September 2000 - cypherpunks-legacy

CDR: Re: And you thought Nazi agitprop was controversial?
by Colin Rafferty 13 Sep '00

13 Sep '00

Jodi Hoffman writes: > Declan McCullagh forwards: >> Frisoli, the Curley lawyer, has been making very outrageous and >> false statements about what was on the web site. Because the media >> has no access to the site, no one can contradict him. ... Printed >> material from NAMBLA is difficult to find. Members of NAMBLA will >> speak to the press only under conditions of strict anonymity >> because they fear for their lives. And the web site is not >> accessible. > I knew there was a reason I printed out NAMBLA's website > throughout the years. Maybe I should contact this child's parents as > well as their attorney. I think that would be an excellent idea. The best thing for this case would be to see what was actually on the web site. Of course, I would suggest showing it to everyone, and not just the Curley family lawyers. Because of NAMBLA had nothing to do with the murder, I'm sure you wouldn't want to see them falsely found liable. > I wonder if you would tell the parents to their face how important > you think it is to preserve the information put out by the people > who helped cause their son to be murdered, rather than doing > something to help prevent it from happening again. So your printouts of the NAMBLA web site show where they encourage people to rape and/or murder children? Do you have any quotes? > "He who does not bellow the truth when he knows the truth makes himself > the accomplice of liars and forgers." - Charles Peguy Always a good quote. So what is the truth about what was on the NAMBLA web site? Yell it from the rooftops. -- Colin

2 1

CDR: RE: Is kerberos broken? cpunk
by Trei, Peter 13 Sep '00

13 Sep '00

> ---------- > From: David Honig[SMTP:honig@sprynet.com] > > At 12:00 PM 8/31/00 -0400, Joseph Ashwood wrote: > >No but I feel free to type a hundred or so, but that's beside the > >point. The claim made was that anything a human can remember, a > >computer can brute force, this was simply one very clear example that > >it simply was not true, as I rather thoroughly established. > > Anything large that a human can remember has enough structure so that you > don't need brute force, you use a dictionary-based attack. > This is nonsense. The wordspace of languages is large enough that it's easy to compose perfectly reasonable texts which are highly resistant to dictionary attacks. For one of my leisure time activities, I have to memorize set texts up to 15 minutes long. I'm expected to give these letter perfect, and I do. Here's an example of a good passphrase: "David grossly underestimates the ability of homo sapiens to memorize and exactly reproduce long texts. An examination of American high school students ability to perform the Gettysburg Address is a good counterexample." 222 bytes, more or less. Even if we assume only 1bit of entropy per character (it's ordinary english), that's a pretty tough space to search. It's a safe bet that those two sentences have never been placed together in all of human history before now, so there's no dictionary to check. The problem is not that passphrases *can't* be made secure - the problem is that most people are unwilling to use good ones. Peter Trei

1 0

CDR: MPAA honeypot (Re: MPAA thinks linking is illegal [cpunk]
by Trei, Peter 13 Sep '00

13 Sep '00

[I'm seeing a *large* number of messages yesterday and today which apparently have sat on some spool for around 2 weeks. In some cases, responses to these messages got through rapidly, but the original did not.] > ---------- > David Honig[SMTP:honig@sprynet.com] writes: > At 04:09 PM 8/30/00 -0400, Greg Newby wrote: > >I was forced to remove my copy of the DeCSS code this spring by UNC as > >a result of a complaint by the MPAA. > > First, You have the right to contest any copyright infringement they > allege to your ISP (UNC in this case). Second, linking isn't copyright > infringement. > [...] > or confuse them: > > Post DeCSS under a different file name, possibly changing the .zip > to avoid recognition by filesize. Include enough text on your page > to help the search engines. (will the next MPAA target be search > engines, which will be prohibited from indexing DeCSS?) [...] Last weekend, someone spammed the DeCSS code to all or most of the the comp.* usenet newsgroups. Deja has already removed all of the original posts, but not messages which quote the original - for example, the post noting this as a spam event contains the entire source, and is still up. [It's possible that the posting had an x-no-archive header, but I doubt it] Peter

