December 2003 - cypherpunks-legacy

RSA and Others work on SSL Fix
by Steve Orrin 17 Dec '03

17 Dec '03

FYI RSA DATA SECURITY WORKS WITH INTERNET SOFTWARE VENDORS TO RESPON 6/26/98 7:19 to Potential Security Attack on Secure Web Communications SAN MATEO, Calif., June 26 /PRNewswire/ -- RSA Data Security, Inc. today announced it is working with a group of leading Internet software vendors on pre-emptive countermeasures to thwart a newly-discovered potential attack against secure Web communications. This vulnerability is currently the subject of research and has not been reported by any users. These countermeasures enhance the security of popular Internet server software products based on the Secure Sockets Layer (SSL) protocol. The countermeasures are, or will be, available from respective vendors' Web sites, and include configuration guidelines, software updates where applicable and additional information. Currently available vendor information may be found at the following sites: * C2Net Software, Inc. http://www.c2.net * Consensus Development Corporation http://www.consensus.com/ssl-rsa.html * IBM Corporation http://www.ibm.com/security * Lotus Development Corporation http://www.lotus.com/security * Microsoft Corporation http://www.microsoft.com/security * Netscape Communications Corporation http://help.netscape.com/products/server/ssldiscovery/index.html * Open Market, Inc. http://www.openmarket.com/security * RSA Data Security, Inc. http://www.rsa.com/rsalabs/ RSA will also maintain an updated list of all vendors' countermeasure site links at its site. In addition, RSA has been working closely with the CERT Coordination Center on this problem. CERT has made a technical advisory on this vulnerability available at http://www.cert.org. These countermeasures address a potential vulnerability discovered by cryptographer Daniel Bleichenbacher of the Secure Systems Research Department of Bell Labs, the research and development arm of Lucent Technologies. Bleichenbacher identified a cryptanalytic vulnerability that could potentially be used to discover the key for a particular encrypted session through a process of repeatedly sending on the order of one million carefully constructed messages to a target server and observing the server's response. Due to the large number of messages needed, the potential attack is detectable by network administrators. Additional information is available on the Bell Labs Web site at http://www.bell-labs.com. The vulnerability affects interactive key establishment protocols that use the Public Key Cryptography Standard (PKCS) #1, including SSL. The PKCS series of standards are defined by RSA Laboratories, reviewed by industry and have been adopted by many major vendors of information systems and incorporated in national and international standards. The vulnerability does not apply to PKCS #1-based secure messaging protocols, such as Secure Electronic Transactions (SET) and Secure Multipurpose Internet Mail Extension (S/MIME) because they are not susceptible to, or already implement mechanisms preventing this potential vulnerability. A technical overview of the attack and recommended countermeasures for installed SSL-based server software are available now on the RSA Labs Web site at http://www.rsa.com/rsalabs/. Software developers interested in testing their products for this potential vulnerability should visit RSA's site at http://www.rsa.com where they can find diagnostic instructions and prescriptive information for updating their applications. In July, RSA plans to provide developers using the company's BSAFE security suite with free software enhancements designed to eliminate this threat. RSA Laboratories plans to release for comment a draft PKCS #1 v2 in July following a revision process that began early in the year. RSA Data Security, Inc. RSA Data Security, Inc., a wholly owned subsidiary of Security Dynamics Technologies, Inc. (Nasdaq: SDTI), is a leading supplier of software components that secure electronic data, with more than 300 million copies of RSA encryption and authentication technologies installed worldwide. RSA technologies are part of existing and proposed standards for the Internet and World Wide Web, ISO, ITU-T, ANSI, IEEE, and business, financial and electronic commerce networks around the globe. RSA develops and markets platform- independent security components and related developer kits and provides comprehensive cryptographic consulting services. RSA can be reached at http://www.rsa.com. All products and companies mentioned herein may be trademarks or registered trademarks of their respective holdings and are hereby recognized. SOURCE RSA Data Security, Inc. -0- 06/26/98 /CONTACT: Patrick Corman, Corman Communications, 650-326-9648, patrick(a)cormancom.com/ /Web site: http://www.rsa.com/ (SDTI) CO: RSA Data Security, Inc. ST: California IN: CPR SU: -0- (PRN) Jun/26/98 07:03 EOS (PRN) Jun/26/98 07:04 86 -0- (PRN) Jun/26/ 98 7:19

1 0

CTIA Daily News from WOW-COM - June 26, 1998
by CTIA Daily News 17 Dec '03

17 Dec '03

============================================= Welcome to today's edition of the CTIA Daily News from WOW-COM. Please click on the icon / attachment for the most important news in wireless communications today. CALEA Summit being held July 21 & 22 in Washington, DC. Register Now!! Call (202) 785-0081 =============================================

