December 2003 - cypherpunks-legacy

whit diffie on national radio
by Russell Nelson 17 Dec '03

17 Dec '03

FWIW, Whit Diffie is on NPR's Talk of the Nation RIGHT NOW. Find your local NPR affiliate, usually in the low end of the dial. -- -russ <nelson(a)crynwr.com> http://web.crynwr.com/~nelson Crynwr Software supports freed software | PGPok | Freedom is the primary 521 Pleasant Valley Rd. | +1 315 268 1925 voice | cause of Peace, Love, Potsdam, NY 13676-3213 | +1 315 268 9201 FAX | Truth and Justice.

1 0

distributed cryptographic attack demo
by Jon Cooper 17 Dec '03

17 Dec '03

hi, i'm trying to do a demo of a distributed object technology and it seems to me that many cryptographic attacks would be facilitated by our approach. do you have any ideas for what a neat distributed effort might be? the ones i've thought of just don't seem too exciting: * GNFS of RSA modulus * attacking SSL * brute-force RC5 attack i'm looking for something that would be a sort of viscerally engaging attack, something that will make people who aren't necessarily number theorists or cryptographers take note. any input would be helpful! *jon PS - note that I'm not on cypherpunks so a direct reply would be most highly appreciated.

2 1

Eureka! Tue Feb 3 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Tuesday's issue of Eureka! PINKBITS Voted the #1 Teen (18+) site on the web, this is one pay site you don't want to miss out on! Here's just one quote from a satisfied member: "This site delivers awesome value. I have been a member of 3 other sites, and this is the best by far. It has the best pics, more live video, younger girls and more hardcore cumshots than the other sites put tog- ether". And we have negotiated a special FREE trial member- ship for Eureka subscribers, so don't take our word, go see! PinkBits .. http://207.33.10.198/cgi-bin/gate1/pbm/pb_0024/0 PLEASE VISIT THIS FINE EUREKA! PARTNER SITE Playgal - No.1 in Internet Hardcore! http://www.playgal.com/playgal/banner_eureka.html Playgal presents FREE LIVE FUCKING, and over 2,000 FREE XXX MOVIES! XXX 4 EVERY 1 Overall this site looks pretty good. Click on the View Free Sample Pics to get to the good stuff. Once over that fence your in! There are thumbnails of some hot looking babes! Wet bush filled with hard dick. Not a bad combination! XXX 4 Every 1 .................... http://www.xxx4every1.com DO ME LIVE Do me too! Do this, do that and do the other. If she lets you! This is a paysite but they have a pretty juicy free picture section. Girl on girl, shaved pussy, dildo, panties, and clit rubbing images. Stroke your browser over there! Do Me Live ........................ http://www.domelive.com/ CYBERJOY Basic text links that deliver! Check out first time, that is one big black log, and she is enjoying it! Cum shots and links that will take you all over the place. See the Hungry for pussy picture. That tramp looks possessed! Take a look. Cyberjoy .......... http://www.cyberjoy.inter.net/adult3.htm ADULT CHARTS Here is one to see. Go there right now. Tons of free pix! Click on the free pictures area and your in. Take your pick of anal, cum shots, oral sex, girlgirl, teens, group action, I could go on more but you get the idea. High quality jpeg images that load quickly! These are some of the best free porno pix on the internet. Grab your mouse and get surfing! Adult Charts .................... http://www.adultcharts.com BRAND NEW - HOORAY! THE ADULT SEARCH ENGINE Now adult surfers have our very own search engine, directly designed to only list adult sites, and so run fast because all other types of site are ignored. Check it out today! Hooray! -----------------> http://eureka.abc-web.com/hooray/ FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here --> http://www.netscape.com/download/ College teens -----> http://207.240.169.122/teens/start.html CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Adult/Sex Chat -----------------> http://137.39.63.229/chat/ General/Fun Chat -------> http://137.39.63.229/chat/funchat/ THE BEST PHONE SEX NEW!!!! LD Call only! - Live Hot Girls!!!!--->1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline-------->1-800-644-8779 FREE: Live 1-on-1 (international call only)--->011-678-77416 AMATEUR SITE OF THE DAY Octavia: "Caught you looking" is the motto of this sweet 23- year-old coed's web page. She loves to show off, and claims that she gets off thinking about all the horny guys checking her out. Her photos exhibit her exhibitionist streak and are of extremely high quality. Get caught looking at Octavia - it's well worth sneaking a peak! ---------------------------> http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY T-Bone's Sex Club: T-Bone gives you a new selection of erotic stories illustrated with nasty hardcore pics! Last week was Slut Wife week... what will it be this week? Visit T-Bone and find out! ............... http://www.rawsexx.com/ DAILY CARTOON ----------> http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Every day we bring you an exclusive choice pic of a famous adult porn star. And we must tell you - these pix are abso- luletly brilliant! ---> http://www.xxxadultstars.com/eureka/ GAYEUREKA! The gay newsletter is now available. You can get it here! Gay Eureka! ----------> http://eureka.abc-web.com/gayeureka/ EUREKA! TRANSLATIONS As well as English you can now choose any of these languages DEUTSCH ------> http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ------> http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ----> http://eureka.abc-web.com/eureka/francais.htm ITALIANO ----> http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE > http://eureka.abc-web.com/eureka/portuguese.htm TODAY'S FREE PIX Pic 1 --------------------------> http://137.39.63.229/?030 Pic 2 --------------------------> http://137.39.63.229/?031 Pic 3 --------------------------> http://137.39.63.229/?032 Pic 4 --------------------------> http://137.39.63.229/?033 Pic 5 --------------------------> http://137.39.63.229/?034 Pic 6 --------------------------> http://137.39.63.229/?035 Pic 7 --------------------------> http://137.39.63.229/?036 Pic 8 --------------------------> http://137.39.63.229/?037 Pic 9 --------------------------> http://137.39.63.229/?038 Pic 10 --------------------------> http://137.39.63.229/?039 ============================================================ TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS EMAIL RIGHT BACK TO US. ============================================================

1 0

distributed computing
by Jon Cooper 17 Dec '03

17 Dec '03

I'm in the planning phase of a demo which should demonstrate the power of a distributed object technology which I'm working with. Any ideas for neat crypto-related distributed computation demos would be much appreciated. I've thought of: * brute forcing RC5 (lots of people are doing this already) * factoring attack on RSA modulus * Certicom's ECC challenge But I'm looking for something with more of a sort of gut-level appeal. Cracking SSL packets might be good. Hrmm. thanks for any input ... *jon

1 0

No Subject
by Mix 17 Dec '03

17 Dec '03

subskribe cyferpunks bill(a)whitehouse.gov

1 0

Re: The Continued Attack on Cash (Was: "The Right of Anonymity"...)
by Black Unicorn 17 Dec '03

17 Dec '03

At 06:07 PM 2/2/98 +0000, Attila T. Hun wrote: > I did-- tried to lay $14K out for a Mercedes (25 years ago). > they wouldnt take it. so I went and picked up two $7K > cashiers from two different banks. same thing with a pair > of Lycoming IO540 aircraft engines: 2 8s and a 9 --stay > under the $10K transaction. Careful. This may well be illegal now. Structuring transactions to avoid reporting requirements is a felony. (I'm not on cpunks, mail me).

5 4

An update on MS private key (in)security issues
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

