December 2003 - cypherpunks-legacy

Re: Gun Grabbers in WASHINGTON -- Friday
by John Young 17 Dec '03

17 Dec '03

Anonymous wrote: > >8 a.m.-Noon. POWDER TAGGANTS - Conclusion of a two-day conference by a >National Resarch Council committee examining the technical viability of >and issues related to tagging black and smokeless powders. > Location: National Academy of Sciences, 2100 C St. NW. > Contact: 202-334-2138. The New York Times reported today that the National Research Council found that it was not feasible to require taggants in explosives and recommended that the technology not be pursued. Instead, it proposed improved licensing and protection of storage. The panel noted that it would be very difficult to restrict access to common materials for manufacturing explosives, and that law enforcement should improve investigation, intelligence and education of the public. An unconfirmed Reuters is that the panelists fist-fought tooth-and-nail gouch&suck-eyeballs over the issue of a confidential investigation to determine why there were no ATF agents in Murrah, only the head-hammered remains of all the agency's Wintel boxes choked with endless incoming of "The Availability of Bombmaking Information on the Internet" auto-forwarded from Senator_Feinstein(a)remailer.to.

1 0

Your Web Site's Findability
by poc＠search-engine-help.com 17 Dec '03

17 Dec '03

Would you like to improve your website's "find-ability" in the Search Engines? During the past two years, my company has been placing hundreds of webpages into the Top Ten -- the front page -- of the major search engines... and, for about $8 a month, I will show you how we do it... and I'll share with you our ongoing research -- every month! My name is Stephen Mahaney. I am the president of Planet Ocean Communications. My web marketing company has literally "written the book" on how to position your website on the front page -- the Top Ten -- of each of the major search engines... guaranteed! Our 65 page manual identifies every trick & technique that is being used on the Internet to gain an almost "unfair" advantage in landing websites at the top of the search engine lists -- right where you need to be so that potential customers who are seeking your services or products can find you. Our monthly Newsletter keeps you abreast of the latest techniques and frequent changes that take place in the dynamic world of "search engine" science. However, understanding the process does not require a degree in "rocket" science -- nor do you need to be "technically oriented". Whether your website is a "do-it-yourself" project or you are paying someone to maintain your site, you (or your webmaster) need to know the tricks in this book in order to compete with the professionals who are dominating the front pages of the various search categories. To learn more about how you can obtain this essential information and receive a free subscription to our Newsletter -- SEARCH ENGINE SECRETS UPDATE, go to.... http://www.search-engine-help.com/advantage/ You'll be glad you did. Sincerely, Stephen Mahaney - President Planet Ocean Communications *************************************************** Note: We have contacted you based on information that we gathered while visiting your website - If you would prefer not to receive mail from us in the future, simply reply with the word "remove" in the subject line and you will be automatically excluded from future correspondence. Thanks *************************************************** Thought for the day... "The only thing a man can take beyond this lifetime is his ethics"

1 0

Barry Smith (FBI) speaks today 3:30pm at UMBC
by Dr. Alan Sherman 17 Dec '03

17 Dec '03

The UMBC Security Technology Research Group presents A Law-Enforcement Perspective on Encryption Policy Barry Smith Supervisory Special Agent, FBI moderated by journalist Peter Wayner 3:30pm - 5:00pm Friday, March 6, 1998 Lecture Hall III University of Maryland, Baltimore County http://www.cs.umbc.edu/events/spring98/crypto.shtml The second lecture and discussion in a two-part forum on encryption policy. Journalist Peter Wayner will introduce and moderate the event, which is free and open to the public. In Part I, freedom activist John Gilmore and Fritz Fielding (Ex-Associate General Councel, NSA) gave their divergent views, focusing on the Burnstein case. Barry Smith will articulate the needs of law enforcement to conduct lawful wiretaps; he will advocate the use of key-recovery techniques to achieve this end as a way that provides adequate privacy to law-abiding citizens. Schedule: The event will begin with a brief (10 minute) introduction by Peter Wayner. Following Barry Smith's talk, which will last approximately 45 minutes, there will be an opportunity to ask questions for approximately 20-30 minutes. Questions: Attendees are encouraged to ask questions in advance by sending email to sherman(a)cs.umbc.edu Directions: Take Exit #47B off interstate I-95 and follow signs to UMBC. LH III is in the Administration Building, adjacent visitor's parking lot near the I-95 entrance to UMBC. Host: Dr. Alan T. Sherman Associate Professor, Computer Science sherman(a)cs.umbc.edu http://www.umbc.edu (410) 455-2666 This event is held in cooperation with the UMBC Intellectual Sports Council Honors College Phi Beta Kappa honors society CMSC Council of Majors IFSM Council of Majors ACM Student Chapter at UMCP

1 0

BXA 97 Report on Encryption
by John Young 17 Dec '03

17 Dec '03

BXA issued its 1997 Annual Report on March 4. We've excerpted the sections on encryption, which summarize the administration's policy, goals and accomplisments: http://jya.com/bxa97-encry.htm (43K) Sample: In the nine month period from the transfer of commercial encryption items to Commerce through the end of FY 1997, BXA has received over 1,000 encryption license applications valued at more than $500,000,000. Forty companies have submitted commitment plans which lay out how they will build and market key recovery products. These companies include some of the largest software and hardware manufacturers in the country. BXA has approved 32 of these plans; none have been rejected. Furthermore, eight companies have submitted requests for a one-time review of key recovery encryption items which will facilitate the establishment of a key management infrastructure (KMI). Four of these products have been approved for eligibility under License Exception KMI. BXA has also approved four U.S. entities to serve as their own Key Recovery agents for these products (i.e. corporate "self-escrow").

1 0

UPS to market DIGITAL SIGNATURE AUTHENTICATED DIGITAL DOCUMENT DELIVERY, $5 < $x < $10
by David Honig 17 Dec '03

17 Dec '03

http://dailynews.yahoo.com/headlines/technology/wired/story.html?s=n/reuters /980306/wired/stories/ups_2.html UPS ships high-tech security along with packages By Randolph Court SAN FRANCISCO (Wired) - United Parcel Service stepped into the secure-electronic-data-transmission business this week, promising to make online-document delivery as trustworthy and easy to use as a dollar bill minted by the US Treasury. "We view ourselves as a trusted third party," said Mark Rhoney, vice president of marketing for electronic commerce at UPS. But can UPS shift its focus from shipping cartons into computer bits? Its move marks a head-on assault at a growing business now handled by much smaller, specialized high-tech companies. What UPS will offer by the second quarter of 1998 is an alternative to existing systems offered by lesser known entities like Entrust Technologies and Network Associates' PGP division. Entrust and PGP hawk encryption systems that allow one person to send a secure data file to someone else with no meddling from any outsiders. UPS's new service, developed in partnerships with Tumbleweed Software and NetDox, is based on the idea that a supervisor should be involved in the process to guarantee the integrity of the information being sent. Say a lawyer wants to send a contract worth $3 million, but the recipient decides to tinker with the numbers and knock the figure down to $2.5 million. The situation dissolves to finger pointing, each side saying they agreed to something different. With the UPS system, the data that is sent will be digitally fingerprinted and archived with time stamps and receipts from each party, so there will be records of whether or not a document has been tampered with. "The document is digitally notarized and legally binding," said NetDox spokesman Lee Kallman. If there is a finger-pointing situation, UPS will be able to prove in court exactly what was sent, by whom, who received it, and when. "That's what you don't get with other encryption systems, and that's the void UPS wants to fill," said Kallman. The service will play a role not unlike the role a government plays when it guarantees the value of currency, Kallman said. UPS will insure the integrity of each document, and the identity of both sender and receiver, for up to $100,000. The system is called UPS Document Exchange, and it will offer two levels of security - Dossier for the strong stuff and Courier for the milder version. For the most sensitive data, UPS will use a system designed by NetDox that requires users to download a software client that wraps data - any sort of digital information, from simple documents to multimedia - in two layers of encryption, an inner 40-bit layer, and an outer 128-bit layer. The data is sent to a UPS server where it is unwrapped, and a digital fingerprint is taken and stored; then it is re-wrapped and sent to its destination, where the recipient opens it with the NetDox client software. For less-critical data packages, UPS will use a system designed by Tumbleweed that encrypts data with a varying number of bits to accommodate the different encryption levels supported by browsers in different countries. The encrypted data is then sent to a UPS server, where it is stored at a 128-bit encryption level. The server sends an email message to the recipient telling him or her the Web address where the data resides and how it can be accessed via browser with RSA encryption. --- UPS has been close-mouthed on the question of price, saying only that delivery will be more expensive than a 32-cent stamp and cheaper than a traditional overnight delivery. NetDox has been charging $5.35 for domestic transactions and $10.70 for international data exchanges, according to Kallman. But it hasn't had much competition. If the UPS service proves viable and other competitors emerge, prices could drop precipitously, Kallman said. News of the UPS service was greeted warmly in some corners of the encryption industry, and skeptically in others. "We're very excited to hear that a large company like UPS is rolling out a broad-based service like this," said Gina Klein Jorasch, director of enterprise marketing at VeriSign. The company provides digital certificates, which act like identity cards tying a user's identity to a public key that enables the encryption process. --- VeriSign has reason to be hopeful, though. Software clients like the ones provided by NetDox and Tumbleweed require digital certificates, just like those provided by VeriSign. "A deal between VeriSign and UPS is very conceivable," Jorasch said. Jeff Harell, the product manager for PGP products at computer security giant Network Associates, quarreled with the fundamental idea of involving outsiders in the data transmission process. "Why would a corporate customer want to go to third-party systems?" Harell asked. "A lot of companies don't want to involve a third party that they are required to trust." Many companies view their data as too important to risk exposing to a system with so many junctions and exchange points. PGP is a proprietary system. Users sending and receiving data must both have PGP, and their keys can only be provided and verified by PGP. All of this is new in the traditional package delivery industry, but not unexpected. "Now that the Web has become so ubiquitous, this strikes me as something that UPS and the other delivery companies needed to do," said Rita Knox, an industry analyst with the Gartner Group. "This is a pretty compelling service," Knox added. "It's available 24/7 and it's virtually instantaneous." Federal Express, after a failed attempt to introduce an electronic service in the early 1980s, ended up setting a standard in the industry in 1995 when it launched a self-service ordering and tracking system on the Web. Similar services have since been adopted by UPS and Airborne Express, among other competitors. Analysts are looking ahead to the possibility of UPS's online delivery service becoming an industry must-have if it proves successful. "I definitely anticipate another domino effect if UPS has any success with this at all," said Michael Sullivan-Trainer of International Data Corp. "All it takes is one competitor to introduce a new software innovation and it changes industry dynamics." ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu "But if we have to use force, it is because we are America; we are the indispensable nation." ---Secretary of State Madeleine K. Albright http://www.jya.com/see-far.htm

