December 2003 - cypherpunks-legacy

No Subject
by holist 17 Dec '03

17 Dec '03

I'm sorry if this is gnawing at old bones for you, but I recently heard from a rather paranoid, anonymous source here in Hungay that PGP was compromised, Zimmermann sold out to the Feds, all versions except possibly early DOS versions of PGP have back doors in them. He is also claiming that the CIA have already provided the backdoor-key to PGP 5.0 to the Hungarian Secret Services. Is he being too paranoid, or what? The reason I am asking cypherpunks, which I realise is not really a list dedicated to PGP, about them, is that their credentials to my mind would be sufficient to discredit. I have heard this rumour in sufficiently bogus intellectual contexts before (Cyberconf8, if that rings a bell to anyone - wouldn't blame you if it didn't) where it seemed blatantly obvious that it was entirely unfounded, as the people who were spreading it could not recognise code if they saw it, and seemed only an attempt to appear to be in the know. This source, however, seems different. Can I have some reassurance, please? And could you possibly suggest how someone unable to check the code themselves could go about authenticating a version of PGP? It is fated to become a rather important issue here soon. thank you holist

4 3

Pi(x) - How many primes below x?
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > X-within-URL: http://www.utm.edu/research/primes/howmany.shtml#pi_def > Consequence Three: The chance of a random integer x being prime is > about 1/log(x) > 1.1. pi(x) is the number of primes less than or equal to x > [up] 2. The Prime Number Theorem: approximating pi(x) > > Even though the distribution of primes seems random (there are > (probably) infinitely many twin primes and there are (definitely) > arbitrarily large gaps between primes), the function pi(x) is > surprisingly well behaved: In fact, it has been proved (see the next > section) that: > > The Prime Number Theorem: The number of primes not exceeding x is > asymptotic to x/log x. > > In terms of pi(x) we would write: > > The Prime Number Theorem: pi(x) ~ x/log x. ____________________________________________________________________ Technology cannot make us other than what we are. James P. Hogan The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Is Open Source safe? [Linux Weekly News]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > X-within-URL: http://lwn.net/1998/1119/Trojan.html > THE TROJAN HORSE > > > Bruce Perens <bruce(a)hams.com> > > > There's a problem that could very badly effect the public perception > of Linux and Open Source. I want people to think about this, and > hopefully "head it off at the pass" before it happens. > > Perhaps it's already on your system today: a trojan-horse program. It > might be a game, or more likely a system utility. It's author uploaded > it to an FTP archive, where it was then picked up by your favorite > Linux distribution, who wrote it onto the CD-ROM that you bought. It > works just fine, but hidden away in the program is a special feature: > a secret back-door past your system's security. > > Perhaps the author of this attack is tired of hearing about what great > hackers we are, and wants to take us down a notch. He's patient - he > will wait until his program is distributed to tens of thousands of > Linux systems before he says a word. But say is what he'll do - he's > not really interested in breaking into your system. What he wants is > the publicity, bad publicity for us, and lots of it. We've left the > gates open for this trojan horse. Let's talk about how to close them, > and hope we have enough time to solve this problem before our > reputation is hurt. [mnoga tekct oodalyaty] ____________________________________________________________________ Technology cannot make us other than what we are. James P. Hogan The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

7 9

Wired: AOL selling E-Stamps
by Bill Stewart 17 Dec '03

17 Dec '03

http://www.wired.com/news/news/business/story/16374.html AOL's E-Stamp of Approval Wired News Report 12:20 p.m. 19.Nov.98.PST Is it time for stamp collectors to go online? America Online (AOL) and E-Stamp, an online postage firm, said on Thursday they will make Internet postage service available to customers of AOL, CompuServe, AOL.COM, and AOL's Digital City. AOL and E-Stamp's service will allow customers to securely purchase postage online and print "digital stamps" on envelopes, labels, or documents using their personal computer and a standard printer. Customers must first install E-Stamp software. They can then buy postage by credit card, electronic fund transfer, or check. Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

Registration confirmation - Yahoo! Chat
by chat-register＠yahoo-inc.com 17 Dec '03

