December 2003 - cypherpunks-legacy

Fwd: Second email address
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "sysop(a)io-online.com" <sysop(a)io-online.com> >Date: Mon, 03 Jun 96 19:50:50 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Second email address > How much would it be to get a second email address? (Just POP access. Doesn't even need to be able to send mail) That way I could have an address to send stuff like mailing lists to. Also: Web pages - I believe I saw something that mentioned that some space was included w/the subscription. How much, and how do I access it? This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

MEETING: SF Bay area Cypherpunks meeting for June 8th
by Hugh Daniel 17 Dec '03

17 Dec '03

What: Monthly meeting of San Francisco area Cypherpunks & Stanford PGP Club When: Saturday June 8th 12:00 noon Where: Turing Auditorium, Stanford University (Directions below) Dinner: Fanny & Alexander's 412 Emerson, Palo Alto, +1 415 326 7183 Topics: Random, PGP Keys siging, More on Crypto GUI's, Random. Directions: If you have a GPS receiver, head for 37.4296875N 122.1783752E. If you have excellent hearing, call 415-853-9080 and follow the ringing. Or, get to Stanford's Campus Drive via 280-Sand Hill or 101-El Camino Real-Embarcadero. From 280, take Campus Drive left (clockwise). From 101, take Campus Drive right (counterclockwise). Turn South (centripetal) at Panama Street and take an immediate left into the Jordan Quad parking lot (empty on weekends). Walk between Pine and Redwood Halls to Polya. Turing is between Polya and Cypress. It doesn't appear on most campus maps, but it's there, honest. Entrance to Turing Auditorium is by the Pac Bell payphone sign. Maps: http://www-leland.stanford.edu/group/Transportation/PGrid4.html (parking) http://www.stanford.edu/gifs/campus.1620-63-4.gif (800K campus map) http://www.stanford.edu/home/visitors/vicinity.html (note: upside down!) Socialized transportation: CalTrain to the Palo Alto station; 20-minute walk or arrange to be picked up by a local. 7F bus. See http://www.stanford.edu/group/Transportation/ Notes: The short notice is my fault, I was hoping to get some folks to talk at the meeting and waited far too long to give up on them. Thanks: Much thanks to Rich Graves and the Stanford PGP Club for the wonderful meeting space.

1 0

Re: WWW servers.
by Bill Stewart 17 Dec '03

17 Dec '03

Black Unicorn: >> Does there currently exist a system which permits webservers to restrict >> access to clients who have a given certification? Sameer: > Yup. .... > =) Stronghold: The Apache-SSL-US, coupled with XCert >Sentry. What else? Of course, there's a simpler approach; restrict access to people who have logins and passwords, and only give those to people who have the certification... # Thanks; Bill # Bill Stewart +1-415-442-2215 stewarts(a)ix.netcom.com # http://www.idiom.com/~wcs # Rescind Authority!

1 0

Fwd: Re: INteresting tidbit
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "cypherpunks" <cypherpunks(a)toad.com> >Date: Wed, 29 May 96 22:36:17 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: INteresting tidbit > >On the Encryption note, and I swear not along the lines of the 'DOJ' >and 'FBI Snooping' Big-Brother events, I heard another story recently. > ># begin story > >A person working on the MBONE project did an unannounced experiment >across the internet using Triple-DES for MBONE, and the very next day, >'ATF' agents knocked on his door and warned him against exporting >munitions. The experimentor was shaken by the fact that agents >approached him so quickly after the experiment. > ># end story > >Extrapolations of fact: > 1. Internet traffic is monitored. > 2. The ability to snoop for encrypted traffic is present > 3. The ability to identify encryption levels is present > (How else can they differentiate DES-1 from DES-3?) > 4. The ability to crack DES-1 in near real-time mode is present. > (See above). First, this has been loosely confirmed for ages. Someone was mentioning that FBI offices supposedly have software that (on a 486) can crack a DES-1 key in under an hour. Multiply * modern high capacity computers = problem. However, this does not nessesarily follow from #3. First off, you could probably tell the encryption used from a file format; the software on the other end has to know what it's getting. Secondly, you could probably tell quite a lot about what was used by some intense analysis. Finally, if their software cannot read it and analysis suggested it was more than DES-1 then they might go after someone w/o being able to read the document in question. > 5. If above=true, then Feds dropping the Zimmerman PGP case probably > also points to it also being crackable in a similar manner. Not necessarily. This freemen issue shows that the FBI is getting gunshy about bad publicity, which they were getting. > 6. Using encryption only flags traffic for capture and decryption, > using strong encryption makes you all that more interesting. Sounds like the old argument for encrypting everything... >Sorry, couldn't resist. I'll try not to start a threads about >electro-plasma propulsion craft at Area 51, metallic-ceramic skin >and pulse-jets on the Aurora spy plane, heat-imaging video cameras >on satellites and planes that can watch you through your houses' roof, >etc. :) What??? Now you're going to tell us X-Files is just a TV show? <g> This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Fwd: Re: forged addresses
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "cypherpunks" <cypherpunks(a)toad.com> >Date: Thu, 30 May 96 01:32:54 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: forged addresses > On 29 May 1996 19:38:16 pdt, nobody(a)nowher.com wrote: >Hi, I'm not sure if there was ever a thread on this, but I was wondering if >anyone can determine your real email address, if you were to fake it to your >email client. > >I hope that this doesn't offend anyone, since this is a high traffic list, but >I was wondering if this would work. To try it out, I setup my client to think >I was someone else, and sent myself an email. I could only figure out what >ISP it came from. > >What I would like to know is, can any of the experts on this list determine my >address from the header of this post?? I didn't receive anything except your nobody@... address. >again, if this is something that I shouldn't have done, just let me know, and >it won't happen again. > Hmmm... I'm going to have to play around with this. I can get outbound email access through my school district's mailserver simply by filling in the appropriate fields in netscape (we have a WAN hooked up to a T1). It would seem to me that this would be rather secure for several reasons, if for no other than that NO logging is made... In a large district, like mine (probably 10-15 thousand potential users), I doubt they would have the resources to track any of the 100 or so Internet machines on my campus alone, even if they could tell it came from here. This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