1 0

No Subject
by David Honig 17 Dec '03

17 Dec '03

Politicians still think they're relevant... Given that this bill passed 414-1, it'll likely be US law soon. Does this mean that law enforcement will now need a judicial wiretap order to go scanning for evidence to get a warrant? http://dailynews.yahoo.com/headlines/technology/story.html?s=n/reuters/98030 6/tech/stories/privacy_1.html Friday March 6 10:33 AM EST House Passes Wireless Privacy Bill WASHINGTON (Reuters) - In a bid to protect privacy for cellphone or digital calls, the House Thursday voted 414-1 to make intercepting such phone conversations illegal. The Wireless Privacy Enhancement Act makes clear that the act of interception -- whether or not the call is later divulged or disseminated in any way -- is against the law. It bans modification of scanners that are now on the market that can easily pick up calls made on cell phones, and prevents a market for new scanners capable of intercepting digital communications. The bill, which the Senate has not yet acted on, increases penalties for intercepting or divulging private communications, making them subject to a $2,000 fine and six months in jail. Earlier laws had not treated such interceptions as serious offenses if they were not used for financial gain. Although the bill had broad bipartisan support, it was a particular favorite of Republicans, who were furious after a December 1996 cellphone conversation involving House Speaker Newt Gingrich and fellow Republican leaders was taped by a Florida couple. House Republicans have alleged that Washington Democratic Rep. Jim McDermott then leaked it. McDermott -- who voted for the wireless privacy act -- has not publicly commented on those allegations. Ohio Republican Rep. John Boehner, who was using a cellphone in his wife's car in that conversation with Gingrich, enthusiastically backed the bill. "Our message should be plain and simple," he said. "If you violate someone's privacy, you are not creating idle mischief, you are breaking the law and of the land and you will be brought to justice." Roughly 50 million Americans use some kind of new mobile electronic communications services, according to the bill's sponsors. The sole vote against the bill came from Ron Paul, a Texas Republican. He was not immediately available for comment. ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu If you start now, the year 2038 problem might be tractable.

2 1

Hoo ha!
by Eng500 17 Dec '03

17 Dec '03

Hi. Check out the #1 best site on the web! You wont regret it! http://152.163.233.31/dcja1 or click here!

1 0

RE: Crypto as contraband
by Dave Emery 17 Dec '03

17 Dec '03

Subject: Re: [LEGAL] Crypto as Contraband? Reply-To: die(a)die.com References: <v03102809b1265edd4202(a)[207.167.93.63]> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.85 In-Reply-To: <v03102809b1265edd4202(a)[207.167.93.63]>; from Tim May on Fri, Mar 06, 1998 at 06:20:39PM -0800 On Fri, Mar 06, 1998 at 06:20:39PM -0800, Tim May wrote: > > (Even with guns, in the U.S., there have historically been > "grandfatherings" of existing guns. Not always, as with certain machine > guns. And not with gold, which was declared contraband by the Reichsfuhrer > in 1933.) > > Could possession of PGP be still legal, but _use_ declared illegal? > > (Not addressing the First Amendment issues, which are even stronger, but > just the issue of retroactive contrabanding of something which was acquired > legally, and by hundreds of thousands of law-abiding citizens.) > The House has just done this yesterday as mentioned in several items posted to this very list: From HR2369, the Wireless Communications Privacy Enchancement Act of 1998, passed by the House 414 to 1.... "(4) Any person who manufactures, assembles, modifies, imports, exports, sells, or distributes any electronic, mechanical, or other device or equipment, knowing or having reason to know that the device or equipment ..." .... clause concerning satellite piracy gear omited ..... " , or is intended for any receipt, interception, divulgence, publication, or utilization of any communication in violation of subsection (a), shall be fined not more than $500,000 for each violation, or imprisoned for not more than 5 years for each violation, or both. For purposes of all penalties and remedies established for violations of this paragraph, the prohibited activity established herein as it applies to each such device shall be deemed a separate violation." Subsection a: " ....... No person not being authorized by the sender shall intentionally intercept any radio communication *or* divulge or publish the existence, contents, substance, purport, effect, or meaning of such intercepted communication to any person..........." [note that *and* was changed by this bill to *or*, making interception itself criminal] The only exception being : "Nothing in this subsection prohibits an interception or disclosure of a communication as authorized by chapter 119 of title 18, United States Code." [which covers broadcast, ham, marine, aviation. governmental, and communications readily accessible to the general public, whatever that means] While this doesn't exactly retroactively ban *possession* of radio gear capable of intercepting banned radio communications, it provides extremely stiff felony level penalties for manufacturing, assembling, modifying, importing, exporting, selling, or distributing any radio receiving gear that might be construed to be intended for receipt or interception of any radio communications not on the allowed list. And these penalties apply to each individual sale. Thus selling an old scanner at a Saturday morning hamfest to a stranger for cash - a scanner legally purchased from Radio Shack in the era before cell phone frequencies were outlawed on scanners - could conceivably result in a $500,000 fine and a five year jail term. And Lord knows what horrible penalties could be assessed against innocent people selling the sort of oddball specialized communications gear and test equipment that are the stock in trade of many of the more interesting ham fests and swapmeets [MIT's monthly fleas for example]. Perhaps such informal personal sales will never be prosecuted, but most sales of gear at hamfests and the like are anonymous cash transactions between total strangers with every possiblity that the guy a table over with the video camera is filming your sale for evidence. And for those who like to hack, tinkering quietly in their basements with communications monitoring and decoding software and hardware, manufacture and assembly have been defined in other federal cases to include merely writing software for one's own use. Surely this would apply to creating cryptanalysis software for any form of radio communications at all, since it is not legal to intercept any radio communications that are "scrambled or encrypted". And there is no exception made for research and development or academic purposes. So yes, they have done at least as bad a thing to people who merely want to tinker with their radios and occasionally explore what is out there in the ether by passively and in private receiving radio signals as they have to gun owners, who at least possess a weapon capable of doing some serious harm. And there is not a single sentance in the legislation providing any kind of encouragement for the use of cryptography to protect the privacy of openly broadcast signals receivable for miles around, let alone mandating it. -- Dave Emery N1PRE, die(a)die.com DIE Consulting, Weston, Mass. PGP fingerprint = 2047/4D7B08D1 DE 6E E1 CC 1F 1D 96 E2 5D 27 BD B0 24 88 C3 18

4 3

stroke the toad.
by mvhs5 17 Dec '03

17 Dec '03

pitch a tent

1 0

Returned mail: Cannot send message within 5 days
by Mail Delivery Subsystem 17 Dec '03

17 Dec '03

The original message was received at Mon, 2 Mar 1998 14:14:28 -0500 (EST) from ts35-10.homenet.ohio-state.edu [140.254.114.193] ----- The following addresses had permanent fatal errors ----- <Remove(a)rmjent.com> ----- Transcript of session follows ----- 451 <Remove(a)rmjent.com>... rmjent.com: Name server timeout Message could not be delivered for 5 days Message will be deleted from queue Reporting-MTA: dns; chemistry.mps.ohio-state.edu Arrival-Date: Mon, 2 Mar 1998 14:14:28 -0500 (EST) Final-Recipient: RFC822; Remove(a)rmjent.com Action: failed Status: 4.4.7 Last-Attempt-Date: Sat, 7 Mar 1998 15:08:01 -0500 (EST) To: Remove(a)rmjent.com From: cypherpunks(a)toad.com Date: Wed, 02 Jan 1980 01:47:53 -0500 Reply-To: cypherpunks(a)toad.com

