December 2003 - cypherpunks-legacy

What are the available anonymous remailers?
by Alan Tu 17 Dec '03

17 Dec '03

Hi all, I saw the address for this list in Jeff Licquia's PGP FAQ. I haven't subscribed to it heard, as the FAQ said traffic on this list could be 30-40 messages a day. As I'm attempting to cut down the time I spend on CompuServe... Unfortunately, that means if you want to get a message to me, you'll have to send it to me directly, you can't send it to the list. My address is atu5713(a)compuserve.com My public key is included in this message. Anyway, here comes my real question. I am interested in finding an easy-to-use no-nonsense anonymous remailer. But anon.penet.fi seems to have shut down. I sent mail to ping(a)anon.penet.fi and help(a)anon.penet.fi and I got a undeliverable message. Could someone point me to a remailer? Sincerely, Alan Tu Type Bits/KeyID Date User ID pub 1024/E5D915E1 1997/04/27 Alan Tu <atu5713(a)compuserve.com> Alan Tu <102534.2165(a)compuserve.com> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i Comment: Requires PGP version 2.6 or later. mQCNAzNivkwAAAEEALdGUXD3j+RioIirVG46N6LaGD3YMMVVT5Mjwr5JojQsDICy 856I06Ugo/Fqid2A/os7v/gwE+Sj/WhMERgTsTejUZtsucTpS9sae+cc27Fjjq1l hOnqcLZqnHDDNyn3+jesVFPLnRlSoHbmcBK1XDW/SJT1anZz55ezmBrl2RXhAAUR tCBBbGFuIFR1IDxhdHU1NzEzQGNvbXB1c2VydmUuY29tPokAlQIFEDOguk6Xs5ga 5dkV4QEBBF8D/1B0ePqlMavWEUMP0uTmyvWFI7jooAcih6uHZFo2u+u3EzE2Is8X EoLHg39DhjleTHPu6TnGsWIiwDYEslzYeVw/Cglx6eliYIr/qs7peEywuhtZsEFH ln6yR9IE6rX3b3GCvPSQ5uPhXWrd2kWaZvG4rQ4Oj1m3yTrFaPRqCBPvtCRBbGFu IFR1IDwxMDI1MzQuMjE2NUBjb21wdXNlcnZlLmNvbT4= =fwyg -----END PGP PUBLIC KEY BLOCK-----

1 0

Test 3
by Tim May 17 Dec '03

17 Dec '03

Test name/spaces no quotes

1 0

Test 4
by Tim May 17 Dec '03

17 Dec '03

Test / multiple posts Subject: Returned mail: unknown mailer error 2 Date: Thu, 3 Jul 1997 03:33:44 +0200 (MET DST) From: Mail Delivery Subsystem <MAILER-DAEMON(a)basement.replay.com> To: <wombat(a)bc.sympatico.ca> The original message was received at Thu, 3 Jul 1997 03:33:42 +0200 (MET DST) from wombat.sk.sympatico.ca [142.165.5.136] ----- The following addresses had permanent fatal errors ----- "|/usr/home/replay/.mixmaster/mixmaster -R | /usr/home/replay/.remailer/remailer || exit 75" (expanded from: <remailer(a)REPLAY.COM>) ----- Transcript of session follows ----- Cannot fork 554 "|/usr/home/replay/.mixmaster/mixmaster -R | /usr/home/replay/.remailer/remailer || exit 75"... unknown mailer error 2 Cannot fork ----- Original message follows ----- Return-Path: <wombat(a)bc.sympatico.ca> Received: from wombat.sk.sympatico.ca (wombat.sk.sympatico.ca [142.165.5.136]) by basement.replay.com (8.8.5/RePlay, Inc.) with ESMTP id DAA15223 for <remailer(a)REPLAY.COM>; Thu, 3 Jul 1997 03:33:42 +0200 (MET DST) Received: from default (lohner31.sk.sympatico.ca [142.165.98.31]) by wombat.sk.sympatico.ca with SMTP (8.7.1/8.7.1) id TAA13669 for <remailer(a)REPLAY.COM>; Wed, 2 Jul 1997 19:30:20 -0600 (CST) Message-ID: <33BB013D.1242(a)sk.sympatico.ca> Date: Wed, 02 Jul 1997 19:32:45 -0600 From: Rabid Wombat <wombat(a)bc.sympatico.ca> Reply-To: wombat(a)bc.sympatico.ca X-Mailer: Mozilla 3.01C-SYMPA (Win95; U) MIME-Version: 1.0 To: remailer(a)REPLAY.COM Subject: Kent finally comes around / Re: NRA and National Online Records Check bullshit References: <v03102805afdee15fe080(a)[207.167.93.63]> <3.0.2.32.19970702205025.03d40f54(a)panix.com> <19970702180331.11847(a)bywater.songbird.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit ;; Anon-To: cypherpunks(a)toad.com Kent Crispin wrote: > On Wed, Jul 02, 1997 at 08:50:25PM -0400, frissell(a)panix.com wrote: > >Quite simple. Eliminate prison, encourage everyone to carry weapons, wait 6 > >months, then well behaved people will predominate and many of the maladjusted > >will find themselves well-adjusted or dead. > > Along with a far larger number of well-adjusted innocents. And the > maladjusted who aren't dead will be in power. I believe you meant to say "will _remain_ in power." > No question about it, the only hope for the human race is wide > dispersal. Everybody should join the L5 society, if it still exists, > or become a terrorist Luddite, and bomb us back to the stone age. Are you finally coming around to a cypherpunk frame of mind, Kent, or is this a cheap political ploy to get the "Cypherpunk of the Year" award? > But the Earth is doomed, anyway, in 5 billion years. And we have > either the grand crunch or the heat death of the universe to contend > with after that. Hopeless. The religious right is working to get a law passed to prevent this from happening, since it is evolutionary hocus-pocus that goes against belief in God as the Creator. The law will no doubt be nullified by the Supreme Court as violating the separation of church and state. > Kent Crispin "No reason to get excited", > kent(a)songbird.com Tim May, he kindly spoke... TruthMonger

