December 2003 - cypherpunks-legacy

Medical Equipment
by sales＠galaxyhp.com 17 Dec '03

17 Dec '03

================================================== You're receiving this email because you are an Apple Macintosh user. If you wish to be excluded from any future mailings please return this message with "remove" (without quotes) as the subject. ================================================== GALAXY specializes in the repair and upgrade of Apple Macintosh, PowerMacintosh and PowerBook computers. We provide component level repair, with 6 month warranty, for Motherboards, Power Supplies and Floppy Drives for all Macintosh and PowerComputing Systems. We sell new and used Macintosh, PowerMacintosh and PowerBook computers, and wide range of parts: Motherboards, Floppy Drives, RAM, Hard Drives, CD-ROM Drives, Zip Drives, Video Cards, Monitors, Printers, Accelerators, G3 Cards, Cache Cards, FPU's, Cables, Modems, Power Supplies & Adapters, Keyboards, Mice, Ethernet Cards, Batteries, Pentium Cards, Case Parts. . and a whole lot more! Our prices are very competitive, for example: - PowerMac 7200/75MHz 8/500/CD - $599 (Ref :90day) - Apple 200MHz PPC604e Card $199 (New: 2yr) - 1.44MB auto-insert floppy drive $65 (Ref: 6mths) - Power Computing power supply repair $115 (Ref: 6mths) - Global Village 33.6Kbps fax/modem $45 (Ref: 90day) - 24x External CD-ROM Drive $135 (New: 1yr) - Apple 166MHz Pentium PC Card $349 (New: 1yr) - Apple MultiScan 15" AV Display $339 (New: 1yr) - PMac 6100 256K L2 Cache Card $15 (New: 1yr) To find out more about GALAXY please visit our web site at: <http://www.galaxyhp.com> Or, if you have a particular, or immediate interest please send your email request to <sales(a)galaxyhp.com> We accept Mastercard, Visa, American Express, edu. .& gov't PO's, and welcome international orders. GALAXY Hardware - 5075 Nectar Way - Eugene OR 97405 541-345-1817 (voice) 541-345-3094 (fax) +++++++++++

1 0

Re:
by Anonymous 17 Dec '03

17 Dec '03

Paul is coming from AOL using Netscape as a mailer and using the open relay at cesvxa.ces.edu. Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id CAA16186 for cypherpunks-unedited-outgoing; Sun, 27 Sep 1998 02:59:59 -0700 (PDT) Received: from cesvxa (cesvxa.ces.edu [144.50.1.2]) by toad.com (8.7.5/8.7.3) with ESMTP id CAA16181 for <cypherpunks(a)toad.com>; Sun, 27 Sep 1998 02:59:56 -0700 (PDT) Received: from 200-148-112.ipt.aol.com (200-148-112.ipt.aol.com) by cesvxa.ces.edu (PMDF V5.0-6 #6874) id <01J2AH6J8P400003T4(a)cesvxa.ces.edu> for cypherpunks(a)toad.com; Sun, 27 Sep 1998 06:01:57 -0500 (EST) Date: Sun, 27 Sep 1998 05:59:49 -0700 From: "Paul H. Merrill" <paulmerrill(a)acm.org> Subject: Re: To: cypherpunks(a)toad.com Message-id: <360E36C5.33C7DFDC(a)acm.org> Organization: Twenty First Century Camelot MIME-version: 1.0 X-Mailer: Mozilla 4.06 [en] (Win16; U) Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7bit References: <199809270531.HAA09168(a)replay.com> Sender: owner-cypherpunks(a)Algebra.COM Precedence: bulk X-Mailing-List: cypherpunks(a)algebra.com X-List-Admin: ichudov(a)algebra.com X-Loop: cypherpunks(a)algebra.com Content-Transfer-Encoding: 7bit

1 0

IP: US Says Bomb Suspect Had Nuclear Ambitions
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Delivered-To: ignition-point(a)majordomo.pobox.com X-Sender: believer(a)telepath.com Date: Sun, 27 Sep 1998 11:03:36 -0500 To: believer(a)telepath.com From: believer(a)telepath.com Subject: IP: US Says Bomb Suspect Had Nuclear Ambitions Mime-Version: 1.0 Sender: owner-ignition-point(a)majordomo.pobox.com Precedence: list Reply-To: believer(a)telepath.com Source: Chicago Tribune http://chicagotribune.com/news/nationworld/article/0,1051,SAV-9809270407,00. html U.S. SAYS BOMB SUSPECT HAD NUCLEAR AMBITIONS From Tribune News Services September 27, 1998 AFRICA -- American authorities have charged that a person described as a senior deputy to Osama bin Laden, the Saudi exile suspected in last month's bombings of two U.S. Embassies in East Africa, made significant efforts on behalf of the bin Laden group in 1993 to develop nuclear weapons. The authorities said that, in at least one case, there was evidence of documents relating to a proposed purchase of enriched uranium, but they did not say whether the group obtained uranium. The allegations, concerning Mamdouh Mahmud Salim, also assert that bin Laden had an official agreement with the Iranian government and with Sudan's ruling party to oppose the United States. They also suggest that the U.S. had penetrated the bin Laden organization and learned detailed information in 1996. The allegations were contained in newly unsealed court papers that charged Salim with conspiracy to murder and to use weapons of mass destruction against Americans overseas, including those in Saudi Arabia, Yemen and Somalia. Salim was arrested in Germany a week ago after flying there from Sudan. The U.S. said Friday it will seek his extradition to face charges in New York City. The government also asserted for the first time in court papers that the Iranian government had entered into a formal three-way "working agreement" with bin Laden and the National Islamic Front of the Sudan to "work together against the United States, Israel and the West." The front is the ruling party in Sudan. The Aug. 7 bombings of the U.S. Embassies in Kenya and Tanzania killed more than 250 people. ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer ********************************************** --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re:
by Anonymous lo14 17 Dec '03