ID this 31173 NCR keyboard
by unknown＠example.com 17 Dec '03

17 Dec '03

! At 05:46 PM 6/3/96 -0700, you wrote: ! >ncr terminals are the most 31173 D0Dz ! ! I'm guessing that "D0Dz" is a variant on "dudes"; ! is "31173" supposed to be an upside-down "ElliE"? ! Having worked at NCR, I like their cash-machines and cash-registers, ! dislike the Microchannels in some of their PCs, ! dislike the terminals they used to make (I think SunRiver ! is the current manufacturer for that product line) ! and like their Teradata descendants. ! # Thanks; Bill ! # Bill Stewart +1-415-442-2215 stewarts(a)ix.netcom.com ! # http://www.idiom.com/~wcs ! # Rescind Authority! Oops. I wrote that just looking at the keyboard. Picked it up at Seattle's Ex-Pc for $3. It's so old, I think it requires a non-PC BIOS. No manual, labels etc. Anyone have a clue as to what this is: NCR F1 F2 [...] F18 F19 F20/RESET| ESC [...] TAB |[five direction keys] CONTROL Q [...] }/] CONTROL |CLR 7 8 9 / CAPS_LOCK A [...] ~/` |NEW | - 4 5 6 * [up] |/\ Z [...] [upup] |LINE | + 1 2 3 |NEW [space] | 0_ 00 . |LINE It was designed for easily customizing your keytable, being an actual flat terminal with square keys easily pulled out and interchanged. The back of the keyboard has three switches for the boolean selection of languages: US English, UK/Int. English, French, German, Swedish/Finnish, Danish/Norwegian, Spanish, Italian. So, where to get a NEW keyboard like this: FLAT, with a full set of SQUARE, EASILY pulled out keys.

1 0

Senate Staff Report...
by Lile Elam 17 Dec '03

17 Dec '03

Hi all, Does anyone know the location on the web of the Senate staff report that was presented on some Wednesday? I read an article about it on the sjmercury that says people with computers do not consider security a high priority... I am curous what else the report says... thanks, -lile