1 0

Re: Liberating the Bits
by dshipman＠ewol.com 17 Dec '03

17 Dec '03

At 07:59 PM 7/2/97 -0500, you wrote: >On Wed, 2 Jul 1997, Tim May wrote: > >> Hey! I got mine and I'm keeping it! >> Just because a bunch of gullible people believed my company's claim >> that we owned the results of our creative ideas doesn't mean that I >> have to be a sucker, too. >> > >If you're willing to admit you got yours under false pretenses, >the rest of us would like to have it back. Now. > >MacN > Wow... and not on AOL. Come on guys, from now on would you attach a midi laugh track to your jokes so the humor deprived will know its a spoof? dLs -----------------------------------------------

1 0

PGP security problems?
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

I saw this on another mailing list and was wondering if anyone has any information as to what kind of security problems PGP had. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Due to security problems Pretty Good Privacy, Inc., will be using a new signing key in our email correspondence, with an effective date of July 1, 1997. The new key can be downloaded from our keyserver at: http://www.pgp.com Any PGP Corporate key other than the following should be regarded as having been revoked: pub 1024/6C309BDF 1997/06/30 Pretty Good Privacy, Inc. Corporate Key <pgp(a)pgp.com> All employee keys with pgp.com addresses should also be regarded as having been revoked unless signed with the new Corporate Key. -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBM7sc7UlfPVhsMJvfEQJMIACgwqhazDJfN6WqX2HBrq/klG0opmgAoOi6 btA8EoPROpqc9VA2V9fP1Nou =v0eg -----END PGP SIGNATURE-----

1 0

Re: PGP security problems?
by Philip R. Zimmerman 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The recent spate of bogus keys uploaded to the PGP keyserver (with subsequent posts forged using our employees names showing up on mailing lists and newsgroups) is particularly troubling given the fact that they appear to be coming from within the ranks of the cypherpunks. While I still support the aims of the cypherpunks list, I must confess to being somewhat disillusioned by these attacks by long time members of the cypherpunks list. Even more troubling is the fact that there is evidence of the attacks being designed to aide one of PGP, Inc.'s competitors--Stronghold. I suppose I should have realized long ago that Gilmore <spit> and Sameer <fart> were in collusion to turn the cypherpunks against PGP in order to corner the encryption market for c2net's back-door, GAK'ed product. Although PGP's successful effort to get the Huge Cajones anonymous remailer shut down has helped to minimize the damage to our reputation, we may have to take action against other remailers, as well. I wish I had listened to the warnings of the late Dale Thorn, Toto, and Dimitri Vulis before it had come to this. In conclusion, I would ask everyone to be wary when receiving messages purporting to be from PGP, Inc. or from any of our employees. It is inevitable that some gullible fools will be taken in by the forgeries, but simple precautions such as checking the key signatures against the keys on our keyserver and perusing the message headers to determine the source of the email should aide in spotting forgeries. (You should be particularly wary of any messages originating from Canadian ISP's, as that seems to be the natural habitat of Mongers of every sort.) Philip R. Zimmerman <prz(a)pgp.com> -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBM7s2017MfpC8gEO7EQI7pACg0285HGGqLevqRTFZnzpB59PS8yoAn1Wp 0b7D8YcrmSn9VbjmAq55nKWx =fRuw -----END PGP SIGNATURE-----