1 0

Bulk Email For Profit !!
by nuapuosao29＠iddqd.org 17 Dec '03

17 Dec '03

If you would like to be removed from our list(s), hit reply and type remove in the subject of your letter. ********************************************************* MAIL THOUSANDS OF EMAIL MESSAGES PER HOUR - NO KIDDING !! SEND YOUR EMAIL MESSAGES OUT, AT 1,000's MESSAGES / HOUR (28.8K modem) YES, 1,000's Of Messages An Hour ****************************************************** 68+ MILLION EMAIL ADDRESSES ******** $100.00 ******* ****************************************************** YOU'LL RECEIVE 2 HIGH-SPEED EMAIL SOFTWARE PROGRAMS Introducing...."FLOODGATE BULK EMAIL LOADER" AND...."GOLDRUSH STEALTH MASS MAILER" This is the same software that all bulk emailing services use! ******************************************************** TO COMPLIMENT OUR PACKAGE............ WE NOW MAKE AVAILABLE...........A BULK FRIENDLY ISP !!! See Our Order Form Below For Details ********************************************************* GET A "BULK FRIENDLY" WEB HOST ACCOUNT FROM US FOR ONLY $45.00 PER MONTH* *($100 one-time setup fee additional) ********************************************************* Floodgate Bulk Email Loader Version 6.0 AND Goldrush Stealth Mass Mailer Version 3.215 for Windows 95 and Windows 3.1 now Supports 17 (really more with the free form filter) File Formats --------------------------------------------------------- SEND OUT 20,000+ MARKETING LETTERS EVERY SINGLE DAY! Or...every few days. In fact, when I send out just a few thousand marketing letters each day, it doesn't take long before I'm completely swamped with email inquiries and phone calls. This is very easy to do. And each one of these bulk mailings costs me nothing. I can teach you how to do this and provide you with the tools you'll need. If you've got a good marketing letter, I'll show you how to open the floodgates. You'll be deluged with inquiries, leads, and real sales, using nothing but email alone. Writing a good marketing letter is not easy. I often have to rewrite my marketing letters a half dozen times before I get the results I'm looking for. But once you have a good letter, as you probably know, you can use the same letter over and over again, predictably and consistently, closing sales, week after week, month after month. It takes me about one hour to send my marketing letter to THOUSANDS of fresh email addresses. I can do this, thanks to a Windows program I use. It's called Floodgate and Goldrush Stealth Mass Mailer. It's a bulk email loader and an email software program. If you're interested in electronic marketing, you should know about these programs. PROGRAM #1: FLOODGATE FOR WINDOWS The Floodgate Bulk Email Loader imports simple text files that anyone can download from CompuServe, Prodigy, Delphi Genie, or the Internet. These text files contain classified ads, forum messages, or data from the member directory. Each of these files is filled with email addresses. Floodgate is designed to read these files and strip out the email addresses. It then sorts the addresses, removes any duplicates, and formats them into an output file, with 10, 20 or 30 addresses per line. This is all done in one simple step. Just point and click. You'll need either a Windows based Internet account or an America On-line account to send out your marketing letters. Neither AOL nor the Internet charges to send email. Send your letter to 1,000 people or 10,000 people -- the cost is always the same. NOTHING! NEW! PREPARE A MAILING OF 50,000+ IN LESS THAN A 1/2 HOUR If you open an Internet account, you can send each letter to 20,000+ people. The new Floodgate now directly writes distribution lists. Some people are always collecting new addresses, but if you publish a newsletter or adsheet, you'll be using the same addresses over and over again. That's real power! When using addresses you've previously collected, you can press a few buttons and prepare a mailing of 50,000+ in less than a half hour. (To get a list of all the Internet access providers in your local calling area goto: http://thelist.com and click on your area code.) The Floodgate Users Guide will teach you, step by step, how to download the right files, how to strip the addresses, and finally, how to cut and paste the formatted addresses into your marketing letter. Or, if you have an Internet account, how to create distribution lists. One you've done this a few times you won't even have to think. It's that simple! FOR THE BRAVE & DARING: PUSHING TECHNOLOGY TO ITS LIMITS As you may know, the practice of sending unsolicited email is usually frowned upon, and most service providers have rules against it. But, like jay-walking, there is little enforcement. It's not illegal. If someone tells you that it is, ask them to provide the citation (and don't let them give you some nonsense about faxes - that's not email). They can't do it because it's not there. Sometimes, when a lot of people complain, I get a warning letter. And that's about it. About 1 in 200 will write back and tell me, "take me off the list", which I can do, thanks to Floodgates Remove List feature. Many people reply back thanking me for sending them my informative letter. That's always nice. Most people though, just reply and say, "send me more info." In this way, it usually takes me two or three letters to close a sale. The Floodgate Users Guide will provide you with proven formats for writing a successful marketing letter. You'll test and rewrite, test and rewrite. Then, once you've got it, just push a few buttons, and open the floodgates!!! THE FLOODGATE BULK EMAIL LOADER CURRENTLY SUPPORTS 17+ FILE FORMATS 1. CompuServe Classifieds: Send your marketing letter to everyone who is running a classified ad. I'll teach you how to download all the classifieds from any single ad category. This is one of the most responsive list of buyers. They check their email every day and they're already in business. 2. America On-line Classifieds: Download 1,000 addresses in 15 minutes. These are excellent lists for business to business sales. 3. CompuServe Forums: You can join a forum and download hundreds of forum messages in a matter of minutes. 4. America On-line Forums: Choose from dozens of forums. All good targeted lists. 5. Prodigy Forums: Prodigy allows you to easily export any group of forum messages. More targeted lists. 6. Internet Newsgroups: These are all targeted lists. You'll be able to send your marketing letter to everyone who posts a message in any newsgroup. Easily collect 1,000's of addresses per hour. 7. America On-line Member Directory: Most member directories only allow you to search by city and state. With AOL, you can search by business type, hobbies, computer type, etc. This is the gem of all member directories. Build huge targeted lists. 8. CompuServe Member Directory: This is a major resource. If you're willing to target your mailing to a single city, you can collect about 1,000 email addresses an hour. 9. Delphi Member Directory: The Delphi member directory allows you to search for people based on key words. These are good targeted mailing lists. A single search can easily generate 5,000 addresses. 10. Genie Member Directory: Similar to the CompuServe member directory, only you can download names much quicker. You can easily pull hundreds of thousands of addresses out of each of these member directories. 11. CompuServe File Cabinet: If you run classified ads, and save the responses in the CIM file cabinet, you'll be able to easily reuse these addresses. You can send your marketing letter to everyone in any single folder. Build master lists and clean UP your hard drive. 12. Free Form: If you have a text file with email addresses that floodgate does not support, chances are the Free Form filter will be just what you need. Just enter a key word to search for. 13. CompuServe Form Profiles (Forum Membership Directories): Easy to build targeted lists here. Each search can easily bring you 500+ addresses. 14. Genie Profiles: If you're building targeted lists, you'll get a lot of addresses very quickly from Genie. 15. Plain Addresses: Read Floodgate Master Files back into Floodgate to merge files and do selective mailings. Also useful for the management of email address lists that you might purchase. Floodgate also has filters to allow you to include or exclude any groups of addresses in your final distribution lists. For example, you could include only email addresses that ended in .com or exclude all with .gov. You could exclude all noc, root, and other addresses that almost guarantee a negative response. These filters are fully configurable and can be used together. BUILD REUSABLE MASTER FILES Floodgate maintains Master Files for each of your marketing letters. If you download from the same place on a regular basis, you only want to send your letter to the new people. Floodgate will compare the new addresses with those in the Master File, and prepare a mailing list of only new people. The new addresses are, of course, then added to the Master File. With each new mailing your Master File grows and grows. You may create as many Master Lists as you need. When you start a new marketing campaign, you'll want to send your new letter to everyone on your Master List. If you write a newsletter, each time you send your newsletter, you'll send it to everyone on a Master List. THE REMOVE LIST Very often, people will reply and tell you to take them off your mailing list. Place these addresses in the REMOVE.MST file and they will never receive another letter from you again. In this way, you will be operating your business with the most professionalism possible. DON'T BE FOOLED We have some new competitors that have tried to copy Floodgate. The following list describes why Floodgate is BETTER....... **Floodgate is a mature, bug free product. Not an initial release. **Floodgate comes with over 100 pages of step by step documentation. **Floodgate is the only one offering a money back guarantee. **Floodgate has more testimonials. **Filter for filter, Floodgate offers more capabilities, way more. **Floodgate does everything all the others *combined* claim. **Floodgate is by far the easiest to use. **There is NO *cutting and pasting* with Floodgate. **We have by far, the BEST technical support. SOME QUICK MATH Floodgate can pay for itself in a few days. It can also cut your advertising costs down to almost nothing. Think of what the competition will do when they get their Floodgate program. Don't be left in the dust - there are 75 million people out there, just a few keystrokes away. Let's do the math: - Email 50,000 sales letters (takes about 1-2 hours) - Let's say your product will bring you $5 profit per sale. - Let's also say you only get a 1% response(occasionally higher). * That's 500 orders x $5 = $2,500 profit !! Now imagine what 500,000 letters would do for your business !! WHAT CAN I MARKET ON-LINE? You can market anything on-line using direct email, that can be marketed using conventional postal direct mail marketing. The possibilities are practically endless. If it sells off-line, you can sell it on-line. EASY TO INSTALL AND EASY TO LEARN The Floodgate Email Loader requires Windows. The SUPPLIED MANUAL tells you where to go, what to do, and how to do it. All you need are basic computer skills that can be learned with a little practice or help from our computer savvy technicians. PROGRAM #2: GOLDRUSH STEALTH MASS MAILER Do not get this program confused with other slow speed programs that call themselves "STEALTH". This program is the only one in the world that can send email out at HIGH SPEEDS with one single connection to the internet. This is NEW, Cutting Edge Email Technology. First Of It's Kind.. The Most