A fortnight ago I posted a message exposing a number of weaknesses in the way various Microsoft security products handle users private keys. A few days before I was due to vanish for a security conference (where it was very difficult to contact me), the article started getting a bit of attention. This is a general response which clarifies several issues relating to the original message. First, Russ Cooper (moderator of the NT Bugtraq mailing list) made some wildly inaccurate claims about the article. I've had a bit of feedback which indicated that it wasn't even worth dignifying this stuff with a response but I've written one anyway, at least for the original NT Bugtraq messages he posted (the stuff he put on a web page is just more of the same). You can find it at http://www.cs.auckland.ac.nz/~pgut001/pubs/breakms2.txt (even if you don't want to plough through the whole thing, you might want to read the last two paragraphs for a giggle). After this, Microsofts spin doctors leaped into action and posted a response to the article. I've replied to this one in a bit more detail, since it raises several important issues. Comments on Microsofts Response ------------------------------- >Microsoft's Response to Recent Questions on the Recovery of Private Keys from >various Microsoft Products >[...] >With the exception of the details about a possible PKCS-12 attack, all the >issues raised in the recent discussions are specifically aimed at Microsoft's >base CSPs, not at CryptoAPI. The base CSPs are the royalty-free, >software-based CSPs provided with Windows NT 4.0, Windows 95, and Internet >Explorer. These attacks do not apply in general to other CryptoAPI CSPs and do >not indicate any fundamental concerns with the security of the CryptoAPI >architecture or applications built upon it. This statement is mere obfuscation. As Microsoft have said, every single (recent) copy of Windows NT, Windows'95, and MSIE (and, presumably, other products like IIS and Outlook, which rely on them) ship with these CSP's, therefore every recent system comes with this security hole installed by default. In addition, the CryptExportKey() function is a standard CryptAPI function, which is described by Microsoft with the text "The CryptExportKey function is used to export cryptographic keys out of a cryptographic service provider in a secure manner" (obviously some new use of the term "secure" with which I wasn't previously familiar). There's nothing in there that says "Only the Microsoft CSP's support this" (some may not support it, but by Microsofts own admission the default used on any recent system does indeed exhibit this flaw). >Microsoft products do not "store" private key material using PKCS-12, contrary >to recent descriptions on the Internet. I was unfortunately somewhat unclear in my article, I've fixed up the online version at http://www.cs.auckland.ac.nz/~pgut001/pubs/breakms.txt. To summarise, if you want to get at an exported key stored on disk, you can use the pre-4.0 key file/PKCS #12 key file flaws. If you want to get at the current users key, you can use the CryptExportKey() flaw. >The example of breaking a PKCS-12 data blob, which was given in discussion on >the Internet, is not an attack on the "weak" cryptography of PKCS-12. Rather, >it is simply a dictionary attack (long known and well understood in >cryptography), This statement is accurate. As Microsoft have said, dictionary attacks have been known to the computer industry for a long, long time (several decades). For example the Unix password encryption uses 25 iterations of DES to protect users passwords from dictionary attacks (this is rather inadequate now, but was appropriate more than two decades ago when it was introduced). If this is a well-known flaw which the entire industry has known about for decades, why are Microsoft's very latest "security" products so extremely vulnerable to it? As I mentioned in my writeup, I published an attack on the exact format used in older MS products more than 1 1/2 years ago, but Microsoft made no attempt to fix this problem at the time. It wasn't until I published the current writeup that they finally addressed it. >One statement by the original poster argues that Microsoft managed to design a >security format that actually makes it easier to break into the protected >data. As stated above, a number of well respected companies were involved >extensively in the design and review of PKCS-12 before it became a standard. The problem is that Microsoft ignored the other companies recommendations for increasing security. I'll refer people back to the original writeup for mention of the various security features which were added to PKCS #12 and subsequently ignored by Microsoft. PKCS #12 is just a basic modification of PFX, which was a purely Microsoft invention, and Microsofts implementation of PKCS #12 does indeed make it very easy to perform the attack I described (you'd have to read my writeup for the full technical details in which I describe each individual flaw which, as each is exploited in turn, make it progressively easier and easier to recover a users private key). In addition (as I mentioned in my original message), Microsoft use RC2/40 to encrypt the private keys, which means that no matter how good a password you choose, the default PKCS #12 format private key produced by MSIE can be recovered in a few days with fairly modest computing power. There already exists a Windows screen saver which will recover RC2/40 keys for S/MIME messages, and the prize of an RSA private key is a much higher motivating factor than the "Hello, how are you?" typically found in an S/MIME message. As Microsoft point out, Netscape can indeed handle RC2/40-encrypted files, however they usually use triple DES and not RC2/40 (they encrypt the private key components - the really valuable part of the PKCS #12 payload - with triple DES and the other odds and ends with RC2/40). Since Netscape also iterate the password and MAC processing, they aren't vulnerable to the attacks which the Microsoft software is vulnerable to, even though both are based on the same PKCS #12 standard. >Exploiting Internet Explorer > >One of the fundamental requirements to perform any possible cryptographic >attack discussed in the recent postings is the assumption that a malicious >entity could somehow access to data on a user's computer system, without the >permission or knowledge of the user. This is a large leap of faith. > >Users that are using Public Key Certificates today are generally sophisticated >and savvy users, Bwahahahahaha! Sorry, I guess I should explain that in more precise terms. Now I'm not trying to claim that the average Win95 user isn't as sophisticated and savvy as Microsoft seem to think, or that relying entirely on the sophistication of the average Win95 user for security is a dangerous move. However these statements do seem to completely ignore the reality of the situation. Let me go into the background of the weaknesses a bit further. When I tested the weaknesses, I asked some "guinea pig" users to send me their exported keys, with the promise that I'd destroy the keys and not keep any record of where the keys came from and so on. Because of this I can't give exact figures, however here are a few data points: - More than half the keys (I can't remember the exact figure) were in the older, pre-4.x format. This indicates that the majority of users (or at least of the crypto-using guinea pigs) are still running old versions of MSIE which contain a number of widely-publicised problems, including precisely the weaknesses required to run arbitrary code on the machine or read files off the machine. One of the respondents commented that the key was "the key I use with Outlook", I'm not sure what that says about the origins of the key. Another key was one used with IIS for a web site which runs an online commerce service that processes credit-card based orders. This must have been an older version of IIS since the key was in the pre-4.x format. - When I asked two of the people why they were still using an old version, the responses were "It came installed with the machine when we bought it" and "It does what I want, so I haven't upgraded". I expect most users of the older version would have a similar reason for using it. In a company of 20 people (some of whom participated in this test), only two were running 4.x. These people are all highly competent software developers (presumably this includes them in the group of "sophisticated and savvy users" which MS were referring to), however none of the remaining 18 wanted to risk installing MSIE 4 because of the extent with which it messed with their system, possibly jeopardising their development work. Therefore most of these "sophisticated and savvy users" were still running old, insecure versions of MSIE, and weren't going to upgrade any time soon. - For the two remaining 4.x users in the company, both are still using straight, unpatched 4.0 because they considered it painful enough to download all of 4.0 and they didn't want to bother with an upgrade just yet. This makes them vulnerable to the bug pointed out in the l0pht advisory. - When I informed one of the guinea pigs of the recovered password, his response was "Now I'll have to change my login password" (the others generally restricted themselves to some variation of "Oops"). This comment confirms that users do indeed sometimes use their login password to protect their private keys, so that a successful attack recovers not only their private keys but their login password as well. - One respondent commented that most of the code they downloaded from the net was unsigned, but they ran it anyway. This is probably typical of the average user. Although I've only been back for two days, I haven't yet managed to find anyone who has applied all the latest patches and kludges to their system which makes them immune to these problems. This includes at least one person who has a code signing key which could be used to sign malicious ActiveX controls. Therefore all of the guinea pigs could in theory have their private keys stolen. >Attacks against Authenticode signing keys > >[...] > >However, it is extremely unlikely anyone could be successful with a simplistic >strategy for stealing Authenticode signing keys and then using them. See my comments about about this. I could, right now, obtain at least one Authenticode signing key with which I could create a malicious ActiveX control. I'm sure that if I were serious about this I could obtain a number of others. >Second, anyone signing code using Authenticode technology is extremely >unlikely to leave their key material sitting on an end user machine routinely >used for browsing the Internet. I see no basis for this claim. Every developer I know uses the same machine for both code development and web browsing (in fact a number of users keep a copy of MSIE or Netscape permantly running on their machine so that they'll have something to do between compiles). Microsoft's statement seems to imply that users will be running two machines, one dedicated entirely to web browsing and the other to code signing. I find this extremely unlikely. >Attacks on Encrypted Key material > >There is some confusion over the algorithms and methods that Microsoft uses to >provide protection of encrypted key material in Internet Explorer when using >the standard Microsoft base CSPs. There were changes between Internet Explorer >3.0x and Internet Explorer 4.x specifically to address any possible concern. And the astounding thing was that, despite a complete rewrite of the code, the newer version offers no extra security at all, as my article points out. Both are equally weak, you just need to attack them in slightly different ways. >Key export attacks > >The original Internet posting raises concern about the CryptoAPI interface >CryptExportKey(). This function is fully documented and does indeed export >private key material in an encrypted format. The statement from Microsoft omits one important point here. Myself and another security researcher have been trying to tell Microsoft for more than four months (probably a lot longer, I didn't log the earlier mail) that this is a very serious security flaw. In all cases Microsoft's response was some variation of "We don't see this as a flaw". It wasn't until my warning was published that they finally addressed the problem, and even in this case (the program to set the CRYPT_USER_PROTECTED flag) it's only a quick hack to plaster over the cracks and allow them to declare the problem fixed. In fact it doesn't fix the problem at all. I'll post details in a fortnight or so when I've had time to test things, please don't ask me about this until then. >The presence of the CryptExportKey() function is to support functionality such >as migrating key material between machines for a user or creating a backup >copy of a key. It should be noted however, that many CSPs, including most >hardware based CSPs, do not allow exportable private keys and will return and >error in response to a CryptExportKey() request. However the CSP's installed by default on every recent system do allow the export. The fact that there may exist, somewhere, an implementation which doesn't exhibit this flaw really doesn't help the majority of users. >The posting also asserts that an ActiveX control could be downloaded from a >web page, simply ask for the current users key, ship the key off for >collection by an unscrupulous person, and then delete itself without a trace. > >If users run unsigned code, or code from an unknown origin, a number of >unpleasant things can happen. This could indeed occur if the key as been >marked exportable and the CRYPT_USER_PROTECTED flag is not set. Which was, until my warning, the automatic default action for Verisign, and is still the automatic default for many other CA's. This means that keys generated right up until a few days ago (and in some cases keys being generated right now) have, by default, no protection whatsoever. In addition I've just been sent mail to say that CRYPT_USER_PROTECTED still isn't the default with Verisign, you have to click a box asking for extra security or you get the usual default of no protection. To add to the confusion, a lot of documentation (including the Microsoft Developer Network (MSDN) online documentation on Microsofts web site) describes the CRYPT_USER_PROTECTED flag with "The Microsoft RSA Base Provider ignores this flag", which can cause programmers to leave it out when it is *essential* it is always included. Incidentally, MSDN also claims that Microsoft are "supporting" PFX, which is in direct contrast with the claims in their press release. >There was also discussion of 16 dialog boxes appearing to the user for their >password if the CRYPT_USER_PROTECTED flag is set. Certainly asking the user >too many times would be better than too few times, however in our tests, under >extreme (and uncommon cases), a user might be asked for their password at most >four times when a key is used with the Microsoft base CSPs. Perhaps the claim >came from an early beta release. The 16 dialog boxes problem was present in 4.0, and it's been confirmed as still being present in 4.01. This was apparently verified on Microsoft's own CryptoAPI mailing list (the claimed "beta" version was actually MSIE 4.0 final). >Microsoft is constantly working to improve the security of our products. Myself and another person had been trying to convince Microsoft for more than four months that things like CryptExportKey() are a major security hole. Their response each time has been some variation of "We don't see this as a problem". It simply wasn't possible to get them to acknowledge these flaws, therefore my posting of the details wasn't "irresponsible" (as some have claimed) but a necessity in order to get them fixed. When I pointed out several months ago that Microsoft were using, in their pre-4.x products, an exported key format which was identical to the one which I broke more than 1 1/2 years ago, their response was "What's the problem with this?". I would have liked to have included URL's for the CryptoAPI mailing list archives to prove that Microsoft were warned of these problems some time ago, but the CryptoAPI archive seems to be temporarily offline. Risks of a Private Key Compromise --------------------------------- One or two respondents have tried to play down the seriousness of a private key compromise, saying that I exaggerated the dangers in my original message. What I wanted to point out was how extremely valuable a users private key is, and how disappointingly little concern Microsoft seem to have for protecting this valuable resource. For example Garfinkel and Spaffords "Web Security and Commerce" (O'Reilly, 1997) contains the warning: "Today's PC's are no better at storing private keys once they have been generated. Even though both Navigator and Internet Explorer can store keys encrypted, they have to be decrypted to be used. All an attacker has to do is write a program that manages to get itself run on the users computer (for example by using [...] Microsoft's ActiveX technology), waits for the key to be decrypted, and then sends the key out over the network" (p.120). Including a function like CryptExportKey() (which hands over a users private key) makes this very attack possible. The potential damage which can be caused with a misappropriated private key is enormous. Consider the relative risks in the compromise of a logon password and a private key. With a logon password, the worst an attacker can do (apart from stealing possibly valuable data) is to trash the victims hard drive, which involves reinstalling the operating system (an action which many users are intimately familiar with). In contrast an attacker who obtains a private key can potentially drain the victims credit card, clean out their bank account (if the victim uses one of the emerging online banking services), sign documents in their name, and so on. The implications of that last point can be quite serious. Take for example the Utah digital signature act, which was used as a model by a number of other states who implemented or are implementing digital signature legislation. Under the Utah act, digitally signed documents are given the same evidentiary weight as notarised documents, and someone trying to overcome this has to provide "clear and convincing evidence" that the document is fraudulent, which is difficult since it bears a valid signature from the users key (this fact has been used in the past to criticise digital signature laws based on this act). In addition, under the Utah act and derived acts, anyone who loses their private key bears unlimited liability for the loss (in contrast, consumer liability for credit card loss is limited to $50). This leads to the spectre of a malicious attacker who has the ability to issue notarised documents in your name for which you carry unlimited liability. This is a lot more important than someone reformatting your hard drive, or stealing last months sales figures. Peter.