3 2

Re: PGP security problems?
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Anonymous wrote: > I saw this on another mailing list and was wondering if anyone has any information as to what kind of security problems PGP had. The following appeared on several newsgroups I belong to. --------- [Forward] --------- From: Will Price <wprice(a)pgp.com> Newsgroups: alt.privacy.anon-server,alt.fan.john-hinkley,alt.religion.tantric-sex,alt.anonymous-assholes,alt.cypherpunks,news.admin.net-abuse.therapy Subject: Security Problems at PGP Followup-To: alt.cypherpunks Date: 2 Jul 1997 20:02:22 GMT -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Anonymous wrote: > Does anyone have the inside scoop on the security problems at PGP? The problems encountered had to do with bogus keys of PGP employees being uploaded to the server. This has been rectified by the creation of a new PGP Corporate Key with which all employee keys must now be signed in order to be considered valid. The new PGP Corporate key, dated July 30, 1997, is now available on the PGP, Inc. keyserver. Will Price -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBM7slnQolbA5ByKtoEQJNNgCgyK89QB7xQiwhgPUeoB5gMqc2BmEAoJhO 14xzY3rKoguftPd0qYWZsTyx =+X4g -----END PGP SIGNATURE-----

1 0

Important Announcement for Barron's Online Subscribers
by Barrons Online 17 Dec '03

17 Dec '03

Dear Barron's Online subscriber: I'd like to make you aware of some important changes coming to Barron's Online in the next few weeks. Barron's Online is forming an alliance with The Wall Street Journal Interactive Edition, its sister Web publication from Dow Jones & Co. Barron's Online, the Interactive Journal and the soon-to-be-unveiled SmartMoney Interactive are pooling their efforts to provide investors with the Web's most comprehensive collection of business and markets news, commentary, financial information and personal finance tools -- all at a single subscription price. Beginning July 25, access to Barron's Online will be by paid subscription only. The price is $49 per year. But print subscribers to Barron's will be eligible for an introductory rate of only $29 per year. What does this mean for you? Barron's Online will still offer the key features you've enjoyed in the past, including our exclusive Weekday Extra columns. One noteworthy change: Barron's Online Dossiers will be replaced by Interactive Journal Company Briefing Books, which we expect you'll find equally useful. You get a chance to experience the combined offering on July 25. You can wait until then to register, if you wish. After July 25, the first time you come to Barron's Online you'll be asked to re-register and provide us with a credit card. Your card won't be charged until two weeks later, so you'll have a chance to look around. If you're not satisfied, you can cancel your account and you won't be charged. But here's an opportunity to extend that free trial. Register for the Interactive Journal now or any time before July 15 via a special offer link on the Barron's Online site, and your first eight weeks will be free. Cancel anytime before the eight weeks expire, and there's no charge. With free access for eight weeks, you'll have a chance to explore the Interactive Journal now and, in a few weeks, check out the revamped Barron's Online. For more information, and to receive the eight-week free offer, see <http://www.barrons.com/wsj_frame.html>. We're sure you'll agree that the combined power of these Web sites will be worth more than the subscription price we're charging. After all, more than 100,000 people already are subscribing to the Interactive Journal alone. Best regards, Howard Gold Neil Budde Editor Editor Barron's Online The Wall Street Journal Interactive Edition http://www.barrons.com/wsj_frame.html ======================================================================== If you do not wish to continue receiving these email alerts, send email to: stopmkt(a)lists.wsj.com If you have other questions, please call our customer service group at 1-800-369-2834. ======================================================================

1 0

Re: PGP security problems?
by Carolyn Turbyfill 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The email forgeries using bogus PGP keys to give the appearance that the messages are from PGP, Inc. and our employees are the result of a sick, twisted mind. Perhaps someone thinks they are being funny, but I, for one, am not amused. In order for the internet to function in a coherent, meaningful manner, people need to be able to have assurance that the email they receive accurately reflects the true source of the message and be able to verify the identity of the writer by checking for a valid signature. I urge the person or persons doing this to stop. Immediately! After I send this message to the cypherpunks list and receive it back in my email, I'm going to check the signature and the headers on it and if it turns out to be a forgery, like the others, then I'm going to be really, really mad. Carolyn Turbyfill <turby(a)pgp.com> "I'm not wearing any panties." -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBM7tNBu5XWImkXCQiEQLiggCfcJmJBkepBVEDtktoSMtTV97f0uoAoNCe 6IrX5/0nUBjpcIq24XtMFDlK =0CHj -----END PGP SIGNATURE-----

