December 2003 - cypherpunks-legacy

Re: Video & cryptography... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: Adam Shostack <adam(a)homeport.org> > Subject: Re: Video & cryptography... (fwd) > Date: Mon, 26 Jan 1998 17:02:53 -0500 (EST) > | Doesn't this same sort of issue arise from any other digital signature > | process then? There should be nothing fundamentaly different between the > | characteristics of a video camera signing a frame than a person signing > | email. > > It arises in a different context; with a signature on paper, … [View More]

1 0

Re: Compaq / DEC buyout
by Tim May 17 Dec '03

17 Dec '03

At 3:46 PM -0800 1/26/98, David Miller wrote: >Jim, I'm forwarding this to the list: > >Jim Choate wrote: >I think so. Tim had mentioned that last he heard the Intel/DEC deal was dead. >Perhaps this is what he was talking about. The thing is, how much about the This grossly distorts what I have said. I don't have time to sift through my posts on Intel and DEC, but I can't believe I said anything so simplistic as "the Intel/DEC deal is dead." (Or even "was dead," if we want to … [View More]

1 0

Fear, loathing, and Bill Gates (fwd)
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Mon, 26 Jan 1998 14:14:51 -0800 (PST) From: Declan McCullagh <declan(a)well.com> To: politech(a)vorlon.mit.edu Subject: FC: Fear, loathing, and Bill Gates ******** Date: Wed, 21 Jan 1998 16:42:08 -0500 From: Don Bx <dboudreaux(a)fee.org> To: declan(a)well.com Subject: Re: More on Don Boudreaux "Calm Down" letter on Microsoft Declan, I had a thought that I must share. In reflecting upon the genuine hatred and fear that people … [View More]increasingly have for Bill Gates and Microsoft, it occurred to me that this hatred and fear have much in common with the hatred and fear stirred up a decade or so ago against Japan. In both cases, people proved their affection for Japanese goods by buying them, but they also grew leary of Japan after being barraged on the air-waves by idiot pundits who insinuated that Japan had some sort of recipe for taking over the American economy. Economic serfdom was near, avoidable only by trade restraints. And, of course, behind this fear-mongering were U.S. rent-seeking firms that sought to be relieved of having to compete as vigorously as otherwise. Needless to say, Japan was never a threat to "take over" the American economy, or to harm it in any way. The same is true of Microsoft (as long as it doesn't rely upon government favors). The fear and hatred in both cases -- against Japan in the 1980s and against MS today -- is illogical and uninformed. But it is, for MS, increasingly real. Don ********* Date: Thu, 22 Jan 1998 23:02:07 -0600 (CST) From: Mac Norton <mnorton(a)cavern.uark.edu> To: Declan McCullagh <declan(a)well.com> Cc: politech(a)vorlon.mit.edu Subject: Re: FC: More on Don Boudreaux "Calm Down" letter on Microsoft Let me see if i get this right:DOJ got guns , MS don't got guns, therefore I'm for MS. Is that it? Gee thee's some heavy intellectual discourse going on here, you betcha. MacN ********* Date: Wed, 21 Jan 1998 16:23:25 -0500 (EST) From: Donald Weightman <dweightman(a)Radix.Net> To: declan(a)well.com Subject: Re: FC: More on Don Boudreaux "Calm Down" letter on Microsoft DB doesn't seem to know much about antitrust -- it *does* scrutinize strongarm tactics when wielded by someone with market power, as MSFT almost certainly has. The claim about harm to the economy is pretty far ranging for someone who seems to have no expertise in the field. As an example of where antitrust has done good, I'd point to the gov't-mandated restucturing of the electric utility industry in the '30's (actually administered by the SEC), which can be argued to have laid the groundwork for the huge productivity gains that industry made for the next three decades. Cheers Don ******** Date: Mon, 26 Jan 1998 16:59:05 EST From: JEisenach(a)aol.com To: declan(a)well.com Subject: Re: FC: "Calm down!" -- Don Boudreaux letter to NYT on Microsoft Now that Microsoft has given up its inexplicable defense of an indefensible licensing arrangement, it may be a lot easier for everyone involved to "calm down." Calming down should not, however, mean giving Microsoft carte blanche to use its undeniable market power to shape the future of the market for software. What it should mean is devising a workable policy for applying sound antitrust principles to the software business -- and that's a very big task. Many of Microsoft's arguments have merit. It is true, for example, that rapid innovation and low (physical) capital requirements for entry make its monopoly more vulnerable than it otherwise might be. However, other arguments Microsoft has offered -- for example, falling prices -- are pretty lame. Falling relative to WHAT? is the relevant question (look at industrial prices during the second industrial revolution -- which went through long periods of decline despite the emergence of the steel, oil, railroad, etc. trusts). As for Microsoft's "opponents," their case has a fair amount of appeal -- and it's not just visceral. Microsoft clearly has market power in the market for operating systems. Operating systems are required for personal computers to operate. Microsoft has exercised its market power pretty aggressively. And, it shows every intention of continuing to exercise its market power to delay innovations that threaten it and to extend its dominant position into future generations of technology. I don't think many people dispute anything in the previous paragraph. What people ARE concerned about, of course, is the potential for an overly intrusive and regulatory approach by government that could slow down innovation -- a policy built around the idea of protecting competitors rather than protecting competition. I frankly haven't seen Joel Klein say anything that suggests they are headed in this direction -- but I sure agree that "eternal vigilance is the price of liberty." Now that we all have a chance to "calm down," my hope is that a rational debate can emerge on the question of how the goals of antitrust law (i.e. a market free of impediments to competition, regardless of their source) can best be pursued in the software/computing business. And, I'm not prepared to concede that letting Microsoft exercise its market power without any restraints at all is the best we can do, even in this very imperfect world. To close with a plug: on February 5, The Progress & Freedom Foundation will be hosting a conference at the Four Seasons Hotel in DC on this very topic. Participants include a virtual "who's who" of the market-based "Chicago school" of antitrust economists and lawyers -- Nick Economides, Benjamin Klein, James C. Miller, Tim Muris, Dan Oliver, Bob Tollison, Robert Willig, etc. It's open to the public and reasonably priced. For information, see WWW.pff.org. ******** Date: Mon, 26 Jan 1998 09:02:15 -0500 From: Don Bx <dboudreaux(a)fee.org> To: declan(a)well.com My comment about the DOJ having guns and Microsoft not has drawn fire. Fair enough. But I defend my point, which is this: Microsoft gets customers only by offering them deals that they are free to accept or reject. No coercion is involved. If you don't buy MS products, no one threatens you with imprisonment or violence. In contrast, when government regulates commerce (beyond the enforcement of contracts and traditional tort and criminal law) it dictates the terms of exchanges -- ultimately at the point of a gun -- that we cannot be certain are mutually advantageous. When A and B exchange voluntarily with each other, we can be sure that both A and B each believes himself to be better off as a consequence of the exchange. When a third party wielding the threat of coercive power prevents these voluntary exchanges -- or imposes contract terms that would not otherwise be part of these exchanges -- we cannot be certain that the exchanges yield as much mutual benefit as when these exchanges are voluntary. Government possesses the monopoly authority to initiate coercion. This is an awesome power that in a civil and free society should be used sparingly. It should not be used to prevent firms from engaging in peaceful and voluntary exchanges with adults. Don Boudreaux ******* -------------------------------------------------------------------------- POLITECH -- the moderated mailing list of politics and technology To subscribe: send a message to majordomo(a)vorlon.mit.edu with this text: subscribe politech More information is at http://www.well.com/~declan/politech/ -------------------------------------------------------------------------- [View Less]

1 0

Reba Performs What If Tonight!
by Mail 17 Dec '03

17 Dec '03

Reba will perform "What If" tonight on the 25th American Music Awards! Reba is nominated for Favorite Female Country Artist! American Music Awards ABC -TV 8:00-11:00pm EST (Please check your local listings for times) RebaNews Copyright 1998 Starstruck Entertainment, All rights reserved.

1 0

Re: Compaq / DEC buyout (fwd)
by Tim May 17 Dec '03

17 Dec '03

At 1:44 PM -0800 1/26/98, BMM wrote: >The "Screamer 533" is currently shipping with a 533MHz Alpha. It is >reviewed in this month's "Linux Journal". > > >On Mon, 26 Jan 1998, Jim Choate wrote: > >> Unless my info is seriously off DEC is already shipping 500MHz Alpha's and >> has 1GHz chips in test. DEC historicaly has been way ahead of Intel (say a This is simply untrue, that DEC historically has been way ahead of Intel. The Alpha is a different type of chip. … [View More]

1 0

Re: Compaq / DEC buyout (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 26 Jan 1998 14:51:45 -0800 > From: Tim May <tcmay(a)got.net> > Subject: Re: Compaq / DEC buyout (fwd) > This is simply untrue, that DEC historically has been way ahead of Intel. I'm not going to get in a pissing contest with Tim, since he obviously has some connection to Intel... > The Alpha is a different type of chip. Anyone who has analyzed the past few > years, the past decade, and the past couple of decades would have a hard > … [View More]time making the case that DEC has been ahead of Intel in the overall > combination of design and manufacturing. The bottem line is they are both Von Neumann architectures and can be reduced to a single bit Turing machine. As a result they *most* certainly can be compaired. I have owned Intel and DEC machines since the late 70's. I started out on a DEC PDP 8e in 1976 a friend game me when I was in high school and bought a S-100 Intel 8080 machine about a year later. Since that time I have owned 80186, 80286, 80836, 80486, and Pentium machines as well as PDP 11/03, PDP 11/23, PDP 11/34, & MicroVax II. Given a comparison by date the DEC machines have had a higher clock frequency and generaly been a generation or so ahead of Intel in the capabilities of the hardware. Further, the operating system architectures available on the hardware, until the last 6-8 years anyway, also went to DEC when it came to scalability and usability. The fact that NT was available on both the Intel and Alpha architectures pretty much at the same time makes any further comparison moot except for market share (which I alluded to the main forces in an earlier post). Unix was available on the DEC architectures LONG (what, 20 years?) before it every even thought about being put on a Intel cpu. > As you should know, Intel will be making the Alpha chip, as its > manufacturing capabilities are _overall_ in advance of DEC's. (Beware of Then why isn't the Intel cranking at 500MHz now like the Alpha? Why is every market comparison for the chips shows the DEC staying ahead of the Intel in base clock frequency (I won't even get into architecture efficiencies) for the next 5-8 years? > capabilities...Intel has its own R&D fabs, currently developing 0.13 micron > capabilities...DEC will not be participating in this move to sub-0.20 > micron areas.) I bet now that Compaq has given them the sorts of resources they had to go head to head with IBM from the late 60's to the early 80's that could change pretty quickly, even considering the multi-billion dollar start-up costs of modern fabs. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________| [View Less]

1 0

feedME account
by members＠feedme.org 17 Dec '03

17 Dec '03

----------------------------------------------------------- feedME - the world's easiest newsreader http://www.feedME.org ----------------------------------------------------------- Your Username is: cypherpunks Your Password is: kimkdqof If you have any problems, queries or suggestions please email: admin(a)feedme.org You should change your password as soon as possible (if you haven't already done so), the address for … [View More]

2 1

"Privacy on the Line"
by Eric Blossom 17 Dec '03

17 Dec '03

I'm about half way through Diffie and Landau's new book, Privacy on the Line: The Politics of Wiretapping and Encryption and have found it quite interesting and entertaining. Contents 1. Introduction 2. Cryptography 3. Cryptography and Public Policy 4. National Security 5. Law Enforcement 6. Privacy: Protections and Threats 7. Wiretapping 8. Communications: The Current Scene 9: Cryptography: The Current Scene 10: Conclusion It's 342 pages including a great section of … [View More]

1 0

Processor Architecture Analysis - Reference
by Jim Choate 17 Dec '03

17 Dec '03

Hi, If you're interested in the basic technology used in many of the current and proposed processor architectures I strongly recommend the following: Advanced Computer Architectures: A design space approach S. Sima, T. Fountain, P. Kacsuk ISBN 0-201-42291-3 ~$50.00 It was published in 1997 and covers various analysis of many of todays CPU's (unfortunately it doesn't do the Alpha) and discusses means to get realistic comparisons between them. It also covers some of the white paper … [View More]

1 0

Signing video...
by Jim Choate 17 Dec '03

17 Dec '03

Hi, I was exchangin idea with a couple of members off-list and an idea came to me about how to time stamp the frames. It would require a minor modification to the WWV transmission but it wouldn't be much. Have the WWV transmitters sign each 'tick' of the clock and have a WWV receiver in the vcr. This would allow time stamping the frame with a signed reference that could be checked. ____________________________________________________________________ | … [View More]

1 0

RE: Update on New Zealand crypto policy
by Brian B. Riley 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On 1/26/98 3:30 PM, Ernest Hua (Hua(a)teralogic-inc.com) passed this wisdom: >Need help: Can anyone get to this URL? > >Ern > [snip] > > http://www.cs.auckland.ac.nz/~pgut001/policy/ > I got to it with no problems on first try from East Coast USA. -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQEVAwUBNM0glz7r4fUXwraZAQFRGQf9F4R1EhPLwsSP84l5QcKk6KMhU341ox36 PincU6VSpYR8bq7CMSMh7G5f/H+… [View More]

