anonymous FTP FAQ.htm
ANSIBombs II Tips And Techniques.txt
anti leech hacking tutorial.txt
Area Codes and Time Zones.txt
attacks on networks how to stop.htm
Auto End Tasks to Enable a Proper Shutdown, Win XP Tweak.txt
Automatic Windows Installation, No keypress required!.txt
B.A. regedit.txt
Backdoor.txt
Backdoors.txt
Backtracking EMAIL Messages.txt
Bandwidth Explained!.txt
Basic Networking.txt
BBS CRASHING TECHNIQUES.txt
Becoming A Phreaker - The Quick n' Easy Way.txt
Beep Code Manual.txt
Beep Codes Error Codes.txt
Bell Hell Volume #1.txt
Bell Hell Volume #2.txt
Best Keyboard Shortcuts.txt
Big Brother And Ndisuio.sys, A new Internet phenomenon.txt
Bin & Cue Simple Tut.txt
BIOS Update Procedure.txt
Bit Torrent Tutorials.txt
Block Adservers.txt
Boot Block Recovery For Free.txt
Boot Winxp Fast.txt
Border And Text Effects In Psp8, For use with PSP8.txt
Breaker B0X.txt
Broken Ie, How to fix it.txt
BRUTE- A brute force approach to hacking Unix passwords.txt
Bulk Editing Of .xxx to .zip or .mp3.txt
BulletProof FTP Server Tutorial.txt
Burn .bin file Without A .cue file.txt
Burn a BIN without a CUE using NERO.txt
Burning Bin & Cue Using Nero.txt
Bust Avoidance For Dipshits.txt
busybox.txt
Bypass Internet Censorship.txt
Calculating Offsets.txt
cannot use my password to get back into Windows XP.txt
Cant See Secure Sites.txt
Caught A Virus.txt
Cellular Listening with a TV .txt
Cellular Telephone Phreaking Phile Series VOL 1.txt
Change Music In The Malibu And The Pole Position, GTA Vice Modders.txt
Change Text on XP Start Button.rtf
Change Text on XP Start Button.txt
Change The Default Location For Installing Apps.txt
Change The Storage Location Of 'my Documents', a bit safer for when your PC crashes....txt
Change Your Ip In Less Then 1 Minute.txt
Changing Default Location For Installing Apps.txt
Check For Dos, Check to see if you are infected..txt
Choosing A Good Domain Name, ya..good name is important!.txt
Choosing An Internet Merchant Account, nice info on Internet Merchant Account...txt
Clear Unwanted Items From Add And Remove.txt
Closing Open Holes, System Security How to close open holes.txt
Closing the Net.txt
CMD Prompt here, add to folder context menu windows xp.txt
COMMON FTP ERROR CODES.txt
Compression and Cracks for Dummies.txt
Computer Acronyms.txt
Computer Bulliten Boards and the Law.txt
Computer Chrime - Current Practices, Problems and Proposed So.txt
Computer eMail and Privacy.txt
Computer Hackers News Articles.txt
Computer Matinence.txt
Computer Rights vs First and Forth Amentment Right.txt
Computer Security.txt
Computer Security_2.txt
Computer Viruii.txt
Computerized Governmental Database Systems Containing Persona.txt
Configuring ZoneAlarm Pro Security Settings, A ZoneAlarm Pro Tutorial.txt
connect A Psx Pad To Pc, Warning soldering is involved...txt
Convert Stubborn Webpage To pdf.txt
Convert To Basic And Dynamic Disks In Windows Xp.txt
Converting Movies To Psp Format.txt
Converting to NTFS.txt
COPS and Robbers-Unix System Security.txt
COPY X BOX GAMES!.txt
Copyright Guides for Photographers.txt
Cracking Bios, use the followin' code.txt
Cracking Zip Password Files.txt
Crap Software Config Settings, How to set-up the firewall.txt
Crash Course in X Windows Security.txt
Create A Huge File.txt
Create A Personal Screen Saver In Win Xp!.txt
Create An Ftp Server On Your Pc With Serv-u.txt
Create Bootable Win XP SP1 CD(nero).txt
Create Bootable XP SP integrated CD.txt
Create One-click Shutdown And Reboot Shortcuts.txt
Creating a Board aka Forum on your own PC !.rtf
Creating Universal Ghost Usb Boot Disk And Cd.txt
Crime and Puzzlement.txt
Cultural Formations in Text-Based Virtual Realties.txt
Cyberspace and the Legal Matrix- Laws or Confusion.txt
Dark Angel's Phunky Virus Writing Guide .txt
Data Capacity of CDs [Tutorial].txt
Debug, Learn how crack windows.txt
Defamation Liability of Computerized Bulliten Board Operators.txt
Delete An undeletable File.txt
Delete Files From The Recent File List In Windows.txt
Dept of Treasury Letter.txt
Digital Camera Guide.txt
Digital Faq -learn Everything About Digital, Capture, Edit and Burning and more.txt
Digital Photo Id Cards, Greate Info.txt
Direct Link To Any Page You Want To In Hotmail.txt
Directx Explained.txt
Disable Compression On Xp, NTFS partition, Disk Cleanup.txt
Disable The Send Error Report, to Microsoft.txt
Disable Windows Logo Key.txt
Discover New Music You'll Probably Love.txt
Do You Want To Learn Maya 6, look, some tutorials.txt
Doom 3 Speed Up, Guaranteed 40% better.txt
Doom3 Simple Tweeks, how to run doom with tweeks.txt
Dos User - No Boot Dos Disk, No Edit.com,How to create Imp Files.txt
Download Free Music legally,, legally.txt
Download from a paypal site without paying a penny!.txt
Download From Ftpz, Using Ftp Search Sitez.txt
Download Mp3's Without Using Filesharing.txt
Download Music And Video With ,edia Player9, quick and easy!.txt
Download Timeframes.txt
Downloading Files, Using Archives And Images.txt
Downloading Windows Media Streams.txt
Drake's Phreaking Tutorial.txt
Dreamweaver Tut That Teaches U, to search a database with phpmysql.txt
Driverguide.com.txt
Dual Boot After The Fact.txt
Dvd Copying-ripping Definitions.txt
DVD Regions Information.txt
Dvd-9 to Dvd+r Dl, Double Layer To Double Layer, 1-1 copies.txt
Easily Disconnect-reconnect From Broadband.txt
Easily Find Serial Numbers On Google.., easy to do and works like a charm..txt
Ebay Hackcracktip.txt
Electronic Bulliten Boards and 'Public Goods' Explainations o.txt
Electropolos - Communication and Comunity on IRC.txt
Eliminate Ie's Autocomplete Reminder.txt
Email Forge, sends email from anyone.txt
Enable Folder and Icon Refresh, Win XP Tweak.txt
Erasing_Your_Presence_From_System_Logs.txt
Ethload User's Guide.txt
Evolution Of Computer Viruses History Of Viruses.txt
Excellent tricks and techniques of Google Hacks.txt
Exploseek, a simple tool to find music on the net.txt
Find Stuff.txt
Finding Missing Files From A Release.txt
Firefox Speed Tweaks.txt
Firefox Tweaks.txt
Firewall Protection how to.rtf
FlashFXP FAQ.txt
Flashget Broadband Tweak.txt
FLASHGET INTEGRATION IN OPERA,MOZILLA,NETSCAPE.txt
FlashGet v1.4 - More Download Simultaneously.txt
Flashing A Video Card Bios [advanced Guide], Step-by-Step Guide for Novice and Expert.txt
Formatting An Hdd, when fdisk won't.txt
Formulating A Company Policy on Access to and Use and Disclos.txt
Free Access To Websites Without Registering.txt
FREE Hosting For WAREZ.txt
FREE Hosting List php, mysql and more.txt
Free Speech in Cyberspace.txt
Free World Dialup.txt
Free X-box Live !.txt
Freebsd Install Guide.txt
Gender Issues in Online Communications.txt
General Keyboard Shortcuts, General Keyboard Shortcuts.txt
Get In Windows 2000 As Administrator.txt
Get the Most Out of Your DVD Recorder.txt
Get The Music You Want To Hear.txt
Get unlimited bandwidth from your host for free.txt
Getting A 1gb Yahoo China Account.txt
Getting Counter-strike Source To Work.txt
getting movies, mp3,games using google.txt
Getting older programs to run on Windows XP.txt
Getting started with Linux for nOObs!.txt
Go to Windows updates anonymously.txt
Google Crack Search.txt
Google secrets.txt
Google Tips & Tricks, (utilizing search engine).txt
Government Computer Security Techniques.txt
Graffiti On Walls 4 Adobe Photoshop Cs 8.0.txt
Guide For Getting Free Stuff.txt
Guide to Hacking with sub7.doc
Guide to IIS Exploitation.txt
Guide to Slipstreaming Service Pack 2.txt
HACKDICT.TXT
Hacker Test.txt
Hackers A-Z.TXT
Hackers Who Break into Computer Systems.txt
hacking and phreaking.doc
Hacking Bank Of America's Home Banking System.txt
Hacking Compuserve Infomation Service.txt
Hacking Faq.txt
Hacking for Dummies Volume 2.doc
Hacking For Newbies.doc
Hacking GTE Telemail.txt
hacking in telnet ftp.rtf
Hacking IRC - The Definitive Guide.txt
hacking on Telnet explained.doc
hacking on XP part 1.doc
hacking on XP part 2.doc
hacking on XP part 3.doc
hacking on XP part 4.doc
hacking on XP part 5.doc
hacking password protected site.doc
Hacking Password Protected Website's.doc
hacking passwords.doc
Hacking PC-Pursuit Codes.txt
Hacking Techniques.txt
Hacking TRW.txt
Hacking TYMNET.txt
Hacking Unix System V's.txt
Hacking VoiceMail Systems.txt
Hacking Wal-Mart Computers.txt
Hacking Webpages.txt
Hard drive Gone Bad.txt
Hardware Firewall.txt
Have Notepad In Send To.txt
have satallite tv for almost free IF not free!!!.txt
Hex, How to turn binary or decimal to hex.txt
Hide Drives and Partitions.txt
How 2 Find EVERYTHING uploaded on Rapidshare.txt
How BT phone cards works.txt
How do I overburn a CD with Nero.txt
How do I remove an extra operating system from by.txt
How do I Test My VirusScan Installation.txt
How Do U See Hidden Files, Using DOS...txt
How Download MP3s from Fanscape.com or other Streaming Audio-Video.txt
How Linux boots.txt
How Long Has Your XP System Been Running.txt
How Phone Phreaks are Caught.txt
How the Traditional Media Clasifications Fail to Protect in t.txt
How To Access Your Folders From Your Taskbar.txt
How To Add A Url Address Bar To The Taskbar.txt
How To Add An Option To Print, the Contents of a Folder!.txt
How To Add Your Own Windows Tips.txt
How to Back Up the Registry.txt
How To Backup Ps2 Games.txt
How to Bill All Of your Fone Calls To Some Poor, Unsuspecting.txt
HOW TO BLOCK PEOPLE ON WINMX WHO SHARE NOTHING.txt
How To Block Websties Without Software, block websites.txt
How To Boot Xp Faster (updated).txt
How to build a black box.txt
how to burn quicker in windows xp.txt
How to Bypass BIOS Passwords.txt
How To Bypass Web Filters, tutorial.txt
HOW TO CAPTURE STREAMING MEDIA.txt
How To Change A Cmos Battery.txt
How to change the serial number used in Windows XP, Valid for XP Corporate.txt
How To Change Thumbnail Size And Quality.txt
How to clear Bios info 2.txt
How to clear Bios info.txt
How To Convert File System, fat - fat32 to ntfs.txt
How To Copy A Dvd Which Will Play On A X Box.txt
How to copy songs from your iPod to your PC.txt
How to crash AOL.txt
How To Customise Your start Button.txt
How To Delete Those Persistent Nasty Files.txt
How to dial out of a UNIX System.txt
How To Directly Go To Inbox, Write Msg, w Hotmail, no need for hotmail today - http users.txt
How To Disable Picture And Fax Viewer.txt
How to do a high Quality DivX rip.txt
How To Download Bittorrent Files.txt
How To Download Directly From Crackdb.com.txt
How To Download Movies, From IRC.txt
How to Download-Upload Files from email.txt
how to edit right click menu.rtf
how to execute chm files in linux.txt
How to Extend the life of the yousendit download links.txt
How to find a remote IP.txt
How To Find Ftp's The Easy Way'.txt
How to find MP3's real quickly.txt
How to find Security Holes.txt
How To Find Serial Numbers On Google.txt
How to fix corrupted files in XP.txt
How to fix Windows Installer problem.txt
How To Get A Free I-pod Or Flat Screen Tv, check it out.txt
How to get a Shell in 24 hours.txt
HOW TO GET ANY WINDOWS PASSWORD.txt
How to Get someones ISP password, Get free internet.txt
How To Get Top Ranking, Search Engines.txt
How to Hack UNIX System V.txt
How To Hack Windows Xp Admin Passwords.txt
How to hack-change your Windows XP Boot Screen.txt
how To Hide Yourself From Network Users!, And give access to only specific users!.txt
How To Increase Download Speeds By 100-200 Kbsec.txt
How to Install and run Windows CE on your USB Stick.txt
How to learn to hack in easy steps.doc
How to login to a C.B.I. System.txt
How To Make 5cds, 10cds Or 2dvds From Official Dow, These are same as Mandrake PowerPack+.txt
How to make a Free Phone Call.txt
How To Make A Kvcd.txt
how to make a new web site.txt
How To Make A Transparent Background, .fla .swf.txt
how to make a VCD from a DivX.txt
How To Make An Animted Logo.txt
How To Make Free Phone Calls.txt
How to make key generators.txt
How To Make Perfect Copies Of Maxis The Sims Discs, CloneCD Style!.txt
How To Make XP Go Faster.txt
How To make your own Radio Station 2.txt
How To Make Your Own Radio Station.txt
How To Make Your Own Radiostation.txt
HOW TO MANUAL - THE END OF DELETERS.txt
How to modify exe files.txt
How To Move Xp Harddrive To New Motherboard.txt
How To optimize DSL-CABLE connection speed.txt
How To Play Movies (divx Etc) With Subs.txt
How to Put an End to Unwanted or Harassing Phone Calls.HAR
How to recover MOST of scratched CD data discs.txt
How to Remove DRM Protection for Video Files.txt
How To Remove Ms Java Vm And Install Sun Java.txt
How To Remove Signin Details Of Msn Passport.txt
How To Remove The Default Admin$ Shares.txt
How to remove the Links folder in IE Favorites.txt
How to Remove WinXP Splash and See Operations.txt
How To Rename Extensions With Ease, with a Renamer.bat file!.txt
How to Rename File Extensions.txt
How To Rename Multiple Files In Winxp.txt
How To Restrict Login Hours Allowed.txt
How to safeguard your files when computer crashes.txt
How to save Windows xp updates.txt
how to search google for RAPIDSHARE links.txt
How To See Hidden Files, Using Dos.txt
How to send ICQ Bombs.txt
How To Set search For All Files In Winxp.txt
How to set up a http server running from you computer.txt
How To Set Up A Proxy In Flashget, As Requested.txt
How to set up a server with Apache , PHP , MySQL , Perl , phpMyAdmin.txt
How To Set Up Direct Connect.txt
HOW TO SET UP FTP SERVER.txt
How To Set Up Proxies In Your Browser.txt
How To Set Zone Alarm Settings!, Fix for ZA ports.txt
How To Setup Your Own Dns (Domain Name Server).txt
How To Speed Up A Slow Computer.txt
How To Speed Up Http Requests On Internet Explorer, as above.txt
How To Stop Spam.txt
How to swear in all languages.txt
How To Unload Cached Dll Files To Free Memory.txt
How to Use and How to Chain Multiple Proxies!.txt
How To Use File Compression In Windows Xp.txt
How To Use Google To Download Mp3's, and applications.....txt
How To Use Newsgroups.txt
How to use the Web to look up information on hacking.doc
How To Use You Gmail With Msn Messenger.txt
How-to Get Videos And Dvds Onto Your Sony PlayStation Portable (PSP) for free.txt
HOWTO Change Windows XP Home to Windows XP Pro.txt
Important Faqs For Sp2.txt
Improve Doom 3's Performances!!, simple but efficient trick for every1.txt
Improve your dialup modem preformance.txt
Increase XP Folder Settings.txt
Information of Hacking AngelFire Websites.txt
Insert Your Serial For Office 2k, auto install office.txt
Install A New Hard-disk.txt
Install Xp From Dos.txt
Installing Apache on Windows.txt
Installing Gentoo Linux, Amazing step by step tutoria.txt
Installing IIS On Windows Xp Pro.txt
Installing Slackware Linux.txt
Instructions For Removal Of Advertising In Msn Messenger.txt
Introduction to Denail of Service.txt
Ip Address Structure, Expilinatin OF IP Address {A short way}.txt
IP addressing, and gaining IP's.txt
IP Addressing.txt
IP how to.rtf
Irc How To Downlaod From, How to downlaod from IRC.txt
Irc Servers On nix, For people who want to start own IRC net.txt
ISSN Numbers- An Introduction.txt
Junk Mail- How Did They All Get My Address.txt
Keep Files Private.txt
Keep Folders Hidden.txt
Keyboard Shortcuts Result in Excel 2000 - Movement.txt
Keyboard Shortcuts, Microsoft Word.txt
Keyboard Shortcuts, must read.txt
Kill Microsoft Instant Messenger.txt
Lamination Tips, Its a Fast TUT......txt
Leet Way To Get Your Ip In Windows Xp.txt
LENROS~1.TXT
LENROS~2.TXT
Linking Your Xbox To Your Computer.txt
Linux Howto's.txt
List Of Sites Not To Go To.txt
Little help for anonymous mailer.txt
Lots Of Windows Xp Tips, Take A Look !.txt
Lyrics With Google.txt
Make A Autorun File For Ur Cd.txt
Make A Batch File To Clean UR PC!!, All In One!!.txt
Make A Roughly 16 Hour Video Dvd.txt
Make Acrobat Reader 6 load faster.txt
Make Dvd Iso From Suse 9.2 5 Cds Iso, Linux mode and Windows mode ISO creation.txt
Make Mp3 Files Smaller Without Losing Quality.txt
Make Your Own Ringtones For Mobile Phone, also logos, wallpaper, etc.txt
Make Your Pc Faster, Guaranteed.txt
MakeXPgoFaster.txt
making a .cue file, in notepad.txt
Making A .txt Executable Server.txt
Making Bootable Floppy Disk to Boot into Windows.txt
Making Cd Version Of Doom3 Into Dvd Version.txt
Making Web Page Fonts Consistent and Uniform.txt
Manage Saved Ie Passwords.txt
Mastering The Windows XP Registry.txt
Maximize Dial-up Modem Settings.txt
MEMETICS.TXT
Microsoft's Really Hidden Files, Reveled Hidden files.txt
MINDVOX.TXT
mIRC Not Just Another Chat Client, Download Anything You Want Almost.txt
mIRCcommands.txt
Misc Linux Tips & Tricks.txt
Missing Administrator Account.txt
Mobile Secret Codes.txt
Modify .exe Files And Crack A Program.txt
More Xp Tips and tricks make your computer more faster.txt
MORRIS~1.TXT
Moving and Removing the Start Button.txt
Msn Messenger & Gmail.txt
My Flash Bookmarks, long list of tutorials.txt
Myth about WPA ( How it is done ), Windows Product Activation Technique.txt
NEIDOR~1.TXT
Nero How To Verify The Validity Of The Sn U Use.txt
NetBios explained.doc
New Pc Or New Motherboard.txt
New Way To Relive Some Zinio File.txt
news groups the how to do.txt
NFS Tracing.txt
Nice list of windows shortcuts.txt
Nightline- FBI,Privacy,and Proposed Wire-Tapping Legislation.txt
No Text Icons.txt
Ntfs Cluster Size, better harddrive performance.txt
NY_2'S Guide to Obtaining An IP Address. .doc
Official Unattended Xp Cd Guide Xp Sp2 @ Msfn.org.txt
Open Windows Explorer To A Different Default Direc.txt
Optimize Broadband & Dsl Connections.txt
Optimize Emule Connection.txt
Organizational Analysis in Computer Science.txt
Outpost Rules, Outpost rules for system & app.txt
Outsmarting System File Protection.txt
Overclocking_Tutorial.txt
Packet Attacks - Version 1.1, { Packet_Attack_Exlained}.txt
Part 0 Dc++.txt
Part 1 Bittorrents.txt
Part 2 Irc (mirc).txt
Part 3 Ftp.txt
Partitioning Your Harddisk With Fdisk.txt
Pc File Extention Listing.txt
Pc Maintenance Guide.txt
Peer2mail Tutorial.txt
Performance Increase Through My Computer.txt
PGP Startup Guide.htm
Phone Systems Tutorial by The Jolly Roger.txt
Phreakers Handbook.txt
Play Games On PS2 Without ModChip.txt
Play On A Bnet Emulator, and f off cd key check =).txt
Port Numbers.txt
Presumed Guilty.txt
Problem With Internet Navigation, Clean Host File.txt
Proxy how to.rtf
Quick Fix For Spyware, Try This Before Doing Surgery on Your OS.txt
Quick Msc.txt
Quick Phone Modifications.txt
Quick Shutdown for XP, How to create a shutdown shortcut..txt
Quickly Start The Shared Folder Wizard.txt
Raising Hell with Unix.txt
Rapidshare hack!!!!! Free premium acount for all.txt
Rapidshare Hacked, unlimited upload, no countdown.txt
Rapidshare Timelimit.txt
Read This! Av Compare!.txt
Recover A Corrupted System File.txt
Recover a Quick erased CD RW.txt
Reformat&Reinstall.txt
Regedit.exe & Regedt32.exe, Whats the difference.txt
Registry Disassembled a basic tutorial.txt
Reinstall Internet Explorer 6.txt
Release Codes, Read, and Learn....txt
Remarks of the President and Vice President to Silicon Valley.txt
Remote Desktop Through Company Firewall.txt
Remote Shutdown.txt
Remove Linux From Your Pc Safely, ...and restoring your MBR.txt
Remove Msn Messenger From Xp, several ways...txt
Removing Banners From Free Webhosts.txt
Removing Norton Anti-virus 2004, How to remove the Registry Enteries.txt
Rename 'recycle Bin' To Whatever You Want.txt
Reregister All .dll Files Within Registry.txt
Reset your lost Bios Password.txt
Restore JPG,JPEG,JPE Default File associations, Win XP Tweak.txt
REVERSE CODING.txt
RIGGSB~1.TXT
RIGGS_~1.TXT
RIGHTS~1.TXT
RIVERA.TXT
Routing Basics.pdf
Run Aol Without Using Aol Browser & Save Resources, connect permanently and use any browser.txt
Running A Board forum From Your Own Pc.txt
Running Vanishing Console Programs With A Click!, Ever had a console program that vanis....txt
Safely Editing the Registry....txt
Save Your Desktop Icon Settings.txt
Saving and loading Photoshop actions.txt
Scheduled Tasks - Defrag, how to set up scheduled defrags.txt
ScreenLock Professional v2.0.41.txt
SEARCH eBOOK in FTP SEARCH ENGINE.txt
Search For Ebook Server With Google.com.txt
Search like a real warez d00dz, for warez of course!.txt
Searching For Something To Download, This may help.txt
Secret Backdoor To Many Websites.txt
Secrets Of Lock Picking.txt
Securing WinXP Pro (with what win-xp has to offer.txt
Securing your WINDOWS XP computer.txt
Security holes.txt
Seisure Warrent Documents for Ripco BBS.txt
Set Google as your Default Search in IE.txt
Set Win Explorer to open the folder you want!, Little trick.txt
sick of inserting winxp cd every time your pc asks, Change Default Location of i386 Folder.txt
sidebar fix.txt
Simple Tweaks For Peak Pc Graphics Performance.txt
Single Click Shutdown.txt
Single-click To Open An Item..., IF the Folder Options is grayed out.txt
Site Security Handbook.txt
SJ-DEC~1.TXT
SJ-RESP.TXT
Slow Loggon Time, one fix for problem.txt
Slow Opening Of File Dialogs.txt
SMTP-Simple Mail Transfer Protocol.txt
Some Cool Site For Tutorials.txt
Some Google Tricks, again.txt
Some More Tips To Improve Your Winxp.txt
Sp2 For Xp Slipstream, Integrate SP2 into your XP CD.txt
Sp2 Tweaks.txt
Speed Up Internet.txt
Speed up menu display.txt
Speed up Mozilla FireFox.txt
Speed Up Your Bandwidth By 20% !, Windows uses 20% of your bandwidth.txt
Speeding up menus in XP.txt
Speeding up your internet connection under Linux and Windows.html
Spoofing emails, via telenet.txt
Standard ASCII Character Set.txt
Steps to Clean Install XP.txt
Stop A Restart Process In 3steps.txt
Stop Annoying Pop-ups Without Pop-up Blockersoutli.txt
Summary of FBI Computer Systems.txt
SUNDEVIL.TXT
SUPREM~1.TXT
System Changes To Foil Hackers And Browser Hijacke.txt
System File Checker For Windows Xp.txt
TCP packet fragment attacks against firewalls and filters.txt
Tcpip A Mammoth Description, Short and easy-Everything U want to know.txt
Telenet-The Secret Exposed.txt
telnet trick port 25.doc
Testing Wattage Consumption Of Your Computer, Measuring your computer's wattage.txt
The ABC's of Payphones part 1.txt
The ABC's of Payphones part 2.txt
The ABC's of Payphones part 3.txt
The ABC's of Payphones part 4.txt
The Antivirus Defense-in-Depth Guide.txt
The Basics of Hacking- Introduction.txt
The Baudy World of the Byte Bandit-A Postmodernist Interpreta.txt
ThE Beige BoX .txt
The Constitution in Cyberspace.txt
The Cracking Manual.txt
The difference between DVD-R, DVD+R, DVD+RW and DVD-RW.txt
The Electronic Communication Privacy Act of 1986 - A Laymans .txt
The Greatest Hacker of all time.ASC
The Hacker's League.txt
The History of British Phreaking.htm
The Inner Circle Book's Hacking Techniques.txt
The Lamahs-Guide to Pirating Software on the Internet.txt
The M.M.C. Guide to Hacking, Phreaking, Carding.txt
The Modern Phreakers Guide To Beige Boxing.txt
The Modern Phreakers Guide To Payphones.txt
The Moterola Bible.txt
The Myth of the 2600Hz Detector .txt
The National Information Infrastructure-Agenda for Action.txt
The Newbies Handbook- ' How to beging in the World of Hacking.txt
The Newbies-User's Guide to Hacking.txt
The Official Phreaker's Manual.txt
The Phreakers Handbook-1.txt
The Port Guide, Port number and info.txt
The Pre-History of Cyberspace.txt
The Price of Copyright Violation.txt
The REAL way to hack RemoteAccess.txt
The Secret Service, UUCP,and The Legion of Doom.txt
The Telephone Works.txt
The Ultimate Guide To Installing Windows Xp Sp2.txt
The Ultimate Phreaking Guide .txt
the UNIX operating system (Berkley 4.2).txt
Theft of Computer Software-A National Security Threat.txt
Thoughts on the National Research and Education Network.txt
Three Ways Of Bypass Starforce Cd Protection.txt
Tip for shutdown windows - virus.txt
Tips And Tricks, Windows XP.txt
Tips on Starting Your Own BBS.1
Tired Of Reinstalling Windows.txt
To Get And Show The Ip Via Javascript.txt
Top 5 Myths About Safe Surfing, PC Magazine.txt
Transferring Data.txt
Translating Binary To Text.txt
Translating Binary to Text2.txt
Trojan Ports.txt
Turn MSN Messenger Display Pix into User Pix on XP.txt
Turn Off Unneeded Services, speed up pc.txt
Tutorial Get the serial number you need.txt
Tutorial How to create a bootable Windows XP SP1 CD (Nero).txt
Tutorials - blacksun.box.sk
Ultimate Google Way.txt
ULTIMATE GUIDE TO BYPASS BIOS PASSWORDS!.txt
Understanding the Telephone System.txt
undocumented DOS commands.txt
Uninstall Windows Xp And Return To My Old Windows.txt
Uninstalling Norton 2004 Products.txt
UNIX Computer Security Checklist.0
UNIX Use and Security - By the Prophet.txt
UNIX Use and Security From The Ground Up.htm
UNIX- A Hacking Tutorial.SIR
Unlimited Rapidshare Downloads.txt
Untold Window Tips.txt
Untold Windows Secrets.txt
Untold Windows Tips.txt
Unused space on hard drives recovered.txt
Use Hotkeys To Switch Programs.txt
Useful Download Guide, Fix Down, 0daycn Ttdown, Links.txt
User's Guide To Avoiding Virus Infections, Keeping an eye out for viruses.txt
Using Google As A Calculator, A Tutorial.txt
Using Google for searching ebooks.txt
Using Rapid Share, How to use them and skip the BS.txt
Video Avatars.txt
Viewing Leftover Driver Entries.txt
Virtual Memory Information.txt
Virtual Memory Optimization Guide Rev. 4.0 - Final.txt
Viruii FAQ.txt
Virus-Trojan FAQ.txt
Want To Download Torrent File By Using Google.txt
Warez Definations.txt
WAREZ DEFINITION.txt
Way To Download From Brturbo, FireFox.txt
We Don't Need No Education, Online classes made easy.txt
Welcome to The king's meaning's of how to kick some-one's ASS!.txt
What Files are Legal for Distribution on a BBS.txt
What is the Registry.txt
What Should I Do With Image Files.txt
What To Look For In A Code Hacking Program.htm
What To Look For In A Code Hacking Program.txt
What You Should Know About Computer Viruses.DNA
What You Wanted To Know About Movie Jargon, But Were Afraid To Ask.txt
When Good Discs Go Bad.txt
Where Is Winipcfg In Winxp.txt
Who's Seeding The Net With Spyware.txt
Why wait 35 Seconds at eZshare.txt
Win 2000 Dr. Watsson.txt
Windows 2000 Tips & Tricks.txt
Windows 2003 System Restore, How to activate system restore in W2K3.txt
Windows Scan Count Down Time.txt
Windows Shortcuts.txt
WINDOWS TRUE HIDDEN FILES.txt
Windows Tweak, Hack Your Start Button.txt
Windows Xp - Speed Up Your Network and Internet Access.txt
WINDOWS XP HIDDEN APPS.txt
Windows XP Registry Tweaks.txt
Windows XP Startup and Performance Tweaks.txt
Windows Xp Tips 'n' Tricks.txt
Windows Xp Tweaks, A work in progress.txt
Windows XP Tweaks.txt
WinRar Tutorial - Compression profiles, passwords and more.txt
Winsock 2 Repair.txt
WinXP 3 Tips.txt
Winxp Application Defrag, faster access for used programs.txt
Winxp Applications Startup Time, Decrease your Applications startup time.txt
WinXP Bootable CD.txt
Winxp System Response, reboot whitout rebooting.txt
Winxp Tips And Tricks, Winsock 2 repair.txt
Xp Auto Install.txt
Xp Folder View Does Not Stay To You're Setting., Grab your registry editor and join in.txt
XP REPAIR INSTALL.txt
XP Tweaking.txt
Yahoo + geocities Posts.txt
Yahoo Chat Commands how to.rtf
Yahoo Messeger, no ad's.txt
You Want Lots Of Music, Appz, Anything, Try Dex Hunting.txt
Your Home Page Nevr Being Changed.txt
Your Own Home Server - Introduction.txt
Zen and the Art of Fone Phreaking `97 .txt
[PHP] Navigations.txt
-[ How to rip Dynamic Flash Template ]-.txt
10 reasons why PCs crash U must Know.txt
10 Security Enhancements.txt
123456789.txt
16x Dvd+-rw Dl Dvd Writer Comparison Guide.txt
20 Great Google Secrets.txt
23 Ways To Speed WinXP, Not only Defrag.txt
250+ Tech books online.txt
2600 Hertz Single Tone Generator Schematic.txt
36 Graphics & Design Ebooks.txt
8 People Can Use The Same Msn Dial Up Account.txt
A Basic Guide to the Internet.txt
A Basic UNIX Overview.rtf
A BEGINNERS GUIDE TO Hacking Unix.txt
A Cracking Tutorial
A Guide to Internet Security- Becoming an Uebercracker.txt
A Guide to the Easiest Hacking there is.txt
A List of every TeleNet code that there is.txt
A List Of Government BBS Numbers.txt
A List Of Some OF The Most Useful UNIX Hacking Commands.htm
A Novice's Guide to Hacking 2004.txt
A Novice's Guide To Hacking.txt
A Short HACKER SPEAK Glossary.txt
A simple TCP spoofing attack.txt
A Small Guide to Hacking HOTMAIL.txt
A UNIX Hacking Tutorial.txt
A very small tut for RealMedia.txt
A Web Standards Checklist, How to make a proper website.txt