4 3

Re: PGP security problems?
by Michael J. Iannamico 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Please be advised that the message sent to the cypherpunks list purporting to be from Carolyn Turbyfill <turby(a)pgp.com> was a forgery. The PGP signature on the file, apparently from Marc Briceno <mark(a)digicash.com> may have been a forgery, as well, since it is unlikely that Marc would know whether or not Carolyn wears panties. It may be that the forger quite simply made a lucky guess. Oh! Not that I've been peeking up the women's skirts at the office. I'm in therapy now, and all of that is behind me. I must have just heard it from someone else in the office. Not that we're a bunch of perverts who sit around talking about that kind of thing, mind you. (I'd better shut up while I still have a job.) Oh! I know. This message must be a forgery, too. Yes, that's it...this message is a _forgery_! It's not me writing it, its that sick, demented, cypherpunk forger. I'm not backsliding. I attend all the meetings and I am taking my medication regularly. It's the _forger_, I tell you...the _forger_!!! Michael J. Iannamico <mji(a)pgp.com> "I'm feeling much better now." -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBM7tbH2vmZC203a9iEQJjjQCg1IICgkrGCdiydWAlqjbpoxQ5YEEAoNco CjhwCCVEz/ALHinvGNhJHvDT =sjFj -----END PGP SIGNATURE-----

1 0

We need more surveillance--a morality play about terrorism
by Tim May 17 Dec '03

17 Dec '03

[Some speculation about the current American attitudes about terrorism, about the changes in civil liberties to deal with the "terrorist threat," and even some comments about Jim Bell and his predicament.] I've been watching an HBO movie, "Path to Paradise," about the bombing of the World Trade Center in February 1993. It's quite well-done, as most HBO movies of this sort are. However, it is fairly heavy on a propaganda message which may give some insights into the likely changes in political freedoms in the United States. Some examples: * repeated examples of how the cops and FBI _could have_ arrested the Arabs if only the Constitution could be reinterpreted to allow arrests for possession of political pamphlets, guns (legally owned), etc. * "You mean Islamic radicals are free to preach their message of hate and violence? Unbelievable!" (This is a paraphrase...there were several such opinions expressed, where FBI managers express outrage that such things are permitted in the U.S.) * The niceties of getting wiretap orders were treated as ways to coddle criminals. * The ease with which citizen-units and others can order chemicals and suchlike was shown graphically, with the subtext being that this easy ordering ought to be stopped. (This was clear from the dramatic presentation.) * Unlike many such movies on criminal matters, there was very little discussion of civil rights, of the right of persons to move about freely, and so on. In short, a morality play about the hazards of letting people plot their crimes without proper surveillance. Not to sound conspiratorial, I suspect that this changed climate is consistent with the views of the FBI and White House, and that HBO is playing some role (unofficially, of course, and maybe not even consciously) in this new emphasis. (In the same way that the Rambo movies, to name just one example, resonated with American popular opinion in the Reagan era.) Speculation: This may also have something to do with the "no bail" predicament Bell now faces. The "stink bomb" he allegedly used in an IRS building could be Sarin gas, putatively, given the claims that he had Sarin precursors. Now we may mostly think he's harmless, but the combination of this new "let's get tough on terrorist plotters" mood, combined with the chemical stuff they found, his calls for killing of government agents, his apparent willingness to use chemical bombs (so the claim goes), all add up to a "get tough" outcome. Whether it stays this way past his arraignment in a few weeks is of course unknown. (Any magistrate or DA who watches this HBO movie might be wondering if releasing Bell would be turning him loose to launch a Sarin gas attack on his Fed enemies. I don't think this is a plausible threat, knowing what I know of Bell.) Something to think about. Between the World Trade Center bombing and OKC, there seem to be more people saying that certain civil liberties need to be given up to ensure security. Where have we heard this before? (Hint: back in Ben Franklin's day.) --Tim May, who's sorry he missed the display of firepower at the physical meeting today There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