1 0

RE: Announcement: RPK InvisiMail released on 12 Jan, 1998
by Jack Oswald 17 Dec '03

17 Dec '03

Bill - The technology that we export as part of RPK InvisiMail, is world-class strong crypto. Key size options are 607 bits and 1279. The math behind the system is based on the same as that of D-H. There is no snake oil. There was no intentional or unintentional attempt to mislead any government authority. We also did not request an export license, because there is no need to do so in New Zealand as long as the export is by means of the Internet. Peter G. knows this as well. The … [View More]story may be different for physical export on disk, disc or tape, although we cannot concur with Peter's personal experience. Our experience is that we get pretty good treatment from the NZ authorities. We also may use a different approach. I have often heard that you can often get a better response when using honey than vinegar. Therein may explain differences in our respective experiences. I have personally met with the Minister of Trade for New Zealand. His views and those of his staff seemed to be acceptable to us and have not imposed any undue restrictions of our business or our ability to operate. Jack Oswald President and CEO RPK Fast Public Key Encryption RPK New Zealand Ltd. 4750 Capitola Road Capitola, CA 95010 joswald(a)rpkusa.com www.rpk.co.nz www.InvisiMail.com +1 408.479.7874 phone +1 408.479.1409 fax +1 800.475.4509 pager -----Original Message----- From: Bill Stewart [SMTP:bill.stewart@pobox.com] Sent: Sunday, January 25, 1998 5:44 PM To: RPK New Zealand Ltd; cypherpunks(a)cyberpass.net Cc: scataldi(a)earthlink.net Subject: Re: Announcement: RPK InvisiMail released on 12 Jan, 1998 I was amused to receive two mail messages back-to-back, one from Peter Gutmann talking about New Zealand having one of the strictest formal export controls in the world, and one from RPK New Zealand talking about how their encryption product is not export-controlled because it's from NZ, not the US, and how their RPK Fast Public Key Encryptonite(tm) Engine is the strongest crypto in the world. Either they haven't bothered asking for export permission, or they asked in such a way that the export bureaucrats didn't notice it was crypto and regulated by their crypto export preventers, or their crypto somehow falls through the cracks, e.g. by using an algorithm with public keys shorter than 512 bits (works for ECC, not RSA) and private keys shorter than 40 bits (or 41 on a good day), or perhaps passes the "snake oil test" for export permission. I suppose it's possible that the NZ Export Bureaucrats have lightened up since Peter's last dealings with them, but it's not likely. >--------------- The mail, referencing www.invisimail.com >RPK New Zealand Ltd. in a joint venture with Virtually Online Ltd. >has released RPK InvisiMail, a standards-based e-mail security >application for use with Internet mail software (SMTP/POP3). >The product offers the strongest encryption available anywhere in >the world. Since it was built outside the United States, >it is also available all over the world with strong encryption. >RPK InvisiMail is also the easiest product of its type >to setup and use which makes it quite unique. ========= From Peter Gutmann's web page This policy has resulted in New Zealand enjoying the dubious distinction of having the strictest export controls on earth, with everything ranging from crypto hardware down to software, library books, computer magazines, and journals being restricted from export. It's not even possible for a university to publish academic research without prior permission from a government agency, and the requirements for obtaining this permission are structured to ensure that they can never be fulfilled. You can find the information on: http://www.cs.auckland.ac.nz/~pgut001/policy/ ============================== Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639 [View Less]

1 0

RE: Announcement: RPK InvisiMail released on 12 Jan, 1998
by John Young 17 Dec '03

17 Dec '03

On "using honey not vinegar" rationale of RPK InvisiMail for obtaining crypto export licenses: Applied Cryptography, Bruce Schneier, 2nd Edition, pp. 215-16 Algorithms for Export Algorithms for export out of the United States must be approved by the U.S. government (actually, by the NSA--see Section 25.1) It is widely believed that these export-approved algorithms can be broken by the NSA. Although no one has admitted this on the record, these are some of the things the NSA is rumored to … [View More]

1 0

U.S. crypto czar's travel records revealed
by Declan McCullagh 17 Dec '03

17 Dec '03

>From EPIC newsletter ======================================================================= [3] EPIC Obtains U.S. Crypto Czar's Travel Records ======================================================================= Following a year-long legal battle, EPIC has obtained over 500 pages of materials from the U.S. State Department on the international travels of David Aaron, the former U.S. Envoy for Cryptography. Aaron also served as U.S. Ambassador to the Organization for Economic … [View More]

1 0

Eureka! Tue Jan 27 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Tuesday's issue of Eureka! FRESHTEENS! Is there no end to it? Yet again we have succeeded in obtai- ning a FREE one week trial, for all Eureka! subscribers at another of the net's finest websites. Freshteens offers over 200 video feeds, hot live, sex shows, hard XXX movies, hot XXX stories, exclusive Texas Teens, and a comprehensive gay area too. You need a credit card to verify you are an adult, but will not be charged for your FREE membership. Excellent! Freshteens ...........… [View More]

1 0

Former US spy ship now a tourist attraction
by William Knowles 17 Dec '03

17 Dec '03

TOKYO (Reuters) [1.26.98] North Korea has turned the Pueblo, a U.S. navy intelligence ship captured 30 years ago, into a tourist attraction to attract badly needed foreign exchange, a Japanese scholar said Monday. Shinobu Oe, professor emeritus of contemporary history at Ibaraki University, told Reuters he visited the North Korean port of Wonsan, where the vessel is docked, on October 29. "As far as I know the North Koreans have been showing the ship to Japanese tourists since August,"… [View More]

1 0

Re: Latest Clinton Dodge?
by Gary Harland 17 Dec '03

17 Dec '03

>Clinton said this morning: > >>>> >I want you to listen to me. I'm >going to say this again. I did not have sexual relations with that >woman, Miss Lewinsky. I never told anybody to lie, not a single time >-- never. These allegations are false. ><<<< > >The question then becomes, of course, what does "sexual relations" >mean? > >Is it oral sex? > >-Declan It seems to be some sort of 'southern thing'. Of course a … [View More]good Catholic boy from Detroit would never swallow (opps!) a sleezy end-run around the moral goal-posts of life like that. I can think of no better authority to invoke than Kinky Friedman, the immortal bard of Kerrville, Texas and notorious ring-leader of the band known as "The Texas Jewboys" ( famous for such country & western hits as "They Don't Make Jews Like Jesus Anymore", "I'm Proud To Be An Asshole From El Paso", "The Ballad of Charles Whitman", and many others - all available on his recently released CD). Hit it Kinky!... Waitret, Please, Waitret (Kinky Friedman, Major Boles, Roscoe West) Well, I pulled into Dallat on a cold December day Bought coffee and a doughnut at the Greasy Spoon Cafe, Spied me a pretty young waitret standing by her tray, But she couldnt believe her sweet young ears when the waitret heard me say: Oh, waitret, please, waitret, come sit down on my fate, Eatin aint cheatin, Lord it aint no disgrace. Oh, bring me a Lone Star, make it, make it a case Waitret, please, waitret, come sit down on my fate. Well, I walked up to the jukebox feeling kind of mean, The waitret said, Hey, stupid, thats a, thats a cigarette machine! Well, look-a here, young waitret, would you care to make a bet, And if that there aint a jukebox, you can smoke my cigarette! Oh, waitret, please, waitret, come sit down on my fate, Eatin aint cheatin, Lord it aint no disgrace. Oh, bring me a Lone Star, make it, make it a case And waitret, please, waitret, come sit down on my fate. Youre the prettiest thing in Dallat, is Dallat your home ? No, I come all the way from Houton and I feel so all alone. I used to live in Autin then I moved up to big D In hopes to get my big break on national TV. Oh, waitret, please, waitret, come sit down on my fate, Eatin aint cheatin, Lord it aint no disgrace. Oh, bring me a Lone Star, make it, make it a case Waitret, waitret, waitret, waitret, sit down on my fate. It's even funnier with the music of course. Kinky Friedman (http://www.kinkyfriedman.com) was kind of a 70's cult figure. He now writes mystery novels. According to Willie Nelson, ...the best whodunit writer to come along since Dashiell What's-his-name." As for Clinton, what can I say? What a pathetic, third-rate dickhead. Somebody flush the White House. It's starting to stink. ----------------------------------------------------------------- foggy(a)netisle.net lat:47d36'32" long:122d20'12" "Rather perish than hate and fear, and twice rather perish than make oneself hated and feared." -F. Nietzche- ----------------------------------------------------------------- [View Less]

1 0

Re: Signing video...
by Steve Schear 17 Dec '03

17 Dec '03

>Hi, > >I was exchangin idea with a couple of members off-list and an idea came to >me about how to time stamp the frames. It would require a minor modification >to the WWV transmission but it wouldn't be much. Have the WWV transmitters >sign each 'tick' of the clock and have a WWV receiver in the vcr. This would >allow time stamping the frame with a signed reference that could be checked. Although this could reduce the cost and power consumption in the camera how does … [View More]

1 0

Re: Executing Kaczynski
by Blanc 17 Dec '03

17 Dec '03

Vladimir Ze Cornflake inquired of TCM: >> Recall that a leading Cypherpunk was suspected >>for a while as being the Unabomber. > >whoa, are you being facetious here or what? would you care to elaborate >on that little tidbit? ................................................. It was TCM himself. (myself, I speculated it was Detweiler.) .. Blanc

2 1

Re: Signing video... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 26 Jan 1998 19:43:17 -0800 > From: Steve Schear <schear(a)lvdi.net> > Subject: Re: Signing video... > >I was exchangin idea with a couple of members off-list and an idea came to > >me about how to time stamp the frames. It would require a minor modification > >to the WWV transmission but it wouldn't be much. Have the WWV transmitters > >sign each 'tick' of the clock and have a WWV receiver in the vcr. This would > >… [View More]allow time stamping the frame with a signed reference that could be checked. > > Although this could reduce the cost and power consumption in the camera how > does this guarantee that the signature information wasn't inserted later. > With today's excellent digital postprocessing it could be very hard to > detect. The fact that it's hard is what makes it worth doing in some environments. The goal is to provide a reasonable doubt as to the validity of the picture on the tape. Don't know about cost and power consumption...but this is where I'm at on this issue now, by no means is it fully worked out: The actual signal on the tape can be mapped to a specific head mechanism using the same sorts of technology that is used to identify specific cell phones from the rf signature. So we can do an analysis of the signal and verify if a given camera striped the tape. Hysterisis, amplifier slew rates, power spectrum analysis, etc. The pattern of wow and flutter of any motor and drive mechanism is unique and can also be mapped to a specific mechanism. This wow and flutter creates regular and repeatable irregularities in the pattern on the tape. This allows us to match a drive mechanism to a specific program on a tape. Irregularities in the drive wheel will cause specific pattern in the way the stripes are laid down (ie wiggles in the same place each time that part of the wheel comes around). Irregularities in the syncronizing clocks in the tape mechanism can be traced to particular oscillators (usualy slew rate as a function of frequency stability). By signing the frames with a signed time reference we can verify which clock was used, though we can't verify that it wasn't recorded and played back at a later time. We can at least verify the tape wasn't stiped prior to the claimed time. For security applications this could be quite useful. So if we have a fully analog system there are several means to test the various parts of the systems to verify source veracity. We can also test the tape recording mechanism even on a digital or hybrid system. So let's look at hybrid systems where the video signal is source digital or is digitized in the camera (for special effects, etc.). If a frame isn't signed we don't trust it. So we have a camera with a ROM that has a signature. We could replace the code in the rom and keep the signature. If the owner doesn't replace the ROM prior to testing then we can easily verify the ROM and it's signature don't match. We don't even need the signature to do this, simple comparison between the rom that should be there versus the one that is present is enough. If they do replace the ROM then we have a frame that is signed but potentialy modified prior to the d/a conversion process. The question is can we in fact identify such non-linear editing? If the answer is no then there is a clear reason to suspect the validity of any video source that went through any sort of digital processing. I suspect the answer is no since this question is equivalent to signing a document that was modified prior to the signature being placed on it. The signature process only signs what was fed into the algorithm and can't detect changes to the document prior to the signing. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________| [View Less]