Accessing the bindery files directly.txt
Accessing The Entire Internet On Your 3 Phone, U8110, E616 etc..txt
Advanced Shellcoding Techniques.txt
All about ftp must read.txt
All About Movie Tags (what Is A Dvdrip, Cam Etc.).txt
ALL About Spyware.txt
All mIRC Commands.txt
Almost Everything You Ever Wanted To Know About Security (but.txt
An Architectural Overview of UNIX Network Security.htm
An Extensive Guide to Bell System Man Holes.txt
An Indepth Guide in Hacking UNIX and the concept of Basic Net.txt
An Introduction into TeleScan.txt
An Introduction to Denial of Service.txt
An Introduction to the Computer Underground.txt
An Introductory Guide To TeleNet Commands.txt
Anarchist Cookbook 2004
Anonymity complete GUIDE.rtf
Anonymity of Proxy, Anonymity Of Proxy learn it insideout.txt
Anonymity.txt
ANONYMOUS emails.txt
Anonymous FTP FAQ.htm
ANSIBombs II Tips And Techniques.txt
anti leech hacking tutorial.txt
Area Codes and Time Zones.txt
attacks on networks how to stop.htm
Auto End Tasks to Enable a Proper Shutdown, Win XP Tweak.txt
Automatic Windows Installation, No keypress required!.txt
B.A. regedit.txt
Backdoor.txt
Backdoors.txt
Backtracking EMAIL Messages.txt
Bandwidth Explained!.txt
Basic Networking.txt
BBS CRASHING TECHNIQUES.txt
Becoming A Phreaker - The Quick n' Easy Way.txt
Beep Code Manual.txt
Beep Codes Error Codes.txt
Bell Hell Volume #1.txt
Bell Hell Volume #2.txt
Best Keyboard Shortcuts.txt
Big Brother And Ndisuio.sys, A new Internet phenomenon.txt
Bin & Cue Simple Tut.txt
BIOS Update Procedure.txt
Bit Torrent Tutorials.txt
Block Adservers.txt
Boot Block Recovery For Free.txt
Boot Winxp Fast.txt
Border And Text Effects In Psp8, For use with PSP8.txt
Breaker B0X.txt
Broken Ie, How to fix it.txt
BRUTE- A brute force approach to hacking Unix passwords.txt
Bulk Editing Of .xxx to .zip or .mp3.txt
BulletProof FTP Server Tutorial.txt
Burn .bin file Without A .cue file.txt
Burn a BIN without a CUE using NERO.txt
Burning Bin & Cue Using Nero.txt
Bust Avoidance For Dipshits.txt
busybox.txt
Bypass Internet Censorship.txt
Calculating Offsets.txt
cannot use my password to get back into Windows XP.txt
Cant See Secure Sites.txt
Caught A Virus.txt
Cellular Listening with a TV .txt
Cellular Telephone Phreaking Phile Series VOL 1.txt
Change Music In The Malibu And The Pole Position, GTA Vice Modders.txt
Change Text on XP Start Button.rtf
Change Text on XP Start Button.txt
Change The Default Location For Installing Apps.txt
Change The Storage Location Of 'my Documents', a bit safer for when your PC crashes....txt
Change Your Ip In Less Then 1 Minute.txt
Changing Default Location For Installing Apps.txt
Check For Dos, Check to see if you are infected..txt
Choosing A Good Domain Name, ya..good name is important!.txt
Choosing An Internet Merchant Account, nice info on Internet Merchant Account...txt
Clear Unwanted Items From Add And Remove.txt
Closing Open Holes, System Security How to close open holes.txt
Closing the Net.txt
CMD Prompt here, add to folder context menu windows xp.txt
COMMON FTP ERROR CODES.txt
Compression and Cracks for Dummies.txt
Computer Acronyms.txt
Computer Bulliten Boards and the Law.txt
Computer Chrime - Current Practices, Problems and Proposed So.txt
Computer eMail and Privacy.txt
Computer Hackers News Articles.txt
Computer Matinence.txt
Computer Rights vs First and Forth Amentment Right.txt
Computer Security.txt
Computer Security_2.txt
Computer Viruii.txt
Computerized Governmental Database Systems Containing Persona.txt
Configuring ZoneAlarm Pro Security Settings, A ZoneAlarm Pro Tutorial.txt
connect A Psx Pad To Pc, Warning soldering is involved...txt
Convert Stubborn Webpage To pdf.txt
Convert To Basic And Dynamic Disks In Windows Xp.txt
Converting Movies To Psp Format.txt
Converting to NTFS.txt
COPS and Robbers-Unix System Security.txt
COPY X BOX GAMES!.txt
Copyright Guides for Photographers.txt
Cracking Bios, use the followin' code.txt
Cracking Zip Password Files.txt
Crap Software Config Settings, How to set-up the firewall.txt
Crash Course in X Windows Security.txt
Create A Huge File.txt
Create A Personal Screen Saver In Win Xp!.txt
Create An Ftp Server On Your Pc With Serv-u.txt
Create Bootable Win XP SP1 CD(nero).txt
Create Bootable XP SP integrated CD.txt
Create One-click Shutdown And Reboot Shortcuts.txt
Creating a Board aka Forum on your own PC !.rtf
Creating Universal Ghost Usb Boot Disk And Cd.txt
Crime and Puzzlement.txt
Cultural Formations in Text-Based Virtual Realties.txt
Cyberspace and the Legal Matrix- Laws or Confusion.txt
Dark Angel's Phunky Virus Writing Guide .txt
Data Capacity of CDs [Tutorial].txt
Debug, Learn how crack windows.txt
Defamation Liability of Computerized Bulliten Board Operators.txt
Delete An undeletable File.txt
Delete Files From The Recent File List In Windows.txt
Dept of Treasury Letter.txt
Digital Camera Guide.txt
Digital Faq -learn Everything About Digital, Capture, Edit and Burning and more.txt
Digital Photo Id Cards, Greate Info.txt
Direct Link To Any Page You Want To In Hotmail.txt
Directx Explained.txt
Disable Compression On Xp, NTFS partition, Disk Cleanup.txt
Disable The Send Error Report, to Microsoft.txt
Disable Windows Logo Key.txt
Discover New Music You'll Probably Love.txt
Do You Want To Learn Maya 6, look, some tutorials.txt
Doom 3 Speed Up, Guaranteed 40% better.txt
Doom3 Simple Tweeks, how to run doom with tweeks.txt
Dos User - No Boot Dos Disk, No Edit.com,How to create Imp Files.txt
Download Free Music legally,, legally.txt
Download from a paypal site without paying a penny!.txt
Download From Ftpz, Using Ftp Search Sitez.txt
Download Mp3's Without Using Filesharing.txt
Download Music And Video With ,edia Player9, quick and easy!.txt
Download Timeframes.txt
Downloading Files, Using Archives And Images.txt
Downloading Windows Media Streams.txt
Drake's Phreaking Tutorial.txt
Dreamweaver Tut That Teaches U, to search a database with phpmysql.txt
Driverguide.com.txt
Dual Boot After The Fact.txt
Dvd Copying-ripping Definitions.txt
DVD Regions Information.txt
Dvd-9 to Dvd+r Dl, Double Layer To Double Layer, 1-1 copies.txt
Easily Disconnect-reconnect From Broadband.txt
Easily Find Serial Numbers On Google.., easy to do and works like a charm..txt
Ebay Hackcracktip.txt
Electronic Bulliten Boards and 'Public Goods' Explainations o.txt
Electropolos - Communication and Comunity on IRC.txt
Eliminate Ie's Autocomplete Reminder.txt
Email Forge, sends email from anyone.txt
Enable Folder and Icon Refresh, Win XP Tweak.txt
Erasing_Your_Presence_From_System_Logs.txt
Ethload User's Guide.txt
Evolution Of Computer Viruses History Of Viruses.txt
Excellent tricks and techniques of Google Hacks.txt
Exploseek, a simple tool to find music on the net.txt
Find Stuff.txt
Finding Missing Files From A Release.txt
Firefox Speed Tweaks.txt
Firefox Tweaks.txt
Firewall Protection how to.rtf
FlashFXP FAQ.txt
Flashget Broadband Tweak.txt
FLASHGET INTEGRATION IN OPERA,MOZILLA,NETSCAPE.txt
FlashGet v1.4 - More Download Simultaneously.txt
Flashing A Video Card Bios [advanced Guide], Step-by-Step Guide for Novice and Expert.txt
Formatting An Hdd, when fdisk won't.txt
Formulating A Company Policy on Access to and Use and Disclos.txt
Free Access To Websites Without Registering.txt
FREE Hosting For WAREZ.txt
FREE Hosting List php, mysql and more.txt
Free Speech in Cyberspace.txt
Free World Dialup.txt
Free X-box Live !.txt
Freebsd Install Guide.txt
Gender Issues in Online Communications.txt
General Keyboard Shortcuts, General Keyboard Shortcuts.txt
Get In Windows 2000 As Administrator.txt
Get the Most Out of Your DVD Recorder.txt
Get The Music You Want To Hear.txt
Get unlimited bandwidth from your host for free.txt
Getting A 1gb Yahoo China Account.txt
Getting Counter-strike Source To Work.txt
getting movies, mp3,games using google.txt
Getting older programs to run on Windows XP.txt
Getting started with Linux for nOObs!.txt
Go to Windows updates anonymously.txt
Google Crack Search.txt
Google secrets.txt
Google Tips & Tricks, (utilizing search engine).txt
Government Computer Security Techniques.txt
Graffiti On Walls 4 Adobe Photoshop Cs 8.0.txt
Guide For Getting Free Stuff.txt
Guide to Hacking with sub7.doc
Guide to IIS Exploitation.txt
Guide to Slipstreaming Service Pack 2.txt
HACKDICT.TXT
Hacker Test.txt
Hackers A-Z.TXT
Hackers Who Break into Computer Systems.txt
hacking and phreaking.doc
Hacking Bank Of America's Home Banking System.txt
Hacking Compuserve Infomation Service.txt
Hacking Faq.txt
Hacking for Dummies Volume 2.doc
Hacking For Newbies.doc
Hacking GTE Telemail.txt
hacking in telnet ftp.rtf
Hacking IRC - The Definitive Guide.txt
hacking on Telnet explained.doc
hacking on XP part 1.doc
hacking on XP part 2.doc
hacking on XP part 3.doc
hacking on XP part 4.doc
hacking on XP part 5.doc
hacking password protected site.doc
Hacking Password Protected Website's.doc
hacking passwords.doc
Hacking PC-Pursuit Codes.txt
Hacking Techniques.txt
Hacking TRW.txt
Hacking TYMNET.txt
Hacking Unix System V's.txt
Hacking VoiceMail Systems.txt
Hacking Wal-Mart Computers.txt
Hacking Webpages.txt
Hard drive Gone Bad.txt
Hardware Firewall.txt
Have Notepad In Send To.txt
have satallite tv for almost free IF not free!!!.txt
Hex, How to turn binary or decimal to hex.txt
Hide Drives and Partitions.txt
How 2 Find EVERYTHING uploaded on Rapidshare.txt
How BT phone cards works.txt
How do I overburn a CD with Nero.txt
How do I remove an extra operating system from by.txt
How do I Test My VirusScan Installation.txt
How Do U See Hidden Files, Using DOS...txt
How Download MP3s from Fanscape.com or other Streaming Audio-Video.txt
How Linux boots.txt
How Long Has Your XP System Been Running.txt
How Phone Phreaks are Caught.txt
How the Traditional Media Clasifications Fail to Protect in t.txt
How To Access Your Folders From Your Taskbar.txt
How To Add A Url Address Bar To The Taskbar.txt
How To Add An Option To Print, the Contents of a Folder!.txt
How To Add Your Own Windows Tips.txt
How to Back Up the Registry.txt
How To Backup Ps2 Games.txt
How to Bill All Of your Fone Calls To Some Poor, Unsuspecting.txt
HOW TO BLOCK PEOPLE ON WINMX WHO SHARE NOTHING.txt
How To Block Websties Without Software, block websites.txt
How To Boot Xp Faster (updated).txt
How to build a black box.txt
how to burn quicker in windows xp.txt
How to Bypass BIOS Passwords.txt
How To Bypass Web Filters, tutorial.txt
HOW TO CAPTURE STREAMING MEDIA.txt
How To Change A Cmos Battery.txt
How to change the serial number used in Windows XP, Valid for XP Corporate.txt
How To Change Thumbnail Size And Quality.txt
How to clear Bios info 2.txt
How to clear Bios info.txt
How To Convert File System, fat - fat32 to ntfs.txt
How To Copy A Dvd Which Will Play On A X Box.txt
How to copy songs from your iPod to your PC.txt
How to crash AOL.txt
How To Customise Your start Button.txt
How To Delete Those Persistent Nasty Files.txt
How to dial out of a UNIX System.txt
How To Directly Go To Inbox, Write Msg, w Hotmail, no need for hotmail today - http users.txt
How To Disable Picture And Fax Viewer.txt
How to do a high Quality DivX rip.txt
How To Download Bittorrent Files.txt
How To Download Directly From Crackdb.com.txt
How To Download Movies, From IRC.txt
How to Download-Upload Files from email.txt
how to edit right click menu.rtf
how to execute chm files in linux.txt
How to Extend the life of the yousendit download links.txt
How to find a remote IP.txt
How To Find Ftp's The Easy Way'.txt
How to find MP3's real quickly.txt
How to find Security Holes.txt
How To Find Serial Numbers On Google.txt
How to fix corrupted files in XP.txt
How to fix Windows Installer problem.txt
How To Get A Free I-pod Or Flat Screen Tv, check it out.txt
How to get a Shell in 24 hours.txt
HOW TO GET ANY WINDOWS PASSWORD.txt
How to Get someones ISP password, Get free internet.txt
How To Get Top Ranking, Search Engines.txt
How to Hack UNIX System V.txt
How To Hack Windows Xp Admin Passwords.txt
How to hack-change your Windows XP Boot Screen.txt
how To Hide Yourself From Network Users!, And give access to only specific users!.txt
How To Increase Download Speeds By 100-200 Kbsec.txt
How to Install and run Windows CE on your USB Stick.txt
How to learn to hack in easy steps.doc
How to login to a C.B.I. System.txt
How To Make 5cds, 10cds Or 2dvds From Official Dow, These are same as Mandrake PowerPack+.txt
How to make a Free Phone Call.txt
How To Make A Kvcd.txt
how to make a new web site.txt
How To Make A Transparent Background, .fla .swf.txt
how to make a VCD from a DivX.txt
How To Make An Animted Logo.txt
How To Make Free Phone Calls.txt
How to make key generators.txt
How To Make Perfect Copies Of Maxis The Sims Discs, CloneCD Style!.txt
How To Make XP Go Faster.txt
How To make your own Radio Station 2.txt
How To Make Your Own Radio Station.txt
How To Make Your Own Radiostation.txt
HOW TO MANUAL - THE END OF DELETERS.txt
How to modify exe files.txt
How To Move Xp Harddrive To New Motherboard.txt
How To optimize DSL-CABLE connection speed.txt
How To Play Movies (divx Etc) With Subs.txt
How to Put an End to Unwanted or Harassing Phone Calls.HAR
How to recover MOST of scratched CD data discs.txt
How to Remove DRM Protection for Video Files.txt
How To Remove Ms Java Vm And Install Sun Java.txt
How To Remove Signin Details Of Msn Passport.txt
How To Remove The Default Admin$ Shares.txt
How to remove the Links folder in IE Favorites.txt
How to Remove WinXP Splash and See Operations.txt
How To Rename Extensions With Ease, with a Renamer.bat file!.txt
How to Rename File Extensions.txt
How To Rename Multiple Files In Winxp.txt
How To Restrict Login Hours Allowed.txt
How to safeguard your files when computer crashes.txt
How to save Windows xp updates.txt
how to search google for RAPIDSHARE links.txt
How To See Hidden Files, Using Dos.txt
How to send ICQ Bombs.txt
How To Set search For All Files In Winxp.txt
How to set up a http server running from you computer.txt
How To Set Up A Proxy In Flashget, As Requested.txt
How to set up a server with Apache , PHP , MySQL , Perl , phpMyAdmin.txt
How To Set Up Direct Connect.txt
HOW TO SET UP FTP SERVER.txt
How To Set Up Proxies In Your Browser.txt
How To Set Zone Alarm Settings!, Fix for ZA ports.txt
How To Setup Your Own Dns (Domain Name Server).txt
How To Speed Up A Slow Computer.txt
How To Speed Up Http Requests On Internet Explorer, as above.txt
How To Stop Spam.txt
How to swear in all languages.txt
How To Unload Cached Dll Files To Free Memory.txt
How to Use and How to Chain Multiple Proxies!.txt
How To Use File Compression In Windows Xp.txt
How To Use Google To Download Mp3's, and applications.....txt
How To Use Newsgroups.txt
How to use the Web to look up information on hacking.doc
How To Use You Gmail With Msn Messenger.txt
How-to Get Videos And Dvds Onto Your Sony PlayStation Portable (PSP) for free.txt
HOWTO Change Windows XP Home to Windows XP Pro.txt
Important Faqs For Sp2.txt
Improve Doom 3's Performances!!, simple but efficient trick for every1.txt
Improve your dialup modem preformance.txt
Increase XP Folder Settings.txt
Information of Hacking AngelFire Websites.txt
Insert Your Serial For Office 2k, auto install office.txt
Install A New Hard-disk.txt
Install Xp From Dos.txt
Installing Apache on Windows.txt
Installing Gentoo Linux, Amazing step by step tutoria.txt
Installing IIS On Windows Xp Pro.txt
Installing Slackware Linux.txt
Instructions For Removal Of Advertising In Msn Messenger.txt
Introduction to Denail of Service.txt
Ip Address Structure, Expilinatin OF IP Address {A short way}.txt
IP addressing, and gaining IP's.txt
IP Addressing.txt
IP how to.rtf
Irc How To Downlaod From, How to downlaod from IRC.txt
Irc Servers On nix, For people who want to start own IRC net.txt
ISSN Numbers- An Introduction.txt
Junk Mail- How Did They All Get My Address.txt
Keep Files Private.txt
Keep Folders Hidden.txt
Keyboard Shortcuts Result in Excel 2000 - Movement.txt
Keyboard Shortcuts, Microsoft Word.txt
Keyboard Shortcuts, must read.txt
Kill Microsoft Instant Messenger.txt
Lamination Tips, Its a Fast TUT......txt
Leet Way To Get Your Ip In Windows Xp.txt
LENROS~1.TXT
LENROS~2.TXT
Linking Your Xbox To Your Computer.txt
Linux Howto's.txt
List Of Sites Not To Go To.txt
Little help for anonymous mailer.txt
Lots Of Windows Xp Tips, Take A Look !.txt
Lyrics With Google.txt
Make A Autorun File For Ur Cd.txt
Make A Batch File To Clean UR PC!!, All In One!!.txt
Make A Roughly 16 Hour Video Dvd.txt
Make Acrobat Reader 6 load faster.txt
Make Dvd Iso From Suse 9.2 5 Cds Iso, Linux mode and Windows mode ISO creation.txt
Make Mp3 Files Smaller Without Losing Quality.txt
Make Your Own Ringtones For Mobile Phone, also logos, wallpaper, etc.txt
Make Your Pc Faster, Guaranteed.txt
MakeXPgoFaster.txt
making a .cue file, in notepad.txt
Making A .txt Executable Server.txt
Making Bootable Floppy Disk to Boot into Windows.txt
Making Cd Version Of Doom3 Into Dvd Version.txt
Making Web Page Fonts Consistent and Uniform.txt
Manage Saved Ie Passwords.txt
Mastering The Windows XP Registry.txt
Maximize Dial-up Modem Settings.txt
MEMETICS.TXT
Microsoft's Really Hidden Files, Reveled Hidden files.txt
MINDVOX.TXT
mIRC Not Just Another Chat Client, Download Anything You Want Almost.txt
mIRCcommands.txt
Misc Linux Tips & Tricks.txt
Missing Administrator Account.txt
Mobile Secret Codes.txt
Modify .exe Files And Crack A Program.txt
More Xp Tips and tricks make your computer more faster.txt
MORRIS~1.TXT
Moving and Removing the Start Button.txt
Msn Messenger & Gmail.txt
My Flash Bookmarks, long list of tutorials.txt
Myth about WPA ( How it is done ), Windows Product Activation Technique.txt
NEIDOR~1.TXT
Nero How To Verify The Validity Of The Sn U Use.txt
NetBios explained.doc
New Pc Or New Motherboard.txt
New Way To Relive Some Zinio File.txt
news groups the how to do.txt
NFS Tracing.txt
Nice list of windows shortcuts.txt
Nightline- FBI,Privacy,and Proposed Wire-Tapping Legislation.txt
No Text Icons.txt
Ntfs Cluster Size, better harddrive performance.txt
NY_2'S Guide to Obtaining An IP Address. .doc
Official Unattended Xp Cd Guide Xp Sp2 @ Msfn.org.txt
Open Windows Explorer To A Different Default Direc.txt
Optimize Broadband & Dsl Connections.txt
Optimize Emule Connection.txt
Organizational Analysis in Computer Science.txt
Outpost Rules, Outpost rules for system & app.txt
Outsmarting System File Protection.txt
Overclocking_Tutorial.txt
Packet Attacks - Version 1.1, { Packet_Attack_Exlained}.txt
Part 0 Dc++.txt
Part 1 Bittorrents.txt
Part 2 Irc (mirc).txt
Part 3 Ftp.txt
Partitioning Your Harddisk With Fdisk.txt
Pc File Extention Listing.txt
Pc Maintenance Guide.txt
Peer2mail Tutorial.txt
Performance Increase Through My Computer.txt
PGP Startup Guide.htm
Phone Systems Tutorial by The Jolly Roger.txt
Phreakers Handbook.txt
Play Games On PS2 Without ModChip.txt
Play On A Bnet Emulator, and f off cd key check =).txt
Port Numbers.txt
Presumed Guilty.txt
Problem With Internet Navigation, Clean Host File.txt
Proxy how to.rtf
Quick Fix For Spyware, Try This Before Doing Surgery on Your OS.txt
Quick Msc.txt
Quick Phone Modifications.txt
Quick Shutdown for XP, How to create a shutdown shortcut..txt
Quickly Start The Shared Folder Wizard.txt
Raising Hell with Unix.txt
Rapidshare hack!!!!! Free premium acount for all.txt
Rapidshare Hacked, unlimited upload, no countdown.txt
Rapidshare Timelimit.txt
Read This! Av Compare!.txt
Recover A Corrupted System File.txt
Recover a Quick erased CD RW.txt
Reformat&Reinstall.txt
Regedit.exe & Regedt32.exe, Whats the difference.txt
Registry Disassembled a basic tutorial.txt
Reinstall Internet Explorer 6.txt
Release Codes, Read, and Learn....txt
Remarks of the President and Vice President to Silicon Valley.txt
Remote Desktop Through Company Firewall.txt
Remote Shutdown.txt
Remove Linux From Your Pc Safely, ...and restoring your MBR.txt
Remove Msn Messenger From Xp, several ways...txt
Removing Banners From Free Webhosts.txt
Removing Norton Anti-virus 2004, How to remove the Registry Enteries.txt
Rename 'recycle Bin' To Whatever You Want.txt
Reregister All .dll Files Within Registry.txt
Reset your lost Bios Password.txt
Restore JPG,JPEG,JPE Default File associations, Win XP Tweak.txt
REVERSE CODING.txt
RIGGSB~1.TXT
RIGGS_~1.TXT
RIGHTS~1.TXT
RIVERA.TXT
Routing Basics.pdf
Run Aol Without Using Aol Browser & Save Resources, connect permanently and use any browser.txt
Running A Board forum From Your Own Pc.txt
Running Vanishing Console Programs With A Click!, Ever had a console program that vanis....txt
Safely Editing the Registry....txt
Save Your Desktop Icon Settings.txt
Saving and loading Photoshop actions.txt
Scheduled Tasks - Defrag, how to set up scheduled defrags.txt
ScreenLock Professional v2.0.41.txt
SEARCH eBOOK in FTP SEARCH ENGINE.txt
Search For Ebook Server With Google.com.txt
Search like a real warez d00dz, for warez of course!.txt
Searching For Something To Download, This may help.txt
Secret Backdoor To Many Websites.txt
Secrets Of Lock Picking.txt
Securing WinXP Pro (with what win-xp has to offer.txt
Securing your WINDOWS XP computer.txt
Security holes.txt
Seisure Warrent Documents for Ripco BBS.txt
Set Google as your Default Search in IE.txt
Set Win Explorer to open the folder you want!, Little trick.txt
sick of inserting winxp cd every time your pc asks, Change Default Location of i386 Folder.txt
sidebar fix.txt
Simple Tweaks For Peak Pc Graphics Performance.txt
Single Click Shutdown.txt
Single-click To Open An Item..., IF the Folder Options is grayed out.txt
Site Security Handbook.txt
SJ-DEC~1.TXT
SJ-RESP.TXT
Slow Loggon Time, one fix for problem.txt
Slow Opening Of File Dialogs.txt
SMTP-Simple Mail Transfer Protocol.txt
Some Cool Site For Tutorials.txt
Some Google Tricks, again.txt
Some More Tips To Improve Your Winxp.txt
Sp2 For Xp Slipstream, Integrate SP2 into your XP CD.txt
Sp2 Tweaks.txt
Speed Up Internet.txt
Speed up menu display.txt
Speed up Mozilla FireFox.txt
Speed Up Your Bandwidth By 20% !, Windows uses 20% of your bandwidth.txt
Speeding up menus in XP.txt
Speeding up your internet connection under Linux and Windows.html
Spoofing emails, via telenet.txt
Standard ASCII Character Set.txt
Steps to Clean Install XP.txt
Stop A Restart Process In 3steps.txt
Stop Annoying Pop-ups Without Pop-up Blockersoutli.txt
Summary of FBI Computer Systems.txt
SUNDEVIL.TXT
SUPREM~1.TXT
System Changes To Foil Hackers And Browser Hijacke.txt
System File Checker For Windows Xp.txt
TCP packet fragment attacks against firewalls and filters.txt
Tcpip A Mammoth Description, Short and easy-Everything U want to know.txt
Telenet-The Secret Exposed.txt
telnet trick port 25.doc
Testing Wattage Consumption Of Your Computer, Measuring your computer's wattage.txt
The ABC's of Payphones part 1.txt
The ABC's of Payphones part 2.txt
The ABC's of Payphones part 3.txt
The ABC's of Payphones part 4.txt
The Antivirus Defense-in-Depth Guide.txt
The Basics of Hacking- Introduction.txt
The Baudy World of the Byte Bandit-A Postmodernist Interpreta.txt
ThE Beige BoX .txt
The Constitution in Cyberspace.txt
The Cracking Manual.txt
The difference between DVD-R, DVD+R, DVD+RW and DVD-RW.txt
The Electronic Communication Privacy Act of 1986 - A Laymans .txt
The Greatest Hacker of all time.ASC
The Hacker's League.txt
The History of British Phreaking.htm
The Inner Circle Book's Hacking Techniques.txt
The Lamahs-Guide to Pirating Software on the Internet.txt
The M.M.C. Guide to Hacking, Phreaking, Carding.txt
The Modern Phreakers Guide To Beige Boxing.txt
The Modern Phreakers Guide To Payphones.txt
The Moterola Bible.txt
The Myth of the 2600Hz Detector .txt
The National Information Infrastructure-Agenda for Action.txt
The Newbies Handbook- ' How to beging in the World of Hacking.txt
The Newbies-User's Guide to Hacking.txt
The Official Phreaker's Manual.txt
The Phreakers Handbook-1.txt
The Port Guide, Port number and info.txt
The Pre-History of Cyberspace.txt
The Price of Copyright Violation.txt
The REAL way to hack RemoteAccess.txt
The Secret Service, UUCP,and The Legion of Doom.txt
The Telephone Works.txt
The Ultimate Guide To Installing Windows Xp Sp2.txt
The Ultimate Phreaking Guide .txt
the UNIX operating system (Berkley 4.2).txt
Theft of Computer Software-A National Security Threat.txt
Thoughts on the National Research and Education Network.txt
Three Ways Of Bypass Starforce Cd Protection.txt
Tip for shutdown windows - virus.txt
Tips And Tricks, Windows XP.txt
Tips on Starting Your Own BBS.1
Tired Of Reinstalling Windows.txt
To Get And Show The Ip Via Javascript.txt
Top 5 Myths About Safe Surfing, PC Magazine.txt
Transferring Data.txt
Translating Binary To Text.txt
Translating Binary to Text2.txt
Trojan Ports.txt
Turn MSN Messenger Display Pix into User Pix on XP.txt
Turn Off Unneeded Services, speed up pc.txt
Tutorial Get the serial number you need.txt
Tutorial How to create a bootable Windows XP SP1 CD (Nero).txt
Tutorials - blacksun.box.sk
Ultimate Google Way.txt
ULTIMATE GUIDE TO BYPASS BIOS PASSWORDS!.txt
Understanding the Telephone System.txt
undocumented DOS commands.txt
Uninstall Windows Xp And Return To My Old Windows.txt
Uninstalling Norton 2004 Products.txt
UNIX Computer Security Checklist.0
UNIX Use and Security - By the Prophet.txt
UNIX Use and Security From The Ground Up.htm
UNIX- A Hacking Tutorial.SIR
Unlimited Rapidshare Downloads.txt
Untold Window Tips.txt
Untold Windows Secrets.txt
Untold Windows Tips.txt
Unused space on hard drives recovered.txt
Use Hotkeys To Switch Programs.txt
Useful Download Guide, Fix Down, 0daycn Ttdown, Links.txt
User's Guide To Avoiding Virus Infections, Keeping an eye out for viruses.txt
Using Google As A Calculator, A Tutorial.txt
Using Google for searching ebooks.txt
Using Rapid Share, How to use them and skip the BS.txt
Video Avatars.txt
Viewing Leftover Driver Entries.txt
Virtual Memory Information.txt
Virtual Memory Optimization Guide Rev. 4.0 - Final.txt
Viruii FAQ.txt
Virus-Trojan FAQ.txt
Want To Download Torrent File By Using Google.txt
Warez Definations.txt
WAREZ DEFINITION.txt
Way To Download From Brturbo, FireFox.txt
We Don't Need No Education, Online classes made easy.txt
Welcome to The king's meaning's of how to kick some-one's ASS!.txt
What Files are Legal for Distribution on a BBS.txt
What is the Registry.txt
What Should I Do With Image Files.txt
What To Look For In A Code Hacking Program.htm
What To Look For In A Code Hacking Program.txt
What You Should Know About Computer Viruses.DNA
What You Wanted To Know About Movie Jargon, But Were Afraid To Ask.txt
When Good Discs Go Bad.txt
Where Is Winipcfg In Winxp.txt
Who's Seeding The Net With Spyware.txt
Why wait 35 Seconds at eZshare.txt
Win 2000 Dr. Watsson.txt
Windows 2000 Tips & Tricks.txt
Windows 2003 System Restore, How to activate system restore in W2K3.txt
Windows Scan Count Down Time.txt
Windows Shortcuts.txt
WINDOWS TRUE HIDDEN FILES.txt
Windows Tweak, Hack Your Start Button.txt
Windows Xp - Speed Up Your Network and Internet Access.txt
WINDOWS XP HIDDEN APPS.txt
Windows XP Registry Tweaks.txt
Windows XP Startup and Performance Tweaks.txt
Windows Xp Tips 'n' Tricks.txt
Windows Xp Tweaks, A work in progress.txt
Windows XP Tweaks.txt
WinRar Tutorial - Compression profiles, passwords and more.txt
Winsock 2 Repair.txt
WinXP 3 Tips.txt
Winxp Application Defrag, faster access for used programs.txt
Winxp Applications Startup Time, Decrease your Applications startup time.txt
WinXP Bootable CD.txt
Winxp System Response, reboot whitout rebooting.txt
Winxp Tips And Tricks, Winsock 2 repair.txt
Xp Auto Install.txt
Xp Folder View Does Not Stay To You're Setting., Grab your registry editor and join in.txt
XP REPAIR INSTALL.txt
XP Tweaking.txt
Yahoo + geocities Posts.txt
Yahoo Chat Commands how to.rtf
Yahoo Messeger, no ad's.txt
You Want Lots Of Music, Appz, Anything, Try Dex Hunting.txt
Your Home Page Nevr Being Changed.txt
Your Own Home Server - Introduction.txt
Zen and the Art of Fone Phreaking `97 .txt
[PHP] Navigations.txt
Label:
Hack
Kamis, 23 Oktober 2008
2600 Hertz Single Tone Generator Schematic
2600 Hertz Single Tone Generator Schematic
-------------------------------------------
Parts: 555 timer I.C.