THE BEST DEAL AROUND.... PERIOD!
by 52622216＠compuserve.com 17 Dec '03

17 Dec '03

{Removal instructions at bottom... } <><><> Attention Internet Marketers ... Look no further. <><><> 30 (thirty) MILLION PLUS E-MAIL ADDRESSES - ONLY US$149! (Please Note: Introductory offer - we encourage you to act soon.) WorldWide Marketing Group is pleased to finally offer to the direct marketer, the culmination of its intensive 6 month long project in compiling the single largest e-mail address list available anywhere - over 30 million e-mail addresses free of duplicates, one per line and alphabetically sorted - for only US$149! This is for real... there is NO catch! This massive list of AOL, Compuserve, Prodigy, Genie, Delphi, Microsoft Network and general Internet addresses, is split into 120 easily manageable ZIP files (unzip utilities included on CD) of 250,000 addresses each and is delivered to you on CD-ROM via regular mail. Sorry, but the sheer size of this list makes it unfeasible to deliver via diskette or allow downloading via FTP. The address files themselves consist of 1 address per line and are in standard ASCII text format - ready right away for use with any of the popular bulk e-mail packages available today. Also, this list is CLEAN! There are NO duplicates, NO embedded spaces, NO trailing or embedded white noise characters, NO garbage addresses with more than one '@' character, NO embedded parentheses '(' or ')', NO 'Postmaster' addresses, NO addresses beginning with non-valid characters (..addresses must begin with 0-9 or a-z), and all are in lower-case. The list itself is *not* categorized or targeted by any geographic region or demographic in any way. It is simply a HUGE general list sorted in alphabetical order for the best price on the internet! Indeed, this is absolutely the *best* offer around for the direct marketer, and will finally put the little guy on even ground with even the biggest bulk e-mailers! Bulk e-mail is still in its infancy and is the new wave in cost-effective global marketing. This huge list offers a whole world of vast potential sales for you and your products - get on board now before you find yourself left behind. We wish you success and we'll see you at the top! To order in a secure fashion online via credit card (VISA/MasterCard/AMEX) just go to: http://americapro.com/worldwide/ Or to order via regular mail, please send bank draft, money order (..sorry, no personal or business cheques please) or your credit card information to: Worldwide Marketing Group Box 48029 Bedford, NS Canada B4A 3Z2 (Please allow up to 1.5 to 2 weeks for delivery.) Thank you very much and sorry for the intrusion... Sincerely, Worldwide Marketing Group worldwide(a)writeme.com worldwide(a)savetrees.com (for fastest response, send message to both) P.S: If you have received this message more than once, we apologize. Our mail program accidentally deleted our remove list. For removal from any future mailings, please send an e-mail with REMOVE in the subject field to : sandk(a)answerme.com We regret that we are unable to supply a telephone contact number. Due to the harassing calls we have received from anti-bulk e-mailers, we must withhold our phone number. We apologize for the inconvenience.

1 0

Re: Responses to "Spam costs and questions" (long)
by Ross Wright 17 Dec '03

17 Dec '03

On or About 6 Jun 97 at 23:41, Dr.Dimitri Vulis KOTM wrote: > If you set up your mailbox to accept e-mail promiscuously from > anyone, then anything sent to it is "consentual". Exactly. And if you put an e-mail address on a web-site, it's fair game. You consent to have me, at least, comment. > The onus is on the recipient to filter out what they don't want (or And not the onus of the Government to save us from the nasty bad evil spammers. > to "filter in" only what they want, which is how I think we'll end > up). Such filtering takes less time+effort than "repeated > cease-and-desist notes". Like any spammer listens to those anyway. I was sent so many of those when I started, it didn't scare me at all. But now I'm a reformed, kinder, gentler spammer. Most times they don't even know they've been spammed. On or About 7 Jun 97 at 13:53, Dr.Dimitri Vulis KOTM wrote: > talk about this (and I do hope Ross will will this of interest!), > let's You bet. I'm bummed that I missed out on this whole conversation, it's a week old now. On or About 7 Jun 97 at 13:53, Dr.Dimitri Vulis KOTM wrote: > Also instead of just building the biggest possible list of e-mail > addresses, they build a targeted database, keeping track where a > particular e-mail address was found. That's right. I've got different lists for the different places that I harvested them from. > Suppose a person subscribes to > a "porsche owners" mailing list, and goes to an investment- related > channel on one of the IRC servers. In no time he'll be getting "junk > e-mail" related to the interests he expressed - possibly even saying > "I'm writing you because I saw you on the #invest channel on > Tuesday, and I want to tell you about this hot new penny stock" > > Left to itself, the market will stabilize and the occasional > unsolicited bulk e-mail will be even less of a nuisance than it is > now. Please. I beg all of you just to let it settle it's self. No regulation is needed, or wanted. It's not that bad. On or About 7 Jun 97 at 13:37, Declan McCullagh wrote: > Such a law would be unconstitutional, I believe, and unjust. It's > compelled speech: the government forcing you to say something. I don't want anyone telling me what I have to put into the subject field of my bulk e-mailings. > Depending on how it's worded, it could also impact core political > speech, something the courts generally don't like. > > -Declan On or About 8 Jun 97 at 5:36, Declan McCullagh wrote: > I don't think commercial speech should be treated as second-class > speech. But my position is hardly surprising. > Declan, thanks. You are right that speech is speech. On or About 9 Jun 97 at 23:45, Kent Crispin wrote: And here's where it degrades into discussions about ads and sales tactics and all that stuff that the general public is so frightened of. It's like salesmen are the reviled, untouchables in our society. Needed but hated. These topics always fall to the level of the morals of given marketing strategies. That's not what this is about. It's about freedom to tell people about a product in any way that you can. > > When a tobacco company says in an ad, "Joe Camel is cool", what > > kind of contractual obligations does it assume? > > None. I did not say that all ads were part of a contract. > > > Have you ever bought a used car, Kent? Have you seen the language > > in the contract that throws out whatever promises the saleguy made > > that are not a part of the contract? > > Yes, but never from a used-car lot, always from people I know. I > have =-=-=-=-=-=- Ross Wright King Media: Bulk Sales of Software Media and Duplication Services http://www.slip.net/~cdr/kingmedia Voice: (408) 259-2795

