December 2000 - cypherpunks-legacy

Re: Congratulations you've won*
by Girish mr 20 Dec '00

20 Dec '00

Sorrry I could not get the application. The page did not open at all !!! >From: 5429(a)msn.com >Reply-To: cypherpunks(a)ssz.com >To: <Undisclosed.Recipients(a)einstein.ssz.com> >Subject: Congratulations you've won* >Date: Mon, 18 Dec 2000 14:02:41 -0600 > _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

1 0

Re: Anyone financially ruined by nasdaq?
by Tim May 20 Dec '00

20 Dec '00

At 12:17 PM -0600 12/20/00, Igor Chudov wrote: >Just curious mostly... whether any cypherpunks got financially ruined, >which I define as losing at least 66% of net asset value. A naive definition. "Ruined" has connotations which have nothing to do with percentage losses. Does a Michael Saylor of MicroStrategy face "ruin" because his stock is worth $500 M instead of $10 B? How about the guy who has come to Cypherpunks meetings whose stock holdings at one point were $749 million, but whose holdings are now about $25 million? (These are far, far greater losses than the "66%" threshold, and yet these people are not "ruined.") Now if one is heavily margined, and a stock drop triggers margin calls, resulting in liquidation of all positions, negative net worth, etc., then perhaps "ruin" is a good word. And why do you think Cypherpunks, who generally pay lip service to privacy issues, would reveal their financial situation to you, or to the list? --Tim May -- Timothy C. May tcmay(a)got.net Corralitos, California Political: Co-founder Cypherpunks/crypto anarchy/Cyphernomicon Technical: physics/soft errors/Smalltalk/Squeak/agents/games/Go Personal: b.1951/UCSB/Intel '74-'86/retired/investor/motorcycles/guns

1 0

Keyboard logging
by mmotyka＠lsil.com 20 Dec '00

20 Dec '00

>use on screen keyboards using mouse action or use non-bios routines that >remap key codes. > >If you need this level of security you probably need to look at the whole >environment and do some serious thinking. > >If you use standard keyboards then the scancodes can be intercepted, if >you >have standard PC's with non-custom OS then almost anything can be sniffed >out. > >(The moot list is in need of any good advice on this, basic discussion >already covered) > It is possible using external HW to get keycodes and random numbers into a machine and to an application bypassing the entire OS keycode path ( hiding the codes, timing and quantity ) and to generate a simple font engine to allow an app to display characters without going through the OS font engine. In this way you could create a slightly secure app ( a mail client for instance ) on an insecure system like windows. It would still be easily attacked if it were specifically a target but would probably be immune to any general purpose loggers in either the keyboard path ( except on the kyb itself ) or the OS font engine. If you think the OS font engine can be trusted then you can create an app that given a handle feeds the keycodes to any standard application. Obviously your keys and plaintext will be in memory so could be copied by another thread that knew where to look.

1 0

Anyone financially ruined by nasdaq?
by ichudov＠Algebra.COM 20 Dec '00

20 Dec '00

Just curious mostly... whether any cypherpunks got financially ruined, which I define as losing at least 66% of net asset value. - Igor.