8 ohm speaker |
9 volt battery & connector --+-- = connection
Pushbutton switch |
5k potentiometer
1k ohm resistor |
4.7 micro-farad capacitor ----- = no connection
3.3 micro-farad capacitor |
+----+-------------------------------+
| | |
| V 1k |
| /\/\/-+-/\/\/-+---------------+ |
+--------+ 5k | | | |
| ---|--------|-------|--------|--- | |
pshbtn | o | 8 7 6 5 | | |
switch -+ | | | |
| o ||| 5 5 5 | | |
| ||| TIMER | | |
| | | | |
(+)-----+ | 1 2 3 4 | | |
9 volts ---|--------|-------|--------|--- | |
(-)--------------+ | | | | |
| +-----------------------+ |
| 3.3uF | | |
+--->|--------------------+----------+
| |
4.7uF \_/ |
--- |
|(+) |
| ______ |
+----| 8ohm |----+
/__SPKR__\
To calibrate:
Play next to a pure 2600hz source and adjust the 5k potentiometer until the two
sounds are the same. As you get closer you will hear a beat tone form and get
slower and slower. When it stops, the two frequencies are equal. This takes a
little practice.
-------------------------------------------
Parts: 555 timer I.C.
8 ohm speaker |
9 volt battery & connector --+-- = connection
Pushbutton switch |
5k potentiometer
1k ohm resistor |
4.7 micro-farad capacitor ----- = no connection
3.3 micro-farad capacitor |
+----+-------------------------------+
| | |
| V 1k |
| /\/\/-+-/\/\/-+---------------+ |
+--------+ 5k | | | |
| ---|--------|-------|--------|--- | |
pshbtn | o | 8 7 6 5 | | |
switch -+ | | | |
| o ||| 5 5 5 | | |
| ||| TIMER | | |
| | | | |
(+)-----+ | 1 2 3 4 | | |
9 volts ---|--------|-------|--------|--- | |
(-)--------------+ | | | | |
| +-----------------------+ |
| 3.3uF | | |
+--->|--------------------+----------+
| |
4.7uF \_/ |
--- |
|(+) |
| ______ |
+----| 8ohm |----+
/__SPKR__\
To calibrate:
Play next to a pure 2600hz source and adjust the 5k potentiometer until the two
sounds are the same. As you get closer you will hear a beat tone form and get
slower and slower. When it stops, the two frequencies are equal. This takes a
little practice.
Label:
Hack
Minggu, 19 Oktober 2008
The Story Behind the Cipher Challenge: The toughest code ever cracked!
The Cipher Challenge was a set of ten encrypted messages to be found at the end of The Code Book, a history of codes and code breaking that I published last year. In addition to the intellectual reward of cracking all ten messages, there was a prize of £10,000 for the first person to solve the Challenge.
The Challenge was officially solved on October 7, 2000, after one year and one month of arduous effort by codebreakers, amateur and professional, around the world. This part of the website attempts to tell the story behind the Cipher Challenge. As well as this feature, it also contains essays by Jim Gillogly and John Palagyi, who might be considered as runners-up, and a highly readable 40-page report by the Swedish team who solved the Challenge (see below).
This section also contains the final leaderboard, which shows who cracked what, and a small gallery of photos that relate to the cipher challenge.
You can also find the actual ciphertexts on-line. Although the solutions are now public knowledge, you might want to exercise your brain and crack a few of them.
If you want to know more about the background to the Cipher Challenge then you can start by reading the rest of this introductory page.
Before continuing, for those of you intending to complete the Cipher Challenge for yourself, I must warn you that this page contains spoilers!
When I started to write The Code Book, it seemed natural to me that a book about the history of codes and codebreaking should contain some coded messages to stretch the mind of the reader.
Nobody should underestimate the achievement of the final winners.
I decided to include ten messages encrypted in ten different ways, the ten stages getting progressively harder. I hoped that all the readers would at least attempt to crack a few of the earlier stages and experience the thrill of unravelling a secret message.
I also hoped that some readers would get hooked and learn some of the more sophisticated techniques required to crack stages 6, 7 and 8. And, of course,
I wanted a few dedicated readers and crypto-fanatics to have a go at completing the entire Challenge.
The main aim of the Cipher Challenge was to set puzzles and get people interested in cracking codes. The Cipher Challenge seems to have achieved this, as tens of thousands of people have become involved in cracking my coded messages. I am convinced that these people are driven by curiosity and the thrill of the chase. The prize of £10,000 is merely there to add a little extra spice.
I constructed the Cipher Challenge while I was writing The Code Book, so in total it took two years to prepare it. The Challenge was compiled in complete secrecy, with great care being taken that no material relating to it ever fell into the wrong hands. Whenever I had gone through a process of jotting, encrypting, checking and deciphering a particular stage, I took the precaution of burning any resulting paper. I regularly went into my little garden, dipped the papers in molten wax and set them alight.
Compiling each stage was an absorbing process. For example, when I created the Enigma stage, I used a computer emulation. To double check it, I designed a paper Enigma cipher machine, which involved half a dozen strips of paper. Sliding the strips mimicked the action of the machine's rotors.
The Cipher Challenge incorporated the following principles:
a) 10 stages of increasing difficulty so that everybody can take part in at least a few of the stages.
b) A chronological series of cipher techniques; classic substitution, Caesar cipher, homophonic substitution, Vigenère cipher, book cipher, Playfair cipher, ADFGVX cipher, Enigma cipher, and two computer ciphers known as DES and RSA.
c) A variety of languages, 6 in total, were used, each language being appropriate to the cipher. For example, in stage 2 a Latin message was encrypted with the Caesar cipher, and in stage 4 a French message was encrypted with the Vigenère cipher. This made it tougher for codebreakers, but it made it more fun and a fairer challenge for everybody around the world. Remember, this was a worldwide competition.
d) It seemed that the early stages were accessible to everybody, but the latter stages would require a certain level of technical skill. I wondered if the winner might be a team made up of an amateur who had cracked the ancient ciphers and a computer expert who had cracked the latter two ciphers. In particular, I suspected that the one year prize might be won by amateurs and that the complete prize might be won by professionals. This is more or less what happened.
e) Stage 10 was intended to be the toughest public challenge cipher yet devised. Hence, I hoped that its cracking would help test the level of current codebreaking and perhaps stretch and encourage the development of algorithms.
In order to check the details of stages 9 and 10 of the Cipher Challenge, I confided in Paul Leyland, an encryption expert working for Microsoft in Cambridge. He acted as a trusted consultant, and he was the only person in the world who was aware of the solutions to these stages of the Cipher Challenge. In 1993-4, Paul led a global collaboration of 600 people to factor the RSA-129 challenge number, an effort which was probably the largest single computation performed to that date. This made him an ideal person to help me construct a fair and formidable stage 10. (Paul, thanks for all your help! You were a great source of support.)
The Cipher Challenge began in September 1999, with the publication of The Code Book, which was published in Britain and America, and also translated into Finnish, French, German, Dutch, Norwegian, Spanish and Swedish.
Very quickly, web groups became established, the largest of which was at e-Groups. It consisted of over 2,500 members who emailed each other offering support, advice and encouragement. I occasionally lurked on this group and was always entertained, informed and impressed by their exchanges. It was particularly entertaining to read the various theories concerning the infamous stage 5.
Another reflection of the widespread interest was shown at a cryptography seminar in Oxford, where Cipher Challengers from Britain, America, Sweden, Switzerland and Norway arranged to meet up. Whenever I gave talks, both in Britain and abroad, I would meet Cipher Challengers from all walks of life and of all ages - from novices and schoolchildren to mathematicians and professional cryptographers. There was even a Fields Medallist who became involved.
The progress of the Cipher Challenge is charted on the leaderboard and is briefly documented in the updates there, so I will not go through this again. However, I will say that I was initially worried that I had made the competition too easy, because the first four stages fell so rapidly. I was relieved to see that stage 5 stopped the rush for a while, but I was worried once again when Andrew Plater rattled his way through to stage 8.
The next breakthrough came when the team effort of Jim Gillogly, John Palagyi and EFF cracked stages 1 to 9 inclusive. Jim and John have written fascinating accounts of their exploits.
I had said that I would award £1,000 to the current leader on Oct 1, 2000, and this prize duly went to Jim, John and EFF.
Just a week later, my publishers received a fax from a team of Swedish researchers claiming that they had completed the entire Cipher Challenge. Two days later, on October 7, the formal claim arrived in the post. I called the spokesperson, Fredrik Almgren, and a somewhat cautious dialogue ensued. How did the Swedes know that this was really Simon Singh on the phone and not some impostor trying to steal their solution? I was the only other person in the world who also knew the plaintexts, and this became the decisive factor in establishing a relationship of trust.
The challenge was over.
The Swedish team consists of Fredrik Almgren (Across Wireless), Gunnar Andersson (Prover Technology), Torbjorn Granlund (SWOX), Lars Ivansson (Royal Institute of Technology, Stockholm) and Staffan Ulfberg (freelance consultant).
They began working on the Challenge soon after The Code Book was published in September 1999, when Fredrik Almgren was in London taking part in a juggling festival.
Unlike many of the other competitors, they remained very quiet about their achievements until they had completed all ten stages. Their stealth approach seems to have paid off. They have written an excellent 40-page document that outlines their trials and tribulations, available in the following formats:
HTML files
PDF files
PS files
DVI files
You can download the Adobe Acrobat Reader here.
Their report is not only an informative and amusing summary of their own approach to the Cipher Challenge, it is also a summary of the ciphertexts, keys, plaintexts and strategies.
Possibly the most interesting aspect of their achievement for expert cryptographers is that they were able to crack stage 10 without a supercomputer. The team wrote a number field sieve algorithm that was able to run on an 'ordinary' computer, and have thus demonstrated that factoring large numbers does not necessarily require supercomputers.
The main aim of the Cipher Challenge was to excite people, to get them interested in cryptography and codebreaking. The fact that thousands of people took up the challenge is tremendously satisfying.
A secondary aim was to demonstrate the strength of current ciphers. Stage 10 represents the sort of encryption that is sometimes used for Internet security, but the fact that it was broken does not mean that we should necessarily be worried about security on the Internet. It took a team of brilliant Swedish researchers several weeks and extremely powerful computing facilities to eventually decipher stage 10. This approach would not be practical for a thief who wanted to decipher some credit card details. The thief would require an investment of tens of thousands of pounds to get hold of a credit card with a cash limit of perhaps £1,000. Furthermore, it is easy to use a key that is orders of magnitude stronger than the one I used for stage 10. This results in an effectively unbreakable encryption system.
Perhaps more importantly, RSA is also used for so-called digital signatures, and 512-bit keys, such as the one used in stage 10, are widely used. Signatures often need to offer a guarantee of authenticity for decades, and so we need to be absolutely sure that they will remain secure in the future when computers become vastly more powerful. If a codebreaker can crack your RSA key then he can effectively forge your signature. Jumping to 1024-bit keys would re-establish a very high level of security, but a natural inertia means that many people continue to use 512-bit. The lesson is that it is important to monitor encryption standards and update them as the power of the codebreaker increases.
The third aim, a somewhat optimistic one, was the hope that the challenge might inspire some new codebreaking technique. The Swedish team did, in fact, rewrite the number field sieve algorithm so that it could operate on relatively ordinary computers, demonstrating that it is not necessary to use a supercomputer to factor a huge number.
At this point, it is time to bid a tearful farewell to the Cipher Challenge.
When I was preparing the Challenge, I sometimes wondered if it was worth it. Would anybody be interested in such a challenge? However, the reaction from readers has been incredibly gratifying, and I have been staggered by your enthusiasm, dedication, persistence, ingenuity, good humour and brilliance.
And, of course, congratulations to the winners. This includes John Palagyi and EFF, who received a well-deserved reward of £1,000 for their considerable efforts. In particular, Jim has been enormously generous over the last year, offering limitless advice and support to novice codebreakers and potential rivals.
Nobody should underestimate the achievement of the final winners. Cracking stage 10, particularly in such an innovative way, will be of significance to the cryptographic community. And not only have Fredrik Almgren, Gunnar Andersson, Torbjorn Granlund, Lars Ivansson and Staffan Ulfberg demonstrated a talent for cracking modern computer codes, they have also devoured a wide range of classic ciphers, from homophonic substitution to the Enigma cipher. The range of skills required to accomplish all of this is substantial.
Finally, thank you to everybody who took part in the Cipher Challenge and for making it such a success. It was a genuine pleasure meeting Cipher Challengers in various parts of the world, from Sydney to Milwaukee, and I only wish that I could have met more of you. If I do meet you, at least I will no longer have to be so tight-lipped. For a blabbermouth like me, the last two years have been a real struggle.
TLLWYBV HRNLM HRMTS
The Challenge was officially solved on October 7, 2000, after one year and one month of arduous effort by codebreakers, amateur and professional, around the world. This part of the website attempts to tell the story behind the Cipher Challenge. As well as this feature, it also contains essays by Jim Gillogly and John Palagyi, who might be considered as runners-up, and a highly readable 40-page report by the Swedish team who solved the Challenge (see below).
This section also contains the final leaderboard, which shows who cracked what, and a small gallery of photos that relate to the cipher challenge.
You can also find the actual ciphertexts on-line. Although the solutions are now public knowledge, you might want to exercise your brain and crack a few of them.
If you want to know more about the background to the Cipher Challenge then you can start by reading the rest of this introductory page.
Before continuing, for those of you intending to complete the Cipher Challenge for yourself, I must warn you that this page contains spoilers!
When I started to write The Code Book, it seemed natural to me that a book about the history of codes and codebreaking should contain some coded messages to stretch the mind of the reader.
Nobody should underestimate the achievement of the final winners.
I decided to include ten messages encrypted in ten different ways, the ten stages getting progressively harder. I hoped that all the readers would at least attempt to crack a few of the earlier stages and experience the thrill of unravelling a secret message.
I also hoped that some readers would get hooked and learn some of the more sophisticated techniques required to crack stages 6, 7 and 8. And, of course,
I wanted a few dedicated readers and crypto-fanatics to have a go at completing the entire Challenge.
The main aim of the Cipher Challenge was to set puzzles and get people interested in cracking codes. The Cipher Challenge seems to have achieved this, as tens of thousands of people have become involved in cracking my coded messages. I am convinced that these people are driven by curiosity and the thrill of the chase. The prize of £10,000 is merely there to add a little extra spice.
I constructed the Cipher Challenge while I was writing The Code Book, so in total it took two years to prepare it. The Challenge was compiled in complete secrecy, with great care being taken that no material relating to it ever fell into the wrong hands. Whenever I had gone through a process of jotting, encrypting, checking and deciphering a particular stage, I took the precaution of burning any resulting paper. I regularly went into my little garden, dipped the papers in molten wax and set them alight.
Compiling each stage was an absorbing process. For example, when I created the Enigma stage, I used a computer emulation. To double check it, I designed a paper Enigma cipher machine, which involved half a dozen strips of paper. Sliding the strips mimicked the action of the machine's rotors.
The Cipher Challenge incorporated the following principles:
a) 10 stages of increasing difficulty so that everybody can take part in at least a few of the stages.
b) A chronological series of cipher techniques; classic substitution, Caesar cipher, homophonic substitution, Vigenère cipher, book cipher, Playfair cipher, ADFGVX cipher, Enigma cipher, and two computer ciphers known as DES and RSA.
c) A variety of languages, 6 in total, were used, each language being appropriate to the cipher. For example, in stage 2 a Latin message was encrypted with the Caesar cipher, and in stage 4 a French message was encrypted with the Vigenère cipher. This made it tougher for codebreakers, but it made it more fun and a fairer challenge for everybody around the world. Remember, this was a worldwide competition.
d) It seemed that the early stages were accessible to everybody, but the latter stages would require a certain level of technical skill. I wondered if the winner might be a team made up of an amateur who had cracked the ancient ciphers and a computer expert who had cracked the latter two ciphers. In particular, I suspected that the one year prize might be won by amateurs and that the complete prize might be won by professionals. This is more or less what happened.
e) Stage 10 was intended to be the toughest public challenge cipher yet devised. Hence, I hoped that its cracking would help test the level of current codebreaking and perhaps stretch and encourage the development of algorithms.
In order to check the details of stages 9 and 10 of the Cipher Challenge, I confided in Paul Leyland, an encryption expert working for Microsoft in Cambridge. He acted as a trusted consultant, and he was the only person in the world who was aware of the solutions to these stages of the Cipher Challenge. In 1993-4, Paul led a global collaboration of 600 people to factor the RSA-129 challenge number, an effort which was probably the largest single computation performed to that date. This made him an ideal person to help me construct a fair and formidable stage 10. (Paul, thanks for all your help! You were a great source of support.)
The Cipher Challenge began in September 1999, with the publication of The Code Book, which was published in Britain and America, and also translated into Finnish, French, German, Dutch, Norwegian, Spanish and Swedish.
Very quickly, web groups became established, the largest of which was at e-Groups. It consisted of over 2,500 members who emailed each other offering support, advice and encouragement. I occasionally lurked on this group and was always entertained, informed and impressed by their exchanges. It was particularly entertaining to read the various theories concerning the infamous stage 5.
Another reflection of the widespread interest was shown at a cryptography seminar in Oxford, where Cipher Challengers from Britain, America, Sweden, Switzerland and Norway arranged to meet up. Whenever I gave talks, both in Britain and abroad, I would meet Cipher Challengers from all walks of life and of all ages - from novices and schoolchildren to mathematicians and professional cryptographers. There was even a Fields Medallist who became involved.
The progress of the Cipher Challenge is charted on the leaderboard and is briefly documented in the updates there, so I will not go through this again. However, I will say that I was initially worried that I had made the competition too easy, because the first four stages fell so rapidly. I was relieved to see that stage 5 stopped the rush for a while, but I was worried once again when Andrew Plater rattled his way through to stage 8.
The next breakthrough came when the team effort of Jim Gillogly, John Palagyi and EFF cracked stages 1 to 9 inclusive. Jim and John have written fascinating accounts of their exploits.
I had said that I would award £1,000 to the current leader on Oct 1, 2000, and this prize duly went to Jim, John and EFF.
Just a week later, my publishers received a fax from a team of Swedish researchers claiming that they had completed the entire Cipher Challenge. Two days later, on October 7, the formal claim arrived in the post. I called the spokesperson, Fredrik Almgren, and a somewhat cautious dialogue ensued. How did the Swedes know that this was really Simon Singh on the phone and not some impostor trying to steal their solution? I was the only other person in the world who also knew the plaintexts, and this became the decisive factor in establishing a relationship of trust.
The challenge was over.
The Swedish team consists of Fredrik Almgren (Across Wireless), Gunnar Andersson (Prover Technology), Torbjorn Granlund (SWOX), Lars Ivansson (Royal Institute of Technology, Stockholm) and Staffan Ulfberg (freelance consultant).
They began working on the Challenge soon after The Code Book was published in September 1999, when Fredrik Almgren was in London taking part in a juggling festival.
Unlike many of the other competitors, they remained very quiet about their achievements until they had completed all ten stages. Their stealth approach seems to have paid off. They have written an excellent 40-page document that outlines their trials and tribulations, available in the following formats:
HTML files
PDF files
PS files
DVI files
You can download the Adobe Acrobat Reader here.
Their report is not only an informative and amusing summary of their own approach to the Cipher Challenge, it is also a summary of the ciphertexts, keys, plaintexts and strategies.
Possibly the most interesting aspect of their achievement for expert cryptographers is that they were able to crack stage 10 without a supercomputer. The team wrote a number field sieve algorithm that was able to run on an 'ordinary' computer, and have thus demonstrated that factoring large numbers does not necessarily require supercomputers.
The main aim of the Cipher Challenge was to excite people, to get them interested in cryptography and codebreaking. The fact that thousands of people took up the challenge is tremendously satisfying.
A secondary aim was to demonstrate the strength of current ciphers. Stage 10 represents the sort of encryption that is sometimes used for Internet security, but the fact that it was broken does not mean that we should necessarily be worried about security on the Internet. It took a team of brilliant Swedish researchers several weeks and extremely powerful computing facilities to eventually decipher stage 10. This approach would not be practical for a thief who wanted to decipher some credit card details. The thief would require an investment of tens of thousands of pounds to get hold of a credit card with a cash limit of perhaps £1,000. Furthermore, it is easy to use a key that is orders of magnitude stronger than the one I used for stage 10. This results in an effectively unbreakable encryption system.
Perhaps more importantly, RSA is also used for so-called digital signatures, and 512-bit keys, such as the one used in stage 10, are widely used. Signatures often need to offer a guarantee of authenticity for decades, and so we need to be absolutely sure that they will remain secure in the future when computers become vastly more powerful. If a codebreaker can crack your RSA key then he can effectively forge your signature. Jumping to 1024-bit keys would re-establish a very high level of security, but a natural inertia means that many people continue to use 512-bit. The lesson is that it is important to monitor encryption standards and update them as the power of the codebreaker increases.
The third aim, a somewhat optimistic one, was the hope that the challenge might inspire some new codebreaking technique. The Swedish team did, in fact, rewrite the number field sieve algorithm so that it could operate on relatively ordinary computers, demonstrating that it is not necessary to use a supercomputer to factor a huge number.
At this point, it is time to bid a tearful farewell to the Cipher Challenge.
When I was preparing the Challenge, I sometimes wondered if it was worth it. Would anybody be interested in such a challenge? However, the reaction from readers has been incredibly gratifying, and I have been staggered by your enthusiasm, dedication, persistence, ingenuity, good humour and brilliance.
And, of course, congratulations to the winners. This includes John Palagyi and EFF, who received a well-deserved reward of £1,000 for their considerable efforts. In particular, Jim has been enormously generous over the last year, offering limitless advice and support to novice codebreakers and potential rivals.
Nobody should underestimate the achievement of the final winners. Cracking stage 10, particularly in such an innovative way, will be of significance to the cryptographic community. And not only have Fredrik Almgren, Gunnar Andersson, Torbjorn Granlund, Lars Ivansson and Staffan Ulfberg demonstrated a talent for cracking modern computer codes, they have also devoured a wide range of classic ciphers, from homophonic substitution to the Enigma cipher. The range of skills required to accomplish all of this is substantial.
Finally, thank you to everybody who took part in the Cipher Challenge and for making it such a success. It was a genuine pleasure meeting Cipher Challengers in various parts of the world, from Sydney to Milwaukee, and I only wish that I could have met more of you. If I do meet you, at least I will no longer have to be so tight-lipped. For a blabbermouth like me, the last two years have been a real struggle.
TLLWYBV HRNLM HRMTS
Label:
Hack
Choosing a Good Password
Your password is what tells the computer that you are who you say you are. Until we can do retina scans like in James Bond movies, the password is the best that we can do. But, because your password is like a key to your account, you need to safeguard it. Anyone who has your password can get into your account, and your files. Anyone who can guess your password has it. Anyone who has your password can pose as you. Therefore, you may be held responsible for someone else's actions, if they are able to get your password. You may not wish this to happen.
Tips on safeguarding your password
First and foremost, NEVER give your password to anyone. ``Anyone'' means your coworkers, your spouse, your systems administrator. In the event of an emergency, the sysadmin can change your password. Your sytems administrator never has a need to know your personal password. If someone needs to get onto our machines, and has a reason to be here, do not give them access to your account. Speak to the systems staff about us setting up an account for them. We would be very happy to give them one.
Make your password something you can remember. Do not write it down. If you really, honestly forget your password, we can easily give you a new one. We'd rather set your password once a month because you forgot it than have someone find it written down and gain unauthorized access to your account.
Make your password difficult for others to guess. This is not as hard as it initially seems. See the section below on chosing a good password.
DO NOT Change your password because of mail from someone claiming to be your systems administrator, supposedly needing access to your files!! This is a popular scam in some circles. Remember, your systems administrator never needs your password for any reason. If someone needs to ask you to change your password so that they can gain entry to your account, they do not have reason to be there.
We run sophisticated password crackers on the password files of our machines. If we guess your password, you will have to come see a staffer to have it changed. These are the same crackers that the bad guys have access to, so if you have a weak password, it's better if we find out about it first.
How Not to Choose a Password
Here are some of the types of passwords that will be picked up by our crackers:
Words in the dictionary.
Words in any dictionary.
Your user name.
Your real name.
Your spouse's name.
Anyone's name (crackers don't necessarily know that your aunt's middle name is Agnes, but it's easy enough to get a list of 100,000 names and try each one).
