September 2001 - cypherpunks-legacy

Subject: I tried to call you, when can we talk?
by LDD Talk 04 Sep '01

04 Sep '01

We were referred to you by one of our existing customers who felt you would use this service. We are Long Distance Direct <http://www.lddtalk.com/>. and we offer 50% or more of international long distance calling discounts over your existing telephone service. Start saving TODAY visit our website http://www.lddtalk.com/> or reply <mailto:sales@lddtalk.com?subject=Tell Me More!> to this email with the best time and telephone number for us to contact you. You can subscribe on our website and start saving money TODAY on your international long distance calls and receive our superior customer service or we will call you and guide you through the easy steps to become one of our loyal customers that saves money over the traditional telephone services in your area. Thousands of customers around the globe are saving already. We look forward to giving you our great services and helping you save money. Agents needed... click here to start earning money on anyone who makes international calls. http://www.lddtalk.com/agents/agent.shtml Thank you for your time. Sincerely, Staff at LDD Inc. sales(a)lddtalk.com <mailto:sales@lddtalk.com> 321.799.1010 U.S.

1 0

Laws banning anonymity by government employees are foolish
by Tim May 04 Sep '01

04 Sep '01

The notion being touted by some, that government officials, employees, agents, etc. should not be allowed to be anonymous is a bad idea. If such a law were to be passed, this would be a "feel-good" measure which would not in fact be enforceable. Whether through cut-outs or contractors or just plain duplicity, the government would not stop using such methods. (This is a separate issue from whether the courts might rule that entrapment or provocation by undercover agents has limits. The issue of double agents, Red Squad infiltrations, etc. has been with us for more than a century. Courts have placed limits on entrapment, a separate issue from requiring True Names for all government employees.) I don't think having taxpayer money spent funding agents who go around infiltrating clubs and social groups and SIGs is a good idea, generally. But "there ought to be a law" is not likely to be effective. And it leads to the ostrich syndrome: if we pass a law to make a threat go away, and we don't see the threat anymore, it must be gone. -- Tim May

1 0

Queremos que estes conectado...
by MisProductos.com 04 Sep '01

04 Sep '01

1 0

The Register - MS eBook cracker keeps findings secret
by Jim Choate 04 Sep '01

04 Sep '01

http://www.theregister.co.uk/content/55/21469.html -- -- ____________________________________________________________________ natsugusa ya...tsuwamonodomo ga...yume no ato summer grass...those mighty warriors'...dream-tracks Matsuo Basho The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

NTsecAPI - Work in progress (fwd)
by Jim Choate 04 Sep '01

04 Sep '01

---------- Forwarded message ---------- Date: Tue, 4 Sep 2001 03:02:04 +0200 From: Luke Kenneth Casson Leighton <lkcl(a)samba-tng.org> To: tng-technical(a)samba-tng.org, samba-technical(a)samba.org, ntsecapi-dev(a)lists.dcerpc.net Cc: samba-ntdom(a)samba.org, coderpunks(a)toad.com, cifs(a)discuss.microsoft.com Subject: NTsecAPI - Work in progress i'm starting an nt security api. it will basically be a generic wrapper around and merge of: cli_pipe_ntlmssp.c, srv_pipe_ntlmssp.c, cli_pipe_netsec.c, srv_pipe_netsec.c, and supporting code. [see http://www.samba-tng.org, cvs instructions, the above files are in source/rpc_client and source/rpc_server.] the idea is, however, to provide a client/server framework for general user authentication, signing and sealing. once this framework is written, it will be a heck of a lot simpler to add new user auth / dce/rpc crypto methods: i will investigate, for example, porting the kerberos5 auth used in dce 1.22 to the api, which will allow freedce to do kerberos5 authentication (something it can't do at the moment because noone's added it) the api is to be written as a stand-alone library into which it will need to even be passed memory allocation and debug handling functions: it will therefore have practical applications *outside* of samba, dce/rpc etc. etc., be threadsafe etc. etc. i'm currently munging the ntlmssp code as the first working example. if anyone is interested in helping, please subscribe to ntsecapi-dev on http://lists.dcerpc.net and we'll continue the discussions there. luke