1 0

Organic Chemistry Lab Safety
by Jim Choate 17 Dec '03

17 Dec '03

Hi, The question was asked why mixing acids and bases are hazardous. Please note number 5 below. When an acid and base are mixed you get water and a salt. When water is added to acid (ie pouring a base into an acid) the heat of reaction can cause the water to get quite hot and cause the chemicals to splatter upon you. The idea is you want the acid to disolve in the water and not the other way around. Goggles, bibs, and all other reasonable safety precautions should always be used. Forwarded … [View More]message: > X-within-URL: http://www.ems.uwplatt.edu/sci/chem/saf/safetyor.htm > ORGANIC CHEMISTRY LABORATORY SAFETY RULES > > * 1. Maintain a business-like attitude. Be prepared! Do not attempt > unauthorized experiments. > * 2. Wear safety goggles (eye protection) at all times when in the > laboratory. This is a departmental and state regulation. Do not > eat or drink in the lab or bring food or drink into the lab. > * 3. Know the location and use of the nearest fire extinguisher, > nearest First Aid kit, nearest eye wash station, nearest safety > shower, and nearest exit designated for evacuation. Know the > location of the Material Safety Data Sheets (MSDS) and know that > you have access to them. Know the NFPA (National Fire Protection > Association) Hazardous Material Classification Codes. > * 4. Report any accident, even minor injuries, to the instructor at > once. > * 5. When diluting acids, pour acid slowly and carefully into the > water with constant stirring. Use Pyrex and Kimax glassware and > NEVER add water to acid. Rinse acid or base Penny-Head stoppered > bottles under the faucet after each use. > * > 6. In the event that acid, base, or any corrosive liquid is spilled on > your person: > a) Flush immediately with running water at the sink. Call for > instructor. > b) Rinse area with 5% sodium bicarbonate solution. > c) Wash area with soap and water, blot dry with clean towel or > handkerchief. > d) Follow direction of lab supervisor. Check MSDS if you have > questions. > * 7. In case of an organic chemical spilled on your person, flush > with water, wash with soap, rinse with water, rinse with ethyl > alcohol, wash with soap, and rinse with water. Pat dry. Wash hands > before and after visiting toilet. Check MSDS if you have > questions. > * 8. Never taste chemicals or solutions. Minimize the inhalation of > organic vapors by using the smallest amounts of materials and > utilizing the hood as much as possible. Check MSDS if you have > questions. > * 9. Many organic compounds are either carcinogenic, mutagenic, > and/or teratogenic. Generally avoid aromatic amines and nitroso > compounds. Review the document on Chemical Exposure in Organic > Chemistry. Check the MSDS if you are not adequately aware of the > compound's properties. > * 10. In case of cuts or punctures, flush with running water, and > call for instructor or see stock room attendant on third floor for > First Aid. All punctures should be seen by the university nurse or > a physician! > * 11. Dispose of all wastes properly. Read labels on bottles! Keep > bench and floor clean. > * 12. Before leaving the laboratory, be sure that the water, steam, > heaters, and gas cocks are shut off. > > | Chemistry Home | UW-Madison Safety | sundin(a)uwplatt.edu | > > > Document Last Modified: August 26, 1997 > Copyright © 1998, University of Wisconsin - Platteville > ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________| [View Less]

1 0

Computer makers speed up Internet [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > COMPUTER, PHONE COMPANIES SEEK TO SPEED INTERNET > > graphic January 26, 1998 > Web posted at: 9:46 p.m. EST (0246 GMT) > > WASHINGTON (CNN) -- Top computer firms Compaq, Intel and Microsoft > and leading telephone and networking companies Monday announced an > alliance to promote high-speed Internet links over ordinary phone > lines. > > … [View More]

1 0

Intel drops prices [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Company cuts price tag of older models > by up to 51 percent > > January 26, 1998: 9:14 p.m. ET > > > Intel > More related sites... SAN FRANCISCO (Reuters) - Semiconductor giant > Intel Corp. Monday unveiled its fastest version of the Pentium II > processor for desktop computers, servers and workstations and cut > prices on older chips by up to 51 percent. > [INLINE] Several major PC makers … [View More]

1 0

RE: Announcement: RPK InvisiMail released on 12 Jan, 1998
by Bill Stewart 17 Dec '03

17 Dec '03

Thanks for an interesting perspective on working with NZ's export bureaucrats. At 04:59 PM 1/26/98 -0800, Jack Oswald <joswald(a)rpkusa.com> wrote: >Bill - The technology that we export as part of RPK InvisiMail, is >world-class strong crypto. Key size options are 607 bits and 1279. The >math behind the system is based on the same as that of D-H. There is no >snake oil. There was no intentional or unintentional attempt to mislead >any government authority. We … [View More]

1 0

Re: Response to ticket 012398-6918-403
by kozmo killah 17 Dec '03

17 Dec '03

1 0

Just a Reminder...
by mall＠daltek.net 17 Dec '03

17 Dec '03

* * * * You have been carefully selected to receive the following as a person obviously interested in this subject based upon your previous internet postings, or visits to one of our affiliate web sites. If you have received this message in error, please accept our apology as a responsible e-mailer, and reply with the word REMOVE in the subject line. You will be automatically excluded from future e-mailings. Thank you for your consideration and help in making the Internet spam-free. * * * * … [View More] At your request, we recently sent you our International Shopping Mall Complex banner rates for your business. The following is an update on categories available, and several other new options available to fit your expansion plans and budget. Please take a look and see what would work best for you. We do have a 25% off special introductory offer on our Mini- Mirror Store Program, details below. PLUS HERE IS SOME EXCITING NEWS..a cutting edge option to be offered shortly to our clients. Right now, we are working on adding a program to the Malls that will enable ONLINE PURCHASES TO BE CHARGED TO THE CUSTOMERS' TELEPHONE BILL. This presents unlimited possibilities for impulse buying, no forms, just click a button... Right now, it can be used for items like downloading software, and electronic reports and books...But Here is the Big News..it will soon be able to work for hard goods!!..Just think about the opportunities here. We will be sending out a full report on this in the next week or two in our Client Newsletter. Another option available is an item that we can add to your mall stores which has proven very successful in increasing sales for any business. We would be glad to send you more information on this, just check box below. This has worked well for wholesale, retail, manufacturing and is so simple, you will wonder why you haven't thought of it before! Established in 1994, our award-winning International Shopping Complex avgs 1.5 million hits a month in our four Mall locations with approx. 300 stores from 29 countries. As the Web gets more and more congested, you know that attracting qualified buyers to your site gets even more challenging! You will get tremendous exposure in four shopping locations. You could not get a more targeted audience for your products. These visitors only come to the Malls to see the shops and are specifically looking in the listed categories for retail, wholesale/mfg or industrial offers. The advantages to having four store locations is huge. You will get four new URL's to post on all the search engines, and we also give you a site address where you can enter each url once only and it will automatically send it to 100 directories/search engines, giving you 400 new listings right off the bat, (no charge). A business that has four or five separate locations definitely establishes you as a serious business. This is the concept used by the offline shopping malls that spread from coast to coast - new brand names were established and became household words. What some of our storeowners have accomplished: One storeowner, after just over a year, grew to 5-figure Internet sales, another doubled their sales in just one month, another's business grew to over 70% international, an industrial client reports great response and sales, wholesalers and mfg. are getting distribution for their product lines, another storeowner has built a tremendous catalog mail order business, one store introduced a new product which started selling the first weekend online... Here is what another happy customer wrote last week, on renewing for another year with us: "You have a great system and it really helps me. You are a valuable and indispensable facet of my business." CURRENT OPTIONS AND RATES - All rates include installation and ONE FULL YEAR'S RENT - no monthly fees. 1.MINI-MIRROR SITES - These are very popular for large sites and for those who have frequent page updates. We "mirror" (copy) the front page of your existing site and install it in the four malls, linking back to the rest of your pages. You still have four new URL's. $475. SPECIAL THRU FEB.4, 1998...$375.00. (25% Introductory Discount). 2. NEW! EXCLUSIVE Banner Ads - These are just being offered and some categories have already been taken. One banner is offered per category directory and includes a " mini-mirror site" also. Inquire for availability. $495.00 per category banner, $1500 for all four Mall Entrance/ Main Directory also available. Some categories already sold out. (See list at end of this message). 3. FULL MIRROR SITES - If you have an existing site, and want to have four additional full stores in the Malls, we "mirror" (copy) your entire, existing site. Again, we have to quote you depending on complexity and size, we do also have a size limit. 4. ORIGINAL STORES - If you do not currently have a web site, we can design and install a storefront for you. This is obviously by quote as it depends on how many products, etc. It includes an online order form. Basic starts at $795.00. (includes all four locations). To receive details on any of the above options, please just fill out the following and email back. ========================== I would like information on the Exclusive Banner Ads. My Product/Service Category is:_____________________ Categories: Apparel/Accessories, Arts/Crafts/Antiques, Books/Education, Collectibles, Home/Garden/Pets, Food, Computer, Cosmetics/Personal Care, Toys/Games/Hobbies, Health/Fitness, Wholesale/Industrial, Gifts, Business/Finance, Jewelry, Auto/Boats, Audio/Music/Videos. SPORTS, TRAVEL, FLOWERS, JEWELRY - ALL FOUR LOCATIONS ARE SOLD OUT APPAREL, COMPUTER, HEALTH, COSMETICS...3 each still available. This applies to banners only of course, you can still have mirror sites in any category. My http:// is _______________________________ ========================== I would like a quote on an: Original Store ( ) Full Mirror ( ) My Site Address is: http://_________________________ ======================== I am interested in the 25% OFF mini-mirrors SPECIAL INTRODUCTORY OFFER, (Note: good thru February 1, 1998 only) My site address is: http://_________________________ Note: We do not accepted x-rated sites. ALSO PLEASE CHECK HERE IF YOU WOULD LIKE INFORMATION ON THE OPTION MENTIONED IN PARAGRAPH THREE. ( ) Thank you for your interest. ================================================================ [View Less]

1 0

ULotD? Cuban Tattoos.
by Robert Hettinga 17 Dec '03

17 Dec '03

A bit o'apocrypha for a Monday evening... Cheers, Bob --- begin forwarded text Resent-Date: Tue, 27 Jan 1998 11:27:25 -0500 X-Authentication-Warning: qnx.com: localhost [127.0.0.1] didn't use HELO protocol To: 0xdeadbeef(a)substance.abuse.blackdown.org Cc: bostic(a)bsdi.com Subject: ULotD? Cuban Tattoos. Date: Tue, 27 Jan 1998 10:14:12 -0500 From: glen mccready <glen(a)qnx.com> Resent-From: 0xdeadbeef(a)substance.abuse.blackdown.org X-Mailing-List: <0xdeadbeef(a)substance.abuse.… [View More]

3 3

Eureka! Wed Jan 28 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Wednesday's issue of Eureka! PLAYGAL This is truly a breathtaking site. Well-designed and easy to use with excellent content. The tour alone has hotter porn than many other 'free' sites - go see it now. It's explicit, comprehensive and top quality. There are 2,000 video feeds online, free live fucking with sound, 10,000 erotic stories, 1,000s of top quality pix, adult and arcade games, real ama- teur competitions and much more. Click now and be astounded! Playgal .... http://www.… [View More]

1 0

Re: Physical Meet: Feb. 21 (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Tue, 27 Jan 1998 11:28:34 -0600 > From: "Troy A. Bollinger" <troy(a)austin.ibm.com> > Subject: Re: Physical Meet: Feb. 21 > Quoting Jim Choate (ravage(a)ssz.com) > > > > Ok, looks like the magic day is Saturday Feb. 21, 1998 from 6-7pm. > > > > So, now all we need is a place... > > > > Flipnotics worked last time. > > I'd like to suggest that everyone bring a printout of their PGP > fingerprint so … [View More]

1 0

Re: Video & cryptography...
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Remember what your target is here. (Focus, Pinky!) The ultimate goal is that you're trying to convict a suspect of some wrongdoing in a courtroom, and you would like to use as evidence a piece of video footage. But now, in addition to the old standard of "chain of possession" whereby a police officer logs when s/he receives the evidence, who has accessed it in the lab, storage, etc., you may now be required to establish the "truth" of the video -- was it forged, staged, or altered? Can the … [View More]defense convince a jury that a video is not what it appears to be? Look at the O.J. case where they convinced people that a piece of DNA might not have been his. What a load of malarkey they heaped upon those people, and shame on the prosecution for not going back and matching up another 50 markers, dropping the chances of an error from 1 in 3*10^12 to 1 in 3*10^60. (Ultimately, it wouldn't have mattered of course because they pointed out other "flaws" in the chain of possession, specifically the FBI crime lab. Why they might have had a *different* case with O.J.'s blood is beyond me... They could have retested the DNA from every cell in evidence on that trial, found only Nicole's, Goldman's and Simpson's DNA, and STILL they would have gotten it thrown out, because jurors are incapable of understanding math.) What this means to us is that, in a courtroom, a signed piece of digital tape will probably be accepted the same as an unsigned piece of analog tape. The courts have already established precedent that says that the scientific method has less value than an overpriced lawyer. Think about it: what we strive for as a cryptographic proof means less than the unsworn audio tape from a 21 year old intern. If some lawyer wants to challenge a piece of video, and can throw enough money at it, s/he's going to win. You're better off spending money training the persons operating the VCR, because that's the defense's next point of attack. The idea behind the digitally signed video frames is that the video "consumer" (the persons who shot and recorded the video) probably didn't edit the video to falsify some evidence, and that the person who built the camera is willing to go to court to testify that their video is not tampered with. As a video "consumer", you're willing to pay for a witness from the video equipment supplier to come testify that you didn't edit their video. It theoretically (in a certain, very limited subset of theory) eliminates the "Rising Sun" plotline where someone edited the digital video. Now, we all know that since you can falsify the video by all kinds of other means, the only thing it really accomplishes is it adds a float to the parade going past the jury. And whoever has the prettiest parade wins "justice", right? At 05:02 PM 1/26/98 -0500, Adam Shostack wrote: >Jim Choate wrote: >| > From: Adam Shostack <adam(a)homeport.org> >| > Subject: Re: Video & cryptography... >| > Date: Mon, 26 Jan 1998 13:56:57 -0500 (EST) >| >| > Schneier, Wagner and Kelsey have done some work on an authenticating >| > camera. > >Dave points out that this was Schneier, Hall and Kelsey. > >| > One issue to be concerned with is that what the camera sees is not >| > always the truth. Putting a film set together to film bigfoot is >| > easy. The fact that the film is authenticated as having come from the >| > camera doesn't mean a whole lot in some cases. >| >| Doesn't this same sort of issue arise from any other digital signature >| process then? There should be nothing fundamentaly different between the >| characteristics of a video camera signing a frame than a person signing >| email. > > It arises in a different context; with a signature on paper, >you're generally indicating that you've read and consented to whats on >the paper, not that you created it. The meaning of a camera signing a >video still is not obvious to me. Is it intended to be 'this is what >we saw through the lens?' or 'this is what really happened?' > >Adam [View Less]