1 0

?
by bill payne 17 Dec '03

17 Dec '03

Friday 6/26/98 1:23 PM John Young I wonder what the effect of all of the like http://www.jya.com/rsa-pkcs1.htm and other materials you have posted at http://www.jya.com/crypto.htm are going to be on those controlling the money? Some key congressmen and their advisors. Crypto, in my mind, represents pseudomathematics at its finest. Also, the guy that is going to break-in will do it before encryption or after decryption. http://www.aci.net/kalliste/ricono.htm Or, of course, TRANSMIT THE KEY WITH THE CYPHERTEXT! My mind is getting back to finishing the digital FX - and revising my book! Morales and I do not know what to make of Mitchell's JUN 22 motion. But, with us now complaining to the Senate Judiciary Committee, WITH HARD DOCKET EVIDENCE of wrongdoing life for lawyers is now more complicated. I will respond to the JUN 22 motion about next Wednesday. Won't be hard. This is an INSIDE JOB. I KNOW where the documents are since I know the AUTHORS. No search is required. This should be settled before it gets WORSE. Later bill http://www.apcatalog.com/cgi-bin/AP?ISBN=0125475705&LOCATION=US&FORM=FORM2 http://www-hto.usc.edu/software/seqaln/doc/html/gfsr.3.html Subject: Judicial Misconduct at Tenth Circuit Court of Appeals Date: Mon, 22 Jun 1998 13:29:01 -0600 From: bill payne <billp(a)nmol.com> To: art morales <armoral(a)sandia.gov>, senator_hatch(a)Hatch.senate.gov, senator(a)thurmond.senate.gov, chuck_grassley(a)grassley.senate.gov, senator_specter(a)specter.senate.gov, senator_thompson(a)thompson.senate.gov, info(a)kyl.senate.gov, senator_dewine(a)dewine.senate.gov, john_ashcroft(a)ashcroft.senate.gov, michigan(a)abraham.senate.gov, senator_leahy(a)leahy.senate.gov, senator(a)kennedy.senate.gov, senator(a)biden.senate.gov, senator_kohl(a)kohl.senate.gov, senator(a)feinstein.senate.gov, russell_feingold(a)feingold.senate.gov, dick(a)durbin.senate.gov, senator(a)torricelli.senate.gov CC: steve dillingham <" Steven.Dillingham"@hq.doe.gov>, Robert Nordhaus <" Robert.Nordhaus"@hq.doe.gov>, mrgall(a)ix.netcom.com, jy(a)jya.com, art morales <armoral(a)sandia.gov>, federico pena <" Federico.F.Pena"@hq.doe.gov>, RJPARK(a)sandia.gov, cypherpunks(a)toad.com, ukcrypto(a)maillist.ox.ac.uk Monday 6/22/98 1:02 PM Senate Judiciary Committee http://www.senate.gov/committee/judiciary.html Republicans Orrin G. Hatch, Utah, Chairman senator_hatch(a)Hatch.senate.gov Strom Thurmond, South Carolina senator(a)thurmond.senate.gov Charles E. Grassley, Iowa chuck_grassley(a)grassley.senate.gov Arlen Specter, Pennsylvania senator_specter(a)specter.senate.gov Fred Thompson, Tennessee senator_thompson(a)thompson.senate.gov Jon Kyl, Arizona info(a)kyl.senate.gov Mike DeWine, Ohio senator_dewine(a)dewine.senate.gov John Ashcroft, Missouri john_ashcroft(a)ashcroft.senate.gov Spencer Abraham, Michigan michigan(a)abraham.senate.gov Jeff Sessions, Alabama Democrats Patrick J. Leahy, Vermont senator_leahy(a)leahy.senate.gov Edward M. Kennedy, Massachusetts senator(a)kennedy.senate.gov Joseph R.Biden, Jr., Delaware senator(a)biden.senate.gov Herb Kohl, Wisconsin senator_kohl(a)kohl.senate.gov Dianne Feinstein, California senator(a)feinstein.senate.gov Russell D. Feingold, Wisconsin russell_feingold(a)feingold.senate.gov Richard Durbin, Illinois dick(a)durbin.senate.gov Robert Torricelli, New Jersey senator(a)torricelli.senate.gov Purpose of this e-mail is to give written proof of criminal judicial misconduct by Tenth Circuit Court of Appeals clerks Hoecker, Fisher, and Judges Moore, Barrett, Weis and help get this matter settled. Thursday March 30, 1995 I wrote Tenth Circuit clerk Hoecker to request a copy of the docket sheets for case 94-2205 Payne v. Sandia Corporation, et al Hoecker did not answer my letter. On Tuesday March 5,1996 I wrote Judge Lucius D. Bunton to ask his help to get a copy of the docket sheets. No response. On Monday September 23, 1996 Arthur R Morales and I wrote Henry A. Politz, Chief Judge U.S. Court of Appeals - Fifth Circuit to ask his help to get a copy of the docket sheets of my case and Morales Tenth Circuit case 95-2204. Tenth Circuit also refused to send Morales copies of docket sheets for his case. Politz is Bunton's boss. No response. Friday May 30, 1997 I wrote Antonin Scalia to get this help to get a copy of the docket sheets. No response. 5 May 1998 citizen John Young finds docket sheets on Source: PACER, U.S. Court of Appeals, 10th Circuit, 1-800-279-9107 and posts them on Internet at http://jya.com/whp-10usca.htm Docket as of April 10, 1998 0:05 am Proceedings include all events. 94-2205 Payne v. Sandia Corporation, et al shows that I filed my Brief of the Appellant on 2/19/95. 2/23/95 [835344] Appellant's brief filed by William H. Payne. Original and 7 copies. c/s: y. Served on 2/19/95 Oral argument? pro se. Appellee/Respondent's brief due 3/24/95 for Thomas P. Wright, for Robert Surran, for Paul A. Stokes, for Mary J. Stang, for Tommy A. Sellers, for Craig A. Searls, for Albert Narath, for Preston B. Herrington, for Peter S. Hamilton, for Roger L. Hagengruber, for James R. Gosler, for Harold L. Folley, for Robert L. Ewing, for C. William Childers, for Harvey J. Brewster, for Sandia Corporation (mbm) mbm writes "Appellee/Respondent's brief due 3/24/95" Sandia had sent me a copy of its brief by 3/28/96. I filed attached MOTION TO GRANT PLAINTIFF-APPELLANT'S DEMANDS ON BASIS THAT DEFENDANT-APPELLEES FAILED TO FILE BRIEF WITHIN 30 DAYS SPECIFIED BY FEDERAL RULE OF APPELLATE PROCEDURE 31 on Tuesday the 28th day of March, 1995 My February 28 MOTION at the Tenth Circuit is filed WITHOUT notice of service logged. 4/4/95 [845484] Appellant's motion filed by Appellant William H. Payne [94-2205] to grant appellant's demands on basis that appellees' failed to file timely brief. Original and 3 copies c/s: y (mbm) In 1995 FRAP 25 (a) stated "[b]riefs shall be deemed filed on the day of mailing if the most expeditious form of delivery by mail, excepting special delivery, is used." FRAP 25 has been changed by 1998 to http://www.ca5.uscourts.gov/docs/frap-iop.htm#25a Since I mailed Appellant's motion filed by Appellant William H. Payne [94-2205] to grant appellant's demands on basis that appellees' failed to file timely brief on 3/28/98, it is likely Sandia's lawyer Friedman received it 3/29/95. Tenth Circuit logs 3/30/95 [844759] Appellee's brief filed by Sandia Corporation, Harvey J. Brewster, C. William Childers, Robert L. Ewing, Harold L. Folley, James R. Gosler, Roger L. Hagengruber, Peter S. Hamilton, Preston B. Herrington, Albert Narath, Craig A. Searls, Tommy A. Sellers, Mary J. Stang, Paul A. Stokes, Robert Surran, Thomas P. Wright. Original and 7 copies. c/s: y. Served on 3/27/95 Oral Argument? y (appellant is pro se) Appellant's optional reply brief due 4/13/95 for William H. Payne (mbm) Federal Rule of Appellate Procedure [FRAP] 26 (c) states (c) Additional Time after Service. When a party is required or permitted to act within a prescribed period after service of a paper upon that party, 3 calendar days are added to the prescribed period unless the paper is delivered on the date of service stated in the proof of service. http://www.ca5.uscourts.gov/docs/frap-iop.htm#26c While the Tenth Circuit ASSERTS Appellees brief was, in fact, served on 3/27/95 evidence given below points to the brief was served, in fact, on 3/29/95. I allege that Friedman affixed a false date of service to Sandia's brief. I WAS NEVER PROPERLY SERVED. I wrote Wednesday March 29, 1995 Dan Friedman Simons, Cuddy & Friedman Pecos Trail Office Compound 1701 Old Pecos Trail POB 4160 Santa Fe, NM 87502-4160 505-988-4476 505-984-1807 FAX Dear Lawyer Friedman: Today at 14:00 hours I found a green and white about 9x13 inch envelope in our mail box at my home. Mailing label indicated that the envelope came from your firm. CONFIDENTIAL was stamped on the mailing label. I wrote "Received at 14:00 hours on W 3/29/95 with no POSTMARK OR STAMP by W. H. Payne" at the bottom of the envelope. There was no STAMP OR POSTAGE METER LABEL or POSTMARK on the envelope. Therefore, I gave the envelope to US Postal Service supervisor Mel at 14:49 hours today at the Postal Receiving station at 9904 Montgomery, NW in Albuquerque. Mel has a copy of the cover of the envelope with Mel's note written on it. Mel told me the post office was going to return the envelope to your firm for proper mailing. I ask: 1 What did this envelope contain? Please identify the documents precisely. 2 If any Certificates of Service were included in the envelope, then what were the dates affixed to these documents? 3 Who placed this envelope in our mail box? Lawyer Friedman: It appears you missed an important filing date. And are in the process of attempt to correct your failure. But may be using illegitimate methods to conceal your failure. Please respond as soon as possible so that we all may discover what has happened here." ... Lawyer Friedman did not respond to the above letter. But Friedman did mail me Appellees brief many days later in envelope showing TRUE MAILING date. Certificate of service on received Appellees brief did not reflect postmark date. 10th Cir. R. 25.4 in 1995 page 62 reads Papers not accepted for filing. -- The clerk shall not file papers that do not comply with the Federal Rules of Appellate Procedure and these rules See 10thCir. R. 42.1 But Tenth Circuit clerks Fisher and Hoecker despite my protests and submission of evidence may have stamped FILED on Sandia's IMPROPERLY SERVED Appellee/Respondent's brief according to the Federal Rules of Appellate Procedure. Laywer Friedman FALSIFIED THE CERTIFICATE OF SERVICE. Friedman DID NOT MAIL ME "Served on 3/27/95." d) Proof of Service; Filing. A paper presented for filing shall contain an acknowledgment of service by the person served or proof of service in the form of a statement of the date and manner of service, of the name of the person served, and of the addresses to which the papers were mailed or at which they were delivered, certified by the person who made service. Proof of service may appear on or be affixed to the papers filed. When a brief or appendix is filed by mailing or dispatch in accordance with Rule 25(a)(2)(B), the proof of service shall also state the date and manner by which the document was mailed or dispatched to the clerk. http://www.ca5.uscourts.gov/docs/frap-iop.htm#25a Crime apparently committed by Hoecker and Fisher is § 1017. Government seals wrongfully used and instruments wrongfully sealed Whoever fraudulently or wrongfully affixes or impresses the seal of any department or agency of the United States, to or upon any certificate, instrument, commission, document, or paper or with knowledge of its fraudulent character, with wrongful or fraudulent intent, uses, buys, procures, sells, or transfers to another any such certificate, instrument, commission, document, or paper, to which or upon which said seal has been so fraudulently affixed or impressed, shall be fined under this title or imprisoned not more than five years, or both. http://www.law.cornell.edu/uscode/18/1017.shtml Despite my protests of judicial misconduct Judges Moore, Barrett, Weis award decision to Sandia 10/6/95 [890055] Order filed by Judges Moore, Barrett, Weis "...All outstanding motions are denied..." (found in Order & Judgment of 10/6/95) [879579-1] Parties served by mail. (pdw) when these judges should not have had Appellees brief before them. Then in an apparently attempt to conceal what happened 10/6/95 [890076] NOTE: THIS ENTIRE CASE IS SEALED. Terminated on the Merits after Submission Without Oral Hearing; Judgment Affirmed; Written, Signed, Unpublished. Moore, authoring judge; Barrett; Weis. [94-2205] (pdw) I WON MY APPEAL, pro se, ON A TECHNICALITY but judges Judges Moore, Barrett, Weis awarded the win to Sandia Labs! Members of Congress, judicial misconduct in this matter has been well-documented. Court records filed with the Tenth Circuit. But CURRENTLY under seal. Lawyers involved in this matter attempt to use the legal strategy of IGNORE and STONEWALL to attempt to deny me justice. Ignoring and stonewalling by lawyers forced Morales and me to seek visibility so lawyers could no longer ignore and stonewall. Lawyer attitude apparently is that they ignore rules of civil procedure or even the law so long as their actions are invisible to public scrutiny. Visibility was achieved by suing the National Security Agency which revealed even more judicial misconduct http://www.jya.com/whp052898.htm. I would like to settle all matters involved with this unfortunate cyrpto-related matter, which includes criminal violations of the Privacy Act. DOE lawyer Steve Dillingham asked me to prepare a settlement offer in 1994. I wrote a settlement letter May 22, 1994 to Dillingham. Nothing happened. June 11, 1998 I made several modifications to my 1994 settlement letter and sent it e-mail to Robert Nordhaus, Chief Counsel, DOE. I ask that you 1 help with settlement of my six-year-old since I won my appeal at the Tenth Circuit, 2 investigate Tenth Circuit case 94-2205 Payne v. Sandia Corporation, et al to bring the guilty to justice. Sincerely william payne 505 292 7037 I am not reading e-mail http://jya.com/whpfiles.htm http://www.apcatalog.com/cgi-bin/AP?ISBN=0125475705&LOCATION=US&FORM=FORM2 http://www-hto.usc.edu/software/seqaln/doc/html/gfsr.3.html Coauthor Lewis in the above is one of my former MS and PhD students in computer science. http://www.friction-free-economy.com/ Monday 6/22/98 1:04 PM Members of Congress Purpose of this e-mail is to give written proof of criminal judicial misconduct by Tenth Circuit Court of Appeals clerks Hoecker, Fisher, and Judges Anderson, Barrett, Logan and request a congressional investigation. After several years, with Payne, of trying to get Tenth Circuit to send docket sheets from my case, citizen John Young http://www.jya.com/index.htm locates docket sheets and posts them Morales Case Dockets 10th USCA June 12, 1998 on Internet at http://www.jya.com/arm061298.htm. Source: Online records Tenth Circuit Court of Appeals via PACER GENERAL DOCKET FOR Tenth Circuit Court of Appeals Court of Appeals Docket #: 95-2204 Filed: 9/29/95 Nsuit: 3440 Morales v. Sandia National Lab. Appeal from: United States District Court for the District of New Mexico I filed 11/9/95 [898274] Appellant's brief filed by Arthur R. Morales. Original and 2 copies. c/s: y. Served on 11/7/95. Oral argument? pro se. Appellee's brief due 12/11/95 for Sandia National Lab. (pdw) Sandia files its FIRST ATTEMPT at 12/11/95 [905033] Appellee's deficient brief filed by Sandia National Lab.. Appellee's corrected brief due 12/21/95 for Sandia National Lab. additional copies received 12/11/95. (fg) Tenth Circuit court clerk Patrick Fisher writes Wells on December 11, 1995 concerning Sandia's deficient brief [C]orrections, however made, must be accompanied by proof of service upon all other parties to the appeal. ... and issues 12/14/95 [905975] FIRST notice of rules violation for Deborah D. Wells for Appellee Sandia National Lab. (sls) Wells submits 12/21/95 [907974] Appellee's brief filed by Sandia National Lab.. Original and 7 copies. c/s: y. Served on 12/20/95 Oral Argument? n Appellant's optional reply brief due 1/8/96 for Arthur R. Morales (mbm) but DOES NOT serve me with a copy. Wells later admits in 2/1/96 [917660] Response filed by Sandia National Lab. Appellant/Petitioner motion to clarify Original and 3 copies. c/s: y response Null Relief Code (fg) Certificate of Service date 30th day of January, 1996, [h]ad Appellant simply made a phone call to the Tenth Circuit, he could have established that the Defendant-Appellee's corrected brief was indeed filed on a timely basis, ... I protested by filing 1/3/96 [909965] Appellant's motion "for the Court to Grant Appeal" filed by Appellant Arthur R. Morales [95-2204]. Original and 3 copies. c/s: y. (pdw) 1/3/96 [909966] Appellant's motion "for New Trial" filed by Appellant Arthur R. Morales [95-2204]. Original and 3 copies. c/s: y. (pdw) 1/3/96 [909967] Appellant's motion "to Discipline Defendant-Appellee" filed by Appellant Arthur R. Morales [95-2204]. Original and 3 copies. c/s: y. (pdw) because Sandia did not properly serve me in violation of Fisher's December 11, 1995 order. The Tenth Circuit court of appeals should NOT, by its own rules, filed Appellee's brief filed by Sandia National Lab.. Original and 7 copies. c/s: y. Served on 12/20/95 10th Cir. R. 25.4 in 1995 page 62 reads Papers not accepted for filing. -- The clerk shall not file papers that do not comply with the Federal Rules of Appellate Procedure and these rules See 10thCir. R. 42.1 And is doubtful whether court clerk Fisher had any authority under appellate procedure to permit Wells to correct her deficient brief. Rather Sandia's brief did not comply with with Federal Rules of Appellate Procedure and should have been summarily rejected for filing. I WON, pro se, my appeal to the Tenth circuit on a technicality but Judges Anderson, Barrett, Logan awarded the win to Sandia Labs. 4/2/96 [932848] Order filed by Judges Anderson, Barrett, Logan denying parties' motions for general relief(found in Order and Judgment of 4/2/96)--"...During the course of this appeal, the parties have filed various motions for dismissal, summary grant, and sanctions. We find no merit to any of these motions, and they are [920851-1] Parties served by mail. (pdw) by accepting and judging on a documents which was not permitted to be before the court by its own rules. Judicial misconduct in my case has been well-documented as it is in Payne's case. Payne and I speculate that similar judicial misconduct may have occurred at the Tenth Circuit. Sandia lawyer Robert J Park wrote me a settlement letter on Feb 18, 1998. I filled in the blanks and made minor handwritten chages and returned it on February 22, 1998. But my offer has not yet been accepted. I ask that you 1 help have my settlement offer accepted, 2 investigate judicial misconduct in case 95-2204 and punish the guilty. Some citizens can only express such frustrations with the US court system with violence. I seek change by legal reform. Sincerely Arthur R Morales 505 345 1381