17 Dec '03

Welcome to Yahoo! Please save this message for future reference. This confirmation message is sent to all users when they create a new account with Yahoo. During registration we require users to enter their email address. This confirmation notice is then sent to that address. If you DID NOT request this account, we encourage you to REMOVE it by doing the following: If your email software supports it, you can simply click on the link below. Since this web address (URL) is quite long you may find it necessary to copy the entire URL and paste it into your Web browser. http://edit.my.yahoo.com/config/remove_user?k=IXtKZI53f2J1aHdyeXw4jiF5Sjd3M… If you are prompted for the deletion key when using the URL above, please use the following deletion key: IXtKZI53f2J1aHdyeXw4jiF5Sjd3MnpOfDc1T2BlTnkhdUpONjZOMjU1MDQhc0pkf2Zz Or, if you do not have internet access, please reply to this email (and make sure to copy this entire email in your reply) with REMOVE as the subject line. ___________ Your Yahoo ID is: cypher_punk You can return to Yahoo! Chat by going to http://chat.yahoo.com/ Your Yahoo! ID may be used to access any of the Yahoo! services that request a Yahoo! ID, such as: My Yahoo - http://my.yahoo.com Yahoo Calendar - http://calendar.yahoo.com Yahoo Chat - http://chat.yahoo.com Yahoo Classifieds - http://classifieds.yahoo.com Yahoo Clubs - http://clubs.yahoo.com Yahoo Finance - http://quote.yahoo.com Yahoo Games - http://play.yahoo.com Yahoo Mail - http://mail.yahoo.com Yahoo Message Boards - http://messages.yahoo.com Yahoo Pager - http://pager.yahoo.com Yahoo Travel - http://travel.yahoo.com Your e-mail is: cypherpunks(a)toad.com We will use this address is case you ever forget your Yahoo ID or password. We'll need an address to automatically send a response to you. To change this address, go to http://my.yahoo.com and click on the Account Information link at the top of the page. The edit page will let you update your E-Mail address, and other personal information and preferences. ________ Yahoo! Accounts - Top Frequently Asked Questions (FAQ) Q. How much is all this going to cost me? A. Absolutely nothing. All Yahoo! information is paid for through advertising. Q. What if I forget my Yahoo! ID or password A. Just click on the Help is Here link at the bottom of the login page. We'll ask you some basic questions to confirm your identity, then send you the information to the email address listed in your account. Q. How do I change my password or Yahoo! ID? If you would like to change your Yahoo Password in My Yahoo!, just click Acct Info at the top of the page. Unfortunately, we do not have the ability to change your Yahoo! ID. You will have to create a new account if you wish to have a new Yahoo! ID. Please note that if you do re-register, you will need to re-set all of your preferences for your My Yahoo! and other Yahoo! personalized services. Q. What is an Alias? A. Under your Yahoo! ID, you may add additional names for use in our various services, such as Chat and Classifieds. Q. How is the Yahoo! ID stored? A. Your Yahoo! ID is stored as a cookie on your computer. This way, you only need to login once. If you upgrade your computer software, change computers, delete your internet files, or click Sign Out at any time, it will clear the cookie from the computer's hard drive. Just return to the login page and enter your Yahoo! ID and Yahoo Password in the spaces provided and click Sign In to restore the information. You do not need to register again. Q. I use a public terminal, how do I sign out? A. If you are using a public computer, you should always sign out to clear your Yahoo! ID and cookie from the computer's hard drive. Just click the Sign Out button or link near the top of the main page. Thank you for using Yahoo! [208.198.164.2]