1 0

Information on key handling with Microsoft products (fwd)
by Ray Arachelian 17 Dec '03

17 Dec '03

> There's been some discussion recently on this news alias about how > Microsoft > handles key management (and some related topics) in CryptoAPI (more > specifically, the Microsoft base CSPs). Below is a document we've put > together to help answer these questions. > > Thanks, > -JasonG > > Product Manager, Windows NT Security > Microsoft Corporation > > > > Microsoft's Response to Recent Questions on the Recovery > of Private Keys from various … [View More]Microsoft Products > > Recently, there has been discussion on some Internet forums about the > methods Microsoft uses to store private keys in some of its products, as > well as about CryptoAPI's role in key management. These discussions > included > some inaccurate information about the PFX and PKCS-12 formats, as well as > how Microsoft implements these formats in its products. > > This paper was prepared by the Microsoft Public Key Infrastructure team to > provide some additional insight and clarification on these issues, and in > some cases, identify long-term plans that Microsoft has to continue the > improvement of security in our products. > > CryptoAPI > One area to clarify at the outset is the role of CryptoAPI. Implications > that any key management problem on Microsoft's Internet products would be > an > example of fundamental problems with CryptoAPI are absolutely inaccurate. > CryptoAPI is a set of cryptographic technologies that are provided for use > by other software--sort of a cryptographic toolbox. The actual > cryptographic > functions are provided through Cryptographic Service Providers (CSPs), > which > are implemented as DLLs. With the exception of the details about a > possible > PKCS-12 attack, all the issues raised in the recent discussions are > specifically aimed at Microsoft's base CSPs, not at CryptoAPI. The base > CSPs are the royalty-free, software-based CSPs provided with Windows NT > 4.0, > Windows 95, and Internet Explorer. These attacks do not apply in general > to > other CryptoAPI CSPs and do not indicate any fundamental concerns with the > security of the CryptoAPI architecture or applications built upon it. > > PFX/PKCS-12 > Microsoft products do not "store" private key material using PKCS-12, > contrary to recent descriptions on the Internet. For clarification, > PKCS-12 > is a standard format, used for export/import of Public Key Certificates > and > related key material. At present, the only Microsoft product that > supports > use of this format is Microsoft Internet Explorer 4.x. Internet Explorer > uses PKCS-12 solely as a means of migrating a user's Certificate and > public-private key pair between multiple Internet Explorer installations > or > between Internet Explorer and other products, such as Netscape > Communicator. > > > Some background might help. Microsoft originally developed the draft > specification for an encrypted export/import format, referred to as PFX, > but > the PFX specification was never implemented by Microsoft. Instead, the > PFX > specification was handed over to RSA Labs and it became the draft PKCS-12 > specification. The design was then reviewed, and contributed to, by a > number of other companies to arrive at the current PKCS-12 standard. > Microsoft and Netscape have both implemented PKCS-12 with 40-bit > encryption. > This was done to provide a common, exportable solution that was completely > interoperable. > > The example of breaking a PKCS-12 data blob, which was given in discussion > on the Internet, is not an attack on the "weak" cryptography of PKCS-12. > Rather, it is simply a dictionary attack (long known and well understood > in > cryptography), which works well if people use poorly-chosen passwords to > protect the PKCS-12 data blob. Examples of such bad passwords include > words > in the English dictionary. In our implementation of PKCS-12, we could > possibly do some things to make brute-force attack against an exported > PKCS-12 data blob more difficult. For example, performing a dictionary > check > on the password before accepting it for encrypting the data blob would > reduce the use of weak passwords. Alternatively, we could iterate the > setup > function to increase "diversity" making it much more expensive for an > attacker to search. However, neither of these methods are required for > protection of the data blob. Good security is always a combination of > technology and policy. As part of a strong security policy, strong > passwords > should be used on all resources. The Microsoft Security Advisor website > (http://www.microsoft.com/security) has some guidelines for choosing > strong > passwords. > > One statement by the original poster argues that Microsoft managed to > design > a security format that actually makes it easier to break into the > protected > data. As stated above, a number of well respected companies were involved > extensively in the design and review of PKCS-12 before it became a > standard. > An iteration count, which would make the type of attack described above > more > difficult (in terms of time), was added late in the PKCS-12 evolution. It > was, however, too late to make it into the Internet Explorer 4 product > release. Future versions of Internet Explorer will include support for the > an iteration count, further strengthening the security of exported key > material. > > Of course, in general the PKCS-12 data objects will not be available on a > user's machine, since they are only used by Internet Explorer 4.x when > exporting key material to, or importing key material from another system. > As > with any sensitive data, users should take care when working PKCS-12 data > blobs and not leave them on their hard drives. > > Exploiting Internet Explorer > One of the fundamental requirements to perform any possible cryptographic > attack discussed in the recent postings is the assumption that a malicious > entity could somehow access to data on a user's computer system, without > the > permission or knowledge of the user. This is a large leap of faith. > Users > that are using Public Key Certificates today are generally sophisticated > and > savvy users, or part of a larger corporate infrastructure with > knowledgeable > administrators. This class of users will certainly keep abreast of current > security issues and install security-related patches and updates as they > become available. Microsoft has been extremely responsive in dealing with > all known Internet Explorer security attacks and has posted patches for > all > currently known attacks. And, of course, security issues are certainly not > limited to Microsoft software. > > Information on security-related issues with Microsoft products is > available > on the Microsoft Security Advisor website at > http://www.microsoft.com/security. > > Attacks against Authenticode signing keys > Another concern identified was that if a malicious hacker could steal a > user's or company's Authenticode signing key, that hacker could sign > objects > with that key and distribute them. Then when other users tried to download > the signed object, they would think the key's owner really signed the > object, which might contain malicious code. The Authenticode program has > been designed to ensure that only trusted programs are allowed to run on a > users machine. As stated earlier Microsoft has been very responsive is > addressing security issues with IE. > > However, it is extremely unlikely anyone could be successful with a > simplistic strategy for stealing Authenticode signing keys and then using > them. As noted above, there are security patches already released for > known > Internet Explorer bugs that could possibly allow a key blob to be stolen > off > a user's hard disk (assuming a user left an Authenticode 'key' file on > their > hard disk). Second, anyone signing code using Authenticode technology is > extremely unlikely to leave their key material sitting on an end user > machine routinely used for browsing the Internet. > > Microsoft recommends storing key material, such as that used in > Authenticode, in hardware tokens. Such tokens prevent any of these attacks > from getting started as the keys are not stored in the PC and are not > exportable. The Authenticode signing keys that Microsoft uses for all our > software, for instance, are stored in such a physical hardware key storage > mechanism. > > Attacks on Encrypted Key material > There is some confusion over the algorithms and methods that Microsoft > uses > to provide protection of encrypted key material in Internet Explorer when > using the standard Microsoft base CSPs. There were changes between > Internet > Explorer 3.0x and Internet Explorer 4.x specifically to address any > possible > concern. Note, this concern is unlikely to be valid for any third-party > software CSP and is not relevant to hardware CSPs. > > Microsoft is constantly working to improve the security of our products. > We > determined that there were better suited methods for storing keys than > using > the RSA RC4 stream cipher algorithm used in Internet Explorer 3.0x. In > particular, a stream cipher, such as RC4, is not ideally suited for this > particular use because it can be susceptible to a "known-keystream > attack". > In a known-keystream attack, if you know the plain text, which you > arguably > might be able to determine given the number of standard PKCS-8 fields, you > can recover the keystream. If you recover the keystream, then a XOR > function will indeed decrypt anything else encrypted with the same key. > However, Microsoft only used this RC4-based implementation in the base > CSPs > that shipped with Internet Explorer 3.0x. The CSPs that shipped in > Internet > Explorer 4.x protect private key material in a form that is encrypted > using > DES, which is a block cipher and is not susceptible to the known-keystream > attack that can be used against RC4. > > Again, note that this kind of attack assumes some degree of security > breach > on the user's system such that the keystream could be obtained. > > Key export attacks > The original Internet posting raises concern about the CryptoAPI interface > CryptExportKey(). This function is fully documented and does indeed > export > private key material in an encrypted format. The presence of the > CryptExportKey() function is to support functionality such as migrating > key > material between machines for a user or creating a backup copy of a key. > It > should be noted however, that many CSPs, including most hardware based > CSPs, > do not allow exportable private keys and will return and error in response > to a CryptExportKey() request. > > Also, Microsoft's base software CSPs provide a means to mark keys as > non-exportable when they are generated. An additional security protection > is provided if the flag CRYPT_USER_PROTECTED is set, in which case each > use > of the private key, including export, requires the user to supply a > password > to access the key. Some commercial CAs are not currently setting this > flag > and do not provide the user a way to request it during Certificate > enrollment. We recognize this as a problem. We will continue working > with > CAs to assist them in supporting these security features. However, we > will > also make available a utility to allow setting this flag after key > generation for users concerned with this type of attack. > > The posting also asserts that an ActiveX control could be downloaded from > a > web page, simply ask for the current users key, ship the key off for > collection by an unscrupulous person, and then delete itself without a > trace. > > If users run unsigned code, or code from an unknown origin, a number of > unpleasant things can happen. This could indeed occur if the key as been > marked exportable and the CRYPT_USER_PROTECTED flag is not set. However, > such a scenario assumes that the user follows few or no policies with > regard > to good security, such as running code from unknown sources. Similarly, if > the user were running software from unknown/untrusted sources, that > software > could reformat their hard drive, or manipulate other user data. This > concept > is certainly not new. > > There was also discussion of 16 dialog boxes appearing to the user for > their > password if the CRYPT_USER_PROTECTED flag is set. Certainly asking the > user > too many times would be better than too few times, however in our tests, > under extreme (and uncommon cases), a user might be asked for their > password > at most four times when a key is used with the Microsoft base CSPs. > Perhaps > the claim came from an early beta release. > > ---------------------------------------------------------------- > Users Guide http://www.microsoft.com/sitebuilder/resource/mailfaq.asp > contains important info including how to unsubscribe. Save time, search > the archives at http://microsoft.ease.lsoft.com/archives/index.html [View Less]

1 0

Sweedish police weed out hackers
by Ray Arachelian 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Mon, 26 Jan 1998 14:05:57 -0500 From: Salvatore DeNaro <Salvatore_DeNaro(a)usccmail.lehman.com> To: Ray Arachelian <sunder(a)brainlink.com> Subject: Forward this to the list? *** Swedish police weed out hackers 2 young Swedish hackers who turned a Swedish county's home page into an advertisement for pornography and marijuana and broke into the U.S. space agency's computer system have been tracked down, local media reported. After a … [View More]