1 0

Lucent Researcher Cracks PKCS#1, SSL
by Bill Stewart 17 Dec '03

17 Dec '03

http://www.rsa.com/rsalabs/pkcs1/ http://www.zdnet.com/zdnn/stories/zdnn_display/0,3440,332372,00.html Lucent researcher cracks encryption code By Margaret Kane, ZDNet An encryption researcher has discovered a software flaw that could allow a hacker to break the software codes used for electronic commerce. The problem protocols use the Public Key Cryptography Standard #1, including the Secure Sockets Layer, or SSL standard. RSA Data Security Inc., which defined the standard, said that the vulnerability does not apply to PKCS #1-based secure messaging protocols, such as Secure Electronic Transactions and Secure Multipurpose Internet Mail Extension because they are not susceptible to -- and already implement -- mechanisms preventing this potential vulnerability. But at a Web site using SSL, a hacker could break the code by sending millions of messages to the target server and observing the server's response. That information could be used to decode an intercepted session, said Daniel Bleichenbacher, a researcher at Lucent Technologies Inc.'s (Nasdaq:LU) Bell Labs. A slew of software companies announced today that they are working on a patch for the problem, and will post it on their Web sites. RSA, a division of Security Dynamics Technologies, (Nasdaq:SDTI) said it is working with IBM (Nasdaq:IBM), Microsoft Corp.(Nasdaq:MSFT), Netscape Communications Corp. (Nasdaq:NSCP), Open Market Inc. (Nasdaq:OMKT), and others on the problem. RSA is also working with the CERT Coordination Center on the problem, which has posted a technical advisory about the situation. Reuters contributed to this story. ++++++++++++++++++ Extracted From Another web page there m+++++++++++++ http://www.zdnet.com/zdnn/stories/zdnn_display/0,3440,332372,00.html SSL flaw could expose encrypted data A researcher at Lucent Technologies Inc.'s Bell Laboratories has discovered a vulnerability in the SSL encryption commonly used in electronic commerce transactions. The flaw, which has been exposed only in a laboratory setting, would allow a hacker to capture encrypted data in a session between a browser and server. The vulnerability is hardly a fatal flaw in SSL (Secure Sockets Layer). Rather, it's a hole that a savvy Web site administrator should be able to spot before a hacker can do any damage. "The good news here is that you still have to be pretty smart to break it," said Julie Ferguson, chief technology officer of ClearCommerce Corp., in Austin, Texas. The researcher, Daniel Bleichenbacher, who works in the secure systems research department of Bell Labs, in Murray Hill, N.J., found a way for a hacker to derive the session key used in a transaction by feeding off the error messages created by a server. First, the hacker must prepare roughly 1 million messages to send against the server to capture the information. Bleichenbacher said he created an algorithm that analyzes those messages and derives the session key--which is randomly generated for each transaction by a combination of public and private keys at the Web site and the consumer's browser. Still, a competent site administrator should notice that his Web site has suddenly received a barrage of bad messages. "It should be very easy to see that an attack is taking place," Bleichenbacher said. The hacker would also have to capture a session at some point on the line, likely at an Internet service provider, not knowing whether there is information within it that is worth stealing. Because a session key is randomly generated for each session, it's possible for a hacker to capture information only about that individual session, said officials at RSA Data Security Inc., which developed SSL in conjunction with Netscape Communications Corp. The flaw, technically found in the standard called the Public Key Cryptography System #1, does not apply to encryption algorithms themselves but rather to the way packets are placed into encrypted envelopes. PKCS#1 is due to be upgraded next month, and the latest revision will account for the newly found vulnerability, said Scott Schnell, vice president of marketing at RSA, in Redwood City, Calif. The implications are perhaps most serious for home banking, because a hacker using this flaw could capture a user's banking information. Although there are no known real-world attacks taking advantage of this SSL flaw, software vendors promise to have patches that mask the error messages. Netscape, in Mountain View, Calif., already has one available on its Web site for several applications, including Netscape Enterprise Server, Netscape Proxy Server and the company's messaging servers. Microsoft Corp. also has created a fix that masks the error messages that a hacker would rely upon. Officials of the Redmond, Wash., company said they have worked with Netscape to ensure that their respective fixes do not create interoperability problems. Both companies said they have already alerted major customers about the problem and provided them with fixes. Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

