October 2002 - cypherpunks-legacy

Multimedia Design at 5$ per hour
by Creativeskulls 11 Oct '02

11 Oct '02

-------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- (This safeguard is not inserted when using the registered version) -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- (This safeguard is not inserted when using the registered version) -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- -------------------------------------------------------------------- --------------------------------------------------------------------

1 0

US Airways Antigua E-Savers and Resort For $14 A Day
by ESavers＠usairways.com 11 Oct '02

11 Oct '02

Dear E-Savers Subscriber, US Airways is pleased to present this special International E-Savers offer: ************************************************************ 1. This Week's International E-Savers 2. Antigua Resort As Low As $14 A Day 3. Dividend Miles Offers 4. E-Savers Fare Requirements 5. Subscription Information ************************************************************ 1. THIS WEEK'S INTERNATIONAL E-SAVERS ************************************************************ You may depart on Saturdays, between October 12 and December 14, 2002. Return travel is Saturdays, between October 19 and December 21, 2002. Saturday night stay is required. Tickets must be purchased by October 15, 2002. For travel, make your reservations online at http://www.usairways.com/promotions/esavers/offer_anu.htm These special fares can also be purchased for an additional $20 per ticket at 1-888-359-3728. Tickets must be purchased at the time of reservation. For more information on Antigua, please visit http://www.usairways.com/travel/destinations/caribbean/anu.htm ROUNDTRIP FROM: TO: ONLINE FARE: ---------------------------------------------------------------- Albany, NY Antigua $369 Allentown, PA Antigua $349 Baltimore, MD Antigua $349 Boston, MA Antigua $349 Buffalo, NY Antigua $369 Burlington, VT Antigua $369 Hartford, CT Antigua $349 Manchester, NH Antigua $369 New York LaGuardia, NY Antigua $349 Philadelphia, PA Antigua $329 Providence, RI Antigua $349 Rochester, NY Antigua $369 Syracuse, NY Antigua $369 Washington National, DC Antigua $349 Fares shown are based on roundtrip Coach travel on US Airways/US Airways Express, during the period specified above. Depending upon your travel needs, alternative routings may be available at the same fares, with part of the service on regional aircraft operated by US Airways Express carriers Allegheny, Air Midwest, CCAIR, Chautauqua, Colgan, Mesa, Piedmont, PSA, Shuttle America or Trans States. ************************************************************ 2. ANTIGUA RESORT AS LOW AS $14 A DAY ************************************************************ Combine great fares with a special low rate for US Airways customers at the following Elite Island Resorts in Antigua: Royal Antiguan 1-800-345-0356 $99* per person per WEEK The Royal Antiguan is located on a half-mile stretch of white-sand beach at Deep Bay on Antigua's western coast. Set on 150 lush, tropical acres, the Royal Antiguan combines a casual atmosphere with the adventure of an exciting Caribbean paradise. Resort amenities include three restaurants and four bars, tennis courts, water sports facility, natural walking trails, fitness center, freshwater swimming pool, casino, disco and shopping arcade. Book online at http://www.eliteislandresorts.com St. James's Club - ALL INCLUSIVE 1-800-345-0356 $129* per person per night Ultra-posh Caribbean getaway on a private 100 acre peninsula overlooking two magnificent white sand beaches on Antigua's southeastern coast. A full-service marina and yacht club with spa, casino, tennis complex, and 250 rooms, suites and villas to choose from. Supervised children's activities program too. Dining, beverages, and resort activities, including watersports are included. Book online at http://www.eliteislandresorts.com Occidental Grand Pineapple Beach - ALL INCLUSIVE 1-800-345-0356 $129* per person per night Magnificent sunsets, balmy breezes, secluded 3/4-mile white-sand beach and exceptional service set the stage at Grand Pineapple Beach where romance is always in bloom. Walk hand-in-hand through 25 acres of lush gardens and