1 0

Adv
by D. Henderson 20 Dec '00

20 Dec '00

WORK AT HOME USING YOUR COMPUTER!!! ______________________________________________________________________ Dear Friend, You can earn $46,000 or more in next the 90 days sending e-mail. Seem impossible? Read on for details (no, there is no "catch")... ______________________________________________________________________ "AS SEEN ON NATIONAL T.V." Thank you for your time and Interest. This is the letter you've been reading about in the news lately. Due to the popularity of this letter on the internet, a major nightly news program recently devoted an entire show to the investigation of the program described below, to see if it really can make people money. The show also investigated whether or not the program was legal. Their findings proved once and for all that there are, absolutely no laws prohibiting the participation in the program. This has helped to show people that this is a simple, harmless and fun way to make some extra money at home. The results of this show has been truly remarkable. So many people are participating that those involved are doing, much better than ever before. Since everyone makes more as more people try it out, its been very exciting to be a part of lately. You will understand once you experience it. "HERE IT IS BELOW" ______________________________________________________________________*** Print This Now For Future Reference *** The following income opportunity is one you may be interested in taking a look at. It can be started with VERY LITTLE investment and the income return is TREMENDOUS!!! $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ If you would like to make at least $46,000 in less than 90 days! Please read the enclosed program...THEN READ IT AGAIN!!! $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ THIS IS A LEGITIMATE, LEGAL, MONEY MAKING OPPORTUNITY. It does not require you to come into contact with people, do any hard work, and best of all, you never have to leave the house except to get the mail. If you believe that someday you'll get that big break that you've been waiting for, THIS IS IT! Simply follow the instructions, and your dreams will come true. This multi-level e-mail order marketing program works perfectly...100\% EVERY TIME. E-mail is the sales tool of the future. Take advantage of this non-commercialized method of advertising NOW!!! The longer you wait, the more people will be doing business using e-mail. Get your piece of this action!!! MULTI-LEVEL MARKETING (MLM) has finally gained respectability. It is being taught in the Harvard Business School, and both Stanford Research and the Wall Street Journal have stated that between 50\% and 65\% of all goods and services will be sold through multi-level methods by the mid to late 1990's. This is a Multi-Billion Dollar industry and of the 3,500,000 millionaires in the WORLD, 20\% ( 700,000) made their fortune in the last several years in MLM. Moreover, statistics show that over 100 people become millionaires everyday through Multi-Level Marketing. You may have heard this story before, but over the summer Donald Trump (A MULTI-BILLIONAIRE, ONE OF THE WEALTHIEST MEN IN THE WORLD) made an appearance on the David Letterman show. Dave asked him what he would do if he lost everything and had to start over from scratch. Without hesitating, Trump said he would find a good network marketing company and get to work. The audience started to hoot and boo him. He looked out at the audience and dead-panned his response "That's why I'm sitting up here and you are all sitting out there!" With network marketing you have two sources of income. Direct commissions from sales you make yourself and commissions from sales made by people you introduce to the business. Residual income is the secret of the wealthy. It means investing time or money once and getting paid again and again and again. In network marketing, it also means getting paid for the work of others. This program is currently being utilized in more than 50 different countries across the world. The enclosed INF0RMATION is something I almost let slip through my fingers. Fortunately, sometime later I re-read everything and gave some thought and study to it. My name is Johnathon Rourke. Two years ago, the corporation I worked at for the past twelve years down-sized and my position was eliminated. After unproductive job interviews, I decided to open my own business. Over the past year, I incurred many unforeseen financial problems. I owed my family, friends and creditors over $35,000. The economy was taking a toll on my business and I just couldn't seem to make ends meet. I had to refinance and borrow against my home to support my family and struggling business. AT THAT MOMENT something significant happened in my life and I am writing to share the experience in hopes that this will change your life FOREVER FINANCIALLY!!! In mid December, I received this program via e-mail. Six month's prior to receiving this program I had been sending away for INF0RMATION on various business opportunities. All of the programs I received, in my opinion, were not cost effective. They were either too difficult for me to comprehend or the initial investment was too much for me to risk to see if they would work or not. One claimed that I would make a million dollars in one year...it didn't tell me I'd have to write a book to make it! But like I was saying, in December of 1997 I received this program. I didn't send for it, or ask for it, they just got my name off a mailing list. THANK GOODNESS FOR THAT!!! After reading it several times, to