Any word in any ``cracking dictionary.'' There are lists of words that crackers use to try to crack passwords: passwords that a lot of people use. Some of these lists include:
Abbreviations, Asteroids, Biology, Cartoons, Character Patterns, Machine names, famous names, female names, Bible, male names, Movies, Myths-legends, Number Patterns, Short Phrases, Places, Science Fiction, Shakespeare, Songs, Sports, Surnames
Any of the above, with a single character before or after it (``8dinner'', ``happy1'').
Any of the above, capitalized (``cat'' --> ``Cat'')
Any of the above, reversed (``cat'' --> ``tac''), doubled (``cat'' --> ``catcat'') or mirrored (``cat'' --> ``cattac'').
We used to tell people that taking a word and substituting some characters (a 0 (zero) for an o, or a 1 for an l) made a good password. This is no longer the case. New crackers have the capability to crack things like this, in certain situations.
Words like ``foobar'', ``xyzzy'' and ``qwerty'' are still just plain words. They are also popular passwords, and the crack programs look for them. Avoid them.
Any of the sample passwords, good or bad, mentioned in this document.
How to Choose a Good Password
I know that coming up with a good password can be difficult, so here are some guidelines to use.
Choose a password that is at least six characters long. This should be long enough to discourage a brute-force attack. Currently, the maximum password length on many Unix systems is eight characters, but if you want to add a few more characters to make it easier to remember, go ahead. Just bear in mind that anything after the eighth character will be ignored (so ``abnormalbrain'' is the same as ``abnormal'').
In general, a good password will have a mix of lower- and upper-case characters, numbers, and punctuation marks, and should be at least 6 characters long. Unfortunately, passwords like this are often hard to remember and result in people writing them down. Do not write your passwords down!
The license plate rule: take a phrase and try to squeeze it into eight characters, as if you wanted to put it on a vanity license plate.
Some people like to pick several small words, separated by punctuation marks of some kind.
Put a punctuation mark in the middle of a word, e.g., ``vege%tarian''.
Use some unusual way of contracting a word. You don't have to use an apostrophe.
One of my favorite passwords was ``kEp*-h&y'': ``kEp'' --> ``keep'', ``*-'' --> ``laser'' (like those signs that you see outside of physics labs), and ``h&y'' --> ``handy''; ``Keep your laser handy!''
You can use control characters. Just bear in mind that a lot of them have special meanings. If you use ^D, ^H or ^U, for example, you might not be able to log in again.
Think of an uncommon phrase, and take the first, second or last letter of each word. ``You can't always get what you want'' would yield ``ycagwyw''. Throw in a capital letter and a puntuation mark or a number or two, and you can end up with ``yCag5wyw''.
Deliberately misspelling one or more words can make your password harder to crack.
Use several of the techniques above.
Something that no one but you would ever think of. The best password is one that is totally random to anyone else except you. It is difficult to tell you how to come up with these, but people are able to do it. Use your imagination!
Last updated: June 1999 Thursday, 03-Oct-2002 15:30:42 EDT
Authors: Joe Sanjour, Andrew Arensburger, Anne Brink.
Tips on safeguarding your password
First and foremost, NEVER give your password to anyone. ``Anyone'' means your coworkers, your spouse, your systems administrator. In the event of an emergency, the sysadmin can change your password. Your sytems administrator never has a need to know your personal password. If someone needs to get onto our machines, and has a reason to be here, do not give them access to your account. Speak to the systems staff about us setting up an account for them. We would be very happy to give them one.
Make your password something you can remember. Do not write it down. If you really, honestly forget your password, we can easily give you a new one. We'd rather set your password once a month because you forgot it than have someone find it written down and gain unauthorized access to your account.
Make your password difficult for others to guess. This is not as hard as it initially seems. See the section below on chosing a good password.
DO NOT Change your password because of mail from someone claiming to be your systems administrator, supposedly needing access to your files!! This is a popular scam in some circles. Remember, your systems administrator never needs your password for any reason. If someone needs to ask you to change your password so that they can gain entry to your account, they do not have reason to be there.
We run sophisticated password crackers on the password files of our machines. If we guess your password, you will have to come see a staffer to have it changed. These are the same crackers that the bad guys have access to, so if you have a weak password, it's better if we find out about it first.
How Not to Choose a Password
Here are some of the types of passwords that will be picked up by our crackers:
Words in the dictionary.
Words in any dictionary.
Your user name.
Your real name.
Your spouse's name.
Anyone's name (crackers don't necessarily know that your aunt's middle name is Agnes, but it's easy enough to get a list of 100,000 names and try each one).
Any word in any ``cracking dictionary.'' There are lists of words that crackers use to try to crack passwords: passwords that a lot of people use. Some of these lists include:
Abbreviations, Asteroids, Biology, Cartoons, Character Patterns, Machine names, famous names, female names, Bible, male names, Movies, Myths-legends, Number Patterns, Short Phrases, Places, Science Fiction, Shakespeare, Songs, Sports, Surnames
Any of the above, with a single character before or after it (``8dinner'', ``happy1'').
Any of the above, capitalized (``cat'' --> ``Cat'')
Any of the above, reversed (``cat'' --> ``tac''), doubled (``cat'' --> ``catcat'') or mirrored (``cat'' --> ``cattac'').
We used to tell people that taking a word and substituting some characters (a 0 (zero) for an o, or a 1 for an l) made a good password. This is no longer the case. New crackers have the capability to crack things like this, in certain situations.
Words like ``foobar'', ``xyzzy'' and ``qwerty'' are still just plain words. They are also popular passwords, and the crack programs look for them. Avoid them.
Any of the sample passwords, good or bad, mentioned in this document.
How to Choose a Good Password
I know that coming up with a good password can be difficult, so here are some guidelines to use.
Choose a password that is at least six characters long. This should be long enough to discourage a brute-force attack. Currently, the maximum password length on many Unix systems is eight characters, but if you want to add a few more characters to make it easier to remember, go ahead. Just bear in mind that anything after the eighth character will be ignored (so ``abnormalbrain'' is the same as ``abnormal'').
In general, a good password will have a mix of lower- and upper-case characters, numbers, and punctuation marks, and should be at least 6 characters long. Unfortunately, passwords like this are often hard to remember and result in people writing them down. Do not write your passwords down!
The license plate rule: take a phrase and try to squeeze it into eight characters, as if you wanted to put it on a vanity license plate.
Some people like to pick several small words, separated by punctuation marks of some kind.
Put a punctuation mark in the middle of a word, e.g., ``vege%tarian''.
Use some unusual way of contracting a word. You don't have to use an apostrophe.
One of my favorite passwords was ``kEp*-h&y'': ``kEp'' --> ``keep'', ``*-'' --> ``laser'' (like those signs that you see outside of physics labs), and ``h&y'' --> ``handy''; ``Keep your laser handy!''
You can use control characters. Just bear in mind that a lot of them have special meanings. If you use ^D, ^H or ^U, for example, you might not be able to log in again.
Think of an uncommon phrase, and take the first, second or last letter of each word. ``You can't always get what you want'' would yield ``ycagwyw''. Throw in a capital letter and a puntuation mark or a number or two, and you can end up with ``yCag5wyw''.
Deliberately misspelling one or more words can make your password harder to crack.
Use several of the techniques above.
Something that no one but you would ever think of. The best password is one that is totally random to anyone else except you. It is difficult to tell you how to come up with these, but people are able to do it. Use your imagination!
Last updated: June 1999 Thursday, 03-Oct-2002 15:30:42 EDT
Authors: Joe Sanjour, Andrew Arensburger, Anne Brink.
Label:
Hack
Activism, Hacktivism, and Cyberterrorism: The Internet as a Tool for Influencing Foreign Policy by Dorothy E. Denning
Activism, Hacktivism, and Cyberterrorism:
The Internet as a Tool for Influencing Foreign Policy
Dorothy E. Denning
Georgetown University
The conflict over Kosovo has been characterized as the first war on the Internet. Government and non-government actors alike used the Net to disseminate information, spread propaganda, demonize opponents, and solicit support for their positions. Hackers used it to voice their objections to both Yugoslav and NATO aggression by disrupting service on government computers and taking over their Web sites. Individuals used it to tell their stories of fear and horror inside the conflict zone, while activists exploited it to amplify their voices and reach a wide, international audience. And people everywhere used it to discuss the issues and share text, images, and video clips that were not available through other media. In April, the Los Angeles Times wrote that the Kosovo conflict was "turning cyberspace into an ethereal war zone where the battle for the hearts and minds is being waged through the use of electronic images, online discussion group postings, and hacking attacks."1 Anthony Pratkanis, professor of psychology at the University of California, Santa Cruz, and author of Age of Propaganda: The Everyday Use and Abuse of Persuasion, observed, "What you're seeing now is just the first round of what will become an important, highly sophisticated tool in the age-old tradition of wartime propaganda.... The war strategists should be worried about it, if they aren't yet."
Just how much impact did the Internet have on foreign policy decisions relating the war? It clearly had a part in the political discoursetaking place, and it was exploited by activists seeking to alter foreign policy decisions. It also impacted military decisions. While NATO targeted Serb media outlets carrying Milosovic's propaganda, it intentionally did not bomb Internet service providers or shut down the satellite links bringing the Internet to Yugoslavia. Policy instead was to keep the Internet open. James P. Rubin, spokesman for the U.S. State Department, said "Full and open access to the Internet can only help the Serbian people know the ugly truth about the atrocities and crimes against humanity being perpetrated in Kosovo by the Milosevic regime."2 Indirectly, the Internet may have also affected public support for the war, which in turn might have affected policy decisions made during the course of the conflict.
The purpose of this paper is to explore how the Internet is altering the landscape of political discourse and advocacy, with particular emphasis on how it is used by those wishing to influence foreign policy. Emphasis is on actions taken by nonstate actors, including both individuals and organizations, but state actions are discussed where they reflect foreign policy decisions triggered by the Internet. The primary sources used in the analysis are news reports of incidents and events. These are augmented with interviews and survey data where available. A more scientific study would be useful.
The paper is organized around three broad classes of activity: activism, hacktivism, and cyberterrorism. The first category, activism, refers to normal, non-disruptive use of the Internet in support of an agenda or cause. Operations in this area includes browsing the Web for information, constructing Web sites and posting materials on them, transmitting electronic publications and letters through e-mail, and using the Net to discuss issues, form coalitions, and plan and coordinate activities. The second category, hacktivism, refers to the marriage of hacking and activism. It covers operations that use hacking techniques against a target=s Internet site with the intent of disrupting normal operations but not causing serious damage. Examples are Web sit-ins and virtual blockades, automated e-mail bombs, Web hacks, computer break-ins, and computer viruses and worms. The final category, cyberterrorism, refers to the convergence of cyberspace and terrorism. It covers politically motivated hacking operations intended to cause grave harm such as loss of life or severe economic damage. An example would be penetrating an air traffic control system and causing two planes to collide. There is a general progression toward greater damage and disruption from the first to the third category, although that does not imply an increase of political effectiveness. An electronic petition with a million signatures may influence policy more than an attack that disrupts emergency 911 services.
Although the three categories of activity are treated separately, the boundaries between them are somewhat fuzzy. For example, an e-mail bomb may be considered hacktivism by some and cyberterrorism by others. Also, any given actor may conduct operations across the spectrum. For example, a terrorist might launch viruses as part of a larger campaign of cyberterrorism, all the while using the Internet to collect information about targets, coordinate action with fellow conspirators, and publish propaganda on Web sites. Thus, while the paper distinguishes activists, hacktivists, and terrorists, an individual can play all three roles.
The following sections discuss and give examples of activity in each of these three areas. The examples are drawn from the Kosovo conflict, cryptography policy, human rights in China, support for the Mexican Zapatistas, and other areas of conflict. The examples are by no means exhaustive of all activity in any of these areas, but intended only to be illustrative. Nevertheless, they represent a wide range of players, targets, and geographical regions.
The main conclusion of the paper is that the Internet can be an effective tool for activism, especially when it is combined with other communications media, including broadcast and print media and face-to-face meetings with policy makers. It can benefit individuals and small groups with few resources as well as organizations and coalitions that are large or well-funded. It facilitates activities such as educating the public and media, raising money, forming coalitions across geographical boundaries, distributing petitions and action alerts, and planning and coordinating events on a regional or international level. It allows activists in politically repressive states to evade government censors and monitors.
With respect to hacktivism and cyberterrorism, those who engage in such activity are less likely to accomplish their foreign policy objectives than those who do not employ disruptive and destructive techniques. They may feel a sense of empowerment, because they can control government computers and get media attention, but that does not mean they will succeed in changing policy. The main effect is likely to be a strengthening of cyberdefense policies, both nationally and internationally, rather than accommodation to the demands of the actors.
Activism
The Internet offers a powerful tool for communicating and coordinating action. It is inexpensive to use and increasingly pervasive, with an estimated 201 million on-line as of September 1999.3 Groups of any size, from two to millions, can reach each other and use the Net to promote an agenda. Their members and followers can come from any geographical region on the Net, and they can attempt to influence foreign policy anywhere in the world. This section describes five modes of using the Internet: collection, publication, dialogue, coordination of action, and direct lobbying of decision makers. While treated separately, the modes are frequently used together and many of the examples described here illustrate multiple modes.
Collection
One way of viewing the Internet is as a vast digital library. The World Wide Web alone offers about a billion pages of information, and much of the information is free. Activists may be able to locate legislative documents, official policy statements, analyses and discussions about issues, and other items related to their mission. They may be able to find names and contact information for key decision makers inside the government or governments they ultimately hope to influence. They may be able to identify other groups and individuals with similar interests, and gather contact information for potential supporters and collaborators. There are numerous tools that help with collection, including search engines, e-mail distribution lists, and chat and discussion groups. Many Web sites offer their own search tools for extracting information from databases on their sites.
One advantage of the Internet over other media is that it tends to break down barriers erected by government censors. For example, after Jordanian officials removed an article from 40 print copies of the Economist on sale in Jordan, a subscriber found a copy on-line, made photocopies, and faxed it to 1,000 Jordanians. According to Daoud Kuttab, head of the Arabic Media Internal Network (AMIA), the government would have been better off leaving the print version intact. "We found this very exciting," he said. "For the first time the traditional censorship that exists within national borders was bypassed." Kuttab said AMIA opened Jordanian journalists to the non-Arab world and use of the Web as a research tool. "In the Jordanian media, we have been able to detect a much more open outlook to the world as well as to Arab issues," he said.4
The Internet itself is not free of government censorship. According to Reporters Sans Frontiers, 45 countries restrict their citizens' access to the Internet, typically by forcing them to subscribe to a state-run Internet service provider, which may filter out objectionable sites.5 Authoritarian regimes recognize the benefits of the Internet to economic growth, but at the same time feel threatened by the unprecedented degree of freedom of speech.
Chinese authorities block access to Web sites that are considered subversive to government objectives. This has been only partially effective, however, and Chinese activists have found ways of slipping information past the controls. For example, the editors of VIP Reference, a Washington-based electronic magazine with articles and essays about democratic and economic evolution inside China, e-mails their electronic newsletter directly to addresses inside mainland China. The e-mail is sent from a different address every day to get past e-mail blocks. It is also delivered to random addresses, compiled from commercial and public lists, so that recipients can deny having deliberately subscribed. As of January, about 250,000 people received the pro-democracy publication, including people inside the government who did not want it. Chinese officials were not, however, complacent. When 30-year-old Shanghai software entrepreneur Lin Hai sold 30,000 e-mail addresses to VIP Reference, he was arrested and later sentenced to two years in prison. In addition, authorities fined him 10,000 yuan (HK$9,300) and confiscated his computer equipment and telephone. Lin was said to be the first person convicted in China for subversive use of the Internet. He claimed he was only trying to drum up business and was not politically active.6
During the Kosovo conflict, people in Yugoslavia had full access to the Internet, including Western news sites. The Washington Post reported that according to U.S. and British officials, the government controlled all four Internet access providers in Yugoslavia and kept them open for the purpose of spreading disinformation and propaganda. The Post also said that Belgrade, with a population of 1.5 million, had about 100,000 Internet connections in mid-April.7 Individuals without their own connections could get access at Internet cafes.
Even though Serbs had access to Western news reports, both through the Internet and through satellite and cable television, many did not believe what they saw and heard from Western media. They considered coverage on Western television stations such as CNN and Sky News to be as biased as that on the Yugoslav state-run station, citing instances when Western reports of Serbian atrocities turned out to be wrong. Alex Todorovic, a Serbian-American who spent time in Belgrade during the conflict observed, "By and large, Serbs mistrust the rest of the world=s media. CNN, for example, is considered the official voice of Washington."8 Some Yugoslav surfers did not even bother looking at Western news sites on the Internet. When asked if she visited Web sites of Western news stations, one 22-year-old student replied, "No, I don=t believe in their information, so why should I upset myself?"9 Thus, it is not clear that the decision on the part of either Milosovic or NATO to keep the Internet open in Yugoslavia undermined Milosovic=s objectives. Further, given that people living in Yugoslavia personally witnessed and felt the effects of the NATO bombing and either disbelieved reports or heard little about Serb atrocities against the ethnic Albanians in Kosovo, it is not surprising that an anti-NATO discourse ran throughout Belgrade. As one pharmacist observed, "I have two children. The people who are bombing my kids are my only enemy right now."10
In addition to information relating to a particular policy issue, the Web offers cyberactivists various information that can help them use the Net effectively. For example, NetAction offers a training guide for the virtual activist. The guide provides information on the use of e-mail for outreach, organizing, and advocacy; Web-based outreach and advocacy tools; membership and fundraising; netiquette and policy issues; and various resources.11
Publication
The Internet offers several channels whereby advocacy groups and individuals can publish information (and disinformation) to further policy objectives. They can send it through e-mail and post it to newsgroups. They can create their own electronic publications or contribute articles and essays to those of others. They can put up Web pages with documents, images, audio and video clips, and other types of information. The Web sites can serve as a gathering place and source of information for supporters, potential supporters, and onlookers.
One reason the Internet is popular among activists is its cost advantage over traditional mass media. It is easier and cheaper to post a message to a public forum or put up a Web site than it is to operate a radio or television station or print a newspaper. Practically anyone can afford to be a publisher. In addition, the reach of the Internet is global. A message can potentially reach millions of people at no additional cost to the originator. Further, activists can control their presentation to the world. They decide what is said and how. They do not have to rely on the mass media to take notice and tell their story "right."
During the Kosovo conflict, organizations and individuals throughout the world used their Web sites to publish information related to the conflict and, in some cases, to solicit support. Non-government organizations with Kosovo-related Web pages included the press, human rights groups, humanitarian relief organizations, churches, and women=s groups.
Government Web sites on Kosovo tended to feature propaganda and materials that supported their official policies. An exception was the U.S. Information Agency Web site, which presented a survey of news stories from around the world, some of which were critical of NATO actions.12 Jonathan Spalter, USIA Chief Information Officer, commented that "The measure of our success is the extent to which we are perceived not as propaganda but anti-propaganda."13
The British government's Foreign Office used their Web site, in part, to counter Serb propaganda. Concerned that the Yugoslav public was getting a highly distorted view of the war, Foreign Secretary Robin Cook posted a message on their Web site intended for the Serbs. The message said that Britain has nothing against the Serbs, but was forced to act by the scale of Yugoslav President Slobodan Milosevic's brutality.14 British Defense Secretary George Robertson said the Ministry of Defence (MoD) had translated its Web site into Serbian to counter censorship by Belgrade of the news.15
The Yugoslav media was controlled by the Serbian government and served to promote Milosevic's policies. Yugoslavia had an independent, pro-democracy radio station, B92, but it was raided by the police in the early days of the Kosovo conflict and turned over to a government-appointed station manager.16 B92 had had a run-in with the government earlier in late 1996 when government jammers tried to keep it from airing news broadcasts. At that time, however, B92 prevailed, in part by encoding their news bulletins in RealAudio format and posting them on a Web site in Amsterdam. Radio Free Europe acquired tapes of the news programs and rebroadcasted them back to the Serbs, circumventing the jammers, who then gave up.17 But when the government took over B92's facility in 1999, B92's then-managers ceded to the government and also discontinued posting materials on their Web site, which had offered viewers a reliable source of information about the conflict. This was considered a great loss to Yugoslavia's pro-democracy movement and general public, which had rallied behind Belgrade's top-rated news station.
A few individuals inside Yugoslavia posted to the Internet first-hand accounts of events as they were being witnessed or shortly thereafter. Their stories told of fear and devastation, the latter caused not only by the Serb military, but also by NATO bombs. By all accounts, the situation inside Yugoslavia was horrible for citizens everywhere, whether Serbian or ethnic Albanian. The stories may have inspired activists and influenced public opinion, but it is not clear what if any impact they had on government decision making.
New-media artists used to the Web to voice their opinions on the Balkans conflict. In late March, artist and high-school teacher Reiner Strasser put up a site called Weak Blood, which featured works of visual poetry, kinetic imagery, and interactive art, all making an anti-violence statement. Strasser vowed to add one or two pieces a day "as long as bombs are falling and humans are massacred" in the region.18
Some Serbs with Internet access sent e-mails to American news organizations calling for an end to the NATO bombing. Many of the messages contained heated rhetoric that was anti-NATO and anti-U.S. One letter directed to the Associated Press ended, "To be a Serb now is to be helpless ... to listen to the euphemistic and hypocritic phrases as 'peace-making mission,' moral imperative." Other messages contained human stories about how their lives were affected. Tom Reid, London correspondent to the Washington Post, said he received 30-50 messages a day from professors at universities and activists all over Yugoslavia. The general tenor of the messages was all the same, "'Please remember there are human beings under your bombs,'" he said.19 The Serbs used e-mail distribution lists to reach tens of thousands of users, mostly in the United States, with messages attacking the NATO bombing campaign. One message read AIn the last nine days, NATO barbarians have bombed our schools, hospitals, bridges, killed our people but that was not enough for them now they have started to destroy our culture monuments which represents the core of existence of our nation.@ Most recipients were annoyed by this unwanted "spam," which the Wall Street Journal dubbed AYugospam.@20
Dennis Longley, a professor in the Information Security Research Centre at Australia's Queensland University of Technology, said they received a suspicious e-mail from Serbia. The message had two paragraphs. The first was the usual friendly greetings, while the second was a rant about NATO that read like pure propaganda, characterizing NATO as a "terrorist organization" that "brought nothing but a gigantic humanitarian disaster to Kosovo," while attributing the cause of the problem to "albanian terrorist and separatist actions, not the repression by the government security forces." The second paragraph exhibited a style unlike the first and a standard of English well below that of the sender, leading them to speculate that Serb authorities had modified the e-mail.21 If that is so, one is left wondering how much other anti-NATO talk hitting the Net was the work of the government.
Of course, not all of the messages coming out of the Balkans were anti-NATO. Shortly after the Kosovo conflict began, I found myself on a list called "kcc-news," operated by the Kosova [sic] Crisis Center from the Internet domain "alb-net.com." The messages included Human Rights Flashes from Human Rights Watch, Action Alerts from the Kosova Task Force,22 and other appeals for support in the war against the Serbs. One message contained a flier calling for "sustained air strikes until total Serb withdrawal" and "ground troops to STOP GENOCIDE now." The flier included links to Web pages that documented Serb atrocities and aggression.
Even though the Yugoslav government did not prohibit Internet activity, fear of government reprisals led some to post their messages through anonymous remailers so they could not be identified. This allowed for a freer discourse on Internet discussion groups and contributed to the spread of information about the situation inside Belgrade and Kosovo. Microsoft Corp. initiated a section called "Secret Dispatches from Belgrade" on the Web site of their online magazine Slate. An anonymous correspondent gives daily reports of both alleged Serb atrocities and civilian suffering inflicted by NATO bombs.23
After human rights organizations expressed concern that the Yugoslav government might be monitoring Internet activity and cracking down on anyone expressing dissenting views, Anonymizer Inc., a provider of anonymous Web browsing and e-mail services, launched the Kosovo Privacy Project Web site. The site, which went on-line in April, offered surfers anonymous e-mail and instant, anonymous access to Voice of America, Radio Free Europe, and about 20 other Web sites. According to Federal Computer Week, Anonymizer planned to add NATO and other Western government information sites to the Kosovo list, and to launch similar projects for human rights situations in other parts of the world, for example, China.24 However, the effectiveness of the Kosovo project was never established. In August, USA Today reported that activists said the project was little noticed inside Kosovo, where traditional media seemed unaware while the fighting knocked out Internet trunk lines in short order.25
The Internet has raised numerous policy issues in such areas as privacy, encryption, censorship, electronic commerce, international trade, intellectual property protection, taxation, Internet governance, cybercrime, and information warfare, all of which have a foreign policy dimension. As the issues surfaced and took on some urgency, existing industry and public-interest groups began to address them. In addition, both national and international advocacy groups sprung up specifically devoted to Internet issues. They all operate Web sites, where they publish policy papers and information about issues, events, and membership. Many also send out e-mail newsletters and alerts.
In the area of encryption policy, for example, the major players include Americans for Computer Privacy (ACP), the Center for Democracy and Technology (CDT), Cyber-Rights & Cyber Liberties, the Electronic Frontier Foundation (EFF), the Electronic Privacy Information Center (EPIC), the Global Internet Liberty Campaign (GILC), and the Internet Privacy Coalition. The ACP has perhaps the largest group of constituents, being composed of 40 trade associations, over 100 companies, and more than 3,000 individual members.26 GILC is one of the most global, with member organizations from Europe, North America, Australia, and Asia.
In July 1999, nine leading U.S.-based Internet companies joined forces to become the voice of the Internet on issues such as privacy, consumer protection, and international trade. The industry group, called NetCoalition.com, includes America Online, Amazon.com, eBay, Lycos, Yahoo!, DoubleClick, Excite@Home, Inktomi, and Theglobe.com. The companies represent 7 of the top 10 Internet sites and more than 90% of the world=s Internet users visit one of the sites at least once a month. The group plans to focus on 150 Internet-related bills that were introduced in Congress.27
The Internet is used extensively as a publication medium by hackers (including hacktivists) and terrorists. Hackers publish electronic magazines and put up Web sites with software tools and information about hacking, including details about vulnerabilities in popular systems (e.g., Microsoft Windows) and how they can be exploited, programs for cracking passwords, software packages for writing computer viruses, and scripts for disabling or breaking into computer networks and Web sites. In March 1997, an article in the New York Times reported that there were an estimated 1,900 Web sites purveying hacking tips and tools, and 30 hacker publications.28
Terrorist groups use the Internet to spread propaganda. Back in February 1998, Hizbullah was operating three Web sites: one for the central press office (www.hizbollah.org), another to describe its attacks on Israeli targets (www.moqawama.org), and the third for news and information (www.almanar.com.lb).29 That month, Clark Staten, executive director of the Emergency Response & Research Institute (ERRI) in Chicago, testified before a U.S. Senate subcommittee that "even small terrorist groups are now using the Internet to broadcast their message and misdirect/misinform the general population in multiple nations simultaneously." He gave the subcommittee copies of both domestic and international messages containing anti-American and anti-Israeli propaganda and threats, including a widely distributed extremist call for Ajihad@ (holy war) against America and Great Britain.30 In June 1998, U.S. News & World Report noted that 12 of the 30 groups on the U.S. State Department=s list of terrorist organizations are on the Web. As of August 1999, it appears that virtually every terrorist group is on the Web, along with a mishmash of freedom fighters, crusaders, propagandists, and mercenaries.31 Forcing them off the Web is impossible, because they can set up their sites in countries with free-speech laws. The government of Sri Lanka, for example, banned the separatist Liberation Tigers of Tamil Eelam, but they have not even attempted to take down their London-based Web site.32
Dialogue
The Internet offers several venues for dialogue and debate on policy issues. These include e-mail, newsgroups, Web forums, and chat. Discussions can be confined to closed groups, for example through e-mail, as well as open to the public. Some media sites offer Web surfers the opportunity to comment on the latest stories and current issues and events. Government officials and domain experts may be brought in to serve as catalysts for discussion, debate issues, or answer questions. Discussion can even take place on Web sites that themselves lack such facilities. Using Gooey software from the Israeli company Hypernix, for example, visitors to a Web site can chat with other Gooey users currently at the site.33
Internet discussion forums are frequently used to debate, blast, and maybe even attempt to influence government policies. Encryption policy, for example, is discussed on the e-mail lists "cypherpunks" and "ukcrypto" and on several newsgroups, including alt.privacy and sci.crypt.
The ukcrypto list created was created in early 1996 by two academics, Ross Anderson (Cambridge) and Paul Leyland (Oxford), and one person then in government, Brian Gladman (NATO SHAPE), who was acting outside his official capacity. Motivated by a concern that a lack of public discussion and debate in the United Kingdom on cryptography issues was allowing the government to set policies that they believed were not in interests of the United Kingdom and its citizens, they formed the list with the objective of impacting cryptography policy. They were concerned both with domestic policy, particularly proposals to restrict the use of cryptography by U.K. citizens, and on foreign policy, particularly export controls. As of May 1999, the list has 300 subscribers, including government officials responsible for U.K.policy and persons in other countries, including the United States. Many of the key contributors held influential positions in other policy making fora. Focus is on U.K. policy issues, but items of international interest are also discussed, including export controls adopted under the Wassenaar Arrangement (31 countries participate); policy changes adopted by France, the United States, and other countries; policy statements from the European Union and other organizations; and some technical issues.34
Gladman believes the list has made four contributions: 1) educating many about the policy issues and encouraging journalists and writers to write about them; 2) bringing individual and industry views closer together and allowing U.K. industry to see more clearly that agreeing with their government may not be a good thing if private citizens do not support government policy; 3) encouraging the more progressive voices in government to speak out and argue from within government that their views represent those of the public; and 4) bringing groups together that were previously campaigning separately. "The most significant contribution of ukcrypto is not direct," Gladman said. "It is the contribution that it has made in promoting an educated community of commentators and a forum for the review of what government is doing that is fully open."