2 1

INFO-RUSS: Israel Issues Iraq Warning (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: >From INFO-RUSS-request(a)smarty.ece.jhu.edu Mon Feb 2 19:00:52 1998 Message-Id: <9802022059.AA22808(a)smarty.ece.jhu.edu> Errors-To: INFO-RUSS-request(a)smarty.ece.jhu.edu Sender: INFO-RUSS-request(a)smarty.ece.jhu.edu Date: Sun, 1 Feb 1998 19:32:58 +0200 (IST) To: info-russ(a)smarty.ece.jhu.edu From: info-russ(a)smarty.ece.jhu.edu Subject: INFO-RUSS: Israel Issues Iraq Warning --------------------------------------------------------------------- This is INFO-RUSS broadcast (1200+ subscribers). Home page, information, and archives: http://psi.ece.jhu.edu/~kaplan/IRUSS/inforuss.html To post, or to subscribe/unsubscribe, mail to info-russ(a)smarty.ece.jhu.edu INFO-RUSS assumes no responsibility for the information/views of its users. --------------------------------------------------------------------- Reuters, Sunday February 1 3:34 PM EST Israel Issues Iraq Warning JERUSALEM (Reuters) - Prime Minister Benjamin Netanyahu Sunday reserved the option of retaliating for any Iraqi missile attack on Israel, despite assurances the United States would step in quickly to punish Iraq. "The only ones who will make decisions, the only ones who make decisions, are us and us alone," Netanyahu said in remarks on the Iraq crisis in a speech to visiting American Jews. During the 1991 Gulf war, Israel held its fire in the face of 39 Iraqi Scud missile attacks, bowing to U.S. pressure not to take action that could push Arab states out of a U.S.-led alliance to drive Iraq out of Kuwait. On a visit to Israel Sunday, U.S. Secretary of State Madeleine Albright spoke of a U.S. "iron-clad commitment" to Israel's security and gave notice any Iraqi threat to countries in the region in the current crisis would not go unpunished. "If they do threaten their neighbors or do damage to them our response to it will be swift and forceful," she said. But in apparent reply, Netanyahu said in his speech: "One thing has to be understood -- that we will do whatever is necessary to defend Israel and strengthen Israel's national security." He said Israelis should view the Iraqi crisis "calmly because there is a government here that handles matters professionally and with reason." Netanyahu spoke after convening cabinet ministers to discuss the possibility that a U.S. assault on Iraq would push Baghdad to launch missiles against Israel tipped with biological weapons. After the session, Deputy Defense Minister Silvan Shalom declined to comment on the deliberations but he said earlier that Israelis were thronging to army distribution centers to exchange old gas masks. Israel's Ha'aretz newspaper reported Sunday the United States had agreed in principle to send Israel vaccines against anthrax and other biological agents Iraq is believed to possess. The newspaper report, attributed to U.S. sources, said Israeli leaders asked Washington to store hundreds of thousands of doses of the vaccines in Israel. Asked if Israel had ordered the vaccines, Defense Minister Yitzhak Mordechai told reporters: "Some things are done in coordination between us and the United States to be able to defend ourselves today and in the future against the possibility that non-conventional weapons will be possessed by someone who wants to endanger us." Israeli officials have said the probability was low that Iraq would launch a strike but authorities have made clear they are preparing for the worst. The United States is rallying support from allies for a possible attack on Iraq to punish President Saddam Hussein for not complying with U.N. arms inspectors searching for documents and materials related to its weapons programs. Iraq says it has no nuclear, chemical or biological weapons or ballistic missiles -- banned under terms of the cease-fire that ended the Gulf War in which U.S.-led forces drove Iraqi troops out of Kuwait. ----------------------------------------------------------------------------

1 0

VMM question - reply (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 02 Feb 1998 01:39:47 -0600 > From: Lenny Blumberg <lenny(a)bga.com> > Subject: VMM question - reply > Hmmmm..... > I would imagine that the OS would keep a disk map in memory and > mark it with a flag to indicate if it's been paged into memory. This is a function of the "Look Aside Buffer" and the actual operation is a bit more complicated. The vmm must keep up with which processes have it mapped, where in their indipendant memory maps it shows up at, what the status is in each of those maps, whether it's sharable or not (though the Linux vmm doesn't seem to do any write locking), and probably some functions that I've missed. > At > that point, instead of updating the disk drive - It looks up the page in > memory and updates that copy. There are two ways to do this in general... Write-through: means the vmm goes ahead and not only updates the vmm copy but the copy on the drive. Note that this may or may not actualy update other copies if a process has one that isn't sharable (ie has its own private copy). This has a lot of over-head in that there is lots of i/o. Write-back: means that the data in the individual pages doesn't get written to the drive until the page is either swapped out of active memory (and written to swap) or is closed. This is a form of 'lazy propogation'. Again, this doesn't address how other processes may have their images effected. > The only problem is that at that point, > you're now running into a mess of lock problems that carry their own > overhead. One easy way, at least on a Unix machine, is to keep the system clock setting when the page is created. Then close them in chronological sequence. This obviously has it's problems. The first person to open isn't guaranteed to be the first person done. Another method would be to select via a PRNG the 'first' process to update the page. Then each following would take their turn according to the spin of the wheel. This leaves us with two options, as each process closes it only writes the changes that it has made; which could overwrite the previous user if they edited the same part of the file. The alternative would be to force each user to create a different file with some filename convention to differentiate them. Then leave it up to some unknown method to arbitrate the file propogations at that point by some 'compare and share' method perhaps. > Another alternative would be to track the disk map and force a > write for a page that is pending a read. How do you know ahead of a read that a process is going to read that page? Or are you saying that before another process can open a file we force the first process to go ahead and write its changes? What happens once two or more have the page mapped and begin editing? How do you propose to manage the file closure writes that will occur? ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

No Subject
by Pepe 17 Dec '03

17 Dec '03

1 0

RE: The Continued Attack on Cash (Was: "The Right of Anonymity"...)
by James O'Toole 17 Dec '03

17 Dec '03

Tim, Maintaining anonymity in the face of the regulatory framework is certain to be difficult, and anything difficult is usually rare, expensive, or both. An interesting question about the Privacy Card product is whether the social pressure against it is strong enough to defeat its privacy whenever the product is well advertised. In other words, will a privacy product survive in spite of its own publicity in our current environment, or can privacy products only exist when their own existence is relatively unknown. This is interesting because in the latter case, we have only a very very weak form of privacy/anonymity because it is hard to be sure how much privacy backs a product whose very existence is semi-secret. Maybe we should consider putting up, and encouraging existing privacy-enhanced institutions to put up, challenge prizes based on privacy/anonymity preservation. Just as we've seen prizes set for the cracking of specific composites and encrypted messages, we could ask Credit Suisse to put $1M in an escrow account at their main branch (Zurich?). This escrow account would be a numbered account held by a trustee selected by the bank. Let's say they wire $1000 per week to RSA Data Security in California, or to EFF.ORG, or to me, for that matter, and I wire it back. I publish the full text of any documentation I can get from my bank account (an empty account I would maintain for this anonymity challenge). Credit Suisse would promise to release the contents of the account to the first person to arrive at their main branch and present the name of the trustee. That's not a very creative challenge...this could use more thought. The point is that as far as I know, we haven't yet seen any really solid rewards placed to validate, advertise, or demonstrate the weakness of, well-known privacy-enhanced financial systems. I don't even know that Digicash, which would be another logical sponsor, has put up such a challenge. Have they? --Jim ---------- From: Tim May[SMTP:tcmay@got.net] Sent: Monday, February 02, 1998 1:18 PM To: Black Unicorn Cc: rotenberg(a)epic.org; nym(a)vorlon.mit.edu; dcsb(a)ai.mit.edu; cypherpunks(a)Algebra.COM Subject: Re: The Continued Attack on Cash (Was: "The Right of Anonymity"...) At 10:51 PM -0800 2/1/98, Black Unicorn wrote: >Mr. May said: > >>Suffice it to say that I find nearly all cases where someone is "demanding" >>personal information to be cases where the government has required them to, >>for various unseemly purposes, or in cases where credit is being arranged. > >Of late I tried to pay off a rather large American Express bill. > >Suddenly, AMEX won't take cash in excess of $1,000 in any single billing >period (30 days). The large sign on the wall indicated the substance of .... It's worth noting (again) that a very simple technological/social solution to the "credit card companies have records on people" problem, the one often cited by "privacy law advocates" as the reason for a Data Privacy Act, is easily found. Namely, remove any impediments to the issuance of credit or debit cards unlinkable to the True Name of a user. A card issuer could feature this as a Privacy Card, either backed by transfers of backing capital to accounts, or using Chaum-style methods. This is fully feasible using Chaumian credential-revealing mechanisms. (Cf. Chaum's seminal "Transaction Systems to Make Big Brother Obsolete," in Communications of the ACM, November 1985. Updated a few times and available in reprints or other places. Try search engines for latest locations.) However, the trends are in just the opposite direction, as both Black Unicorn and Bill Stewart have noted in this thread. Between the War on Drugs, the laws about money laundering, the fears of tax evasion, and the general burrowcrat desire to record the movements and actions of citizen-units, such a Privacy Card would be frowned-upon. Various roadblocks, ranging from "know your customer" restrictions on banks to anti-money-laundering laws, would be thrown up to stop any such Privacy Card. The real solution is easy. --Tim May The Feds have shown their hand: they want a ban on domestic cryptography ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^2,976,221 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway." For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help".