BeyondPress 4.0 from Extensis
by listmaster＠extensis.com 17 Dec '03

17 Dec '03

Announcing Extensis BeyondPress 4.0 The Award-winning Quark-to-HTML XTension from Extensis http://www.extensis.com/BeyondPress_P * Convert Quark to HTML & DHTML with one click * Compatible with QuarkXPress 3.31 & 4.0 * Receive PhotoAnimator FREE! with each copy of BeyondPress Extensis BeyondPress 4.0 is the latest version of our award-winning XTension that takes your Quark documents to the web - in no time. BeyondPress preserves the layout of your Quark documents in HTML tables or DHTML for cutting-edge design. Create animated GIFs with your FREE copy of Extensis PhotoAnimator (a $99 value). Then drag the animated GIFs into your Quark layout and see them displayed live inside QuarkXPress. Plus, add hyperlinks, image maps, and more - right in QuarkXPress. Extensis BeyondPress - It's the best way to take Quark to the Web. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Order BeyondPress 4.0 for only $499.95 AND get Extensis PhotoAnimator - FREE! (a $99 value) To order or receive more information please visit: http://www.extensis.com/BeyondPress_P Or phone: 1-800-796-9798 or (503) 274-2020 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ BeyondPress is available immediately for Macintosh users. BeyondPress for Windows will be available later this Summer. BeyondPress is 100% compatible with Quark XPress 3.31 & 4.0. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ PS. We have made every effort to ensure this message is being sent only to people who have expressed interest in Extensis products. If we have sent this to you in error, please accept our apologies and reply with "REMOVE" in the subject line for automatic exclusion from future communications. If you know someone who would like to be on our mailing list have them send an email to listmaster(a)extensis.com with "ADD" in the subject line and their email address in the body.

1 0

Wooden sculpture
by bill payne 17 Dec '03

17 Dec '03

Friday 6/26/98 7:44 PM John Young I am reading http://www.jya.com/gak-fails.htm Tonight I retrieved a wooden sculpture given to me by numerical analyst LINPACK http://av.yahoo.com/bin/query?p=linpack&z=2&hc=0&hs=0 Richard Hanson. That's him! http://www.vni.com/products/imsl/hanson.html Hanson gave me the sculpture in about 1978. Hanson and I have been colleagues for about 25 years. I will forward it to you. With initials on the bottom. And, of course, YOU must pass on the sculpture to the NEXT DESERVING. Our buddies aren't happy about what happened. http://www.wpiran.org/ Allahu akbar ... and keep up wind. Until we get SETTLMENT, of course. Settlment must include support payments for Iranian mothers who lost sons in the Iraq/Iran war, retirement benfits for them, health insurance and a LETTER OF APOLOGY. All paid for by NSA and the CIA. We are ALL working for settlment. bill http://www.apcatalog.com/cgi-bin/AP?ISBN=0125475705&LOCATION=US&FORM=FORM2 http://www-hto.usc.edu/software/seqaln/doc/html/gfsr.3.html

1 0

RSA Material on PKCS#1 Crack
by Bill Stewart 17 Dec '03

17 Dec '03

The attack: ftp://ftp.rsa.com/pub/pdfs/bulletn7.pdf 4-page PDF file. There's also a Postscript version available. The paper is by Bleichenbacher of Lucent and Burt Kaliski and Jessica Staddon of RSA Labs. OEM Countermeasures: http://www.rsa.com/rsalabs/pkcs1/oem_counter.html (below) Countermeasures for Users of Servers: http://www.rsa.com/rsalabs/pkcs1/countermeasures.html (below - it's pointers to vendor home pages, pleasantly including C2. Apparently they've done a good job coordinating it...) Q&A : http://www.rsa.com/rsalabs/pkcs1/qa.html ====== RSA to Provide OEM Customers with Guidelines and Technology to Thwart Potential Web Server Security Attack OAEP Formatting Adds Important Security to Vulnerable Applications June 26, 1998 -- RSA Data Security, Inc. today announced guidelines to assist its OEM customers in both assessing their products vulnerability to a newly discovered potential security attack, and to identify pre-emptive countermeasures to thwart such an attack. The guidelines are designed to help developers understand the nature and mechanism of the threat, pose a series of technical questions to identify vulnerable constructs in the developers software design, and provide a set of countermeasures from which to choose based on the developers needs. These guidelines are available online at http://www.rsa.com/rsalabs/. The potential threat affects server products that employ an interactive key establishment protocol in conjunction with the PKCS #1 standard for digital envelopes, including SSL-based servers. SET (Secure Electronic Transaction) and other secure messaging protocols, such as S/MIME (Secure Multipurpose Internet Mail Extension), are not susceptible to or already implement mechanisms preventing this potential attack. Recent research by cryptographer Daniel Bleichenbacher of the Bell Labs Secure Systems Research Department, the research and development arm of Lucent Technologies, indicate that the above combination is potentially vulnerable to a class of attack known as Adaptive Chosen Ciphertext Attacks. The potential attack noted by Mr. Bleichenbacher relies on sending a target server on the order of a million carefully constructed messages and observing variations in the servers response. As such, the attack is both detectable and can be prevented with countermeasures. For some developers, the most effective countermeasure is incorporation of the Optimal Asymmetric Encryption Padding (OAEP) technology, a method of formatting an encrypted message so that attackers cannot learn information about the contents through repeated probing. OAEP is designed to thwart a variety of attacks, including the Adaptive Chosen Ciphertext Attack. For other developers, the most effective countermeasure will be preventing an assailant from gaining information from messages returned from their server. RSAs guidelines provide design information for developers to use in implementing this form of countermeasure as well. RSA Laboratories, the research arm of RSA, plans to include OAEP in the next version of PKCS #1, a widely used cryptography standard, that will be available as a draft for comment in July. PKCS #1 is used in SSL and other popular security mechanisms to provide confidentiality for exchange of symmetric encryption keys (digital envelopes), as well as to construct digital signatures. OAEP has already been integrated into RSAs newest release of BSAFE 4.0, the companys flagship cryptographic security development suite which began shipping this month. RSA intends to make available OAEP updates conforming to the new PKCS #1 specification for its BSAFE 3.0 and 4.0 products in July, and to incorporate OAEP in an upcoming version of JSAFE, RSAs security engine for Java. RSA recommends that developers target these upcoming OAEP updates for inclusion in their products. Check this site for more information on OAEP updates in the coming weeks. RSAs Website will also host links to vendors sites where countermeasures are made available as a service to both OEMs and end customers. See RSAs related announcement on this subject. Currently, the following vendor information Website links are available: C2Net Software, Inc. http://www.c2.net Consensus Development Corporation http://www.consensus.com/ssl-rsa.html IBM Corporation http://www.ibm.com/security Lotus Development Corporation http://www.lotus.com/security Microsoft Corporation http://www.microsoft.com/security Netscape Communications Corporation http://www.netscape.com Open Market, Inc. http://www.openmarket.com/security/ RSA Data Security, Inc. http://www.rsa.com/rsalabs An RSA Labs technical paper discussing this vulnerability, as well as additional information, is available on RSAs Website, http://www.rsa.com/rsalabs. ============ SSL Countermeasures These countermeasures enhance the security of popular Internet servers and software products based on the Secure Sockets Layer (SSL) protocol. The countermeasures are available from respective vendors' Web sites, and include configuration guidelines, software updates where applicable and additional information. Currently available vendor information may be found at the following sites: Aventail Corporation http://www.aventail.com/ C2Net Software, Inc. http://www.c2.net/ Consensus Development Corporation http://www.consensus.com/ Lotus Development Corporation http://www.lotus.com/security IBM Corporation http://www.ibm.com/security/ Microsoft Corporation http://www.microsoft.com/security/ Netscape Communications Corporation http://help.netscape.com/products/server/ssldisc overy/index.html Open Market, Inc. http://www.openmarket.com/security/ RSA Data Security, Inc. http://www.rsa.com/rsalabs/ Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