On the downside, some postings on ukcrypto may alienate the very government officials the authors hope to influence. According to Gladman, Adiscussions on the list can become slinging matches that quickly put those in government on the defensive and hence inclined to discount what is being said. It would be more effective if we had a way of focusing on the issues and not the personalities.@35 But Andrew Brown gave ukcrypto high marks, crediting it with most of the thought and co-ordination behind the successful campaign to keep strong cryptography legal and widely available. "There, for the past two years, the civil servants responsible for policy have actually been available, more or less, to the people who disagree with them," he wrote in New Statesman. "They have had to justify their actions, not to the public, but to a small group of geographically dispersed experts ... It's a kind of updated version of Lions v Christians."36
Nigel Hickson, one of the principal players in the policy debates from the U.K. Department of Trade and Industry, agrees the Internet and ukcrypto in particular have played a role in shaping U.K. cryptography policy.37 But he was also critical of the list: "Whilst ukcyrpto has undoubtedly had an influence on the development of UK encryption policy, it has tended to polarise the debate into extremes. This may be because there tends to be a large silent majority on the list who do not directly contribute because o f commercial or policy reasons."38 Besides participating in ukcrypto, the DTI has published draft consultation documents on the Web for comment. Many of the comments they receive arrive through electronic mail. DTI has also met with industry groups and participated in non-Internet forums such as conferences and seminars. These have also helped shape policy decisions.
There are Usenet newsgroups and other interactive forums that focus on practically every conceivable topic relating to foreign (and domestic) policy. Whether these are effective or not in terms of influencing policy is another matter. After studying the impact of the Net on the American political system, Richard Davis, a political science professor at Brigham Young University and author of The Web of Politics, observed that "In Usenet political discussions, people talk past one another, when they are not verbally attacking each other. The emphasis is not problem solving, but discussion dominance."39 Davis also found interactivity on the Internet to be primarily an illusion: "Interest groups, party organizations, and legislators seek to use the Web for information dissemination, but they are rarely interested in allowing their sites to become forums for the opinions of others."40
Coordination of Action
Advocacy groups can use the Internet to coordinate action among members and with other organizations and individuals. Action plans can be distributed by e-mail or posted on Web sites. Services are cheaper than phone and fax (although these services can also be delivered through the Internet), and faster than physical delivery (assuming Internet services are operating properly, which is not always the case). The Internet lets people all over the world coordinate action without regard to constraints of geography or time. They can form partnerships and coalitions or operate independently.
One Web site was created to help activists worldwide coordinate and locate information about protests and meetings. According to statements on Protest.Net, the Web site serves "to help progressive activists by providing a central place where the times and locations of protests and meetings can be posted." The site=s creator said he hoped it would "help resolve logistical problems that activists face in organizing events with limited resources and access to mass media."41 The site features news as well as action alerts and information about events.
The power of the Internet to mobilize activists is illustrated by the arrest of Kurdish rebel leader Abdullah Ocalan. According to Michael Dartnell, a political science professor at Concordia University, when Turkish forces arrested Ocalan, Kurds around the world responded with demonstrations within a matter of hours. He attributed the swift action in part to the Internet and Web. "They responded more quickly than governments did to his arrest," he said. Dartnell contends the Internet and advanced communication tools were changing the way people around the world play politics. Anti-government groups are establishing alliances and coalitions that might not have existed before the technology was introduced.42
The force of the Internet is further illustrated by the day of protest against business that took place on June 18, 1999. The protests, which were set up to coincide with a meeting of the G8 in Cologne, Germany, was coordinated by a group called J18 from a Web site inviting people to plan individual actions focusing on disrupting "financial centres, banking districts and multinational corporate power bases." Suggested activity included marches, rallies, and hacking. In London, up to 2,000 anti-capitalists coursed through the city shouting slogans and spray-painting buildings.43 According to the Sunday Times, teams of hackers from Indonesia, Israel, Germany, and Canada attacked the computers of at least 20 companies, including the Stock Exchange and Barclays. More than 10,000 attacks were launched over a 5-hour period.44
During the Kosovo conflict, the Kosova Task Force used the Internet to distribute action plans to Muslims and supporters of Kosovo. A March 31 Action Alert, for example, asked people to organize rallies in solidarity with Kosovo at local federal buildings and city halls on April 3 at 11:00 AM; organize public funeral prayers; make and encourage others to make daily calls or send e-mail to the White House asking for Kosovo independence, sustained air strikes until total Serb withdrawal from Kosovo, and arming of ethnic Albanians in Kosovo; and make and encourage others to make calls to their Representatives and Senators. An April 18 alert asked every community in the U.S. to establish a Kosova Room for action and information. Each room was to be equipped with a bank of phones for making 1,000 calls to the White House and Congress in support of resolution #HCR 9, calling for independence of Kosovo.
The International Campaign to Ban Landmines (ICBL), a loose coalition of over 1,300 groups from more than 75 countries, has made extensive use of the Internet in their efforts to stop the use, production, stockpiling, and transfer of antipersonnel landmines, and to increase international resources for humanitarian mine clearance and victim assistance. According to ICBL=s Liz Bernstein, the Net has been the dominant form of communication since 1996.45 It has been used to coordinate events and committee functions, distribute petitions and action alerts, raise money, and educate the public and media. Although most direct lobbying is done through face-to-face meetings and letters, e-mail has facilitated communications with government policy makers. Bernstein said the Net Ahas helped the nature of the campaign as a loose coalition, each campaign setting their own agenda yet with common information and communication.@46 Ken Rutherford, co-founder of Land Mine Survivors Network, noted that the Internet also helped establish bridges from North America and Europe to Asia and Africa, and helped enable quick adoption of the 1997 landmine treaty.47 It became international law on March 1, 1999 and, as of September 16,1999, has been signed by 135 countries and ratified by 86. In 1997, the Nobel Peach Prize was awarded to the ICBL and its then coordinator, Jody Williams.48
Human rights workers increasingly use the Internet to coordinate their actions against repressive governments. One tool that has become important in their battles is encryption, as it allows activists to protect communications and stored information from government interception. Human rights activists in Guatemala, for example, credited their use of Pretty Good Privacy (PGP) with saving the lives of witnesses to military abuses.49 Encryption is not the ultimate solution, however, as governments can outlaw its use and arrest those who do not comply.
PGP was originally developed by a Colorado engineer and activist, Phil Zimmermann, who wanted to make strong encryption available to the public for privacy protection against government eavesdroppers. Although the software was export-controlled, someone (not Zimmermann) quickly posted it on a foreign Internet site where it could be downloaded by anyone, anywhere, despite export regulations. Since then, other encryption tools have been posted on Internet sites all over the world, and the argument is frequently made that the availability of such tools demonstrates the futility of export controls. This is one factor driving export policy towards increased liberalization, but other factors have also contributed, including the role of encryption in electronic commerce and a concern that export controls harm the competitiveness of industry. That drive is countered, however, by a concern that the widespread availability of encryption will make it harder for law enforcement and intelligence agencies to gather intelligence from communications intercepts.
Indeed, terrorists also use the Internet to communicate and coordinate their activities. Back in 1996, the headquarters of terrorist financier bin Laden in Afghanistan was equipped with computers and communications equipment. Egyptian "Afghan" computer experts were said to have helped devise a communication network that used the Web, e-mail, and electronic bulletin boards.50 Hamas activists have been said to use chat rooms and e-mail to plan operations and coordinate activities, making it difficult for Israeli security officials to trace their messages and decode their contents.51
The U.S. government's program to establish an Advanced Encryption Standard (AES) illustrates how government can use the Internet to invite and coordinate participation in a decision-making process of international significance. The Department of Commerce National Institute of Standards and Technology (NIST) set up a Web site with information about the AES program and AES conferences, a schedule of events, candidate encryption algorithms (more than half from outside the United States), documentation and test values, and links to public analysis efforts all over the world. The site contains an electronic discussion forum and Federal Register call for comments. Public comments are posted on the site and NIST representatives contribute to the on-line discussions and answer questions.52 Because the AES will offer a foundation for secure electronic commerce and privacy internationally, involving the international community from the beginning will help ensure its success and widespread adoption. Cryptographers from all over in the world have been participating.
NIST's use of the Internet to aid a decision process seems to be unusual. While most government sites provide an e-mail address for making contact, they do not support discussion forums or even actively solicit comments on specific pending policy decisions. However, to the extent that government agencies invite or welcome e-mail messages and input through electronic discussion groups, the Internet can serve the democratic process. Because it is easier to post or send a message on the Internet than to send a written letter, professionals and others with busy schedules may be more inclined to participate in a public consultation process or attempt to influence policy when policy makers are readily accessible through the Internet.
Lobbying Decision Makers
Whether or not government agencies solicit their input, activists can use the Internet to lobby decision makers. One of the methods suggested by the Kosova Task Force for contacting the White House, for example, was e-mail. Similarly, a Canadian Web site with the headline "Stop the NATO Bombing of Yugoslavia Now!" urged Canadians and others interested in stopping the war to send e-mails and/or faxes to the Canadian Prime Minister, Jean Chretien, and all members of the Canadian Parliament. A sample letter was included. The letter concluded with an appeal to Astop aggression against Yugoslavia and seek a peaceful means to resolve the Kosovo problem.@53
E-mail has been credited with halting a U.S. banking plan aimed to combat money laundering. Under the "Know Your Customer" policy, banks would have been required to monitor customer's banking patterns and report inconsistencies to federal regulators. Recognizing the value of the Internet to its deliberations, the Federal Deposit Insurance Corporation (FDIC) put up a Web site, published an e-mail address for comments, and printed out and tabulated each message. By the time the proposal was withdrawn, they had received 257,000 comments, 205,000 (80%) of which arrived through e-mail. All but 50 of the letters opposed the plan. FDIC=s chair, Donna Tanoue, said it was the huge volume of e-mail that drove the decision to withdraw the proposal. "It was the nature and the volume [of the comments]," she said. "When consumers can get excited about an esoteric bank regulation, we have to pay attention."54
Most of the e-mail was driven by an on-line advocacy campaign sponsored by the Libertarian Party. About 171,000 (83%) of the e-mail messages were sent through the party's Web site. The party advertised its advocacy campaign in talk radio interviews and by sending a notice to its e-mail membership list.55 One could argue that the results were due more to the efforts of a large non-government organization than to a grassroots response from the citizens.
Indeed, many e-mail campaigns have been driven by non-government organizations. The organizations send e-mail alerts on issues to electronic mailing lists, offer sample letters to send members of Congress and other decision making bodies, and, in some cases, set up e-mailboxes or Web sites to gather signatures for petitions. The petition process can be automated, making it possible to gather huge volumes of signatures across a wide geographic area with little effort and cost. One Web site, e-The People, offers hundreds of petitions to choose from and 170,000 e-mail addresses of government officials.56
Computer Professionals for Social Responsibility (CPSR) organized an Internet petition campaign in early 1994 to protest the U.S. government's proposal to adopt the Clipper encryption chip as a standard.57 The chip offered strong encryption, but would have given law enforcement agencies the capability to decrypt a subject's messages when conducting a court-ordered wiretap against the subject. Despite numerous safeguards to ensure government agencies could not violate the privacy of users of the chip,58 Clipper was strongly opposed for privacy (and other) reasons, and the general sentiment expressed on Internet newsgroups and e-mail discussion lists was strongly anti-Clipper. CPSR announced their petition through e-mail and set up an e-mail address whereby people could sign on. They collected tens of thousands of signatures, but it is not clear the petition had much impact. The government moved forward with the standard anyway.59
Although Clipper was to be a U.S. standard, it was tied in with the government=s foreign encryption policy. Because of its back door, it was to be generally exportable, unlike other encryption products with comparable cryptographic strength. Also, the Administration urged other governments to adopt a similar approach. However, after extensive lobbying efforts by industry and civil liberties groups, Clipper met its death. The government moved instead toward a more flexible and liberal approach to encryption export controls.
Because of the low cost of operation, individuals can run their own advocacy campaigns. For example, during the heart of the impeachment process against President Clinton, Joan Blades and Wes Boyd, a husband and wife team in Berkeley, founded MoveOn.org and put up a Web site inviting citizens to sign a one-sentence petition: "The Congress must immediately censure President Clinton and move on to pressing issues facing the country." In just four months, the petition gathered a half-million signatures. Another petition that read "In the Year 2000 election, I will work to elect candidates who courageously address key national issues and who reject the politics of division and personal destruction" was sent to every member of the House and Senate. MoveOn.org received pledges of $13 million and more than 650,000 volunteer hours for congressional candidates in the 2000 election who supported their position.60 It is difficult to assess the impact of the site on the impeachment process, but it may have amplified public opinion polls, which showed the American public supported Clinton and wanted Congress to turn to other issues.
While activists can attempt to influence policy makers through e-mail, it is not clear most policy makers listen (the FDIC, which asked for comments, was an exception). Richard Davis found that "the Internet has not lived up to its promise as a forum for public expression to elected officials. In fact, while publicly encouraging e-mail, members are becoming increasingly disenchanted with it. If the most idealistic members originally envisioned e-mail as the impetus for intelligent communication with constituents, they have seen e-mail deteriorate into a mass mailing tool for political activists." Davis concluded that "members may even discount e-mail communication."61 According to the Wall Street Journal, Senator Charles Schumer's office gives first priority to old-fashioned letters. Persons sending an e-mail to his account get back an automatic response telling them to submit a letter if they want a personal reply.62
The most successful advocacy groups are likely to be those that use the Internet to augment traditional lobbying methods, including personal visits to decision makers and use of broadcast media to reach the public. These operations can be time consuming and expensive, favoring groups that are well-funded. They also require a network of long-term and trusted relationships with policy makers, sponsors, and voters. This supports Davis's conclusion that the promise of the Internet as a forum for participatory democracy is unlikely to be realized. Davis found that existing dominant players in American politics -- the media, interest groups, candidates, and policy makers -- are adapting to the Internet to retain preeminence; and that the Internet is not an adequate tool for public political movement.63
Hacktivism
Hacktivism is the convergence of hacking with activism, where "hacking" is used here to refer to operations that exploit computers in ways that are unusual and often illegal, typically with the help of special software ("hacking tools"). Hacktivism includes electronic civil disobedience, which brings methods of civil disobedience to cyberspace. This section explores four types of operations: virtual sit-ins and blockades; automated e-mail bombs; Web hacks and computer break-ins; and computer viruses and worms. Because hacking incidents are often reported in the media, operations in this category can generate considerable publicity for both the activists and their causes.
Virtual Sit-Ins and Blockades
A virtual sit-in or blockade is the cyberspace rendition of a physical sit-in or blockade. The goal in both cases is to call attention to the protestors and their cause by disrupting normal operations and blocking access to facilities.
With a sit-in, activists visit a Web site and attempt to generate so much traffic against the site that other users cannot reach it. A group calling itself Strano Network conducted one of the first such demonstrations as a protest against French government policies on nuclear and social issues. On December 21, 1995, they launched a one-hour Net-Strike attack against the Web sites operated by various government agencies. At the appointed hour, participants from all over the world were instructed to point their browsers to the government Web sites. According to reports, at least some of the sites were effectively knocked out for the period.64
In 1998, the Electronic Disturbance Theater (EDT) took the concept of electronic civil disobedience a step further. They organized a series of Web sit-ins, first against Mexican President Zedillo=s Web site and later against President Clinton=s White House Web site, the Pentagon, the School of the Americas, the Frankfurt Stock Exchange, and the Mexican Stock Exchange. The purpose was to demonstrate solidarity with the Mexican Zapatistas.65 According to EDT=s Brett Stalbaum, the Pentagon was chosen because Awe believe that the U.S. military trained the soldiers carrying out the human rights abuses.@ For a similar reason, the School of the America=s was selected.66 The Frankfurt Stock Exchange was targeted, Stalbaum said, "because it represented capitalism's role in globalization utilizing the techniques of genocide and ethinic cleansing, which is at the root of the Chiapas' problems. The people of Chiapas should play a key role in determining their own fate, instead of having it pushed on them through their forced relocation (at gunpoint), which is currently financed by western capital."67
To facilitate the strikes, the organizers set up special Web sites with automated software. All participants had to do was visit one of the FloodNet sites. When they did, their browser would download the software (a Java Applet), which would access the target site every few seconds. In addition, the software let protesters leave a personal statement on the targeted server=s error log. For example, if they pointed their browsers to a non-existent file such as "human_rights" on the target server, the server would return and log the message "human_rights not found on this server." Stalbaum, who wrote the software, characterized FloodNet as "conceptual net art that empowers people through active/artistic expression."68
EDT estimated that 10,000 people from all over the world participated in the sit-in on September 9 against the sites of President Zedillo, the Pentagon, and the Frankfurt Stock Exchange, delivering 600,000 hits per minute to each. The Pentagon, however, did not sit by idly. It struck back. When their server sensed an attack from the FloodNet servers, they launched a counter-offensive against the users= browsers, redirecting them to a page with an Applet program called "HostileApplet." Once there, the Applet was downloaded to their browsers, where it endlessly tied up their machines trying to reload a document until the machines were rebooted. President Zedillo=s site did not strike back on this occasion, but at a June sit-in, they used software that caused the protestors= browsers to open window after window until their computers crashed. The Frankfurt Stock Exchange reported that they were aware of the protest, but believed it had not affected their services. They said that they normally got about 6 million hits a day. Overall, EDT considered the attack a success. "Our interest is to help the people of Chiapas to keep receiving the international recognition that they need to keep them alive," said Stalbaum.69
When asked about the impact of their Web strikes, EDT's Ricardo Dominguez responded, "Digital Zapatismo is and has been one of the most politically effective uses of the Internet that we know of since January 1, 1994. It has created a distribution network of information with about 100 or more autonomous nodes of support. This has enabled the EZLN (Zapatista National Liberation Army) to speak to the world without having to pass through any dominant media filter. The Zapatistas were chosen by Wired as one of the twenty-five most important people on-line in 1998. ... The Zapatista network has, also, held back a massive force of men and the latest Drug War technologies from annihilating the EZLN in a few days." Regarding FloodNet specifically, he said the main purpose of the Electronic Disturbance Theatre's Zapatista FloodNet performance "is to bring the situation in Chiapas to foreground as often as possible. The gesture has created enough ripples with the Pentagon and the Mexican government that they have had to respond using both on-line and off-line tactics. Thus, these virtual sit-ins have captured a large amount of traditional media attention. You would not be interviewing us if this gesture had not been effective in getting attention to the issues on a global scale."70
EDT has used their FloodNet software against the White House Web site to express opposition to U.S. military strikes and economic sanctions against Iraq. In their "Call for FloodNet Action for Peace in the Middle East," EDT articulated their philosophy. "We do not believe that only nation-states have the legitimate authority to engage in war and aggression. And we see cyberspace as a means for non-state political actors to enter present and future arenas of conflict, and to do so across international borders."71 Animal right=s activists have also used the FoodNet software to protest the treatment of animals. Over 800 protestors from more than 12 countries joined a January 1999 sit-in against Web sites in Sweden.72 And on June 18, FloodNet was one of the tools used in the anti-capitalist attack coordinated by J18.73
Whether Web sit-ins are legal is not clear. Mark Rasch, former head of the Department of Justice=s computer crime unit, said that such attacks run the risk of violating federal laws, which make it a crime to distribute a program, software code, or command with the intent to cause damage to another's site. AIt may be an electronic sit-in, but people get arrested at sit-ins,@ he said.74 A related question is the legality of using a denial-of-service counter-offensive. In the case of the Pentagon, their response most likely would be considered lawful, as it is permissible for a nation to take "proportional" actions to defend against an attack that threatens its security.
There are a variety of methods whereby an individual, acting alone, can disrupt or disable Internet servers. These frequently involve using attack software that floods the server with network packets. During the Kosovo conflict, Belgrade hackers were credited with conducting such attacks against NATO servers. They bombarded NATO=s Web server with Aping@ commands, which test whether a server is running and connected to the Internet. The effect of the attacks was to cause line saturation of the targeted servers.75
When large numbers of individuals simultaneously attack a designated site, such as with the ECD Web sit-ins, the operation is sometimes referred to as "swarming." Swarming can amplify other types of attack, for example, a ping attack or an e-mail bombing (discussed next).
E-Mail Bombs
It is one thing to send one or two messages to government policy makers, even on a daily basis. But it is quite another to bombard them with thousands of messages at once, distributed with the aid of automated tools. The effect can be to completely jam a recipient=s incoming e-mail box, making it impossible for legitimate e-mail to get through. Thus, an e-mail bomb is also a form of virtual blockade. Although e-mail bombs are often used as a means of revenge or harassment, they have also been used to protest government policies.
In what some U.S. intelligence authorities characterized as the first known attack by terrorists against a country's computer systems, ethnic Tamil guerrillas were said to have swamped Sri Lankan embassies with thousands of electronic mail messages. The messages read "We are the Internet Black Tigers and we=re doing this to disrupt your communications."76 An offshoot of the Liberation Tigers of Tamil Eelam, which had been fighting for an independent homeland for minority Tamils, was credited with the 1998 incident.77
The e-mail bombing consisted of about 800 e-mails a day for about two weeks. William Church, editor for the Centre for Infrastructural Warfare Studies (CIWARS), observed that "the Liberation Tigers of Tamil are desperate for publicity and they got exactly what they wanted ... considering the routinely deadly attacks committed by the Tigers, if this type of activity distracts them from bombing and killing then CIWARS would like to encourage them, in the name of peace, to do more of this type of "terrorist activity."78 The attack, however, was said to have had the desired effect of generating fear in the embassies.
During the Kosovo conflict, protestors on both sides e-mail bombed government sites. According to PA News, Nato spokesman Jamie Shea said their server had been saturated at the end of March by one individual who was sending them 2,000 messages a day.79 Fox News reported that when California resident Richard Clark heard of attacks against NATO=s Web site by Belgrade hackers, he retaliated by sending an e-mail bomb to the Yugoslav government=s site. Clark said that a few days and 500,000 e-mails into the siege, the site went down. He did not claim full responsibility, but said he "played a part." That part did not go unrecognized. His Internet service provider, Pacific Bell, cut off his service, saying his actions violated their spamming policy.80
An e-mail bombing was conducted against the San Francisco-based Internet service provider Institute for Global Communications (IGC) in 1997 for hosting the Web pages of the Euskal Herria Journal, a controversial publication edited by a New York group supporting independence of the mountainous Basque provinces of northern Spain and southwestern France. Protestors claimed IGC "supports terrorism" because a section on the Web pages contained materials on the terrorist group Fatherland and Liberty, or ETA, which was responsible for killing over 800 during its nearly 30-year struggle for an independent Basque state. The attack against IGC began after members of the ETA assassinated a popular town councilor in northern Spain.81
The protestor's objective was censorship. They wanted the site pulled. To get their way, they bombarded IGC with thousands of bogus messages routed through hundreds of different mail relays. As a result, mail was tied up and undeliverable to IGC's e-mail users, and support lines were tied up with people who couldn't get their mail. The attackers also spammed IGC staff and member accounts, clogged their Web page with bogus credit card orders, and threatened to employ the same tactics against organizations using IGC services. The only way IGC could stop the attack was by blocking access from all of the relay servers.82
IGC pulled the site on July 18, but not before archiving a copy so that others could put up mirrors. Within days of the shutdown, mirror sites appeared on half a dozen servers on three continents. Chris Ellison, a spokesman for the Internet Freedom Campaign, an English group that was hosting one of the mirrors, said they believe "the Net should prove an opportunity to read about and discuss controversial ideas." The New York-based journal maintained their objective was to publish "Ainformation often ignored by the international media, and to build communication bridges for a better understanding of the conflict."83 An article by Yves Eudes in the French newspaper Le Monde said the e-mail bomb attack against the IGC site represented an "unprecedented conflict@ that Ahas opened up a new era of censorship, imposed by direct action from anonymous hackers."84
About a month after IGC threw the controversial Basque journal Euskal Herria Journal off its servers, Scotland Yard=s Anti-Terrorist Squad shut down Internet Freedom's U.K. Web site for hosting the journal. According to a press release from Internet Freedom, the squad claimed to be acting against terrorism. Internet Freedom said it would move its news operations to its U.S. site.85
The case involving Euskal Herria Journal illustrates the power of hacktivists on the Internet. Despite IGC's desire to host the controversial site, they simply could not sustain the attack and remain in business. They could have ignored a few e-mail messages demanding that the site be pulled, but they could not ignore an e-mail bombing. The case also illustrates the power of the Internet as a tool for free speech. Because Internet venues for publication are rich and dispersed throughout the world, it is extremely difficult for governments and hacktivists alike to keep content completely off the Internet. It would require extensive international cooperation and, even then, a site could operate out of a safe haven that did not sign on to international agreements.
Web Hacks and Computer Break-Ins
The media is filled with stories of hackers gaining access to Web sites and replacing some of the content with their own. Frequently, the messages are political, as when a group of Portuguese hackers modified the sites of 40 Indonesian servers in September 1998 to display the slogan "Free East Timor" in large black letters. According to the New York Times, the hackers also added links to Web sites describing Indonesian human rights abuses in the former Portuguese Colony.86 Then in August 1999, Jose Ramos Horta, the Sydney-based Nobel laureate who represents the East Timor independence movement outside Indonesia, warned that a global network of hackers planned to bring Indonesia to a standstill if Jakarta sabotaged the ballot on the future of East Timor. He told the Sydney Morning Herald that more than 100 hackers, mostly teenagers in Europe and the United States, had been preparing the plan.87
In June 1998, a group of international hackers calling themselves Milw0rm hacked the Web site of India's Bhabha Atomic Research Center (BARC) and put up a spoofed Web page showing a mushroom cloud and the text "If a nuclear war does start, you will be the first to scream ...". The hackers were protesting India=s recent nuclear weapons tests, although they admitted they did it mostly for thrills. They said that they also downloaded several thousand pages of e-mail and research documents, including messages between India's nuclear scientists and Israeli government officials, and had erased data on two of BARC's servers. The six hackers, whose ages range from 15 to 18, hailed from the United States, England, the Netherlands, and New Zealand.88
Another way in which hacktivists alter what viewers see when they go to a Web site is by tampering with the Domain Name Service so that the site=s domain name resolves to the IP address of some other site. When users point their browsers to the target site, they are redirected to the alternative site.
In what might have been one of the largest mass home page takeovers, the antinuclear Milw0rm hackers were joined by Ashtray Lumberjacks hackers in an attack that affected more than 300 Web sites in July 1998. According to reports, the hackers broke into the British Internet service provider EasySpace, which hosted the sites. They altered the ISP=s database so that users attempting to access the sites were redirected to a Milw0rm site, where they were greeted with a message protesting the nuclear arms race. The message concluded with "... use your power to keep the world in a state of PEACE and put a stop to this nuclear bullshit." John Vranesevich, who runs the hacker news site AntiOnline, said, "They're the equivalent to the World Trade Center bombings; [they] want to get their story told and bring attention to themselves."89'
Several Web sites were hacked during the Kosovo conflict. According to Fox News, the Boston Globe reported that an American hacking group called Team Spl0it broke into government Web sites and posted statements such as "Tell your governments to stop the war." Fox also said that the Kosovo Hackers Group, a coalition of European and Albanian hackers, had replaced at least five sites with black and red "Free Kosovo" banners.90 The Bosnian Serb news agency SRNA reported that the Serb Black Hand hackers group had deleted all data on a U.S. Navy computer, according to the Belgrade newspaper Blic. Members of the Black Hand group and Serbian Angel planned daily actions that would block and disrupt military computer operated by NATO countries, Blic wrote.91 Black Hand had earlier claimed responsibility for crashing a Kosovo Albanian Web site. "We shall continue to remove (ethnic) Albanian lies from the Internet," a member of the group told Blic.92
In the wake of NATO's accidental bombing of China=s Belgrade embassy in May, angry Chinese allegedly hacked several U.S. government sites. Newsbytes reported that the slogan Adown with barbarians@ was placed in Chinese on the home page of the U.S. Embassy in Beijing, while the Department of Interior Web site showed images of the three journalists killed during the bombing, crowds protesting the attack in Beijing, and a fluttering Chinese flag.93 According to the Washington Post, Interior spokesman Tim Ahearn said their computer experts had traced their hacker back to China. The newspaper also reported that the Department of Energy's home page read:
"Protest U.S.A.=s Nazi action! Protest NATO=s brutal action! We are Chinese hackers who take no cares about politics. But we can not stand by seeing our Chinese reporters been killed which you might have know. Whatever the purpose is, NATO led by U.S.A. must take absolute responsibility. You have owed Chinese people a bloody debt which you must pay for. We won=t stop attacking until the war stops!"94
NATO did not, of course, declare an end to the war because of the hacking. The impact on foreign policy decisions, if any at all, likely paled in comparison to the bombing itself. Following the accident, China suspended high-level military contacts with the United States.95
Acting in the name of democracy and human rights, hackers have targeted Chinese government computers. One group, called the Hong Kong Blondes, allegedly infiltrated police and security networks in an effort to monitor China=s intelligence activities and warn political targets of imminent arrests.96 According to OXblood Ruffin, "foreign minister" of the Cult of the Dead Cow, the Blondes are an underground group of Chinese dissidents who aim to destabilize the Chinese government. They have threatened to attack both Chinese state-owned organizations and Western companies investing in the country.97
The Los Angeles Times reported that a California computer science student who calls himself Bronc Buster and his partner Zyklon cracked the Chinese network, defacing a government-run Web site on human rights and interfering with censorship. The hacker said they came across about 20 firewall servers blocking everything from Playboy.com to Parents.com, and that they disabled the blocking on five of the servers. He said they did not destroy any data, but only moved files.98
Bronc Buster belonged to a group of 24 hackers known as the Legion of the Underground (LoU). In a press conference on Internet Relay Chat (IRC) in late December 1998, an LoU member declared cyberwar on the information infrastructures of China and Iraq. He cited civil rights abuses and said LoU called for the complete destruction of all computer systems in China and Iraq.99
The declaration of cyberwar prompted a coalition of other hacking groups to lash out against the campaign. A letter co-signed by 2600, the Chaos Computer Club, the Cult of the Dead Cow (CDC), !Hispahak, L0pht Heavy Industries, Phrack, Pulhas, and several members of the Dutch hacking community denounced the cyberwar, saying "Declaring war against a country is the most irresponsible thing a hacker group could do. This has nothing to do with hacktivism or hacker ethics and is nothing a hacker could be proud of." Reid Fleming of the CDC said "One cannot legitimately hope to improve a nation=s free access to information by working to disable its data networks."100
By the time the letter went out, LoU had already issued a statement saying that the declaration of war on IRC did not represent the position of the group. "The LoU does not support the damaging of other nations computers, networks or systems in any way, nor will the LoU use their skills, abilities or connections to take any actions against the systems, networks or computers in China or Iraq which may damage or hinder in any way their operations."101 Bronc Buster said the IRC declaration was issued by a member before he left and never came back.102
In August 1999, a cyberwar erupted between hackers in China and Taiwan. Chinese hackers defaced several Taiwanese and government Web sites with pro-China messages saying Taiwan was and would always be an inseparable part of China. "Only one China exists and only one China is needed," read a message posted on the Web site of Taiwan=s highest watchdog agency.103 Taiwanese hackers retaliated and planted a red and blue Taiwanese national flag and an anti-Communist slogan: "Reconquer, Reconquer, Reconquer the Mainland," on a Chinese high-tech Internet site. The cyberwar followed an angry exchange by Chinese and Taiwanese in response to Taiwan's President Lee Teng-hui's statement that China must deal with Taiwan on a "state-to-state" basis.104
One of the consequences of hacking is that victims might falsely attribute an assault to a foreign government rather than the small group of activists that actually conducted it. This could strain foreign relations or lead to a more serious conflict.