2 1

Hacker group battles child porn [c|net News, 2/2/98]
by Ken Williams 17 Dec '03

17 Dec '03

Hacker group battles child porn C|NET News.Com News Story: http://www.news.com/News/Item/0,4,18717,00.html?st.cn.fd.tkr.news CNET Radio Interview: http://www.news.com/Radio/Index/0,55,,00.html?st.cn.fd.tb.ne By Courtney Macavinta February 2, 1998, 1:10 p.m. PT A secret society that hunts the Net to reveal the identities of alleged pedophiles and child pornographers has a message for those who think there's too much media hype about the problem: Believe what you hear. Members of a group called Ethical Hackers Against Pedophilia (EHAP - http://www.hackers.com/ehap/index2.htm) are using their high-tech cracking talents to find out the identity and physical location of people they say post child pornography within newsgroups, chat rooms, and Websites. The 17-member nonprofit group also says it tries to determine the sources of video streaming sites that feature children being sexually assaulted in real time. "The pedophiles that are distributing child pornography online are skirting the law by remaining anonymous. We decided to use the skills that we possess as hackers, engineers, and teachers to educate the public that hackers aren't all bad guys, and to help law enforcement in apprehending the child pornographers," said EHAP's secretary, "Oracle," who asked that his real name not be published. "As long as the people are arrested and the kids aren't hurt anymore, every one of us is willing to accept responsibility for our actions as long as one kid is helped," he added. EHAP may go so far as to dig up the Social Security numbers of people it suspects are producing and distributing child porn on the Net. Under the guise of a confidential informant, EHAP then passes on these details to various law enforcement agencies, such as the FBI. It's virtually impossible to know if EHAP's tips have led to any investigations or arrests, though the group says its information has been put to work. Still, its vigilante tactics raise privacy concerns, as well as serious questions about law enforcement's possible use of information that could have been obtained illegally. According to the FBI, the Net increasingly is being used to lure children to physical meetings, which could lead to abduction or abuse, and there has been a boom in child pornography being trafficked online. These acts violate federal law. During two congressional hearings last year, FBI officials told lawmakers they are working to stop the rise in these illegal acts through the bureau's Crimes Against Children initiative. "The FBI has investigated more than 70 cases involving pedophiles traveling to meet undercover agents or officers posing as juveniles for the purpose of engaging in an illicit sexual relationship," Stephen Wiley, chief of the FBI's violent crime and major offenders section, testified in November before the House Judiciary Subcommittee on Crime. The FBI has launched other special programs, such as Innocent Images, in which agents go online and portray themselves as children and crack down on those who solicit encounters with them. The program, which is run by the Baltimore, Maryland, FBI field office, also serves as a clearinghouse for tips and information regarding suspected online crimes against children. The program was started in 1994 after local agents uncovered an online child porn ring while searching for an abducted boy. The 13-year-old boy, George Burdynski of Prince Georges County, Maryland, has never been found. But the program has lead to more than 90 arrests as well as the development of online crime fighting techniques. For instance, in October, three Californians were collectively sentenced to 60 years in prison for running the so-called Orchid Club, an international service that used the Net to distribute child pornography to its members. Despite growing efforts by the FBI and organizations such as the National Center for Missing and Exploited Children, EHAP says its private campaign is vital, as these agencies don't have the full-time resources to combat online child pornography. EHAP also readily admits that it would be unconstitutional for law enforcement to use some of its methods. "We're extremely careful about who we hack. There are so many people trading child porn out there, but we go after the people who are producing the material. That's who we hunt," Oracle said. "Law enforcement are restricted in ways we're not--but I'm not saying that we break the law." EHAP is not the first group to use its own devices in an effort to assist law enforcement in tracking down people who they suspect use the Net to perpetrate crimes. For example, a worldwide network of Internet users known as the CyberAngels provide online safety tips and work with law enforcement to stop the trading of online pornography. Other Net users have been known to shut down chat rooms or flame those who they deem pedophiles or sexual predators. CyberAngels doesn't support the electronic harassment of others. EHAP keeps its methods confidential. "Although we would appreciate any information these individuals may have, to violate the law to get the information is not acceptable," said George Grotz, a spokesman for the FBI's San Francisco office. "But how many pedophiles would come to us and say their site had been broken into?" Still, the FBI and other child protection agencies say they need all the help they can get. "Here in the San Francisco office, we have neither the time or resources to surf the Net looking for child pornography," Grotz added. "That said, we do respond aggressively when information is brought to our attention from outside sources, or if we develop information during the process of another investigation." The National Center for Missing and Exploited Children, which is supported by the Justice Department, also expanded its efforts to encompass online activity. As announced in December at the White House-endorsed Children's Internet Summit in Washington, the center will launch a Web site on March 1 to collect tips regarding online child porn and suspected crimes against children. "It's a huge problem that is as new as the Internet. For law enforcement, it's not easy to handle," Todd Mitchell, program advocate for the exploited child unit, said today. "Parents can't leave their child in front of a computer for hours and hours where they can stumble upon pornography or be solicited in a chat room. They have to teach their kids some safety guidelines," he said. Regarding private citizens' groups such as EHAP and CyberAngels, he said there are legitimate concerns, but that community activism is needed. "If they work in conjunction with law enforcement, it can be something that is a nice partnership between law enforcement and the community. If they take the law into their own hands, it could do more harm that good," Mitchell said. [EOF] -- For more information about EHAP, go to http://www.hackers.com/ehap/index2.htm or send email to ehap(a)hackers.com Regards, TATTOOMAN Vice President of Ethical Hackers Against Pedophilia http://www.hackers.com/ehap/ ehap(a)hackers.com http://152.7.11.38/~tattooman/