WORRIED ABOUT HIS OR HER BACKGROUND?
by lee7＠msn.com 17 Dec '03

17 Dec '03

<HTML><BODY BGCOLOR="#ff0080">INFORMATION USA Your Source For Information LOCATE Business & Individuals in the USA Old Friends, Lost Loved Ones, Dead Beat Parents, Debtors Assets Local, State, National & International Information needed varies, sometimes just a name. Helpful information would be Last Known Address, Social Security Number, Date of Birth and any other information you feel would be of use. Provide us with everything you have and let the Professionals at Information USA do the rest. Information USA has the most competitive prices in the industry! Call today for a free price quote. Other Services Available *Criminal Background *Civil Court Records *Bankruptcy & Liens & Judgments *National Real Property *Business Credit Reports *Corporate Profiles *National Bank Asset Information *Stocks & Bonds & Mutual Fund Search *Safe Deposit Box Search *Social Security Death Records *Marriage & Divorce *Workers Compensation Records *Non-Published Numbers *Drivers License Records *Vehicle Records Search *Water & Aircraft Search *Pre-Trial Comprehensive Reports *Pre-Employment Background *Verify Education *Verify Professional License *Verify Employment Call for additional Services Information USA Call Toll Free 1-888-370-9112 Ask for Ken Wagner Visa, MasterCard & Discover Cards Accepted </HTML>

1 0

BumBoy III - SPACE ALIENS HIDE MY DRUGS!!!
by Linda Reed--PCC West Campus CSC 17 Dec '03

17 Dec '03

BumBoy III - SPACE ALIENS HIDE M DRUGS!!! __________________________________________ BumBoy Interview: C-J VAN DAMNNED (will it never end?) { AnInterViewerToBeNamedLater, sucking medication out of Baby's twat, only to find that it was a surprisingly pleasureable experience, made the mistake of allowing the Author to continue the interview on his own, while she and the TruthMongrel engaged in behavior that even the disgusting perverts on the BumBoy staff found to be revolting, since it was being done by two females.} VOICES: "Tell them about US..." VAN DAMNNED: It's not always voices...sometimes it's dreams... sometimes the TV, or the Radio, or...anything, really... Like the dream where I'm in the front row at a prizefight, and two guys are beating the living shit out of each other, until the final bell sounds and the winner is declared. Then the two guys get out of the ring and come after me. The one wearing the elephant-colored boxing trunks holds me down while the one wearing the donkey-colored trunks starts shoving a large box up my asshole, and pieces of paper fall out, giving me papercuts, until one of the pieces of paper cuts my throat as I puke it out, and the two guys who pretended to be fighting each other are sucking up my blood out of the trough at the edge of the boxing ring, which turns out to be a pig-pen. As the last of my lifeblood drains out of me, a person in a dirty white smock appears, saying, "I'm from the government, and I'm here to help you." As the person places the piece of paper that cut my throat onto my juglar vein, to stop the bleeding, I notice that it is an election ballot--it is *my* election ballot. As the ambulance rushes me back to my office, to return to work, with the attendants telling me I should be back to normal in about forty months, the two boxers walk past me, arm in arm, with two sinister-looking agents walking behind them, discussing their 'fighters' rematch, four years hence. They have decided to raise the price of tickets from $100.00 to $500.00, since the government automatically deducts it from everyone's paycheck, whether they attend the 'fight' or not. As they discuss how much to raise the concession prices for beer, soda, peanuts, popcorn and hot dogs, they seem to suddenly notice me, and stop to offer their sincere condolences for my 'accident', and say that they hope it won't prevent me from attending the rematch. As if on cue, the fight-promoter, who tells me he is from the government, and is here to help me, picks up a pig-turd containing a small piece of the hot-dog I was eating when I was sodomized by the boxers, and hands it to me, saying, "This is your share of the 'take'. ou know, in Communist countries, the government keeps it all..." I don't think I'll attend the rematch. I have a feeling that I already know who wins...and who loses... VOICES: "ou're getting excited again. Why don't you take your medicine, and read a book, or something, to calm you down?" VAN DAMNNED: ou sadistic pricks, you *know* that the only book I have with me is Collier and Horowitz's, 'The KENNEDS, AN AMERICAN DRAMA,' and it's not in the least bit entertaining, since I just finished a book about the Mafia, so I know how everything in the Kennedy book, or *any book on politics, is going to turn out even before the authors even finish writing about it. It's even more depressing than reading Hitler's "Mein Kamf" and "New World Order" and then reading mainstream press reports about government news conferences. Doesn't anybody do 'original material' any more, or is everyone just plagarizing President Henny oungman, who said, "Take my citizens...please!" And take them...and take them...and take them... VOICES: "We *told* you that everything since the Big Bang has been plagarism..." VAN DAMNNED: Oh, yeah? What about my song, "Booger-Eating Dog (Don't Bite The Nose That Feeds ou)," or, "I Was Sitting On My Horse, And She Jerked Me Off," and all of the other sick, depraved songs I've written? Do you see a big lineup of people claiming credit for the lyrics? VOICES: "ou're getting excited again. See, you even placed your quote marks in the correct place..." VAN DAMNNED: See, there is another thing that proves that people are capable of original, independent thought and actions... Just because I'm the Author doesn't mean I have to use correct spelling, punctuation, syntax (whatever the hell that is), or write in a manner that indicates a well-researched and well- reasoned train of thought. VOICES: "That doesn't make you unique, you fucking imbecile. Just ask any one of a thousand publishing editors who have to wade through the mountains of trash sent to them by self- declared 'authors' who eventually end up cashing in Andy Warhol's IOU for 'Fifteen Minutes Of Fame' by becoming a guest on the Jerry Springer Show and telling the whole world about how they got their dog pregnant by sucking themselves off and blowing their sperm up her twat." VAN DAMNNED: That wasn't *me*! That was someone who just looked like me and deposited Jerry Springer's check in my bank account to make me look bad. But I don't mind, because it makes me unique! VOICES: "Everything since the BigBang is Plagarism. ou're just like all the other Sheeple." VAN DAMNNED: No! ou're trying to trick me into thinking that I'm not a free, independent human being. ou're trying to take away the only things I have to hold on to that make me unique. ou want me to believe that I am not the only sick, depraved pervert in the world who spreads FUD (Fear, Uncertainty and Disinformation) in an attempt to cloak my evil, wretched life in an aura of grandoise importance and imagined righteousness. VOICES: "ou haven't been following the Clinton-Lewinski affair in the news, have you?" VAN DAMNNED: Shut up! I'm not listening! I AM *NOT* LIKE PRESIDENT CLINTON!!! I did *not* give strong encryption to those Chinese people who let me have my way with Buddy in the Lincoln bedroom before they ate him. I'm the one who tried to expose the fact that the *real* Buddy had been replaced by a cross-cloning of Spuds Mackenzie and Janet Reno. I told the CypherPunks to draw glasses on a picture of Buddy and see if it looked like Reno. That was *me*, *really*! I just forged Mark Hedges name to that post to make him look like an asshole! Honest! VOICES: "ou're just like all of the other sorry, pathetic losers who can't get a *real* publishing contract with a *real* publisher who is helping to destroy the Rain Forests by printing millions of hardcover and paperback books decrying the destruction and loss of the Rain Forests. "Instead, you continue to contribute to the destruction of the Digital Environment by sending mountains of your rotting, greasy Digital SPAM to the CypherPunks Disturbed Male List, where your sins are compounded in MeatSpace as a result of the millions of plastic <Delete> keys that need to be created every day in order for decent, moral, law-abiding NetiZens to protect themselves and their children from your mindless drivel. "As punishment, WE are going to tell you the *real* name of the right-hand square bracket..." VAN DAMNNED: Noooo!!! I'M NOT LISTENING!!! AAARRRRRGGHHHHH!!!!!!!!!!!!!!!!!!!!!!!!!!! {The BumBoy Interview with C-J VAN DAMNNED came to a sudden end, as heavily armed, black-clad ninja agents of ACypherNipsNode- ToBeNamedLater, came bursting through the door, screaming, "Torah! Torah! Torah! Chop! Chop! <Hee-Hee>", surrounding the Author and allowing AnInterviewerToBeNamedLater to grab Baby and the tape recorder, making her escape while clutching her skirt close to her body, as the Author was trying to peek up it even as he lie on the floor taking a tremendous beating. "ou've got to admire his persistence." she told BumBoy editors while dropping off the interview tapes. Sadly, we must report that Baby, obviously a codependent enabler of the Author's sickness, failed to make it to California, where BumBoy was prepared to foot the bill for her to see a Doggie Therapist, instead choosing to return to the Author, once again dropping the BadBillyG mask at HisOrHer feet and backing toward him with her tail raised in eager anticipation. Redoubtable sources inform us that the black-clad ninja agents of ACypherNipsNodeToBeNamedLater sat back, drinking the Author's Scotch and enjoying the spectacle, as well as tucking money in the Author's panties when HeOrShe bound Baby's feet for the second performance. Official Police Reports indicate that, when officers arrived in response to noise complaints from the neighbors, that the ninjas were fighting violently over a Din-Din Tin roasting pan and a bottle of barbeque sauce, seemingly surprised that the Author and Baby TruthMongrel had vanished. The leader of the black-clad ninja agents was quoted as saying, "Shit! We come to Ito his dog, and now we have to go home and Ito mole of his SPAM, instead." Turning to his companions, he said, "We go now...chop-chop!" Looking embarassed, the leader explained to police, "We not even know what that mean, until oul fliend, Timmy-San, point us to the alchives, whele we find out it mean we have big cocks, rike Amelican bikels. Then we aporogized fol accusing Timmy-San of making fun of us. He good guy..." The editors at BumBoy, upon receiving Declan McCullagh's expense receipts for the clothing he purchased to go undercover as AnInterviewerToBeNamedLater, could not help but notice that an article of clothing conspicuously missing from the receipts was...panties.}