1 0

update.350 (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: >From physnews(a)aip.org Wed Dec 10 16:59:59 1997 Date: Wed, 10 Dec 97 14:35:44 EST From: physnews(a)aip.org (AIP listserver) Message-Id: <9712101935.AA25024(a)aip.org> To: physnews-mailing(a)aip.org Subject: update.350 PHYSICS NEWS UPDATE The American Institute of Physics Bulletin of Physics News Number 350 December 10, 1997 by Phillip F. Schewe and Ben Stein QUANTUM TELEPORTATION has been experimentally demonstrated by physicists at the … [View More]University of Innsbruck (Anton Zeilinger, 011-43-676-305-8608, anton.zeilinger@ uibk.ac.at; Dik Bouwmeester, Dik.Bouwmeester(a)uibk.ac.at) First proposed in 1993 by Charles Bennett of IBM (914-945-3118), quantum teleportation allow physicists to take a photon (or any other quantum-scale particle, such as an atom), and transfer its properties (such as its polarization) to another photon--even if the two photons are on opposite sides of the galaxy. Note that this scheme transports the particle's properties to the remote location and not the particle itself. And as with Star Trek's Captain Kirk, whose body is destroyed at the teleporter and reconstructed at his destination, the state of the original photon must be destroyed to create an exact reconstruction at the other end. In the Innsbruck experiment, the researchers create a pair of photons A and B that are quantum mechanically "entangled": the polarization of each photon is in a fuzzy, undetermined state, yet the two photons have a precisely defined interrelationship. If one photon is later measured to have, say, a horizontal polarization, then the other photon must "collapse" into the complementary state of vertical polarization. In the experiment, one of the entangled photons A arrives at an optical device at the exact time as a "message" photon M whose polarization state is to be teleported. These two photons enter a device where they become indistinguishable, thus effacing our knowledge of M's polarization (the equivalent of destroying Kirk).What the researchers have verified is that by ensuring that M's polarization is complementary to A's, then B's polarization would now have to assume the same value as M's. In other words, although M and B have never been in contact, B has been imprinted with M's polarization value, across the whole galaxy, instantaneously. This does not mean that faster-than-light information transfer has occurred. The people at the sending station must still convey the fact that teleportation had been successful by making a phone call or using some other light-speed or sub-light-speed means of communication. While physicists don't foresee the possibility of teleporting large-scale objects like humans, this scheme will have uses in quantum computing and cryptography. (D. Bouwmeester et al., Nature, 11 Dec 1997; see also www.aip.org/physnews/graphics) DO EARTHQUAKES HAVE ELECTRICAL PRECURSORS? The elastic waves measured by seismometers are transmitted by the flexing crust while an earthquake is doing its worst. But some scientists believe that flexing also goes on in the hours and even weeks before a quake. Too small to be detected seismically, the flexing might well be sensed electrically. As underground strata rearrange themselves before a quake, the thinking goes, pockets of water are squeezed into new configurations, changing local conduction properties, which can be monitored with buried electrodes. On this basis Panayiotis Varotsos at the University of Athens (011-30-1-894-9849, pvaro(a)leon.nrcps.ariadne-t.gr) has reportedly predicted certain quakes in Greece weeks ahead of time by triangulating voltage differentials at the level of 10 millivolts/km over distances of 100 km. (Some skeptics dispute this assertion.) In new research, Varotsos buttresses his claims with laboratory studies of another system under pressure which puts out transient electrical signals before it fractures, namely a crystal containing a variety of dislocations and defects. Conductivity patterns in the crystal convince Varotsos that analogous patterns (although on a much bigger distance scale) observed in the buried electrode arrays constitute a true earthquake precursor. (Varotsos et al., Journal of Applied Physics, 1 Jan, 1998; journalists can obtain the paper from physnews(a)aip.org.) [View Less]

1 0

RE: Latest Clinton dodge?
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

David Honig <honig(a)otc.net> writes: > At 07:11 PM 1/26/98 EST, you wrote: > >"Roger J Jones" <cyber(a)ibpinc.com> writes: > > > >> > >> Thanks for the info - while I am at it - has anyone ever disclosed the > >> "distinguishing characteristic" that Paula Jones claims will prove its > Bubba > >> Bill? > >> > >Can you spell "curvature"? > > So you *do* have intimate knowledge of the president.... > but … [View More]

1 0

No Subject
by Mix 17 Dec '03

17 Dec '03

The only `culture' Timothy `C' Maypole possesses is that cultivated from his foreskin scrapings. ,/ \, ((__,-,,,-,__)), Timothy `C' Maypole `--)~ ~(--` .-'( )`-, `~~`d\ /b`~~` | | (6___6) `---`

2 3

sat survailience
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Tue, 27 Jan 1998 14:55:09 -0500 From: Somebody Subject: sat survailience To: rah <rah(a)shipwright.com> MIME-version: 1.0 Bob - something else to be paranoid about! <somebody's .sig> <snip> When Is a Satellite Photo An Unreasonable Search? By <some reporter> Staff Reporter of <A big newspaper> Over the years, satellite photos have plotted the course of Soviet warships and tracked the movements of Iraqi troops. Last year, they … [View More]also nailed Floyd Dunn for growing cotton on his Arizona farm allegedly without an irrigation permit. Mr. Dunn contends that he did have the required permits but paid the $4,000 fine to maintain good relations with the Arizona Department of Water Resources. "You can't argue with a satellite," he says. "Being caught like I was caught is kind of unfair." As state and local agencies make more use of satellite imagery -- for everything from surveying illicit crops to detecting unauthorized building -- they're raising questions about the propriety of spying on American civilians from the sky. "It certainly has a 'Big Brother Is Watching You' flavor to it," says Larry Griggers, a director at the Georgia Department of Revenue. "But it prevents us from having to spend money for other types of enforcement." The state tax authority plans to use National Aeronautic and Space Administration satellites to check all 58,910 squares miles of the state for unreported timber cutting. It also plans to share the photos with any state agency that asks, which could lead to a wide variety of enforcement actions. Does taking satellite photos of private citizens and their property -- generally without their knowledge -- violate the Constitution's Fourth Amendment protections against unreasonable searches? The American Bar Association has organized a task force to explore that question, as well as such issues as how long photos can be kept on file and how freely they can be shared with police. Because U.S. Justice Department officials are on the task force, the recommendations are expected to influence how law-enforcement authorities and civil agencies use the new images and at what point they require warrants. Use of satellite images has increased markedly since the early 1990s, when the Russian space agency, Sovinformsputnik, began selling spy-quality photos to raise cash. The U.S. lifted its own restrictions on sale of high-resolution satellite photos in 1994, which encouraged entrepreneurs to launch satellites of their own that could compete with the Russian imagery. Those efforts may soon pay off. This year a joint venture of Lockheed Martin Corp. and Raytheon Co. hopes to launch a satellite that will yield imagery detailed enough to distinguish sedans from minivans. Another firm, Earthwatch Inc. of Longmont, Colo., says it is proceeding with plans to launch a similar satellite in 1999 -- despite the recent loss of radio contact with a less-advanced model the firm launched in December. Both enterprises decline to discuss their public-sector clients. Some state and local agencies have been purchasing photos from French, Indian and U.S. government satellites since the 1980s, and increasingly powerful computer software is allowing them to make better use of the imagery. The Arizona Department of Water Resources spotted Mr. Dunn's cotton crop, for example, because it routinely obtains photographs from the French government's SPOT satellites of 750,000 acres of central Arizona farmland. State officials then compare the images with a database of water-use permits to determine which farmers might be exceeding water-use rules. "A week doesn't go by where somebody doesn't propose a new use," says John Hoffman, whose Raleigh, N.C., business, Aerial Images Inc., has become the main reseller of images taken by Russian intelligence satellites. Much of what Mr. Hoffman has available is old imagery of Western cities. But he says he can also take orders for new photos on upcoming missions. Price: $6,500 to photograph 10 square kilometers with resolution of about six feet, which he says is sharp enough to distinguish cars from pickup trucks. In North Carolina several counties are using Mr. Hoffman's photos to find unreported building activities, agricultural development and other property improvements that would raise property-tax assessments. Demand from state and local agencies in his region is so strong, he says, that Sovinformsputnik, the Russian space agency, has scheduled a Feb. 17 launch of a satellite that will concentrate mainly on photographing the Southeastern U.S. Pictures taken from airplanes at lower altitudes are often more revealing, but satellite imagery can be much more cost-effective. Photographing an area the size of a small town, for example, can cost tens of thousands of dollars by airplane, approximately twice the cost by satellite. Some satellite imagery is faster as well. Although the satellites Mr. Hoffman works with use conventional film that is developed after the satellite returns to earth, newer camera platforms can transmit images digitally just minutes after they are taken. To date, there have been few legal challenges to the use of satellite imagery. But the technology of overhead photography is evolving faster than the law. Courts have allowed government officials to take detailed pictures from airplanes flying as low as 1,200 feet. And in 1986, the U.S. Supreme Court ruled that the U.S. Environmental Protection Agency was permitted to photograph a Dow Chemical facility in Midland, Mich., because the EPA used relatively conventional airplane-camera equipment. But the high court raised a red flag in that case: "It may well be ... that surveillance of private property by using highly sophisticated surveillance equipment not generally available to the public, such as satellite technology, might be constitutionally proscribed absent a warrant." The ABA task force is exploring just these questions. Sheldon Krantz, chair of the task force and a partner at Piper & Marbury LLP in Washington, says that it will propose in April that law-enforcement agencies be required to obtain warrants to use "satellite cameras [that] can focus on images of a few feet across." That standard would probably include most advanced satellite images, although the task force has yet to agree on more specific definitions. "We need to make some big value judgments about these practices before they become so widespread," says Mr. Krantz. Some businesses say they welcome oversight from space. Georgia-Pacific Corp. and other big timber concerns support the Georgia Department of Revenue's forest survey, saying it will help to disprove accusations that they have secretly cut trees without paying taxes. Several small timber owners already have been fined a total of $2,000 in a test of the statewide program that took place in Wayne County, near Savannah. And as sharper-resolution photos become available, some Georgia officials suggest the program could be used to look for objects as small as backyard porches, to check if homeowners have their construction permits in order. <snip> --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/> [View Less]

1 0

RE: Latest Clinton dodge?
by J-Dog 17 Dec '03

17 Dec '03

At 01:15 PM 1/27/98 EST, Dr.Dimitri Vulis KOTM wrote: >David Honig <honig(a)otc.net> writes: > >> At 07:11 PM 1/26/98 EST, you wrote: >> >"Roger J Jones" <cyber(a)ibpinc.com> writes: >> > >> >> >> >> Thanks for the info - while I am at it - has anyone ever disclosed the >> >> "distinguishing characteristic" that Paula Jones claims will prove its >> Bubba >> >> Bill? >> >> >> >… [View More]

1 0

Privacy and presidential philandering, from the Netly News
by Declan McCullagh 17 Dec '03

17 Dec '03

******** http://cgi.pathfinder.com/netly/opinion/0,1042,1714,00.html The Netly News (http://netlynews.com/) January 27, 1998 Private Parts by Declan McCullagh (declan(a)well.com) Already you can hear the plaintive sound of President Clinton's partisans whining about privacy. The allegations about Will's wandering willy are too intimate, too sensitive and (if the truth be told) too embarrassing to be discussed publicly, they claim. Yesterday the wire services were … [View More]

1 0

Re: Latest Clinton dodge?
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

> > Next thing you know, he'll say "She gave me a blow job, but didn't > swallow, so it's not sex." :) Is that like "if you don't get pregnant," it's not intercourse??? Gotta be a lot of virgins out there then.

1 0

New Plan for America!!!!!
by bubbabill＠whitehouse.gov 17 Dec '03

17 Dec '03

Tonight at the State of the Union I will announce my new plan for America - "Swallow the Leader"

1 0

[Fwd: Check this out!] (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: >From stugreen(a)bga.com Tue Jan 27 16:01:14 1998 Sender: root(a)coney.lsd-labs.com Message-ID: <34CE5A63.9D29DD2(a)bga.com> Date: Tue, 27 Jan 1998 16:06:27 -0600 From: Stu Green <stugreen(a)bga.com> X-Mailer: Mozilla 3.01GoldC-Caldera (X11; I; Linux 2.0.33 i586) MIME-Version: 1.0 To: ravage(a)ssz.com Subject: [Fwd: Check this out!] Content-Type: message/rfc822 Content-Transfer-Encoding: 7bit Content-Disposition: inline Received: from mail1.realtime.net (mail1.… [View More]realtime.net [205.238.128.217]) by zoom.bga.com (8.6.12/8.6.12) with SMTP id MAA14988 for <stugreen(a)bga.com>; Tue, 27 Jan 1998 12:39:17 -0600 Received: (qmail 13392 invoked from network); 27 Jan 1998 18:39:14 -0000 Received: from isdn5-69.ip.realtime.net (HELO bga.com) (205.238.160.69) by mail1.realtime.net with SMTP; 27 Jan 1998 18:39:14 -0000 Message-ID: <34CE2AD0.F3822BFE(a)bga.com> Date: Tue, 27 Jan 1998 12:43:28 -0600 From: David Neeley <dneeley(a)bga.com> X-Mailer: Mozilla 4.04 [en] (Win95; I) MIME-Version: 1.0 To: stugreen(a)bga.com Subject: Check this out! Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 7bit In case you don't get an e-mail newsletter called "Tasty Bits from the Technology Front" I offer for your enjoyment: ..A warning on Microsoft (in)security Basic crypto weakness undermines all claims to security, expert says Longtime readers know that TBTF has been reporting on security weak- nesses in Microsoft's products, particularly Internet Explorer, for more than a year [25]. Now a security expert from New Zealand, Peter Gutmann, has posted a paper [26] claiming that the flaws are so ser- ious that Windows 95 users should entirely refrain from using the Web. Among the problems Gutmann points out is a critical weakness in the way Microsoft software protects (or does not protect) users' master encryption key; this weakness undermines all other encryp- tion components in Web servers and browsers. Gutmann outlines how a cracker could quietly retrieve the private key from a victim's ma- chine and break the encryption that "protects" it in a matter of seconds. The attacker has, Gutmann says, then "effectively stolen [the user's] digital identity, and can use it to digitally sign contracts and agreements, to recover every encryption session key it has ever protected in the past and will ever protect in the future, to access private and confidential email, and so on." TechWeb coverage is here [27]. [25] http://www.tbtf.com/resource/ms-sec-exploits.html [26] http://www.cs.auckland.ac.nz/~pgut001/pubs/breakms.txt [27] http://www.techweb.com/wire/story/TWB19980123S0007 [View Less]