1 0

"Fascism is corporatism"
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:18 PM 6/6/96, Rich Graves wrote: >On Wed, 5 Jun 1996, Bruce Baugh, who usually knows better, wrote: > >> Fascism has no intrinsic link to genocide. It is a theory of economics, >> basically, in which the state has ultimate authority over production and >> distribution without (as in socialism) actually _owning_ the means of >> production or distribution. This is generally accomplished through >> cartelization, the creatin of industry-wide councils in which the >> representatives of the most powerful firms set policy in conjunction with >> the representatives of the government. ... >Yes, I'm afraid these ahistorical myths are widespread. What _do_ they teach >in these schools? > >Pick up anything by Renzo De Felice to gain a basic historical understanding >of what fascism was about, from someone who was sympathetic to them. Rich, I don't think it nearly so clear as you are claiming. The definition of fascism, that is. Without resorting to the usual ploy of quoting Webster's (a ploy I usually am not impressed by), let me cite an "anti-fascist" radio personality, Dave Emory, who I have been listening to nearly every week for several years. Dave is undeniably anti-fascist, an unusual mixture of left-leaning views and National Rifle Association sympathies, and he often quotes Mussolini's famous "Fascism is corporatism" line. That is, a view more similar to Bruce Baugh's point that fascism is primarily an economic theory, about the organization and ownership of production systems, than about hatred of any particular ethnic group. It is certainly true that Italian and German fascism (and the important variant of "national socialism") become intertwined with certain forms of racism, with which we are all familiar, but I don't think Bruce is at all wrong in his definition of fascism. That Hitler and his group combined fascist economic theories with occultist views of racial superiority does not mean the two viewpoints are identical. ("Fascism is corporatism" is of course not an overall indictment of all corporations. "Corporatism" is basically a view that government should identify key industries and corporations and then pick the winners and support them while suppressing their competitors. This oversimplifies what Mussolini, Emory, myself, etc. mean by "corporatism," but I hope this gives at least a glimpse. And we could get off into discussions of "state capitalism" and how the Soviet and Chinese forms of government were essentially examples of "state capitalism," but this would be a long and involved debate.) >I'd also recommend a biography of the very influential and gifted American >modernist poet Ezra Pound, who led the Italian fascist propaganda effort >from 1941 to 1943 and spent six months in an American POW camp, followed by >some time in mental hospitals as his rants against jewish conspiracies under >every bed became increasingly incoherent, for his trouble. Like Orwell's >very complicated views towards socialism and Stalinism (see Homage to >Catalonia), e. e. cummings' anti-government pacifism, Whitman's queerness, >and Byron's essential kookiness, this is something your high school english >teacher probably failed to mention. My high school teachers failed to mention much of anything, but this was hardly surprising to me--I never expected them to. Fortunately, I knew how to read, and so I learned all of these things. (Except for Pound, whom I didn't encounter until my first year in college.) --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Hackers prevent Crackers!
by attila 17 Dec '03

17 Dec '03

Addressed to: Cypherpunks <cypherpunks(a)toad.com> Black Unicorn <unicorn(a)schloss.li> ** Reply to note from Black Unicorn <unicorn(a)schloss.li> 06/06/96 03:05am -0400 = > Actually, he's probably right. If all the cypherpunks, say, turned = > "bad," there'd be no government and no economy, because so many big = > systems are so insecure. = = One could make the case that this would actually make the United = States(if c'punks concentrated their attentions there) the most data = secure country on the planet over time. = regardless of their opinion on hackers, that is what secuirty is all about. the same is not true for crackers --maybe we need to run a campaign with the slogan of: Hackers (help) prevent Crackers! -- the last free election in the United States was in 1860.

1 0

WWW servers.
by Black Unicorn 17 Dec '03

17 Dec '03

Does there currently exist a system which permits webservers to restrict access to clients who have a given certification? What is the current certification practice? How easy is it to certify a given client? Are webserver certifications sufficently secure today? What are the best servers to use for secure web pages and certification currently in the United States? --- My preferred and soon to be permanent e-mail address:unicorn@schloss.li "In fact, had Bancroft not existed, potestas scientiae in usu est Franklin might have had to invent him." in nihilum nil posse reverti 00B9289C28DC0E55 E16D5378B81E1C96 - Finger for Current Key Information Opp. Counsel: For all your expert testimony needs: jimbell(a)pacifier.com

3 3

Re: You're a Twit! [ ] [And, a jackass]
by qut＠netcom.com 17 Dec '03

17 Dec '03

> The message with headers below has been received and set aside for careful > handling by carbon-based units. Thank you so much for your contribution to > global understanding. > > Love, > Rich's Twit Acknowledger > > >From qut(a)netcom.com Thu Jun 6 14:34:48 1996 > Received: from boron.Stanford.EDU (boron.Stanford.EDU [36.56.0.10]) by Networking.Stanford.EDU (8.7.5/8.6.6) with ESMTP id OAA20426 for <llurch(a)networking.stanford.edu>; Thu, 6 Jun 1996 14:34:48 -0700 > Received: from netcom2.netcom.com (qut(a)netcom2.netcom.com [192.100.81.108]) by boron.Stanford.EDU (8.7.5/8.7.3) with SMTP id OAA16925 for <llurch(a)stanford.edu>; Thu, 6 Jun 1996 14:34:45 -0700 (PDT) > Received: (from qut@localhost) by netcom2.netcom.com (8.6.13/Netcom) > id OAA12280; Thu, 6 Jun 1996 14:34:46 -0700 > Date: Thu, 6 Jun 1996 14:34:46 -0700 > From: qut(a)netcom.com (harman.david) > Message-Id: <199606062134.OAA12280(a)netcom2.netcom.com> > To: llurch(a)stanford.edu Oh, did I miss the Cypherpunk announcment or something? Do I care? Isn't cypherpunking rather elitist? Isn't elitism a signatory of worthless knowledge? Hey, look at me, I'm elite! -- Love, Qut(a)netcom.com