1 0

Jim Bell Update
by John Young 17 Dec '03

17 Dec '03

According to the June 26 court docket: 1. Jim was arrested June 22; 2. A hearing was held on June 23, USDC Western WA, Tacoma; 3. A new defense attorney present, Peter Voelker; 4. Jim advised of rights and of allegations in violation petition (not specified); 5. Gov moves for detention; 6. Gov and defense attorneys make unspecified proffers; 7. Jim is ordered detained; 8. Probation revocation hearing set for July 10; 9. Judge appoints an (unamed) Federal Public Defender.

3 2

What does it mean and How much does it cost a healthy diet? A natural foods one !
by Jorge C. Palma 17 Dec '03

17 Dec '03

Cantabrian Altamira Shopping http:/www.cantabrian.com/altamira/altamira.htm Hello: How much does it cost a healthy diet?. Cantabrian Altamira Shopping shows in its web pages natural and ecological foods without additives and preservants from Spain. You will find there white tuna, anchovies, honeys, partridges, wines and assocites. We apologize if this message has been missadressed, Thanks, Cantabrian Virtual Publishers http://www.cantabrian.com

1 0

Program: 'Speak Feely' for "secure comminucations"...
by Jan 17 Dec '03

17 Dec '03

Greetings, I've come across this program on the net which claims to give "secure communications"... could any of you folks comment of this program? Speak Freely 6.1 For Windows 95/NT (295K) Author: John Walker Homepage: http://www.fourmilab.ch/speakfree/windows/ Description: Real time one to one audio chat, half or full duplex, bitmap transfer. Encryption for secure communications. Might be slow with modem connections. The text below is part of the text on the homepage... ======================== Speak Freely for Windows Release 6.1 Speak Freely is a Windows application that allows you to talk (actually send voice, not typed characters) over a network. If your network connection isn't fast enough to support real-time voice data, four forms of compression may allow you, assuming your computer is fast enough, to converse nonetheless. To enable secure communications, encryption with DES, IDEA, and/or a key file is available. If PGP is installed on the user's machine, it can be invoked automatically to exchange IDEA session keys for a given conversation. Speak Freely for Windows is compatible with Speak Freely for Unix, and users of the two programs can intercommunicate. Users can find one another by communicating with a "Look Who's Listening" phone book server. You can designate a bitmap file to be sent to users who connect so they can see who they're talking to. Speak Freely supports Internet RTP protocol, allowing it to communicate with other Internet voice programs which use that protocol; in addition, Speak Freely can also communicate with programs which support the VAT (Visual Audio Tool) protocol. ... [remainder snipped] Jan out.

1 0

Use Your Computer To Make Money From Home
by workathome＠grid.sk 17 Dec '03

17 Dec '03

Use Your Computer To Make Money From Home Great Home-Based Business Opportunity. Secret Marketing Software Turns YOUR PC Into A MONEY MACHINE! Easy And Simple. No Risk! Free Marketing Software Explains How! Act Now! To Turn YOUR Computer Into A Money Machine, Send Your Name, Address, and Phone Number within 48 hrs. to: mailto:cashsoftware6@juno.com Click here for removal -> mailto:optout3@juno.com

1 0

CIA Hires Lo/Hi-Tech Spies
by John Young 17 Dec '03

17 Dec '03

NYT, June 27, 1998: Getting Back to Basics, C.I.A. Is Hiring More Spies Taking steps to reduce dependence on high-tech spying. By James Risen Washington, June 26--The Central Intelligence Agency is beginning the largest recruitment drive for new spies in its history, in an ambitious effort to rebuild its espionage service, which has been severely damaged by spy scandals, budget cutbacks and high turnover since the end of the cold war, officials said. With Congress already providing increased financing, the Directorate of Operations, the C.I.A.'s clandestine espionage arm, will hire record numbers of case officers --spies-- beginning this year as part of a new strategic plan to repair the decaying espionage capabilities of the United States by 2005, officials said. In addition to expanded hiring, the agency also plans to reopen several overseas stations that were closed in the early 1990's after the demise of the Soviet Union led Congress and the White House to reduce the C.I.A.'s budget sharply. The recruitment plan is a sign that the C.I.A. recognizes that it has become far too dependent on so-called technical intelligence, or eavesdropping devices and spy satellites. Now, the agency wants to get back to espionage basics, by increasing its ability to place a spy behind enemy lines or inside the offices of a rival government. The spread of new technologies like encryption and computer networks has eroded the value of spy satellites and listening devices and has led the C.I.A. to see the need for an expanded cadre of spies. Without having an agent in place, the C.I.A. has found it much harder to gain access to secrets from rival governments, terrorists and international organized crime groups. ... The C.I.A. is recruiting case officers, and people to support them with technical skills that spies have rarely been asked to learn in the past. "As we tried to figure out our requirements for the future, we realized we needed to have greater technical support for agent operations," said one American official. At the top of the list of requirements is computer expertise. The proliferation of global computer data networks, for example, has made it more difficult for the agency to slip into a country using false identifications. Only computer experts can defeat those local computer systems, and even developing countries routinely make sophisticated computer checks on passports and visas. ... ----- Full story: http://jya.com/cia-hires.htm

2 1

New on-line moderated forum for Pauline Hanson's One Nation
by Global Web Builders 17 Dec '03

17 Dec '03

G'day One Nation supporter in NSW Pauline Hanson's One Nation now has its own moderated discussion group on-line. You may participate by requesting a unique username and password from GWB by reply email. The URL for the discussion board is: http://plato.cc.adfa.oz.au/auspolitics/ Follow the link to Pauline Hanson's One Nation discussion group in the frame on the right. The purpose of the discussion group is to discuss One Nation policy, issues and brain storm. Please not IT IS a moderated discussion group and any offensive posts will result in the poster being taken off the forum. GWB Scott Balson

1 0

AU Cryptozilla Attack
by John Young 17 Dec '03

17 Dec '03

Thanks to Anonymous we offer the article which describes the AU government attack on Eric Young's and Tim Hudson's full-strength Cryptozilla for Netscape: http://jya.com/oz-crypto.htm It's also a good overview of crypto policy battles down under -- the pols, the crats, the laws, the regs, the obfuscations, the work arounds of export controls and runarounds with chicken heads off -- like like all around hereabouts.