1 0

Ultra computer.
by Trei, Peter 17 Dec '03

17 Dec '03

I also find the merriment at Nobuki Nakatuji poor English skills offensive - I wish I spoke Japanese as well as he can write English. That's not to say I think we should all go off and work on MISTY right away. However, on his 'NEC supercomputer', there's a somewhat low-content press release at http://www.nec.co.jp/english/today/newsrel/9801/2101.html They've been asked to design as 32 TFlop machine, with an aim of building it by 2002. It's a highly parallelized vector machine, ostensibly … [View More]

1 0

opinion of Crypt::DES & Crypt::IDEA
by John Blair 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hello, Does anybody on this list have an opinion of the quality of the Crypt::DES and Crypt::IDEA perl modules? I'm concerned with whether or not the modules use electronic code book instead of cipher block chaining encryption mode. The documentation does not make this clear. If nobody knows the answer to this I'll figure it out from the source code. However, I suspected I could save some time by asking here. Besides this question, does anybody … [View More]

1 0

future proofing algorithms
by John Kelsey 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- [ To: Cypherpunks, Adam Back ## Date: 01/26/98 ## Subject: future proofing algorithms ] >Date: Mon, 26 Jan 1998 01:18:31 GMT >From: Adam Back <aba(a)dcs.ex.ac.uk> >Subject: future proofing algorihtms (Re: (eternity) Eternity > as a secure filesystem/backup medium) >It is interesting to note that Tim May's recent suggestion >of LAM (Local Area Mixes) would help here because if 5 of >those mixmaster nodes where part of a … [View More]LAM, it is unlikely >that the NSA would be able to archive inter remailer >traffic, thus increasing effective pool size to 100^5. So >one advantage of the LAM approach is that it provides links >which are protected by physical security. This is a good point. The crypto looks like the strongest link in the chain right now, but if it turns out not to be, reliance on local physical security isn't a bad idea. (This works only if the huge numbers of the local machines must be subverted for an attack to work; if the attacker has to take over only a couple machines, he can probably manage this.) Discovering a better way to bypass my physical security today doesn't let you know who sent what last year, and security guards don't become retroactively twice as cheap to bribe every eighteen months. >> Note that, in practice, this isn't likely to be useful >> unless you've done the same kind of thing for symmetric key >> distribution, random number generation, etc. Otherwise, >> your attacker in 2050 will bypass the symmetric encryption >> entirely and factor your RSA modulus, or guess all the >> entropy sources used for your PRNG, or whatever else you can >> think of. >Yes. We need to build constructs for all areas. A mega >hash would be nice, with a large output size even in the >face of birthday attack, preferably as secure as a >collection of hash functions. Right. I've seen some work done on this, mostly informally. The basic result I'm aware of with hash functions is like this: Let f() and g() be two different hash functions, such as SHA1 and RIPE-MD160. Let X,Y be the concatenation of X and Y. Then: Hash1(X) = f(X),g(X) Hash2(X) = f(g(X)),g(f(X)) You can quickly convince yourself that Hash1(X) is at least as resistant to collision as the stronger of f() and g(), but it's only as resistant as the weaker of the two to leaking information about X. (That is, if f(X) just gives you the low 160 bits of X, then Hash1(X) gives you the same thing.) Hash2() won't leak information unless both f() and g() leak information about their inputs, but you can't guarantee that it will be very good against collisions. (That is, if f(X) = 0 for all X, then all possible X values cause a collision in Hash2(X).) If f() and g() are independent, and one of them looks like a random function of X, then Hash3(X) = f(X) XOR g(X) looks pretty good. But it's possible for either f() or g() to be non-reversible without Hash3() being nonreversible. (The obvious case occurs when you think of something like f(X) = X g(X) = encrypt_{knownKey}(X) XOR X. Note that g() looks rather like some existing hash functions, where encrypt() is a known function. >That gives us something to wash our pseudo random number >input entropy with, and then we can go on to combine public >key systems. Right. Choosing the PRNG well is important, but I suspect that the real issue is going to be getting enough input entropy. If you can get 80 bits of real entropy today, you have a reasonably secure system now, but NSA may not find your system that secure in twenty years. For resistance to cryptanalysis, we can use the same set of stream ciphers as before. If we run Blowfish, 3DES, and SAFER-SK128 in OFB-mode, and XOR the streams together, we get an output stream that's no easier to predict than the weakest of the three ciphers used. Entropy collection on a wide range of different machines, without specialized hardware, is just a hard thing to do well. It's especially hard if you're postulating a massively powerful attacker years in the future. >A problem with public key systems however is that there >isn't a lot of choice -- basically all based on discrete log >or factoring. So perhaps RSA and DH combined in a construct >with an optimistically proportioned key size would be near >all that could be done. That sounds about right. Note that LAMs and such can use shared symmetric keys along with the public keys, so that an attacker has to get both to defeat the system. When the number of mixes is small, maybe some informal password-sharing at conferences might help this. For LAMs, some level of hand-carried key exchange can be used. Then, actual keys can be encrypted as RSA(R_0), ElGamal(R_1) are sent Previously shared secret key K_2 is known. Session Key = SK = E_{K_2}(R_0) XOR E_{K_2}(R_2). Also note that DH should probably be used with many different prime moduli, to resist any massive precomputation on one modulus. Maybe each mix could have several expensively-prepared Sophie Germaine primes, and senders could randomly select one for DH or El Gamal encryption. This would spread out a future attacker's resources, though of course, the attacker's effort scales only linearly in the number of (expensive to find) primes. >I suspect archiving world Network traffic would pose >something of a operational and financial strain :-) On the other hand, perhaps this is how NSA will pay their employees' salaries once crypto becomes sufficiently widespread: They will start a search engine service on all those archives of usenet/internet traffic for all these years: ``Check up on your political opponents' newsreading habits. Read the love letters of libertarian activists in the 90s. Find out whether Chief Justice Clarence Thomas ever visits adult web sites these days. *Only* at http://www.archives.nsa.org '' It would actually be very funny if historians in a couple centuries got access to the NSA's archives of recorded phone calls, telegrams, and e-mails. Imagine the odd assumptions that would result, with history students having this image of twentieth century america based on recorded phone calls of anarchists, antiwar activists, civil rights activists, communists, important politicians, mobsters, suspected spies, and wealthy businessmen. >Adam Note: I read CP-LITE instead of the whole list. Please CC me on replies. - --John Kelsey, kelsey(a)counterpane.com / kelsey(a)plnet.net NEW PGP print = 5D91 6F57 2646 83F9 6D7F 9C87 886D 88AF -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBNM5efSZv+/Ry/LrBAQGN8wP/aHKJbm024oDMNZIozcBGW+Vt4bKKLDoZ xhV6DQ3e4v9UadYJeKpCfRjrMDC06H6eP3D4E8vizEHVk2JCvHDTN3Fshf5pOtB2 tgrooYOP1pC5FuQAPPyhkJ840V7ve0mlpy3VWz5/hSvkkP1BW7KHoFv47sniVHZe RFsiz/hW7jc= =2Oml -----END PGP SIGNATURE----- [View Less]