Powerful BULK EMAIL SENDER In The World.. NOTHING CAN EVEN COME CLOSE! Thanks to our top programmer's, this technology is NOW available and we are the only place you can get it from! *ONLY "ONE" DIAL-UP OR ISDN CONNECTION NEEDED. *NO MORE TERMINATED CONNECTIONS. *NO MORE WAITING TO SEND LARGE AMOUNTS OF EMAIL. *IMMEDIATE RESPONSE TO YOUR MASS MAILINGS. *YOU WILL HAVE ALL THE CONTROL AND CONFIDENCE OF SENDING EMAIL THE WAY IT SHOULD BE SENT... IN HUGE AMOUNTS! *SEND YOUR WHOLE LIST IN ONE DAY, WHETHER IT BE 500,000 OR 5 MILLION - AND JUST SIT BACK AND WAIT FOR YOUR ORDERS TO POUR IN. *NO MORE DOWNLOADING UNDELIVERABLE NAMES. Bulk Emailer's Dream Come True!!! - >>>GOLDRUSH STEALTH MASS MAILER<<< Connect to multiple mail servers (20 or more), make multiple connections to a single server or any combination of the two ( All Simultaneously ) with one single dial-up connection. SEND MULTIPLE SIMULTANEOUS MAILINGS... View complete details about your mailings. Shows each server your connected to, the status of that connection, how many messages are going out through that connection, etc... We show you ALL the tricks all the mass e-mailers don't want you to know... Here are just a few features the GOLDRUSH STEALTH MASS MAILER offers to you... *Forge the Header - Message ID - ISP's will Spin their wheels. *Add's a Bogus Authenticated Sender to the Header. *Add's a complete bogus Received From / Received By line with real time / date stamp and recipient to the Header. *Does NOT require a valid POP Account be entered in order to send your mailings. *Easy to use and operate *Plus much more! All this, at speeds of up to 1,000's messages/hour (28.8k modem). SPECIAL INTRODUCTORY PRICE... NOW YOU CAN HAVE BOTH THE FLOODGATE AND GOLDRUSH STEALTH MASS MAILER FOR JUST $499.00! UPDATE ... SAVE $149.05 AND ORDER NOW, BE ONE OF THE FIRST 100 ORDERS! Step up to the plate and play with the big boys TODAY and receive the COMPLETE 2 SOFTWARE PACKAGE for the unbelievably low price of ONLY $349.95! (Other bulk email software has sold for as much as $2,500 and can't even come close to the cutting edge technology of EASE, ACCURACY AND SPEED ... SPEED ... SPEED!) Try the Goldrush Stealth Mass Mailer & Floodgate Bulk Email Loader for 10 days FREE. And receive UNLIMITED technical support for 30 days. ************************************************************** 68+ MILLION EMAIL ADDRESSES MILLIONS AND MILLIONS OF EMAIL ADDRESSES CD with 68+ MILLION email addresses separated by domain name. All addresses are simple text format one per line. Addresses from the following domains: MCI, Delphi, Compuserve, Internet, .com & .net, MILLIONS OF THEM! Not available on diskette or download. ===> WANT THE 68+ MILLION ADDRESSES FOR $100.00? <=== Just buy our Floodgate / Goldrush software package (with ALL the bonuses INCLUDED), and the MILLIONS of addresses are yours for just $100.00 additional. These addresses will be delivered to you in simple text files that any bulk emailing program can use, on CD Rom. With this CD, YOU CAN BEGIN MAKING MONEY IMMEDIATELY!!! *************************************************************** ***SPECIAL BONUS #1:*** STOP Losing ISP Dial Up Accounts! If you order The FLOODGATE / GOLDRUSH software within the next 5 days - When you receive your program, you will also receive: *Complete instructions on "how to keep your dial up account from showing up in the header", plus everything you will need to get started doing this. IMPORTANT NOTICE! We will initially only be offering 100 copies of the program for sale, First come / First Served basis only. We are doing this because of the extreme power that these programs offer. ***SPECIAL BONUS #2*** When you receive your two programs, you will also receive: OVER 250 REPRINT AND RESELL RIGHTS REPORTS YOU CAN START TO MARKET AND MAKE MONEY IMMEDIATELY!!! These HOT sellers include: 1) How to Get a Top Rating in the Search Engines 2) 70 Money Making Reports 3) 75 MONEY MAKING PLANS & TRADE SECRETS and MUCH MUCH MORE!!! ($200 RETAIL VALUE - FREE!!!) ***SPECIAL BONUS #3*** With your two software programs, you will also receive our NEW "Address Grabber" utility program that enables you to grab 100's of THOUSANDS of email addresses from newsgroups in minutes ($100 RETAIL VALUE - FREE). ***SPECIAL BONUS #4*** RECEIVE CHECKS BY EMAIL, PHONE OR FAX MACHINE. With this software program, you can receive payment for your product or service INSTANTLY!! There is no more waiting for your customers chec to arrive. This software will no doubt, add to your sales, for customers who don't have credit cards, as well as the impulse buyers. With this software, you can print up your payments as soon as your customer gives you his/her checking information. You will then add the information given, to the proper blank check spaces, then just print and go to the bank!! *************************************************** To get your FREE demo and "test drive" our state-of-the-art software, email us your request by hitting reply and typing "flood" in the subject of your letter. **************************************************** HURRY ... RESERVE YOURS TODAY! So, if you are interested in taking advantage of the most powerful bulk email software in the world and start making money hand over fist..... Print out the EZ ORDER form below and FAX or MAIL it to our office. If you have any questions don't hesitate to call us at: 1-954-784-0312 SYSTEM REQUIREMENTS 386 or larger Windows 95 OR Windows 3.1 with 8 meg ram Extra 5 MB hard drive space Floodgate & Goldrush can be run on a fast Mac with 24 MB RAM and SoftWindows. NOTES FROM SATISFIED USERS "It is everything you said it was. Within one week of my first mailing, I received a record number of orders. All you need to print money is a decent sales letter. Thanks." Randy albertson, Wolverine Capital. "After using Floodgate and your utility program all day today, let me say these are as two of the finest programs I have ever bought in my 52 years! Your support has been superb. Thank You!" Vernon Hale, Prime Data Systems "My first day and I just used Floodgate and Pegasus to send 1,469 sales letters. So far I've got about 25 positive responses. It works GREAT!!! Thanks." Donald Prior "Floodgate is awesome!. I recently started a new business on-line. I stripped the addresses of the AOL & CIS classifieds. I sent out 3,497 email letters and got over 400 people to join my company in 5 days! Needless to say, it pays for itself." David Sheeham, OMPD "I was able to use Floodgate to extract the names from the Internet news groups. It works perfectly. Needless to say, I am very excited about the use of this new technology." Mark Eberra, Inside Connections "This is a great piece of software and an invaluable marketing tool." Joe Kuhn, The Millennium Group "I just thought you'd like to know that this program is fantastic. After loading it on my system, I wanted to test it out. In my first hour of using this, I collected 6,092 email addresses!" Richard Kahn, LD Communications "I just love the Floodgate program. It saves me hours and hours of time. This is the beginning of a wonderful FUN time marketing on-line. Thank you so much for writing this program." Beth O'Neill, Eudora, KS "Your software is brilliant, and from the technical support I've received, I can see you have a genuine love and respect of people...Floodgate is a divine package. Wish I had found it sooner." Tom Sanders, Peoria, IL "I really like the way the Floodgate software package works. It is very easy to use, and really does the trick. It has already saved me an incredible amount of time and energy." John Berning, Jr., Fairfield, NJ "It's going great with FLOODGATE! I like using Delphi. I just collected 50,000+ addresses within 20 minutes on-line." Richard Kahn, R&B Associates ------------------------------------------------- E-Z ORDER FORM: Please print out this order form and fill in the blanks...... Please send order form and check or money order, payable to: Dave Mustachi P.O. Box 772261 Coral Springs, FL 33077-2261 (954) 784-0312 ______Yes! I would like to try your cutting-edge software so that I can advertise my business to thousands of people on-line whenever I like! I understand that I have 10 days to trial the software. If I am not fully delighted, I will cheerfully be refunded the purchase price, no questions asked! Please rush me the FLOODGATE and GOLDRUSH package now! ______I am ordering within 72 hours! That qualifies me to receive the FLOODGATE and GOLDRUSH package at a substantial discount! I am ordering BOTH software packages for only $349.95. (Save $150 off the retail price....Software has sold for as much as $2,499.95) ______I am ordering within 72 hours! That qualifies me to receive UNLIMITED technical support for 30 days. ______I want to receive the package OVERNIGHT. I'm including $18.00 for shipping charges. ______I want to receive the package 2nd DAY. I'm including $10.00 (includes insurance & return receipt) for shipping charges. ______I'm ordering Floodgate / Goldrush software and want to order the 68+ MILLION email addresses as well. My additional cost is $100.00 enclosed. ______I'm NOT ordering your Floodgate / Goldrush software, but I want to order your 40 MILLION email addresses on CD. Enclosed is $249.00. ______I'm ordering your "BULK FRIENDLY" web hosting offer. Add $145 to this order ($45 PLUS $100 one time setup fee) I authorize Dave Mustachi to draft $45.00 per month from my checking account from the enclosed check OR charge my credit card account below each month for the service of hosting my BULK FRIENDLY web page that I can use in my BULK EMAIL marketing letter(s). Signature:____________________________________________ **************************************************** If you're interested in our "BULK FRIENDLY ISP", please call: Russell Rockefeller 1-905-714-7510 for details. **************************************************** (CHECKS: ALLOW 1 WEEK FOR BANK CLEARANCE) YOUR NAME_________________________________________________ COMPANY NAME_________________________________________________ YOUR POSITION_____________________________________________ STREET ADDRESS______________________________________________ CITY, STATE, ZIP____________________________________________ PHONE NUMBERS_______________________________________________ FAX NUMBERS_________________________________________________ EMAIL ADDRESSES_____________________________________________ ************************************************************ We accept Checks, Money Orders, MasterCard, Visa, American Express. You can either mail your order to us OR fax your order to: 954-572-5837 ************************************************************ Today's date:_____________ Visa____MasterCard____American Express____Discover_______ Card #:____________________________________________________ Expiration date:___________________________________________ Name on card:______________________________________________ Billing address:___________________________________________ Amount to be charged: $________________ Signature:___________________________________________ I agree to pay Dave Mustachi an additional $29 fee if my check is returned for insufficient or uncollectable funds. SIGNATURE: X________________________________DATE:_______________ Please send all order forms and check or money order to payable to: Dave Mustachi P.O. Box 772261 Coral Springs, FL 33077 (954) 784-0312 *************************************************** OR: PLEASE PASTE YOUR CHECK HERE (If you fax a check, there is no need for you to send the original check by mail. We will draft up a new check, with the exact information from your original check that you faxed to us) Please fax the above order form and check to: 1-954-