experience secluded privacy for a memorable Caribbean island getaway that is totally all-inclusive; sumptuous cuisine, themed buffets, unlimited refreshments, entertainment, dancing and exciting activities for day and night pursuits. For more information on any of these properties, visit http://www.eliteislandresorts.com * Hotel rates shown are per person per night based on double occupancy for travel through 12/21/02 when booked by 10/16/02 (Royal Antiguan rate shown is per person per week based on double occupancy). Hotel space is limited and may not be available on all days. Additional travel dates and rates are available. Prices are subject to change with or without notice. Rate does not include room taxes and does not include miscellaneous hotel charges typically paid by the customer directly to the hotel. When booking, refer to the "US Airways Antigua E-Saver." Other conditions may apply. Airfare not included. ************************************************************ 3. DIVIDEND MILES OFFERS ************************************************************ Reminder: Make sure your Dividend Miles account number is in your E-Savers reservation, so you can earn miles for worldwide award travel on US Airways and our partners. To enroll in Dividend Miles, go to http://www.usairways.com/dividendmiles/index.htm To earn even more miles, book E-Savers using your US Airways Dividend Miles Visa card. To apply for the Dividend Miles Visa card issued by Bank of America, please visit us at http://www.usairways.com/dmcreditcards Please note: Mileage bonus for booking online does not apply to E-Savers. Earn up to 30,000 Bonus Miles to/from Europe This Fall. Fly US Airways roundtrip to or from Amsterdam, Frankfurt, London, Madrid, Manchester, Munich, Paris or Rome in First Class, Envoy Class or select Economy Class fares (F, J, C, Y, B or M fare classes) between September 15 and December 31, 2002 and earn up to 30,000 bonus miles. Register once before your next transatlantic flight at http://www.usairways.com/dividendmiles/6935.htm ************************************************************ 4. E-SAVERS FARE REQUIREMENTS ************************************************************ - Restrictions: Roundtrip purchase required. Seats are limited and are not available on all flights/days. Fares cannot be combined with other fares, discounts, promotions or coupons. Travel must begin and end in the same city. One-way travel, stopovers, waitlisting and standbys are not permitted. Tickets must be purchased at the time of reservation. Fares will not be honored retroactively or in conjunction with the exchange of any partially used ticket. - Travel: Depart to Antigua 10/12-12/14/02, Saturdays, and return from Antigua 10/19-12/21/02, Saturdays. Saturday night stay required. All travel must be completed by 12/21/02. - Ticketing: Tickets must be purchased by 10/15/02. - Taxes/Fees: Depending on the itinerary, passenger facility charges of up to $18 and the September 11th Security Fee of up to $10 may apply in addition to the fare. Fares shown do not include total government-imposed taxes/fees/surcharges of up to $60. - Changes: Tickets become non-refundable 24 hours after making initial reservation, and may be changed prior to the departure of each flight segment for a minimum $100 fee. If changes are not made prior to the departure date/time of each flight, the entire remaining ticket will have no further value. - Miscellaneous: Lower fares may be available in these markets. Other conditions apply. ************************************************************ 5. SUBSCRIPTION INFORMATION ************************************************************ This is a post-only mailing sent to CYPHERPUNKS(a)ALGEBRA.COM. If you would like to change your e-mail address, you will need to unsubscribe and resubscribe at the E-Savers Enrollment page: http://www.usairways.com/promotions/esavers/enroll/index.htm To unsubscribe from this list, please click here: http://www.usairways.com/cgi-bin/delete.cgi?email=CYPHERPUNKS@ALGEBRA.COM To change your departure city preferences, please visit: http://www.usairways.com/promotions/esavers/enroll/index.htm Please do not respond to this message. Copyright US Airways 1996-2002. All rights reserved.

