December 2003 - cypherpunks-legacy

nm web site
by bill payne 17 Dec '03

17 Dec '03

Saturday 11/14/98 6:13 PM John Young http://www.jya.com/index.htm J Orlin Grabbe http://www.aci.net/kalliste/ As a result of jy's persuasive arguments http://jya.com/whpfiles.htm, we are going to put up a web site. But unlike you-all's sites ours will be somewhat positive 1 masm mixed language programming ... and Microsoft bugs 2 8032 forth programming and hardware 3 pc hardware 4 pro se litigation against the government 5 cypto nonsense 6 ... But, most important, we have learned by your pioneering web information dissemination efforts. And mistakes at other websites. Like bouncing balls. You guys, in my opinion, are the some of the most brilliant, perhaps with the exception of the X-rated sites, at getting the info out there. And yes, we will use THUMBNAIL photos. Of schematics, main boards, .... etc. Simplicity exudes brilliance. Perhaps there is a converse? Thoughtfully, I hope bill

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

At 09:35 PM 11/14/98 -0500, John Young <jya(a)pipeline.com> wrote: > >An NSA team presented at NISSC98 in October >"The Inevitability of Failure: The Flawed Assumption >of Security in Modern Computing Environments:" ... >Not that NSA would ever exploit OS weaknesses not warned >about. > Part of the context for this: NSA is trying to encourage their new testing program for security products. My feeling is that program, in turn, is intended to preserve the spaces for all the employees involved in the failed TCSEC/Rainbow testing program. I say "failed" because it hasn't caught on in the private sector, it's expensive and, of course, the laughable "C2 in '92." If you can't trust your OS, Dum-dum-Dah! NSA to the rescue with testing! The new Common Criteria is to replace TCSEC/Rainbow next year, but if it walks like a duck....

3 2

hello -- do not read
by William H. Geiger III 17 Dec '03

17 Dec '03

This is a test, this is only a test. -- --------------------------------------------------------------- William H. Geiger III http://www.openpgp.net Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 5.0 at: http://www.openpgp.net/pgp.html ---------------------------------------------------------------

1 0

Put America's Best Chili Recipes on Your Christmas List
by bluefish＠swipnet.se 17 Dec '03

17 Dec '03

AMERICA's BEST CHILI RECIPES ARE NOW HERE!!! Check out our special 2 for 1 offer All orders received December 15, 1998 are guaranteed to be delivered by Christmas. Nothing is more American than a hot bowl of Chili, but if you ask a hundred people about how to make the best bowl of chili you'll probably get a hundred different answers. America's Best Chili Recipes hopes to help answer this question by offering fifty of the most diverse Chili recipes that you will find anywhere. Plus, these recipes don't come from any sterile kitchen test labs, but from the family picnics,backyard barbecues, and tailgate parties of Chili lovers from across America. Our book is divided into four separate chapters: Chapter I Traditional Chili Chapter II Chili with Beans Chapter III Low Fat/Vegetarian Chili Chapter IV Prize Winners Among the recipes you'll enjoy are: ***Barbecue Chile from New Jersey ***Lobster Chili from Maine ***Seven Pepper Chili from San Antonio ***Kosher Chili from New York ***Nuclear Chili from San Francisco In addition, with each recipe you'll get the story behind the recipe. Each contribution contains an entertaining story or anecdote from the person who sent the recipe. Read about: *** The Ghost in the Chili Pot *** The Secret behind Comet Chili *** Chili passed down through three generations of LA Firemen Buy the book for the recipes, or buy it for the stories. You'll find that there is a chili recipe for every finicky eater. SPECIAL OFFER!!! Our book normally sells for $12.95 +$2.00 shipping/handling. However, this Holiday Season you can get Ameica's Best Chili Recipes for only $9.95, and we'll pay for shipping and handling -- a savings of $5.00. GET TWO COPIES AND SAVE EVEN MORE!!! Give a copy this Christmas to a friend or relative. If you buy a copy of America's Best Chili Recipes we'll send you an additional copy for only $5.00. That's two copies for only $14.95, 50% off the regular price. ORDER NOW!!! All orders received by December 15, 1998 are guaranteed to be delivered in time for Christmas. You can also have us mail your gift to your friend or relative for you. Please use the form below : ============================================================= ORDER FORM Yes, I'd like to own my own copy of America's Best Chili Recipes. I have filled out this form to help expedite my order: Please check-off your order: ____ One Copy of America's Best Chili Recipes for $9.95 (A savings of $5.00) ____ Two Copies of America's Best Chili Recipes for $14.95 (A savings of $14.95) Name: Address: City: State: Zip: E-mail Address: (For order confirmation) Please send payment to: America's Best Recipes 12762 Brookhurst St. Suite 438-B Garden Grove, CA 92840 (714) 375-5458

1 0

Test [no reply]
by Jim Choate 17 Dec '03

17 Dec '03

Test

1 0

Test 2 [no reply, loop test, last one]
by Jim Choate 17 Dec '03

17 Dec '03

Test 2

1 0

loop test #1
by William H. Geiger III 17 Dec '03

17 Dec '03

Loop, loop, loop -- --------------------------------------------------------------- William H. Geiger III http://www.openpgp.net Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 5.0 at: http://www.openpgp.net/pgp.html ---------------------------------------------------------------

1 0

loop test #2
by William H. Geiger III 17 Dec '03

17 Dec '03

Loop test #2 -- --------------------------------------------------------------- William H. Geiger III http://www.openpgp.net Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 5.0 at: http://www.openpgp.net/pgp.html ---------------------------------------------------------------