1 0

Telco Trafic
by Michael Conlen 17 Dec '03

17 Dec '03

Are their products designed to encrypt trafic across Frame Relay or dedicated telco circuits? Groove on Dude Michael Conlen meconlen(a)intnet.com The code was willing, It considered your request, But the chips were weak.

2 1

Schneier on SET
by David Honig 17 Dec '03

17 Dec '03

from Internet World, 2 Mar 98, "Reply to All" (reader feedback) Credit card transactions over the Net are new, but not overly different. We know how to do credit card transactions where there is no physical card: over the pohne. And we know how to establish a secure merchant-customer session: via SSL. SET is a complicated, server-intensive protocol, and I have trouble believing its possible to implement a two-inch-thick standard without security bugs. I'm not surprised merchants are so slow in acepting it. Why bother? [signed by Bruce Schneier]

1 0

MSDNFlash, Volume 2, Number 5, March 9, 1998
by MSDNFlash Editor 17 Dec '03

17 Dec '03

*** MSDN Flash *** A Twice-Monthly Newsletter for the Microsoft Developer Community Visit us today on the World Wide Web at: http://www.microsoft.com/msdn/ In this issue: PRODUCT AND TECHNOLOGY NEWS *Free Developer Edition of Windows NT 4.0 Workstation *Look Out for a Special MSDN Flash *Watch Bob Muglia's Keynote Live from Spring Internet World *SAP Delivers Free COM Connectivity to its Systems RESOURCES *Mastering Chapter for MSDN Online Members *MSDN Online Chat: HelpDesk Sample Application *MSDN Online Chat: VBA and Office Development *New Download for MSDN Online Members *March/April MSDN News Now Online *Windows 98 Resource Kit *Introducing TechNet ITHome EVENTS *Web TechEd - Australia *XML Conference *XML Xposed *VBITS *Windows CE Developer Conference *Visual C++ Developer Conference *Visual J++ Developer Conference *Visual FoxPro Devcon 98 *Microsoft TechEd *Developer Events - United States *Developer Events - Europe MSDN FLASH TIP OF THE WEEK *Visual J++ Developer's Journal ================================================= PRODUCT AND TECHNOLOGY NEWS ================================================= FREE DEVELOPER EDITION OF WINDOWS NT 4.0 WORKSTATION. For a limited time developers can get a free Developer Edition of Windows NT Workstation 4.0 when they buy the Professional Editions of Visual Basic, Visual C++ or Visual Studio. If the Enterprise Edition of these same products are purchased, developers can get a free Developer Edition of BackOffice Server 4.0. Developer Editions include the full feature set with a development and testing license; the BackOffice license is limited to 10 simultaneous connections. For more information visit http://www.microsoft.com/developer/offer LOOK OUT FOR A SPECIAL MSDN FLASH Watch for a special MSDN Flash update later this week to fill you in on an exciting product announcement. WATCH BOB MUGLIA'S KEYNOTE LIVE FROM SPRING INTERNET WORLD Bob Muglia, Microsoft Senior Vice President, will discuss effective business applications on the Web at Spring Internet World, Los Angeles, CA. Watch it live on the Site Builder Network at http://www.microsoft.com/sbnmember/sbnlive/iworld-f.htm Wednesday, March 11 at 5:45p.m. (Pacific Time). Visit this site early to test your NetShow player and preferred bandwidth. SAP DELIVERS FREE COM CONNECTIVITY TO ITS SYSTEMS Download a free beta version of the SAP DCOM Component Connector at http://www.sap.com/bfw/dcom.htm. The connector makes it possible to integrate the rich business rules of SAP R/3 into your applications and solutions using Microsoft's award-winning Visual Tools and Microsoft COM. ================================================= RESOURCES ================================================= MASTERING CHAPTER FOR MSDN ONLINE MEMBERS Gain the skills you need to build dynamic, data aware, client/server Web sites. Check out this online training module on Using Microsoft Transaction Server from "Mastering Web Site Development using Visual InterDev" to start learning now. For more information visit http://www.microsoft.com/msdn/training/mastering.htm MSDN ONLINE CHAT: HELPDESK SAMPLE APPLICATION Tuesday, March 10, 11a.m. - noon Pacific Time Chat about building the HelpDesk Sample Application How did the MSDN developers build the HelpDesk sample application? What went wrong? How did they correct it? Ask them yourself in our MSDN Online chat. For more information visit http://microsoft.com/msdn/newsgroups/chats.htm If you can't make it to the chat but have a question, submit it to msdn(a)microsoft.com with "MSDN Chat" as the subject line. Then check back on MSDN Online for the transcript a day or two after the chat for the answers. MSDN ONLINE CHAT: OFFICE AND VBA DEVELOPMENT Tuesday, March 17th, 11:00 am to noon Pacific Time Join Microsoft VBA staffers for an on-line chat. You'll get a chance to pose your questions about developing solutions with Access, Excel, Word, PowerPoint, or any other VBA host application. Microsoft product managers, test engineers, and software designers will be on line to provide answers and guidance, so don't miss out. Visit http://www.microsoft.com/msdn/newsgroups/chats.htm for more information NEW DOWNLOAD FOR MSDN ONLINE MEMBERS Chili!ASP is an open, cross-platform web application environment that is the functional equivalent of Microsoft's Active Server Pages (ASP). Chili!ASP provides ASP functionality to Netscape, Lotus, IBM, and other web servers on Windows NT and 95, and soon on UNIX as well. For more information visit http://www.microsoft.com/msdn/downloads/ MICROSOFT WINDOWS 98 BETA RESOURCE KIT Get a head start in evaluating Microsoft Windows 98 and reviewing the architecture. The Microsoft Windows 98 Beta Resource Kit is the first full technical overview. And it includes a time-limited evaluation copy of the Beta 3 release of Windows 98. Quantities are limited. Not available outside North America. For more information visit http://mspress.microsoft.com/order/ MARCH/APRIL MSDN NEWS NOW ONLINE The new issue of MSDN News is online, with articles on adding Dynamic HTML to your VB apps, MFC for Windows CE, a new column by the esteemed Dr. GUI and more. Visit http://www.microsoft.com/msdn/news/devnews/ ANNOUNCING TECHNET ITHOME If you're responsible for selecting, deploying or supporting technology ITHome is for you. Get the latest details on new technologies, strategies, and industry issues from leading sources, including Microsoft, Network Computing, Information Week, New Riders Publishing, SAMS Publishing, and more. For more information visit http://www.microsoft.com/ithome/ ================================================= EVENTS ================================================= MICROSOFT WEB TECHED - AUSTRALIA March 10, Sydney March 12, Melbourne Microsoft Web Tech Ed will be bringing you sessions on IIS 4.0, Site Server 3.0, Electronic Commerce, Dynamic HTML, and Data Access. Cost is $250 for MSDN and SBN Level 2 & 3 Members, or $350 full conference fee. To register http://www.microsoft.com.au/australia/sitebuilder/webteched.asp XML, THE CONFERENCE March 23-27, Seattle, WA See tools that support XML today and those planned for tomorrow. For more information visit http://www.gca.org/conf/xmlcon98/ XML XPOSED If you are a Web developer or using the Web for business purposes, you'll want to learn more about XML. For more information visit http://Xmlu.com/ VBITS SAN FRANCISCO '98 March 23-27, San Francisco, CA Hands-on training on topics ranging from multithreading applications and servers, to leveraging component-based solutions to the Internet or intranet. Visit http://www.windx.com/vbits/ for more information REGISTER NOW FOR THE WINDOWS CE DEVELOPERS CONFERENCE April 6-8, San Jose, CA In-depth technical sessions will teach you all you need to know about the latest advances in Windows CE-based devices. Attendees will receive a complimentary Palm PC. For more information or to register visit http://www.microsoft.com/events/windowsce/ VISUAL INTERDEV 6.0 PRE-RELEASE SEMINAR Microsoft and 32X announce a 12-city US seminar tour for developers on the Microsoft Visual InterDev 6.0 Web development system. Seminars begin April 13, and all attendees will receive a beta version of Visual InterDev 6.0. For more information see http://www.32x.com MICROSOFT VISUAL C++ DEVELOPER CONFERENCE IV April 15-17, Boston, MA Come learn about COM and DCOM, MFC and ATL, MTS, hardcore Visual C++, and more. For