17 Dec '03

Paul H. Merrill wrote: >1. There are lies, damn lies, and statistics. Nice cliche. Unfortunately, it doesn't say anything at all. >2. So if the quoted material is included it's bad and if it is not >included it's bad. I think I see the general idea. Use the rules >appropriate for complaining about whoever you want to complain about. You got it half right. If quoted material is included, it's good. If no quoted material is included, it's bad. If quoted material is included but it uses the '<< >>' style, it's bad. If a few hundred lines are quoted and six added, it's bad. This was explained to you twice; once in the post you're responding to, and once in that posting with the AOL quotes. You're conveniently ignoring that and you're playing dumb with regard to network etiquette. Maybe you aren't just pretending. AOL users originally didn't quote at all, they claimed because of software constraints. AOL users complained and used the fact that their ISP was lame as an excuse for not getting another one. Other net users complained. AOL responded by using the '<< >>' quoting style, which was effectively giving the rest of the net the bird. If AOL didn't cater to every moron out there, and if AOL didn't keep running stupid ads with claims like "AOL is the Internet!", and if AOL wasn't sending things like requests for Real Player all over the net, and if AOL didn't do things to deliberately piss everyone else off, they'd have a much better reputation. Maybe the first two can be written off as simple marketting, and maybe the third can be written off as the results of that marketting, but there is no excuse for the fourth. All four of those are what gets AOL flamed, kill filed, ignored, insulted, and shunned. >3. And what I said was along the lines of most were justified, but some >showed his lack of clues. Merely being incomprehensible to a person >means little if the person is a little clue-shy. Badly written is a bad >thing. There were one or two which may have been questionable. The rest of them fell into his criteria quite well. That's unless you want to claim that requests for stickers, CDs, and the rest actually express some subtle political point other than to say "I'm a moron." I ensure you, if "We're morons" was the point the AOL posters in question were trying to make, their message came through quite well. Maybe "you got it?" was actually a secret code. >> > > I don't know which is worse. At least the people flaming the AOL wimps are >> > > funny. >> > >> > If funny is all you want, may I recommend rec.humor.funny and, in case >> > you are up on no current events but Clinton, rec.humor.funny.reruns. >> >> No, I want a Cypherpunks list which discusses political issues, >> cryptography, and things related to that. Since this is the Cypherpunks >> list, we aren't going to censor on the basis of content or origin point. >> >And the general degradation of our society to the level that taking the >moral ground is something to be ridiculed is not a political issue? I was refering to the spam from AOL, Sixdegrees, the "child molestor" spammers, and their like. The responses to that, including your's, are political speech like you describe. What you're being ridiculed for is, almost without fail, defending every AOL weenie and spam site which comes onto this list. The child molestor spammers may be able to claim that it isn't their fault because they're using lame software, but if they use swiss cheese they shouldn't be surprised when the holes are exploited. I'm not saying it's very ethical to exploit them, but it isn't surprising. Paul, with regard to the rest of this, it's obvious that you're either trolling or are yourself severely clue-shy, and you aren't worth a response anymore. Your #2 is proof enough of that. #3 is pretty good evidence too.

2 1

Website owner/administrator
by BigStar.com 17 Dec '03

17 Dec '03

Join the BigStar Network! If you don't already have an e-commerce plan, BigStar.com can put you in the game now! You're probably already familiar with affiliate programs like Amazon.com and Barnes and Noble. BigStar is an online VIDEO superstore offering web sites like yours the opportunity to become affiliates and earn commissions of 8% (or more) on sales generated by your site this is your chance to make online e-commerce work for you! This is a completely COST-FREE opportunity. For more information or to sign up, go to http://www.bigstar.com/aff/index.ff?banid=1060 Big Movies, Big Selection, Big Deals, Big Fun! ========================================= BigStar is a responsible Direct Marketer and adheres strictly to industry-established e-mail guidelines. To unsubscribe from our list, just reply to this message with the word "remove" in the subject line to the above address =========================================

1 0

Where I mail through and from Was "Re:"
by Paul H. Merrill 17 Dec '03

17 Dec '03

Another method of discerning that information would have been to actually read my posts which daid the same damn thing. BTW, I lobbied to have the server closed off when I worked for the school, but they decided that was just a little too paranoid for them. PHM

1 0

Mailing-List
by Marky 17 Dec '03

17 Dec '03

Please email me information about your mailing-list.

1 0

Remailers, PGP, and a Project Suggestion
by Anonymous 17 Dec '03

17 Dec '03

On Sun, 27 Sep 1998, Anonymous wrote: > At 23 Sep 1998 04:27:46 Reeza! wrote: > > anonymouse, 32 bit aohell to boot. you must feel very safe. Yours is hardly > > the type of post that might necessitate the use of a remailer, so it should > > be safe to assume you haven't the courage to stand behind your words, even > > as mild as they are. > > > > Fuck you too. I suggest you discuss your lack of a spine with the maker. > > See the above for instructions to meet the maker. > > > > Reeza! > > Hello? This is an old topic, but what the heck... > > There is a concept cypherpunks have called "Blacknet", which is an > organisation that sells profiles of prospective employees based on > their public comments on the Internet. > > This allows employers to filter out undesirables who might or might > not have outgrown their rebellious youth. (You can never be too safe!) Even this is a secondary issue. Many people are using remailers these days because of the advent of the WWW. Virtually anything written, retrieved, or transfered on the Internet is vulnerable to monitoring, logging, and future use against you. Even if you trust the guy you're sending mail to, you can't necessarily trust his computer security or the security of the network. Systems like Dejanews and the web search engines illustrate just how much of a log is out there. That isn't counting the information available solely from mail headers and IP addresses. When somebody wants to perform a "great purge," they just go off to a search engine or database, type in some parameters, and get a list of people to shoot, jail, or harass. The natural solution to this is to disguise your identity whenever possible. I estimate that we have several dozen people who actively post to Cypherpunks through remailers judging by the way some things are stated in the postings. I can't tell for sure, and that's the point. If you want to generate reputation capital, use a nym server. Nym servers make it obvious that you're using a nym, but it allows you to generate as many reputations as you want and keep them separate. They're hard to use without a tool, even for the best of us. Premail leaves a lot to be desired in that it's slow, has some bugs, and lacks some good features, but most of the people who want to create a new version seem to live in the U.S.. The real advantage of the nym servers is that they allow people to see the origin of the message at a glance. You can do the same thing with regular anonymous remailers, but you have to verify the signature rather than glancing at the headers. You should still verify the signature in either case. This was less of a problem than it once was because premail was out there, until PGP 5 came out. PGP 5.x is incompatable with previous versions since it changed both the protocols and the command line interface. Unfortunately, they changed the command line interface in a rather stupid way. They also wound up releasing the Windows version before the UNIX version (by something like three months). They seem to check argv[0] to determine what kind of operation you want to do. 'pgp -seat' won't work anymore. Instead, it's a variant under 'pgpe'. One PGP binary is created, and several links are set up. The result is that you can't change the name of the binaries and links if you want. If there's an advantage to this, I sure don't see it. When they released the Windows version, Windows users understandably snatched it up and started using it. The result was a bunch of incompatabilities between two platforms which could have easily been solved had PGP, Inc. exercised a little more discression. That's a moot point now, though. The problem which still remains is the command line interface. It breaks any script which references PGP, and that's the main problem. What UNIX really needs is some kind of mailer which integrates an updated premail, PGP 2.x support, and PGP 5.x support. Unfortunately, much to the delight of the government, the people who would code such a thing are probably in the U.S. like I am.