1 0

loop test #3
by William H. Geiger III 17 Dec '03

17 Dec '03

Loop test #3 -- --------------------------------------------------------------- William H. Geiger III http://www.openpgp.net Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 5.0 at: http://www.openpgp.net/pgp.html ---------------------------------------------------------------

1 0

Re: Could E.M. Cordian be Matt Blaze in Disguise? (Nah!)
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Mime-Version: 1.0 X-Sender: rah(a)pop.sneaker.net Date: Sun, 15 Nov 1998 00:47:21 -0500 To: Vin McLellan <vin(a)shore.net>, dcsb(a)ai.mit.edu From: Robert Hettinga <rah(a)shipwright.com> Subject: Re: Could E.M. Cordian be Matt Blaze in Disguise? (Nah!) Cc: Matt Blaze <mab(a)research.att.com> Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Robert Hettinga <rah(a)shipwright.com> At 12:31 AM -0500 on 11/15/98, Vin McLellan wrote: > (Actually, I'd bet that even Robert Hettinga knows that this is > untrue.) Moi? ;-) Now *why* would I do that to you, Vin? Don't let those ol' Snakes of Medusa bite you, pal. Cheers, Bob Hettinga ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

penis test #1
by Anonymous 17 Dec '03

17 Dec '03

penis test one

1 0

List Test
by whgiii＠gulf.net 17 Dec '03

17 Dec '03

Just another test, sorry. -- --------------------------------------------------------------- William H. Geiger III http://www.openpgp.net Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 5.0 at: http://www.openpgp.net/pgp.html ---------------------------------------------------------------

1 0

Re: Could E.M. Cordian be Matt Blaze in Disguise? (Nah!)
by Robert Hettinga 17 Dec '03

17 Dec '03

:-) --- begin forwarded text To: Vin McLellan <vin(a)shore.net> cc: Robert Hettinga <rah(a)shipwright.com>, dcsb(a)ai.mit.edu Subject: Re: Could E.M. Cordian be Matt Blaze in Disguise? (Nah!) Date: Sun, 15 Nov 1998 05:33:22 -0500 From: Matt Blaze <mab(a)research.att.com> That you for CCing the enclosed message. I must admit that I'm rather puzzled by it. This is the first I've head of an "E.M Cordian," or for that matter "M.F. Tones" or "Mr. Rogue." I am quite sure, however, that I am none of these people. I have also never seen, or claimed to have seen, any description of the RSA algorithm, other than the the recently declassified public key historical material from GCHQ, that predates R, S and A's original paper on the subject. I don't subscribe to the cypherpunks mailing list (or, for that matter, DCSB), and I've only just now scanned over the web page mentioned in your message, so I'm unclear as to what might be going on. Perhaps someone is confused about the $7.00 "better DES challenge" that I offered last year (which was solved this year by the EFF DES brute force hardware). Whatever this is about, however, I assure you that any use of my name in connection with a solicitation for funds for some sort of "analytical DES cracking" effort, or any suggestion that I'm involved in such a project, is absolutely false and perhaps fraudulent. Feel free to forward this as you see fit. Thanks -Matt Blaze > Out on the Cypherpunks List, "Anonymous" claimed to reveal the real >identity of E.M. Cordian, the organizer of the DES Analytical Crack. See: >http://www.cyberspace.org/~enoch/crakfaq.html > >>Shouldn't we be using "Mr. Cordian's" real >>name? Matt Blaze (mab(a)research.att.com) also >>occasionally known as "M.F. Tones", and even less >>often as "Mr. Rouge" (There should be an accent mark >>there actually). > > In response, Robert Hettinga <rah(a)shipwright.com> declared: > >>Just to clear the air a smidge. >> >>If Matt Blaze says he's looking for an algebraic inverse to DES, I tend to >>believe him... > > Jeeze, Rob! This is your attempt to help "clear the air?" > > I do not for a moment believe that Eric Michael Cordian ><emc(a)wire.insync.net> is a pseudonym for Matt Blaze <mab(a)research.att.com>! > > You should maybe query Matt directly <mab(a)research.att.com> before >you endorse E.M. Cordian as Matt Blaze in drag. You could confuse a whole >lot of people who trust your insider knowledge of these steamy Net Affairs. > > To anyone familiar with Blaze's essays, speeches, & on-line posts, >a scan of Mr. Codrian's FAQ and published comments should make it apparent >that this suggestion is unlikely, if not perposterous. > > The real Matt Blaze would also not be making these absurd and false >claims that some mysterious "book" describing a cryptosystem identical or >equivalent to the RSA public key cryptosystem was published "years" before >Ron Rivest, Adi Shamir and Len Adelman first published their RSA PKC >algorithm in April, 1977. (It's well documented in the Cypherpunk >archives, Codrian assures us;-) > > There was no such book. Cordian's statement is just not true. The >real Matt Blaze -- the guy who wrote the pithy Afterward to Schneier's >Applied Cryptography,II -- would know that this is not true. > > (Actually, I'd bet that even Robert Hettinga knows that this is >untrue.) > > Mind you, if the real Matt Blaze announced that he was seeking $500 >from twenty people to fund a private research project which he felt had a >meaningful chance of casting DES as a NP-hard combinatorial problem and >attacking it with an appropriate combinatorial algorithm, I'd send a check >off tomorrow. > > The real Matt Blaze would not have 15 donors -- as Mr. Cordian >reports -- but be stimied on how to get five more. > > I wish Mr. Cordian well in his algebraic attack on DES -- but, >unfortunately, he is not the real Matt Blaze. Not even a near-clone. > > We could do with a few more professionals with Blaze's talent, >energy, and integrity in general circulation. > > Suerte, > > _Vin > >----- >"Cryptography is like literacy in the Dark Ages. Infinitely potent, for >good and ill... yet basically an intellectual construct, an idea, which by >its nature will resist efforts to restrict it to bureaucrats and others who >deem only themselves worthy of such Privilege." >_ A Thinking Man's Creed for Crypto _vbm. > > * Vin McLellan + The Privacy Guild + <vin(a)shore.net> * > 53 Nichols St., Chelsea, MA 02150 USA <617> 884-5548 > > --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Electronic Commerce: The Future of Fraud
by Bruce Schneier 17 Dec '03