1 0

BULK EMAIL FOR PROFIT
by tulii＠ak.planet.gen.nz 17 Dec '03

17 Dec '03

****************************************************** MAIL THOUSANDS OF EMAIL MESSAGES PER HOUR - NO KIDDING !! SEND YOUR EMAIL MESSAGES OUT, AT 1,000's MESSAGES / HOUR (28.8K modem) YES, 1,000's Of Messages An Hour ****************************************************** 30 MILLION EMAIL ADDRESSES ******** $100.00 ******* ****************************************************** YOU'LL RECEIVE 2 HIGH-SPEED EMAIL SOFTWARE PROGRAMS Introducing...."FLOODGATE BULK EMAIL LOADER" AND...."GOLDRUSH STEALTH MASS MAILER" This is the same software that all bulk emailing services use! ---------------------------------------------------- Floodgate Bulk Email Loader Version 6.0 AND Goldrush Stealth Mass Mailer Version 3.215 for Windows 95 and Windows 3.1 now Supports 17 (really more with the free form filter) File Formats ---------------------------------------------------- SEND OUT 20,000+ MARKETING LETTERS EVERY SINGLE DAY! Or...every few days. In fact, when I send out just a few thousand marketing letters each day, it doesn't take long before I'm completely swamped with email inquiries and phone calls. This is very easy to do. And each one of these bulk mailings costs me nothing. I can teach you how to do this and provide you with the tools you'll need. If you've got a good marketing letter, I'll show you how to open the floodgates. You'll be deluged with inquiries, leads, and real sales, using nothing but email alone. Writing a good marketing letter is not easy. I often have to rewrite my marketing letters a half dozen times before I get the results I'm looking for. But once you have a good letter, as you probably know, you can use the same letter over and over again, predictably and consistently, closing sales, week after week, month after month. It takes me about one hour to send my marketing letter to THOUSANDS of fresh email addresses. I can do this, thanks to a Windows program I use. It's called Floodgate and Goldrush Stealth Mass Mailer. It's a bulk email loader and an email software program. If you're interested in electronic marketing, you should know about these programs. PROGRAM #1: FLOODGATE FOR WINDOWS The Floodgate Bulk Email Loader imports simple text files that anyone can download from CompuServe, Prodigy, Delphi Genie, or the Internet. These text files contain classified ads, forum messages, or data from the member directory. Each of these files is filled with email addresses. Floodgate is designed to read these files and strip out the email addresses. It then sorts the addresses, removes any duplicates, and formats them into an output file, with 10, 20 or 30 addresses per line. This is all done in one simple step. Just point and click. You'll need either a Windows based Internet account or an America On-line account to send out your marketing letters. Neither AOL nor the Internet charges to send email. Send your letter to 1,000 people or 10,000 people -- the cost is always the same. NOTHING! NEW! PREPARE A MAILING OF 50,000+ IN LESS THAN A 1/2 HOUR If you open an Internet account, you can send each letter to 20,000+ people. The new Floodgate now directly writes distribution lists. Some people are always collecting new addresses, but if you publish a newsletter or adsheet, you'll be using the same addresses over and over again. That's real power! When using addresses you've previously collected, you can press a few buttons and prepare a mailing of 50,000+ in less than a half hour. (To get a list of all the Internet access providers in your local calling area goto: http://thelist.com and click on your area code.) The Floodgate Users Guide will teach you, step by step, how to download the right files, how to strip the addresses, and finally, how to cut and paste the formatted addresses into your marketing letter. Or, if you have an Internet account, how to create distribution lists. One you've done this a few times you won't even have to think. It's that simple! FOR THE BRAVE & DARING: PUSHING TECHNOLOGY TO ITS LIMITS As you may know, the practice of sending unsolicited email is usually frowned upon, and most service providers have rules against it. But, like jay-walking, there is little enforcement. It's not illegal. If someone tells you that it is, ask them to provide the citation (and don't let them give you some nonsense about faxes - that's not email). They can't do it because it's not there. Sometimes, when a lot of people complain, I get a warning letter. And that's about it. About 1 in 200 will write back and tell me, "take me off the list", which I can do, thanks to Floodgates Remove List feature. Many people reply back thanking me for sending them my informative letter. That's always nice. Most people though, just reply and say, "send me more info." In this way, it usually takes me two or three letters to close a sale. The Floodgate Users Guide will provide you with proven formats for writing a successful marketing letter. You'll test and rewrite, test and rewrite. Then, once you've got it, just push a few buttons, and open the floodgates!!! THE FLOODGATE BULK EMAIL LOADER CURRENTLY SUPPORTS 17+ FILE FORMATS 1. CompuServe Classifieds: Send your marketing letter to everyone who is running a classified ad. I'll teach you how to download all the classifieds from any single ad category. This is one of the most responsive list of buyers. They check their email every day and they're already in business. 2. America On-line Classifieds: Download 1,000 addresses in 15 minutes. These are excellent lists for business to business sales. 3. CompuServe Forums: You can join a forum and download hundreds of forum messages in a matter of minutes. 4. America On-line Forums: Choose from dozens of forums. All good targeted lists. 5. Prodigy Forums: Prodigy allows you to easily export any group of forum messages. More targeted lists. 6. Internet Newsgroups: These are all targeted lists. You'll be able to send your marketing letter to everyone who posts a message in any newsgroup. Easily collect 1,000's of addresses per hour. 7. America On-line Member Directory: Most member directories only allow you to search by city and state. With AOL, you can search by business type, hobbies, computer type, etc. This is the gem of all member directories. Build huge targeted lists. 8. CompuServe Member Directory: This is a major resource. If you're willing to target your mailing to a single city, you can collect about 1,000 email addresses an hour. 9. Delphi Member Directory: The Delphi member directory allows you to search for people based on key words. These are good targeted mailing lists. A single search can easily generate 5,000 addresses. 10. Genie Member Directory: Similar to the CompuServe member directory, only you can download names much quicker. You can easily pull hundreds of thousands of addresses out of each of these member directories. 11. CompuServe File Cabinet: If you run classified ads, and save the responses in the CIM file cabinet, you'll be able to easily reuse these addresses. You can send your marketing letter to everyone in any single folder. Build master lists and clean UP your hard drive. 12. Free Form: If you have a text file with email addresses that floodgate does not support, chances are the Free Form filter will be just what you need. Just enter a key word to search for. 13. CompuServe Form Profiles (Forum Membership Directories): Easy to build targeted lists here. Each search can easily bring you 500+ addresses. 14. Genie Profiles: If you're building targeted lists, you'll get a lot of addresses very quickly from Genie. 15. Plain Addresses: Read Floodgate Master Files back into Floodgate to merge files and do selective mailings. Also useful for the management of email address lists that you might purchase. Floodgate also has filters to allow you to include or exclude any groups of addresses in your final distribution lists. For example, you could include only email addresses that ended in .com or exclude all with .gov. You could exclude all noc, root, and other addresses that almost guarantee a negative response. These filters are fully configurable and can be used together. BUILD REUSABLE MASTER FILES Floodgate maintains Master Files for each of your marketing letters. If you download from the same place on a regular basis, you only want to send your letter to the new people. Floodgate will compare the new addresses with those in the Master File, and prepare a mailing list of only new people. The new addresses are, of course, then added to the Master File. With each new mailing your Master File grows and grows. You may create as many Master Lists as you need. When you start a new marketing campaign, you'll want to send your new letter to everyone on your Master List. If you write a newsletter, each time you send your newsletter, you'll send it to everyone on a Master List. THE REMOVE LIST Very often, people will reply and tell you to take them off your mailing list. Place these addresses in the REMOVE.MST file and they will never receive another letter from you again. In this way, you will be operating your business with the most professionalism possible. DON'T BE FOOLED We have some new competitors that have tried to copy Floodgate. The following list describes why Floodgate is BETTER....... **Floodgate is a mature, bug free product. Not an initial release. **Floodgate comes with over 100 pages of step by step documentation. **Floodgate is the only one offering a money back guarantee. **Floodgate has more testimonials. **Filter for filter, Floodgate offers more capabilities, way more. **Floodgate does everything all the others *combined* claim. **Floodgate is by far the easiest to use. **There is NO *cutting and pasting* with Floodgate. **We have by far, the BEST technical support. SOME QUICK MATH Floodgate can pay for itself in a few days. It can also cut your advertising costs down to almost nothing. Think of what the competition will do when they get their Floodgate program. Don't be left in the dust - there are 75 million people out there, just a few keystrokes away. Let's do the math: - Email 50,000 sales letters (takes about 1-2 hours) - Let's say your product will bring you $5 profit per sale. - Let's also say you only get a 1% response(occasionally higher). * That's 500 orders x $5 = $2,500 profit !! Now imagine what 500,000 letters would do for your business !! WHAT CAN I MARKET ON-LINE? You can market anything on-line using direct email, that can be marketed using conventional postal direct mail marketing. The possibilities are practically endless. If it sells off-line, you can sell it on-line. EASY TO INSTALL AND EASY TO LEARN The Floodgate Email Loader requires Windows. The SUPPLIED MANUAL tells you where to go, what to do, and how to do it. All you need are basic computer skills that can be learned with a little practice or help from our computer savvy technicians. PROGRAM #2: GOLDRUSH STEALTH MASS MAILER Do not get this program confused with other slow speed programs that call themselves "STEALTH". This program is the only one in the world that can send email out at HIGH SPEEDS with one single connection to the internet. This is NEW, Cutting Edge Email Technology. First Of It's Kind.. The Most Powerful BULK EMAIL SENDER In The World.. NOTHING CAN EVEN COME CLOSE! Thanks to our top programmer's, this technology is NOW available and we are the only place you can get it from! *ONLY "ONE" DIAL-UP OR ISDN CONNECTION NEEDED. *NO MORE TERMINATED CONNECTIONS. *NO MORE WAITING TO SEND LARGE AMOUNTS OF EMAIL. *IMMEDIATE RESPONSE TO YOUR MASS MAILINGS. *YOU WILL HAVE ALL THE CONTROL AND CONFIDENCE OF SENDING EMAIL THE WAY IT SHOULD BE SENT... IN HUGE AMOUNTS! *SEND YOUR WHOLE LIST IN ONE DAY, WHETHER IT BE 500,000 OR 5 MILLION - AND JUST SIT BACK AND WAIT FOR YOUR ORDERS TO POUR IN. *NO MORE DOWNLOADING UNDELIVERABLE NAMES. Bulk Emailer's Dream Come True!!! - >>>GOLDRUSH STEALTH MASS MAILER<<< Connect to multiple mail servers (20 or more), make multiple connections to a single server or any combination of the two ( All Simultaneously ) with one single dial-up connection. SEND MULTIPLE SIMULTANEOUS MAILINGS... View complete details about your mailings. Shows each server your connected to, the status of that connection, how many messages are going out through that connection, etc... We show you ALL the tricks all the mass e-mailers don't want you to know... Here are just a few features the GOLDRUSH STEALTH MASS MAILER offers to you... *Forge the Header - Message ID - ISP's will Spin their wheels. *Add's a Bogus Authenticated Sender to the Header. *Add's a complete bogus Received From / Received By line with real time / date stamp and recipient to the Header. *Does NOT require a valid POP Account be entered in order to send your mailings. *Easy to use and operate *Plus much more! All this, at speeds of up to 1,000's messages/hour (28.8k modem). SPECIAL INTRODUCTORY PRICE... NOW YOU CAN HAVE BOTH THE FLOODGATE AND GOLDRUSH STEALTH MASS MAILER FOR JUST $499.00! UPDATE ... SAVE $149.05 AND ORDER NOW, BE ONE OF THE FIRST 100 ORDERS! Step up to the plate and play with the big boys TODAY and receive the COMPLETE 2 SOFTWARE PACKAGE for the unbelievably low price of ONLY $349.95! (Other bulk email software has sold for as much as $2,500 and can't even come close to the cutting edge technology of EASE, ACCURACY AND SPEED ... SPEED ... SPEED!) Try the Goldrush Stealth Mass Mailer & Floodgate Bulk Email Loader for 10 days FREE. And receive UNLIMITED technical support for 30 days. ************************************************************** 30 MILLION EMAIL ADDRESSES MILLIONS AND MILLIONS OF EMAIL ADDRESSES CD with MILLIONS of email addresses separated by domain name. All addresses are simple text format one per line. Addresses from the following domains: Pipleline, MSN, MCI, Juno, Delphi, Genie, AOL, Compuserve, Internet, .com & .net, MILLIONS OF THEM! Not available on diskette or download. ===> WANT THE MILLIONS OF ADDRESSES FOR $100.00? <=== Just buy our Floodgate / Goldrush software package (with ALL the bonuses INCLUDED), and the MILLIONS of addresses are yours for just $100.00 additional. These addresses will be delivered to you in simple text files that any bulk emailing program can use, on CD Rom. With this CD, YOU CAN BEGIN MAKING MONEY IMMEDIATELY!!! *************************************************************** ***SPECIAL BONUS #1:*** STOP Losing ISP Dial Up Accounts! If you order The FLOODGATE / GOLDRUSH software within the next 5 days - When you receive your program, you will also receive: *Complete instructions on "how to keep your dial up account from showing up in the header", plus everything you will need to get started doing this. IMPORTANT NOTICE! We will initially only be offering 100 copies of the program for sale, First come / First Served basis only. We are doing this because of the extreme power that these programs offer. ***SPECIAL BONUS #2*** When you receive your two programs, you will also receive: OVER 250 REPRINT AND RESELL RIGHTS REPORTS YOU CAN START TO MARKET AND MAKE MONEY IMMEDIATELY!!! These HOT sellers include: 1) How to Get a Top Rating in the Search Engines 2) 70 Money Making Reports 3) 75 MONEY MAKING PLANS & TRADE SECRETS and MUCH MUCH MORE!!! ($200 RETAIL VALUE - FREE!!!) ***SPECIAL BONUS #3*** With your two software programs, you will also receive our NEW "Address Grabber" utility program that enables you to grab 100's of THOUSANDS of email addresses from newsgroups in minutes ($100 RETAIL VALUE - FREE). ***SPECIAL BONUS #4*** RECEIVE CHECKS BY EMAIL, PHONE OR FAX MACHINE. With this software program, you can receive payment for your product or service INSTANTLY!! There is no more waiting for your customers check to arrive. This software will no doubt, add to your sales, for customers who don't have credit cards, as well as the impulse buyers. With this software, you can print up your payments as soon as your customer gives you his/her checking information. You will then add the information given, to the proper blank check spaces, then just print and go to the bank!! *************************************************** To get your FREE demo and "test drive" our state-of-the-art software, fax us your email address and request to: 1-561-966-6839 **************************************************** HURRY ... RESERVE YOURS TODAY! So, if you are interested in taking advantage of the most powerful bulk email software in the world and start making money hand over fist..... Print out the EZ ORDER form below and FAX or MAIL it to our office. If you have any questions don't hesitate to call us at: 1-561-965-6139 SYSTEM REQUIREMENTS 386 or larger Windows 95 OR Windows 3.1 with 8 meg ram Extra 5 MB hard drive space Floodgate & Goldrush can be run on a fast Mac with 24 MB RAM and SoftWindows. NOTES FROM SATISFIED USERS "It is everything you said it was. Within one week of my first mailing, I received a record number of orders. All you need to print money is a decent sales letter. Thanks." Randy albertson, Wolverine Capital. "After using Floodgate and your utility program all day today, let me say these are as two of the finest programs I have ever bought in my 52 years! Your support has been superb. Thank You!" Vernon Hale, Prime Data Systems "My first day and I just used Floodgate and Pegasus to send 1,469 sales letters. So far I've got about 25 positive responses. It works GREAT!!! Thanks." Donald Prior "Floodgate is awesome!. I recently started a new business on-line. I stripped the addresses of the AOL & CIS classifieds. I sent out 3,497 email letters and got over 400 people to join my company in 5 days! Needless to say, it pays for itself." David Sheeham, OMPD "I was able to use Floodgate to extract the names from the Internet news groups. It works perfectly. Needless to say, I am very excited about the use of this new technology." Mark Eberra, Inside Connections "This is a great piece of software and an invaluable marketing tool." Joe Kuhn, The Millennium Group "I just thought you'd like to know that this program is fantastic. After loading it on my system, I wanted to test it out. In my first hour of using this, I collected 6,092 email addresses!" Richard Kahn, LD Communications "I just love the Floodgate program. It saves me hours and hours of time. This is the beginning of a wonderful FUN time marketing on-line. Thank you so much for writing this program." Beth O'Neill, Eudora, KS "Your software is brilliant, and from the technical support I've received, I can see you have a genuine love and respect of people...Floodgate is a divine package. Wish I had found it sooner." Tom Sanders, Peoria, IL "I really like the way the Floodgate software package works. It is very easy to use, and really does the trick. It has already saved me an incredible amount of time and energy." John Berning, Jr., Fairfield, NJ "It's going great with FLOODGATE! I like using Delphi. I just collected 50,000+ addresses within 20 minutes on-line." Richard Kahn, R&B Associates ------------------------------------------------- E-Z ORDER FORM: Please print out this order form and fill in the blanks...... Please send order form and check or money order, payable to: Ted Keller P.O. Box 741342 Boynton Beach, FL 33474-1342 (561)-965-6139 ______Yes! I would like to try your cutting-edge software so that I can advertise my business to thousands of people on-line whenever I like! I understand that I have 10 days to trial the software. If I am not fully delighted, I will cheerfully be refunded the purchase price, no questions asked! Please rush me the FLOODGATE and GOLDRUSH package now! ______I am ordering within 72 hours! That qualifies me to receive the FLOODGATE and GOLDRUSH package at a substantial discount! I am ordering BOTH software packages for only $349.95. (Save $150 off the retail price....Software has sold for as much as $2,499.95) ______I am ordering within 72 hours! That qualifies me to receive UNLIMITED technical support for 30 days. ______I want to receive the package OVERNIGHT. I'm including $18.00 for shipping charges. ______I want to receive the package 2nd DAY. I'm including $10.00 (includes insurance & return receipt) for shipping charges. ______I'm ordering Floodgate / Goldrush software and want to order the MILLIONS of email addresses as well. My additional cost is $100.00 enclosed. ______I'm NOT ordering your Floodgate / Goldrush software, but I want to order your MILLIONS of email addresses on CD. Enclosed is $249.00. (CHECKS: ALLOW 1 WEEK FOR BANK CLEARANCE) YOUR NAME_________________________________________________ COMPANY NAME_________________________________________________ YOUR POSITION_____________________________________________ STREET ADDRESS______________________________________________ CITY, STATE, ZIP____________________________________________ PHONE NUMBERS_______________________________________________ FAX NUMBERS_________________________________________________ EMAIL ADDRESSES_____________________________________________ ************************************************************ We accept Checks, Money Orders, MasterCard, Visa, American Express. You can either mail your order to us OR fax your order to: (561)-966-6839 ************************************************************ Today's date:_____________ Visa____MasterCard____American Express____Discover_______ Card #:____________________________________________________ Expiration date:___________________________________________ Name on card:______________________________________________ Billing address:___________________________________________ Amount to be charged: $________________ Signature:___________________________________________ I agree to pay Ted Keller an additional $29 fee if my check is returned for insufficient or uncollectable funds. SIGNATURE: X________________________________DATE:_______________ Please send all order forms and check or money order to payable to: Ted Keller P.O. Box 741342 Boynton Beach , FL 33474-1342 (561)-965-6139 *************************************************** OR: PLEASE PASTE YOUR CHECK HERE (If you fax a check, there is no need for you to send the original check by mail. We will draft up a new check, with the exact information from your original check that you faxed to us) Please fax the above order form and check to: 1-561-966-6839 C