2 1

Re:
by Anonymous 17 Dec '03

17 Dec '03

On 27 Sep 1998, Anonymous wrote: > > Paul is coming from AOL using Netscape as a mailer and using the > open relay at cesvxa.ces.edu. He's admitted this at least once in a sidebar on a message, as I seem to recall, so it's nothing new. It does go to show conflict of interest, and it could be claimed that he's trying to make himself feel better, I suppose. Looking back, he's used AOL for most of his postings, except for one I came across which apparently came from an admin machine at ces.edu, so he isn't exploiting some random open relay somewhere. Generally they all route through ces.edu. I can't speak for Paul, but I figure that he's probably doing what he once said that he is, and using a modem link to AOL, using AOL for a routing service, then routing mail through the relay at CES. I don't know why someone would want to do that if they're sitting on a university network, but it doesn't matter much. I just checked: the relay does appear to be an open relay. I just hope spammers don't wind up finding out which, of course, they probably will after that post. Can we have some signal somewhere, please?

2 1

No Subject
by Anonymous 17 Dec '03

17 Dec '03

Sunday, September 27, 1998 - 23:06:35 MET First of all I want to say that the last posting I did to cypherpunks(a)cyberpass.net did not reach the intended recipients. And two, > Subject: Remailers, PGP, and a Project Suggestion > Date: Sun, 27 Sep 1998 20:50:36 +0200 > From: Anonymous <nobody(a)replay.com> > To: cypherpunks(a)cyberpass.net > Unfortunately, much to the delight of the > government, the people who would code such > a thing are probably in the U.S. like I am. I would be more than glad to do the coding. I am not in the US. However, the only thing that stops me is the fact that I just don't know enough programming.

1 0

GNUcash [/.]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > X-within-URL: http://www.gnucash.org/ > content In the spirit of cooperation we bring you The GnuCash > Project. We all realized that it was senseless to have several > different projects working toward the same goals. So we did the most > logical thing, we merged! The result of this merger is the GnuCash > Project. > > Some of the projects that merged included X-Accountant, and GnoMoney. > GnuCash will be based on the lastest version of Xacc. We will use the > "transaction engine" from Xacc, and port the GUI from Motif to > Gnome/Gtk. Several other significant features will also be added. Such > as support for splits, and online banking via OFX. To see a list of > other planned features please check out the features page. > > There is unfortunately no stable version of GnuCash available yet. So > if you are interested in using a financial package now I suggest using > the lastest version of Xacc, which is a very stable, and full featured > piece of software! =) Check out the pages below for more info on Xacc. > News 09-17-98 > * ANNOUNCE - Gnucash 1.1.18 is released. Get it at ftp.gnucash.org ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 2

please help
by Anonymous 17 Dec '03

17 Dec '03

http://www.angelfire.com/ok/ProveIt/

1 0

Meriweather v. Gates
by Tim May 17 Dec '03

17 Dec '03

It's an ironic indication of where we are that Bill Gates is being hounded by the Justice Department, Sun Microsystems, Netscape, Novell, and Ralph Nader while no one is hounding John Meriweather. In fact, the Federal Reserve System, nominally nongovernmental (wink wink) just helped to bailed out his firm, Long-Term Capital Management. Gates, you see, has a non-leveraged investment of $50 billion in Microsoft. No borrowing, no margin debt, just plain old-fashioned ownership. Meriweather, on the other hand, started in 1991 and took in money from speculators. He took the $2.2 billion and borrowed with it, hitting the $125 B in borrowed assets point. Then he and his rocket scientists essentially borrowed still more, using this $125 B to leverage $1.25 T. (T for "trillion.") Not bad, going from $2.2 B to $1.25 T, a mere 500-fold increase. (Like taking the money one planned to spend on a new PC, a couple of thousand or so, and instead controlling a million dollars worth of financial instruments.) Had the folks at LTCM made the right bet on the roulette wheel, by guessing the direction of interest rates, the tens of billions of profits would have been theirs to keep, with little work on their part. (Some of the principals are now disclaiming responsibility, saying LTCM was only a sideline interest.) Ah, but they guessed wrong, and now they and their lenders are being bailed out. In America, profits are private but losses are public. Meanwhile, Gates sticks to building up his company, selling actual products. No margin debt, no loans for the American taxpayer to cover, no overextended lines of credit. Oh, the horror of it! Gates must be attacked by the U.S. government and all of his incompetent competitors! He must be driven out of business! We need to make the world safer for folks like Meriweather. (Think of what Meriweather could be doing with the $50 B that Gates has! Instead of being worth a piddling $50 billion, Meriweather and Scholes and that bunch could double down, double down again, and again, and turn it into $25 trillion! All with just some computer commands. American capitalism at its best.) We bail out Meriweather. We try to bust Gates. I'm going to be sick. The reformatting of this country is overdue. --Tim May (This space left blank pending determ. of acceptability to the gov't.) ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 831-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments.

1 0

Police would never exagerate ? Guess what...
by Jean-Francois Avon 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >Date: Mon, 28 Sep 1998 09:57:46 +0930 >From: SSAA <Sporting.Shooters.Association(a)adelaide.on.net> >Subject: NEWS - Toy Pistol case dismissed >Reply-to: Sporting.Shooters.Association(a)adelaide.on.net THE SUNDAY TELEGRAPH, Sydney. Sept 27.by Wayne Jones. A MAGISTRATE has dismissed charges against a 165 year old boy who faced jail for possessin a toy cap gun. The magistrate, Hal Halenstean, made the decision after hearing what he described as a "silly case" on Friday. "We all have better things to do", Mr Halenstein said, The boy, who cannot be identified bought the toy cap gun from a toy stall at Victoria's Dandednong Market on May 12. Minutes later, police looking for drug dealers found the cap gun in the boy's jacket. They charged boy with several firearm offences which carry a jail sentence. In court, Mr Halenstein twice gave prosecutors on opportunity to withdraw the charges against the boy, but police indicated they would continue to contest the case. Using special provisions of the Sentencing Act, Mr Halenstein then dissmissed the charges. The boy's barrister, Arend Slink, said the court case had set a precedent under the new gun laws. Toy cap guns could no longer be classed as prohibited weapons, he said. "If there is any sinister intent there are a range of serious charges that a person could be charged with. "Mr Slink" said"But in the case of a child possessing a toy cap gun a precedent has now been clearly set". The Sunday Telegraph reported on May 24 the boy could face jail if found guilty of the swrioud gun charges, which included: # Being a non-prohibited person did possess/carry a handgun which was not registered. # Being a non-prohibited person did possess/ carry a handgun which ge did not have a licecnce for under part two of the Firearms Act 1996. # Did own a handgun whilst not authorissed by a licence under the Firearms Act 1996 to possess a firearm. Police had alleged the toy gun was consedered an imitation firearm inder strict new gun laws and therefore deemed to be a prohibited weapon. The toy gun bought by the boy is one of thousands soldacross the state. The boy said he had bought the toy cap gun with pocket money. THE END. ------------------------------------------------------------------------ View Democrat Firearm Policy www.ssaa.org.au/dempolicy.html Print, copy and distribute. ===================END FORWARDED MESSAGE=================== Jean-Francois Avon, B.Sc. Physics, Montreal, Canada DePompadour, Société d'Importation Ltée Limoges fine porcelain and french crystal JFA Technologies, R&D physicists & engineers Instrumentation & control, LabView programming PGP keys: http://bs.mit.edu:8001/pks-toplev.html PGP ID:C58ADD0D:529645E8205A8A5E F87CC86FAEFEF891 PGP ID:5B51964D:152ACCBCD4A481B0 254011193237822C