17 Dec '03

This appeared in my November newsletter, CRYPTO-GRAM, but I thought it general enough interest to send it here. Bruce Electronic Commerce: The Future of Fraud Fraud has been perpetrated against every commerce system man has ever invented, from gold coin to stock certificates to paper checks to credit cards. Electronic commerce systems will be no different; if that's where the money is, that's where the crime will be. The threats are exactly the same. Most fraud against existing electronic commerce systems -- ATM machines, electronic check systems, stored value tokens -- has been low tech. No matter how bad the cryptographic and computer security safeguards, most criminals bypass them entirely and focus on procedural problems, human oversight, and old-fashioned physical theft. Why attack subtle information security systems when you can just haul an ATM machine away in a truck? This implies that new commerce systems don't have to be secure, but just better than what exists. Don't outrun the bear, just outrun the people you're with. Unfortunately, there are three features of electronic commerce that are likely to make fraud more devastating. One, the ease of automation. The same automation that makes electronic commerce systems more efficient than paper systems also makes fraud more efficient. A particular fraud that might have taken a criminal ten minutes to execute on paper can be completed with a single keystroke, or automatically while he sleeps. Low-value frauds, that fell below the radar in paper systems, become dangerous in the electronic world. No one cares if it is possible to counterfeit nickels. However, if a criminal can mint electronic nickels, he might make a million dollars in a week. A pickpocketing technique that works once in ten thousand tries would starve a criminal on the streets, but he might get thirty successes a day on the net. Two, the difficulty of isolating jurisdiction. The electronic world is a world without geography. A criminal doesn't have to be physically near a system he is defrauding; he can attack Citibank in New York from St. Petersburg. He can jurisdiction shop, and launch his attacks from countries with poor criminal laws, inadequate police forces, and lax extradition treaties. And three, the speed of propagation. News travels fast on the Internet. Counterfeiting paper money takes skill, equipment, and organization. If one or two or even a hundred people can do it, so what? It's a crime, but it won't affect the money supply. But if someone figures out how to defraud an electronic commerce system and posts a program on the Internet, a thousand people could have it in an hour, a hundred thousand in a week. This could easily bring down a currency. And only the first attacker needs skill; everyone else can just use software. "Click here to drop the deutsche mark." Cryptography has the potential to make electronic commerce systems safer than paper systems, but not in the ways most people think. Encryption and digital signatures are important, but secure audit trails are even more important. Systems based on long-term relationships, like credit cards and checking accounts, are safer than anonymous systems like cash. But identity theft is so easy that systems based solely on identity are doomed. Preventing crime in electronic commerce is important, but more important is to be able to detect it. We don't prevent crime in our society. We detect crime after the fact, gather enough evidence to convince a neutral third party of the criminal's guilt, and hope that the punishment provides a back-channel of prevention. Electronic commerce systems should have the same goals. They should be able to detect that fraud has taken place and finger the guilty. And more important, they should be able to provide irrefutable evidence that can convict the guilty in court. Perfect solutions are not required -- there are hundred of millions of dollars lost to credit card fraud every year -- but systems that can be broken completely are unacceptable. It's vital that attacks cannot be automated and reproduced without skill. Traditionally, fraud-prevention has been a game of catch-up. A commerce system is introduced, a particular type of fraud is discovered, and the system is patched. Money is made harder to counterfeit. Online credit card verification makes fraud harder. Checks are printed on special paper that makes them harder to alter. These patches reduce fraud for a while, until another attack is discovered. And the cycle continues. The electronic world moves too fast for this cycle. A serious flaw in an electronic commerce system could bankrupt a company in days. Today's systems must anticipate future attacks. Any successful electronic commerce system is likely to remain in use for ten years or more. It must be able to withstand the future: smarter attackers, more computational power, and greater incentives to subvert a widespread system. There won't be time to upgrade them in the field. Why Cryptography is Harder Than it Looks: http://www.counterpane.com/whycrypto.html Security Pitfalls in Cryptography: http://www.counterpane.com/pitfalls.html Subscribe to CRYPTO-GRAM: http://www.counterpane.com/crypto-gram.html ********************************************************************** Bruce Schneier, President, Counterpane Systems Phone: 612-823-1098 101 E Minnehaha Parkway, Minneapolis, MN 55419 Fax: 612-823-1590 Free crypto newsletter. See: http://www.counterpane.com

1 0

Mako Capital shares to triple in next few months, projects research company
by gitpro＠mailcity.com 17 Dec '03