1 0

Earn $100 every time OUR phone rings...
by ci0u＠worldnet.att.net 17 Dec '03

17 Dec '03

ALL YOU DO IS ADVERTISE THIS 800 NUMBER! THAT'S ALL!! $100 goes to you for EVERY sale that the company closes! Does the idea of making at least $1,000 per week beginning your 2nd week of doing business excite you? How about never having to sell a thing to your customer and never having to talk to ANYONE to make money? I don't know how this could get any easier. EVERY aspect of selling or talking to someone is DONE COMPLETELY by the company! The number one home based business for the 2nd year in a row, Fortune 5000 is a member of the Better Business Bureau and the U.S. Chamber of Commerce. WHAT THIS BUSINESS WILL DO FOR YOU: * Handles all your calls, closes your sales, and sends you WEEKLY commission checks! * It pays you a $100 commission (that's over 50% of the total sale) for EVERY sale. CHECKS put $$$ in your pocket in less than your first week or two... Quick commission earnings build and maintain motivation. ALL YOU DO IS ADVERTISE the toll-free number and your ID number. * You can get STARTED TODAY. Just advertise the business toll-free number with your ID # and let this business CLOSE YOUR SALES every day... They do all the work and YOU GET PAID FOR IT! * You may advertise any way you choose: Bulk E-Mail, Flyers, Classifieds, Postcards, etc. Suppose you use bulk E-Mail, as I am: 100,000 E-Mails with a 1/10th of a percent (0.1%) sales rate at $100 per sale nets $10,000... not too bad. There is nothing else out there that will provide you with an immediate income beginning THIS WEEK with minimal effort. Before you call, I want you to think about the quality of the live operators handling your call. I am convinced you will not find a better team of closers for your own personal sales. You will clearly understand what I am talking about once you call. PLEASE DON'T LET THIS PASS YOU BY. MAKE THE CALL!! 1-800-811-2141 You will be asked for ID #50030 when you call. (Live operators are available from 8 AM-10 PM CST Monday through Saturday and will be able to answer any questions you may have.) Call one of the 24hr TESTIMONIAL lines at 888-703-5389, 888-446-6949, 888-446-6951 or 888-731-3457 (all toll free).

1 0

Earn $100 every time OUR phone rings...
by q4ix＠worldnet.att.net 17 Dec '03

17 Dec '03

ALL YOU DO IS ADVERTISE THIS 800 NUMBER! THAT'S ALL!! $100 goes to you for EVERY sale that the company closes! Does the idea of making at least $1,000 per week beginning your 2nd week of doing business excite you? How about never having to sell a thing to your customer and never having to talk to ANYONE to make money? I don't know how this could get any easier. EVERY aspect of selling or talking to someone is DONE COMPLETELY by the company! The number one home based business for the 2nd year in a row, Fortune 5000 is a member of the Better Business Bureau and the U.S. Chamber of Commerce. WHAT THIS BUSINESS WILL DO FOR YOU: * Handles all your calls, closes your sales, and sends you WEEKLY commission checks! * It pays you a $100 commission (that's over 50% of the total sale) for EVERY sale. CHECKS put $$$ in your pocket in less than your first week or two... Quick commission earnings build and maintain motivation. ALL YOU DO IS ADVERTISE the toll-free number and your ID number. * You can get STARTED TODAY. Just advertise the business toll-free number with your ID # and let this business CLOSE YOUR SALES every day... They do all the work and YOU GET PAID FOR IT! * You may advertise any way you choose: Bulk E-Mail, Flyers, Classifieds, Postcards, etc. Suppose you use bulk E-Mail, as I am: 100,000 E-Mails with a 1/10th of a percent (0.1%) sales rate at $100 per sale nets $10,000... not too bad. There is nothing else out there that will provide you with an immediate income beginning THIS WEEK with minimal effort. Before you call, I want you to think about the quality of the live operators handling your call. I am convinced you will not find a better team of closers for your own personal sales. You will clearly understand what I am talking about once you call. PLEASE DON'T LET THIS PASS YOU BY. MAKE THE CALL!! 1-800-811-2141 You will be asked for ID #50030 when you call. (Live operators are available from 8 AM-10 PM CST Monday through Saturday and will be able to answer any questions you may have.) Call one of the 24hr TESTIMONIAL lines at 888-703-5389, 888-446-6949, 888-446-6951 or 888-731-3457 (all toll free).

1 0

Credit Medic
by creditmedic＠earthlink.net 17 Dec '03

17 Dec '03

Dear Friend, DO YOU SUFFER FROM BAD CREDIT? DO YOU WISH YOU COULD START OVER WITH A CLEAN SLATE? Maybe you just want a better way to protect your privacy. Many of us never realized the long-term effect that bad credit has on our lives. In the computer age, many of these negative issues seem inescapable, and for good reason. Fortunately, Credit Medic will rescue you from your past negative credit and open the way to a new life in the credit world. By creating an entirely new credit file, you can obtain the credit you deserve. This powerful program will explain how you can create a new credit bureau file that will give you the opportunity for new credit. People lose their credit privileges for any number of reasons. In our society, it's very difficult to live without good credit. Regardless of your past credit history, this program will show you how to regain good credit. But you will get more than that. With good credit comes high self-esteem and self-worth. You will be better able to take care of yourself or your family and enjoy the things you deserve. Credit Medic will walk you through this process step by step. It will take some energy and focus on your part but the rewards will be well worth the effort. By creating a new credit file, the Government allows you a second chance at getting the credit you deserve. Thousands of people who have used this program have achieved success in releasing themselves from the exasperating stranglehold of bad credit and moved on to having outstanding credit. Understand that there is absolutely no reason for you to believe that it is impossible for you to release yourself from your past negative credit and move on to excellent credit! The process is very simple, but it is important to be dedicated and to follow through with all details. You must also be patient, some steps take longer than others. Don't be fooled into thinking that this is a miracle quick fix. This method will require some work on your part. What's important to realize is how the Government and the CRAs (Credit Reporting Agencies) identify you and list all of your past and present credit information. Credit Medic will show you how to apply for new credit identification. This creates a whole new credit identity, that runs parallel (but never crosses) your existing credit. This program doesn't require that you repair your old credit file, although it's a good idea for many obvious reasons. This is your decision to make. Credit Medic isn't loaded with fluff or filler material. Everything in this kit is important! You will find out about rights that you probably didn't know you had. Remember, you deserve good credit. Follow the program carefully, and you will be successful! Credit Medic will give you a second chance for credit. It will also be your last chance. You must understand that you only get ONE (1) second chance. If your credit is damaged again, Credit Medic cannot help you. Credit Medic is a PROVEN method that REALLY WORKS if you follow the steps described. Credit Medic DOES NOT do the work for you, but it DOES give you COMPLETE detailed instructions for building NEW credit. DON'T PROCRASTINATE! YOU DESERVE GOOD CREDIT! ORDER by June 10th and receive 50% off the regular price of $39.95. NOW ONLY $19.95 if your order is postmarked by July 10, 1998! Please print and fill out the following order form: ---------------------------------------------------------------------------- ATTN: Please type or print legibly to ensure proper delivery. Name______________________________________________________ E-mail Address (Required for E-Mail Delivery--U.S. Postal Delivery $5.95 extra) __________________________________________________________ Address __________________________________________________________ __________________________________________________________ __________________________________________________________ Phone #______________________ PLEASE CHECK ONE: _____ E-Mail Delivery _____ U.S. Mail $_19.95_ CREDIT MEDIC SECRETS (If postmarked by 7/10/98) $_______ Sales Tax (CA residents add 8.25%) $_FREE_ E-Mail Delivery (you must include an e-mail address which accepts large attachments) $__5.95_ Postal Delivery (Only add this amount if you want Credit Medic delivered by U.S. Mail) $_______ Order Total PAYMENT BY (US FUNDS only!): ___ Personal/Business Check ___ Money Order ___ Cashier's Check PREFERRED FORMAT (Please check one or more of the following): ___ ASCII ___ Microsoft Word ___ Zipped *If none of these three formats are acceptable, please order for delivery by U.S. Mail. You must include the additional $5.95 shipping & handling fee. The complete kit will be mailed in printed form. **If you're ordering from outside the USA, only a Money Order in US Dollars will be accepted. No postal delivery is available outside the USA, so you must include your E-Mail address accurately and legibly. If you do not currently have an E-Mail address, please get permission to use a friend's. -------------------------------------------------------------------------------------- Please make payable to -> BWZ Publications and send to: Credit Medic 21755 Ventura Blvd. Suite 455 Woodland Hills, CA 91367 USA

1 0

New Web Site
by hihe57＠texas.net 17 Dec '03

17 Dec '03

Cherry Pit Check Out My Free Adult Site with Lots of Pictures http://209.215.147.9/

1 0

tell me about digi cash if you know about it
by Ivestheis＠aol.com 17 Dec '03

17 Dec '03

Thanks here is my phone 502 961 0332 Name Ives Aidan Sandol

1 0

Just clicked on http://www.jya.com/crypto.htm
by bill payne 17 Dec '03

17 Dec '03

Sunday 6/28/98 7:12 PM John Young Just looked at http://www.jya.com/crypto.htm usa062698.htm Payne v. NSA: US on Classified NSA Declaration June 27, 1998 usa062298.htm Payne v. NSA: US Motion on FOIA for NSA Algos June 27, 1998 See you got the Saturday fax. Dinner is ready, said Patty. Glad you enjoyed the hat I sent you ... FLASH Patty just called me to dinner. Patty yelled J Orlin Grabbe! J ORLIN GRABBE appeared on 60 Minutes. http://www.aci.net/kalliste/ Leslie Stall was critital. Watched remainder of 60 minutes. For the record, Patty is my SAME wife since 1962, Implementing Basics : How Basics Work by William H. and Patricia Payne http://www.amazon.com/exec/obidos/subst/home/home.html/002-8309979-0236834 Patty and I met John Gilmore http://www.cygnus.com/~gnu/ and his girl friend Cindy for dinner in about October. It took about 15 minutes for Patty and I to discover if Gilmore and his girl friend were of THE SAME SPECIES. I am a TOTAL CONSERVATIVE. I FINALLY saw J Orlin Grabbe on 60 Minutes tonight. http://www.aci.net/kalliste/speccoll.htm http://www.aci.net/kalliste/nukearse.htm http://www.aci.net/kalliste/sandcryp.htm Looks like he may be from a different spicies too. But from our minds, Gilmore, Grabbe, and LOTS OF YOU think the same thoughts. And likely John Young too. Good ones. No evil. I need to collect my thoughts after seeing 60 minutes tonight. Best bill