The Chinese government has been accused of attacking a U.S. Web site devoted to the Falun Gong meditation sect, which Chinese authorities outlawed in July 1999. Bob McWee, a sect practitioner in Middleton, Maryland, said his site had been under a persistent electronic assault. In addition to a continuous denial-of-service attack, someone had tried breaking into his server. He said he was able to trace the penetration attempt to the Internet Monitoring Bureau of China's Public Security Ministry.105 If the attack did indeed originate with the Chinese police, this would have major foreign policy implications. It would suggest that the Chinese government views Web sites operating on foreign soil as legitimate targets of aggression when those sites support activities prohibited on home soil.
Web hacks and computer break-ins are extremely common, and targets include commercial and educational computers as well as government ones. The results of the 1999 Information Security Industry Survey showed that the number of companies experiencing penetrations jumped from 12% in 1997 to 23% in 1998 (almost double).106 About 26% of respondents to the ERRI/EmergencyNet News Local/County/State Computer "Hacking" Survey said they thought they had been the victims of an unauthorized intrusion or attack on their computer systems.107 And 30% of respondents to the 1999 CSI/FBI Computer Crime and Security Survey reported intrusions from outsiders.108 Most of the attacks, however, were probably not motivated by politics (hacktivism), but rather thrills, curiosity, ego, revenge, or financial gain. In the area of Web hacks alone, Attrition.Org recorded more than 1,400 cases of vandalism by July 1999 for the year.109
Computer Viruses and Worms
Hacktivists have used computer viruses and worms to spread protest message and damage target computer systems. Both are forms of malicious code that infect computers and propagate over computer networks. The difference is that a worm is an autonomous piece of software that spreads on its own, whereas a virus attaches itself to other files and code segments and spreads through those elements, usually in response to actions taken by users (e.g., opening an e-mail attachment). The boundary between viruses and worms, however, is blurry and not important to the discussion here.
The first protest to use a worm occurred about a decade ago, when anti-nuclear hackers released a worm into the U.S. National Aeronautics and Space Administration SPAN network. On October 16, 1989, scientists logging into computers at NASA's Goddard Space Flight Center in Greenbelt, Maryland, were greeted with a banner from the WANK worm:
W O R M S A G A I N S T N U C L E A R K I L L E R S _______________________________________________________________ \__ ____________ _____ ________ ____ ____ __ _____/ \ \ \ /\ / / / /\ \ | \ \ | | | | / / / \ \ \ / \ / / / /__\ \ | |\ \ | | | |/ / / \ \ \/ /\ \/ / / ______ \ | | \ \| | | |\ \ / \_\ /__\ /____/ /______\ \____| |__\ | |____| |_\ \_/ \___________________________________________________/ \ / \ Your System Has Been Officically WANKed / \_____________________________________________/
You talk of times of peace for all, and then prepare for war.
At the time of the attack, antinuclear protestors were trying to stop the launch of the shuttle that carried the Galileo probe on its initial leg to Jupiter. Galileo's 32,500-pound booster system was fueled with radioactive plutonium. John McMahon, protocol manager with NASA's SPAN office, estimated that the worm cost them up to half a million dollars of wasted time and resources. It did not have its intended effect of stopping the launch. The source of the attack was never identified, but some evidence suggested that it might have come from hackers in Australia.110
Computer viruses have been used to propagate political messages and, in some cases, cause serious damage. In February 1999, the London Sunday Telegraph reported that an Israeli teen had become a national hero after he claimed to have wiped out an Iraqi government Web site. "It contained lies about the United States, Britain and Israel, and many horrible statements against Jews," 14-year-old Nir Zigdon said.111 "I figured that if Israel is afraid of assassinating Saddam Hussein, at least I can try to destroy his site. With the help of some special software I tracked down the site=s server to one of the Gulf states."112 The Tel Aviv hacktivist then sent a computer virus in an e-mail attachment to the site. "In the e-mail message, I claimed I was a Palestinian admirer of Saddam who had produced a virus capable of wiping out Israeli websites," Zigdon said. "That persuaded them to open the message and click on the designated file. Within hours the site had been destroyed. Shortly afterwards I received an e-mail from the site manager, Fayiz, that told me to 'go to hell'."113
During the Kosovo conflict, businesses, public organizations, and academic institutes received virus-laden e-mails from a range of Eastern European countries, according to mi2g, a London-based Internet software company. "The contents of the messages are normally highly politicised attacks on NATO's unfair aggression and defending Serbian rights using poor English language and propaganda cartoons," the press release said. It went on to say "The damage to the addressee is usually incorporated in several viruses contained within an attachment, which may be plain language or anti-NATO cartoon."114 In an earlier press release, mi2g warned that "The real threat of cyber warfare from Serbian hackers is to the economic infrastructure of NATO countries and not to their better prepared military command and control network."115
It is extremely difficult, perhaps impossible, for an organization to prevent all viruses, as users unwittingly open e-mail attachments with viruses and spread documents with viruses to colleagues. Although anti-viral tools can detect and eradicate viruses, the tools must be kept up-to-date across the enterprise, which may have tens of thousands of machines, and they must be installed and used properly. While viruses bearing political messages may not seem to pose a serious problem, an organization hit by one may have to shut down services in order to eradicate it from its network.
The seriousness of viruses is underscored by two recent surveys. The 1999 Information Security Industry survey found that 77% of respondents had experienced a computer virus. This was up from 73% in 1998. More distressing, the ERRI/EmergencyNet News Local/County/State Computer "Hacking" Survey found that almost 83% of respondents had been the victim of a virus. Even a benign virus could significantly impact the ability of governments to provide essential services.
Viruses, especially those carrying destructive payloads, are a potentially potent tool in the hands of cyberterrorists. Other tools of hacktivism, including computer network attacks, could likewise be put to highly destructive ends. This is the topic discussed next. Cyberterrorism
In the 1980s, Barry Collin, a senior research fellow at the Institute for Security and Intelligence in California, coined the term "cyberterrorism" to refer to the convergence of cyberspace and terrorism.116 Mark Pollitt, special agent for the FBI, offers a working definition: "Cyberterrorism is the premeditated, politically motivated attack against information, computer systems, computer programs, and data which result in violence against noncombatant targets by subnational groups or clandestine agents."117 Politically motivated attacks that cause serious harm, such as severe economic hardship or sustained loss of power or water, might also be characterized as cyberterrorism.
This section discusses the extent to which cyberterrorism is a problem today and is likely to be a problem in the near future. It also covers domestic and international initiatives aimed as countering a wide variety of cyberthreats, including cyberterrorism, certain forms of hacktivism, and other non-politically motivated computer network attacks.
The Threat
As discussed in the preceding sections, terrorist groups are using the Internet extensively to spread their message and to communicate and coordinate action. However, there have been few if any computer network attacks that meet the criteria for cyberterrorism. The 1998 e-mail bombing by the Internet Black Tigers against the SRI Lanken embassies was perhaps the closest thing to cyberterrorism that has occurred so far, but the damage cause by the flood of e-mail, for example, pales in comparison to the deaths of 240 people from the physical bombings of the U.S. embassies in Nairobi and Dar es Salaam in August of that year.
Is cyberterrorism the way of the future? For a terrorist, it would have some advantages over physical methods. It could be conducted remotely and anonymously, it would be cheap, and it would not require the handling of explosives or a suicide mission. It would likely garner extensive media coverage, as journalists and the public alike are fascinated by practically any kind of computer attack. One highly acclaimed study of the risks of computer systems began with a paragraph that concludes "Tomorrow's terrorist may be able to do more with a keyboard than with a bomb."118
In a 1997 paper, Collin describes several possible scenarios. In one, a cyberterrorist hacks into the processing control system of a cereal manufacturer and changes the levels of iron supplement. A nation of children get sick and die. In another, a cyberterrorist attacks the next generation of air traffic control systems. Two large civilian aircraft collide. In a third, a cyberterrorist disrupts banks, international financial transactions, and stock exchanges. Economic systems grind to a halt, the public loses confidence, and destabilization is achieved.119
Analyzing the plausibility of Collin's hypothetical attacks, Pollitt concludes that there is sufficient human involvement in the control processes used today that cyberterrorism does not B at present B pose a significant risk in the classical sense. In the cereal contamination scenario, for example, he argues that the quantity of iron (or any other nutritious substance) that would be required to become toxic is so large that assembly line workers would notice. They would run out of iron on the assembly line and the product would taste different and not good. In the air traffic control scenario, humans in the loop would notice the problems and take corrective action. Pilots, he says, are trained to be aware of the situation, to catch errors made by air traffic controllers, and to operate in the absence of any air traffic control at all.120 Pollitt does not imply by his analysis that computers are safe and free from vulnerability. To the contrary, his argument is that despite these vulnerabilities, because humans are in the loop, a cyberattack is unlikely to have such devastating consequences. He concludes that "As we build more and more technology into our civilization, we must ensure that there is sufficient human oversight and intervention to safeguard those whom technology serves."
In a 1997 article titled "How Many Terrorists Fit on a Computer Keyboard?" William Church presents a strong case that the United States does not yet face a compelling threat from terrorists using information warfare techniques to disrupt critical infrastructure. They lack either the motivation, capabilities, or skills to pull off a cyberattack at this time. Church does not rule out a physical attack against the infrastructure, but such a threat is neither new nor matured by U.S. reliance on technology.121
There are drawbacks to terrorists using cyber weapons over physical ones. Because systems are complex, it may be harder to control an attack and achieve a desired level of damage. Unless people are injured, there is also less drama and emotional appeal. Further, terrorists may be disinclined to try new methods unless they see their old ones as inadequate.122
There is little concrete evidence of terrorists preparing to use the Internet as a venue for inflicting grave harm. However, in February 1998, Clark Staten, executive director of the Emergency Response & Research Institute in Chicago, testified that it was believed that "members of some Islamic extremist organizations have been attempting to develop a >hacker network= to support their computer activities and even engage in offensive information warfare attacks in the future."123 And in November, the Detroit News reported that Khalid Ibrahim, who claimed to be a member of the militant Indian separatist group Harkat-ul-Ansar, had tried to buy military software from hackers who had stolen it from U.S. Department of Defense computers they had penetrated. Harkat-ul-Ansar, one of the 30 terrorist organizations on the State Department list, declared war on the United States following the August cruise-missile attack on a suspected terrorist training camp in Afghanistan run by Osama bin Laden, which allegedly killed nine of their members. The attempted purchase was discovered when an 18-year-old hacker calling himself Chameleon attempted to cash a $1,000 check from Ibrahim. Chameleon said he did not have the software and did not give it to Ibrahim, but Ibrahim may have obtained it or other sensitive information from one of the many other hackers he approached.124
Given that there are no instances of cyberterrorism, it is not possible to assess the impact of acts that have taken place. It is equally difficult to assess potential impact, in part because it is hard to predict how a major computer network attack, inflicted for the purpose of affecting national or international policy, would unfold. So far, damages from attacks committed for reasons other than terrorism, for example, to seek revenge against a former employer, have generally been confined to immediate targets. No lives have been lost.
Cyberdefense
The main impact of cyberthreats on foreign and domestic policy relates to defending against such acts, particularly attacks against critical infrastructures. At the international level, several countries, including the U.S., have been addressing such issues as mutual legal assistance treaties, extradition, the sharing of intelligence, and the need for uniform computer crime laws so that cybercriminals can be successfully investigated and prosecuted even when their crimes cross international borders, as they so often do. This effort is not focused on either cyberterrorism or hacktivism, but rather addresses an array of actions that includes all forms of hacking and computer network attacks, computer and telecommunications fraud, child pornography on the Net, and electronic piracy (software, music, etc.). It also covers state-sponsored cyberwarfare operations that use hacking and computer network attacks as a military weapon.
At the initiative of the Russian Federation, the U.N. General Assembly adopted a resolution related to cybercrime, cyberterrorism, and cyberwarfare in December 1998. Resolution 53/70, Developments in the Field of Information and Telecommunications in the Context of International Security, invites member states to inform the Secretary-General of their views and assessments on (a) the issues of information security, (b) definition of basic notions related to information security, and 8 advisability of developing international principles that would enhance the global information and telecommunications systems and help combat information terrorism and criminality.125
The U.S. has taken several steps to better protect its critical infrastructures. In July 1996, President Clinton announced the formation of the President=s Commission on Critical Infrastructure Protection (PCCIP) to study the critical infrastructures that constitute the life support systems of the nation, determine their vulnerabilities to a wide range of threats, and propose a strategy for protecting them in the future. Eight infrastructures were identified: telecommunications, banking and finance, electrical power, oil and gas distribution and storage, water supply, transportation, emergency services, and government services. In their final report, issued in October 1997, the commission reported that the threats to critical infrastructures were real and that, through mutual dependence and interconnectedness, they could be vulnerable in new ways. "Intentional exploitation of these new vulnerabilities could have severe consequences for our economy, security, and way of life."126
The PCCIP noted that cyberthreats have changed the landscape. "In the past we have been protected from hostile attacks on the infrastructures by broad oceans and friendly neighbors. Today, the evolution of cyberthreats has changed the situation dramatically. In cyberspace, national borders are no longer relevant. Electrons don't stop to show passports. Potentially serious cyberattacks can be conceived and planned without detectable logistic preparation. They can be invisibly reconnoitered, clandestinely rehearsed, and then mounted in a matter of minutes or even seconds without revealing the identity and location of the attacker."127
In assessing the threat from both physical and cyberattacks, the PCCIP concluded that "Physical means to exploit physical vulnerabilities probably remain the most worrisome threat to our infrastructures today. But almost every group we met voiced concerns about the new cyber vulnerabilities and threats. They emphasized the importance of developing approaches to protecting our infrastructures against cyberthreats before they materialize and produce major system damage."128 The recommendations of the PCCIP led to Presidential Decision Directive (PDD) 63, which established the National Infrastructure Protection Center (NIPC), the Critical Infrastructure Assurance Office (CIA), the National Infrastructure Assurance Council (NIAC), and private sector Information Sharing and Assessment Centers (ISACs).129 The Department of Defense also established a Joint Task Force - Computer Network Defense (JTF-CND).
That critical systems are potentially vulnerable to cyberattacks was underscored by a June 1997 exercise, code named Eligible Receiver, conducted by the National Security Agency (NSA). The objective was to determine the vulnerability of U.S. military computers and some civilian infrastructures to a cyberattack. According to reports, two-man teams targeted specific pieces of the military infrastructure, including the U.S. Pacific Command in Hawaii, which oversees 100,000 troops in Asia. One person played the role of the attacker, while another observed the activity to ensure that it was conducted as scripted. Using only readily available hacking tools that could easily be obtained from the Internet, the NSA hackers successfully gained privileged access on numerous systems. They concluded that the military infrastructure could be disrupted and possible troop deployments hindered. The exercise also included written scenarios against the power grid and emergency 911 system, with resulting service disruptions. For the latter, they postulated that by sending sufficient e-mails to Internet users telling them the 911 system had a problem, enough curious people would phone 911 at once to overload the system. No actual attacks were made against any civilian infrastructures.130
The vulnerability of commercial systems to cyberattacks is repeatedly demonstrated by survey results such as those mentioned earlier. There is no evidence that non-government systems are any more or less vulnerable than government ones, or that the security posture of either group, as a whole, is generally improving -- despite the availability and use of a growing supply of information security tools.
Conclusions
The Internet is clearly changing the landscape of political discourse and advocacy. It offers new and inexpensive methods for collecting and publishing information, for communicating and coordinating action on a global scale, and for reaching out to policy makers. It supports both open and private communication. Advocacy groups and individuals worldwide are taking advantage of these features in their attempts to influence foreign policy.
Several case studies show that when the Internet is used in normal, non-disruptive ways, it can be an effective tool for activism, especially when it is combined with other media, including broadcast and print media and face-to-face meetings with policy makers. As a technology for empowerment, the Net benefits individuals and small groups with few resources as well as organizations that are large or well-funded. It facilitates activities such as educating the public and media, raising money, forming coalitions across geographical boundaries, distributing petitions and action alerts, and planning and coordinating events on a regional or international level. It allows activists in politically repressive states to evade government censors and monitors.
In the area of hacktivism, which involves the use of hacking tools and techniques of a disruptive nature, the Internet will serve mainly to draw attention to a cause, as such incidents are regularly reported by news media. Whether that attention has the desired effect of changing policy decisions related to the issue at hand is much less certain. Hacktivists may feel a sense of empowerment, because they can control government computers and get media attention, but that does not mean they will succeed in changing policy. So far, anecdotal evidence suggests that for the majority of cases, they will not.
With regards to cyberterrorism, that is, the use of hacking tools and techniques to inflict grave harm such as loss of life, few conclusions can be drawn about its potential impact on foreign policy, as there have been no reported incidents that meet the criteria. What can be said is that the threat of cyberterrorism, combined with hacking threats in general, is influencing policy decisions related to cyberdefense at both a national and international level. If one looks at terrorism in general for insights into the potential impact of cyberterrorism, one finds that the impact of terrorism on the foreign policy issues at hand is similarly difficult to assess, but here again, the threat of terrorism, particularly chem, bio, and nuclear terrorism, is having a significant impact on national defense policy.
The Internet as a Tool for Influencing Foreign Policy
Dorothy E. Denning
Georgetown University
The conflict over Kosovo has been characterized as the first war on the Internet. Government and non-government actors alike used the Net to disseminate information, spread propaganda, demonize opponents, and solicit support for their positions. Hackers used it to voice their objections to both Yugoslav and NATO aggression by disrupting service on government computers and taking over their Web sites. Individuals used it to tell their stories of fear and horror inside the conflict zone, while activists exploited it to amplify their voices and reach a wide, international audience. And people everywhere used it to discuss the issues and share text, images, and video clips that were not available through other media. In April, the Los Angeles Times wrote that the Kosovo conflict was "turning cyberspace into an ethereal war zone where the battle for the hearts and minds is being waged through the use of electronic images, online discussion group postings, and hacking attacks."1 Anthony Pratkanis, professor of psychology at the University of California, Santa Cruz, and author of Age of Propaganda: The Everyday Use and Abuse of Persuasion, observed, "What you're seeing now is just the first round of what will become an important, highly sophisticated tool in the age-old tradition of wartime propaganda.... The war strategists should be worried about it, if they aren't yet."
Just how much impact did the Internet have on foreign policy decisions relating the war? It clearly had a part in the political discoursetaking place, and it was exploited by activists seeking to alter foreign policy decisions. It also impacted military decisions. While NATO targeted Serb media outlets carrying Milosovic's propaganda, it intentionally did not bomb Internet service providers or shut down the satellite links bringing the Internet to Yugoslavia. Policy instead was to keep the Internet open. James P. Rubin, spokesman for the U.S. State Department, said "Full and open access to the Internet can only help the Serbian people know the ugly truth about the atrocities and crimes against humanity being perpetrated in Kosovo by the Milosevic regime."2 Indirectly, the Internet may have also affected public support for the war, which in turn might have affected policy decisions made during the course of the conflict.
The purpose of this paper is to explore how the Internet is altering the landscape of political discourse and advocacy, with particular emphasis on how it is used by those wishing to influence foreign policy. Emphasis is on actions taken by nonstate actors, including both individuals and organizations, but state actions are discussed where they reflect foreign policy decisions triggered by the Internet. The primary sources used in the analysis are news reports of incidents and events. These are augmented with interviews and survey data where available. A more scientific study would be useful.
The paper is organized around three broad classes of activity: activism, hacktivism, and cyberterrorism. The first category, activism, refers to normal, non-disruptive use of the Internet in support of an agenda or cause. Operations in this area includes browsing the Web for information, constructing Web sites and posting materials on them, transmitting electronic publications and letters through e-mail, and using the Net to discuss issues, form coalitions, and plan and coordinate activities. The second category, hacktivism, refers to the marriage of hacking and activism. It covers operations that use hacking techniques against a target=s Internet site with the intent of disrupting normal operations but not causing serious damage. Examples are Web sit-ins and virtual blockades, automated e-mail bombs, Web hacks, computer break-ins, and computer viruses and worms. The final category, cyberterrorism, refers to the convergence of cyberspace and terrorism. It covers politically motivated hacking operations intended to cause grave harm such as loss of life or severe economic damage. An example would be penetrating an air traffic control system and causing two planes to collide. There is a general progression toward greater damage and disruption from the first to the third category, although that does not imply an increase of political effectiveness. An electronic petition with a million signatures may influence policy more than an attack that disrupts emergency 911 services.
Although the three categories of activity are treated separately, the boundaries between them are somewhat fuzzy. For example, an e-mail bomb may be considered hacktivism by some and cyberterrorism by others. Also, any given actor may conduct operations across the spectrum. For example, a terrorist might launch viruses as part of a larger campaign of cyberterrorism, all the while using the Internet to collect information about targets, coordinate action with fellow conspirators, and publish propaganda on Web sites. Thus, while the paper distinguishes activists, hacktivists, and terrorists, an individual can play all three roles.
The following sections discuss and give examples of activity in each of these three areas. The examples are drawn from the Kosovo conflict, cryptography policy, human rights in China, support for the Mexican Zapatistas, and other areas of conflict. The examples are by no means exhaustive of all activity in any of these areas, but intended only to be illustrative. Nevertheless, they represent a wide range of players, targets, and geographical regions.
The main conclusion of the paper is that the Internet can be an effective tool for activism, especially when it is combined with other communications media, including broadcast and print media and face-to-face meetings with policy makers. It can benefit individuals and small groups with few resources as well as organizations and coalitions that are large or well-funded. It facilitates activities such as educating the public and media, raising money, forming coalitions across geographical boundaries, distributing petitions and action alerts, and planning and coordinating events on a regional or international level. It allows activists in politically repressive states to evade government censors and monitors.
With respect to hacktivism and cyberterrorism, those who engage in such activity are less likely to accomplish their foreign policy objectives than those who do not employ disruptive and destructive techniques. They may feel a sense of empowerment, because they can control government computers and get media attention, but that does not mean they will succeed in changing policy. The main effect is likely to be a strengthening of cyberdefense policies, both nationally and internationally, rather than accommodation to the demands of the actors.
Activism
The Internet offers a powerful tool for communicating and coordinating action. It is inexpensive to use and increasingly pervasive, with an estimated 201 million on-line as of September 1999.3 Groups of any size, from two to millions, can reach each other and use the Net to promote an agenda. Their members and followers can come from any geographical region on the Net, and they can attempt to influence foreign policy anywhere in the world. This section describes five modes of using the Internet: collection, publication, dialogue, coordination of action, and direct lobbying of decision makers. While treated separately, the modes are frequently used together and many of the examples described here illustrate multiple modes.
Collection
One way of viewing the Internet is as a vast digital library. The World Wide Web alone offers about a billion pages of information, and much of the information is free. Activists may be able to locate legislative documents, official policy statements, analyses and discussions about issues, and other items related to their mission. They may be able to find names and contact information for key decision makers inside the government or governments they ultimately hope to influence. They may be able to identify other groups and individuals with similar interests, and gather contact information for potential supporters and collaborators. There are numerous tools that help with collection, including search engines, e-mail distribution lists, and chat and discussion groups. Many Web sites offer their own search tools for extracting information from databases on their sites.
One advantage of the Internet over other media is that it tends to break down barriers erected by government censors. For example, after Jordanian officials removed an article from 40 print copies of the Economist on sale in Jordan, a subscriber found a copy on-line, made photocopies, and faxed it to 1,000 Jordanians. According to Daoud Kuttab, head of the Arabic Media Internal Network (AMIA), the government would have been better off leaving the print version intact. "We found this very exciting," he said. "For the first time the traditional censorship that exists within national borders was bypassed." Kuttab said AMIA opened Jordanian journalists to the non-Arab world and use of the Web as a research tool. "In the Jordanian media, we have been able to detect a much more open outlook to the world as well as to Arab issues," he said.4
The Internet itself is not free of government censorship. According to Reporters Sans Frontiers, 45 countries restrict their citizens' access to the Internet, typically by forcing them to subscribe to a state-run Internet service provider, which may filter out objectionable sites.5 Authoritarian regimes recognize the benefits of the Internet to economic growth, but at the same time feel threatened by the unprecedented degree of freedom of speech.
Chinese authorities block access to Web sites that are considered subversive to government objectives. This has been only partially effective, however, and Chinese activists have found ways of slipping information past the controls. For example, the editors of VIP Reference, a Washington-based electronic magazine with articles and essays about democratic and economic evolution inside China, e-mails their electronic newsletter directly to addresses inside mainland China. The e-mail is sent from a different address every day to get past e-mail blocks. It is also delivered to random addresses, compiled from commercial and public lists, so that recipients can deny having deliberately subscribed. As of January, about 250,000 people received the pro-democracy publication, including people inside the government who did not want it. Chinese officials were not, however, complacent. When 30-year-old Shanghai software entrepreneur Lin Hai sold 30,000 e-mail addresses to VIP Reference, he was arrested and later sentenced to two years in prison. In addition, authorities fined him 10,000 yuan (HK$9,300) and confiscated his computer equipment and telephone. Lin was said to be the first person convicted in China for subversive use of the Internet. He claimed he was only trying to drum up business and was not politically active.6
During the Kosovo conflict, people in Yugoslavia had full access to the Internet, including Western news sites. The Washington Post reported that according to U.S. and British officials, the government controlled all four Internet access providers in Yugoslavia and kept them open for the purpose of spreading disinformation and propaganda. The Post also said that Belgrade, with a population of 1.5 million, had about 100,000 Internet connections in mid-April.7 Individuals without their own connections could get access at Internet cafes.
Even though Serbs had access to Western news reports, both through the Internet and through satellite and cable television, many did not believe what they saw and heard from Western media. They considered coverage on Western television stations such as CNN and Sky News to be as biased as that on the Yugoslav state-run station, citing instances when Western reports of Serbian atrocities turned out to be wrong. Alex Todorovic, a Serbian-American who spent time in Belgrade during the conflict observed, "By and large, Serbs mistrust the rest of the world=s media. CNN, for example, is considered the official voice of Washington."8 Some Yugoslav surfers did not even bother looking at Western news sites on the Internet. When asked if she visited Web sites of Western news stations, one 22-year-old student replied, "No, I don=t believe in their information, so why should I upset myself?"9 Thus, it is not clear that the decision on the part of either Milosovic or NATO to keep the Internet open in Yugoslavia undermined Milosovic=s objectives. Further, given that people living in Yugoslavia personally witnessed and felt the effects of the NATO bombing and either disbelieved reports or heard little about Serb atrocities against the ethnic Albanians in Kosovo, it is not surprising that an anti-NATO discourse ran throughout Belgrade. As one pharmacist observed, "I have two children. The people who are bombing my kids are my only enemy right now."10
In addition to information relating to a particular policy issue, the Web offers cyberactivists various information that can help them use the Net effectively. For example, NetAction offers a training guide for the virtual activist. The guide provides information on the use of e-mail for outreach, organizing, and advocacy; Web-based outreach and advocacy tools; membership and fundraising; netiquette and policy issues; and various resources.11
Publication
The Internet offers several channels whereby advocacy groups and individuals can publish information (and disinformation) to further policy objectives. They can send it through e-mail and post it to newsgroups. They can create their own electronic publications or contribute articles and essays to those of others. They can put up Web pages with documents, images, audio and video clips, and other types of information. The Web sites can serve as a gathering place and source of information for supporters, potential supporters, and onlookers.
One reason the Internet is popular among activists is its cost advantage over traditional mass media. It is easier and cheaper to post a message to a public forum or put up a Web site than it is to operate a radio or television station or print a newspaper. Practically anyone can afford to be a publisher. In addition, the reach of the Internet is global. A message can potentially reach millions of people at no additional cost to the originator. Further, activists can control their presentation to the world. They decide what is said and how. They do not have to rely on the mass media to take notice and tell their story "right."
During the Kosovo conflict, organizations and individuals throughout the world used their Web sites to publish information related to the conflict and, in some cases, to solicit support. Non-government organizations with Kosovo-related Web pages included the press, human rights groups, humanitarian relief organizations, churches, and women=s groups.