1 0

Re: Bush Gang Suspected In Assault On Presidency
by Information Security 17 Dec '03

17 Dec '03

> From cypherpunks-errors(a)toad.com Mon Feb 2 22:33:28 1998 > > Anonymous <remailer(a)htp.org> writes: > > > dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) writes: > > > > > Also laRouche has a math ph.d. as does Ted Kachynzki. Do you know any > > > other kookie math PhDs around here? > > > > I heard a certain Dr. Vulis <spit> got his degree in mathematics. > > You heard right. And you know what oranization is by far the biggest > employer of math phds... The Neurotic Society of Assholes. ---guy [Vulis replied to himself (what a loser!), I couldn't help myself]

1 0

Bork
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Once-a, zeere-a ves thees keed vhu, tuuk, a treep tu seengepure-a, und bruooght elung hees sprey peeent.... Und vhee.... he-a feenelly ceme-a beck. He-a, hed... cune-a merks ell oofer hees buttum.... he-a seeed thet is ves frum vhere-a zee verdee vhecked it su... herd..... Bork Bork Bork!

1 0

Re: Jim Bell Update
by ghio＠temp0207.myriad.ml.org 17 Dec '03

17 Dec '03

Jim Bell wrote: > "I think that one last (temporary) hope for government is to delay AP. > Chances are good that the "think tank" decided thatt the best way to delay > AP is to discredit me, its author. It was a desperate gamble, particularly > because the act of harrassing me automatically gives AP more publicity. > That's the reason they will fail; the more they try to "get" me, the worse > it will be for them." The government already has plans for dealing with AP (what do you think all those secret service guys in DC are supposed to be doing?) Whether AP is inevitable or not, if people don't know where you are, they can't come kill you. This is why privacy is so important in the digital era. Of course, there are still nukes, but as has been pointed out already many times, the use of a nuclear weapon is likely to kill more friends than enemies.

1 0

Re: Memory Management (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 02 Feb 1998 23:01:16 -0600 > From: Stu Green <stugreen(a)bga.com> > Subject: Re: Memory Management > > > I would imagine that the OS would keep a disk map in memory and > > > mark it with a flag to indicate if it's been paged into memory. > > > > This is a function of the "Look Aside Buffer" and the actual operation is a > > bit more complicated. > Jim - I'm familiar with the 'translation look aside'buffers > on > RISC chips, especially on the MIPS where it provides a > method > of managing cache flushes and reloads on writes and does act > like a page fault to intiate the writes. I haved seen TLBs > associated with disk operations, but that don't mean shit to > a > tree. It turns out, I've been doing more reading on vmm on NT, that the model that's implimented in NT is a hybrid of the MIPS 4000 model and the 386 model. That rationale is that this allows the actual code in the HAL to be much smaller by taking advantage of the different hardware aspects of the cpu architetures (this means speed). Don't know if I am going to get this right since I still haven't figured out all the intricacies. But this is what I *think* is going on (in NT)... The TLB (Translation Lookaside Buffer) is used in NT to determine if the page frame is currently in memory or swapped out. It does this by marking a frame 'invalid' if it's swapped out and listing it's actual page frame number if it's a valid page. Invalid does *not* mean that it can't still be in memory. The reason is that each process has a 'Page Frame Directory' which lists all the valid Page Table Pages for that process. Each of these Page Table Pages lists where each Page Frame Page is within that processes memory map (and that's a whole nother issue with various parts being pageable and non-pageable as well as system or user level). Each Page Frame Page knowns where the individual pages are (ie in memory or swapped out). There is a rather tedious mechanism that translates the virtual addresses to PFD's, PTP's, and finaly to PFP's. That's what I'm trying to get a handle on now. Now these various page related structures get quite big and themselves need to be swapped out. So there is a level of recursion in here. There is also a Page Table Page structure called a 'Prototype PTE Address' (a PTE is a Page Table Entry - ie a valid page frame, these things seem to have several different names making it confusing to follow at times) which is used to allow processes to share a PTE across PFD's. Once we get to a PTE we actualy have a 4k chunk of code or data that a cpu can operate on/with. So, there is where I'm at right now... Hope that makes it clear as mud. Naslajdyatciya! ps. I am enjoying my Toshiba 445CDX, it's a pretty cool machine. Anyone got any suggestions on a PCMCIA ethernet card? pss. Next Saturday is the 1st Saturday in Feb. so the Dallas 1st. Saturday Sale will be going on. Anyone interested? It's basicaly about 20 sq. blocks of computer equipment of every make, model, and age imaginable as well as lots of other stuff (time before last some guy had Cobra Helicopter IR cameras for $500 ea., would make a great IR telescope.). We usualy leave Saturday morning around 2am and get there a bit before 7am. The sale usualy starts about midnite Friday nite and goes until Saturday evening. The best deals are early Saturday morning (my experience over about 5 years of going anyway). ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: Airline ticket information -- help
by Anonymous 17 Dec '03

17 Dec '03

> Just as an example, call USAir at 1-800-428-4322, press 1 for automated > service. It will give you options to check scheduled flights and > departure times. After you find the flight number, select the option to > confirm your reservation or select a seat. It will ask for your frequent > flyer account number, but if you don't enter one, the helpful computer > will let you enter the passenger's last name instead. I figured you could probably BS such info out of a helpful customer service agent, but this is just too fucking easy. Now I know why Kaczynski wanted to bomb all those airlines and computer companies. I wish he'd gotten these idiots.

1 0

Exon oxen gored
by Anonymous 17 Dec '03

17 Dec '03

Exon and his ilk have loose bowels and bladder control problems. They shit all over the populace and urinate all over the Constitution.

1 0

Returned mail: Host unknown (Name server: eureka.abc-web.co: host not found)
by Mail Delivery Subsystem 17 Dec '03

17 Dec '03

The original message was received at Tue, 3 Feb 1998 18:35:44 -0500 (EST) from ts14-8.homenet.ohio-state.edu [140.254.113.47] ----- The following addresses had permanent fatal errors ----- <eureka-unsubscribe(a)eureka.abc-web.co> ----- Transcript of session follows ----- 550 <eureka-unsubscribe(a)eureka.abc-web.co>... Host unknown (Name server: eureka.abc-web.co: host not found) Reporting-MTA: dns; chemistry.mps.ohio-state.edu Received-From-MTA: DNS; ts14-8.homenet.ohio-state.edu Arrival-Date: Tue, 3 Feb 1998 18:35:44 -0500 (EST) Final-Recipient: RFC822; eureka-unsubscribe(a)eureka.abc-web.co Action: failed Status: 5.1.2 Remote-MTA: DNS; eureka.abc-web.co Last-Attempt-Date: Tue, 3 Feb 1998 18:35:47 -0500 (EST) To: eureka-unsubscribe(a)eureka.abc-web.co Subject: Re: Eureka! Tue Feb 3 '98 From: Cypherpunks(a)toad.com Date: Tue, 06 Jan 1998 01:54:08 -0800 Welcome to Tuesday's issue of Eureka! PINKBITS Voted the #1 Teen (18+) site on the web, this is one pay site you don't want to miss out on! Here's just one quote from a satisfied member: "This site delivers awesome value. I have been a member of 3 other sites, and this is the best by far. It has the best pics, more live video, younger girls and more hardcore cumshots than the other sites put tog- ether". And we have negotiated a special FREE trial member- ship for Eureka subscribers, so don't take our word, go see! PinkBits .. http://207.33.10.198/cgi-bin/gate1/pbm/pb_0024/0 PLEASE VISIT THIS FINE EUREKA! PARTNER SITE Playgal - No.1 in Internet Hardcore! http://www.playgal.com/playgal/banner_eureka.html Playgal presents FREE LIVE FUCKING, and over 2,000 FREE XXX MOVIES! XXX 4 EVERY 1 Overall this site looks pretty good. Click on the View Free Sample Pics to get to the good stuff. Once over that fence your in! There are thumbnails of some hot looking babes! Wet bush filled with hard dick. Not a bad combination! XXX 4 Every 1 .................... http://www.xxx4every1.com DO ME LIVE Do me too! Do this, do that and do the other. If she lets you! This is a paysite but they have a pretty juicy free picture section. Girl on girl, shaved pussy, dildo, panties, and clit rubbing images. Stroke your browser over there! Do Me Live ........................ http://www.domelive.com/ CYBERJOY Basic text links that deliver! Check out first time, that is one big black log, and she is enjoying it! Cum shots and links that will take you all over the place. See the Hungry for pussy picture. That tramp looks possessed! Take a look. Cyberjoy .......... http://www.cyberjoy.inter.net/adult3.htm ADULT CHARTS Here is one to see. Go there right now. Tons of free pix! Click on the free pictures area and your in. Take your pick of anal, cum shots, oral sex, girlgirl, teens, group action, I could go on more but you get the idea. High quality jpeg images that load quickly! These are some of the best free porno pix on the internet. Grab your mouse and get surfing! Adult Charts .................... http://www.adultcharts.com BRAND NEW - HOORAY! THE ADULT SEARCH ENGINE Now adult surfers have our very own search engine, directly designed to only list adult sites, and so run fast because all other types of site are ignored. Check it out today! Hooray! -----------------> http://eureka.abc-web.com/hooray/ FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here --> http://www.netscape.com/download/ College teens -----> http://207.240.169.122/teens/start.html CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Adult/Sex Chat -----------------> http://137.39.63.229/chat/ General/Fun Chat -------> http://137.39.63.229/chat/funchat/ THE BEST PHONE SEX NEW!!!! LD Call only! - Live Hot Girls!!!!--->1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline-------->1-800-644-8779 FREE: Live 1-on-1 (international call only)--->011-678-77416 AMATEUR SITE OF THE DAY Octavia: "Caught you looking" is the motto of this sweet 23- year-old coed's web page. She loves to show off, and claims that she gets off thinking about all the horny guys checking her out. Her photos exhibit her exhibitionist streak and are of extremely high quality. Get caught looking at Octavia - it's well worth sneaking a peak! ---------------------------> http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY T-Bone's Sex Club: T-Bone gives you a new selection of erotic stories illustrated with nasty hardcore pics! Last week was Slut Wife week... what will it be this week? Visit T-Bone and find out! ............... http://www.rawsexx.com/ DAILY CARTOON ----------> http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Every day we bring you an exclusive choice pic of a famous adult porn star. And we must tell you - these pix are abso- luletly brilliant! ---> http://www.xxxadultstars.com/eureka/ GAYEUREKA! The gay newsletter is now available. You can get it here! Gay Eureka! ----------> http://eureka.abc-web.com/gayeureka/ EUREKA! TRANSLATIONS As well as English you can now choose any of these languages DEUTSCH ------> http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ------> http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ----> http://eureka.abc-web.com/eureka/francais.htm ITALIANO ----> http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE > http://eureka.abc-web.com/eureka/portuguese.htm TODAY'S FREE PIX Pic 1 --------------------------> http://137.39.63.229/?030 Pic 2 --------------------------> http://137.39.63.229/?031 Pic 3 --------------------------> http://137.39.63.229/?032 Pic 4 --------------------------> http://137.39.63.229/?033 Pic 5 --------------------------> http://137.39.63.229/?034 Pic 6 --------------------------> http://137.39.63.229/?035 Pic 7 --------------------------> http://137.39.63.229/?036 Pic 8 --------------------------> http://137.39.63.229/?037 Pic 9 --------------------------> http://137.39.63.229/?038 Pic 10 --------------------------> http://137.39.63.229/?039 ============================================================ TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS EMAIL RIGHT BACK TO US. ============================================================