1 0

update.403 (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 20 Nov 1998 11:40:29 -0500 (EST) > From: physnews(a)aip.org (AIP listserver) > Subject: update.403 > CLUSTERING AND COLLAPSE IN GRANULAR MATERIAL. > DOES CHAOS AFFECT THE COURSE OF AN ARMS RACE? > Yes, it may, particularly when great disparities exist between two > nations' economies (as is the case with the US and Iraq), according > to a new mathematical model developed by researchers in Japan > (Mitsuo Kono, Chuo University, kono(a)fps.chuo-u.ac.jp, 011-81- > 426-74-4161). In an attempt to mathematically model the feedback > between two adversarial nations as each builds up arms stocks, > British scientist Lewis F. Richardson published in 1949 a well- > known set of equations with variables describing such things as a > nation's military spending levels and parameters quantifying factors > such as a nation's internal pressure against military spending. This > model suffered from shortcomings, most notably that its linear > equations provided all too predictable results; critics noted that > many arms races spiral unpredictably out of control. In the > Japanese researchers' model a nation's reaction to an enemy's > weapons buildup is not automatically to build more weapons but is > instead a function of the difference in weapons and military > spending between two nations. This approach leads to more > realistic nonlinear differential equations which quantify concepts > normally unknown to physics, concepts such as fear, threat, > grievance, and fatigue. Their model shows an arms race can > progress in a mathematically chaotic fashion when the economic > situation of the two countries is different, but is more predictable > when the economies are more comparable (Tomochi and Kono in > the journal Chaos, December 1998.) > CORRECTION. A typo affecting a single letter can completely > reverse the meaning of a sentence. Thus in Update 402 in the > sentence "It is not thought that physics does differentiate between > the forward or backward movement of time," "not" should be > changed to "now." ____________________________________________________________________ Technology cannot make us other than what we are. James P. Hogan The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

New Book: "Brothers Beware: Games Black Women Play"
by BSB009＠webmail.bellsouth.com 17 Dec '03

17 Dec '03

Sisters are saying: "Burn This Book" Brothers are saying: "Free at Last!" You decide . . . Call Today To Order This Book - (800) 830-2047 It will make a great Christmas Gift Brothers Beware: Games Black Women Play by A. Marshall ISBN:0-9658299-3-6 Price: $12.00 $3 Shipping - COD Charges are FREE for a limited time. ____________________________ Brothers Beware: Games Black Women Play is a book that pulls no punches when it details the many tricks and manipulative games for which black women are notorious. This book is an honest, no holds barred, uncensored discussion about dating in the African American community. The number of eligible black men is constantly decreasing. Therefore, black women are doing whatever is necessary to find and keep a good black man. Many of her secrets are exposed in this book. The author interviewed several black women who revealed many of the techniques used by Sisters to get what they want, and who they want, any time they want. These women were especially helpful on the hilarious chapter entitled: "Games Women Play On Each Other." The author had no need whatsoever to embellish - The TRUTH was definitely sensational enough. ____________________________ Chapters "Was She Born This Way?" "What He Has Have To Be With Her" "What Have You Done For Me Lately?" "Lies Women Tell Men" "She's Got The Power" "The Dating Game" "The Sympathy Game" "The Suicide Game" "Honey, I'm Pregnant" "She Loves Me . . . She Loves Me Not" "Games Church Women Play" "Young Women and Old Fools" "Games Women Play on Each Other" "Was It Really Worth It?" _______________________________ Ordering Information Brothers Beware: Games Black Women Play ISBN:0-9658299-3-6 Price: $12.00 $3.00 Shipping - COD Charges are free for a limited time. Wholesale Discounts Available ______________________________ Order by Phone 800-830-2047 - 24 hrs