17 Dec '03

Mako Capital shares to triple in next few months, projects research company! Mako Capital intent to merge with Sports Group International and market Spalding Sports Drinks worldwide. OTC BB MAKO 3/4 What do Kiki Vandeweghe, Dorothy Hamill, Joe Namath, Bill Walton, Larry Holmes and Clyde Drexler all have in common? They are all shareholders of a dynamic sports drink company called Sports Group International Mako Capital On October 19, 1998 Mako Capital made a blockbuster announcement that was obviously overlooked by the investment community. Mako signed a letter of intent to merge with Sports Group International. Sports Group is a dynamic company with an experienced, proven management team. Sports Group has revolutionary products in the multi-billion dollar sports drink market. We instantly fell in love with their oxygenated water. This is water with seven times the oxygen of H20. It is a big hit with marathon runners and we feel that there is a huge market for this product. They also have newly formulated sports drinks to satisfy every market. Sports drinks designed for kids, women and bodybuilders. They also have powdered products. The key to this company is that their sports drinks are marketed under the Spalding name. Spalding is one of the most recognized names in sports. You cant buy that type of name recognition. We are told that the company has 1.2 million cases pre-sold for 1999 which should bring in more than twenty million in revenue and 15% in profit (approximately 3 million). That would be better than one dollar per share in earnings. Sports Groups management team is headed by Kiki Vandeweghe, the former NBA All Star and Dean Miller, the star executive of Megafoods. As president of Megafoods, Dean saw the company grow from a couple of stores to 70 stores and $800 million in revenue. Realizing that much of the great success behind Gatorade was the advertising campaign featuring Michael Jordan, SGI has procured promotions and endorsements from athletes who are current shareholders like, Clyde Drexler, Kiki Vanderweghe, Bill Walton, Larry Holmes, Joe Namath, Dorothy Hamill and others. Mako Capital has the right combination of great products, a proven management team and a name recognized around the world, which will lead them into the next millenium. We are looking for the stock to trade $2 - $3 short term and $5 - $7 by summer of 1999. For more information contact: Financial Internet Group 800-959-9122 Disclaimer: Mako Capital has paid Freedom Rock Partners 150,000 shares of free trading stock and options to purchase 100,000 shares at $1.00. For more information please see our disclaimer. NOTE: For those on the internet who do not want to recieve exciting messages such as this..... *We strive to comply with all state and federal laws and to send ads only to interested parties. *This ad is not intended for nor do we knowingly send to Washington State residents. * OR CLICK_HERE_TO_GOTO_REMOVE-LIST.COM (http://remove-list.com) Remove-List is a free public service offering to help the general public get removed from commercial mailings lists and has not sent this message. If you want their help please add your name to their list and we you will not receive a commercial email from us or any other member bulk emailer.

1 0

100S OF FREE PICS'N'LINKS EVERY DAY!
by STUFFED MON NOV 16 17 Dec '03

17 Dec '03

+ 30 SUPERB, HI-RES, HOT PHOTOS + 5 SUPER SEXY STORIES + BUTT NAKED BABES + WET CUMSHOTS & WILD HARDCORE + ADULT INTERNET XXX + INTERNET AFFAIRS + ADULT ARTWORK OF ARTISTS + A SEXY GIRL + FREE HARDCORE PORN + ASIAN XXX NYMPHO + FREE PORN 4 ALL + SIBERIAN DAWGY DAWG + BONUS PIC 1 -> http://www.stuffed.net/home/15066.htm + BONUS PIC 2 -> http://www.stuffed.net/home/16154.htm + BONUS PIC 3 -> http://www.stuffed.net/home/16042.htm + BONUS PIC 4 -> http://www.stuffed.net/home/20342.htm + BONUS PIC 5 -> http://www.stuffed.net/home/30693.htm + MUCH, MUCH MORE! ----> http://stuffed.net/home/ <---- This email is never sent unsolicited. Stuffed is the supplement for the Eureka newsletter you subscribed to. Full instructions on unsubscribing are in every issue of Eureka! ----> http://stuffed.net/home/ <----

1 0

Non Explosive Weapons
by John Young 17 Dec '03

17 Dec '03

Richard Danzig, new Navy Secretary, op-eds in the NYT today about the threat of "Non Explosive Weapons (NEW)," posed by WMD and information warfare. http://jya.com/mil-panic.htm He terms them "weapons of mass disruption" which may lead to mass panic and will require the military and law enforcement agencies to unite in a new kind of US national defense, while, you bet, at the same time obeying law against domestic military operations. In passing, he notes that the military has encryption to protect itself against information attacks but that the public and infrastructure does not. Cavalry to the rescue. Danzig's message is remarkably similar to the Kyl report noted here a few days ago, and may indicate what's long been coming in the way of deploying military forces while falsely proclaiming Posse Comitatus is being fulfilled. Or that the law is about to be changed to meet the urgent threats of the Info Age, media-decorted, to be sure, like WMD Freddy or our own media-terrifying Toto. Bruce Hoffman's recently published "Inside Terrorism," lays out the full panoply of outlaw and lawful terrorism, by groups and nations, cults and religions. Like the "Thugs" of India who killed 1 million over 1200 years -- an impressive persistence. Hoffman claims that terrorism works in most cases. The reasons why have been discussed here, though not his depth and range of successes. And that the military seldom knows what to do about it except to engage in even greater terrorism itself, particularly against perceived supporters of the enemy. That's food for thought for those calling for military protection at home, whether by the military or the increasingly militarized and armed LEAs and support agencies. This linkage of WMD terrrorism and information threats appears to be the policy strategy to demonize information in order to criminalize it. "Information threats" under this policy does not mean anything protected by the 1A or WTO copyright, see how it works, is that clear motherfucker, do you need a missile in the head to get the point you fucking terrorist, read the NEWs, this aint TV Cops, Joe 6-Pack, it's high-tech GI Joe sapping your bunker, night-vision video rolling, family suicide by Semtex.