1 0

Fwd: Re: Clipper III analysis
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "cypherpunks" <cypherpunks(a)toad.com> >Date: Thu, 06 Jun 96 16:51:18 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Fwd: Re: Clipper III analysis > ==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "cypherpunks" <cypherpunks(a)toad.com> >Date: Thu, 30 May 96 01:16:32 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: Clipper III analysis > On 29 May 1996 14:53:30 pdt, tcmay(a)got.net wrote: >> A good Questioned Document Examiner will be able to demonstrate >> that the signed document in question was not authored by Joe >> Blow, even if it contains his digital signature. > >I was of course talking about digital signatures, not handwritten signatures. > >I would be very interested to hear how a "Questioned Document Examiner" can >possibly determine that a digital signature was not applied by a particular >person. I believe he was referring to document analysis. By closely comparing a questionable work with those of known authorship, a skilled analyst can hopefully find enough [dis]similarities to say whether a document was authored by a given person. This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

ID this 31173 NCR keyboard
by unknown＠example.com 17 Dec '03

17 Dec '03

! At 05:46 PM 6/3/96 -0700, you wrote: ! >ncr terminals are the most 31173 D0Dz ! ! I'm guessing that "D0Dz" is a variant on "dudes"; ! is "31173" supposed to be an upside-down "ElliE"? ! Having worked at NCR, I like their cash-machines and cash-registers, ! dislike the Microchannels in some of their PCs, ! dislike the terminals they used to make (I think SunRiver ! is the current manufacturer for that product line) ! and like their Teradata descendants. ! # Thanks; Bill ! # Bill Stewart +1-415-442-2215 stewarts(a)ix.netcom.com ! # http://www.idiom.com/~wcs ! # Rescind Authority! Oops. I wrote that just looking at the keyboard. Picked it up at Seattle's Ex-Pc for $3. It's so old, I think it requires a non-PC BIOS. No manual, labels etc. Anyone have a clue as to what this is: NCR F1 F2 [...] F18 F19 F20/RESET| ESC [...] TAB |[five direction keys] CONTROL Q [...] }/] CONTROL |CLR 7 8 9 / CAPS_LOCK A [...] ~/` |NEW | - 4 5 6 * [up] |/\ Z [...] [upup] |LINE | + 1 2 3 |NEW [space] | 0_ 00 . |LINE It was designed for easily customizing your keytable, being an actual flat terminal with square keys easily pulled out and interchanged. The back of the keyboard has three switches for the boolean selection of languages: US English, UK/Int. English, French, German, Swedish/Finnish, Danish/Norwegian, Spanish, Italian. So, where to get a NEW keyboard like this: FLAT, with a full set of SQUARE, EASILY pulled out keys.

1 0

Re: How can you protect a remailer's keys?
by Chris Adams 17 Dec '03

17 Dec '03

>> The best solution I could come up with (and was willing to write and use) >> is to specify the passphrase on the command line argument to the compiler >A far better solution would be to have a long-running daemon hold the >secret key. The mixmaster client could talk to the key daemon through >a unix-domain socket with the permission bits set such that only the >mixmaster user can connect. Each time the machine is rebooted, the >operator must start the daemon and give it a passphrase. >Second, if your machine is seized or someone gains unauthorized >physical access to it, the easiest way to get a root shell is by >rebooting single-user. However, if the only cleartext copy of a key >is in memory rather than in the filesystem, once the machine is >rebooted the secret key is lost. How about adding an "Oh s___" feature that would dump the key? You could even tie it to a login attempt (i.e. be sneaky and rename the actual root account to something else. Possibly hack the login client to return "root" as the username, etc, etc to complete the illusion if they are using TEMPEST. Then set it so that a root login makes the daemon dump the password) This would have possibilities, too, if you made it react to a) certain files in certain directories, b) certain signals or c) certain network messages. This would allow you to put in an innocous clear signal. Set it to a temp file created when editing your remailer's configuration (or userlist). Make it so that you have to conciously DISABLE security or it dumps the password. Have an innocent program terminate it. Be able to cancel it by sending an email (or using telnet) - this would be great if you had a trusted friend. Also, with some modification, you could set it to react to an external stimulus - say a panic button? or a card lock? You could even have fun putting all your sensitive stuff on an external hard drive and rigging your panic button to a) stop the remailer and b) activate the thermite charge on the external drive. // This was typed on a Warped PC by an equally warped Chris Adams <adamsc(a)io-online.com> // The Enigman Group - We do Web Pages! // Opinions expressed are not necessarily my own, much less another's. This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Fwd: Re: Class III InfoWar
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "cypherpunks" <cypherpunks(a)toad.com> >Date: Sun, 02 Jun 96 18:04:15 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: Class III InfoWar > On 2 Jun 1996 03:06:14 pdt, hal9001(a)panix.com wrote: >At 21:33 -0400 6/1/96, winn(a)Infowar.Com wrote: > > >>The article discussed the advanced information warfare techniques used by the >>perpetrators. "According to the American National Security Agency (NSA), they >>have penetrated computer systems using 'logic bombs' (coded devices that >>can be >>remotely detonated) > >Unless the definition has changed recently, a "logic bomb" is normally a >piece of code in a program that is triggered when a specific event occurs >(such as the programmer's name not appearing in a payroll file for a >designated period of time [which might trigger a salami round off routine >to start cutting checks 2 months after s/he is no longer working for the >company]). I believe that is what they were referring to. However, the press garbled it as usual. It seems like the original was something like 'logic bombs' (bits of code that can be triggered remotely). Probably sounded more impressive the reporter's way... This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Re: forged addresses
by Chris Adams 17 Dec '03