1 0

Reptilian Nazi $oftware
by Anonymous 17 Dec '03

17 Dec '03

While playing Spin the Whiskey Bottle with my dog, an entirely accidental motion caused a search engine to barf this up: http://www.letr.com/swat.html "Here's the ultimate 'SWAT' program - from intelligence gathering to incident command - with add on modules for tracking , training and performance evaluations ! ... "Complete detailed information on suspect description and history Information includes: o Religious and cultural background o political affiliations o psychological and medical disorders o likes and dislikes o family members o close relationships o employer and co-workers o motivational factors "Designed by Sergeant Gary Rovarino LASD SWAT Team Leader" (is _anyone_ taking names???) I _thought_ I also saw, but can't be sure: "We get almost as high writing and selling this software as our users do kicking in doors and shooting greasers in the back!" - Trembley Nerdwater, programmer [A Deep Gargling Source To Be Named Later reveals that when they get the foreign language versions of this software working, sales to Third World Nazi ButtFucktatorships should almost rival sales to police forces in U.S. and European Nazi ButtFucktatorships.] Optional modules include: o Instant Download From Deathlist Computer For those slow nights when the squad is in danger of losing its edge. Includes Random Hit Selector, Semiautomatic Route Selector, and optional route selection by pizza and titty bar locations. o Family Member and Associates Deathlist Upload For tidying up those loose ends. New data found on or near the perp's body can be entered in the field. o Special OKC Witness List For units with assigned responsibility for keeping the lid on _that_ one! Includes on line link to DOJ, FBI, ATF and specially assigned judges for authorization of special field actions against witnesses who have suddenly recovered their memories, gotten religion, have been reading unauthorized radical literature such as the U.S. "Constitution." Remember our motto, "Loose Lips Can Always Be Stapled Together." o Waco Tutorial Learn from the masters! No prisoners, no survivors! No bad press! Includes tips on obscuring causes of death by agglutinating bodies together! Confound medical examiners by combining pieces of perps to make remains that have been shot, gassed, burned, asphyxiated, strangled, decapitated, disemboweled, etc.! o Portable Press Dossier Be able to pull up the files of inquisitive reporters in real time! Get instant and unprecedented cooperation! Buy now and get testosterone supplements* at no additional charge! You must provide your own adrenalin. Remember! The rush is not on the radio -- it's going through the door! *suppositories only ButtFuckMonger

1 0

Issues of crypto, politics, & chaos [sciencedaily.com]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > X-within-URL: http://www.sciencedaily.com/news/order_chaos.htm > Posted 10/8/98 > Encryption Advance For Secure Global Communications > Scientists at the Department of Energy's Los Alamos National > Laboratory have achieved a significant advance in demonstrating the > viability of an unbreakable encryption scheme for transmitting secure > communications to and from satellites. > > Posted 9/9/98 > Mathematicians Prove That Group Decisions Can Be Impossible To Predict > For several years, some political scientists and others have argued > that group decisions such as elections are impossible to > anticipate-even if the preferences of the voters are well established > and the decision-making rules are set. Now there's a mathematical > proof to back that proposition. > > Posted 9/4/98 > Chaos-Based System That "Evolves" Answers May Be Alternative To > Current Computers > A revolutionary new computing technique that uses a network of chaotic > elements to "evolve" its answers could provide an alternative to the > digital computing systems widely used today. Described for the first > time in the September 7 issue of Physical Review Letters this > "dynamics-based computation" may be well suited for optical computing > using ultra-fast chaotic lasers and computing with silicon/neural > tissue hybrid circuitry. [text deleted] ____________________________________________________________________ Technology cannot make us other than what we are. James P. Hogan The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Buffalo Sabres Chat Registration
by Sabres Webmaster 17 Dec '03

17 Dec '03

Following is your Chat information (Please save this info!) ----------------------------------- username: cpunk password: 4199 Remember, the username and password are both CASE SENSITIVE!

1 0

STUFFED NOW HAS LINKS TO 100S MORE PHOTOS!
by STUFFED TUE NOV 24 17 Dec '03

17 Dec '03

CHECK OUT ALL THE NEW STUFF IN STUFFED! + DREAM GIRLS + BRIEN'S WORLD XXX + CHERRY BUSTER'S FREE XXX + JACK'S HOUSE OF SLUTS + MAIDENJUICE + WACK IT OFF + THE XXX PLACE + THE NUDE FILES + 2 PERVERSE 4 U + NUDE PICS + MUCH, MUCH MORE! ----> http://stuffed.net/home/ <---- This email is never sent unsolicited. Stuffed is the supplement for the Eureka newsletter you subscribed to. Full instructions on unsubscribing are in every issue of Eureka! ----> http://stuffed.net/home/ <----

1 0

Netscape AOL Instant Messenger Confirmation (kB3bEjeb1I aohelsux)
by Netscape AOL Instant Messenger 17 Dec '03

17 Dec '03

Thank you for registering for Netscape AOL Instant Messenger! Your registration for screen name aohelsux has been received. Please reply to this message within 48 hours to complete the registration process. Simply reply to the present message and type 'OK' as the text of your message.