1 0

CDR: EDGAR Online - Here is the Information You Requested
by support＠edgar-online.com 13 Sep '00

13 Sep '00

Your EDGAR Online (http://www.edgar-online.com) username and password are case-sensitive and must be entered exactly as they are shown here. Username: Cyperpunks Password: cypherpunks You can upgrade your current EDGAR Online Visitor Registration using these identifiers at http://www.edgar-online.com/user_upgrade.asp. If you have any questions email support(a)edgar-online.com or phone 1-800-416-6651 (203-852-5666) Monday - Friday, 9:00AM - 7:30PM EST. EDGAR Online

1 0

CDR: EDGAR Online - Confirmation Email
by EDGAR Online Customer Support 13 Sep '00

13 Sep '00

Thank you for registering as a Visitor to EDGAR Online (http://www.edgar-online.com) your best source on the Web for SEC information on the Internet and voted a Barrons Top 20 Investment Web Site. Your account is active and you can begin using it immediately. If you need your User Name and Password, go to http://www.edgar-online.com/username.asp As a Visitor, you have access to a subset of the tools EDGAR Online offers, including: - Todays Filings, available to Visitors one (1) full business day after filing date; - EDGAR Online People, to search Proxy Filings (DEF14A) by individual name; - Full Search, to access specific filings using any combination of 10 criteria; - EDGAR Online Glimpse, an extract of the Management Discussion and Analysis for a complete overview of the companys operating results; - Financial Data Schedule (FDS) that downloads a companys balance sheet and vital financial statistics. directly into a Microsoft Excel spreadsheet for easy analysis; - Plain Text Format Output suitable for on-screen reading (limited printing options); - Unlimited Customer Support; and - Complete EDGAR database to 1994 Consider upgrading to a subscription of EDGAR Online Premium at http://www.edgar-online.com/regopt.asp for more advanced management tools that quickly target the company intelligence in every SEC document. Starting at only $9.95 a month, subscribers have access to: - EDGAR Online Personal, your customized portfolio of companies, industries, insider transactions, and other SEC data you want to track, plus automatic email alerts about new filings. - EDGAR Online People, to search all SEC filings by individual name to find out about salaries, stock options, insider stock buying and selling, and corporate board memberships; - Insider Trading filings (144 forms) whenever insiders buy or sell stock; - Real Time access to Todays SEC filings before theyre available from the SEC; and - Enhanced formatting allowing for documents to be downloaded into any Word Processing format, for standard page breaks and printability. To find out more about subscribing, go to http://www.edgar-online.com/regopt.asp. If you have any questions, live Customer Support representatives are available Monday through Friday, 9 am to 7:30 pm to answer your questions via email at support(a)edgar-online.com, or toll free at 1-800-416-6651. Thank you again for registering! /--------ADVERTISEMENT-----------------------\ Purchase Business/Credit Reports from Dun & Bradstreet on over 11 million U.S. businesses. Click on the "Resources" linkwhen you look up SEC filings for any public company, or search by company name and state at http://www.edgar.telebase.com/ \--------------------------------------------/

1 0

None
by imtiaz ali 13 Sep '00

13 Sep '00

Dear sir I have to take a few information & I will be thankful to you if you will guide me . I had visited the web site www.conchrepublic.com. they are saying that it was the part of the Florida state separated from the USA in the 1982 . now they are issuing the passport of the conchrepublic by just paying the fee of 109 US$ & sending the 3 PASSPORT size picture, id card s & current passports photo copy. I will be thankful to you if you inform me that whether this republic exist & they are the representative of the republic . the address of their Secretary General is on whos name the draft of 109 is to be sent. Office of the Secretary General P.O. Box 6583 Key West, FL 33041-6583  Phone:(305) 296-0213  FAX: (305) 296-8803 Conch Republic Communications P.O. Box 735 Key Largo, FL 33037-0735 please inform me soon. Thanks imtiazali _____________________________________________________________ Signup for your FREE email account at http://www.lovemail.com