1 0

Find Out Anything About Anyone On The Net !!!!
by anto＠commnet.it 17 Dec '03

17 Dec '03

YOU can easily learn how to investigate and learn EVERYTHING about your employees, neighbors, friends, enemies, and or anyone else !!! It is absolutely amazing !!! YOU Must Get This Extraordinary Package today......... + YOU can track down an old friend or a lost love, and, just for fun, investigate your family history. + YOU can screen prospective employees criminal records, look at their driving, or credit history. + YOU can verify test results from drug testing and even look into your children's friends history for any type of record. + YOU can TRACK down and locate an old debtor who is hiding from you and see if he/she is hiding any assets. + YOU can look up "unlisted telephone numbers." Locate social security, birth, adoption or death records. Check Army, Navy, Marine Corps, or Air Force service file records. YOU will simply be amazed to learn what sensitive and important information other people and enemies can discover about YOU !!!!! YOU Can Find Out Anything About Anyone On The Net !!! Do background checks on people and charge for it, as you start your own investigative services. Stop guessing about the LAW !!! Look up laws and do much more, direct from famous law libraries. Get this easy to use KIT right away, and then, YOU can become a private investigator. ORDER TODAY !!!!! Send $18.00 cash (wrapped in two pieces of paper), money order, or check to: INFORMATION, Ltd. P. O. Box 515019 St. Louis, MO 63151-5019 USA The Complete Package Will Be Immediately Shipped Prepaid Directly to You With Everything You Will Need In Your Kit to Get Started Right Away !! THANK YOU for your kind attention, and have a nice day !!!! +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ YOUR AD IN 333 NEWSPAPERS !!!!!!!!!! *********************************************** Seven years ago, I learned how to place my Classified Ad in several hundred newspapers, with just one telephone call. And, my cost was $0.51 per newspaper. The total circulation was well over 1.5 Million. I could reach just about any market, anywhere in this country. Since then, my small mail-order company has exploded. And, I use this same time tested and true method week after week. I would like to share this powerful information and show you how to save hundreds, even thousands of dollars on advertising that works. The average cost of a classified ad in a newspaper is about $15.00 to $20.00 dollars. Multiply that by 333 and your total cost is well over $6,000.00 Dollars. By using our amazing method, your total cost is only $170.00. Not to mention the time and money you save by placing one call, instead of 333 long distance calls. You can limit your promotion to a Single State or place your ad in Several States around the country, all with just one phone call. You can reach One Million Readers on the East-Cost today and a Million on the West-Coast tomorrow. It's that simple !!!! Your cost for this priceless information, is only $19.00 !!! You will make that back on your first promotion. WE are so confident that this type of advertising will boost your profits, we will guarantee your satisfaction with our Money Back Guarantee !! So, you have nothing to lose. Now, order our amazing classified ad method today !!!!!! PRINT ORDER FORM Ship To: ************************** ********* NAME____________________________________________ ADDRESS________________________________________ CITY______________________________________________ STATE__________________ ZIP_____________________ E-MAIL__________________________________ Don't Delay, ORDER YOUR COMPLETE MEDIA KIT TODAY !!!!!!! ********************************************************************** Mail Payment $19.00 CASH, money order, or check TO: ******************** INFORMATION, Ltd. P. O. Box 515019 St. Louis, MO 63151-5019 U.S.A. WE will ship your complete KIT directly to you !!!! ************************************************************** OPTIONAL / OVERNIGHT SHIPPING - ADD $15.00 ************************************************************** Thank you for your kind attention, and have a nice day !!! YOU MAY ORDER BOTH PACKAGE KITS FOR ONLY $33.00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Admin Internet Services This message is not intended for residents in the State of Washington, screening of addresses has been done to the best of our technical ability. If you are a Washington resident or otherwise wish to be removed from this list, go to global remove site if you want your address removed from future mailing. http://209.84.246.162/remove.htm This Global Communication has been sent to you by: PAVILION ADVERTISING SERVICES Offices: London, Paris, Berlin, Hong Kong

1 0

Cypherpunks defeat?
by Anonymous 17 Dec '03

17 Dec '03

At 10:02 AM -0500 9/24/98, Albert P. Franco, II wrote: >I think perhaps a tougher question is, "Is there a way, without resorting >to bloodshed, to regain control of our private property and private lives?" >That's not a troll! I know that there are a lot people on this list with >their assault rifles at the ready, that are convinced that only armed >resistance will work. But. I think that's the "easy" way out. (How) can it >be done another way? It's ironic that you would have to ask that question here. The cypherpunks group was founded on this very premise: that through the use of cryptography, people would become able to engage in a wide range of voluntary transactions, outside of the reach of meddling interlopers. Most cypherpunks have become disillusioned about their dreams, and you will seldom hear them defend the notion that cryptography offers any kind of alternative to a society based on coercion. The past few years have been hard ones. The failure of digital cash, the gradual trend towards a debate over when and how (rather than whether) to regulate domestic cryptography, widespread abuse of anonymity, all these make the original cypherpunk goals seem even more distant today than in the past. Is the cypherpunks dream dead? Is the movement over? Maybe it is time to give up. Throw in the towel, admit that we lost. Sure, there are still battles to be fought, rear-ground actions where we can perhaps delay the inevitable outcome. But the vision has been lost, and all that is left is the post-mortem analysis of the failed dream.