1 0

Why should I buy Gold Coins?
by coins＠registered-e-mail.com 17 Dec '03

17 Dec '03

/////////////////////////////////////////////////////////////////////////////// If you wish to be removed from our future mailings, please reply with "Remove" in the subject header and our software will automatically block you from our future mailings. If you do not care for this type of advertising, we apologize for the intrusion. We do, however, thank you for your time. /////////////////////////////////////////////////////////////////////////////// Many serious investors have chosen Coins because they want not only the highest profit potential, but Liquidity, Security and Privacy. The Coin market is free of Governmental Regulations. By current Law, Numismatic Coins cannot be confiscated. The classic Supply and Demand formula is in full swing with Money coming out of the Stock Market and being Directed into Rare Coins. The upside potential offers Collectors and Investors the Opportunity to see Substantial Growth over the next 3 - 5 years. Whether your interest is to Buy, Sell or Trade, we would like to be your Rare Coin & Precious Metals Dealer. For more information, or for a free Appraisal and/or Newsletter, please e-mail us at coins(a)registered-e-mail.com with "coin info" as the Subject.

1 0

Re: Is Open Source safe? [Linux Weekly News]
by Jim Gillogly 17 Dec '03

17 Dec '03

Frank O'Dwyer writes: > Here we're talking about > deliberately inserted back doors. Those can get extremely nasty, and may > be unpatchable. Examples include "data kidnap" (encrypting the target's > information in situ and demanding a ransom for the decryption key), and > "data cancer" (slow corruption of the target's information, ensuring > that the backups are also corrupted). ... I haven't heard of any real > examples of such attacks, but that's not especially comforting. The "data kidnap" scenario was tried with the "PC CYBORG (AIDS) virus" (actually a Trojan) scare of 1989, where a disk with a database application was sent to a number of recipients. I think it scrambled the FAT. It gave a post office box in Panama for the ransom payments. -- Jim Gillogly Highday, 3 Foreyule S.R. 1998, 20:23 12.19.5.12.16, 8 Cib 9 Ceh, Fourth Lord of Night

1 0

RealSystem G2 Ships
by radinfo＠real.com 17 Dec '03

17 Dec '03

TO REAL DEVELOPER PROGRAM MEMBERS RealSystem G2, the next generation media delivery system is complete and ready for purchase and production deployment! Built from a completely new codebase, RealSystem G2 is the result of 2 years of software development and engineering breakthroughs. RealSystem G2 incorporates revolutionary advances, like SureStream, RealVideo G2 (including compelling new video technology from Intel Corporation), RealAudio G2 and SMIL support. GET STARTED WITH REALSYSTEM G2 TODAY! · Download RealServer G2 Members of the Real Developer Program can pick up a copy of the RealSystem G2 server in the Members Only area of the Devzone at http://proforma.real.com/svdl/realdev.html · Download RealSystem G2 Authoring Kit and get started producing content today. Go to http://www.real.com/devzone/library/creating/index.html · Learn more about RealSystem G2 Find out the latest about RealSystem G2 at http://www.real.com/g2/index.html WHAT'S NEW IN REALSYSTEM G2 SINCE BETA2 With this RealSystem G2 announcement we are also launching a new line of production tools that will make getting started even easier, and provide increased power for current users. Check out our new tools including RealProducer G2, RealProducer Plus G2. · The free RealProducer G2 creates basic RealAudio and RealVideo and is available for immediate download. http://www.real.com/products/tools/producer/index.html · The new RealProducer Plus G2 is the premium tool for creating RealAudio and RealVideo and is available for immediate purchase and download. http://www.real.com/products/tools/producerplus/index.html · RealProducer Plus G2 creates the best end user experiences: · Streams the best quality content to all connection speed allows and dynamically adjusts to congested network conditions · Allows content creators to custom tailored their content by allowing exact data rates specification, Codec selection, and video frame rate. To learn more about RealSystem G2 and to see the latest applications, visit our Technology Showcase at http://www.real.com/showcase/index.html Thank you for your time and consideration, and best regards. Kristi Larsen Real Developer Program RealNetworks, Inc. Visit the Devzone Today! http://www.real.com/devzone -----Feature Detail------- RealSystem G2 is a complete, modular, open standards-based, cross-platform software media system, with full support for RTSP and SMIL. Some of the most exciting features of RealSystem G2 include: + SureStream, a breakthrough technology that dynamically monitors and adjusts throughput up or down based on network capacity. + RealAudio G2 which delivers 80% greater frequency response and superior packet loss resilience. + RealVideo G2, incorporating Intel Streaming Web Video technology, delivering 30 frames per second support. + Support for SMIL and advanced streaming media datatypes, RealText, RealPix, and RealFlash allowing you to create rich multimedia presentations. + The ability to serve native datatypes like AU, MPEG, AIFF, WAV, VIV and more. + An extensible, Standards-based, open architecture, with support for SMIL, RTSP, and IP Multicast. + Advanced Networking, featuring Caching support, Splitting, Firewall support, and Load Balancing. --------------------------------------------- For information about this e-mail including how to subscribe or unsubscribe from future announcements, please visit: http://www.real.com/mailinglist