make sure I was reading it correctly, I couldn't believe my eyes. Here was a MONEY MAKING PHENOMENON. I could invest as much as I wanted to start, without putting me further into debt. After I got a pencil and paper and figured it out, I would at least get my money back. But like most of you I was still a little skeptical and a little worried about the legal aspects of it all. So I checked it out with the U.S. Post Office (1-800-725-2161 24-hrs) and they confirmed that it is indeed legal! After determining the program was LEGAL and NOT A CHAIN LETTER, I decided "WHY NOT." Initially I sent out 100,000 e-mails. It cost me about $15 for my time on-line. The great thing about e-mail is that I don't need any money for printing to send out the program, and because all of my orders are fulfilled via e-mail, the only expense is my time. I am telling you like it is, I hope it doesn't turn you off, but I promised myself that I would not "rip-off" anyone, no matter how much money it cost me. In less than one week, I was starting to receive orders for REPORT #1. By January 13, I had received 26 orders for REPORT #1. Your goal is to "RECEIVE at least 20 ORDERS FOR REPORT #1 WITHIN 2 WEEKS. IF YOU DON'T, SEND OUT MORE PROGRAMS UNTIL YOU DO!" My first step in making $46,000 in 90 days was done. By January 30, I had received 196 orders for REPORT #2. Your goal is to "RECEIVE AT LEAST 100+ ORDERS FOR REPORT #2 WITHIN 2 WEEKS. IF NOT, SEND OUT MORE PROGRAMS UNTIL YOU DO. ONCE YOU HAVE 100 ORDERS, THE REST IS EASY, RELAX, YOU WILL MAKE YOUR $46,000 GOAL." Well, I had 196 orders for REPORT #2, 96 more than I needed. So I sat back and relaxed. By March 1, of my e-mailing of 100,000, I received $42,000 with more coming in every day. I paid off ALL my debts and bought a much needed new car. Please take time to read the attached program, IT WILL CHANGE YOUR LIFE FOREVER!!! Remember, it won't work if you don't try it. This program does work, but you must follow it EXACTLY! Especially the rules of not trying to place your name in a different place. It won't work, you'll lose out on a lot of money! In order for this program to work, you must meet your goal of 20+ orders for REPORT #1, and 100+ orders for REPORT #2 and you will make $46,000 or more in 90 days. I AM LIVING PROOF THAT IT WORKS!!! If you choose not to participate in this program, I am sorry. It really is a great opportunity with little cost or risk to you. If you choose to participate, follow the program and you will be on your way to financial security. If you are a fellow business owner and are if financial trouble like I was, or you want to start your own business, consider this a sign. I DID! Sincerely, Johnathon Rourke A PERSONAL NOTE FROM THE ORIGINATOR OF THIS PROGRAM: By the time you have read the enclosed program and reports, you should have concluded that such a program, and one that is legal, could not have been created by an amateur. Let me tell you a little about myself. I had a profitable business for 10 years. Then in 1979 my business began falling off. I was doing the same things that were previously successful for me, but it wasn't working. Finally, I figured it out. It wasn't me, it was the economy. Inflation and recession had replaced the stable economy that had been with us since 1945. I don't have to tell you what happened to the unemployment rate... because many of you know from first hand experience. There were more failures and bankruptcies than ever before. The middle class was vanishing. Those who knew what they were doing invested wisely and moved up. Those who did not, including those who never had anything to save or invest, were moving down into the ranks of the poor. As the saying goes, "THE RICH GET RICHER AND THE POOR GET POORER." The traditional methods of making money will never allow you to "move up" or "get rich", inflation will see to that. You have just received INF0RMATION that can give you financial freedom for the rest of your life, with "NO RISK" and "JUST A LITTLE BIT OF EFFORT." You can make more money in the next few months than you have ever imagined. I should also point out that I will not see a penny of this money, nor anyone else who has provided a testimonial for this program. I have already made over 4 MILLION DOLLARS! I have retired from the program after sending out over 1,600,000 programs. Now I have several offices that make this and several other programs here and over seas. Follow the program EXACTLY AS INSTRUCTED. Do not change it in any way. It works exceedingly well as it is now. Remember to e-mail a copy of this exciting report to everyone you can think of. One of the people you send this to may send out 100,000 or more...and your name will be on everyone of them! Remember though, the more you send out the more potential customers you will reach. So my friend, I have given you the ideas, INF0RMATION, materials and opportunity to become financially independent, IT IS UP TO YOU NOW! "THINK ABOUT IT" Before you delete this program from your mailbox, as I almost did, take a little time to read it and REALLY THINK ABOUT IT. Get a pencil and figure out what could happen when YOU participate. Figure out the worst possible response and no matter how you calculate it, you will still make lot of money! You will definitely get back what you invested. Any doubts you have will vanish when your first orders come in. IT WORKS! Jody Jacobs, Richmond, VA To Learn How This Amazing Program Will Make You Thousands Of Dollars go to: http://members.tripod.com/doreah/id3.htm or reply back and place the word "make money" in the subject area.