17 Dec '03

On 29 May 1996 19:38:16 pdt, nobody(a)nowher.com wrote: >Hi, I'm not sure if there was ever a thread on this, but I was wondering if >anyone can determine your real email address, if you were to fake it to your >email client. > >I hope that this doesn't offend anyone, since this is a high traffic list, but >I was wondering if this would work. To try it out, I setup my client to think >I was someone else, and sent myself an email. I could only figure out what >ISP it came from. > >What I would like to know is, can any of the experts on this list determine my >address from the header of this post?? I didn't receive anything except your nobody@... address. >again, if this is something that I shouldn't have done, just let me know, and >it won't happen again. > Hmmm... I'm going to have to play around with this. I can get outbound email access through my school district's mailserver simply by filling in the appropriate fields in netscape (we have a WAN hooked up to a T1). It would seem to me that this would be rather secure for several reasons, if for no other than that NO logging is made... In a large district, like mine (probably 10-15 thousand potential users), I doubt they would have the resources to track any of the 100 or so Internet machines on my campus alone, even if they could tell it came from here. This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Re: INteresting tidbit
by Chris Adams 17 Dec '03

17 Dec '03

>On the Encryption note, and I swear not along the lines of the 'DOJ' >and 'FBI Snooping' Big-Brother events, I heard another story recently. > ># begin story > >A person working on the MBONE project did an unannounced experiment >across the internet using Triple-DES for MBONE, and the very next day, >'ATF' agents knocked on his door and warned him against exporting >munitions. The experimentor was shaken by the fact that agents >approached him so quickly after the experiment. > ># end story > >Extrapolations of fact: > 1. Internet traffic is monitored. > 2. The ability to snoop for encrypted traffic is present > 3. The ability to identify encryption levels is present > (How else can they differentiate DES-1 from DES-3?) > 4. The ability to crack DES-1 in near real-time mode is present. > (See above). First, this has been loosely confirmed for ages. Someone was mentioning that FBI offices supposedly have software that (on a 486) can crack a DES-1 key in under an hour. Multiply * modern high capacity computers = problem. However, this does not nessesarily follow from #3. First off, you could probably tell the encryption used from a file format; the software on the other end has to know what it's getting. Secondly, you could probably tell quite a lot about what was used by some intense analysis. Finally, if their software cannot read it and analysis suggested it was more than DES-1 then they might go after someone w/o being able to read the document in question. > 5. If above=true, then Feds dropping the Zimmerman PGP case probably > also points to it also being crackable in a similar manner. Not necessarily. This freemen issue shows that the FBI is getting gunshy about bad publicity, which they were getting. > 6. Using encryption only flags traffic for capture and decryption, > using strong encryption makes you all that more interesting. Sounds like the old argument for encrypting everything... >Sorry, couldn't resist. I'll try not to start a threads about >electro-plasma propulsion craft at Area 51, metallic-ceramic skin >and pulse-jets on the Aurora spy plane, heat-imaging video cameras >on satellites and planes that can watch you through your houses' roof, >etc. :) What??? Now you're going to tell us X-Files is just a TV show? <g> This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Re: FOR WHOM THE BELL TOLLS
by Duncan Frissell 17 Dec '03

17 Dec '03

At 07:54 PM 6/6/96 -0700, Timothy C. May wrote: >(There may be cases people can dig up where some newspaper or newsletter >was "shut down," but I think such cases would be hard to find in the last >several decades. Am I wrong on this?) Not newspapers but a number of radio stations of course. Licensure. Even under CDA, we are not subject to license, however. Though I wonder how the FCC will behave as TV stations join the radio and "radio" stations that are already netcasting beyond its control. DCF