1 0

Inquiry
by Anonymous 17 Dec '03

17 Dec '03

Dimitri "Buttfuck" Vulis' reheated, refurbished, and regurgitated cud is completely inappropriate for the mailing lists into which it is cross-ruminated. ,,, -ooO(o o)Ooo- Dimitri "Buttfuck" Vulis (_)

1 0

Liquidation
by MAILER-DAEMON＠toad.com 17 Dec '03

17 Dec '03

Forwarding this message to you because I thought the following 3 items would be of real interest to you. I wanted to get it out to you ASAP. This information is only going to be available for a few more days. Deal is, right now, you can get still it for free. Here is what you can get: 1) The contact names and private phone number of a company that is PAYING CASH for unwanted used material handling equipment. This company is one of the largest used equipment BUYERS in the nation and even pays finders fees. 2) Wouldn't it be nice to save as much as 80% on items you're probably buying at full retail currently? We've uncovered the Web address to one of the Internet's top "Liquidation Specials of the Month" web site . Now you'll have the insider's track on buying at wholesale like the pros do. It's really a cool site! But don't take my word for it, check it out for yourself. 3) Get the #1 hottest material handling product catalog on the market today. No, I'm not exaggerating. This catalog has everything you could possibly want and they offer new, used or reconditioned items that almost every business uses each and every day. All the information, the catalog, the names, phone numbers, contacts in one complete package . You don't even pay postage! ************************************************************************ So how can you take advantage of this risk free offer? It's as easy as 1-2-3, here is all you have to do: Step 1) Simply call the " Equipment Buyers Guide" at 205-941-4795 Monday-Friday during regular business hours. This offer is ending Friday. Seriously gang, don't delay. Step 2) Tell them you want the "INSIDERS BUYING GUIDE PACKAGE #32" sent to you immediately. (Make sure you stress you want "PACKAGE #32" as this is the BIG package which includes all the key numbers and names .) Step #3) After we get the proper mailing information, you'll see it in a day or two! I know this package will save you and your company hundreds, maybe even thousands of dollars.Pick up the phone now and get the INSIDERS BUYERS GUIDE PACK #32 sent to you now. ------------------------------------------------------------------------ If this message is of no interest to you it is not necessary to reply for "removal" This is a one time mailing of a very limited offer and WILL NOT be sent again. ------------------------------------------------------------------------

1 0

Better Choice for Airport Transportation
by 71440094＠ix.netcom.com 17 Dec '03

17 Dec '03

GERMANY - Airport Shuttle Services - the Better Choice for Airport Transportation to and from 18 German Airports 24 hours per day, 365 days per year Door to door service to and from your residence, business or hotel. Complete online Reservations at http://www.airport-shuttle.com Using our services can greatly reduce your companyŽs ground transportation expenses. You will see your exact costs on reservation form - no hidden surprises Comfortable, clean, air conditioned passenger cars . Courteous, safe drivers. Exclusive transfer - no additional pick up Reliable, Convenient , Cost Effective, Punctual We also provide transportation for all situations, occasion and/or events Join us now http://www.airport-shuttle.com

1 0

Scientists in Black
by John Young 17 Dec '03

17 Dec '03

In "Scientists in Black,"Jeffrey Richelson, noted intel author, surveys use of vast archives of classified intelligence data by select civilian scientists under the Medea program (SciAm, Feburary 1998). http://jya.com/sib.htm (40K with 4 images) Thanks to PJP for pointing.