1 0

Non Explosive Weapons
by John Young 17 Dec '03

17 Dec '03

Richard Danzig, new Navy Secretary, op-eds in the NYT today about the threat of "Non Explosive Weapons (NEW)," posed by WMD and information warfare. http://jya.com/mil-panic.htm He terms them "weapons of mass disruption" which may lead to mass panic and will require the military and law enforcement agencies to unite in a new kind of US national defense, while, you bet, at the same time obeying law against domestic military operations. In passing, he notes that the military has encryption to protect itself against information attacks but that the public and infrastructure does not. Cavalry to the rescue. Danzig's message is remarkably similar to the Kyl report noted here a few days ago, and may indicate what's long been coming in the way of deploying military forces while falsely proclaiming Posse Comitatus is being fulfilled. Or that the law is about to be changed to meet the urgent threats of the Info Age, media-decorted, to be sure, like WMD Freddy or our own media-terrifying Toto. Bruce Hoffman's recently published "Inside Terrorism," lays out the full panoply of outlaw and lawful terrorism, by groups and nations, cults and religions. Like the "Thugs" of India who killed 1 million over 1200 years -- an impressive persistence. Hoffman claims that terrorism works in most cases. The reasons why have been discussed here, though not his depth and range of successes. And that the military seldom knows what to do about it except to engage in even greater terrorism itself, particularly against perceived supporters of the enemy. That's food for thought for those calling for military protection at home, whether by the military or the increasingly militarized and armed LEAs and support agencies. This linkage of WMD terrrorism and information threats appears to be the policy strategy to demonize information in order to criminalize it. "Information threats" under this policy does not mean anything protected by the 1A or WTO copyright, see how it works, is that clear motherfucker, do you need a missile in the head to get the point you fucking terrorist, read the NEWs, this aint TV Cops, Joe 6-Pack, it's high-tech GI Joe sapping your bunker, night-vision video rolling, family suicide by Semtex.

1 0

DES Trolls
by Eric Cordian 17 Dec '03

17 Dec '03

Vin McLellan, apparently not satisfied with only one flame, makes this response to a very conveniently appearing anonymous remailer troll saying something silly about Matt Blaze: > The real Matt Blaze would also not be making these absurd and false > claims that some mysterious "book" describing a cryptosystem identical > or equivalent to the RSA public key cryptosystem was published "years" > before Ron Rivest, Adi Shamir and Len Adelman first published their > RSA PKC algorithm in April, 1977. (It's well documented in the > Cypherpunk archives, Codrian assures us;-) Here the disingenuous Vin gives his own description of my prior post, which he then proceeds to loudly refute, and I certainly didn't use the word "identical" or the word "equivalent." I stated that descriptions of "that which is now known as RSA" have appeared in print, and that the one-way characteristics of the RSA trap-door function were also previously known. The arguments for invalidation of the RSA patent were based on two central claims. First, that work which contained similar material was distributed by preprint and presented at conferences more than one year before the RSA patent was applied for. This would include the Diffie-Hellman paper on "Multiuser Cryptographic Techniques", the early Merkle-Hellman work, and the Pohlig-Hellman work. The second claim that may be made against RSA is that the system is "obvious." Support for this claim may be found in books dating all the way back to the 19th century which discuss both the cryptographic usefulness of one-way functions, and the factorization of the product of two primes as one example of such a function. Quoting "Cyberlaw": "There are a number of references in the prior art, moreover, to using the problem of factoring composite numbers in cryptography, dating back to the 19th century. "In 1870, a book by William S. Jevons described the relationship of one-way functions to cryptography and went on to discuss specifically the factorization problem used to create the "trap-door" in the RSA system." > There was no such book. Cordian's statement is just not true. Only a complete moron would place himself in the position of trying to prove such an all-encompassing negative. > (Actually, I'd bet that even Robert Hettinga knows that this is > untrue.) People_insulted_by_Vin_in_this_thread++; > The real Matt Blaze would not have 15 donors -- as Mr. Cordian reports > -- but be stimied on how to get five more. If you had correctly read the FAQ, you would see that we have 5 sponsors, and 15 open sponsorships. We are not stimied, we are writing and debugging many thousands of lines of extremely complex code, and do not wish to be distracted by further marketing activities at this time. > I wish Mr. Cordian well in his algebraic attack on DES All together now. "Bwahahahahahahhahaahah!" This concludes my response to Vin, who may now return to his regularly scheduled trolling lessons. Now, if this weren't all hilarious enough, Matt Blaze, who is usually smarter than this, feels an urgent need to leap in with... > Whatever this is about, however, I assure you that any use of my name > in connection with a solicitation for funds for some sort of > "analytical DES cracking" effort, or any suggestion that I'm involved > in such a project, is absolutely false and perhaps fraudulent. Let me state for the record that the DES Analytic Crack Project has made no claims about any of the prople working on it, other than that they are competent implementors of complex algorithms. Matt Blaze is not associated with the project, and if any other crypto notables wish a similar public statement made about them, they have only to email and request it. Sponsorships for the project are being solicited on the basis of the statement of work in the FAQ, and work product to date. They are not being solicited based on any representation that various individuals with recognizable names are associated with the project. Anonymous trolls making such allegations, followed by irate rebuttals by shills, and scientists who should know better, are clearly an attempt at disruption. Continued such antics will be met with an appropriate legal response. -- Sponsor the DES Analytic Crack Project http://www.cyberspace.org/~enoch/crakfaq.html

2 1

Link test [1432]
by William H. Geiger III 17 Dec '03

17 Dec '03

hi -- --------------------------------------------------------------- William H. Geiger III http://www.openpgp.net Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 5.0 at: http://www.openpgp.net/pgp.html ---------------------------------------------------------------