1 0

Re: Impact of Netscape kernel hole
by Ross Wright 17 Dec '03

17 Dec '03

On or About 13 Jun 97 at 18:35, Tom Weinstein wrote: > week for 4.0. A fix for 3.x will follow once we have 4.0 fixed. Saw this post to Cypherpunks. I hate to sound less than savvy, but I use 2.02. You guys are gonna help us who refuse to upgrade, right. Ross =-=-=-=-=-=- Ross Wright King Media: Bulk Sales of Software Media and Duplication Services http://www.slip.net/~cdr/kingmedia Voice: (408) 259-2795

7 7

Netscape Update
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

Robert Hettinga wrote: > All this reminds me of something Tim May, Eric Hughes, and others have said > before. Once you've gotten to the point where loss of security equals, in a > very literal sense, loss of money, the incentive to publicize any given > security hole starts to go away. The Netscape PR department is no doubt preparing to spin the "bug fix" into a "major update." The fact of the matter is, the software does exactly what it was designed to do. The fact that those who are "out of the loop" found out how to use that designed feature does not make it a "bug." When the list got spammed with email from 10,000 Laker fans named "Bubba," I blasted plaidworks.com for their rudeness in trying to place all the blame on "hackers" when the fact was that they left their system wide open to abuse for the sake of convenience and profit. Similarly, the government and corporations want systems designed to allow them access to all available information passing through the internet system and then cry "abuse" or "security bug" when individuals discover how to use the design to their advantage. Calling the Netscape feature a "bug" merely serves to draw attention away from the fact that the software was intentionally designed in order to facilitate snooping (ala Clipper chip?) and that indicates that there have been people who have known how to take advantage of the feature since its implementation. Do the people who instituted the design and development of this snooping feature all have "Good Guy" stamped on their forhead? Sure they do... TruthMonger

2 1

Re: We need more surveillance--a morality play about terrorism
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

Tim May wrote: > I've been watching an HBO movie, "Path to Paradise," about the bombing of > the World Trade Center in February 1993. It's quite well-done, as most HBO > movies of this sort are. > > However, it is fairly heavy on a propaganda message which may give some > insights into the likely changes in political freedoms in the United > States. > In short, a morality play about the hazards of letting people plot their > crimes without proper surveillance. > > Not to sound conspiratorial, I suspect that this changed climate is > consistent with the views of the FBI and White House, and that HBO is > playing some role (unofficially, of course, and maybe not even consciously) > in this new emphasis. The movies have long been a source of propaganda for LEA's of all types and descriptions, as well as the military. You want co-operation? You want to get bargin rates on access to city (or military) facilities, streets, vehicles, etc? If so, then you'd better be prepared to present an "acceptable" script to those who make the decisions. The military and LEA's know that they are in a position to save movie producers millions of dollars through their co-operation and producers know that an acceptable script is the ante that may well make the difference between their movie being produced or canned. Cop shows are the rage on TV at present, and if you can find a major force of real-life cops that call everyone "Sir" and treat them like humans, I'll kiss your ass, but that's what we see on the Tube, anyway. It would cost a fucking fortune to produce a similar show which reflected the reality of how LEA's treat the citizens. I have a friend who was casting director for "Miami Vice" and I recall her telling me at an early point in the series that they were being forced, for financial reasons, to "clean up" the scripts so as to make the cops more sympathetic and reputable characters. Face it, we live in TV World. We didn't get an actor as our President by "accident." We elect "sound bytes" and "charisma." We elect "plausible deniability" and "non-smoking guns." We are sold fear and violence both as news and entertainment, and we "buy" it as our reality. Then our fear is used to sell us products such as loss of privacy and freedom. This is the consumer age, and it is driven by advertising and profit. In the Media Age the marketing term "find a need and fill it" has become "_create_ a need and fill it." There's big money in fear and violence. TruthMonger