1 0

Gilbert Vernam
by bill payne 17 Dec '03

17 Dec '03

Tuesday 2/3/98 7:02 AM John Young J Orlin Grabbe The crypto problem was solved in 1918. Vernam and Maugborne [sp?] did the work. Gilbert Vernam in 1918. Vernam used two tapes of random characters to generate the additional characters. With the same tapes at each end set to the same start position this system was unbreakable. The Germans decided that the distribution of these key tapes presented too great an operational problem and the Lorenz machine uses a complicated mechanical gearing and cam system to generate a pseudo random sequence with very long period and 10^19 complexity. They thought this was good enough to ensure unbreakability, it wasn't! Fushimi's implementation of Lewis and my GFSR algorithm has period of 2^521 - 1. And LOTS of possible starting seeds. John Young kindly posted my article on putting non-singular binary matrices in one-to-one correspondence with the natural numbers. Although the period of a shift register can be 2^521 - 1, 521 bits determines THE EXACT SEQUENCE of the remaining 2^521 - 522 bits. Pseudorandom numbers generators have an easier job than bits used for cryptography. Pseudorandom number generators merely have to deceive statistical tests. Orlin Recall the GIANT radio transmitter in the south of Russia, perhaps Baku. I heard on PBS TV that it was transmitting a shift register sequence. The Russians were apparently trying to communicate with underwater submarines. NSA crypto algorithms mostly rely on shift register sequences - both linear and NON-LINEAR. The R register in my SAND report posted at jya.com implements a non-linear SECRET/NSI feedback algorithm. Perhaps someone may have to put NSA's SECRET/NSI R register non-linear feedback function out on the web some time. So that every one can have a good laugh, of course. Like for the SECRET/NSI number 31 algorithm step. John Young Judge Svet made a ruling. I sent a copy to you by snail mail. Later, bill Title: Colossus Rebuild The Colossus Rebuild Project by Anthony E Sale, FBCS A bit of History Colossus was designed and built at the Post Office Research Laboratories at Dollis Hill in North London in 1943 by a team led by Dr Tommy Flowers to help Bletchley Park in decoding the intercepted German telegraphic cipher traffic enciphered using the Lorenz SZ42 cipher machine. Lorenz SZ42 cipher machine at Bletchley Park This cipher machine enciphered electrical teleprinter signals which used the international 5 bit Baudot teleprinter code. It enciphered the input plain text by adding to it successively two characters before transmission. Because this addition was bit by bit modulo 2, at the receiving end with the Lorenz machine set to the same start position, the same two characters were added again to the received characters revealing the original plain text. This scheme had been developed in America by Gilbert Vernam in 1918. Vernam used two tapes of random characters to generate the additional characters. With the same tapes at each end set to the same start position this system was unbreakable. The Germans decided that the distribution of these key tapes presented too great an operational problem and the Lorenz machine uses a complicated mechanical gearing and cam system to generate a pseudo random sequence with very long period and 10^19 complexity. They thought this was good enough to ensure unbreakability, it wasn't! A bibliography of works discussing the Lorenz cipher has been compiled by Frode Weierud is availabe here by permission. As is a book chapter describing the Swedish effort to crack Lorenz. The German high command thought that the Lorenz machine was completely unbreakable and used it for their most secret messages, literally from Hitler to his generals and between generals. The interception and deciphering of these messages gave Generals Eisenhower and Montgomery vital information prior to and after D Day in 1944. Colossus was the world's first large electronic valve programmable logic calculator, not just one but ten of them were built and operational in Bletchley Park the home of Allied WW II codebreaking. The question of what is the worlds first computer is less a question of history than a question of definition. The Mark 1 at Manchester (1948) is a strong contender. A view of Colossus Colossus found the wheel settings used by the German Lorenz machine operator for a particular message. When these had been found, which took about two hours, they were plugged up on the Tunny machine. It was this machine which actually deciphered the message. This is the Tunny room in Bletchley Park in 1945. Colossus, hardware details Input: cipher text punched onto 5 hole paper tape read at 5,000 characters per second by optical reader Output: Buffered onto relays: Typewriter printing onto paper roll Processor: Memory 5 characters of 5 bits held in a shift register. Clock speed 5kc/s derived from input tape sprocket holes. Internally generated bit streams totalling 501 bits in rings of lengths equal to the number of mechanical lugs on each of the 12 Lorenz wheels. A large number of pluggable logic gates. 20 decade counters arranged as 5 by 4 decades. 2,500 valves. Power supplies +200v to -150v at up to 10A. Power consumption 4.5KWatt Size: Two banks of racks 7ft 6inches high by 16ft wide spaced 6 ft apart. Bedstead, 7ft 6inches high 4ft wide by 10ft long Colossus, operating cycles The basic machine cycle: read a character from tape, get bits from bit stream generators, perform up to 100 logic operations, clock result into decade counters. The cycle determined by the input tape: The intercepted enciphered text tape is joined into a continuous loop with about 150 blank characters in the join. Specially punched start and stop holes indicate the beginning and end of the cipher text. On receipt of start hole pulse: Start bit stream generators and send sampling pulses to reader output. Execute basic machine cycle until receipt of stop hole pulse: Staticise counter states onto relays. After a delay, reset counters and reset bit stream generators to a new start position. Colossus programming All programmes hard wired, some permanently, some pluggable. Conditional jumping possible between alternative programmes depending on counter outputs. The Rebuild Work on the rebuild started two years ago with the collection of all available information about Colossus, including a series of official photographs taken in 1945. The first stage was to produce accurate machine drawings of the frames for Colossus (all the original machine drawings had been burnt in 1960). This involved three months of eyestrain pouring over the photographs and using 3D projections to transfer the details to a CAD system, EasyCad running on a 486 PC. Next problem was the optical paper tape reader system. The details of this are not shown in any of the photographs. However I managed to locate Dr Arnold Lynch who designed the reader system in 1942. Although well into his 80's Dr Lynch came to my house and using my CAD system we re-engineered the reader system to his original specifications. Then I built it and here it is. It uses original Colossus hard vacuum photocells, shown here on the left and a mask onto which the image of the tape is projected by a Colossus lense. All the racks are now in place. Here are some of the decade counters. We are also rebuilding the Tunny machine. The current state of Colossus: Jan 96 Examples of most of the circuit panels are now working and the whole machine is working at one bit level. We are now rapidly cloning circuit panels to populate all the racks. I need lots more valves: EF36, 37 or 37A pentodes, 6J5 triodes, 6V6 tetrodes and GT1C gas filled triode thyratrons. The 6J5's and 6V6's should be the large glass versions to look right. Please send any contributions, valves or money, to me (Tony Sale) at "The Colossus Rebuild Project, 15 Northampton Road, Bromham, Beds MK43 8QB" tel: 01234 822788 email: TSale(a)qufaro.demon.co.uk Come and see the Colossus Rebuild, the Lorenz machine and codebreaking exhibitions in Bletchley Park. This page was created by Tony Sale (tsale(a)qufaro.demon.co.uk) of the Bletchley Park Trust, and has been modified by Jeff Goldberg (J.Goldberg(a)Cranfield.ac.uk) of the Cranfield University Computer Centre. Title: Cryptome Cryptome JYA/Urban Deadline OpEd _______________________________________________________________________________________ File Topic Date _______________________________________________________________________________________ sib.htm Scientists in Black February 3, 1998 CAP The Cryptographic Analysis Program (offsite) February 2, 1998 Arne Beurling The Geheimschreiber Secret (offsite) February 2, 1998 Army Stegano US Army Steganography (offsite) February 2, 1998 <A HREF="http://www.cranfield.ac.uk/ccc/bpark/colossus.htm ">Colossus Rebuilding Colossus (offsite) February 2, 1998 Frode Crypto Cryptology Papers (offsite) February 2, 1998 jimbell9.htm Jim Bell Update February 2, 1998 echelon-boost NSA Surveillance System Boosted (offsite) February 2, 1998 cn020298.txt Crypto News February 2, 1998 bxa020298.txt BXA Meet on Export Rules and Procedures February 2, 1998 cs020298.txt Rules to Challenge Customs Seizures (63K) February 2, 1998 usg020298.txt USG Secret Meets February 2, 1998 echelon.htm NSA Global Surveillance System February 2, 1998 cathedral.htm The Cathedral and the Bazaar February 1, 1998 natsec-rule.htm Protection of National Security Information February 1, 1998 47cfr216.txt National Communications Issuance System (106K) February 1, 1998 47cfr213.txt Emergency Telecomms Precedence System (17K) February 1, 1998 47cfr202.txt National Security Emergency Plans & Ops (27K) February 1, 1998 47cfr201.txt Policy for Telecomms During Emergencies (12K) February 1, 1998 44cfr336.txt Facilities for National Security Emergency (14K) February 1, 1998 44cfr334.txt FEMA Graduated Mobilization Response (14K) February 1, 1998 32cfr322.txt Privacy Act Exemption for NSA Records (40K) February 1, 1998 32cfr299.txt National Security Agency FOIA Program (8K) February 1, 1998 32cfr2101.txt National Security Council FOIA Requests (24K) February 1, 1998 32cfr185.txt Military Support to Civil Authorities (52K) February 1, 1998 31cfr9.txt Effects of Imported Articles on National Security February 1, 1998 22cfr124.txt Contracts, Off-Shore Buys, Defense Services (42K) February 1, 1998 22cfr123.txt Licenses for the Export of Defense Articles (51K) February 1, 1998 22cfr121.txt United States Munitions List (92K) February 1, 1998 _______________________________________________________________________________________ ntia-dnsdrft.htm Draft Proposal for New Domain Name System January 30, 1998 korczak.txt Boris Korczak: CIA Agent Seeks Payment January 30, 1998 pm87.txt Prez on Terrorist Threat to Middle East Peace January 30, 1998 leahy-wipo.txt Senator Leahy on Ratifying WIPO Treaties January 30, 1998 32cfr147.txt DoD: Policies for Access to Classified Info January 30, 1998 32cfr148.txt DoD: Facilities for Storing Classified Info January 30, 1998 32cfr149.txt DoD: National Policy on Technical Surveillance January 30, 1998 ntia012798.htm RFC: Self-Regulation for Privacy Protection January 30, 1998 cylinked.htm Latest: Cylinked to Organized Crime? January 29, 1998 websoft-warn.htm Web Software Warning January 29, 1998 scant-peril.htm U.S. Spy Agencies Pauline Peril January 29, 1998 mossburg.htm E-Comm Forum on E-Authentication and DigSig January 29, 1998 pollard.htm Bankers O Table on E-Authentication and DigSig January 29, 1998 brown.htm Secret Service on Financial Instruments Fraud Janaury 29, 1998 rpk-hack.htm Invite to Hack RPK InvisiMail January 29, 1998 nrc012998.txt Generic Letter on Y2K Readiness for Nuke Plants January 29, 1998 fc012998.txt FinCEN RFC on Information Collection January 29, 1998 dtc012998.txt Arms Export to Saudi Arabia January 29, 1998 nsa-etc-nf.htm NSA, Echelon, Trade & Crypto/Netscape & Fortify January 28, 1998 dod012898.txt DoD Blacklist of Higher Education January 28, 1998 47usc1002.txt Interception of Digital and Other Communications January 28, 1998 cn012898.txt Crypto News January 28, 1998 cn012798.txt Crypto News January 27, 1998 bxa-fy98.txt BXA Funding FY 1998 January 27, 1998 cia-tsang.htm CIA Concedes Spying on Americans January 26, 1998 atpc.htm EU-Parliament: Technologies of Political Control January 26, 1998 us-crypto.htm US Crypto Policy January 25, 1998 pg-nzcrypto.htm New Zealand Crypto Policy January 24, 1998 ra-ukcrypto.htm UK Crypto Policy January 24, 1998 whp012398.htm Payne/Morales vs. NSA: Reply to Defendant January 23, 1998 kellner.htm Intellectuals and New Technologies (66K) January 23, 1998 bxa012398.txt BXA Penalizes Export Violator January 23, 1998 osd012398.txt Compensation of North Viet-Imprisoned Operatives January 23, 1998 dod012398.txt Defense Dept Secret Meets January 23, 1998 walton-pk.htm GCHQ: The Pre-History of Public Key Cryptography January 22, 1998 primer The Proliferation Primer (offsite) January 22, 1998 sh105-238.txt Proliferation and US Export Controls (196K) January 22, 1998 sh105-267.txt Safety and Reliability of US Nukes (347K) January 22, 1998 acda012298.txt Arms Control Secret Meet January 22, 1998 pd012298.txt Prez Notice on Mideast Terrorism Emergency January 22, 1998 bia012298.txt Rule on Indian Casinos January 22, 1998 cn012198.txt Crypto News January 21, 1998 fc98.htm Financial Cryptography '98 January 20, 1998 doj-ssgsup.htm Supplement to Fed Guide for Seizing Computers January 20, 1998 cn-netreg.htm New Chinese Internet Regulations January 20, 1998 pg-get-MSkey.htm How to Recover Private Keys for Microsoft Wares January 20, 1998 ietf-dea-97.htm IETF Draft Encryption Algorithms 1997 January 20, 1998 radio-rec.htm Update: Locating Radio Receivers; Encoder Stolen January 20, 1998 pipenet.htm PipeNet Description January 20, 1998 dod012098.txt Defense Dept Secret Meets January 20, 1998 bernstein12.htm Transcript of Bernstein Hearing January 19, 1998 fbi-umbc.htm Barry Smith (FBI) to Speak on Encryption Policy January 18, 1998 de-snoop.htm Update: German Surveillance State January 17, 1998 bxa-wa-rule.htm Update 2: BXA Rule on the Wassenaar Arrangement January 16, 1998 pd98-10.htm Prez OKs China's Nuclear Controls January 16, 1998 tcryptol Theory of Cryptography Library (offsite) January 16, 1998 cn011698.htm Crypto News January 16, 1998 nsasuit8.htm USA/NSA Responds to Payne/Morales Motion Janaury 16, 1998 dod011698.txt Defense Dept Secret Meets January 16, 1998 bxa011398.txt Materials Advisory Meet January 15, 1998 crypto-kong.htm Announcing Crypto Kong January 15, 1998 occ-dstc.htm OCC OKs CA as Authorized Banking Activity January 14, 1998 aes-980820 Advanced Encryption Standard Conference (offsite) January 14, 1998 ustr010898.txt Update: Telecommunications Trade Agreements January 14, 1998 rc2.htm Rivest Describes RC2 Encryption Algorithm January 13, 1998 fc011398.txt FinCEN Regulates Card Clubs January 13, 1998 ta011298.txt Key Management Infrastructure Meet January 12, 1998 nist011298.txt Transmission-Electron Microscopy Meet January 12, 1998 doa011298.txt Army Hazard Containment Invention January 12, 1998 gps-jam.htm GPS Jamming January 11, 1998 arthur.htm The Force of An Idea: Theory of USA v. Microsoft January 10, 1998 RSA-stego.htm Batch RSA for Stego Data January 9, 1998 batch-DSA.htm Batch DSA January 9, 1998 cell-track.htm Update 2: Mobile Cell Phone Surveillance January 9, 1998 fiat-rsa.htm Fiat's Batch RSA January 9, 1998 aes010798.htm Update: Advanced Encryption Standard January 9, 1998 doj010998.txt RFC: USA v. IBM/STK Antitrust Suit January 9, 1998 bmd010898.txt Ballistic Missile Defense Secret Meet January 9, 1998 nih010898.txt Commercialization of Medical Data January 9, 1998 fas-pde Prez Directives/Executive Orders (offsite) January 7, 1998 ussc-ecopy.htm Sentencing for Electronic Copyright Violations January 6, 1998 ussc010698.txt RFC: US Sentencing Guidelines (254K) January 6, 1997 mercier.htm Terrorists, WMD, and the US Army Reserve January 6, 1998 terror-rnd.htm US Counterterrorism R&D Program January 6, 1998 belet Bob East Letter on AP/Jim Bell/IRS (offsite) January 6, 1998 pitfalls Schneier: Security Pitfalls in Crypto (offsite) January 5, 1998 dsb010598.txt Defense Science Board Secret Meets January 5, 1998 ntia010598.txt Funds for Public Telecommunications January 5, 1998 cn010598.txt Electronic Surveillance News January 5, 1998 csda.htm Cypherpunks Smartcard Developer Association January 4, 1998 aimd-98-21.htm Executive Guide: Info Security Management (139K) January 3, 1998 blast-mono.htm Blast Resistant Doors Monograph January 3, 1998 tempest-door.htm Electromagnetic Shielding/TEMPEST Door January 3, 1998 ehj.htm Banned Basque Video: Democratic Alternative January 3, 1998 fda010298.htm Policy for External Penile Rigidity Devices January 2, 1998 doe010298.htm Defense Nuclear Facilities Safety Plan January 2, 1998 dos010298.txt Meet on Global Communications and Info Policy January 2, 1998 doa010298.txt Army Science Board Meet January 2, 1998 _______________________________________________________________________________________ Cryptomb 2 June-December 1997 Cryptomb 1 To May 31 1997 (site stats) DoE: Pay Bill Payne DoJ: Free Jim Bell

1 0