8 11

TODAY'S NEWS AND PICS PACKED STUFFED! - READ IT NOW!
by STUFFED NEWS DAILY 17 Dec '03

17 Dec '03

+ 30 FREE HOT JPEG PHOTOS + 5 SUPER SEXY STORIES + NOTES ON MARRIAGE + SUCKING AND FLOPPING + MADONNA GOES ALL GIRL + THE BEST OF EUREKA + KEEP IT COMING MONICA + TOP 9 SIGNS GRAMPS IS ON VIAGRA + NO PLACE TO HIDE AT THE NAKED LUNCH + I LOVE PAPAYA ----> http://stuffed.net/98/9/28/ <---- Welcome to today's issue of Stuffed. To read it you should click on the URL above. If it is not made clickable by your email program you will need to use your mouse to highlight the URL, copy it and then paste it into your browser (then press Return). This email is never sent unsolicited. Stuffed is the supplement for the Eureka newsletter you subscribed to. Full instructions on unsubscribing are in every issue of Eureka! ----> http://stuffed.net/98/9/28/ <----

1 0

Information about the Anonymous
by Anonymous 17 Dec '03

17 Dec '03

This message is being sent to you automatically in reply to the message you sent to remailer(a)replay.com with the subject "remailer-help". There is an automated mail handling program installed on this account which will take any message with the proper headers and automatically re-send it anonymously. It is capable of providing a very high level of security if you use the Mixmaster software to produce the messages. You can get the Mixmaster client software from <http://www.thur.de/ulf/mix/> (Germany). Please read its manual page and README file for usage instructions. More information about anonymous remailers is available at <http://www.stack.nl/~galactus/remailers/>. For an up-to-date listing of anonymous remailers with statistics, see <http://anon.efga.org/anon/rlist.html>. You can also get the list by fingering rlist(a)anon.efga.org or rlist(a)anon.lcs.mit.edu. You can use the remailer by sending mail to remailer(a)replay.com, with the header "Anon-To: address", the address that you want to send anonymously to. If you can't add headers to your mail, you can place two colons on the first line of your message, followed by the "Anon-To:" line. Follow that with a blank line, and then begin your message. For example: ================================================================ From: joe(a)site.com To: remailer(a)replay.com Subject: Anonymous Mail :: Anon-To: beth(a)univ.edu This is some anonymous mail. ================================================================ The above would be delivered to beth(a)univ.edu anonymously. All headers in the original message are removed. She would not know that it came from Joe, nor would she be able to reply to the message. However, there are a few ways that the true identity of the sender could be found. First, if many anonymous messages were sent, someone could compare the times that the messages were sent with the times that 'joe' was logged in. However, this can be prevented by instructing the remailer to delay the message, by using the "Latent-Time:" header: ================================================================ From: joe(a)site.com To: remailer(a)replay.com Subject: Anonymous Mail :: Anon-To: beth(a)univ.edu Latent-Time: +1:00 This is some anonymous mail. ================================================================ The message would be delayed one hour from when it is sent. It is also possible to create a random delay by adding an 'r' to the time (+1:00r), which would have the message be delivered at a random time, but not more than an hour. You can also delay the message until a specific time. For example, "Latent-Time: 0:00" without the '+' would delay the message until midnight (at the remailer site). Times must be in 24-hour format. NOTE: This remailer automatically reorders messages in a large pool, which produces a similar effect. Another problem is that some mailers automatically insert a signature file. Of course, this usually contains the sender's e-mail address, and so would reveal their identity. The remailer software can be instructed to remove a signature file with the header "Cutmarks:". Any line containing only the cutmark characters, and any lines following it will be removed. ================================================================ From: sender(a)origin.com To: remailer(a)replay.com :: Anon-To: recipient(a)destination.com Cutmarks: -- This line of text will be in the anonymous message. -- This line of text will not be in the anonymous message. ================================================================ NOTE: The cutmark characters in the example are "-- ", the usual e-mail signature separator. If you forget the trailing blank after the "--" in the "Cutmarks:" directive, your signature won't be cut off. Sometimes you want a subject line or other headers in your anonymous message. Additional headers can be written to the output message by preceding them with a "##" line. Multi-line headers with indented continuation lines are allowed. ================================================================ From: chris(a)nifty.org To: remailer(a)replay.com :: Anon-To: andrew(a)where-ever.org ## Reply-To: chris(a)nifty.org Subject: A message with user-supplied headers: the subject extends over two lines Hi there! ================================================================ The remailer can also be used to make anonymous posts to Usenet. To do this, send a message with the header "Anon-Post-To: newsgroups", the newsgroups that you want to post anonymously to. Please note that the group names must be separated by commas (but NO spaces). ================================================================ From: poster(a)origin.com To: remailer(a)replay.com :: Anon-Post-To: alt.test,misc.test ## Subject: Anonymous Post This is an anonymous message. ================================================================ When posting test messages, please use the appropriate groups (alt.test, misc.test). The remailer support newsgroup alt.privacy.anon-server is not a test group. A subject is needed for Usenet postings. The remailer writes a "Subject: none" header to the output message if you don't add your own subject. In order to post an anonymous follow-up article and have it appear in a thread, you must set the "Subject:" and "References:" headers of your message correctly. The explanation below has been adapted from the nym.alias.net help file (mailto:help@nym.alias.net). The subject of your message should be the same as the article to which you are replying, unless you are replying to the first message in a thread, in which case you should prepend "Re: " to the original subject. To build a references header, copy the references header of the article to which you are replying, and append that article's Message-ID. If you are replying to the first article of a thread, it won't have a references header. In that case just use the article's Message-ID as your references header. Be sure to leave a space between Message-IDs in your references heder. For example, if replying to a message which includes these headers: ================================================================ Newsgroups: alt.privacy.anon-server Subject: Re: anonymous remailers References: <5dfqlm$m50(a)basement.replay.com> Message-ID: <5dko56$1lv$1(a)news02.deltanet.com> ================================================================ your anonymous follow-up message should begin with these lines: ================================================================ :: Anon-Post-To: alt.privacy.anon-server ## Subject: Re: anonymous remailers References: <5dfqlm$m50(a)basement.replay.com> <5dko56$1lv$1(a)news02.deltanet.com> ================================================================ [Note that an indented line in a message header