1 0

Re: Netscape Exploit
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

Tom Weinstein wrote: > Lucky Green wrote: > > > > >Here is a sample it isn't complete but you get the basic idea of what > > is > > >going on > > ><HTML><HEAD><TITLE>Evil-DOT-COM Homepage</TITLE><HEAD> ... > Yeah, that's pretty cool. Too bad it doesn't work. If you wanted a version that works you should have checked out the RCMP site that one of the Truth Mongers (or spin-offs) pointed to on the list a while back. It had a nifty bit of code which showed you the contents of your own hard drive and grabbed a copy for their own use. There was also a site on sympatico.ca which had the same code, only the link read "Click here to read the Whitehouse hard drive." If you followed further links on the site some would take a long time to load and if you paid attention you could guess that your hard drive was being accessed. I turned a friend onto the files I saved from the sites and I assume he hacked at least one of them to get the executables that they were running since he bought me a case of Budweiser for sharing the information with him. I have noticed in surfing a variety of hacker URLs that sometimes it takes an awfully long time to load what turns out to be a fairly simple screen and there is invariably a lot of disk activity going on in these instances. I don't worry about what may be taking place since I bought a used computer specifically for internet cruising so I can enjoy myself instead of fretting about security issues. I put a lot of files and directories on my hard drive with names like "Offthepigs" and "assass.plot" and cruised around the RCMP site from an anonymous account. I used the name of a local cop as the ostensible owner of the machine and author of the files. (I _do_ hope they were paying attention!) There was an article on computer security on the RCMP site which spoke quite openly about the potential of technology in general and remailers in specific for mounting sting operations. (I will try to dig up the URL for it and pass it along. It should be in the list archives too.) ~~~~~~~~~ Not a cop ~~~~~~~~~

1 0

Re: e$: Skins vs. Shirts
by John Young 17 Dec '03

17 Dec '03

Tom Weinstein wrote: >Just to be clear, we didn't give the blackmailer any money. As Mike >Homer put it: "We don't bargain with terrorists." That's rather inflammatory name-calling. Sounds a bit Kallstromish, no? Surely Homer hasn't been hanging with the CT-hypers. However, it confirms Tim's surmise that we're facing an inflation of terrorist-spin to whatever feeds nightsweats of monsters coming to Ballmer our babies -- of flesh, markets or surveilling features. Still, is it any surprise to the burgeoning snoopers (prurient, commercial or law) that most personal computer disks are as empty of content as those of data banks, government, military, corporations and other XXX sites? They're stuffed with make-work idleness, slightly Dilberted with lonely-guy infowar & -love games of fantasies of what will never be. Recall Mitnick's find on The Well, Shimomura, the telcos and the feds -- lots of empty data and wannabe-prattle. In that case, the Feds and the victims conspired to script a film to make the nothingness seem valuable, when what they really feared that it would be shown to be worthless junk. Not that NSCP would sink to that kind of RSA Schwartau TLA insecurity.

2 1

I love http://www.intraday.com/spam/spam/spam
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

It's hilarious!! Many thanks to whomever put it up --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Key Ass-crow
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

Paul Bradley wrote: > > Can someone explain the difference between key recovery and key > > escrow? > Key escrow is where your keys are held by one or more trusted and > supposedly independent third parties, on reciept of a court order they > would release the keys. Kind of like trusting a friend not to bugger you while you are drunk and passed out. (But he can't prevent the police from hauling you in for public intoxication and locking you up with someone who might do so.) > But in the end it all comes down to GAK (government access to keys), same > shit, different name. This is much like having a Dominatrix who chains you to the toilet and brings out a mixed bag of utensils and instruments which are about to be used for purposes that are a far cry from what they were created for, and to access areas that Nature never intended to be subjected to large amounts of sunshine. Perhaps someone should come out with a GAK T-shirt which has a citizen "assuming the position" while a GAK cop stands behind him with a crowbar stuck halfway up the citizen's ass, and saying, "If you don't have anything to hide, then you have nothing to worry about." AssMonger

2 1

Re: IBM sues critics?
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In <1.5.4.32.19970614201321.009a8b38(a)pop.pipeline.com>, on 06/14/97 at 04:13 PM, John Young <jya(a)pipeline.com> said: >Secret Squirrel wrote: >>According to a usually reliable contact in a position to know, IBM Friday >>filed a liable suit against the 11 authors of the study >>titled "The risks of key recovery, key escrow and trusted third-party >>encryption" plus their employers and the Centere for Democracy and >>Technology, which sponsored the report. According to my contact, IBM >>feels that the report directly targets their own key recovery system, >>and falsely implies that it isn't reliable. They are asking for >>unspecified damages. >If this report is true it's worth taking a look at IBM's policy paper >"The need for a global cryptographic policy framework" to understand why >the key study report is such a threat to >Blue's global market strategy: > http://www.ibm.com/security/html/pp_global.html >IBM's economic incentive to attack the report is substantial, not least >because it hopes to garner the lion's share of global GAK -- >not that that's news. Has there been any conformation on this? I would like to get in touch with some of my contacts at IBM but would like to have some info on this first. Thanks, - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBM6VncI9Co1n+aLhhAQE7VQQAuDOBM3aqTCbaK/5nPLl1TLaAkHWSIC4h /eOJFw7/EJ1ZQWGj5lxHg2es6+MFSrue5/KnOn0evsJtLnQjX4icYyhzhao2cXYY 9EPaew0FMLHRtJrB0sXlWOeyteRqFstVEkQb7jtqUqxbjNU1A/FZlbr7dclRZ56B nVTBAqZBOzA= =tD2h -----END PGP SIGNATURE-----