more information visit http://www.vcdj.com/ VISUAL J++ DEVELOPER CONFERENCE April 27 - 30, Los Angeles, CA A technical forum on advanced Java development using Microsoft Visual J++, this event features four tracks and 48 sessions. For more information visit http://www.javaconference.com/ VISUAL FOXPRO DEVCON 98 May 17-20, Orlando, FL Come learn all about Tahoe, the next version of Microsoft Visual FoxPro at Visual FoxPro DevCon. For more information visit http://www.microsoft.com/vfoxpro/ MICROSOFT TECHED 98 June 1-4, New Orleans, LA This is the definitive technical conference for building complete solutions with Microsoft technologies. For more information or to register visit http://www.microsoft.com/events/teched/ MICROSOFT TECHED EUROPE 98 7-10th July, Nice Acropolis Convention Centre, France For more information visit http://www.eu.microsoft.com/europe/teched/ DEVELOPER EVENTS - UNITED STATES DEVELOPER CAFÉ HITS MICHIGAN AND OHIO Developers' Cafe hits Michigan and Ohio in March Learn the basics of Active Server Pages (ASP), a flexible server-side scripting environment you can use to create and run dynamic web server applications. See development environments including Internet Information Server 4.0, ActiveX Data Objects and others for creating and maintaining HTML pages. For more information visit http://www.microsoft.com/greatlakes/events/ BOB AND LARRY'S DEVELOPER WORKSHOP SERIES March 12, Waltham MA (event code 14776) March 17, Farmington CT (event code 14777) The theme in March is migration. Find out how to migrate your Visual Basic 3 and 4 code to Visual Basic 5; how to upsize your Access databases to SQL Server; and how to migrate your Two - Tier Client/Server applications to the Internet. For more information visit http://www.microsoft.com/newengland/developer/boblarry/default.asp MICROSOFT COLLABORATION COMPUTING SEMINAR FOR DEVELOPERS In Michigan and Ohio: Developing Applications with Collaboration Data Objects (CDO) and the Microsoft Exchange Scripting Agent. Get an in-depth technical look at the tools developers have available to them for promoting and extending collaboration among users. For more information visit http://www.microsoft.com/greatlakes/events/ DEVELOPER EVENTS - EUROPE MICROSOFT SQL SERVER AND UNIVERSAL DATA ACCCESS TECHNICAL CONFERENCE March 25 - 26 Paris March 30 - 31 Stockholm April 2 - 3 Frankfurt April 6 - 7 London For more information visit http://www.eu.microsoft.com/europe/msdn/events/sql/ ================================================= MSDN Flash Tip ================================================= Configuring the Call Stack Window from Visual J++ Developer's Journal During debugging, you can configure the Call Stack Window to display only method parameters, parameter types, or both. Viewing only the parameter types is particularly useful when your code contains a lot of long method names. MSDN Online Members - we have a new Tip for you each week at http://www.microsoft.com/msdn/ For a free issue of Visual J++ Developer's Journal visit http://www.cobb.com/vjp/freevyer.htm To receive the Visual J++ Developer's Journal tip of the Week in email, visit http://www.zdtips.com/vjp/msd-f.htm ================================================= HOW TO JOIN THE MAILING LIST: You received this e-mail newsletter as a result of your registration on the Microsoft Personal Information Center. You may unsubscribe from this newsletter, or subscribe to a variety of other informative newsletters, by returning to the Personal Information Center, http://register.microsoft.com/regwiz/personalinfo.asp and changing your subscription preferences. Alternatively, please send a reply to this e-mail with the word "unsubscribe" as the first line in the body of the message. ================================================= The information provided is for informational purposes only and Microsoft Corporation and its suppliers make no warranties, either express or implied, as to the accuracy of such information or its fitness to be used for your particular purpose. The entire risk of the use of, or the results from the use of this information remains with you.

1 0

Re: [LEGAL] Crypto as Contraband?
by Dave Emery 17 Dec '03

17 Dec '03

On Sun, Mar 08, 1998 at 01:55:29PM -0500, Vin McLellan wrote: > > Whoever at NSA decided that the US national security interests in > crippled-crypto products, such as it is, could be sustained by such a > mechanism obvously never heard of the 2600 tone, once the biggest secret of > the telephone companies. And those who ignore the past, etc., etc.... As someone who was alive and curious back then (mid 60's), I'd take issue with this. I found plenty of technical papers in the Bell System Technical Journal proudly describing so called SF E&M signalling (which uses 2600 hz) in great detail, along with MFKP (blue box tones) and the whole signalling and switching architecture of the (then) Bell system. They were proud of what they had developed and quite willing to share it with the technical community - it was no dark secret at all. There was even a technical paper that described in detail a bizzare two frequency one transistor oscillator that allowed them to build what was essentially a blue box into a operator console keypad. The problem was that nobody outside of a few insider engineers with devious twisted hacker style imaginations and the spook agency types had ever asked what might happen if you sent these in-band tones down the line from a subscriber telephone at just the right (or wrong) moments, and what it might be possible to do with this knowlage. Nobody else knew or cared to find out what might happen if... It is a sad day for US national security if people entrusted with protecting it don't think about how to defeat the protections they put in place because they are linear thinkers hobbled by the idea that everyone will do only the most obvious things. But I really think that they perfectly well know that current software can be easily patched to defeat controls, and that there is little they can do about it. Nor is the threat from software patches to Netscape really likely to endanger much, since there is already a lot of software like PGP available that is already strong. In fact I rather suspect that they are quite happy to see that patch in ciculation since it substantially bolsters their long held insistance that all crypto be implemented in tamperproof hardware chips and not software. What scares me, as I have said before on this list, is what happens when future tamperproof Intel CPUs acquire the ability to run encrypted code decrypted inside the processor and all copies of Windows 2001 are completely unpatchable and opaque (without breaking the crypto) and nicely jiggered to enforce rules about what programs are allowed to do what or even run at all. -- Dave Emery N1PRE, die(a)die.com DIE Consulting, Weston, Mass. PGP fingerprint = 2047/4D7B08D1 DE 6E E1 CC 1F 1D 96 E2 5D 27 BD B0 24 88 C3 18

1 0

Re: [LEGAL] Crypto as Contraband?
by Bill Frantz 17 Dec '03

17 Dec '03

At 1:35 PM -0800 3/8/98, Dave Emery wrote: > What scares me, as I have said before on this list, is what >happens when future tamperproof Intel CPUs acquire the ability to run >encrypted code decrypted inside the processor and all copies of Windows >2001 are completely unpatchable and opaque (without breaking the crypto) >and nicely jiggered to enforce rules about what programs are allowed to >do what or even run at all. I think the logical result of the wide-spread deployment of such systems in the US is loss of leadership in technology. Modern technology is very dependent on high performance software. Between cutting off small scale development and pissing off licensed developers, it sounds like a way to cut the nation's throat. It is hard to see how you could make an OS that prevented you from building a Touring machine and still support the generalized programming needed for technological leadership. I expect that encrypted instruction streams will only be used for copy protection, probably with the same market acceptance that other copy protection schemes have received. ------------------------------------------------------------------------- Bill Frantz | If hate must be my prison | Periwinkle -- Consulting (408)356-8506 | lock, then love must be | 16345 Englewood Ave. frantz(a)netcom.com | the key. - Phil Ochs | Los Gatos, CA 95032, USA

