September 2002 - cypherpunks-legacy

Re: S/MIME in Outlook -- fucked.
by pgut001＠cs.auckland.ac.nz 04 Sep '02

04 Sep '02

"James A. Donald" <jamesd(a)echeque.com> writes: >While the immediate bug is in Microsoft IE and Outlook, this exploit is also >a reflection of the contorted mess that is the certificate structure and the >public key infrastructure One of the eternal problems of X.509 software: Implementation Problem Redux Certified for use with Windows - Microsoft owns the trademark - Submit software to Microsoft, who perform extensive testing - Passing software can use the certification mark - Reasonable (given the size of the deployed base) interoperability among tested products S/MIME - RSADSI owns (owned) the trademark - Simple interoperability test for signing and encryption -- Anyone could participate, at no cost - Passing software can use the certification mark - Good interoperability among tested products X.509 - No quality control - You cannot build software so broken than it can't claim to be X.509v3 (Lifted from "Everything you never wanted to know about PKI but have been forced to find out", http://www.cs.auckland.ac.nz/~pgut001/pubs/pkitutorial.pdf) Peter.

1 0

Free Adult DVDs and Videos. No purchase necessary! gbhyk
by yltAmber 04 Sep '02

04 Sep '02

TO: cypherpunks(a)minder.net Shhhhhh... You just found the Internet's BEST KEPT SECRET!!! These Adult DVDs are Absolutely FREE!!! They retail at over thirty dollars you only pay shipping guaranteed! Go To: http://www.pornvideosales.com Everything must go!!! Additional Titles as low as $9.95 Largest Selection on the net guaranteed. Removal Instructions for cypherpunks(a)minder.net You have received this advertisement because you have opted in to receive free adult internet offers and specials through our affiliated websites. If you do not wish to receive further emails or have received the email in error you may opt-out of our database here: http://80.71.66.106/optout/index.html . Please allow 24 hours for removal. This e-mail is sent in compliance with the Information Exchange Promotion and Privacy Protection Act. section 50 marked as 'Advertisement' with valid 'removal' instruction. ulkeypkmevfvyhisyjyghro

1 0

Shooting cops is an Adrenaline rush.Its also more popular this year.
by Matthew X 03 Sep '02

03 Sep '02

Sniffer dog picked up trail By WAYNE HOWELL, Supreme Court reporter 04sep02 A POLICE dog tracked a fresh human scent just after two officers were gunned down, a jury heard yesterday. The dog, Gus, picked up a scent near the shooting, the Supreme Court was told. The four-year-old rottweiler led his handler, Senior-Constable John-Peter Murray, under three fences, apparently tracking a scent but never reaching its source. Sen-Constable Murray said he believed Gus could distinguish the scents of innocent passers-by and offenders. "Actual offenders . . . have an adrenalin rush . . . that the dog actually tracks a lot better and is more excited . . . to just a member of the public," he said. Asked about Gus's intensity while following the scent, Sen-Constable Murray said: "I believe the track was fresh." Sergeant Gary Silk, 35, and Senior-Constable Rodney Miller, 34, were fatally shot in Cochranes Rd, Moorabbin, early on August 16, 1998. The prosecution in the trial of two men accused of the murders has told the court the police were shot when they pulled over two armed robbers who had been about to hit a restaurant. The jury has heard that two other policemen saw their colleagues being shot from 100m away, and the car they had pulled over driving away. The court has heard that despite being mortally wounded, Sen-Constable Miller managed to say there had been two attackers and one was "on foot". The court heard yesterday that the day after the shooting, a television cameraman found a spent bullet casing while filming people putting flowers at the scene. Christopher McHattie said that while he was filming he noticed a "shiny object in the grass" and called over the journalist who was with him. "We bent down to give it a flick and realised it was what looked like a spent bullet casing," Mr McHattie said. Bandali Michael Debs, 49, of Springfield Drive, Narre Warren, and Jason Joseph Roberts, 22, of Merrijig Drive, Cranbourne, have both pleaded not guilty to two charges of murder. Their trial, before Justice Philip Cummins, was to continue. http://www.heraldsun.news.com.au/common/story_page/0,5478,5029441%255E2862,… Attacks on police soar By TANYA GILES 04sep02 VIOLENT crime against police is rising: more than 2300 officers were attacked while on duty in one year. Knives were the most common weapon used. More than 150 police were attacked or threatened with flick knives or blades last year -- a 64 per cent increase on the previous year. Criminals shot at three officers and another 22 police were threatened with firearms in 2001 -- a 19 per cent increase. Total assaults against police jumped to 2310, an 18.5 per cent increase on the previous year. Next month, Victoria Police will begin to issue the latest in bulletproof vests to all officers. About 8600 police will be issued with the lightweight T-shirt style vests that, unlike the bulky vests worn over clothes, can be hidden under their uniforms. The vests are made from a fibre several times stronger than steel and not only stop bullets but can prevent knives stabbing through the fabric. Inspector Emmett Dunne, manager of the operational safety and tactics training unit, said police would have the choice of several types of vests offering different levels of protection, and would be trained in their use from October 1. Insp Dunne said police did not deserve to be threatened or injured while protecting the community. He urged all Victorians to remember there was a "human being behind the uniform". "Just remember they have got a family and friends to go home to as well," he said. Other police statistics obtained by the Herald Sun revealed 50 police were threatened or battered with bats, bars or clubs last year, an increase of 20 per cent. In one incident, five officers were injured by a man wielding a large ceremonial crucifix inside St Margaret Mary's Catholic Church, Spotswood. Another 17 police officers were rammed with vehicles, in a total of 83 incidents in the past five years. One police sergeant narrowly escaped death when he was forced through a wooden fence and crushed in a hit-run incident involving a stolen car in Reservoir. Insp Dunne said police were instructed on how to deal with potentially violent situations through conflict resolution and other evasive actions. Police Association secretary Senior Sergeant Paul Mullett said police should not have to face attacks while doing their jobs. "Our members are on the front line as far as keeping the community safe. We are the thin blue line, and any attack on police is an attack on society itself," he said. "Our members should not be used as punching bags because they are doing their job protecting the community." Sen-Sgt Mullett said covert ballistic vests needed to be introduced urgently to offer police immediate protection. http://www.heraldsun.news.com.au/common/story_page/0,5478,5030069%255E2862,…