1 0

Re: Goldbach's Conjecture - the various definitions (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Tue, 24 Nov 1998 06:03:43 +0100 > From: "Albert P. Franco, II" <apf2(a)apf2.com> > Subject: Re: Goldbach's Conjecture - the various definitions > Math works because in most (we would like to say all...) cases it is WELL > DEFINED. Subtle differences in the definition of a problem can drastically > alter the solution. Absolutely. > Goldbach's Conjecture states that any EVEN OR ODD > number can be expressed by a sum of three primes. No, Goldbach's says specificaly EVEN numbers. > lose sight of the domains of the two statements. He never stated that ODD > numbers could be expressed as sums of TWO primes. Nobody said he did. > It is very important to get all of the information assembled before running Absolutely. ____________________________________________________________________ Technology cannot make us other than what we are. James P. Hogan The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

building a better zyklon-B (Re: KRA on ADK vs KR, NAI membership)
by Adam Back 17 Dec '03

17 Dec '03

Writing about PGP's key recovery mechanism (CMR (Commercial Message Recovery) or ADK (Additional Decryption Key)), Dave Del Torto quotes from a letter he sent to info(a)kra.org: > I'm not aware of the KRA's public position on the recovery of > plaintext using cryptographically sound and ethically responsible > alternatives to the escrowing of keys in organizational situations, > e.g. PGP's Additional Decryption Key (ADK) mechanism. I don't see that ethics has any bearing on the difference between Key Escrow, and PGP's CMR "message recovery" design. They are both just yet another protocol to allow third parties to decrypt encrypted traffic. Ethics enter into the discussion when one one starts to argue about which third parties will be able to eavesdrop on the traffic. This issue is largely orthogonal to the general technique used. Parties which people are most concerned about having access to data are the spooks and governments via organisations such as NSA, GCHQ, ECHELON etc. In a commercial setting there is also some political debate about whether the employee has any expectation of privacy. One might also argue about whether it is ethical to design software which helps or makes it easy for third parties to gain access to the plaintext in general. > What is the KRA's public position on PGP's ADK? So one has to be clear of one's aims in asking KRA if they think PGP's CMR or ADK is a nice technology for adding NSA backdoors to crypto. Say, for example that they decided that CMR is neater than their CKRB mechanism. Now what? NSA/KRA lobby companies to include a modified CMR with the NSA's public key as a mandatory additional recipient? And NAI gets `asked' by the NSA to burn an NSA public key into PGP 7. Adam

1 0

Re: Securing data in memory (was "Locking physical memory (RAM) under Windows")
by Jim Adler 17 Dec '03