1 0

HUMANITARIAN
by MRS. M. SESE SEKO 10 Oct '02

10 Oct '02

DEAR FRIEND, I AM MRS. SESE-SEKO WIDOW OF LATE PRESIDENT MOBUTU SESE-SEKO OF ZAIRE? NOW KNOWN AS DEMOCRATIC REPUBLIC OF CONGO (DRC). I AM MOVED TO WRITE YOU THIS LETTER, THIS WAS IN CONFIDENCE CONSIDERING MY PRESENT CIRCUMSTANCE AND SITUATION. I ESCAPED ALONG WITH MY HUSBAND AND TWO OF OUR SONS KENNETH AND BASHER OUT OF DEMOCRATIC REPUBLIC OF CONGO (DRC) TO ABIDJAN, COTE D'IVOIRE WHERE MY FAMILY AND I SETTLED, WHILE WE LATER MOVED TO SETTLED IN MORROCO WHERE MY HUSBAND LATER DIED OF CANCER DISEASE. HOWEVER DUE TO THIS SITUATION WE DECIDED TO CHANGED MOST OF MY HUSBAND'S BILLIONS OF DOLLARS DEPOSITED IN SWISS BANK AND OTHER COUNTRIES INTO OTHER FORMS OF MONEY CODED FOR SAFE PURPOSE BECAUSE THE NEW HEAD OF STATE OF (DR) MR LAURENT KABILA HAS MADE ARRANGEMENT WITH THE SWISS GOVERNMENT AND OTHER EUROPEAN COUNTRIES TO FREEZE ALL MY LATE HUSBAND'S TREASURES DEPOSITED IN SOME EUROPEAN COUNTRIES. HENCE MY CHILDREN AND I DECIDED LAYING LOW IN AFRICA TO STUDY THE SITUATION TILL WHEN THINGS GETS BETTER, LIKE NOW THAT PRESIDENT KABILA IS DEAD AND THE SON TAKING OVER (JOSEPH KABILA). ONE OF MY LATE HUSBAND'S CHATEAUX IN SOUTHERN FRANCE WAS CONFISCATED BY THE FRENCH GOVERNMENT, AND AS SUCH I HAD TO CHANGE MY IDENTITY SO THAT MY INVESTMENT WILL NOT BE TRACED AND CONFISCATED. I HAVE DEPOSITED THE SUM OF EIGHTEEN MLLION UNITED STATE DOLLARS(US$18000,000,00.) WITH A SECURITY COMPANY , FOR SAFEKEEPING. THE FUNDS ARE SECURITY CODED TO PREVENT THEM FROM KNOWING THE CONTENT. WHAT I WANT YOU TO DO IS TO INDICATE YOUR INTEREST THAT YOU WILL ASSIST US BY RECEIVING THE MONEY ON OUR BEHALF.ACKNOWLEDGE THIS MESSAGE, SO THAT I CAN INTRODUCE YOU TO MY SON(KENNEH) WHO HAS THE OUT MODALITIES FOR THE CLAIM OF THE SAID FUNDS. I WANT YOU TO ASSIST IN INVESTING THIS MONEY, BUT I WILL NOT WANT MY IDENTITY REVEALED. I WILL ALSO WANT TO BUY PROPERTIES AND STOCK IN MULTI-NATIONAL COMPANIES AND TO ENGAGE IN OTHER SAFE AND NON-SPECULATIVE INVESTMENTS. MAY I AT THIS POINT EMPHASISE THE HIGH LEVEL OF CONFIDENTIALITY, WHICH THIS BUSINESS DEMANDS, AND HOPE YOU WILL NOT BETRAY THE TRUST AND CONFIDENCE, WHICH I REPOSE IN YOU. IN CONCLUSION, IF YOU WANT TO ASSIST US , MY SON SHALL PUT YOU IN THE PICTURE OF THE BUSINESS, TELL YOU WHERE THE FUNDS ARE CURRENTLY BEING MAINTAINED AND ALSO DISCUSS OTHER MODALITIES INCLUDING REMUNERATION FOR YOUR SERVICES. FOR THIS REASON KINDLY FURNISH US YOUR CONTACT INFORMATION, THAT IS YOUR PERSONAL TELEPHONE AND FAX NUMBER FOR CONFIDENTIAL PURPOSE AND ACKNOWLEDGE RECEIPT OF THIS MAIL USING THE ABOVE EMAIL ADDRESS. BEST REGARDS, MRS M. SESE SEKO

1 0

(no subject)
by joejones3345＠sirenas.solmelia.cu 10 Oct '02

10 Oct '02

1 0

Re: Echelon-like...
by David Howe 10 Oct '02

10 Oct '02

"Trei, Peter" <ptrei(a)rsasecurity.com> wrote: > It was Sweden. They didn't really have an excuse - over a year earlier, > Lotus announced their "International" version with details of the "Work > Factor Reduction Field" at the RSA Conference. I immediately invented > the term 'espionage enabled' to describe this feature, a term which has > entered the crypto lexicon. Indeed so, yes - If my memory isn't failing me though, their "excuse" was that the lotus salesdroid they had awarded the contract to hadn't disclosed it to them in his bid and in fact, the original tender had specified *secure* encryption, not *secure, except for the american spy industry*. I don't know enough sweedish to even attempt a google on it though :)

1 0

Re: Echelon-like...
by David Howe 10 Oct '02

10 Oct '02

>> "I assume everyone knows the little arrangement that lotus >> reached with the NSA over its encrypted secure email?" > I'm new here, so do tell if I am wrong. Are you referring to the two levels > of Encryption available in Bogus Notes? More or less, yes. Lotus knew nobody would buy a 40 bit version of their crypto, so there is a two-level encryption all right, but not along those lines - in the export version, some of the session key is encrypted using a PKI "work reduction factor" key in the message header; this section of header is important, as lotus gateways won't accept messages that have had it disturbed. by decoding this block, the NSA have the actual keysize they need to block reduced to the legal export level of 40 bits; one government found this out *after* rolling it out to all their billing and contract negotiation departments... belgum or sweden by memory . Lotus thought it would be ok if only the NSA (and other US government orgs) could break the key, rather than letting everyone have an equal chance (and indeed, letting their customers know their crypto was still only 40 bit vs USA intel agencies) Still, even the domestic version was only 64 bits, which is painfully small even by the standards of the day. certainly, even "strong" lotus could have been crackable by the NSA, who after all own their own fab plant to make custom VLSI cracking chips.