2 1

I see everything twice!
by Eric Murray 03 Sep '02

03 Sep '02

It looks like one of the CDRs, possibly algebra, is changing the Message-ID on cpunks mail and redistributing it to the CDRs-- I'm seeing two copies of each message, one of which has an X-Algebra header in it. Could the algebra maintainer check this out? Thanks. Eric

1 0

Re: S/MIME in Outlook -- fucked.
by James A. Donald 03 Sep '02

03 Sep '02

-- On 3 Sep 2002 at 11:16, Meyer Wolfsheim wrote: > I encourage everyone to send Bill Gates an email from > himself. =) > > ============================================================= > ========= ==== Vendor Notification Status > > Microsoft knows about this, of course, but "isn't even sure > whether to call this a 'vulnerability'." Right. While the immediate bug is in Microsoft IE and Outlook, this exploit is also a reflection of the contorted mess that is the certificate structure and the public key infrastructure, and of the fact that Verisign is not doing its job. (This exploit only works if one starts with a legitimate verisign certificate for a web site, it does not work if one starts with a legitimate Thawte certificate.) Microsoft unambiguously screwed up, but the infrastructure made it easy to screw up, and difficult and expensive to get things right. --digsig James A. Donald 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG 2S6sg825yJSZ69s23KyOvpaHYYQYbgoRuPl2j1JZ 24hZwF+YmQMFl2hK8LOkiesmNrg+xJ0ZdA1qPUzQU

1 0

RE: S/MIME in Outlook -- fucked.
by Lucky Green 03 Sep '02

03 Sep '02

Meyer Wolfsheim wrote: > ... just making certain Lucky has seen this gem. Lucky reads Bugtraq daily. :) --Lucky Green

1 0

Refinance and Save $$$
by cypherpunks＠Algebra.COM 03 Sep '02

03 Sep '02

We will help you get the mortgage loan you want! Only takes 2 minutes to fill out our form. http://www.horacespeed.com/index.php Whether a new home loan is what you seek or to refinance your current home loan at a lower interest rate and payment, we can help! Mortgage rates haven't been this low in the last 12 months, take action now! Refinance your home with us and include all of those pesky credit card bills or use the extra cash for that pool you've always wanted... Where others says NO, we say YES!!! Even if you have been turned down elsewhere, we can help! Easy terms! Our mortgage referral service combines the highest quality loans with most economical rates and the easiest qualification! Click Here to fill out our form. http://www.horacespeed.com/index.php