1 0

Internet Success Toolbox
by amainfo＠amazonmall.com 17 Dec '03

17 Dec '03

We do not wish to send e-mail to anyone that does not want to receive it. To be removed from this list: Send an e-mail to: amainfo(a)amazonmall.com and type "remove" in the "Subject Line" You will be promptly removed from our database. ................................................................ ..... "THE INTERNET SUCCESS TOOLBOX" The Most Complete Marketing Software Package Available Anywhere! This is what you will receive on CD-ROM: 1. Submission Spider Program (Optional - value $99.90) The NEW and IMPROVED Strut Your Stuff Submission Spider Program! Now automatically submitting to 500 Search Engines and Directories! We believe you'll find this product to be a vast improvement over the Older Spider program The Strut Your Stuff Search Engine Submission Software will automatically submit your site to 500 search engines, directories and link sites. The software is extremely easy to use. Register and Submit your web site to ALL major internet search engines and directories in less than 45 minutes! Increase your web site's visibility to webcrawlers, spiders, indexers and worms. Boost and track your web site's search engine ranking. 2. Stealth Mass Mailer ($399.00 value) - This unique, first of it's kind - software that allows you to easily send 250,000 e-mail messages an hour. Simply enough by making a single connection to the Internet using a standard modem, and connecting to either 20 different mail servers, or a single mail server 20 times. This, easy to use, software is designed for the basic computer user to understand. It's as easy as imputing the mail server, selecting the list of e-mail recipients to send to, inserting your e-mail address, adding your subject line, selecting your sales letter, and pressing send. 3. E-Mail Pro Extractor ($350.00 value) - This one of a kind software program is designed to manage and clean up any list of e-mail addresses. It will purge duplicates, manage removes and delete undeliverables. It will also separate and categorize your list of e-mail addresses by domain names. The E-mail Pro Version 4.0 Bulk E-mail Loader also imports simple text files that anyone can download from AOL, CompuServe, the Internet, etc...These text files contain classified ads, forum messages, or data from the member directory. Each of these files are filled with e-mail addresses. 4. Check Deposit System ($125.00 value) - Check Deposit System Version 2.1 is a state of the art, revolutionary software that allows you to easily and legally process checks by fax, phone or Internet. The customer's signature on the check is not necessary. 5. 16 Million E-mail Addresses ($149.00 value) - We took a total of over 92 million e-mail addresses from many of the touted CD's that are out there (bought them all - some were $300+)! We added the millions we had in storage to those. When we combined them all, we had in excess of 100+ million addresses in one huge file. We then ran a super "sort/de-dupe" program against this huge list. It cut the file down to less than 25 million!! We then ran a program that contained 150+ keywords to remove addresses with vulgarity, profanity, sex-related names, postmaster, webmaster, flamer, abuse, spam, etc...Also we eliminated all .edu, .mil., org., gov., etc... After that list was run against the remaining list, it reduced it down to near 16 million addresses! So, you see, our list will save people hundreds of dollars buying all others that are out there on CD. Using ours will be like using the 100+ million that we started with, but a lot less money and a lot less time! If you order "The Internet Success Toolbox" for $495.00 within the next 7 days, you'll also receive the following awesome bonuses absolutely FREE. A value of over $400.00 !!! ----------------------------------------------------------------- - To order: Fill out, copy and fax this order form to: (425)379-9722 or send Check to: SYS 11014 19th Ave SE Suite 305 Everett, WA 98208 Questions: (425)338-9491 We accept Visa, MasterCard or Check. ____ YES! I'm bursting with anticipation! Please send me "The Internet Success Toolbox" so I can start advertising my business to "millions of people" - absolutely FREE! I'm anxious to see how others are creating immediate "cash-flow explosions", and eliminating most of their advertising and marketing costs - and how I can do the same! Enclosed is $495. ____ YES AGAIN! Because I'm responding within 7 days, I will receive 5 BONUSES with a total value of $488.90 - absolutely FREE! They include: BONUS #1 ($39 value): "Search Engine Secrets" - Discover the Most Powerful and Proven Strategies that really work to place you at the Top of the Search Engines! BONUS #2 ($195 value): A FREE one year subcription to "The Internet Success Toolbox Newsletter" - my ticket to marketing and internet cash flow heaven! BONUS #3 ($39.95 value): Your Hotline List of "7000 Free Classified Ad Sites on the Internet" - a virtual GOLDMINE! BONUS #4 ($39.95 value): A FREE Special Report titled "How to Put Your Business on Automatic Pilot and Turn Your Marketing System Into a Predictable, Turnkey, Cash-Flow Machine That Keeps on Working - Even When You Don't!!" BONUS #5 ($175 value): Order within 7 days and I'll also throw in a FREE VACATION CERTIFICATE good for 3 days and 2 nights of FREE lodging at one of over 30 "premier" resorts. Some vacation spots you can choose from include: Hawaii; Orlando, FL; Las Vegas; Atlantic City; Palm Springs; Aruba - in the South Carribean; Cancun, Mexico; and many, many more! Hey, when you start making a TON of money, you'll wanna do some celebrating, won't you? So start packing those bags! That's it. A lot more than you bargained for isn't it? When you total all the goodies up, you're looking as a total value of $488.90! All yours - absolutely FREE - with your purchase of our amazing package "The Internet Success Toolbox " for only $495.00. And I'll even pay for shipping your package. Anyway, I have a copy right here on my desk reserved for you. All I need is your go ahead and I'll rush it out to you along with your 5 FREE BONUSES. Name _____________________________________________________ Street Address ____________________________________________ City)__________________State_______Zip_____________ Phone # (_____) ___________________________ Fax # (______) _____________________ E-mail Address _________________________ ___Visa ___MasterCard___Check ___Include the Submission Spider $495.00 ___Don't include the Submission Spider $395.00 Total:$________ Account Number_____________________ Expiration Date____________________ I understand that all sales are final. ____________________________________ Signature Fax order to: (425)379-9722 To order by check: *********************************************************** Tape or paste your check here Fax it to us at: You do not need to send a hard copy of your check. The fax is all we need. Make check payable to: S.Y.S. (We are able to perform this service using our Check Deposit System Software) ************************************************************ * Orders by Credit Card are shipped IMMEDIATELY. Fax completed order form to: * Orders by personal, business or credit card CHECK are shipped in 7-10 business days.

1 0

Cheapest Long Distance...As Low As 4.9cpm!!
by operator＠theshopcenter.com 17 Dec '03

17 Dec '03

LOWEST LONG DISTANCE RATES...AS LOW AS 4.9CPM!!! Join This Incredible Wholesale Card Club for ONLY $35.00 And You Not Only Get A 96min. Phonecard, But You Also Can Purchase Them At Incredibly Low Rates!! This Membership Also Puts You In Our Mega Money 2x3 Power Matrix.... And You Never Have To Sponsor Anyone Ever And Your Matrix Will Fill And You Get Paid.. Daily Payout!! Only 14 Sales = A Cycle!! Unlimited Cycles Daily!! Absolutly No Wash!! Earn $200.00, $600.00, OR $1800.00 per cycle or ALL THREE UNLIMITED TIMES DAILY!! AND Get The Lowest Phone Cards Rates In History...and Incredible International Rates Too!! CALL 1-800-600-0343, EXT.2700 FOR BRIEF OVERVIEW AND ANOTHER NUMBER TO SIGN UP RIGHT NOW OVER THE PHONE AND LEAVE ME YOUR CONTACT INFORMATION AND I WILL CALL YOU BACK FIRST!! BE SURE TO WRITE DOWN THIS ID#3299 as you can not sign up without it. You may also reply back to <mailto:phonecards@theshopcenter.com> with "LOWEST Long Distance" in the subject and you will automatically receive some more information. If you would like to be removed from any further mailings, then please <mailto:remove@theshopcenter.com.>

1 0

(no subject) Re: Premail (and Replay)
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Anonymous #49812 wrote: > On 28 Jun 1998, Secret Squirrel wrote: > > > Also, remailer(a)replay.com appears to have been deleted. The 'remailer' > > user is unknown. > > That's correct. I don't know what happened. Oh, really?

1 0