1 0

Fwd: Re: [crypto] crypto-protocols for trading card gam
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "ogren(a)concentric.net" <ogren(a)concentric.net> >Date: Thu, 30 May 96 02:30:30 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: [crypto] crypto-protocols for trading card gam > >Disadvantages: > >The entire integrity of the system relies on the security of the >game company's key pair. If the secret key is comprimised, either by >Cards are not transferrable. In order to make cards transferrable the >game company must be able to invalidate cards which have been traded >to others. In other words if Alice wants to give a cards to Bob she >must: I would just have multiple validators w/separate keys. sign w/each. This would not eliminate the problem but could reduce it... >1. Contact the game company and tell them she wants to give the card >to Bob. 2. The game company must issue a new card to Bob with a new >serial number and with Bob's public key rather than Alice's. 3. The >game company must invalidate Alice's old card. Since there is no way >that the game company can make sure all copies of the card have been >destroyed it must create a "invalid serial number list" and have the >players dial into that list everytime the game is played. > >Since step 3 is so costly to implement, I think it is unlikely that a >cryptography-based trading card game will have tradable cards. Much easier - with each card, store its ownership history. EACH time it is transfered, have it be signed by the previous owner. Originally, the game company signs it as a valid card. On selling it, they record the purchaser's identity (email address, etc)and seal the card with the company key (or set of keys - see above). Repeat as needed. This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

Fwd: Re: Idea 'bout banning the internet
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "jwilk(a)iglou.com" <jwilk(a)iglou.com> >Date: Mon, 03 Jun 96 20:36:49 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: text/plain; charset="us-ascii" >Content-Transfer-Encoding: 7bit >Subject: Re: Idea 'bout banning the internet > On 3 Jun 1996 19:48:48 pdt, jwilk(a)iglou.com wrote: >What if in the future a country banned the internet and all things that had >to deal with it (ie- telnet, irc). It would be the "underground" thing. >Just a thought, it would really suck! As I think about it it is impossible >or is it???? Hell the usa cant even ban porn let alone the whole thing. They >could ban it like they did fizzies. Hey there making a comeback did you here >now they have nutrasweet in them. If you know what fizzies are than your >pretty kewl. I'm only 13 and love then they are the drink of the future!!!! > >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >Blake "Pokey" Wehlage Gaa- 3.69 ><jwilk(a)iglou.com> Record- 2-4-4 >Age- 13 Final Standings- 2nd Place (Beat in Championship) > >President & Founder: > >Revolution Software "I have the fastest glove in the east!" >Profanity Software "Hackers never stop hacking they just get caught" >VSoft > >My life- Rarely eat or sleep, Hack til' 7:00a, goto school, play goalie >til' 8:00p, hack til' 7:00a >Hank Aaron- d:-)!-< Pope- +<:-) Santa Claus- *<:-) The Unabrower |:-) > >Current Girlfriend(s)- Lindsey Wilcox, Laura Schubring > >Personal Quote- Mr Plow, thats my name, that name aguin is Mr. Plow >-Homer Simpson >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > You know, even counting the header, your signature is longer than the message... BTW, I doubt most of us care about your current love life or soccer standings. We won't even mention Homer Simpson... This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

RISKS: YAJSH
by stevenw＠best.com 17 Dec '03

17 Dec '03

Reposted from RISKS: Yet Another Java Security Hole: ------------------------------ Date: Sun, 2 Jun 1996 07:46:20 +0000 (BST) From: David Hopwood <david.hopwood(a)lady-margaret-hall.oxford.ac.uk> Subject: Another Java attack There is another serious security bug in the class loading code for all currently available Java browsers: Netscape up to versions 2.02 and 3.0beta4 (except Windows 3.x) Oracle PowerBrowser for Win32 HotJava 1.0beta 'appletviewer' from the Java Development Kit up to version 1.0.2 Sun, Netscape, and Oracle have been sent details of the problem (which is partly related to the ClassLoader attack found by Drew Dean, et al. in March). The attack works by exploiting a design flaw in the mechanism that separates JVM classes into different namespaces. Using this bug, an attacker can bypass all of Java's security restrictions. This includes reading and writing files, and executing native code on the client with the same permissions as the user of the browser. The only way to avoid this problem at the moment is to disable Java. For more details see http://ferret.lmh.ox.ac.uk/~david/java/bugs/ Technical details will be posted when Sun, Netscape, and Oracle release patches. David Hopwood david.hopwood(a)lmh.ox.ac.uk http://ferret.lmh.ox.ac.uk/~david/ ------------------------------ Date: Thu, 6 Jun 1996 14:15:46 -0700 From: mrm(a)doppio.Eng.Sun.COM (Marianne Mueller) Subject: Another Java attack David Hopwood, a Java researcher in the UK, has uncovered a new security bug in Java [RISKS-18.18]. In simple terms, he has been able to manipulate the way objects are assigned and the way they collaborate, in order to undermine the applet security manager. Hopwood contacted JavaSoft directly re: the bug, and we have had a team working on a fix for the past 72 hours. In addition, we are applying Hopwood's model to conduct a security review, to determine if there are other bugs that may apply. We are currently thoroughly testing the fix, and plan to release a patch as soon as possible. As we complete more testing of the fix, a more detailed description of the bug and the fix will be added to the JavaSoft security FAQ at http://java.sun.com/sfaq/. JavaSoft is grateful for the internet security community's active interest in reviewing our code and we welcome feedback that makes Java better technology. ------------------------------ ------------------------------------------------------------------------- Steven Weller | Technology (n): | | A substitute for adulthood. stevenw(a)best.com | Popular with middle-aged men.