1 0

Easy Money
by tgustavo.sanjuan＠interredes.com.ar 17 Dec '03

17 Dec '03

This is it! THE MOST PHENOMENAL WEALTH-BUILDING BONANZA IN HISTORY. A once-in-a-lifetime opportunity for you to upgrade the quality of your life forever. Your chance to automatically capitalize on the historic outpouring of humanity on to the Internet. (It will only happen once ... and it's happening RIGHT NOW!) Take just four minutes to discover the secret that WILL IMMEDIATELY CHANGE YOUR LIFE. (Do you *really* have something else to do more important than THAT?) You are about to embark … [View More]upon a wonderful journey to amass a small fortune in a short time. (Even a LARGE fortune, if you choose to devote some effort.) It's easy and fail proof. All you have to do is take the first step. You've paid your dues; you deserve it. Now it's your turn. WITHIN 90 DAYS, YOU'LL HAVE MORE THAN $50,000 ... and that's just the beginning! HOW IS THAT POSSIBLE? Simple: To begin with, realize that there were only about two-million Internet "host sites" in 1994 -- yet that number had soared to around 20 million by the end of 1997. In other words, the rate of Internet growth is geometric -- like 2, 4, 8, 16, 32, etc. And, for the moment, even THAT rate is accelerating. Now, the most famous example of a host site is aol.com, America Online(tm). It, by itself, has over ten-million people as members. (Not all host sites have members, though.) HERE'S THE IMPORTANT PART: Following the present trend, the number of host sites will skyrocket to nearly ONE HUNDRED MILLION during 1998. And that's just the host sites! Now, imagine how many individual PEOPLE are rushing on line for the first time ... right now ... this very instant. This creates tremendous opportunity for you. But there's no time to waste! (How long can THAT growth rate continue? Oh, sure, it will keep growing -- just not at the historic 1998 rate.) IF YOU'RE WAITING FOR YOUR SHIP TO COME IN, THIS IS IT. (Don't let it sail away without you.) So here it is, the easiest money-generating system you'll ever hear about. One that's showing extraordinary appeal to an ever-expanding mass of people who feel the need for additional income. And YOU can help them fulfill that need. HERE'S YOUR CHANCE TO MAKE A DIFFERENCE. HOW? In short, by developing a mailing list of people who need extra money. (I know: it doesn't seem very exciting yet, but keep reading.) And people will pay you to be on your list. A LOT of people. (See: it's already starting to sound better.) Let's go through it step by step so you'll know exactly what to do ... and why (Step #4!) so many people feel hope again. If you've seen a lot of posts like this, you already have PROOF that THIS SYSTEM WORKS. ____________________STEP 1._________________ You will need these instructions later; so save them on your hard drive. (FILE then SAVE. If you have a choice, choose a "text" or "ASCII" file type.) Now print these instructions so you can read them more easily. (Go ahead, I'll wait for you ...) ____________________STEP 2._________________ This is the step where you invest money. Less than $10. (Try not to cry.) About the same as the price of a movie ticket, or a 12-pack of beer, or a few lottery tickets. In this "lottery," however, YOU control the results. YOU CANNOT AFFORD *NOT* TO DO THIS. On a sheet of paper, write "Processing fee to add me to your mailing list". (You, too, are one of those people wanting extra income, aren't you? Besides, the inherent value of being on that mailing list is what makes this a legal program. [The relevant American laws are in the United States Code, Title 18, §1302, §1341, and §1342.]) Fold the sheet around a US $1 bill. Mail this to the List Manager in Position A, located at the end of these instructions. Double- check the postage for any mail going outside your country. Repeat that for the other List Managers. ___________________STEP 3.__________________ Use Notepad (preferably) or some other word processor to open the file you saved in Step 1. Scroll to the List Managers section. Delete the name and address under Position F. Move the name and address from Position E down to Position F. Then, in order, move each of the others down one until Position A is left vacant. That's where your name and address go! Double check your address: whatever is there is where all your money will go. Save the file. (If you don't have Notepad, be sure to save it as an "ASCII" or "text" file.) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~ NOW, HERE'S THE MAGIC PART . . . ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ____________________STEP 4._________________ THIS STEP MAKES ALL THE DIFFERENCE IN THE WORLD. It's also where you invest a little time. As much as four hours, if you use America Online. (Try not to cry.) If it'll be easier on you, take an hour per day. Skip those X Files episodes you've already seen twice. In THIS show, YOU control the ending. All those people coming on line for the first time. Nearly TWO-THOUSAND NEW PEOPLE PER DAY ... and growing! Where do they go? Sooner or later --but usually immediately-- they go to the newsgroups. Isn't that where YOU discovered this opportunity? Over 40,000 newsgroups, now, and that's growing, too. (There's a list of 49,000 at ftp://ftp.alt.net/pub/news/active.) So, simply take the file you saved in Step 3 and post it to some newsgroups. Three hundred, to be precise. (How? See below.) How many people will be exposed to your offer during the two weeks your post will remain in the newsgroup? Depending on how you choose the newsgroups, anywhere from 10,000 to OVER A MILLION PEOPLE WILL SEE YOUR OFFER. ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ The implications of that are down right staggering. Even more so than it might seem! (See the Example section, below -- especially the first and last paragraphs.) ___________________STEP 5.__________________ Now begins the greatest money-making exprience of your life! In about a week, you start receiving requests and processing fees from opportunity seekers around the world. And they all want to be added to your mailing list. WHY do they want to do this? Well, for the most of the same reasons YOU want to do this! What will you do with all those requests? It's up to you. For example, you can sell them to professional list brokers, found in the Yellow Pages, who will see that offers are sent out. You can take up exotic-stamp collecting. To some of the addresses, you might even send these instructions: Most people want to jump right back in again as soon as their name moves out of Position F; after all, they already KNOW how well this works! And, what will you do with all that money? That, also, is up to you. (You can think of something, can't you?) ____________________________________________ Example ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ This example assumes that you post, one time, to just 300 newsgroups, with an average readership of merely 100 people during the dozen days your message stays on file. It assumes that VIRTUALLY EVERYONE --9,998 out of every 10,000 potential readers-- does NOT even see your opportunity, does NOT read it, or is already involved or, in any case, does NOT take any action. In marketing terms, this assumes a response rate of merely one fiftieth of one percent (0.0002). That's considered almost no response at all! (NOW can you see why this works so well?) You in Position A: Only 6 respond to your efforts. 6 x $1 = $6 You in Position B: Only 6 respond to each of the 6 in A. 36 x $1 = $36 You in Position C: Only 6 respond to each of the 36 in B. 216 x $1 = $216 You in Position D: Only 6 respond to each of the 216 in C. 1,296 x $1 = $1,296 You in Position E: Only 6 respond to each of the 1296 in D. 7,776 x $1 = $7,776 You in Position F: Only 6 respond to each of the 7776 in E. 46,656 x $1 = $46,656 _______ Your income $55,986 If, however, these people each get a mere 8 responses (out of 30,000 people!), your income increases to well over a quarter of a million dollars! PEOPLE ARE TRULY ACCOMPLISHING THIS. RIGHT NOW! *WHY NOT YOU?* How? The details are in your hands this very instant. THAT'S IT. All you have to do is actually begin. You may even wish to try for 20 people. You literally won't believe how much THAT produces. So, do the numbers for yourself. (I'll give you two hints: a. For ten, it's 10 x 10 x 10 x 10 x 10 x 10 = $1,000,000. b. Have you heard of a "sixty-four million dollar question"?) You just might end up wanting to spend a few DAYS posting, and to take it to a few of your friends. But start -- start today -- and start with just 300 newsgroups. THIS IS THE MOMENT YOU'VE BEEN WAITING FOR. __________How To Post To Newsgroups_________ To post, just "cut and paste": Highlight the entire text of these instructions. Choose EDIT then COPY. You only need to do that once. Here's the part you repeat: Go to the newsgroup. Click on Send New Message, Post Article, To News, or whatever applies. Type your headline in the Subject box. (Some subject heading samples are listed below.) Go to the Message box. Paste these instructions by holding down your Ctrl key while you depress the letter V. Click on Send, OK, or whatever is there. STEP-BY-STEP DIRECTIONS FOR AMERICA ONLINE: Go on line. Click on the Internet globe at the bottom of your Welcome page. Edit the Web Address window to read --without the quotes-- "http://members.aol.com/TouchMidas/private/aol-gold.txt". Click on Go To The Web. When you see the directions, print them out by clicking on the printer icon at the top of your screen. (If you receive a "URL Not Found" error, carefully re-type the address. If the it seems to have been discontinued, try this address: "http://home1.gte.net/docthomp/AOL.htm".) ___________Sample Subject Headings__________ .A Once-In-A-Lifetime Opportunity .How You Can Make $25,000 Per Month .How To Re-Invent Your Life .The Greatest Wealth-Building Bonanza In History! .Upgrade The Quality Of Your Life .FA$T, EA$Y MONEY! <-- Why you see so many of these: .Work At Home With Your Computer .Financial Independence .! > FA$T, EA$Y MONEY! < .Income Opportunity .Be a millionaire in 1998 .Make money with your computer .!!$$ Hard Fast Cash $$!! .Immediate Internet Income At Home (complete instructions) .Safe Income Now .$$ Need Cash? $$ .! Earn THOU$AND$ posting to newsgroups! .Income From The Internet .Yes, you can make money working from home .MAKE MONEY FA$T & EA$Y .Home-Based Business Opportunity .Internet Income <-Why you're gonna see more of this You're really here; you made it! Congratulations on your breakthrough to financial independence and an enhanced quality of living. Or... ******************************************** * WHAT ARE YOU WAITING FOR? ******************************************** Maybe things like this never work for you? (You are surely correct ... unless you're already grabbing an envelope.) You tried something like this before? (Have you *REALLY* ever reached 30,000 people before?) Maybe you'll only get $10,000? (Life is cruel.) Maybe you're already making $2,000 per hour? Maybe nobody else will do this? (Look around the newsgroups: they already ARE doing this. How much proof do you need?) Then, maybe everyone else is already doing this? (Definitely NOT! But you'll END UP being right if you keep putting this off.) "I'll do it later, really!" (Yeah, right.) Maybe the Easter Bunny will change your life, so you won't have to bother? Is the price of a movie ticket truly more important than your future? GO FOR THE GOLD: What have you got to lose? !-------REMEMBER, follow these steps and be honest, and the money will pour in! ________________List Managers_______________ #1 B. Spiegeleer 31 rue de la Montagne de lEsperou 75015 Paris Francia #2 C. Leyton Bulnes 737 San Bernardo, Santiago Chile #3 A. Curth Azcuenaga 1360 PB2 Buenos Aires, CF 1115 ARGENTINA #4 L Mastrogiacomo Maipú 596 1er piso Merlo (1722) Buenos Aires ARGENTINA #5 P. Oregioni Salta 662 Merlo (1722) Buenos Aires Argentina #6 A. Alvarez Chopin 149 norte Santa Lucia (5411) San Juan Argentina Note: If you don't read spanish send me an e-mail and I will send you a translated copy. Believe me, IT's WORTH IT! acurth(a)usa.net ----- Las puertas del año se abren, ----- como las del lenguaje, ----- hacia lo desconocido. ----- Anoche me dijiste: ----- mañana habrá que trazar unos signos, ----- dibujar un paisaje, tejer una trama ----- sobre la doble página ----- del papel y del día. ----- Mañana habrá que inventar de nuevo, ----- la realidad de este mundo. Octavio Paz ________________________________________________ This is a true story! Esta historia es Real! Días atrás, cuando "navegaba" por estas páginas de Newsgroups, así mismo como Ud. lo esta haciendo ahora, se me apareció un artículo similar a este que decía que uno puede ganar miles de dólares en pocas semanas con una inversión de $6.00!. Enseguida pensé, "Oh no! otra estafa más?", pero como la mayoría de nosotros, la curiosidad pudo más, y seguí leyendo. Y seguía diciendo que Ud. enviará $1.00 a cada uno de los 6 nombres y direcciones mencionados en este artículo. Entonces Ud. anota su nombre y dirección al final de la lista reemplazando al #6, y envíe o ponga este artículo a por lo menos 200 "Newsgroups"(Hay miles de estos en todo el mundo). Ningún truco, eso fue todo. La gran diferencia entre este sistema y otros es que Ud. tiene una lista de 6 en vez de 5... Esto significa que su promedio de ganancia será aproximadamente 15 veces mayor!!! Después de pensarlo una y otra vez, y consultar con unos amigos primero, decidí probarlo. Pensé que lo único que podría perder eran 6 estampillas y $6.00, verdad?. Como probablemente muchos de nosotros, estaba un poco preocupado por la legalidad de todo esto. Entonces consulté en las oficinas del Correo Central y me confirmaron que en realidad era legal!! . Entonces invertí mis $6.00......IMAGÍNENSE QUÉ!!!...a los 7 días, empecé a recibir dinero por correo!!!. Estaba sorprendido! todavía pensaba esto terminará enseguida, y no pensé más en otra cosa. Pero el dinero seguía llegando. En mi primera semana hice unos $20.00 a $30.00 dólares. Para el final de la segunda semana tenia hecho un total de más de $1,000.00!!!!! En la tercera semana recibí más de $10,000.00 y todavía seguía llegando más. Esta es mi cuarta semana ya hice un total de más de $41,000.00 y esto sigue llegando más rápidamente(mi esposa e hijos se pasan abriendo los sobres y yo consiguiendo "Newsgroups"). Esto se puso serio!!!! Todo esto realmente valió la inversión de $6.00 y 6 estampillas. Me gastaba más que esto en sorteos y loterías!! Permítanme explicarles como funciona esto y lo más importante el por qué funciona....también, Ud. asegúrese de imprimir una copia de este artículo AHORA, para poder sacar toda la información a medida que lo necesite. El proceso es muy fácil y consiste en 3 pasos sencillos: PASO No. 1: Obtenga 6 hojas de papel y escriba en cada una de ellas: "FAVOR DE INCLUIRME EN SU LISTA DE CORRESPONDENCIA O E-MAIL". Ahora consiga 6 billetes de US$1.00 dólar e introduzca cada dólar en un sobre con la hoja de manera que el billete no se vea a través del sobre!! Mejor ponerlo encerrado en un papel de color oscuro para prevenir robos de correspondencia. **OPCIONAL: Mande una tarjeta postal de su ciudad o país. Ahora Ud. debería tener 6 sobres sellados y en ellos un papel con la frase mencionada, su nombre y dirección, y un billete de $1.00 dólar. Lo que Ud. esta haciendo con esto es crear un "servicio" y eso hace que esto sea ABSOLUTAMENTE LEGAL!! Enviar los 6 sobres a las siguientes direcciones: #1 B. Spiegeleer 31 rue de la Montagne de lEsperou 75015 Paris Francia #2 C. Leyton Bulnes 737 San Bernardo, Santiago Chile #3 A. Curth Azcuenaga 1360 PB2 Buenos Aires, CF 1115 ARGENTINA #4 L Mastrogiacomo Maipú 596 1er piso Merlo (1722) Buenos Aires ARGENTINA #5 P. Oregioni Salta 662 Merlo (1722) Buenos Aires Argentina #6 A. Alvarez Chopin 149 norte Santa Lucia (5411) San Juan Argentina PASO NO. 2: Ahora elimine el #1 de la lista de arriba y mueva los otros nombres un número para arriba (el #6 se convierte en #5, el #5 se convierte en #4, Etc.) y agregue SU NOMBRE y dirección como el #6 en la lista. PASO No. 3: Cambie todo lo que crea conveniente de este artículo, pero trate de mantenerlo lo más posible cercano al original. Ahora ponga su artículo en por lo menos 200 "Newsgroups"(existen más de 24,000 grupos). Solo necesita 200, pero cuando más cantidad lo ponga, más dinero le llegará!!!. Aquí van algunas indicaciones de como introducirse en los "Newsgroups": -------------------------------------------------------------- COMO MANEJAR LOS "NEWSGROUPS" -------------------------------------------------------------- No.1> Ud. no necesita redactar de nuevo toda esta carta para hacer la suya propia. Solamente ponga su cursor al comienzo de esta carta, haga click y lo deja presionando y bájelo hasta el final de la carta y lárguelo. Toda la carta deberá estar "sombreada". Entonces, apunte y haga click en "edit" arriba de su pantalla, aquí seleccione "copy. Esto hará que toda la carta quede en la memoria de su computadora. No.2> Abra un archivo "notepad" y lleve al cursor arriba de la página en blanco. Presione "edit" y del menu seleccione "paste". Ahora tendrá esta carta en el "notepad" y podrá agregar su nombre y dirección en el lugar #6 siguiendo las instrucciones de más arriba. No.3> Grave esta carta en su nuevo archivo del notepad como un .txt file. Y cada vez que quiera cambiar algo ya lo puede hacer. ---------------------------------------------------------------- PARA LOS QUE MANEJAN COMMUNICATOR ---------------------------------------------------------------- Seleccione "message center". 1- Haga doble click sobre "News". 2- Aparecerá la ventana "Subscribe to Discussion Groups". 3-Seleccione los grupos a suscribirse. 4-Presione "suscribe". 5- Presione "OK". 6-Ahora seleccione desde "news" un servidor y mande este documento. ---------------------------------------------------------------- PARA LOS QUE MANEJAN NETSCAPE ---------------------------------------------------------------- No.4> Dentro del programa Netscape, vaya a la "ventana" titulada :Window" y seleccione "netscapeNews". Entonces elija del menu "Options", seleccione "Show all Newsgroups". En segundos una lista de todos los "Newsgroups" de su "server" aparecerá. Haga click en cualquier newsgroup. De este newsgroup haga click debajo de "TO NEWS", el cual deberia estar arriba, en el extremo izquierdo de la página de Newsgroups. Esto le llevará a la caja de mensajes. No.5> Llene este espacio. Este será el título que verán todos cuando recorran por la lista de un grupo en particular. No.6> Marque el contenido completo del .txt file y copie usando la misma técnica anterior. Regrese al Newsgroup "TO NEWS" y Ud. esta creando y empastando esta carta dentro de su programa o "posting". No.7> Presione "send" que está en la parte superior izquierda. Y UD. HA FINALIZADO CON SU PRIMERO!...CONGRATULACIONES!!! . ---------------------------------------------------------------- LOS QUE USAN INTERNET EXPLORER ---------------------------------------------------------------- PASO No. 4: Vaya al Newsgroups y seleccione "Post an Article. PASO No. 5: Carge el artículo. PASO No. 6: Repita el No.6> más arriba. PASO No. 7: Presione el botón "Post". -------------------------------------------------------- ________________________________________________________ ES TODO!. Todo lo que tiene que hacer es meterse en diferentes "Newsgroups" y empastarlos, cuando ya tenga práctica, solo le tomará unos 30 segundos por cada newsgroup! **RECUERDE, CUANTOS MÁS NEWSGROUPS CONSIGA, MÁS RESPUESTAS (Y DINERO) RECIBIRÁ!! PERO DEBE DE ENTRAR EN POR LO MENOS 200** YA ESTA!!!.... Ud. estará recibiendo dinero de todo el mundo, de lugares que ni conoce y en unos pocos días!. Eventualmente querrá rentar un P.O.Box por la cantidad de sobres que irá recibiendo. **ASEGÚRESE DE QUE TODAS LAS DIRECCIONES ESTEN CORRECTAS Ahora el POR QUÉ de todo esto: #6 - De 200 enviados, digamos que recibo solo 5 respuestas (bajísimo ejemplo). Entonces hice $5.00 con mi nombre en la posición #6 de esta carta. #5 - Ahora, cada uno de las 5 personas que ya me enviaron los $1.00 también hacen un mínimo 200 Newsgroups, cada uno con mi nombre en el #5 de la lista y solo responden 5 personas a cada uno de los 5 originales, esto hace $25.00 más que yo recibo #4 - Ahora estas 25 personas pone un mínimo de 200 Newsgroups con mi nombre en el #4 y solo se recibe 5 respuestas de cada uno. Estaría haciendo otros $125.00 adicionales. #3 - Ahora esta 125 personas ponen sus mínimo de 200 grupos con mi nombre en el #3 y solo recibe 5 respuestas cada una, yo recibo un adicional de $625.00!. #2 - OK, aquí esta la parte más divertida, cada una de estas 625 personas ponen sus cartas en otros 200 grupos con mi nombre en el #2 y cada una recibe solo 5 respuestas, esto hace que yo reciba $3,125.00!!!. #1 - Estas 3,125 personas enviarán este mensaje a un mínimo de 200 Newsgroups con mi nombre en el #1 y si solo 5 personas responden de los 200 grupos, estaré recibiendo $15,625.00!!. De una inversión original de $6.00!! más estampillas. FABULOSO! Y como dije antes, que solo 5 personas respondan muy poca, el promedio real seria 20 o 30 personas!. Asique pongamos estos números a calcular. Si solo 15 personas responden, esto hace: en la #6 $15.00 en la #5 $225.00 en la #4 $3,375.00 en la #3 $50,625.00 en la #2 $759,375.00 en la #1 $11,390,625.00 Una vez que su nombre ya no esta en la lista, saque el ultimo anuncio del Newsgroup y envíe otros $6.00 a los nombres en esa lista, poniendo su nombre en el #6 y repetir todo el proceso. Y empezar a ponerlos en los Newsgroups otra vez. Lo que debe recordar es que miles de personas más, en todo el mundo, se conectan al Internet cada día y leerán estos artículos todos los días como USTED Y YO LO HACEMOS!!!. Así que creo nadie tendría problemas en invertir $6.00 y ver si realmente esto funciona. Algunas personas llegan a pensar..."y si nadie decide contestarme?" Que!! Cuál es la chance de que esto pasé cuando hay miles y miles de personas honestas (que como nosotros) buscan una manera de tener independencia financiera y pagar cuentas!!!., y estan dispuestas a tratar, pues "No hay peor lucha de la que no se hace". Se estima que existen de 20,000 a 50.000 nuevos usuarios TODOS LOS DIAS! (en todo el mundo) ******************************************* OTRO SISTEMA PARA COMUNICARSE ES CONSIGUIENDO E-MAIL DE PERSONAS PARTICULARES, DEBE SER POR LO MENOS 200 DIRECCIONES, Y ESTO TIENE UNA EFECTIVIDAD DE MINIMO 5% AL 15%. SI SOLO BUSCAN PERSONAS QUE HABLAN ESPAÑOL, VAYAN A UN PROVEEDOR DE E-MAILS E IMPRIMAN UN APELLIDO LATINO Y YA. Recuerde de hacerlo esto en forma CORRECTA, LIMPIA Y HONESTAMENTE y funcionará con toda seguridad. Solamente tiene que ser honesto. Asegúrese de imprimir este artículo AHORA, Trate de mantener la lista de todos los que les envían dinero y siempre fíjese en los Newsgroups y vea si todos están participando limpiamente. Recuerde, HONESTIDAD ES EL MEJOR MÉTODO. No se necesita hacer trucos con la idea básica de hacer dinero en esto! BENDICIONES PARA TODOS, y suerte, juguemos limpio y aprovechar esta hermosa oportunidad de hacer toneladas de dinero con el Internet. **Dicho sea de paso, si Ud. defrauda a las personas poniendo mensajescon su nombre y no envía ningún dinero a los demás en esa lista, Ud. recibirá casi NADA!. He conversado con personas que conocieron personas que hicieron eso y solo llegaron a colectar unos $150.00, y eso después de unas 7 semanas!. Algunos decidieron probar otra vez, haciendo correctamente, y en 4 a 5 semanas recibieron más de $10.000. Esto es la más limpia y honesta manera de compartir fortuna que yo jamás haya visto, sin costarnos mucho excepto un poco de tiempo. El TIEMPO ES IMPORTANTE!, no dejar pasar más de 7 días del momento que vea este artículo!. También puede conseguir lista de E-MAIL para obtener dinero extra. Sigamos todos las reglas del negocio! Recuerde mencionar estas ganancias extras en sus declaraciones de impuestos. Gracias otra vez y BENDICIONES A TODOS!! [View Less]