1 0

Re: [LEGAL] Crypto as Contraband?
by Dave Emery 17 Dec '03

17 Dec '03

On Sun, Mar 08, 1998 at 04:35:25PM -0500, Dave Emery wrote: > On Sun, Mar 08, 1998 at 01:55:29PM -0500, Vin McLellan wrote: > > > What scares me, as I have said before on this list, is what > happens when future tamperproof Intel CPUs acquire the ability to run > encrypted code decrypted inside the processor and all copies of Windows > 2001 are completely unpatchable and opaque (without breaking the crypto) > and nicely jiggered to enforce rules about what programs are allowed to > do what or even run at all. > To amplify my point a bit, it is widely reported that Bill Gates (who is alleged to have started out in business by pirating and selling DEC software as a high school student) has a particularly keen desire to control the widespread piracy of MS products. His aggressive pushes to assert his property rights are well known (and not atypical of reformed sinners if the probably apocryphal report is true). And Microsoft, with its enormous market share of Wintel software, has a very strong incentive to push for implementation of copyright controls and smartcard authentication for its products into the basic architecture of PCs. And guess what - it controls the high level architecture of the worlds PCs pretty much entirely by its monopoly control of the major operating systems that run on them. So it seems frighteningly likely that Microsoft - which would stand to gain a lot of money now lost to piracy from such a feature - will very gladly do all it can to see that crypto based strong copyright enforcement is built into the hardware and inner regions of the operationg system of Wintel systems. And making this work clearly requires that the relevant parts of the inner kernel be unmodifiable (easy to do with digital signatures), and probably kept extremely secret (easy to do with crypto). In such an environment it is awfully easy to strike a deal with the government that adds a little piece or two of code in that black inner space in exchange for a bending a bit on anti-trust enforcement. -- Dave Emery N1PRE, die(a)die.com DIE Consulting, Weston, Mass. PGP fingerprint = 2047/4D7B08D1 DE 6E E1 CC 1F 1D 96 E2 5D 27 BD B0 24 88 C3 18

1 0

Bad/No Credit? FIX IT YOURSELF FREE
by harding_david＠hotmail.com 17 Dec '03

17 Dec '03

If you want to fix your bad credit or establish AAA credit in less than 30 days, for FREE, you MUST Click Here ! You will get 2 special free gifts just for visiting my site! Thanks for reading this! I will NOT mail to you again! Click Here To be promptly removed from our list. EPsUn999

1 0

Re: Encryption export controls are a rationalization of a "cheat"
by 'die＠die.com' 17 Dec '03

17 Dec '03

On Sun, Mar 08, 1998 at 01:59:53PM -0800, Ernest Hua wrote: > today. I am not aware of what cellular spectrum chip sets are available > via Wyle or some other distributor, but I wouldn't be surprised if the > cost of a digital intercept equivalent gear would be much more than $300 > in parts plus a 300MHz PC (to decode the intercepted stream). I don't think I'll bother the list with this, but a big problem with cellphones is that people have cellphones. And cellphones are generally not designed to be tamperproof (in many cases little or no effort in this cost competitive market has gone into this) so making a real cellphone serve as the front end to a snooping system has and will be done and in fact be the easiest hack engineering solution. > > The question is, what is worth the potential interceptor's time and > money to do this? It's obvious that politics is enough for the Florida > couple (in the Gingrich case). For a college-age hacker, "because I can > do it" plus "I work in a well-stocked University lab" is probably enough > reason. I won't venture to guess what is worth a criminal's time and > money, but surely existing models for analog piracy behavior is enough > to characterize the trade-offs. There are lots and lots of people who like to be spectators and are keenly interested in other people's affairs. All of us are to some degree - witness the feeding frenzy over the Monica affair - and some guestimates have estimated that perhaps as much as 40% of analog cell calls near large cities are being eavesdropped on by at least one other person. > > In short, we violently agree on the technical plus behavioral front. > But we are preaching to the choir. The real audience for a > easy-to-understand summary is Congress. They need to understand that > the assumptions 30 years ago do not apply today. And that market demand > for more and more technically-literate engineering professionals along > with the phenomenal downward price spiral in PC's and consumer > electronics gear will simply make those assumptions even less applicable > in the future. That problem is getting worse rather than better. The media depiction of the mysterious "hacker" long haired mad kid intent on evil invasion of the worlds computers is helping create the illusion that there is a separate techno criminal class. But the reality is that more and more people are crossing the barriers that the older lawyers in congress never tried to cross and learning something about technology and software. And these people are the guy next door with the cute kids, not fringe crazies. And the evil net allows information to become available much more widely than before. > > Regarding my moral or ethical argument, I am using the fuzzy standard > set by what society will accept or not accept. From my perspective, there are deep divisions and ambivalences in what the US people will tolerate. They hate the idea of being spied open but buy nanny cams and gobble up spy novels and TV shows. They purchase millions of police scanners and react in horror when Linda Tripp tapes a conversation to protect her ass. And they expect the US government to be on top of events around the world and have inside knowlage of other governments and react in horror when their spies are unmasked within our walls, and their eavesdropping gets shown on the nightly news. And cities install more and more cameras and bosses read more email and listen to more calls on business phones every year. > I don't think I need to > argue that most American citizens will be really really pissed if they > found out that the NSA is spying here via their British counterparts, or > that the FBI has conducted far more intercepts than they officially > report. Yes, its definately sausage but it tastes good... > I am definitely not arguing that the FBI or the NSA has any > obligation to inform the public of what weaknesses they use to gain an > intercept advantage. What concerns most people is that they see > (correctly) that the NSA's advantage was not based on technical > superiority, but on the ignorance of everyone else. That is true, and it is also sadly true that a lot of their effort has gone into frank deception, and active determined efforts to block those of us who have been fighting for incorperating at least minimal crypto communications security into the infrastructure. The Internet is ending this era, however, because it is no longer possible to control the flow of information and news about communications security and crypto, and slowly the holes will get plugged. People do get more > intelligent over time, and the rapid public gain in the cryptography > area has pretty much wiped out the gains the NSA has depended on over > the last 50 years. If the average person understands that what the FBI > and the NSA REALLY want is for you to be stupid (at least in the area of > communications security), then there would be an uproar. > This is happening, and that is why Louie is grabbing desperately for the last chance... and why congress is busily passing anti scanner bills to solve the cellphone privacy problem that don't mention a thing about cryptography. Their desparate hope is if they say it solomnly enough and with enough ceremony the public will see the emporer's clothes -- Dave Emery N1PRE, die(a)die.com DIE Consulting, Weston, Mass. PGP fingerprint = 2047/4D7B08D1 DE 6E E1 CC 1F 1D 96 E2 5D 27 BD B0 24 88 C3 18

1 0

Wrong Address???
by Roger H Tancrell 17 Dec '03

17 Dec '03

To Cypherpunks: In the last couple days, I have received many, many e-mail messages. How did I get your your group list??? Perhaps, you have the wrong "Roger". Please remove my name. Thanks. Roger Tancrell

1 0

Matt Blaze KE Patent
by John Young 17 Dec '03

17 Dec '03

9 March 1998, MicroPatent: Escrow key management system for accessing encrypted data with portable cryptographic modules (Assignee -- Lucent Technologies Inc.) Abstract: A cryptographic module, such as a smartcard, is designed to a) store decrypting software programs, and information indicative of predetermined conditions under which an escrow agent is enabled to use the software programs stored on the module to decrypt encrypted data files, and b) records for audit purposes, information indicating every time the software programs are used for decryption. Ex Claim Text: A system for managing access to one or more encrypted data files stored in a computer system, said system comprising: a file of the computer system which associates a cryptographic key with a cryptographic module that is subsequently assigned to a selected user; a memory of the cryptographic module which stores a) access information allowing use of the cryptographic module by the selected user under specific conditions, said access information including the cryptographic key, a corresponding cryptographic passphrase and a software program to decrypt the one or more encrypted data files; means responsive to receiving at said cryptographic module said corresponding cryptographic passphrase from said selected user, for a) permitting decryption of said one or more data flies when the specific conditions are met, and b) recording in said memory transactional information associated with said decryption, and b) uses said cryptographic module for the purpose of decrypting one or more of said data files; and means for querying at a later time said cryptographic module to retrieve said transactional information recorded on said memory. Assignee: Lucent Technologies Inc. Patent Number: 5721777 Issue Date: 1998 02 24 Inventor(s): Blaze, Matthew A. If you would like to purchase a copy of this patent, please call MicroPatent at 800-648-6787.