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

9 Nov 98 Carl Johnson #05987-196 P.O. Box 4000, Springfield, Missouri 65801-4000 I thought that given the fact that The Kontrollers seem to be Lying Out of Their Dirty Little AssHoles (TM) at every turn, in regard to my incarceration and legal situation, that I might as well use my time in Prison to improve my knowledge of Law & Politics. I am assuming that The Usual (TM) legal defenses are not an option for me, since my Public <hee-hee> <snortle- snortle> <hack-hack> Defender <spit> <fart> seems to be too ashamed of his role in my Legal Case that he has not once contacted me. Perhaps it would be best for me to study the possibility of presenting an SOG-Z0G AmericaLand of the The Freeh Defense (TM). If you know of any Cpunx Shit Disturbers who are familiar with Zionist Occupational Government concepts literature and legal defense histories, I would be happy to study whatever material they could send me. (Information from The Flat Earth Society would also come in handy, to prepare a Back Up Defense, eh?) Tell Zog that Chuck and Squeaky say, "High!" CJ

1 0

Could E.M. Cordian be Matt Blaze in Disguise? (Nah!)
by Robert Hettinga 17 Dec '03

17 Dec '03

:-) Bwahahaha! Isn't this fun??? Cheers, Bob Hettinga --- begin forwarded text X-Sender: vin(a)shell1.shore.net Mime-Version: 1.0 Date: Sun, 15 Nov 1998 00:31:21 -0500 To: Robert Hettinga <rah(a)shipwright.com>, dcsb(a)ai.mit.edu From: Vin McLellan <vin(a)shore.net> Subject: Could E.M. Cordian be Matt Blaze in Disguise? (Nah!) Cc: Matt Blaze <mab(a)research.att.com> Status: U Out on the Cypherpunks List, "Anonymous" claimed to reveal the real identity of E.M. Cordian, the organizer of the DES Analytical Crack. See: http://www.cyberspace.org/~enoch/crakfaq.html >Shouldn't we be using "Mr. Cordian's" real >name? Matt Blaze (mab(a)research.att.com) also >occasionally known as "M.F. Tones", and even less >often as "Mr. Rouge" (There should be an accent mark >there actually). In response, Robert Hettinga <rah(a)shipwright.com> declared: >Just to clear the air a smidge. > >If Matt Blaze says he's looking for an algebraic inverse to DES, I tend to >believe him... Jeeze, Rob! This is your attempt to help "clear the air?" I do not for a moment believe that Eric Michael Cordian <emc(a)wire.insync.net> is a pseudonym for Matt Blaze <mab(a)research.att.com>! You should maybe query Matt directly <mab(a)research.att.com> before you endorse E.M. Cordian as Matt Blaze in drag. You could confuse a whole lot of people who trust your insider knowledge of these steamy Net Affairs. To anyone familiar with Blaze's essays, speeches, & on-line posts, a scan of Mr. Codrian's FAQ and published comments should make it apparent that this suggestion is unlikely, if not perposterous. The real Matt Blaze would also not be making these absurd and false claims that some mysterious "book" describing a cryptosystem identical or equivalent to the RSA public key cryptosystem was published "years" before Ron Rivest, Adi Shamir and Len Adelman first published their RSA PKC algorithm in April, 1977. (It's well documented in the Cypherpunk archives, Codrian assures us;-) There was no such book. Cordian's statement is just not true. The real Matt Blaze -- the guy who wrote the pithy Afterward to Schneier's Applied Cryptography,II -- would know that this is not true. (Actually, I'd bet that even Robert Hettinga knows that this is untrue.) Mind you, if the real Matt Blaze announced that he was seeking $500 from twenty people to fund a private research project which he felt had a meaningful chance of casting DES as a NP-hard combinatorial problem and attacking it with an appropriate combinatorial algorithm, I'd send a check off tomorrow. The real Matt Blaze would not have 15 donors -- as Mr. Cordian reports -- but be stimied on how to get five more. I wish Mr. Cordian well in his algebraic attack on DES -- but, unfortunately, he is not the real Matt Blaze. Not even a near-clone. We could do with a few more professionals with Blaze's talent, energy, and integrity in general circulation. Suerte, _Vin ----- "Cryptography is like literacy in the Dark Ages. Infinitely potent, for good and ill... yet basically an intellectual construct, an idea, which by its nature will resist efforts to restrict it to bureaucrats and others who deem only themselves worthy of such Privilege." _ A Thinking Man's Creed for Crypto _vbm. * Vin McLellan + The Privacy Guild + <vin(a)shore.net> * 53 Nichols St., Chelsea, MA 02150 USA <617> 884-5548 --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

4 5

Find Out Anything About Anyone On The Net !!!! /"][
by emilhusb＠online.no 17 Dec '03