1 0

RE: Comped scribblers the bane of conferences
by Trei, Peter 04 Sep '01

04 Sep '01

> ---------- > From: Tim May[SMTP:tcmay@got.net] > Sent: Saturday, August 25, 2001 12:02 PM > To: cypherpunks(a)lne.com > Subject: Re: Comped scribblers the bane of conferences > > On Saturday, August 25, 2001, at 07:59 AM, Declan McCullagh wrote: > > > On Thu, Aug 23, 2001 at 04:14:04PM -0700, Tim May wrote: > >> Meanwhile, don't expect to see me at the next CFP conference! Plenty > >> of > >> comped scribblers, though. > > > > CFP is in SF next year, so you may want to stop by. > > > > As for "comped scribblers," I am one. But look at it from a > > journalist's perspective: We may attend two conferences a week, say at > > $1,500/per. Rough estimates, then, would be over $150,000 a year, more > > than most journalists make. > > > > Paying that much in conference fees is not feasible, and conference > > organizers generally understand this and let us in free (we may pay for > > meals) in exchange for publicity. > > > > First, $1500 per conference sounds way too high, even by today's > inflated standards. > You haven't gone to too many conferences lately, have you? Palmsource 2001: At door: $1395, early bird $995 (add $745 for tutorials). Comdex fall 2001: As high as $2895. if you get a 'flex pass'. Most attendees will probably be paying from $0 (exhibits only, online reg) to $1895 (2 conferences). RSA 2002: At-door full-conference registration is $1795, not including $495 for the tutorials. (that's the worst case - it's half that before Dec 4, and there are a number of lower-cost options). Peter

1 0

Re: Official Anonymizing
by Faustine 04 Sep '01

04 Sep '01

John wrote: >On ZKS selling anonymizing products that are publicly available >to governmental officials does raise an issue of whether officials >should, or should be able to, conceal their official identities when >working cyberspace in an official capacity. I think not, though >it might be as impossible to get officials to comply as with >terrorists so long as the technology is there. >Paul Sylverson, at NRL, took me to task recently for outing >officials, claiming that one of the primary purposes of onion >routing was to allow officials to conceal their actions in >cyberspace. I answered that it was my opinion that officials >had no right to conceal their identity when on the job, not >the military, not the spooks, indeed, they should be obliged >to reveal identity in cyberspace when at work, if not of the >person then of the agency. Nice thought, but I'll bet it wouldn't happen in a million years. And speaking generally on the subject of various people "concealing actions", could I just say that I think any company working in this sector would be well-advised to take good, hard second look at their internal security practices. "Insider threat mitigation" should be every bit as much of a concern to you as it is to the DoD. Maybe more so. Their unholy quartet of "maliciousness, disdain for security procedures, carelessness, and ignorance" applies to your insiders too. It wouldn't hurt anything to run a tighter ship, either: what are you doing to get to know who you're really working with? What are you doing to ensure you aren't trusting your trade secrets to shitheels who'll sell out crucial elements of your design to the first person who waves a few dollar bills under their nose? Not making any claims about who's doing the selling, who's doing the buying or why. But something seriously reeks in Denmark and as a community you really need to think about it a little harder. ~Faustine.

1 0

.info landrush - pre-register now
by djones＠markmonitor.com 04 Sep '01

04 Sep '01

Subject: .info Landrush Markmonitor, the worldwide leader in Internet intellectual property protection, is now accepting pre-registrations for the .info landrush period (September 12 -19). To date, Markmonitor has successfully registered over 92% of .info names requested by its customers. For more information and to set up an account, visit Markmonitor's Domain Solution Center at www.markmonitor.com today. In addition to registering your .info domain names, Markmonitor's Domain Solution Center can accommodate all of your domain registration needs, including: 1. High volume registration, in all gTLDs and over 150 ccTLDs 2. Global Domain Name Management (DNS, contact information) 3. Reporting 4. Renewal Management 5. Transfers and account consolidation Our Domain Solution Center is designed specifically to provide reliable and efficient domain registration and management tools for companies and law firms that register and manage large volumes of domain names. To arrange a complete demo of our Domain Solution Center, please e-mail us at custserv(a)markmonitor.com or call us at (800) 337-7520. To be removed from future e-mails from Markmonitor, please respond to custremove(a)markmonitor.com.

1 0

.info landrush - pre-register now
by djones＠markmonitor.com 04 Sep '01

04 Sep '01

Subject: .info Landrush Markmonitor, the worldwide leader in Internet intellectual property protection, is now accepting pre-registrations for the .info landrush period (September 12 -19). To date, Markmonitor has successfully registered over 92% of .info names requested by its customers. For more information and to set up an account, visit Markmonitor's Domain Solution Center at www.markmonitor.com today. In addition to registering your .info domain names, Markmonitor's Domain Solution Center can accommodate all of your domain registration needs, including: 1. High volume registration, in all gTLDs and over 150 ccTLDs 2. Global Domain Name Management (DNS, contact information) 3. Reporting 4. Renewal Management 5. Transfers and account consolidation Our Domain Solution Center is designed specifically to provide reliable and efficient domain registration and management tools for companies and law firms that register and manage large volumes of domain names. To arrange a complete demo of our Domain Solution Center, please e-mail us at custserv(a)markmonitor.com or call us at (800) 337-7520. To be removed from future e-mails from Markmonitor, please respond to custremove(a)markmonitor.com.

1 0

Prova
by marco 04 Sep '01

04 Sep '01

:: Request-Remailing-To: ladispolano(a)libero.it Questa è solo una prova... ------------------------------------------------------------ Free Web Email & Filter Enhancements. http://www.freewebemail.com/filtertools/ ------------------------------------------------------------

1 0