Government Web sites on Kosovo tended to feature propaganda and materials that supported their official policies. An exception was the U.S. Information Agency Web site, which presented a survey of news stories from around the world, some of which were critical of NATO actions.12 Jonathan Spalter, USIA Chief Information Officer, commented that "The measure of our success is the extent to which we are perceived not as propaganda but anti-propaganda."13
The British government's Foreign Office used their Web site, in part, to counter Serb propaganda. Concerned that the Yugoslav public was getting a highly distorted view of the war, Foreign Secretary Robin Cook posted a message on their Web site intended for the Serbs. The message said that Britain has nothing against the Serbs, but was forced to act by the scale of Yugoslav President Slobodan Milosevic's brutality.14 British Defense Secretary George Robertson said the Ministry of Defence (MoD) had translated its Web site into Serbian to counter censorship by Belgrade of the news.15
The Yugoslav media was controlled by the Serbian government and served to promote Milosevic's policies. Yugoslavia had an independent, pro-democracy radio station, B92, but it was raided by the police in the early days of the Kosovo conflict and turned over to a government-appointed station manager.16 B92 had had a run-in with the government earlier in late 1996 when government jammers tried to keep it from airing news broadcasts. At that time, however, B92 prevailed, in part by encoding their news bulletins in RealAudio format and posting them on a Web site in Amsterdam. Radio Free Europe acquired tapes of the news programs and rebroadcasted them back to the Serbs, circumventing the jammers, who then gave up.17 But when the government took over B92's facility in 1999, B92's then-managers ceded to the government and also discontinued posting materials on their Web site, which had offered viewers a reliable source of information about the conflict. This was considered a great loss to Yugoslavia's pro-democracy movement and general public, which had rallied behind Belgrade's top-rated news station.
A few individuals inside Yugoslavia posted to the Internet first-hand accounts of events as they were being witnessed or shortly thereafter. Their stories told of fear and devastation, the latter caused not only by the Serb military, but also by NATO bombs. By all accounts, the situation inside Yugoslavia was horrible for citizens everywhere, whether Serbian or ethnic Albanian. The stories may have inspired activists and influenced public opinion, but it is not clear what if any impact they had on government decision making.
New-media artists used to the Web to voice their opinions on the Balkans conflict. In late March, artist and high-school teacher Reiner Strasser put up a site called Weak Blood, which featured works of visual poetry, kinetic imagery, and interactive art, all making an anti-violence statement. Strasser vowed to add one or two pieces a day "as long as bombs are falling and humans are massacred" in the region.18
Some Serbs with Internet access sent e-mails to American news organizations calling for an end to the NATO bombing. Many of the messages contained heated rhetoric that was anti-NATO and anti-U.S. One letter directed to the Associated Press ended, "To be a Serb now is to be helpless ... to listen to the euphemistic and hypocritic phrases as 'peace-making mission,' moral imperative." Other messages contained human stories about how their lives were affected. Tom Reid, London correspondent to the Washington Post, said he received 30-50 messages a day from professors at universities and activists all over Yugoslavia. The general tenor of the messages was all the same, "'Please remember there are human beings under your bombs,'" he said.19 The Serbs used e-mail distribution lists to reach tens of thousands of users, mostly in the United States, with messages attacking the NATO bombing campaign. One message read AIn the last nine days, NATO barbarians have bombed our schools, hospitals, bridges, killed our people but that was not enough for them now they have started to destroy our culture monuments which represents the core of existence of our nation.@ Most recipients were annoyed by this unwanted "spam," which the Wall Street Journal dubbed AYugospam.@20
Dennis Longley, a professor in the Information Security Research Centre at Australia's Queensland University of Technology, said they received a suspicious e-mail from Serbia. The message had two paragraphs. The first was the usual friendly greetings, while the second was a rant about NATO that read like pure propaganda, characterizing NATO as a "terrorist organization" that "brought nothing but a gigantic humanitarian disaster to Kosovo," while attributing the cause of the problem to "albanian terrorist and separatist actions, not the repression by the government security forces." The second paragraph exhibited a style unlike the first and a standard of English well below that of the sender, leading them to speculate that Serb authorities had modified the e-mail.21 If that is so, one is left wondering how much other anti-NATO talk hitting the Net was the work of the government.
Of course, not all of the messages coming out of the Balkans were anti-NATO. Shortly after the Kosovo conflict began, I found myself on a list called "kcc-news," operated by the Kosova [sic] Crisis Center from the Internet domain "alb-net.com." The messages included Human Rights Flashes from Human Rights Watch, Action Alerts from the Kosova Task Force,22 and other appeals for support in the war against the Serbs. One message contained a flier calling for "sustained air strikes until total Serb withdrawal" and "ground troops to STOP GENOCIDE now." The flier included links to Web pages that documented Serb atrocities and aggression.
Even though the Yugoslav government did not prohibit Internet activity, fear of government reprisals led some to post their messages through anonymous remailers so they could not be identified. This allowed for a freer discourse on Internet discussion groups and contributed to the spread of information about the situation inside Belgrade and Kosovo. Microsoft Corp. initiated a section called "Secret Dispatches from Belgrade" on the Web site of their online magazine Slate. An anonymous correspondent gives daily reports of both alleged Serb atrocities and civilian suffering inflicted by NATO bombs.23
After human rights organizations expressed concern that the Yugoslav government might be monitoring Internet activity and cracking down on anyone expressing dissenting views, Anonymizer Inc., a provider of anonymous Web browsing and e-mail services, launched the Kosovo Privacy Project Web site. The site, which went on-line in April, offered surfers anonymous e-mail and instant, anonymous access to Voice of America, Radio Free Europe, and about 20 other Web sites. According to Federal Computer Week, Anonymizer planned to add NATO and other Western government information sites to the Kosovo list, and to launch similar projects for human rights situations in other parts of the world, for example, China.24 However, the effectiveness of the Kosovo project was never established. In August, USA Today reported that activists said the project was little noticed inside Kosovo, where traditional media seemed unaware while the fighting knocked out Internet trunk lines in short order.25
The Internet has raised numerous policy issues in such areas as privacy, encryption, censorship, electronic commerce, international trade, intellectual property protection, taxation, Internet governance, cybercrime, and information warfare, all of which have a foreign policy dimension. As the issues surfaced and took on some urgency, existing industry and public-interest groups began to address them. In addition, both national and international advocacy groups sprung up specifically devoted to Internet issues. They all operate Web sites, where they publish policy papers and information about issues, events, and membership. Many also send out e-mail newsletters and alerts.
In the area of encryption policy, for example, the major players include Americans for Computer Privacy (ACP), the Center for Democracy and Technology (CDT), Cyber-Rights & Cyber Liberties, the Electronic Frontier Foundation (EFF), the Electronic Privacy Information Center (EPIC), the Global Internet Liberty Campaign (GILC), and the Internet Privacy Coalition. The ACP has perhaps the largest group of constituents, being composed of 40 trade associations, over 100 companies, and more than 3,000 individual members.26 GILC is one of the most global, with member organizations from Europe, North America, Australia, and Asia.
In July 1999, nine leading U.S.-based Internet companies joined forces to become the voice of the Internet on issues such as privacy, consumer protection, and international trade. The industry group, called NetCoalition.com, includes America Online, Amazon.com, eBay, Lycos, Yahoo!, DoubleClick, Excite@Home, Inktomi, and Theglobe.com. The companies represent 7 of the top 10 Internet sites and more than 90% of the world=s Internet users visit one of the sites at least once a month. The group plans to focus on 150 Internet-related bills that were introduced in Congress.27
The Internet is used extensively as a publication medium by hackers (including hacktivists) and terrorists. Hackers publish electronic magazines and put up Web sites with software tools and information about hacking, including details about vulnerabilities in popular systems (e.g., Microsoft Windows) and how they can be exploited, programs for cracking passwords, software packages for writing computer viruses, and scripts for disabling or breaking into computer networks and Web sites. In March 1997, an article in the New York Times reported that there were an estimated 1,900 Web sites purveying hacking tips and tools, and 30 hacker publications.28
Terrorist groups use the Internet to spread propaganda. Back in February 1998, Hizbullah was operating three Web sites: one for the central press office (www.hizbollah.org), another to describe its attacks on Israeli targets (www.moqawama.org), and the third for news and information (www.almanar.com.lb).29 That month, Clark Staten, executive director of the Emergency Response & Research Institute (ERRI) in Chicago, testified before a U.S. Senate subcommittee that "even small terrorist groups are now using the Internet to broadcast their message and misdirect/misinform the general population in multiple nations simultaneously." He gave the subcommittee copies of both domestic and international messages containing anti-American and anti-Israeli propaganda and threats, including a widely distributed extremist call for Ajihad@ (holy war) against America and Great Britain.30 In June 1998, U.S. News & World Report noted that 12 of the 30 groups on the U.S. State Department=s list of terrorist organizations are on the Web. As of August 1999, it appears that virtually every terrorist group is on the Web, along with a mishmash of freedom fighters, crusaders, propagandists, and mercenaries.31 Forcing them off the Web is impossible, because they can set up their sites in countries with free-speech laws. The government of Sri Lanka, for example, banned the separatist Liberation Tigers of Tamil Eelam, but they have not even attempted to take down their London-based Web site.32
Dialogue
The Internet offers several venues for dialogue and debate on policy issues. These include e-mail, newsgroups, Web forums, and chat. Discussions can be confined to closed groups, for example through e-mail, as well as open to the public. Some media sites offer Web surfers the opportunity to comment on the latest stories and current issues and events. Government officials and domain experts may be brought in to serve as catalysts for discussion, debate issues, or answer questions. Discussion can even take place on Web sites that themselves lack such facilities. Using Gooey software from the Israeli company Hypernix, for example, visitors to a Web site can chat with other Gooey users currently at the site.33
Internet discussion forums are frequently used to debate, blast, and maybe even attempt to influence government policies. Encryption policy, for example, is discussed on the e-mail lists "cypherpunks" and "ukcrypto" and on several newsgroups, including alt.privacy and sci.crypt.
The ukcrypto list created was created in early 1996 by two academics, Ross Anderson (Cambridge) and Paul Leyland (Oxford), and one person then in government, Brian Gladman (NATO SHAPE), who was acting outside his official capacity. Motivated by a concern that a lack of public discussion and debate in the United Kingdom on cryptography issues was allowing the government to set policies that they believed were not in interests of the United Kingdom and its citizens, they formed the list with the objective of impacting cryptography policy. They were concerned both with domestic policy, particularly proposals to restrict the use of cryptography by U.K. citizens, and on foreign policy, particularly export controls. As of May 1999, the list has 300 subscribers, including government officials responsible for U.K.policy and persons in other countries, including the United States. Many of the key contributors held influential positions in other policy making fora. Focus is on U.K. policy issues, but items of international interest are also discussed, including export controls adopted under the Wassenaar Arrangement (31 countries participate); policy changes adopted by France, the United States, and other countries; policy statements from the European Union and other organizations; and some technical issues.34
Gladman believes the list has made four contributions: 1) educating many about the policy issues and encouraging journalists and writers to write about them; 2) bringing individual and industry views closer together and allowing U.K. industry to see more clearly that agreeing with their government may not be a good thing if private citizens do not support government policy; 3) encouraging the more progressive voices in government to speak out and argue from within government that their views represent those of the public; and 4) bringing groups together that were previously campaigning separately. "The most significant contribution of ukcrypto is not direct," Gladman said. "It is the contribution that it has made in promoting an educated community of commentators and a forum for the review of what government is doing that is fully open."
On the downside, some postings on ukcrypto may alienate the very government officials the authors hope to influence. According to Gladman, Adiscussions on the list can become slinging matches that quickly put those in government on the defensive and hence inclined to discount what is being said. It would be more effective if we had a way of focusing on the issues and not the personalities.@35 But Andrew Brown gave ukcrypto high marks, crediting it with most of the thought and co-ordination behind the successful campaign to keep strong cryptography legal and widely available. "There, for the past two years, the civil servants responsible for policy have actually been available, more or less, to the people who disagree with them," he wrote in New Statesman. "They have had to justify their actions, not to the public, but to a small group of geographically dispersed experts ... It's a kind of updated version of Lions v Christians."36
Nigel Hickson, one of the principal players in the policy debates from the U.K. Department of Trade and Industry, agrees the Internet and ukcrypto in particular have played a role in shaping U.K. cryptography policy.37 But he was also critical of the list: "Whilst ukcyrpto has undoubtedly had an influence on the development of UK encryption policy, it has tended to polarise the debate into extremes. This may be because there tends to be a large silent majority on the list who do not directly contribute because o f commercial or policy reasons."38 Besides participating in ukcrypto, the DTI has published draft consultation documents on the Web for comment. Many of the comments they receive arrive through electronic mail. DTI has also met with industry groups and participated in non-Internet forums such as conferences and seminars. These have also helped shape policy decisions.
There are Usenet newsgroups and other interactive forums that focus on practically every conceivable topic relating to foreign (and domestic) policy. Whether these are effective or not in terms of influencing policy is another matter. After studying the impact of the Net on the American political system, Richard Davis, a political science professor at Brigham Young University and author of The Web of Politics, observed that "In Usenet political discussions, people talk past one another, when they are not verbally attacking each other. The emphasis is not problem solving, but discussion dominance."39 Davis also found interactivity on the Internet to be primarily an illusion: "Interest groups, party organizations, and legislators seek to use the Web for information dissemination, but they are rarely interested in allowing their sites to become forums for the opinions of others."40
Coordination of Action
Advocacy groups can use the Internet to coordinate action among members and with other organizations and individuals. Action plans can be distributed by e-mail or posted on Web sites. Services are cheaper than phone and fax (although these services can also be delivered through the Internet), and faster than physical delivery (assuming Internet services are operating properly, which is not always the case). The Internet lets people all over the world coordinate action without regard to constraints of geography or time. They can form partnerships and coalitions or operate independently.
One Web site was created to help activists worldwide coordinate and locate information about protests and meetings. According to statements on Protest.Net, the Web site serves "to help progressive activists by providing a central place where the times and locations of protests and meetings can be posted." The site=s creator said he hoped it would "help resolve logistical problems that activists face in organizing events with limited resources and access to mass media."41 The site features news as well as action alerts and information about events.
The power of the Internet to mobilize activists is illustrated by the arrest of Kurdish rebel leader Abdullah Ocalan. According to Michael Dartnell, a political science professor at Concordia University, when Turkish forces arrested Ocalan, Kurds around the world responded with demonstrations within a matter of hours. He attributed the swift action in part to the Internet and Web. "They responded more quickly than governments did to his arrest," he said. Dartnell contends the Internet and advanced communication tools were changing the way people around the world play politics. Anti-government groups are establishing alliances and coalitions that might not have existed before the technology was introduced.42
The force of the Internet is further illustrated by the day of protest against business that took place on June 18, 1999. The protests, which were set up to coincide with a meeting of the G8 in Cologne, Germany, was coordinated by a group called J18 from a Web site inviting people to plan individual actions focusing on disrupting "financial centres, banking districts and multinational corporate power bases." Suggested activity included marches, rallies, and hacking. In London, up to 2,000 anti-capitalists coursed through the city shouting slogans and spray-painting buildings.43 According to the Sunday Times, teams of hackers from Indonesia, Israel, Germany, and Canada attacked the computers of at least 20 companies, including the Stock Exchange and Barclays. More than 10,000 attacks were launched over a 5-hour period.44
During the Kosovo conflict, the Kosova Task Force used the Internet to distribute action plans to Muslims and supporters of Kosovo. A March 31 Action Alert, for example, asked people to organize rallies in solidarity with Kosovo at local federal buildings and city halls on April 3 at 11:00 AM; organize public funeral prayers; make and encourage others to make daily calls or send e-mail to the White House asking for Kosovo independence, sustained air strikes until total Serb withdrawal from Kosovo, and arming of ethnic Albanians in Kosovo; and make and encourage others to make calls to their Representatives and Senators. An April 18 alert asked every community in the U.S. to establish a Kosova Room for action and information. Each room was to be equipped with a bank of phones for making 1,000 calls to the White House and Congress in support of resolution #HCR 9, calling for independence of Kosovo.
The International Campaign to Ban Landmines (ICBL), a loose coalition of over 1,300 groups from more than 75 countries, has made extensive use of the Internet in their efforts to stop the use, production, stockpiling, and transfer of antipersonnel landmines, and to increase international resources for humanitarian mine clearance and victim assistance. According to ICBL=s Liz Bernstein, the Net has been the dominant form of communication since 1996.45 It has been used to coordinate events and committee functions, distribute petitions and action alerts, raise money, and educate the public and media. Although most direct lobbying is done through face-to-face meetings and letters, e-mail has facilitated communications with government policy makers. Bernstein said the Net Ahas helped the nature of the campaign as a loose coalition, each campaign setting their own agenda yet with common information and communication.@46 Ken Rutherford, co-founder of Land Mine Survivors Network, noted that the Internet also helped establish bridges from North America and Europe to Asia and Africa, and helped enable quick adoption of the 1997 landmine treaty.47 It became international law on March 1, 1999 and, as of September 16,1999, has been signed by 135 countries and ratified by 86. In 1997, the Nobel Peach Prize was awarded to the ICBL and its then coordinator, Jody Williams.48
Human rights workers increasingly use the Internet to coordinate their actions against repressive governments. One tool that has become important in their battles is encryption, as it allows activists to protect communications and stored information from government interception. Human rights activists in Guatemala, for example, credited their use of Pretty Good Privacy (PGP) with saving the lives of witnesses to military abuses.49 Encryption is not the ultimate solution, however, as governments can outlaw its use and arrest those who do not comply.
PGP was originally developed by a Colorado engineer and activist, Phil Zimmermann, who wanted to make strong encryption available to the public for privacy protection against government eavesdroppers. Although the software was export-controlled, someone (not Zimmermann) quickly posted it on a foreign Internet site where it could be downloaded by anyone, anywhere, despite export regulations. Since then, other encryption tools have been posted on Internet sites all over the world, and the argument is frequently made that the availability of such tools demonstrates the futility of export controls. This is one factor driving export policy towards increased liberalization, but other factors have also contributed, including the role of encryption in electronic commerce and a concern that export controls harm the competitiveness of industry. That drive is countered, however, by a concern that the widespread availability of encryption will make it harder for law enforcement and intelligence agencies to gather intelligence from communications intercepts.
Indeed, terrorists also use the Internet to communicate and coordinate their activities. Back in 1996, the headquarters of terrorist financier bin Laden in Afghanistan was equipped with computers and communications equipment. Egyptian "Afghan" computer experts were said to have helped devise a communication network that used the Web, e-mail, and electronic bulletin boards.50 Hamas activists have been said to use chat rooms and e-mail to plan operations and coordinate activities, making it difficult for Israeli security officials to trace their messages and decode their contents.51
The U.S. government's program to establish an Advanced Encryption Standard (AES) illustrates how government can use the Internet to invite and coordinate participation in a decision-making process of international significance. The Department of Commerce National Institute of Standards and Technology (NIST) set up a Web site with information about the AES program and AES conferences, a schedule of events, candidate encryption algorithms (more than half from outside the United States), documentation and test values, and links to public analysis efforts all over the world. The site contains an electronic discussion forum and Federal Register call for comments. Public comments are posted on the site and NIST representatives contribute to the on-line discussions and answer questions.52 Because the AES will offer a foundation for secure electronic commerce and privacy internationally, involving the international community from the beginning will help ensure its success and widespread adoption. Cryptographers from all over in the world have been participating.
NIST's use of the Internet to aid a decision process seems to be unusual. While most government sites provide an e-mail address for making contact, they do not support discussion forums or even actively solicit comments on specific pending policy decisions. However, to the extent that government agencies invite or welcome e-mail messages and input through electronic discussion groups, the Internet can serve the democratic process. Because it is easier to post or send a message on the Internet than to send a written letter, professionals and others with busy schedules may be more inclined to participate in a public consultation process or attempt to influence policy when policy makers are readily accessible through the Internet.
Lobbying Decision Makers
Whether or not government agencies solicit their input, activists can use the Internet to lobby decision makers. One of the methods suggested by the Kosova Task Force for contacting the White House, for example, was e-mail. Similarly, a Canadian Web site with the headline "Stop the NATO Bombing of Yugoslavia Now!" urged Canadians and others interested in stopping the war to send e-mails and/or faxes to the Canadian Prime Minister, Jean Chretien, and all members of the Canadian Parliament. A sample letter was included. The letter concluded with an appeal to Astop aggression against Yugoslavia and seek a peaceful means to resolve the Kosovo problem.@53
E-mail has been credited with halting a U.S. banking plan aimed to combat money laundering. Under the "Know Your Customer" policy, banks would have been required to monitor customer's banking patterns and report inconsistencies to federal regulators. Recognizing the value of the Internet to its deliberations, the Federal Deposit Insurance Corporation (FDIC) put up a Web site, published an e-mail address for comments, and printed out and tabulated each message. By the time the proposal was withdrawn, they had received 257,000 comments, 205,000 (80%) of which arrived through e-mail. All but 50 of the letters opposed the plan. FDIC=s chair, Donna Tanoue, said it was the huge volume of e-mail that drove the decision to withdraw the proposal. "It was the nature and the volume [of the comments]," she said. "When consumers can get excited about an esoteric bank regulation, we have to pay attention."54
Most of the e-mail was driven by an on-line advocacy campaign sponsored by the Libertarian Party. About 171,000 (83%) of the e-mail messages were sent through the party's Web site. The party advertised its advocacy campaign in talk radio interviews and by sending a notice to its e-mail membership list.55 One could argue that the results were due more to the efforts of a large non-government organization than to a grassroots response from the citizens.
Indeed, many e-mail campaigns have been driven by non-government organizations. The organizations send e-mail alerts on issues to electronic mailing lists, offer sample letters to send members of Congress and other decision making bodies, and, in some cases, set up e-mailboxes or Web sites to gather signatures for petitions. The petition process can be automated, making it possible to gather huge volumes of signatures across a wide geographic area with little effort and cost. One Web site, e-The People, offers hundreds of petitions to choose from and 170,000 e-mail addresses of government officials.56
Computer Professionals for Social Responsibility (CPSR) organized an Internet petition campaign in early 1994 to protest the U.S. government's proposal to adopt the Clipper encryption chip as a standard.57 The chip offered strong encryption, but would have given law enforcement agencies the capability to decrypt a subject's messages when conducting a court-ordered wiretap against the subject. Despite numerous safeguards to ensure government agencies could not violate the privacy of users of the chip,58 Clipper was strongly opposed for privacy (and other) reasons, and the general sentiment expressed on Internet newsgroups and e-mail discussion lists was strongly anti-Clipper. CPSR announced their petition through e-mail and set up an e-mail address whereby people could sign on. They collected tens of thousands of signatures, but it is not clear the petition had much impact. The government moved forward with the standard anyway.59
Although Clipper was to be a U.S. standard, it was tied in with the government=s foreign encryption policy. Because of its back door, it was to be generally exportable, unlike other encryption products with comparable cryptographic strength. Also, the Administration urged other governments to adopt a similar approach. However, after extensive lobbying efforts by industry and civil liberties groups, Clipper met its death. The government moved instead toward a more flexible and liberal approach to encryption export controls.
Because of the low cost of operation, individuals can run their own advocacy campaigns. For example, during the heart of the impeachment process against President Clinton, Joan Blades and Wes Boyd, a husband and wife team in Berkeley, founded MoveOn.org and put up a Web site inviting citizens to sign a one-sentence petition: "The Congress must immediately censure President Clinton and move on to pressing issues facing the country." In just four months, the petition gathered a half-million signatures. Another petition that read "In the Year 2000 election, I will work to elect candidates who courageously address key national issues and who reject the politics of division and personal destruction" was sent to every member of the House and Senate. MoveOn.org received pledges of $13 million and more than 650,000 volunteer hours for congressional candidates in the 2000 election who supported their position.60 It is difficult to assess the impact of the site on the impeachment process, but it may have amplified public opinion polls, which showed the American public supported Clinton and wanted Congress to turn to other issues.
While activists can attempt to influence policy makers through e-mail, it is not clear most policy makers listen (the FDIC, which asked for comments, was an exception). Richard Davis found that "the Internet has not lived up to its promise as a forum for public expression to elected officials. In fact, while publicly encouraging e-mail, members are becoming increasingly disenchanted with it. If the most idealistic members originally envisioned e-mail as the impetus for intelligent communication with constituents, they have seen e-mail deteriorate into a mass mailing tool for political activists." Davis concluded that "members may even discount e-mail communication."61 According to the Wall Street Journal, Senator Charles Schumer's office gives first priority to old-fashioned letters. Persons sending an e-mail to his account get back an automatic response telling them to submit a letter if they want a personal reply.62
The most successful advocacy groups are likely to be those that use the Internet to augment traditional lobbying methods, including personal visits to decision makers and use of broadcast media to reach the public. These operations can be time consuming and expensive, favoring groups that are well-funded. They also require a network of long-term and trusted relationships with policy makers, sponsors, and voters. This supports Davis's conclusion that the promise of the Internet as a forum for participatory democracy is unlikely to be realized. Davis found that existing dominant players in American politics -- the media, interest groups, candidates, and policy makers -- are adapting to the Internet to retain preeminence; and that the Internet is not an adequate tool for public political movement.63
Hacktivism
Hacktivism is the convergence of hacking with activism, where "hacking" is used here to refer to operations that exploit computers in ways that are unusual and often illegal, typically with the help of special software ("hacking tools"). Hacktivism includes electronic civil disobedience, which brings methods of civil disobedience to cyberspace. This section explores four types of operations: virtual sit-ins and blockades; automated e-mail bombs; Web hacks and computer break-ins; and computer viruses and worms. Because hacking incidents are often reported in the media, operations in this category can generate considerable publicity for both the activists and their causes.
Virtual Sit-Ins and Blockades
A virtual sit-in or blockade is the cyberspace rendition of a physical sit-in or blockade. The goal in both cases is to call attention to the protestors and their cause by disrupting normal operations and blocking access to facilities.
With a sit-in, activists visit a Web site and attempt to generate so much traffic against the site that other users cannot reach it. A group calling itself Strano Network conducted one of the first such demonstrations as a protest against French government policies on nuclear and social issues. On December 21, 1995, they launched a one-hour Net-Strike attack against the Web sites operated by various government agencies. At the appointed hour, participants from all over the world were instructed to point their browsers to the government Web sites. According to reports, at least some of the sites were effectively knocked out for the period.64
In 1998, the Electronic Disturbance Theater (EDT) took the concept of electronic civil disobedience a step further. They organized a series of Web sit-ins, first against Mexican President Zedillo=s Web site and later against President Clinton=s White House Web site, the Pentagon, the School of the Americas, the Frankfurt Stock Exchange, and the Mexican Stock Exchange. The purpose was to demonstrate solidarity with the Mexican Zapatistas.65 According to EDT=s Brett Stalbaum, the Pentagon was chosen because Awe believe that the U.S. military trained the soldiers carrying out the human rights abuses.@ For a similar reason, the School of the America=s was selected.66 The Frankfurt Stock Exchange was targeted, Stalbaum said, "because it represented capitalism's role in globalization utilizing the techniques of genocide and ethinic cleansing, which is at the root of the Chiapas' problems. The people of Chiapas should play a key role in determining their own fate, instead of having it pushed on them through their forced relocation (at gunpoint), which is currently financed by western capital."67
To facilitate the strikes, the organizers set up special Web sites with automated software. All participants had to do was visit one of the FloodNet sites. When they did, their browser would download the software (a Java Applet), which would access the target site every few seconds. In addition, the software let protesters leave a personal statement on the targeted server=s error log. For example, if they pointed their browsers to a non-existent file such as "human_rights" on the target server, the server would return and log the message "human_rights not found on this server." Stalbaum, who wrote the software, characterized FloodNet as "conceptual net art that empowers people through active/artistic expression."68
EDT estimated that 10,000 people from all over the world participated in the sit-in on September 9 against the sites of President Zedillo, the Pentagon, and the Frankfurt Stock Exchange, delivering 600,000 hits per minute to each. The Pentagon, however, did not sit by idly. It struck back. When their server sensed an attack from the FloodNet servers, they launched a counter-offensive against the users= browsers, redirecting them to a page with an Applet program called "HostileApplet." Once there, the Applet was downloaded to their browsers, where it endlessly tied up their machines trying to reload a document until the machines were rebooted. President Zedillo=s site did not strike back on this occasion, but at a June sit-in, they used software that caused the protestors= browsers to open window after window until their computers crashed. The Frankfurt Stock Exchange reported that they were aware of the protest, but believed it had not affected their services. They said that they normally got about 6 million hits a day. Overall, EDT considered the attack a success. "Our interest is to help the people of Chiapas to keep receiving the international recognition that they need to keep them alive," said Stalbaum.69
When asked about the impact of their Web strikes, EDT's Ricardo Dominguez responded, "Digital Zapatismo is and has been one of the most politically effective uses of the Internet that we know of since January 1, 1994. It has created a distribution network of information with about 100 or more autonomous nodes of support. This has enabled the EZLN (Zapatista National Liberation Army) to speak to the world without having to pass through any dominant media filter. The Zapatistas were chosen by Wired as one of the twenty-five most important people on-line in 1998. ... The Zapatista network has, also, held back a massive force of men and the latest Drug War technologies from annihilating the EZLN in a few days." Regarding FloodNet specifically, he said the main purpose of the Electronic Disturbance Theatre's Zapatista FloodNet performance "is to bring the situation in Chiapas to foreground as often as possible. The gesture has created enough ripples with the Pentagon and the Mexican government that they have had to respond using both on-line and off-line tactics. Thus, these virtual sit-ins have captured a large amount of traditional media attention. You would not be interviewing us if this gesture had not been effective in getting attention to the issues on a global scale."70
EDT has used their FloodNet software against the White House Web site to express opposition to U.S. military strikes and economic sanctions against Iraq. In their "Call for FloodNet Action for Peace in the Middle East," EDT articulated their philosophy. "We do not believe that only nation-states have the legitimate authority to engage in war and aggression. And we see cyberspace as a means for non-state political actors to enter present and future arenas of conflict, and to do so across international borders."71 Animal right=s activists have also used the FoodNet software to protest the treatment of animals. Over 800 protestors from more than 12 countries joined a January 1999 sit-in against Web sites in Sweden.72 And on June 18, FloodNet was one of the tools used in the anti-capitalist attack coordinated by J18.73
Whether Web sit-ins are legal is not clear. Mark Rasch, former head of the Department of Justice=s computer crime unit, said that such attacks run the risk of violating federal laws, which make it a crime to distribute a program, software code, or command with the intent to cause damage to another's site. AIt may be an electronic sit-in, but people get arrested at sit-ins,@ he said.74 A related question is the legality of using a denial-of-service counter-offensive. In the case of the Pentagon, their response most likely would be considered lawful, as it is permissible for a nation to take "proportional" actions to defend against an attack that threatens its security.