1 0

Re: Echelon-like...
by Major Variola (ret) 10 Oct '02

10 Oct '02

Not only is EM correct, but: * many attacks are possible without worrying about keylength. Got Scarfo? * NIST/NSA picked the lamest AES. If I told you what "lame" meant, I'd have to kill you. * (Lack of) User motivation (related to man-machine issues) is still the spooks' best friend. As well as legacy systems, and inadequately designed total systems. Got Redmond? However, stego and decent opsec and cash and leo buffoonery still let you coordinate the occasional urban skyline reconstruction, poking holes in boats, etc. Got Dead Drops? Mr. Hanssen? Mr Ames? At 08:09 AM 10/10/02 -0700, Eric Murray wrote: >On Thu, Oct 10, 2002 at 02:28:26AM -0000, anonimo arancio wrote: >> The government knows exactly what it's doing. It wants to discourage the use of encryption by any means necessary, because of sheer numbers. >> Basically, the more messages that are encypted, the more hardware (and therefore $$$) will be needed to decrypt them. >> Therefore, the only way they can stay ahead of the game is to keep the numbers as low as possible, so they can continue to "outspend" the problem. >> This is, from their perspective, a perfectly reasonable approach to decrypting large numbers of messages, a small fraction of which may contain "interesting" information. >> >> Is the above statement a) wrong, b) obvious c) mentioned previously on the cypherpunks boards, or d)"hey! We never thought of that" > > >B and C, extensively. > >The US Government has pretty much given up on restricting crypto >exports. There is just enough of a vestigial restriction there to >maintain the illusion that the government has a right to control crypto >exports. If there was anything more, it would be challenged in court >and most likely get thrown out. The government backed off on >previous challenges (Bernstein, Zimmerman) to avoid that. > >Eric

1 0

Echelon-like...
by anonimo arancio 10 Oct '02

10 Oct '02

This relates to an issue I've wanted to discuss with "Cypherpunks" for several years. Over the years, I've seen several commentators (including Timothy May) appear suprised when discussing the US's encryption export policies. The basic argument is that, if good encryption is available overseas or easily downloadable, it doesn't make sense to make export of it illegal. On the surface this would seem a sensible argument. ANd, it would seem a purely beaureaucratic (I'm sure I spelled that wrong) error. But I am wondering if Cypherpunks have mentioned the 'obvious'. The government knows exactly what it's doing. It wants to discourage the use of encryption by any means necessary, because of sheer numbers. Basically, the more messages that are encypted, the more hardware (and therefore $$$) will be needed to decrypt them. Therefore, the only way they can stay ahead of the game is to keep the numbers as low as possible, so they can continue to "outspend" the problem. This is, from their perspective, a perfectly reasonable approach to decrypting large numbers of messages, a small fraction of which may contain "interesting" information. Is the above statement a) wrong, b) obvious c) mentioned previously on the cypherpunks boards, or d)"hey! We never thought of that"

3 2

xpics vvrng
by Anita 09 Oct '02

09 Oct '02

1 0

Trojan-modified Sendmail floating around - 8.12.6 - Since Sept. 28th or earlier.
by Bill Stewart 09 Oct '02

09 Oct '02

Somebody backdoored the source code for Sendmail on the official server. So if you recompile from scratch, your sendmail is 0wned. Another reason not to run mail systems as root.... http://rss.com.com/2100-1001-961311.html?type=pt&part=rss&tag=feed&subj=news By Robert Lemos Staff Writer, CNET News.com October 8, 2002, 5:57 PM PT Some copies of a popular mail-server program are implanted with a back door that could allow access to Internet attackers, security experts warned Tuesday. A Computer Emergency Response Team (CERT) Coordination Center advisory said that illicit code added to the Sendmail package creates a back door when the program is compiled from its source code. Such a compromised program--called a Trojan horse by security experts--can leave networks exposed to attack and administrators unaware of the vulnerabilities. The source code files of Sendmail 8.12.6 were apparently modified as far back as Sept. 28, according to the advisory. The Sendmail Consortium http://www.sendmail.org removed file transfer protocol (FTP) access to the server on Sunday. A safe version of the file can still be downloaded via the Web. "If you download the Sendmail distribution you MUST verify the PGP signature," stated the consortium on its site. "Do NOT use Sendmail without verifying the integrity of the source code." The added code links to a specific server on the Internet, said CERT in its advisory. The security group also recommends that anyone who downloads Sendmail verify the file's integrity. Because only the act of compiling the file activates the hostile program code, restarting the Sendmail server seems to deactivate the backdoor

3 2