1 0

Re: ULotD? Cuban Tattoos.
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Resent-Date: Tue, 27 Jan 1998 14:54:29 -0500 X-Authentication-Warning: qnx.com: localhost [127.0.0.1] didn't use HELO protocol To: 0xdeadbeef(a)substance.abuse.blackdown.org Cc: bostic(a)bsdi.com Subject: Re: ULotD? Cuban Tattoos. Date: Tue, 27 Jan 1998 13:41:24 -0500 From: glen mccready <glen(a)qnx.com> Resent-From: 0xdeadbeef(a)substance.abuse.blackdown.org X-Mailing-List: <0xdeadbeef(a)substance.abuse.blackdown.org> archive/latest/2674 X-Loop: … [View More]

3 2

Kooks and their Kookies
by ichudov＠Algebra.COM 17 Dec '03

17 Dec '03

I have just looked into my cookies file, and noticed an interesting kookie (pun intended): www.netscum.net FALSE / FALSE 123456789 visited the%20Home%20Page%2c%20Name%20Q.%20Deleted (Name Deleted is the name of one of the well known USENET personaes, and there is a number instead of 123456789). This is really interesting. If netscum.net ever comes up again, do not view it except through the anonymizer or the crowds, and filter out the kooks' kookies. - Igor.

2 1

FC: Getting caught on the Net, by Rebecca Eisenberg
by Declan McCullagh 17 Dec '03

17 Dec '03

>X-POP3-Rcpt: declan(a)relay.pathfinder.com >Date: Tue, 27 Jan 1998 16:10:15 -0800 (PST) >From: Declan McCullagh <declan(a)well.com> >To: politech(a)vorlon.mit.edu >Subject: FC: Getting caught on the Net, by Rebecca Eisenberg >MIME-Version: 1.0 >Sender: owner-politech(a)vorlon.mit.edu >Reply-To: declan(a)well.com >X-Loop: politech(a)vorlon.mit.edu >X-URL: Politech is at http://www.well.com/~declan/politech/ > >********** > >http://www.examiner.… [View More]com/skink/skinkJan25.html > >San Francisco Examiner -- Net Skink > >Jan 25, 1998 >Getting caught on the Net > >A wave of shock has washed over the Net population in the >past two weeks. What you write on the Internet, people >realized, can actually get you fired. > >First came the news that Timothy McVeigh, not the bomber >but a 17-year Navy veteran and crew chief on a nuclear >submarine, was recommended for honorable discharge by the >Navy for describing himself as gay on his AOL profile. > >[...] > >For better or for worse, there is not much privacy on-line. >That is the benefit of free expression -- the free >expression we won when the Supreme Court overturned the >overly broad and unconstitutional Communications Decency >Act. However, freedom of expression does not come with a >guarantee that everyone will like what you say. > >"Privacy is not a right, but a preference," writes Declan >McCullagh, 26, Internet expert and journalist in >Washington, D.C. "Some people want it more than others." >Although we are protected from intrusions by the >government, the free exchange of information between >private parties drives the marketplace and the media. > >"The best solution to harmful disclosures is to avoid them >in the first place. Patronize banks, hardware stores and >Internet providers with strong privacy policies," McCullagh >says. "Privacy advocates who call for new government powers >are missing the point. The government intrudes more on our >privacy than corporations ever can. > >"On a more practical note," he continues, "technological >solutions are the only ones that have half a chance of >working globally. Maybe after years of lobbying, you get a >privacy law passed in the U.S., but the Web site you want >to shut down moves to Anguilla 30 minutes later." > >[...] > > > >-------------------------------------------------------------------------- >POLITECH -- the moderated mailing list of politics and technology >To subscribe: send a message to majordomo(a)vorlon.mit.edu with this text: >subscribe politech >More information is at http://www.well.com/~declan/politech/ >-------------------------------------------------------------------------- > [View Less]

1 0

No Subject
by Zooko Journeyman 17 Dec '03

17 Dec '03

(A letter to Andy Patrizio of TechWeb, www.techweb.com, Cc: to cypherpunks(a)toad.com, malda(a)slashdot.org and gnu(a)gnu.org. May I remind the audience to use the technique which will benefit your goals rather than harm them: politeness.) Sir, I beg to differ regarding your assertion in "http://www.techweb.com/wire/story/TWB19980126S0015" that open source code has little value. While your article makes the very good point that a higher level of abstraction (the API level) is a better … [View More]platform for most "interoperation" or "extension" uses, you omit several important considerations. I will attempt to describe three of those considerations here. The first consideraton is that open source code is of unparalleled value in ensuring security and stability of a complex system. Witness the fact that when the Pentium "F00F" bug was discovered last year, the Linux operating system had a fix distributed within 7 calendar days, while Microsoft took more than twice as long to issue a fix. This is doubly important for mission-critical systems and triply so for security-critical systems which may be subject to hostile attack. Indeed, many computer security professionals of my acquaintance say that they _will_ _not_ use a system to protect valuable data unless they and their peers are able to examine the source code. The second consideration is that an open software development model can (sometimes) generate a surprising amount of quality code at high speed. The pre-eminent example of this phenomenon is the Linux operating system, which in many ways has outstripped comparable proprietary operating systems in performance, features, stability, _and_ in time-to-market. The third value in open source code is more controversial-- it gives your users more control over the product. An all-too- common business tactic in the software industry is, as Scott McNealy calls it, "proprietary lock-in", in which a company deliberately makes their product incompatible with competing products in order to ensure that the customer can't use that product in conjunction with a competitor's product. With the current trend towards a convergence of interoperating software products, this tactic is becoming increasingly oppressive to customers. This tactic is not possible with open source code, because competitors, customers, or free-lance hackers can use the open source in order to make the two products interoperable. Needless to say, not all in the business community would consider this last feature to be a benefit. (Although I think that all in the business community would consider the first two features to be a benefit.) I hope that this letter has been of interest to you. I have been a software developer, industry-watcher, and open-source- code enthusiast for years, and I was grieved to think that your article might deter open-minded readers from considering the full implications of an open source code strategy. The idea of open source code has been a "fringe" concept for decades (see seminal open-source advocate and hacker Richard Stallman, www.fsf.org) and I'm delighted to think that with Netscape's move, and with the rumored possibility that Sun will open some of its Java source, that this idea could finally get a fair hearing before the business community. Regards, Zooko, Journeyman Hacker P.S. Among software professionals that I know, the only ones who make USD 100K/year or more are the ones who consider themselves to be "hackers". :-) [View Less]

1 0

Re: State of the Union Address
by Anonymous 17 Dec '03

17 Dec '03

>Does anyone happen to know how to figure the energy requirements or yields >for a reaction? Just to make sure I'm not misinterpreted, I mean how much energy is required or is liberated by a given reaction. I don't mean "...figure the energy, requirements, or yields," or "figure the energy requirements or products it yields."

5 4