1 0

[Fwd: You're Not Driving Alone Anymore]
by sunder 20 Dec '00

20 Dec '00

-------- Original Message -------- Subject: You're Not Driving Alone Anymore Date: 20 Dec 2000 17:42:50 -0000 From: "Privacy Concerns" <PvtConcern(a)aol.com> To: List Member <sunder(a)sunder.net> Privacy Concerns - http://www.angelfire.com/biz/privacyconcerns/index.html =========================== ListBot Sponsor ========================== Start Your Own FREE Email List at http://www.listbot.com/links/joinlb ====================================================================== 'Big Brother' Could Soon Ride Along in Back Seat A New York highway agency is tracking cars that have electronic tollbooth tags for the latest on travel speeds and traffic jams. In the Washington region, transportation officials want to monitor drivers talking on cell phones as they drive the Capital Beltway as a way of measuring congestion. And an Alabama-based company has developed equipment that "sniffs" passing cars to identify which radio stations motorists have chosen. These "intelligent transportation systems," as they've been named, may help solve traffic problems and be a boon to marketers, but they also raise fear of a new threat to privacy: the idea that drivers could soon be leaving electronic footsteps whenever they leave home. "We could end up with an utterly pervasive monitoring of travelers' movements," warned Phil Agre, a professor of information studies at the University of California at Los Angeles. While the public has begun to confront the hazards posed by unfettered access to information about individuals' medical profiles and Internet use, privacy advocates say there is still little recognition of the newest frontier: travel and location information. "We are moving toward a surveillance society. Soon, government and private industry, often working in concert, will have the capability to monitor our every movement," said Barry Steinhardt, associate director of the American Civil Liberties Union. "While the technology is growing at light speed, the law that governs how the data can be used is developing at the speed of tortoises." At a time when traffic is outpacing efforts to expand highways, new technologies promise a once unimagined ability to manage rush hour, respond instantly to crashes and eliminate backups at tollbooths. They also offer police new tools to catch scofflaws such as red-light runners and locate witnesses, and they provide businesses with immensely profitable ways to reach prospective customers. Electronic toll programs, such as E-ZPass in the Northeast and the Dulles Toll Road's Smart Tag, are often linked to individuals' credit card accounts and are compiling ever more data about when and where specific drivers are traveling. Transit "smart cards" collect similar information about riders. Cameras are increasingly being used to snap photos of cars that run red lights, evade paying tolls and speed. Closed-circuit television cameras for monitoring highway traffic continue to proliferate and, as their resolution improves, could be combined with an evolving technology that automatically matches individual occupants' faces to their driver's license pictures. Automobile makers are introducing on-board navigation systems that allow vehicles to be tracked, and technology is evolving for monitoring the location of cell phones. Engineers predict that cars will soon be manufactured with embedded transmitters that allow them to be tracked. The growing number of high-tech systems for tracking vehicles and archiving information about their travel patterns "is unwittingly bringing us closer than ever to the Orwellian vision of the ever-present Big Brother," wrote analysts Bruce Abernethy and Andrew Kolcz in a recent cover story for Traffic Technology International. "It's an issue of great concern," said Larry Leibowitz, chief executive of Inductive Signature Technologies, who will be chairing a panel on privacy this month sponsored by the Intelligent Transportation Society of America. "It gives the government the ability to tell where you're sitting at dinner." He said people should be concerned about whether their records would be subpoenaed in divorce and other lawsuits, and about whether this information would be exploited by overzealous police. A 1996 survey by Priscilla M. Regan, of George Mason University, found that Americans overwhelmingly preferred that high-tech transportation systems collect only anonymous information, such as overall traffic counts. They cautiously accepted the collection of some personally identifiable information, such as license plate numbers, but objected to such measures as videotaping inside their cars. More than two-thirds were worried about who would see the information. "If they start giving the information away for advertising