17 Dec '03

SCNSM 1.0 Beta, a non-swappable memory allocator for Windows 3.x/95/98, is available and can be downloaded from http://soundcode.com/content/download/products/scnsm/default.htm (docs) http://soundcode.com/content/download/products/scnsm/scnsm10b.zip (source) The SCNSM driver supports allocation of non-swappable memory on Windows 3.x/95/98. The principal design goal of SCNSM is to provide memory that will not be swapped to disk, under any circumstances. Typically, security applications require such memory to store private keys, passwords, and sensitive intermediate results of cryptographic calculations. SCNSM uses the same technique as allocating DMA buffers for hardware device transfers. The idea being that Windows doesn't swap DMA buffers and therefore won't swap this buffer either. The SCNSM source-code is copyrighted freeware. The intent here is to end the perennial nuisance of having sensitive security data swapped to disk which undermines the public's confidence in commercial security products. Please send any questions or bugs to me or support(a)soundcode.com. Jim ================ Jim Adler Soundcode, Inc. www.soundcode.com

1 0

Re: Securing data in memory (was "Locking physical memory (RAM) under Windows") (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: "Jim Adler" <jadler(a)soundcode.com> > Subject: Re: Securing data in memory (was "Locking physical memory (RAM) under Windows") > Date: Sat, 7 Nov 1998 22:47:48 -0800 > SCNSM 1.0 Beta, a non-swappable memory allocator for Windows 3.x/95/98, is > available and can be downloaded from [text deleted] > The SCNSM driver supports allocation of non-swappable memory on Windows > 3.x/95/98. The principal design goal of SCNSM is to provide memory that will > not be swapped to disk, under any circumstances. Typically, security > applications require such memory to store private keys, passwords, and > sensitive intermediate results of cryptographic calculations. [text deleted] Sounds cool, but I have a couple of questions: 1. Is it OpenSource? 2. I assume since it never swaps to disk the memory requirements for the computer are large. What is the minimum suggested if one runs say 5 apps that each require 16M each, 5*16M & OS overhead? And what is the suggested OS overhead with no swap to disk? (OK, that last one might be a 3rd question) ____________________________________________________________________ Technology cannot make us other than what we are. James P. Hogan The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1

Goldbach & Sum's of two primes to odd numbers
by Jim Choate 17 Dec '03

17 Dec '03

Somebody explain how to odd numbers added together make a third odd number. ____________________________________________________________________ Technology cannot make us other than what we are. James P. Hogan The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

ADV: All LIVE Adult Parade! Free Offer!
by Vic 17 Dec '03

17 Dec '03

******************************************************* This message is sent in compliance of the new email bill section 301. per Section 301, Paragraph (a)(2)(C) of S. 1618, further transmissions to you by the sender of this email may be stopped at no cost to you by emailing mailto:wjohns@tophosting.com Please type "Remove" in the subject line.Your request to be remove will be processed within 24 hours. Please DO NOT reply to this email if you wish to be removed. -------------------------------------------------------- FREE Adult Offer -- Five FREE Minutes -- All LIVE NEED A LITTLE SPICE IN YOUR LIFE? All Your Desires Are Satisfied -- The Best LIVE CyberNet Models Do As You Please! ALL LIVE -- ALL DAY -- ALL NIGHT Seductive Women: http://www.dddbra.com/196/index.html HardBody Hunks: http://www.dddbra.com/215/index.html ** LIVE 1-on-1 Shows! ** MALE or FEMALE! ** 5 FREE MINUTES of HOT ADULT LIVE ACTION! ** SATISFACTION GUARANTEED! All our shows are 100% LIVE and INTERACTIVE for your enjoyment! SEDUTIVE WOMEN That Do It ALL! http://www.dddbra.com/196/index.html -- OR -- HARDBODY HUNKS Give You What You Ask! http://www.dddbra.com/215/index.html See for yourself - We'll give you 5 FREE Steamy Minutes -- Satisfaction Guaranteed! --------------------------------------------------------- We apologize if you received this letter in error. Please email mailto:wjohns@tophosting.com and we will remove you from our mailings. Thank you! ---------------------------------------------------------