1 0

Fwd: [Fwd: Welcome!]
by Chris Adams 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >From: "Chris Adams" <adamsc(a)io-online.com> >To: "Jerry Kuhn" <jerry.kuhn(a)f0.n206.z1.fidonet.org>, > "Gary Orthuber" <nccorthu(a)rain.org> >Date: Tue, 28 May 96 00:01:11 >Reply-To: "Chris Adams" <adamsc(a)io-online.com> >Priority: Normal >X-Mailer: PMMail 1.5 UNREGISTERED SHAREWARE >MIME-Version: 1.0 >Content-Type: multipart/mixed; boundary="_=_=_=IMA.BOUNDARY.DS3KHZ138764=_=_=_" >Subject: Fwd: [Fwd: Welcome!] > ==================BEGIN FORWARDED MESSAGE================== >Message-ID: <1082295506(a)bbs.io-online.com> >From: adamsc(a)io-online.com >MIME-Version: 1.0 >Content-Type: multipart/mixed; boundary="zzzz408284d220bc8563io-online.cozzzz" >To: Adamsc >Date: 28 May 1996 12:31:14 pdt >Subject: [Fwd: Welcome!] > This message has been generated solely to deliver this file attachment. This file attachment was originally included in another message, which had multiple file attachments. This message was automatically generated. ===================END FORWARDED MESSAGE=================== This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com. ===================END FORWARDED MESSAGE=================== /* From Chris Adams <adamsc(a)io-online.com> on a Warped PC running a proudly unregistered (for now) PMMAIL 1.5! The Enigman Group - We do Web Pages! */ This Message Was Sent With An UNREGISTERED Version Of PMMail. Please Encourage Its Author To Register Their Copy Of PMMail. For More Information About PMMail And SouthSide Software's Other Products, Contact http://www.southsoft.com.

1 0

INFO: Discuss crypto with Sen. Burns online the night before hearings!
by Voters Telecommunications Watch 17 Dec '03