There are a variety of methods whereby an individual, acting alone, can disrupt or disable Internet servers. These frequently involve using attack software that floods the server with network packets. During the Kosovo conflict, Belgrade hackers were credited with conducting such attacks against NATO servers. They bombarded NATO=s Web server with Aping@ commands, which test whether a server is running and connected to the Internet. The effect of the attacks was to cause line saturation of the targeted servers.75
When large numbers of individuals simultaneously attack a designated site, such as with the ECD Web sit-ins, the operation is sometimes referred to as "swarming." Swarming can amplify other types of attack, for example, a ping attack or an e-mail bombing (discussed next).
E-Mail Bombs
It is one thing to send one or two messages to government policy makers, even on a daily basis. But it is quite another to bombard them with thousands of messages at once, distributed with the aid of automated tools. The effect can be to completely jam a recipient=s incoming e-mail box, making it impossible for legitimate e-mail to get through. Thus, an e-mail bomb is also a form of virtual blockade. Although e-mail bombs are often used as a means of revenge or harassment, they have also been used to protest government policies.
In what some U.S. intelligence authorities characterized as the first known attack by terrorists against a country's computer systems, ethnic Tamil guerrillas were said to have swamped Sri Lankan embassies with thousands of electronic mail messages. The messages read "We are the Internet Black Tigers and we=re doing this to disrupt your communications."76 An offshoot of the Liberation Tigers of Tamil Eelam, which had been fighting for an independent homeland for minority Tamils, was credited with the 1998 incident.77
The e-mail bombing consisted of about 800 e-mails a day for about two weeks. William Church, editor for the Centre for Infrastructural Warfare Studies (CIWARS), observed that "the Liberation Tigers of Tamil are desperate for publicity and they got exactly what they wanted ... considering the routinely deadly attacks committed by the Tigers, if this type of activity distracts them from bombing and killing then CIWARS would like to encourage them, in the name of peace, to do more of this type of "terrorist activity."78 The attack, however, was said to have had the desired effect of generating fear in the embassies.
During the Kosovo conflict, protestors on both sides e-mail bombed government sites. According to PA News, Nato spokesman Jamie Shea said their server had been saturated at the end of March by one individual who was sending them 2,000 messages a day.79 Fox News reported that when California resident Richard Clark heard of attacks against NATO=s Web site by Belgrade hackers, he retaliated by sending an e-mail bomb to the Yugoslav government=s site. Clark said that a few days and 500,000 e-mails into the siege, the site went down. He did not claim full responsibility, but said he "played a part." That part did not go unrecognized. His Internet service provider, Pacific Bell, cut off his service, saying his actions violated their spamming policy.80
An e-mail bombing was conducted against the San Francisco-based Internet service provider Institute for Global Communications (IGC) in 1997 for hosting the Web pages of the Euskal Herria Journal, a controversial publication edited by a New York group supporting independence of the mountainous Basque provinces of northern Spain and southwestern France. Protestors claimed IGC "supports terrorism" because a section on the Web pages contained materials on the terrorist group Fatherland and Liberty, or ETA, which was responsible for killing over 800 during its nearly 30-year struggle for an independent Basque state. The attack against IGC began after members of the ETA assassinated a popular town councilor in northern Spain.81
The protestor's objective was censorship. They wanted the site pulled. To get their way, they bombarded IGC with thousands of bogus messages routed through hundreds of different mail relays. As a result, mail was tied up and undeliverable to IGC's e-mail users, and support lines were tied up with people who couldn't get their mail. The attackers also spammed IGC staff and member accounts, clogged their Web page with bogus credit card orders, and threatened to employ the same tactics against organizations using IGC services. The only way IGC could stop the attack was by blocking access from all of the relay servers.82
IGC pulled the site on July 18, but not before archiving a copy so that others could put up mirrors. Within days of the shutdown, mirror sites appeared on half a dozen servers on three continents. Chris Ellison, a spokesman for the Internet Freedom Campaign, an English group that was hosting one of the mirrors, said they believe "the Net should prove an opportunity to read about and discuss controversial ideas." The New York-based journal maintained their objective was to publish "Ainformation often ignored by the international media, and to build communication bridges for a better understanding of the conflict."83 An article by Yves Eudes in the French newspaper Le Monde said the e-mail bomb attack against the IGC site represented an "unprecedented conflict@ that Ahas opened up a new era of censorship, imposed by direct action from anonymous hackers."84
About a month after IGC threw the controversial Basque journal Euskal Herria Journal off its servers, Scotland Yard=s Anti-Terrorist Squad shut down Internet Freedom's U.K. Web site for hosting the journal. According to a press release from Internet Freedom, the squad claimed to be acting against terrorism. Internet Freedom said it would move its news operations to its U.S. site.85
The case involving Euskal Herria Journal illustrates the power of hacktivists on the Internet. Despite IGC's desire to host the controversial site, they simply could not sustain the attack and remain in business. They could have ignored a few e-mail messages demanding that the site be pulled, but they could not ignore an e-mail bombing. The case also illustrates the power of the Internet as a tool for free speech. Because Internet venues for publication are rich and dispersed throughout the world, it is extremely difficult for governments and hacktivists alike to keep content completely off the Internet. It would require extensive international cooperation and, even then, a site could operate out of a safe haven that did not sign on to international agreements.
Web Hacks and Computer Break-Ins
The media is filled with stories of hackers gaining access to Web sites and replacing some of the content with their own. Frequently, the messages are political, as when a group of Portuguese hackers modified the sites of 40 Indonesian servers in September 1998 to display the slogan "Free East Timor" in large black letters. According to the New York Times, the hackers also added links to Web sites describing Indonesian human rights abuses in the former Portuguese Colony.86 Then in August 1999, Jose Ramos Horta, the Sydney-based Nobel laureate who represents the East Timor independence movement outside Indonesia, warned that a global network of hackers planned to bring Indonesia to a standstill if Jakarta sabotaged the ballot on the future of East Timor. He told the Sydney Morning Herald that more than 100 hackers, mostly teenagers in Europe and the United States, had been preparing the plan.87
In June 1998, a group of international hackers calling themselves Milw0rm hacked the Web site of India's Bhabha Atomic Research Center (BARC) and put up a spoofed Web page showing a mushroom cloud and the text "If a nuclear war does start, you will be the first to scream ...". The hackers were protesting India=s recent nuclear weapons tests, although they admitted they did it mostly for thrills. They said that they also downloaded several thousand pages of e-mail and research documents, including messages between India's nuclear scientists and Israeli government officials, and had erased data on two of BARC's servers. The six hackers, whose ages range from 15 to 18, hailed from the United States, England, the Netherlands, and New Zealand.88
Another way in which hacktivists alter what viewers see when they go to a Web site is by tampering with the Domain Name Service so that the site=s domain name resolves to the IP address of some other site. When users point their browsers to the target site, they are redirected to the alternative site.
In what might have been one of the largest mass home page takeovers, the antinuclear Milw0rm hackers were joined by Ashtray Lumberjacks hackers in an attack that affected more than 300 Web sites in July 1998. According to reports, the hackers broke into the British Internet service provider EasySpace, which hosted the sites. They altered the ISP=s database so that users attempting to access the sites were redirected to a Milw0rm site, where they were greeted with a message protesting the nuclear arms race. The message concluded with "... use your power to keep the world in a state of PEACE and put a stop to this nuclear bullshit." John Vranesevich, who runs the hacker news site AntiOnline, said, "They're the equivalent to the World Trade Center bombings; [they] want to get their story told and bring attention to themselves."89'
Several Web sites were hacked during the Kosovo conflict. According to Fox News, the Boston Globe reported that an American hacking group called Team Spl0it broke into government Web sites and posted statements such as "Tell your governments to stop the war." Fox also said that the Kosovo Hackers Group, a coalition of European and Albanian hackers, had replaced at least five sites with black and red "Free Kosovo" banners.90 The Bosnian Serb news agency SRNA reported that the Serb Black Hand hackers group had deleted all data on a U.S. Navy computer, according to the Belgrade newspaper Blic. Members of the Black Hand group and Serbian Angel planned daily actions that would block and disrupt military computer operated by NATO countries, Blic wrote.91 Black Hand had earlier claimed responsibility for crashing a Kosovo Albanian Web site. "We shall continue to remove (ethnic) Albanian lies from the Internet," a member of the group told Blic.92
In the wake of NATO's accidental bombing of China=s Belgrade embassy in May, angry Chinese allegedly hacked several U.S. government sites. Newsbytes reported that the slogan Adown with barbarians@ was placed in Chinese on the home page of the U.S. Embassy in Beijing, while the Department of Interior Web site showed images of the three journalists killed during the bombing, crowds protesting the attack in Beijing, and a fluttering Chinese flag.93 According to the Washington Post, Interior spokesman Tim Ahearn said their computer experts had traced their hacker back to China. The newspaper also reported that the Department of Energy's home page read:
"Protest U.S.A.=s Nazi action! Protest NATO=s brutal action! We are Chinese hackers who take no cares about politics. But we can not stand by seeing our Chinese reporters been killed which you might have know. Whatever the purpose is, NATO led by U.S.A. must take absolute responsibility. You have owed Chinese people a bloody debt which you must pay for. We won=t stop attacking until the war stops!"94
NATO did not, of course, declare an end to the war because of the hacking. The impact on foreign policy decisions, if any at all, likely paled in comparison to the bombing itself. Following the accident, China suspended high-level military contacts with the United States.95
Acting in the name of democracy and human rights, hackers have targeted Chinese government computers. One group, called the Hong Kong Blondes, allegedly infiltrated police and security networks in an effort to monitor China=s intelligence activities and warn political targets of imminent arrests.96 According to OXblood Ruffin, "foreign minister" of the Cult of the Dead Cow, the Blondes are an underground group of Chinese dissidents who aim to destabilize the Chinese government. They have threatened to attack both Chinese state-owned organizations and Western companies investing in the country.97
The Los Angeles Times reported that a California computer science student who calls himself Bronc Buster and his partner Zyklon cracked the Chinese network, defacing a government-run Web site on human rights and interfering with censorship. The hacker said they came across about 20 firewall servers blocking everything from Playboy.com to Parents.com, and that they disabled the blocking on five of the servers. He said they did not destroy any data, but only moved files.98
Bronc Buster belonged to a group of 24 hackers known as the Legion of the Underground (LoU). In a press conference on Internet Relay Chat (IRC) in late December 1998, an LoU member declared cyberwar on the information infrastructures of China and Iraq. He cited civil rights abuses and said LoU called for the complete destruction of all computer systems in China and Iraq.99
The declaration of cyberwar prompted a coalition of other hacking groups to lash out against the campaign. A letter co-signed by 2600, the Chaos Computer Club, the Cult of the Dead Cow (CDC), !Hispahak, L0pht Heavy Industries, Phrack, Pulhas, and several members of the Dutch hacking community denounced the cyberwar, saying "Declaring war against a country is the most irresponsible thing a hacker group could do. This has nothing to do with hacktivism or hacker ethics and is nothing a hacker could be proud of." Reid Fleming of the CDC said "One cannot legitimately hope to improve a nation=s free access to information by working to disable its data networks."100
By the time the letter went out, LoU had already issued a statement saying that the declaration of war on IRC did not represent the position of the group. "The LoU does not support the damaging of other nations computers, networks or systems in any way, nor will the LoU use their skills, abilities or connections to take any actions against the systems, networks or computers in China or Iraq which may damage or hinder in any way their operations."101 Bronc Buster said the IRC declaration was issued by a member before he left and never came back.102
In August 1999, a cyberwar erupted between hackers in China and Taiwan. Chinese hackers defaced several Taiwanese and government Web sites with pro-China messages saying Taiwan was and would always be an inseparable part of China. "Only one China exists and only one China is needed," read a message posted on the Web site of Taiwan=s highest watchdog agency.103 Taiwanese hackers retaliated and planted a red and blue Taiwanese national flag and an anti-Communist slogan: "Reconquer, Reconquer, Reconquer the Mainland," on a Chinese high-tech Internet site. The cyberwar followed an angry exchange by Chinese and Taiwanese in response to Taiwan's President Lee Teng-hui's statement that China must deal with Taiwan on a "state-to-state" basis.104
One of the consequences of hacking is that victims might falsely attribute an assault to a foreign government rather than the small group of activists that actually conducted it. This could strain foreign relations or lead to a more serious conflict.
The Chinese government has been accused of attacking a U.S. Web site devoted to the Falun Gong meditation sect, which Chinese authorities outlawed in July 1999. Bob McWee, a sect practitioner in Middleton, Maryland, said his site had been under a persistent electronic assault. In addition to a continuous denial-of-service attack, someone had tried breaking into his server. He said he was able to trace the penetration attempt to the Internet Monitoring Bureau of China's Public Security Ministry.105 If the attack did indeed originate with the Chinese police, this would have major foreign policy implications. It would suggest that the Chinese government views Web sites operating on foreign soil as legitimate targets of aggression when those sites support activities prohibited on home soil.
Web hacks and computer break-ins are extremely common, and targets include commercial and educational computers as well as government ones. The results of the 1999 Information Security Industry Survey showed that the number of companies experiencing penetrations jumped from 12% in 1997 to 23% in 1998 (almost double).106 About 26% of respondents to the ERRI/EmergencyNet News Local/County/State Computer "Hacking" Survey said they thought they had been the victims of an unauthorized intrusion or attack on their computer systems.107 And 30% of respondents to the 1999 CSI/FBI Computer Crime and Security Survey reported intrusions from outsiders.108 Most of the attacks, however, were probably not motivated by politics (hacktivism), but rather thrills, curiosity, ego, revenge, or financial gain. In the area of Web hacks alone, Attrition.Org recorded more than 1,400 cases of vandalism by July 1999 for the year.109
Computer Viruses and Worms
Hacktivists have used computer viruses and worms to spread protest message and damage target computer systems. Both are forms of malicious code that infect computers and propagate over computer networks. The difference is that a worm is an autonomous piece of software that spreads on its own, whereas a virus attaches itself to other files and code segments and spreads through those elements, usually in response to actions taken by users (e.g., opening an e-mail attachment). The boundary between viruses and worms, however, is blurry and not important to the discussion here.
The first protest to use a worm occurred about a decade ago, when anti-nuclear hackers released a worm into the U.S. National Aeronautics and Space Administration SPAN network. On October 16, 1989, scientists logging into computers at NASA's Goddard Space Flight Center in Greenbelt, Maryland, were greeted with a banner from the WANK worm:
W O R M S A G A I N S T N U C L E A R K I L L E R S _______________________________________________________________ \__ ____________ _____ ________ ____ ____ __ _____/ \ \ \ /\ / / / /\ \ | \ \ | | | | / / / \ \ \ / \ / / / /__\ \ | |\ \ | | | |/ / / \ \ \/ /\ \/ / / ______ \ | | \ \| | | |\ \ / \_\ /__\ /____/ /______\ \____| |__\ | |____| |_\ \_/ \___________________________________________________/ \ / \ Your System Has Been Officically WANKed / \_____________________________________________/
You talk of times of peace for all, and then prepare for war.
At the time of the attack, antinuclear protestors were trying to stop the launch of the shuttle that carried the Galileo probe on its initial leg to Jupiter. Galileo's 32,500-pound booster system was fueled with radioactive plutonium. John McMahon, protocol manager with NASA's SPAN office, estimated that the worm cost them up to half a million dollars of wasted time and resources. It did not have its intended effect of stopping the launch. The source of the attack was never identified, but some evidence suggested that it might have come from hackers in Australia.110
Computer viruses have been used to propagate political messages and, in some cases, cause serious damage. In February 1999, the London Sunday Telegraph reported that an Israeli teen had become a national hero after he claimed to have wiped out an Iraqi government Web site. "It contained lies about the United States, Britain and Israel, and many horrible statements against Jews," 14-year-old Nir Zigdon said.111 "I figured that if Israel is afraid of assassinating Saddam Hussein, at least I can try to destroy his site. With the help of some special software I tracked down the site=s server to one of the Gulf states."112 The Tel Aviv hacktivist then sent a computer virus in an e-mail attachment to the site. "In the e-mail message, I claimed I was a Palestinian admirer of Saddam who had produced a virus capable of wiping out Israeli websites," Zigdon said. "That persuaded them to open the message and click on the designated file. Within hours the site had been destroyed. Shortly afterwards I received an e-mail from the site manager, Fayiz, that told me to 'go to hell'."113
During the Kosovo conflict, businesses, public organizations, and academic institutes received virus-laden e-mails from a range of Eastern European countries, according to mi2g, a London-based Internet software company. "The contents of the messages are normally highly politicised attacks on NATO's unfair aggression and defending Serbian rights using poor English language and propaganda cartoons," the press release said. It went on to say "The damage to the addressee is usually incorporated in several viruses contained within an attachment, which may be plain language or anti-NATO cartoon."114 In an earlier press release, mi2g warned that "The real threat of cyber warfare from Serbian hackers is to the economic infrastructure of NATO countries and not to their better prepared military command and control network."115
It is extremely difficult, perhaps impossible, for an organization to prevent all viruses, as users unwittingly open e-mail attachments with viruses and spread documents with viruses to colleagues. Although anti-viral tools can detect and eradicate viruses, the tools must be kept up-to-date across the enterprise, which may have tens of thousands of machines, and they must be installed and used properly. While viruses bearing political messages may not seem to pose a serious problem, an organization hit by one may have to shut down services in order to eradicate it from its network.
The seriousness of viruses is underscored by two recent surveys. The 1999 Information Security Industry survey found that 77% of respondents had experienced a computer virus. This was up from 73% in 1998. More distressing, the ERRI/EmergencyNet News Local/County/State Computer "Hacking" Survey found that almost 83% of respondents had been the victim of a virus. Even a benign virus could significantly impact the ability of governments to provide essential services.
Viruses, especially those carrying destructive payloads, are a potentially potent tool in the hands of cyberterrorists. Other tools of hacktivism, including computer network attacks, could likewise be put to highly destructive ends. This is the topic discussed next. Cyberterrorism
In the 1980s, Barry Collin, a senior research fellow at the Institute for Security and Intelligence in California, coined the term "cyberterrorism" to refer to the convergence of cyberspace and terrorism.116 Mark Pollitt, special agent for the FBI, offers a working definition: "Cyberterrorism is the premeditated, politically motivated attack against information, computer systems, computer programs, and data which result in violence against noncombatant targets by subnational groups or clandestine agents."117 Politically motivated attacks that cause serious harm, such as severe economic hardship or sustained loss of power or water, might also be characterized as cyberterrorism.
This section discusses the extent to which cyberterrorism is a problem today and is likely to be a problem in the near future. It also covers domestic and international initiatives aimed as countering a wide variety of cyberthreats, including cyberterrorism, certain forms of hacktivism, and other non-politically motivated computer network attacks.
The Threat
As discussed in the preceding sections, terrorist groups are using the Internet extensively to spread their message and to communicate and coordinate action. However, there have been few if any computer network attacks that meet the criteria for cyberterrorism. The 1998 e-mail bombing by the Internet Black Tigers against the SRI Lanken embassies was perhaps the closest thing to cyberterrorism that has occurred so far, but the damage cause by the flood of e-mail, for example, pales in comparison to the deaths of 240 people from the physical bombings of the U.S. embassies in Nairobi and Dar es Salaam in August of that year.
Is cyberterrorism the way of the future? For a terrorist, it would have some advantages over physical methods. It could be conducted remotely and anonymously, it would be cheap, and it would not require the handling of explosives or a suicide mission. It would likely garner extensive media coverage, as journalists and the public alike are fascinated by practically any kind of computer attack. One highly acclaimed study of the risks of computer systems began with a paragraph that concludes "Tomorrow's terrorist may be able to do more with a keyboard than with a bomb."118
In a 1997 paper, Collin describes several possible scenarios. In one, a cyberterrorist hacks into the processing control system of a cereal manufacturer and changes the levels of iron supplement. A nation of children get sick and die. In another, a cyberterrorist attacks the next generation of air traffic control systems. Two large civilian aircraft collide. In a third, a cyberterrorist disrupts banks, international financial transactions, and stock exchanges. Economic systems grind to a halt, the public loses confidence, and destabilization is achieved.119
Analyzing the plausibility of Collin's hypothetical attacks, Pollitt concludes that there is sufficient human involvement in the control processes used today that cyberterrorism does not B at present B pose a significant risk in the classical sense. In the cereal contamination scenario, for example, he argues that the quantity of iron (or any other nutritious substance) that would be required to become toxic is so large that assembly line workers would notice. They would run out of iron on the assembly line and the product would taste different and not good. In the air traffic control scenario, humans in the loop would notice the problems and take corrective action. Pilots, he says, are trained to be aware of the situation, to catch errors made by air traffic controllers, and to operate in the absence of any air traffic control at all.120 Pollitt does not imply by his analysis that computers are safe and free from vulnerability. To the contrary, his argument is that despite these vulnerabilities, because humans are in the loop, a cyberattack is unlikely to have such devastating consequences. He concludes that "As we build more and more technology into our civilization, we must ensure that there is sufficient human oversight and intervention to safeguard those whom technology serves."
In a 1997 article titled "How Many Terrorists Fit on a Computer Keyboard?" William Church presents a strong case that the United States does not yet face a compelling threat from terrorists using information warfare techniques to disrupt critical infrastructure. They lack either the motivation, capabilities, or skills to pull off a cyberattack at this time. Church does not rule out a physical attack against the infrastructure, but such a threat is neither new nor matured by U.S. reliance on technology.121
There are drawbacks to terrorists using cyber weapons over physical ones. Because systems are complex, it may be harder to control an attack and achieve a desired level of damage. Unless people are injured, there is also less drama and emotional appeal. Further, terrorists may be disinclined to try new methods unless they see their old ones as inadequate.122
There is little concrete evidence of terrorists preparing to use the Internet as a venue for inflicting grave harm. However, in February 1998, Clark Staten, executive director of the Emergency Response & Research Institute in Chicago, testified that it was believed that "members of some Islamic extremist organizations have been attempting to develop a >hacker network= to support their computer activities and even engage in offensive information warfare attacks in the future."123 And in November, the Detroit News reported that Khalid Ibrahim, who claimed to be a member of the militant Indian separatist group Harkat-ul-Ansar, had tried to buy military software from hackers who had stolen it from U.S. Department of Defense computers they had penetrated. Harkat-ul-Ansar, one of the 30 terrorist organizations on the State Department list, declared war on the United States following the August cruise-missile attack on a suspected terrorist training camp in Afghanistan run by Osama bin Laden, which allegedly killed nine of their members. The attempted purchase was discovered when an 18-year-old hacker calling himself Chameleon attempted to cash a $1,000 check from Ibrahim. Chameleon said he did not have the software and did not give it to Ibrahim, but Ibrahim may have obtained it or other sensitive information from one of the many other hackers he approached.124
Given that there are no instances of cyberterrorism, it is not possible to assess the impact of acts that have taken place. It is equally difficult to assess potential impact, in part because it is hard to predict how a major computer network attack, inflicted for the purpose of affecting national or international policy, would unfold. So far, damages from attacks committed for reasons other than terrorism, for example, to seek revenge against a former employer, have generally been confined to immediate targets. No lives have been lost.
Cyberdefense
The main impact of cyberthreats on foreign and domestic policy relates to defending against such acts, particularly attacks against critical infrastructures. At the international level, several countries, including the U.S., have been addressing such issues as mutual legal assistance treaties, extradition, the sharing of intelligence, and the need for uniform computer crime laws so that cybercriminals can be successfully investigated and prosecuted even when their crimes cross international borders, as they so often do. This effort is not focused on either cyberterrorism or hacktivism, but rather addresses an array of actions that includes all forms of hacking and computer network attacks, computer and telecommunications fraud, child pornography on the Net, and electronic piracy (software, music, etc.). It also covers state-sponsored cyberwarfare operations that use hacking and computer network attacks as a military weapon.
At the initiative of the Russian Federation, the U.N. General Assembly adopted a resolution related to cybercrime, cyberterrorism, and cyberwarfare in December 1998. Resolution 53/70, Developments in the Field of Information and Telecommunications in the Context of International Security, invites member states to inform the Secretary-General of their views and assessments on (a) the issues of information security, (b) definition of basic notions related to information security, and 8 advisability of developing international principles that would enhance the global information and telecommunications systems and help combat information terrorism and criminality.125
The U.S. has taken several steps to better protect its critical infrastructures. In July 1996, President Clinton announced the formation of the President=s Commission on Critical Infrastructure Protection (PCCIP) to study the critical infrastructures that constitute the life support systems of the nation, determine their vulnerabilities to a wide range of threats, and propose a strategy for protecting them in the future. Eight infrastructures were identified: telecommunications, banking and finance, electrical power, oil and gas distribution and storage, water supply, transportation, emergency services, and government services. In their final report, issued in October 1997, the commission reported that the threats to critical infrastructures were real and that, through mutual dependence and interconnectedness, they could be vulnerable in new ways. "Intentional exploitation of these new vulnerabilities could have severe consequences for our economy, security, and way of life."126
The PCCIP noted that cyberthreats have changed the landscape. "In the past we have been protected from hostile attacks on the infrastructures by broad oceans and friendly neighbors. Today, the evolution of cyberthreats has changed the situation dramatically. In cyberspace, national borders are no longer relevant. Electrons don't stop to show passports. Potentially serious cyberattacks can be conceived and planned without detectable logistic preparation. They can be invisibly reconnoitered, clandestinely rehearsed, and then mounted in a matter of minutes or even seconds without revealing the identity and location of the attacker."127
In assessing the threat from both physical and cyberattacks, the PCCIP concluded that "Physical means to exploit physical vulnerabilities probably remain the most worrisome threat to our infrastructures today. But almost every group we met voiced concerns about the new cyber vulnerabilities and threats. They emphasized the importance of developing approaches to protecting our infrastructures against cyberthreats before they materialize and produce major system damage."128 The recommendations of the PCCIP led to Presidential Decision Directive (PDD) 63, which established the National Infrastructure Protection Center (NIPC), the Critical Infrastructure Assurance Office (CIA), the National Infrastructure Assurance Council (NIAC), and private sector Information Sharing and Assessment Centers (ISACs).129 The Department of Defense also established a Joint Task Force - Computer Network Defense (JTF-CND).
That critical systems are potentially vulnerable to cyberattacks was underscored by a June 1997 exercise, code named Eligible Receiver, conducted by the National Security Agency (NSA). The objective was to determine the vulnerability of U.S. military computers and some civilian infrastructures to a cyberattack. According to reports, two-man teams targeted specific pieces of the military infrastructure, including the U.S. Pacific Command in Hawaii, which oversees 100,000 troops in Asia. One person played the role of the attacker, while another observed the activity to ensure that it was conducted as scripted. Using only readily available hacking tools that could easily be obtained from the Internet, the NSA hackers successfully gained privileged access on numerous systems. They concluded that the military infrastructure could be disrupted and possible troop deployments hindered. The exercise also included written scenarios against the power grid and emergency 911 system, with resulting service disruptions. For the latter, they postulated that by sending sufficient e-mails to Internet users telling them the 911 system had a problem, enough curious people would phone 911 at once to overload the system. No actual attacks were made against any civilian infrastructures.130
The vulnerability of commercial systems to cyberattacks is repeatedly demonstrated by survey results such as those mentioned earlier. There is no evidence that non-government systems are any more or less vulnerable than government ones, or that the security posture of either group, as a whole, is generally improving -- despite the availability and use of a growing supply of information security tools.
Conclusions
The Internet is clearly changing the landscape of political discourse and advocacy. It offers new and inexpensive methods for collecting and publishing information, for communicating and coordinating action on a global scale, and for reaching out to policy makers. It supports both open and private communication. Advocacy groups and individuals worldwide are taking advantage of these features in their attempts to influence foreign policy.
Several case studies show that when the Internet is used in normal, non-disruptive ways, it can be an effective tool for activism, especially when it is combined with other media, including broadcast and print media and face-to-face meetings with policy makers. As a technology for empowerment, the Net benefits individuals and small groups with few resources as well as organizations that are large or well-funded. It facilitates activities such as educating the public and media, raising money, forming coalitions across geographical boundaries, distributing petitions and action alerts, and planning and coordinating events on a regional or international level. It allows activists in politically repressive states to evade government censors and monitors.
In the area of hacktivism, which involves the use of hacking tools and techniques of a disruptive nature, the Internet will serve mainly to draw attention to a cause, as such incidents are regularly reported by news media. Whether that attention has the desired effect of changing policy decisions related to the issue at hand is much less certain. Hacktivists may feel a sense of empowerment, because they can control government computers and get media attention, but that does not mean they will succeed in changing policy. So far, anecdotal evidence suggests that for the majority of cases, they will not.
With regards to cyberterrorism, that is, the use of hacking tools and techniques to inflict grave harm such as loss of life, few conclusions can be drawn about its potential impact on foreign policy, as there have been no reported incidents that meet the criteria. What can be said is that the threat of cyberterrorism, combined with hacking threats in general, is influencing policy decisions related to cyberdefense at both a national and international level. If one looks at terrorism in general for insights into the potential impact of cyberterrorism, one finds that the impact of terrorism on the foreign policy issues at hand is similarly difficult to assess, but here again, the threat of terrorism, particularly chem, bio, and nuclear terrorism, is having a significant impact on national defense policy.
Label:
Hack
Langganan:
Postingan (Atom)