17 Dec '03

YOU can easily learn how to investigate and learn EVERYTHING about your employees, neighbors, friends, enemies, and or anyone else !!! It is absolutely amazing !!! YOU Must Get This Extraordinary Package today......... + YOU can track down an old friend or a lost love, and, just for fun, investigate your family history. + YOU can screen prospective employees criminal records, look at their driving, or credit history. + YOU can verify test results from drug testing and even look into your children's friends history for any type of record. + YOU can TRACK down and locate an old debtor who is hiding from you and see if he/she is hiding any assets. + YOU can look up "unlisted telephone numbers." Locate social security, birth, adoption or death records. Check Army, Navy, Marine Corps, or Air Force service file records. YOU will simply be amazed to learn what sensitive and important information other people and enemies can discover about YOU !!!!! YOU Can Find Out Anything About Anyone On The Net !!! Do background checks on people and charge for it, as you start your own investigative services. Stop guessing about the LAW !!! Look up laws and do much more, direct from famous law libraries. Get this easy to use KIT right away, and then, YOU can become a private investigator. ORDER TODAY !!!!! Send $18.00 cash (wrapped in two pieces of paper), money order, or check to: INFORMATION, Ltd. P. O. Box 515019 St. Louis, MO 63151-5019 USA The Complete Package Will Be Immediately Shipped Prepaid Directly to You With Everything You Will Need In Your Kit to Get Started Right Away !! THANK YOU for your kind attention, and have a nice day !!!! +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ YOUR AD IN 333 NEWSPAPERS !!!!!!!!!! *********************************************** Seven years ago, I learned how to place my Classified Ad in several hundred newspapers, with just one telephone call. And, my cost was $0.51 per newspaper. The total circulation was well over 1.5 Million. I could reach just about any market, anywhere in this country. Since then, my small mail-order company has exploded. And, I use this same time tested and true method week after week. I would like to share this powerful information and show you how to save hundreds, even thousands of dollars on advertising that works. The average cost of a classified ad in a newspaper is about $15.00 to $20.00 dollars. Multiply that by 333 and your total cost is well over $6,000.00 Dollars. By using our amazing method, your total cost is only $170.00. Not to mention the time and money you save by placing one call, instead of 333 long distance calls. You can limit your promotion to a Single State or place your ad in Several States around the country, all with just one phone call. You can reach One Million Readers on the East-Cost today and a Million on the West-Coast tomorrow. It's that simple !!!! Your cost for this priceless information, is only $19.00 !!! You will make that back on your first promotion. WE are so confident that this type of advertising will boost your profits, we will guarantee your satisfaction with our Money Back Guarantee !! So, you have nothing to lose. Now, order our amazing classified ad method today !!!!!! PRINT ORDER FORM Ship To: ************************** ********* NAME____________________________________________ ADDRESS________________________________________ CITY______________________________________________ STATE__________________ ZIP_____________________ E-MAIL__________________________________ Don't Delay, ORDER YOUR COMPLETE MEDIA KIT TODAY !!!!!!! ********************************************************************** Mail Payment $19.00 CASH, money order, or check TO: ******************** INFORMATION, Ltd. P. O. Box 515019 St. Louis, MO 63151-5019 U.S.A. WE will ship your complete KIT directly to you !!!! ************************************************************** OPTIONAL / OVERNIGHT SHIPPING - ADD $15.00 ************************************************************** Thank you for your kind attention, and have a nice day !!! YOU MAY ORDER BOTH PACKAGE KITS FOR ONLY $33.00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Admin Internet Services This message is not intended for residents in the State of Washington, screening of addresses has been done to the best of our technical ability. If you are a Washington resident or otherwise wish to be removed from this list, go to global remove site if you want your address removed from future mailing. http://209.84.246.162/remove.htm This Global Communication has been sent to you by: PAVILION ADVERTISING SERVICES Offices: London, Paris, Berlin, Hong Kong