indicates a continuation of the previous line.] If replying to the first message in a thread, with these headers: ================================================================ Newsgroups: alt.privacy.anon-server Subject: Help with PGP Message-ID: <5e96gi$opv(a)job.acay.com.au> ================================================================ your reply should begin with these lines: ================================================================ :: Anon-Post-To: alt.privacy.anon-server ## Subject: Re: Help with PGP References: <5e96gi$opv(a)job.acay.com.au> ================================================================ The "References:" header can be trimmed to include only IDs from messages that you have quoted from or are replying to. By separating messages with cutmarks, you can send more than one message at once: ================================================================ From: me(a)mysite.org To: remailer(a)replay.com Subject: whatever :: Anon-To: recipient1(a)site1.org Cutmarks: -- ## Subject: message 1 Message one. -- :: Anon-To: recipient2(a)site2.org Cutmarks: -- ## Subject: message 2 Message two. -- me(a)mysite.org ================================================================ The two messages will be delivered separately, and the signature will be removed. Only one cutmark is used in the example, but you may use different cutmarks in each part of your message if necessary. For added security, you can encrypt your messages to the remailer with PGP. The remailer software will decrypt the message and send it on. Here is the remailer's public key: Type Bits/KeyID Date User ID pub 1000/E7AEC1E5 1995/05/23 Replay Remailer Service <remailer(a)replay.com> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQCKAy/Bo9QAAAED6NMBE5oNGLqUmZvUZTWBfL41B67EVtDHu5VmqrPLX6w0gk8U lPUNlW/1wACNQAFs/hxKKd0B15d8R7Qk1X7H1KPsdF9AAp8DIBe3MN59Z8iO1dYB GW8YhPg2EXnNAZyVQb/CGhDZhm8naq3wsQynZZu4J7DmVD0VsrLnrsHlAAURtC1S ZXBsYXkgUmVtYWlsZXIgU2VydmljZSA8cmVtYWlsZXJAcmVwbGF5LmNvbT6JAJID BRAvzinRPRWysueuweUBAVpyA+dmx166/op40+nr9OQjahqWHdvLYkKipanaLNM4 u0/U8RrkySEj5n/R0zaJSG4mutZ28DqUEhz7rBHrFRYleENRtiI9TxZZrJVWInE9 No7VwSW9jWlpta2rCfu97EWLdPVPLXmXpd90TONHMk8a7sf/Lz5JFWIIK5PSqI/Z xQ== =5+RC -----END PGP PUBLIC KEY BLOCK----- To utilize this feature, create a message with two colons on the first line, then the "Anon-To:" or "Anon-Post-To:" header, then any other commands such as "Cutmarks:" or "Latent-Time:", then a blank line, then the optional "##" line and your additional headers, then a blank line, and then the body of your message. Encrypt this with the remailer's public key. Then send it to the remailer, adding the header "Encrypted: PGP". If you forget this, the remailer won't know that it needs to be decrypted. Also be sure to use the "-t" option with PGP, or the linefeeds might not be handled properly. ================================================================ From: me(a)mysite.org To: remailer(a)replay.com :: Encrypted: PGP -----BEGIN PGP MESSAGE----- Version: 2.6.3in hIwCJD7BWgsRsnUBA/9kVuVlhFczhjI5cYFLGEAQiv4fUUlZ+hgPp6SQysToVLTM d0OvWqEb4TJgMREf6pHv4022yRLV6Pb9xaE/Gb82SUZYNE6TvfpxyKbWtRSthPXx OlsLD+IudqvBQus6DoY/9ClbbXyibP6mOCy7gwFZWOy6OMv2O2ZI3ufc/iCpgKYA AAAoLD7rvsI+c/Bod/GKAffpHqN2fimsoXrdcEMhIfN+rSC7PnMmaX1c4w== =afKM -----END PGP MESSAGE----- ================================================================ To confuse possible attackers even more, you can generate some cover traffic by sending encrypted messages with the special "Null:" header rather than the usual "Anon-To:" or "Anon-Post-To:" headers. The remailer will drop these messages in the bit bucket. Any text after your encrypted remailer message is also remailed. This allows sending messages to someone who is anonymous. If you create a PGP-encrypted message to yourself via this remailer, and then give it to someone, they can send you a message by sending the encrypted message to the remailer. The remailer will then decrypt it and send it to you. The message gets anonymized in the process, so the sender will need to include a return address if he wants a reply. Messages sent this way can be encrypted using the "Encrypt-Key:" feature. Any text following a line beginning with "**" will be encrypted with this key. For example, if you put in the plaintext of your PGP message: ================================================================ :: Anon-To: you(a)yourhost.org Encrypt-Key: your_password ** ================================================================ The appended message after the "**" will be encrypted with the key "your_password", using PGP's conventional encryption option. It is much simpler to manage these "reply blocks" -- both from the sender's and recipient's perspective -- by using a nymserver. Please read <http://www.publius.net/n.a.n.html> for more information (the homepage for nym.alias.net, the home of the nymserver software). For greatest untraceability, your reply block can be directed to post to alt.anonymous.messages on Usenet. Since you must use a subject line when posting to Usenet, messages sent using the same reply block will have the same subject. To avoid this, you can encrypt a message digest of the subject using the "Encrypt-Subject:" feature. For example, if you put inside your reply block: ================================================================ :: Anon-Post-To: alt.anonymous.messages Encrypt-Key: your_password Encrypt-Subject: your_other_password ## Subject: This subject is MD5 hashed and IDEA encrypted ** ================================================================ The subject will be converted to a 128-bit number and encrypted with IDEA using CFB mode with the key "your_other_password", and printed in hexadecimal format (48 characters); and the message will be posted to alt.anonymous.messages. The original subject cannot be recovered, only the MD5 hash of it, and then only if you have the password. The resulting subject will be different each time due to the use of CFB mode, so this helps prevent traffic analysis based on the subject header. Decoding the subject (to verify that the message is directed to you) requires special software. A small C program which can do this is part of the remailer distribution, but a more robust application would be appreciated. You can get the remailer source code as ASCII-armored Unix TGZ archive by sending mail to remailer-source(a)squirrel.owl.de. Abuse Policy: I consider the following to be inappropriate use of this anonymous remailer, and will take steps to prevent anyone from doing any of the following: - Sending messages intended primarily to be harassing or annoying. - Use of the remailer for any illegal purpose. Due to the global nature of the Internet, it is the sole responsibility of the orginal sender to determine what is legal. - Unsolicited commercial messages (SPAM). - Complaints to spammers. - Posting lists of addresses to Usenet groups for purposes of soliciting commercial e-mail (spam-baiting). Spammers will be exposed, publicly humiliated, and billed whenever possible. If you don't want to receive anonymous mail, send a message to the operator, and your address will be added to the block list. For more information on filtering out unwanted e-mail, see <http://www.abuse.net/>. You can get a list of statistics on remailer usage by sending mail to the remailer with Subject: remailer-stats To get the remailer's public keys, send mail with Subject: remailer-key or finger rlist-keys(a)anon.efga.org or remailer-keys(a)anon.lcs.mit.edu to get the public PGP keys of all active Cypherpunk remailers. For a copy of these instructions, send mail with Subject: remailer-help To reach the operator, direct your mail to abuse(a)replay.com.