2 1

eDrugs / Re: e$: Skins vs. Shirts
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

Robert Hettinga wrote: > At 8:21 am -0400 on 6/15/97, John Young wrote: > > > ... Sounds a bit Kallstromish... > > Surely Homer hasn't been hanging with the CT-hypers. > > ...an inflation of > > terrorist-spin to whatever feeds nightsweats of monsters coming to > > Ballmer our babies -- of flesh, markets or surveilling features. > > .......slightly Dilberted with lonely-guy > > infowar & -love games of fantasies of what will never be. ... > > Not that NSCP would sink to that kind of RSA Schwartau TLA insecurity. > > Wow. I actually understood all that... > > The scent of the cogs is unmistakable hereabouts. Hetting and Young both pass on a variety of highly informative and exceedingly normal, reality-based material for the most part. Then, out of the blue, they post Taoist-Kerouac, acid-flashback missives which indicate that the Orphan Zombies roaming the computer Nether- world have not yet managed to steal their souls. Since John and Bob's psyche-meanderings often seem to occur within the same time-frame I have concluded that they both have the same drug connection. So...did you bring enough for everybody? DrugMonger

2 1

Blackmail / Re: e$: Skins vs. Shirts
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

Tim May wrote: > At 1:26 AM -0700 6/15/97, Tom Weinstein wrote: > > >Just to be clear, we didn't give the blackmailer any money. As Mike > >Homer put it: "We don't bargain with terrorists." > (What the Danes offered was a straight buiness deal, albeit made weirder > and more frantic by the constraints of time, publicity, and worldwide > attention. Still a business deal, though. When Collabra wanted X dollars to > be acquired by Netscape, was this also "terrorism"? The term "terrorist" > hardly applies in business deals.) As Tim almost points out, people who use their own time, resources and money to examine your product and discover weaknesses in it which can be corrected in order to make it a better product hardly qualify as blackmailers (unless a company considers that their in-house QA staff is "blackmailing" them to receive a salary). (Pay attention, Netscape--major CLUE coming up...) It is not the consumer or user's job to keep track of what the company who produces the software deems to be "proper" use of the product they have bought. Likewise, it is not the job of computer analysts and researchers to search out the flaws in a profitable software and give away their knowledge so that the producer of the software can maintain or increase their profits. If the people who discovered the flaw had wanted they could have chosen to sell their knowledge to Microsoft for probably a very substantial sum. Can you imagine the embarassing position Netscape would be in if Bill Gates made a press announcement about the Netscape flaw and informed the public that a "Netscape fix" was available at microsoft.com? TruthMonger

2 1

SnailMail Ver. 1.0 / Re: Impact of Netscape kernel hole
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

David E. Smith wrote: > On Sun, 15 Jun 1997, Tom Weinstein wrote: > > Sorry, but we don't have any plans to respin 2.x at this time. If we > > get enough requests for it, it might be possible to change our mind, > > though. > > I still have a copy of MCOM/Netscape Navigator 0.94 around... does the > bug exist this far back, or am I going to have to start using Cello, > or something equally obscure? SnailMail Version 1.0 will soon be coming out. The product includes a pen, paper, envelopes and instructions on how to purchase stamps. While it does not offer perfect security, the chances are that the only person who might snoop through it is your postman. Since he is probably banging your spouse, he's practically a member of the family, anyway. SnailMail Version 1.0 also includes letter-size envelopes so that you can print out a copy of your Web page and mail it without bending or folding it. SnailMonger

2 1

Re: Spam Libs (Frauenfelder on HotWired)
by Rich Graves 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- C Matthew Curtin <cmcurtin(a)research.megasoft.com> wrote: > * Sometimes my mail relay seems to choke on spam, and sends back a > packet with a MSG_OOB bit sent to the host that originated the > spam. Gee, dunno how that happened. Sometimes if the host stays > up after that, it's followed by an oversized ping. Shucks, that's > too bad when that happens. Maybe one day I'll track down that, uh, > bug and ... fix it. Damn... this bug must spread like the Good Times Virus. Mine just started showing one of these symptoms, too, but only when approached by certain domains (it being impolite to hit people who've been framed). Have you isolated any code fragments that might help a virus scanner detect this problem? This must be stopped, and I think full disclosure might help. - -rich http://www.stanford.edu/~llurch/ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQBVAwUBM6RU7pNcNyVVy0jxAQHC9wH/Wi0lty3BWv4NjDYbmoNL2KZrqEkr1LTq uJBCTW5xwgSnZlZOy3ZEW1+qHTfC3rvTEXQhUjM1Fdk/4yZC5iuoQA== =YPKa -----END PGP SIGNATURE-----

1 0