1 0

US SS knives SA on HR for HS.Night of the long knives.
by Matthew X 03 Sep '02

03 Sep '02

Remember when the SS took over from the SA Lili Marlene? The Bush administration did not go far enough when it recommended giving the proposed Homeland Security Department extra flexibility in hiring, retaining and firing department staff, according to President Bush's Homeland Security Advisory Council. Despite already heated opposition to Bush's proposal in the Senate, the council, which draws its members from the public and private sectors, suggested several ideas in a meeting last week, including that senior executives and managers slated to join the proposed department be required to apply for the new positions they would hold. Using this tactic, the administration, employees and the public can be sure that the department's leaders are really the best people for the job, not just the people who held certain titles before, said council member Ruth David, president and chief executive officer of Analytical Services Inc. Measuring the performance of people, as well as systems and programs, is important throughout the department, council members agreed. The council was especially concerned with the role of middle managers. For example, they proposed evaluating managers on their ability to make their staff members work as a team and replacing managers if they fail. "Culture is an asset, but it can never be an excuse," said Norm Augustine, former chief executive officer of Lockheed Martin Corp., whom the council called in to share ideas on integration. Augustine also served as a member of the U.S. Commission on National Security/21st Century, a bipartisan group established by Congress that called for a homeland security department in its final February 2001 report. Members acknowledged that many of the flexibilities the council suggested do not easily fit within the government structure. "We're having to invent an entirely new process of integration," said Utah Gov. Michael Leavitt, a council member. But all agreed that past experience merging agencies shows that working by old management rules will cost critical years while trying to bring together all the pieces of the proposed department. "We do not have the time to repeat those patterns," said council member Lydia Thomas, president and CEO of Mitretek Systems Inc. Council members said management flexibility was critical to the success of the department. But the concept still faces a fierce debate in Congress. Although the House passed its version of the Homeland Security Department bill July 26 with the management flexibilities intact, the battle in the Senate, which is still deliberating the bill, is heating up. Sen. Joe Lieberman (D-Conn.), chairman of the Senate Governmental Affairs Committee, sent a letter last week to members of Congress highlighting the differences between the president's bill to create the proposed department and the Senate version. Lieberman's committee leads the Senate's work on the bill. In the letter, he said that the Senate is already giving the administration "all the power it needs to create and run an effective, performance-driven department." "In my view," Lieberman wrote, "the administration has blurred the focus of its bill and risked dragging this common cause into a quicksand of unnecessary controversy by taking on significant but vague new executive powers that are uncalled for and in some cases unprecedented." Meanwhile, in a report last week, Bobby Harnage, national president of the American Federation of Government Employees, maintained that "pretty much what the administration is pleading for already exists." Flexibility, Harnage said, is another word for "gutting the civil service merit system and busting employee unions." A push for more power President Bush's Homeland Security Advisory Council highlighted several management flexibilities that its members consider essential to the proposed Homeland Security Department, including the ability to: * Pick managers based on the new department's structure rather than on employees' old titles and positions. * Give the department's chief information officer control of every portion of the information technology budget. * Identify an independent group or person who can observe the management practices of the agency and highlight where and when problems occur. * Make quick personnel changes when managers are not successful in bringing their groups together into one culture and promote managers who support the department's goals. http://www.fcw.com/fcw/articles/2002/0902/news-mgt-09-02-02.asp Check survey on front page.47% to 53% when I looked today.

1 0

��վ��
by service＠admail.com 03 Sep '02

03 Sep '02

你好：我是银河之星负责人，我看过贵网站，觉得贵站有很强广告宣传能力。所以我们很希望能与贵站进行合作，即诚邀贵站做我们广告服务及软件产品的代理商。不知贵站是否愿意加盟我们的网站联盟，我们将每月定期将贵站在该月的销售提成金额通过邮局电子汇款汇给您。具体步骤： 1.填表申请表. 2.得到链接代码. 3.下载宣传广告条，将得到的代码连接广告条放至网站. 4.从贵站广告条点击到本站下了定单的客户付款后您就可以得到相应佣金. 5.当佣金总额达到200元时就可以当天收到本站汇款支付通知报酬＝100元赠送＋交易额*25% 加入就立即赠送100元，请点击这里：http://www.jjyx.com/serve/daili.htm 致礼银河之星 EMAIL:serve@jjyx.com OICQ:6623109

1 0

Note to FBI, NSA, CIA: How to get your bill through Congress
by Declan McCullagh 03 Sep '02

03 Sep '02

Upcoming Conferences: Date: Sep. 13,-Sep. 13, 2002 Location: Washington, D.C. Event Name: Drafting Effective Legislation and Amendments Event Sponsor: TheCapitol.Net Event Description: Drafting Effective Federal Legislation and Amendments -- A "how to" program for federal agency staff. This one-day conference is designed to help you write and revise your agency's bills and amendments effectively and concisely. In addition to discussing the role of the OMB and examining the different formats and deciding how to choose the best one to highlight your agency's issue, we will discuss how to: - Define your audience and broaden the appeal of your measure. - Assess existing law and policy objectives before putting pen to paper. - Structure bills and amendments and streamline the drafting process. - Ensure that your legislative draft is interpreted exactly as intended. - Comply with style, grammar, punctuation guides and the U.S. Code rules of construction. - Use different drafting styles to work in your favor. -- TheCapitol.Net is a non-partisan, women-owned firm that is the exclusive provider of Congressional Quarterly Executive Conferences. Contact Information: Name: Sophia Lo Phone number: 202-678-1600 E-Mail: govexec(a)TheCapitol.Net Web site: http://www.DraftingLegislation.com 0

1 0