1 0

YOUR CLASSIFIED - AD / 333 NEWSPAPERS !!!!
by anto＠commnet.it 17 Dec '03

17 Dec '03

YOUR AD IN 333 NEWSPAPERS !!!!!!!!!! *********************************************** Seven years ago, I learned how to place my Classified Ad in several hundred newspapers, with just one telephone call. And, my cost was $0.51 per newspaper. The total circulation was well over 1.5 Million. I could reach just about any market, anywhere in this country. Since then, my small mail-order company has exploded. And, I use this same time tested and true method week after week. I would like to share this powerful information and show you how to save hundreds, even thousands of dollars on advertising that works. The average cost of a classified ad in a newspaper is about $15.00 to $20.00 dollars. Multiply that by 333 and your total cost is well over $6,000.00 Dollars. By using our amazing method, your total cost is only $170.00. Not to mention the time and money you save by placing one call, instead of 333 long distance calls. You can limit your promotion to a Single State or place your ad in Several States around the country, all with just one phone call. You can reach One Million Readers on the East-Cost today and a Million on the West-Coast tomorrow. It's that simple !!!! Your cost for this priceless information, is only $19.00 !!! You will make that back on your first promotion. WE are so confident that this type of advertising will boost your profits, we will guarantee your satisfaction with our Money Back Guarantee !! So, you have nothing to lose. Now, order our amazing classified ad method today !!!!!! PRINT ORDER FORM Ship To: ************************** ********* NAME____________________________________________ ADDRESS________________________________________ CITY______________________________________________ STATE__________________ ZIP_____________________ E-MAIL__________________________________ Don't Delay, ORDER YOUR COMPLETE MEDIA KIT TODAY !!!!!!! ********************************************************************** Mail Payment $19.00 CASH, money order, or check TO: ******************** INFORMATION, Ltd. P. O. Box 515019 St. Louis, MO 63151-5019 U.S.A. WE will ship your complete KIT directly to you !!!! ************************************************************** OPTIONAL / OVERNIGHT SHIPPING - ADD $15.00 ************************************************************** Thank you for your kind attention, and have a nice day !!! +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Find Out Anything About Anyone On The Net !!! ========================================= YOU can easily learn how to investigate and learn EVERYTHING about your employees, neighbors, friends, enemies, and or anyone else !!! It is absolutely amazing !!! YOU Must Get This Extraordinary Package today......... + YOU can track down an old friend or a lost love, and, just for fun, investigate your family history. + YOU can screen prospective employees criminal records, look at their driving, or credit history. + YOU can verify test results from drug testing and even look into your children's friends history for any type of record. + YOU can TRACK down and locate an old debtor who is hiding from you and see if he/she is hiding any assets. + YOU can look up "unlisted telephone numbers." Locate social security, birth, adoption or death records. Check Army, Navy, Marine Corps, or Air Force service file records. YOU will simply be amazed to learn what sensitive and important information other people and enemies can discover about YOU !!!!! YOU Can Find Out Anything About Anyone On The Net !!! Do background checks on people and charge for it, as you start your own investigative services. Stop guessing about the LAW !!! Look up laws and do much more, direct from famous law libraries. Get this easy to use KIT right away, and then, YOU can become a private investigator. ORDER TODAY !!!!! Send $18.00 cash (wrapped in two pieces of paper), money order, or check to: INFORMATION, Ltd. P. O. Box 515019 St. Louis, MO 63151-5019 USA The Complete Package Will Be Immediately Shipped Prepaid Directly to You With Everything You Will Need In Your Kit to Get Started Right Away !! THANK YOU for your kind attention, and have a nice day !!!! YOU MAY ORDER BOTH PACKAGE KITS FOR ONLY $33.00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Admin Internet Services This message is not intended for residents in the State of Washington, screening of addresses has been done to the best of our technical ability. If you are a Washington resident or otherwise wish to be removed from this list, go to global remove site if you want your address removed from future mailing. http://209.84.246.162/remove.htm This Global Communication has been sent to you by: PAVILION INTERNATIONAL SERVICES Offices: London, Paris, Berlin, Hong Kong

1 0

Archives! Polite reminder!
by Sparkes, Ian, ZFRD AC 17 Dec '03

17 Dec '03

In my previous mail of a couple of weeks ago I offered to produce a CD of the CP archives. So far there have been no offers of data for this exploit. This is a polite reminder that if someone can offer a copy of the archives in an easily transportable format, I will take care of the creation and distribution of the CD. Come on Cypherpunks - don't let your apathy get the better of you. Rgds Ian

1 0

Wanted: Twofish source code
by Bruce Schneier 17 Dec '03

17 Dec '03

I am looking for Twofish ports in other assembly languages and other high-level languages. If anyone has, or is willing to write, source code that they will put in the public domain, I would like to talk with them. Thanks, Bruce ********************************************************************** Bruce Schneier, President, Counterpane Systems Phone: 612-823-1098 101 E Minnehaha Parkway, Minneapolis, MN 55419 Fax: 612-823-1590 Free crypto newsletter. See: http://www.counterpane.com

1 0

Mild anti-phone-company rant
by Brown, R Ken 17 Dec '03

17 Dec '03

Why worry about mere governments when the phone company can ru(i)n your life? BT AKA British Telecom were reported on the BBC radio over the weekend to be using their customer's account records to poach business from Internet service providers. Sales staff searched for customers who frequently dialled known ISP numbers. They then tried to sell them BT's Internet service (imaginitively branded as "BT Internet") A bit of a marketing advantage that, knowing exactly who your mark phoned, when and for how long. What's next? Maybe BT Pizza will try contacting heavy users of Domino. Or BT Hot and Horny will send brochures in plain covers to subscribers who phone certain numbers apparently in Grenada or Chile (Not that I would ever call such numbers but a friend of mine was surprised to find so many Manchester accents in Latin America...) UK government's response to all that is at http://www.coi.gov.uk/coi/depts/GOT/GOT.html - which will also tell you about the way BT overcharges independent payphone operators and rakes off money whenever you call a mobile phone. http://news.bbc.co.uk/hi/english/uk/newsid%5F181000/181800.stm says how Kent police are doing a deal with BT so that the phone company will withdraw service from people who make too many frivolous 999 calls (emergency number - like the US 911 - but a lot easier to key in when your room is full of smoke). So if the police don't like you they can ask BT to cut off your phone and they just will? And if you think I've got it in for BT at least they seem to be more competent than their main rivals in the UK market, inCapable and Witless (did I spell that right?) for whom I spent a day and a half waiting at home last week, instead of at work. On Thursday I was there for hours for one man to come in, stick something into a wall port, see that it lit up (I could have told him that the connection to the switch worked) and give me a piece of paper to sign, telling me that they had connected my phone to the WRONG NUMBER which, after I had called them to ask for my own phone number back got disconnected entirely. On Friday they didn't turn up at all. Totally wasted day. And I currently have neither phone nor cable TV services, and haven't had for THREE WEEKS. And they had the temerity to send me a bill - even if it was only for 4.45. I think I should charge them for my wasted time. Maybe I should ask for consultancy rates. But I suppose if I demanded more than a year's phone bill off them they'd soon decide they dindn't have to supply me with service at all. Nuts. There must be a cheap way to get online without dealing with phone companies. They seem to combine the entrepreneurial spirit of the civil service with the humility of the banks and the dedication to customer choice of Microsoft and IBM. This mail is entirely my own private opinion and nothing at all to do with my employers who probably wouldn't approve of it in the unlikely event that they ever noticed it. Despite the fact that I am using their Internet connection to send it. Of course I could always have sent it from home via my ISP. Or I could have IF I HAD A BLOODY PHONE LINE THAT BLOODY WELL WORKED. Ken Brown