or selling it,that bothers me," Chuck Stievenart, 39, of Fredericksburg, Va., said recently. "We get enough junk already. Now I'll probably be on someone else's list for junk." Said Kimberly Hayek, 29, of Arlington: "As a single woman, I have to worry. I have been stalked before. I figure I don't have any privacy. I don't like it." The agencies and companies behind these high-tech systems say they use a range of safeguards, including letting travelers choose whether to participate. In San Antonio, for example, 53 automated readers arrayed along city streets follow the progress of 60,000 cars with transponders. All the motorists are volunteers. Both officials of the Dulles Toll Road and the agencies that offer E-ZPass used on highways, bridges and tunnels in six states from Massachusetts to West Virginia say travelers can choose not to buy the tag and instead pay cash at tollbooths. Some systems try to limit the amount of personally identifiable information they collect. For instance, Transcom, a traffic management organization, has set up automated roadside readers in the New York area to track cars with E-ZPass tags. But tag numbers are scrambled so they cannot be traced to their owners. Likewise, a spokesman for Mobiltrak, the Alabama company that developed the radio "sniffer" system, said its purpose is to take a random sample of passing cars and supply that general information to advertisers. He said the equipment does not determine specifically which vehicle is tuned into which station. But in low-traffic areas, it could be easier to identify individual cars. A third safeguard used by some systems is the practice of collecting data about large groups of vehicles rather than specific cars. Maryland and Virginia officials developing the program to track cell phone use have said, for instance, they will simply follow the energy pattern generated by thousands of phones. They stressed that they will not be able to monitor phone calls or identify specific callers. Some initiatives do not store the information at all. Transcom officials,for instance, collect E-ZPass readings to remain abreast of highway congestion but do not keep them. But other transportation agencies do store personal information, especially those that bill travelers for using electronic payment such as E-ZPass, Smart Tag and Chicago's I-Pass, as well as Metro's smart card. These agencies assure their customers that the data are not provided or sold to businesses and only released under subpoena or court order except in emergencies. Police have turned to E-ZPass records several dozen times. In the most celebrated case, investigators probing the kidnapping of New Jersey millionaire Nelson Gross, a former state Republican chairman, used E-ZPass information in 1997 to track his BMW across the George Washington Bridge. His car was found in Manhattan, and his battered body was soon discovered nearby. Agencies and companies developing these high-tech systems have repeatedly guaranteed that measures for easing traffic will not be merged with those for policing, such as red-light cameras and photo enforcement of speedlimits. They fear motorists will reject programs such as electronic toll systems and traffic cameras if they believe these will be used to issue tickets. Indeed, the deployment of red-light cameras, for instance, has met with decidedly mixed reviews, including in Virginia. Gov. James S. Gilmore III(R) cited privacy concerns in vetoing a bill that would have expanded their use beyond Arlington and Fairfax counties. The trepidation is not universal. "It's not like they're getting your DNA or your medical records. You're in your car, and you're in public," said Chris Wingo, 28, of Northwest Washington. Others want a say over how the information is used. "There's so many unknowns with this new burst of the information age," said Leslie Honing, 35, of Arlington. "I feel like I need some control over that." Privacy advocates insist that Congress set some legal parameters. Regan, of GMU, said laws alone are not enough. Limits on collecting and archiving individual information must be built into the systems themselves: "Once you've collected the information, you're continually trying to keep it under wraps, and there's constant pressure to let it out." *************************************************** Like to contribute an article or comment about this one? E-mail PvtConcern(a)aol.com *************************************************** Privacy Concerns is a free public service of D. A. H. Investigative Consultants, a Cincinnati based private investigation firm. E-mail: DAHPI(a)aol.com or toll free, 888-249-2404. Visit our site at, www.dahpi.com ______________________________________________________________________ To unsubscribe, write to PrivacyConcerns-unsubscribe(a)listbot.com