1 0

CDR: "Imminent Lawless Action" (was Re: GigaLaw.com Daily News, September 13, 2000)
by R. A. Hettinga 13 Sep '00

13 Sep '00

At 4:44 AM -0700 on 9/13/00, GigaLaw.com wrote: > [FREE SPEECH] > Antiabortion Activists Seek Reversal of Award Against Site > Antiabortion activists are asking a federal appeals court to overturn > a $109 million verdict by a jury that decided a Web site and posters > listing the names of abortion doctors and clinics were threats that went > beyond free speech. The case is widely seen as a test of a Supreme Court > ruling that defined a threat as explicit language likely to cause > "imminent lawless action" -- and a measure of how far antiabortion > activists can go in harassing doctors and clinics. > Read the article: The Wall Street Journal @ > http://interactive.wsj.com/articles/SB968782868719953428.htm -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Tipster voluntary payment protocol
by R. A. Hettinga 13 Sep '00

13 Sep '00

--- begin forwarded text

1 0

CDR: Re: SF Internet self-defense course
by Bill Stewart 13 Sep '00

13 Sep '00

At 01:11 PM 8/29/00 +0200, Tom Vogt wrote: >Tim May wrote: >> >are you required to provide your private keys to an enemy (e.g. someone >> >who is sueing you) ? .. >> I expect 95% or more of all encryption is done at the transport >> layer, i.e., for transmission. Most peoplee, I surmise, keep their >> original compositions in unencrypted form and their decrypted >> transmissions in that form, too. The perceived threat model is for >> interception by ISPs, snoops, and government agencies. > >that's where good software comes in. mutt, for example, stores the >received encrypted mail - well, encrypted. decryption is done when you >view the mail. also, encrypted mails you send are encrypted twice - once >with the receipient's key and sent to him, once with your key for your >"outbox" archive. The Eudora PGP Plug-In deliberately decrypts received mail and stores it unencrypted, specifically to discourage the "You must escrow your private keys so we can decode your plaintext" attacks that the FBI/NSA/WhiteHouse anti-crypto mafia were pushing a couple of years ago. That's a different issue from storing your mailbox in a PGPdisk volume or some other encrypted filesystem or having the mail decryptor re-encrypt for storage with a different key (which wouldn't be that hard, since you could use a different public key to encrypt the session key and leave the symmetric-encrypted part of the message alone.) Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

CDR: Nostradamus' prophecy for 1999 : finally the truth !
by Alainthuot＠aol.com 13 Sep '00

13 Sep '00

Hello ! Your site talk about Nostradamus. I'm very sorry but in quatrain X 72, Nostradamus didn't talk about Mongols, Cassini, comets, wars, eclipses, JFK, the Antichrist, or Osiris ! If you want to learn the truth about Nostradamus' prophecy for 1999, there's a good address : http://members.aol.com/AlainThuot/e_nostra2.htm Nostradamus' prophecy came completely true : the final explanation of the quatrain word by word ! Now, the truth is at last available in English ! + en français + em português (I can read an email in english but I can't reply in english because I don't speak english. It's not me who made the translation in english on my site. I can reply in french if you want.) //_________________________________ On my site, you can read too : 1998 : a World Cup shrouded in mystery > Learn all about the mysterious coincidences which lined the way of the French during the 1998 World Cup (soccer) The storm of December 26, 1999 > Why didn't the media warn the French ? //_________________________________ Thanks, Alain Thuot ************************************************* AlainThuot(a)aol.com http://members.aol.com/AlainThuot/accueil.htm *************************************************

1 0