1 0

Re: [LEGAL] Crypto as Contraband?
by James A. Donald 17 Dec '03

17 Dec '03

-- At 06:20 PM 3/6/98 -0800, Tim May wrote: > How could any "outlawing of unescrowed crypto" conceivably > deal with this vast amount of distributed software? Will a > user of RSA's MailSafe program face jail time for using a > program he legally bought in 1991 (as I did)? > > More questions than answers. Can anybody help me to > understand the legal issues? You are getting out of date. As the rule of law dissolves, legal issues become insignificant, and will in due course vanish altogether. For example nobody knows what are the "legal issues" with putting strong crypto on a web site, as I have done. According to what the legislation says, what I have done is completely in accord with legislation. Indeed, it is completely in accord with US legislation simply to post the stuff. on any server inside the US, the foreigner doing the download is violating the legislation, not the person who put it up. I have gone considerably further than is required by legislation, though not nearly as far as some others have gone. But mere legislation counts for less and less these days. If you read the business press, you will frequently read them complain of cases where the distinctions between executive, legal, and judicial powers are effectively dissolved, and penalties are in effect adminstratively applied for undefined offences, or retrospectively and administratively defined offences, often in ways that appear to personally enrich those administering these quasi judicial powers. Generally this sort of thing is only applied to people who are unpleasant and unpopular. Tobacco companies, junk bond merchants whose businesses have been more profitable for themselves than for many of their investors, and the like. Of course this creates a large vested interest in demonizing more and more people, so that more and more people can be dealt with in this fashion. Similar measures are applied not only to alleged recreational drug distributors, but to lawyers who defend alleged recreational drug distributors, but the business press tends to report such cases less. Meanwhile formerly totalitarian countries, such as China and Cuba, where there used to be no such things as laws, merely some people having the power to harm other people, power exercised in accordance with rules that those subject to this power were forbidden to know, are moving towards the rule of law. It used to be that if someone imprisoned in Cuba were to discover the actual reason for his imprisonment, he might possibly suffer some draconian additional punishment for improper possession of state secrets. In a fully totalitarian state, the regime does not have rules for most people, merely goals and desires. If some desire is not fulfilled, the masters will go around killing people more or less at random until somebody fulfills that desire, or until they have killed so many people that they suspect that what they desire is not readily achievable, or sometimes until they simply run out of people who might be able to assist in fulfilling that desire. For example all people possessing certain skills and experience were wiped out by Stalin, and in Cambodia everyone connected to the jute industry in any way. Such rules as exist only apply to the privileged, to those administering the terror, not to those terrorized. Crypto legislation is likely to resemble the announcement of a desire, rather than the announcement of rules and restrictions likely to fulfill that desire. Indeed, the proposals we have so far seen are desires, not rules. As you point out, that desire cannot be fulfilled, except by means that further radically undermine the rule of law. --digsig James A. Donald 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG KheXnmd1kekBNA4gB1wyUeQgjPT7Y26FWeajCBIR 43jg9sJBVPllkPf+Yt2ByoAf/sIdt9xbXwh/wMV+Z

1 0

Final CFP: 5th ACM Conference on Computer and Communications Security
by Gene Tsudik 17 Dec '03

17 Dec '03

Final Call for Papers Fifth ACM Conference on Computer and Communications Security San Francisco, California November 3-5, 1998 Sponsored by ACM SIGSAC Papers offering novel research contributions in any aspect of computer security are solicited for submission to the Fifth ACM Conference on Computer and Communications Security. Papers may present theory, technique, applications, or practical experience on topics including but not limited to access control authentication accounting and audit mobile code security applied cryptography data/system integrity cryptographic electronic commerce intrusion detection protocols key management privacy and anonymity intellectual property protection information warfare secure networking secure operating systems viruses and worms security management distributed systems security database security smart-cards and secure security verification PDAs Accepted papers will be presented at the conference and published by the ACM in a conference proceedings. Outstanding papers will be invited for possible publication in ACM Transactions on Information and System Security. Instructions for paper submissions: Submitted papers must not substantially overlap papers that have been published or that are simultaneously submitted to a journal or a conference with a proceedings. Papers should be at most 15 pages excluding the bibliography and well-marked appendices (using 11-point font and reasonable margins on 8.5'x11' paper), and at most 20 pages total. Committee members are not required to read the appendices, and so the paper should be intelligible without them. Papers should be submitted in a form suitable for anonymous review (no author names or affiliations). * Send via email to reiter(a)research.att.com a plain ASCII text message containing the title and abstract of your paper, the authors' names, email and postal addresses, phone and fax numbers, and identification of the contact author. * In addition, submit your paper using ONE of the following two methods. o Electronic submission (preferred): Instructions for submitting your Postscript paper by e-mail can be obtained from http://www.research.att.com/~reiter/ccs5/esub.html or by sending email to ccs98(a)research.att.com with the Subject line containing "HELP". It is strongly recommended that you electronically submit your paper at least five days in advance of the submission deadline, to allow us adequate time to verify that we can print your paper (and if not, to allow you to submit your paper in hardcopy to be received by the submission deadline). We cannot be held responsible for papers that we cannot print. OR o Hardcopy submission: Send eighteen (18) copies of your paper to the program chair at the address below with a cover letter indicating that your paper is a submission for the 5th ACM Conference on Computer and Communications Security, and listing the authors' names, email and postal addresses, phone and fax numbers, and identifying the contact author. Submissions received after the submission deadline will be rejected without review. Where possible all further communications to authors will be via email. Paper submissions due: April 3, 1998 Acceptance notification: June 5, 1998 Final papers due: July 16, 1998 Instructions for panel proposals The conference may include panel sessions addressing topics of interest to the computer security community. Proposals for panels should be no longer than five (5) pages in length and should include possible panelists and an indication of which of those panelists have confirmed participation. Send two (2) hardcopies of your proposal to the program chair at the address below with a cover letter indicating that your proposal is for the 5th ACM Conference on Computer and Communications Security, and listing the proposers' names, email and postal addresses, and phone and fax numbers. Panel proposals due: May 1, 1998 Acceptance notification: June 5, 1998 Steering committee chair: Ravi Sandhu, George Mason University General chair: Li Gong, JavaSoft Program chair: Mike Reiter AT&T Labs, Room A269, 180 Park Avenue Florham Park, NJ 07932-0971 USA phone: +973-360-8349 Awards chair: Jacques Stern, ENS/DMI Publication chair: Stuart Stubblebine, AT&T Labs Publicity chair: Gene Tsudik, USC ISI Program committee: Martin Abadi, DEC SRC David Naccache, Gemplus Bill Cheswick, Lucent/Bell Labs Hilarie Orman, DARPA/ITO Carl Ellison, Cybercash Avi Rubin, AT&T Labs--Research Ed Felten, Princeton University Pierangela Samarati, Universita di Milano Paul Karger, IBM T.J. Watson Gene Tsudik, USC ISI Steve Kent, BBN Corporation Paul Van Oorschot, Entrust Technologies Ueli Maurer, ETH Zurich Bennet Yee, UCSD Cathy Meadows, Naval Res. Lab Moti Yung, CertCo For more information, visit http://www.research.att.com/~reiter/ccs5 or http://www.isi.edu/~gts/cfp.html

1 0

JT's Restarants - Excellent Undervauled Investment Opportunity
by jtsr-stock＠jtsr-stock.com 17 Dec '03

17 Dec '03

To be removed from our mailing list please reply to this message with "REMOVE" in the subject. Recently we wrote you to tell about an excellent investment opportunity in JT's Restaurants (OTC BB: JTSR). Since our last message was sent JTSR has risen in value over 40% (from Feb 17, 1998 to March 6, 1998). This is just the beginning. This is still a ground floor opportunity. If you would like more information about this exciting investment opportunity please visit our web site at http://www.jtsr-stock.com or call 1-888-295-6365 for complete information. The contents of this message have been provided for the review of potential investors only and does not constitute an offering of securities.

1 0

Free Insurance Quote
by sara＠iddqd.org 17 Dec '03

17 Dec '03

DO YOU WANT LIFE INSURANCE FROM THE BEST COMPANIES AT THE LOWEST PRICE? COMPANIES LIKE: Security Connecticut, First Colony Life, Lincoln Benefit Life, Life of Virginia, Midland, Mutual of Omaha, New York Life, and many, many others! COMPARE YOUR CURRENT COVERAGE to these 10-year level term sampler, monthly premiums for super-preferred non-smokers. Age $100,000 $250,000 $500,000 Male Female Male Female Male Female 30 $10.00 $10.00 $17.00 $15.00 $28.00 $24.00 40 $12.00 $11.00 $21.00 $19.00 $36.00 $32.00 50 $21.00 $17.00 $44.00 $33.00 $82.00 $59.00 60 $43.00 $29.00 $99.00 $63.00 $193.00 $119.00 Are you paying too much for coverage? Chances are we can help! With past cases, our insurance professionals have SAVED THEIR CLIENTS AS MUCH AS 60% IN ANNUAL PREMIUMS! Visit http://www.servicebrokers.com/life_insurance.htm for a FREE rate quote TODAY! Our members shop the market for you to offer the lowest priced "A" and above rated Life Insurance companies in your state! Why waste YOUR time and MONEY with a one-company agent? To receive your FREE NO OBLIGATION quote, please: Visit http://www.servicebrokers.com/life_insurance.htm or http://www.servicebrokers.com/health_insurance.htm for individuals and businesses If you do not wish to receive information regarding, life, health and other insurance related offers as well as information on home loans. please click here: mailto:sara@iddqd.org?subject=remove

1 0