1 0

The Evil Nature of Carnivores
by sunder 20 Dec '00

20 Dec '00

http://www.theregister.co.uk/content/6/15591.html "Privacy questions remain As for the chief privacy concern, that Carnivore can easily be misused by overzealous Feds examining more data than their court orders permit, the IITRI report offers little in the way of reassurance. Basically, we have to trust the Feds not to abuse it." ... "In other words, the Bureau's geeks are going to provide the primary fail-safe against abuse, motivated by their natural civic piety and concerns that the collection of excess information would jeopardise a prosecution." ... "Carnivore operators are anonymous to the system," the report says. "All users are logged in as 'administrator' and no audit trail of actions is maintained." -- ----------------------Kaos-Keraunos-Kybernetos--------------------------- + ^ + :Surveillance cameras|Passwords are like underwear. You don't /|\ \|/ :aren't security. A |share them, you don't hang them on your/\|/\ <--*-->:camera won't stop a |monitor, or under your keyboard, you \/|\/ /|\ :masked killer, but |don't email them, or put them on a web \|/ + v + :will violate privacy|site, and you must change them very often. --------_sunder_(a)_sunder_._net_------- http://www.sunder.net ------------

1 0

Re: crypto questions - encrypted mail standards
by Bill Stewart 20 Dec '00

20 Dec '00

A separate discussion over on coderpunks maybe helpful here. >To: Bill Stewart <bill.stewart(a)pobox.com> >Cc: Bram Cohen <bram(a)gawth.com>, gnu(a)toad.com >Subject: Re: encrypted mail standards >Date: Tue, 19 Dec 2000 23:34:55 -0800 >From: John Gilmore <gnu(a)toad.com> > >> Bram - you can do encryption at the Mail Transfer Agent layer, >> like encrypting versions of SMTP, or in the mail header/body layer, >> >> I'm not sure where to find the standards for encrypting SMTP, >> but there are some; look around on sendmail.com. > >See RFC 2487, "SMTP Service Extension for Secure SMTP over TLS", which >adds the "STARTTLS" command and HELO extension option to the SMTP >specification. This permits two SMTP servers to negotiate to use TLS >(also known as SSL) encryption before sending email. > >There are ways to run POP or IMAP using TLS/SSL as well, but I don't >have the standards at my fingertips for this. > >> Also, John Gilmore may have funded some >> non-American developer to do an implementation. > >Nope; sendmail.com did an implementation and released it once the >export rules changed. It's in the current free sendmail release. > > John > > > Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

2 1

I LOVE YOU AND I DON'T WANT YOU TO DIE!!!!
by cormikh＠fatburningfurnace.com 20 Dec '00

20 Dec '00

1 0

A weak defense against keyboard logging...
by Mike Field 20 Dec '00

20 Dec '00

After reading your email on cryptome.org.... A couple of weak defences against keyboard logging of passwords. Both are useful to allow you to keep your password hidden from a keyboard sniffer or a 'patched' telnet program. 'One key' password entry. ---------------------- The program displays the letters of the alphabet and slowly cycles which letter the cursor is under... You push the spacebar to stop the cursor, and then if you don't push the spacebar again within two seconds it accepts it as part of the password. All a keyboard logger sees is a few space presses. This could be implemented at the remote end of a telnet session (well, a ssh session...) If the order of letters or they cursor moves was randomised the keypress timing would contain no information about the password. This gets round the employer problem unless the employer is watching your screen. The password feedback is visual. Mouse password entry -------------------- You could use your mouse to hunt and peck the desired letters on a keyboard. Once a letter is chosen the cursor should jump to a random location on the display to foil 'mouse sniffing' Cheers Mike Field mafield(a)the.net.nz

1 0