1 0

Re: Cypherpunks defeat?
by Robert Hettinga 17 Dec '03

17 Dec '03

Forwarded with Andrew's permission... Cheers, Bob Hettinga --- begin forwarded text Date: Mon, 28 Sep 1998 09:15:48 -0400 (EDT) From: Andrew Odlyzko <amo(a)research.att.com> To: rah(a)shipwright.com Subject: Re: Cypherpunks defeat? Bob, Concerning the recent posting by Jim Donald about micropayments, let me say that as a co-inventor of a micropayment scheme (presented at the FC'97 conference) I do see a role for them. However, I do think it will be a limited role. The reason is economic. It is not just that people don't want to be "nickeled and dimed." A more substantive reason is that in most situations the content producers can get more money from aggregating content. I have analyzed this in papers such as The bumpy road of electronic commerce, in "WebNet 96 - World Conf. Web Soc. Proc.," H. Maurer, ed., AACE, 1996, pp. 378-389. and Fixed fee versus unit pricing for information goods: competition, equilibria, and price wars, P. C. Fishburn, A. M. Odlyzko, and R. C. Siders, First Monday 2(7) (July 1997), http://www.firstmonday.dk/. Also to appear in "Internet Publishing and Beyond: The Economics of Digital Information and Intellectual Property," D. Hurley, B. Kahin, and H. Varian, eds., MIT Press, 1998. Both are available at http://www.research.att.com/~amo/doc/eworld.html Best regards, Andrew ************************************************************************ Andrew Odlyzko amo(a)research.att.com AT&T Labs - Research voice: 973-360-8410 http://www.research.att.com/~amo fax: 973-360-8178 ************************************************************************ --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: Remailers, PGP, and a Project Suggestion
by mark＠unicorn.com 17 Dec '03

17 Dec '03

Anonymous apparently informed the cypherpunks: >What UNIX really needs is some kind of mailer which integrates an updated >premail, PGP 2.x support, and PGP 5.x support. Unfortunately, much to the >delight of the government, the people who would code such a thing are >probably in the U.S. like I am. Privtool (http://www.unicorn.com/privtool/privtool.html) already provides PGP 2.x support, mixmaster support and limited premail support; I'll add PGP 5.x or OpenPGP when I have a Linux machine again. Mark

1 0

IP: Potentially Big Security Flaw Found in Netscape Software
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Delivered-To: ignition-point(a)majordomo.pobox.com X-Sender: believer(a)telepath.com Date: Mon, 28 Sep 1998 11:24:13 -0500 To: believer(a)telepath.com From: believer(a)telepath.com Subject: IP: Potentially Big Security Flaw Found in Netscape Software Mime-Version: 1.0 Sender: owner-ignition-point(a)majordomo.pobox.com Precedence: list Reply-To: believer(a)telepath.com Source: New York Times http://www.nytimes.com/library/tech/yr/mo/biztech/articles/28java.html September 28, 1998 Potentially Big Security Flaw Found in Netscape Software By JOHN MARKOFF SAN FRANCISCO -- A potentially serious security flaw has been discovered in the programming language used in the Navigator and Communicator software of the Netscape Communications Corp., with the defect possibly allowing an outsider to read information on a personal computer user's hard disk. The weakness, which was disclosed in Usenet online discussion groups on Friday by Dan Brumleve, a 20-year-old independent computer consultant in Sunnyvale, Calif., can be exploited by the Javascript programming language, which is widely used by World Wide Web page developers for a variety of common tasks. Brumleve said that he had tested the attack on a range of Navigator and Communicator programs, up through the most recent test version of Communicator, 4.5, and found the flaw in all of them. The vulnerability does not affect the Microsoft Explorer browser and e-mail program, Brumleve said. He was able to take advantage of the vulnerability by writing a 30-line piece of Javascript code that is able to capture and copy information automatically from the so-called cache, or temporary storage area, on a PC's hard disk. The captured information can reveal which Web sites a computer user has recently visited. The captured information could also include data that a computer user might have created when communicating with a Web site -- including personal data typed in when registering at a site or conducting a retail transaction. Credit card information, however, would not be revealed, because it is protected by separate security software. "It concerns me, because it means that a high-traffic Web site might use this to find out what other Web sites their visitors are going to," Brumleve said in a telephone interview Sunday. He said that the flaw could also be used by an employer to see if employees were searching for pornography, for example. Although there is no evidence that the security flaw has actually been exploited by someone with harmful intent, the gravity of the threat was noted by other computer security specialists. They noted that a user's vulnerability extends beyond visiting a hostile Web site that might exploit the flaw. The flaw could also be exploited through e-mail received using Netscape's software, they said, by sending an intended victim an e-mail message that would secretly force the user to run an illicit Javascript program. "This is pretty scary," said Richard M. Smith, president of Phar Lap Software Inc., a software development company in Cambridge, Mass. "In some sense the cache on your computer tells a lot about your life." Privacy of personal information on the Internet has become an increasingly sensitive issue in recent years as many Web sites have begun systematically collecting demographic information on Internet users. But this newly discovered flaw could enable an unscrupulous person or organization to basically read a person's full Web history. "This is a huge privacy issue and it goes directly to the current lack of adequate technical standards to protect privacy on line," said Marc Rotenberg, director of the Electronic Privacy Information Center, a public policy group in Washington. "There's even a question of a company like Netscape might be liable for the improper disclosure of private information." Netscape said Sunday that it was still assessing the problem. "We're taking a look at the bug, which appears to have privacy implications," said Eric Byunn, a Netscape product manager. He said that the company would make an announcement soon about its plans for responding to the flaw. Copyright 1998 The New York Times Company ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer ********************************************** --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0