1 0

Export Market for Security Products
by 4details＠bitsmart.com 17 Dec '03

17 Dec '03

Dear reader, We have just visited your website and became interested in developing a long-term trading relationship with your company. We are the largest manufacturer of video door phones, specializing in a full range of security systems. Strong alliances have been established with many industries, such as: design institutes, building developers, construction and engineering firms, and real estate companies, etc. Our annual sales volume for 1997 was approximately US$ 10 million. Our core business is producing standard OEM & ODM security products that meet the individual needs of our customer's designs. Our quality control measures are strictly followed, from the very beginning of material development, until the goods are released to our customers. For full details on our company's profile, products, and distributorship / licensing agreements, please reply now. mailto:4details@bitsmart.com?Subject=VIDEO_DOOR_PHONES mailto:4details@bitsmart.com?Subject=DOOR_PHONES mailto:4details@bitsmart.com?Subject=SECURITY_PRODUCTS We look forward to your soonest reply! Thank you very much in advance. Sincerely yours, Mr. White Van Export Sales Manager Shenzhen Bailan Industrial Development Co., Ltd. Sales & Marketing Dept. Address: A 505, 5F, Build SEG Science Park, North. HuaQuing Road Shenzhen China Tel. (86)-755-376 2520 (8 Lines) P.C. 51828 Fax. (86)-755-332 1197 Pager: 191-548 4749

1 0

Re: Digital bearer postage stamps
by Ryan Lackey 17 Dec '03

17 Dec '03

Quoting Robert Hettinga (rah(a)shipwright.com) > I wonder if these guys have heard of double spending? > > Does anyone know whether this is some kind of 2-d barcode (it must be) or > is it something else? > > Cheers, > Robert Hettinga It's a 2-d barcode, with a bunch of info encoded into it.. Short answer: they use statistical security measures to prevent double spending, but they have a *scary* reputation and limitless resources to pursue fraud, something no one else really has. I would not be brave enough to double spend with this system from my home state, if I were in the US. Longer rambling answer: The E-stamp folks are pretty hardcore as far as security goes, I recall. They use a Dallas Semiconductor iButton (plug: check out the ibuttonpunks mailing list....) as a local value store, after paying for postage at a central location, and do other security measures I don't quite recall -- perhaps encoding your local post office, such that the local post office could keep its own database of double spenders, or having a global double spending database. The post office is pretty much protected from fraud, in any case -- much more than existing letters (which can be forged against high-speed equipment using a phosophor pen). I'm not sure how E-stamp protects itself from fraud, or protects its customers from E-stamp committing fraud, but I'm fairly convinced there is at least statistical security for the USPS against users. I believe the USPS published a standard during the search for a new postage system -- they did a pretty good job of it, I just never bothered to buy a copy. If someone bought a copy and mailed it to jya, it would be doing everyone a service. (Even if you have the nerve to commit bank wire fraud, check fraud, armed robbery, espionage, sedition, etc., you probably still aren't brave/reckless enough to commit postal fraud, though -- USPS inspectors make IRS auditors look passive) Cheers, Ryan ryan(a)venona.com

1 0

A tad more on Goldbach's...
by Jim Choate 17 Dec '03

17 Dec '03

I figure I'll drop a couple of more points on this since nobody else seems to have twigged to them.... Goldbach's original conjecture is crap. There is NO way that 3 odd numbers will ever equal an even number. Odd + Odd is Even. Even + Odd is Odd. Fermat was a hell of a lot more charitable to the original assertion than I would have been. Goldbach's existing conjecture can be worded another way: Any even number may be represented by the sum of 3 even numbers provided two of the numbers are 1 less than a prime and we add 2. It's obvious that an even number can always be the sum of other even numbers, it's axiomatic. The question actualy is: Is the set of even numbers whose members are one less than the corresponding member of the primes sufficient, when added to 2, to sum to all the even numbers. As far as I can find nobody has written a lot on patterns of even numbers 1 less than the odds. There's not even a name for the set that I can find. As to somebodies assertion that an odd number can be represented by the sum of two odds, better study your math a tad better. Odd + Odd is *always* Even, never Odd. Happy Thanksgiving! ____________________________________________________________________ Technology cannot make us other than what we are. James P. Hogan The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

3 2

unscribe
by Maxim Bugaenko 17 Dec '03

17 Dec '03

1 0