1 0

Plug: Check out wasp.org...
by Robert Hettinga 17 Dec '03

17 Dec '03

http://www.wasp.org/ is a site which belongs to WASP's author, and DBS and DCSB member, Steven Smith. When it's finished, the current version is about 70%-there alpha, WASP will be an open source web application delivery platform written in JAVA for XML/HTML. Steve and I were talking about using WASP for digital commerce, financial cryptography, and dbts applications Friday night, at Anthony's Pier 4, during the Constitution Yacht Club awards banquet. (Naw, not *that* kind of yacht club. CYC, while I'm plugging things, for those of you who sail in Boston, charges all of $75/yr, and it mostly does <very friendly, but hotly contested :-)> 'round-the-bouy races and cookouts, all out of a one-room prefab houseboat clubhouse tied up at the Constitution Marina in Charlestown. Steve graciously answered a cattlecall on the DCSB list for crew this summer, and now does foredeck on Corisan, the 1968 Columbia 38-footer a bunch of us old farts race on every Thursday night in Boston harbor, when it's warm enough to, anyway.) So, seeing that WASP is still being built, and Steve is crypto-clueful, I thought I'd spam the crypto community (and a few others :-)) about WASP so that Steve could get some comments on what he has now, and requests for new stuff he can add to WASP. And, of course, since it's open source, to solicit WASP additions, if WASP indeed doesn't suck, both crypto and otherwise, from other clueful people both inside the country and otherwise. :-). The following is from Steve's FAQ on WASP, sans links, so it might read strangely here in text. Cheers, Bob Hettinga > 1. What is the WASP? > > The WASP is an OpenSourceTM platform (library) for developing complex web >applications. It is written in Java and runs under any system which will >support the Java Servlet API. (eg. Sun's JavaWebServer, Apache (via Live >Software's JRun), NetScape, IIS and others.) > > The current version is: 0.7a. Download it now. I think this is 70% to a >1.0 release. 0.8a will be out by 11/16 and will include the >DataAccessObject (org.wasp.data.*). > > 2. How does the WASP work? > > The WASP parses .wasp files which consist of standard HTML and some >additional XML tags that are used to control the behavior of the WASP. >All .wasp files should be consistent with XML syntax. The WASP allows you >to add new tags and functionality easily. The default set of tags provide >standard script features, including: variable substitution, conditional >processing, looping, dynamic SQL queries (for prototyping only), >interfaces to Data Access Objects, etc. Session management is provided by >the underlying Servlet API and WASP applications have access request, >session, and global namespaces. See the Javadoc. > > 3. Who can use the WASP? > > Anyone can use it for Free! Better yet, you can download the source. >The WASP is released under the Library General Public License (LGPL), so >if you make any improvements to the WASP, the results must be free as >well. WARNING: This software is still alpha stage. It works, but there >are no Makefiles or INSTALL instructions yet. You're on your own. An >example .wasp page will be posted soon. > > 4. Why would I want to use the WASP? > > That is probably the subject for an entire whitepaper which I don't have >time to write. I wrote this software because all the methods I have found >for developing web applications suck in some way or other. Even >monumental OpenSource treasures like Apache and Perl leave something to be >desired when considering a complex application. Before I go trashing >everyone else's stuff though, let me tell you why The WASP doesn't suck: > > It is easily extended so you can make it do whatever you want. It is >written in Java so you can use any server OS or Database. It seperates >HTML from SQL and Java application logic, thereby allowing designers to >design and programmers to program. It is fast and scaleable. It will run >well enough on your hopped up 486 linux box and it will scream on your 10 >CPU Sparc Mega Server. If you run NT, I'm sure it'll work there too. >(Shame on you for wasting good hardware!) It encourages the development of >reusable business objects. It can talk to dynamic data sources/services >that are not SQL-Based! (Important for complex distributed object >applications.) It is OpenSource, so when you run into a bug, you can fix >it! It is comprehendable by any experienced object programmer. (Only >~3000 lines of code) It is Free! > > 5. What's wrong with the other stuff? > > The other standard methods for developing web apps all suffer from one or >more of the following: > > They involve editing single files containing 5 or more programming >lanugages, all with different syntax, and which execute in 5 different >places at 5 different times. They require you to surf the tech-support >websites of your tools vendors hoping for clues to some bug. They yield >unmaintainable / throwaway solutions. They tie you to a single vendor's >hardware, operating system, or database. They force you to use some arcane >GUI environment to create your "application". This process always feels >like Voodoo to me. M1CR0S0F4 R00LZ D00D!!!1!!1!. They cost money whether >they work well or not. > > 6. What can I do for the WASP? > > I will be setting up a database here soon to keep track of a wishlist, >bugs, etc. In the meantime, consult the source code and look for XXX in >the comments. These indicate areas that need work. Obviously, general >stuff like cleaning up error paths/exception handling would help. Anyone >with experience in the area of Enterprise Java Beans who could offer >suggestions on how to implement the Data Access stuff in the approved Java >framework would be greatly appreciated. I understand the EJB isn't baked >yet. I guess I'll buy a book on it after I finish the contract I'm on. > > After the Parser is reworked, the Page cache might be reworked to >serialize and write to disk or use some persistant store. The WASP caches >pages to avoid expensive parsing but I haven't yet measured how much >memory this uses. (RAM sure is cheap these days!) > > Also, if you really want a pure OpenSource stack of software, someone >needs to implement an OpenSource servlet runner. That is truely a >"chasing taillights" problem (as the Halloween Document put it) so it >should be easily enough accomplished. If no one steps up to plate, maybe >I'll get around to it, but don't hold your breath. I'm enjoying writing >WASP applications too much! > > There is a net-CVS repository for the WASP code. Read-only access has >not been set up yet. Contact steven.t.smith(a)pobox.com to obtain access. > > 7. What about the LGPL and Java Virtual Machine? > > I'm no licensing expert. Ostensibly, I want this program to be freely >used and improved while not enriching the lawyers, taxmen and all the >other parties that surround commercial software. Mostly, however, I want >to share this cool program with my friends. If anyone else can use it, >that would be great! If anyone could help me debug it, that would be even >greater! That's why I chose to OpenSource. > > What exactly defines a program running inside a JVM is not immediately >obvious. I just assumed that Java classes are all kind of like libraries. >That's why I chose to use the LGPL. > > In my view, the WASP consists of every class in the org.wasp.* heirarchy. >I don't consider any Data Access code that is specific to your >website/application and which may be "linked" into the WASP at runtime, to >be "part of" of the WASP or create some kind of derivative work. If you >do write additional Taglets which are of general use, I expect those to be >included in the WASP. This is sort of "enforced" by Taglets registering >themselves via code in the main org.wasp.engine.Servlet.init(), thereby, >in my view, making them part of the WASP. Data Access stuff that is >custom to your application can be configured in via initialization >parameters and thusly not considered to be part of the WASP. > > For what it's worth, the more you poke around this stuff, the more you >realize that Software isn't a THING at at all. All those phantasms people >use to think about it are simply anachonistic hold-overs from industrial >era, scarcity thinking. Software Licenses and the businesses they support >begin to look like so many Voodoo incantations and pointless >pontifications about angels on the head of pin. Or worse, they seem like >the rules of a silly boardgame which is played with real money, and in >which the house (government, lawyers, VCs, Investment Banks and corporate >shareholders) always wins. Casinos at least offer better odds. I believe >a programmer is better off figuring out how to get people to actually use >and propagate code in ways that enrich each of us individually and empower >individuals generally. > > 8. Who wrote it? > > Me. (steven.t.smith(a)pobox.com) And whoever I could sucker into helping >me. ;-) See the CONTRIBUTORS file for details. ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: U.S. Attorney Morgenthau on Money Laundering
by David Watts 17 Dec '03

17 Dec '03

Can't blame the Feds for this one; Morgenthau is actually the District Attorney for Manhattan, not the U.S. Attorney. My bad. _________________________________________________________ DO YOU YAHOO!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0