17 Dec '03

============================================================================= ____ _ _ _ / ___|_ __ _ _ _ __ | |_ ___ | \ | | _____ _____ | | | '__| | | | '_ \| __/ _ \ _____| \| |/ _ \ \ /\ / / __| | |___| | | |_| | |_) | || (_) |_____| |\ | __/\ V V /\__ \ \____|_| \__, | .__/ \__\___/ |_| \_|\___| \_/\_/ |___/ |___/|_| CRYPTO HEARINGS (S.1726) SET FOR 6/12/96 IN WASHINGTON D.C. MEET AND SPEAK TO SENATOR BURNS ON HOTWIRED THE NIGHT BEFORE! SEN. CONRAD BURNS (R-MT) SCHEDULED FOR HOTWIRED CHAT 6/11/96 10-11PM EST Date: June 7, 1996 URL:http://www.crypto.com/ crypto-news(a)panix.com If you redistribute this, please do so in its entirety, with the banner intact. ----------------------------------------------------------------------------- Table of Contents News Press Release on Hearings How to receive crypto-news Press contacts ----------------------------------------------------------------------------- NEWS In what is becoming the newest way for Congress to read the net.community's opinion on issues, Senator Conrad Burns will be on HotWired on June 11th @ 10pm EST to discuss the encryption issue with all attendees. The next day, Senator Burns will be coordinating a day of hearings on the encryption issues with industry luminaries. Never before has the public had this much access to legislators without geographical proximity. Cheaper than teleconferencing, and more direct and unfiltered than the traditional press, online chats allow the public to directly question and hear the answers of Congress. Have a question about encryption policy that you've never been able to find out from the government? Come to the HotWired chat and ask Senator Burns to be your advocate, to press the witnesses and the White House on these issues. The online chat is on June 11 at 10pm EST, the night before the hearings HotWired's WiredSide chat is at (http://www.hotwired.com/wiredside) Information on Senator Burns' legislation is available at http://www.crypto.com ----------------------------------------------------------------------------- PRESS RELEASE ON HEARINGS Senator Conrad Burns (R-Mont.) WEB SITE http://www.senate.gov/~burns/ For immediate release: Contact: Matt Raymond Thursday, June 6, 1996 (202) 224-8150 Randall Popelka (202) 224-6137 First Pro-CODE Hearing Slated Burns' Subcommittee to Hear High-Profile Executives, Witnesses WASHINGTON, D.C. _ Montana Senator Conrad Burns today announced the first of two Senate hearings on S. 1726, the Promotion of Commerce Online in the Digital Era Act of 1996, or "Pro-CODE." The hearing will take place in the Commerce Subcommittee on Science, Technology and Space, of which Burns is chairman. The hearing is scheduled Wednesday, June 12, at 9:30 a.m. in room 253 of the Russell Senate Office Building. Scheduled to testify are: Michael Zisman, president and CEO of Lotus; Jim Barksdale, president and CEO of Netscape Communications; Jim Bidzos, president and CEO of RSA Data Security; Tim Krauskopf, V.P. and co-founder of Spyglass Inc.; Kenneth Dam, chairman of the National Research Council; Douglas J. McGowan, director of the SmartCard Alliance for Hewlett-Packard; Computer Systems Policy Project representative (invited); Joe Holmes, chief technology officer for EDS; Joel S. Lisker, senior V.P. for security and risk management at MasterCard; Danne Buchanan, president of Zion's Data Services Company; Jack Valenti, executive director of the Motion Picture Association of America; Aharon Friedman, chairman, founder and chief technical officer of Digital Secured Networks Technology Inc.; Steve Case, president and CEO of America Online (invited); and Robert Bigomy, senior V.P. and director of strategic marketing, government and space technology group, for Motorola. Burns said the focus of the hearing is on commerce and business issues. He said a second hearing, which will focus on privacy, law enforcement and national security issues, is scheduled in his subcommittee on June 26. The bipartisan Pro-CODE bill would ease export restrictions on computer security, or "encryption," for software and hardware. It would also prohibit mandatory systems in which users or companies would have to place a code-breaking "key" in the hands of a third party. # # # ----------------------------------------------------------------------------- HOW TO RECEIVE CRYPTO-NEWS To subscribe to crypto-news, sign up from our WWW page (http://www.crypto.com) or send mail to majordomo(a)panix.com with "subscribe crypto-news" in the body of the message. ----------------------------------------------------------------------------- PRESS CONTACT INFORMATION Press inquiries on Crypto-News should be directed to Shabbir J. Safdar (VTW) at +1.718.596.2851 or shabbir(a)vtw.org Jonah Seiger (CDT) at +1.202.637.9800 or jseiger(a)cdt.org ----------------------------------------------------------------------------- End crypto-news =============================================================================

1 0

Thank you for the Archives 100 messages
by qut4.qut＠netcom.com 17 Dec '03

17 Dec '03

Apologies, but rich has deleted me from his mailboxes, and for a few days now, somebody has placed a global cancel bot on me. I'm gonna have plenty of fun figuring this out. Kwow any good sniffers? I agree the list should be public usenet: A mail gate-way to a usenet group that ALSO permits unmoderated posts. This would be a nice way to combine a strict moderated mail-list, with a standard netnews group.

2 1

Re: whitehouse web incident, viva la web revolution
by Clay Olbon II 17 Dec '03

17 Dec '03

Jonathon, > Statistical proof is only accepted in academia. Depending > upon your POV, this may or may not be a good thing, when > one is facing civil, or criminal charges. > > Finding proof for either civil or criminal charges is a > slightly different matter. IANAL, but your statements are misleading. Statistics are often used in both criminal and civil cases. Look at the DNA evidence in the OJ trial (OK, maybe a bad example), or the evidence that breast implants don't cause various ailments (probably another bad example :-). Both of these examples are based on statistics. IMO, part of the problem with juries (and public discourse in general) today is that anecdotal evidence is often accepted, when that evidence is clearly not statistically significant. The examples I cited previously illustrate this - the four horsemen are a similar example for public policymaking. Clay --------------------------------------------------------------------------- Clay Olbon II | Clay.Olbon(a)dynetics.com Systems Engineer | ph: (810) 589-9930 fax 9934 Dynetics, Inc., Ste 302 | http://www.msen.com/~olbon/olbon.html 550 Stephenson Hwy | PGP262 public key: on web page Troy, MI 48083-1109 | pgp print: B97397AD50233C77523FD058BD1BB7C0 TANSTAAFL ---------------------------------------------------------------------------

2 1