December 2003 - cypherpunks-legacy

Latest in Factoring
by Alan Tu 17 Dec '03

17 Dec '03

Jeff Lawrence wrote: >>>>> Well, my opinion is only one of many, but I just finished installing PGP 5.5 and it allows both RSA keys (max of 2048) as well as DS/DHH keys (max of 4096). Most keys I'm seeing these days are running at 2048, so 1024 could be considered as "below average". Just my $0.02 <<<<< First, I do have a 2048 RSA key I generated with 2.6.3ix, but its in hibernation and not on a key server, yet. (g) Second, what is 5.5 compared to 5.0? Let alone 5.5.3 as displayed in your key block? Third, I think its arrogant that PGP Inc. (and many many other software companies) have left dos/win 3.x users behind. The people, like me, who still use DOS/Win 3.x obviously like it, not to mention people not in the USA. Then, because of the lack of conventional encryption, and other options not in pgp 5.0 (I don't know about 5.5), and because its not freeware (freeware doesn't fully support RSA), people on the Internet had reached the concensus that they weren't going to stop using pgp 2.6.xxxx. When I complained about 5.0, one person asked me if my 2.6.3ix version had stopped working. Anyway, I think that PGP Inc. should release a version of PGP for DOS that lets you generate longer keys, be it RSA or otherwise. Finally, there are a lot of people in other countries (where PGP has spread as widely as in the US, if not more so) who are not compatible with Win95 users using PGP 5.0 freeware. --Alan Tu Type Bits/KeyID Date User ID pub 1024/E5D915E1 1997/04/27 Alan Tu <atu5713(a)compuserve.com> Alan Tu <102534.2165(a)compuserve.com> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i Comment: Requires PGP version 2.6 or later. mQCNAzNivkwAAAEEALdGUXD3j+RioIirVG46N6LaGD3YMMVVT5Mjwr5JojQsDICy 856I06Ugo/Fqid2A/os7v/gwE+Sj/WhMERgTsTejUZtsucTpS9sae+cc27Fjjq1l hOnqcLZqnHDDNyn3+jesVFPLnRlSoHbmcBK1XDW/SJT1anZz55ezmBrl2RXhAAUR tCBBbGFuIFR1IDxhdHU1NzEzQGNvbXB1c2VydmUuY29tPokAlQIFEDOguk6Xs5ga 5dkV4QEBBF8D/1B0ePqlMavWEUMP0uTmyvWFI7jooAcih6uHZFo2u+u3EzE2Is8X EoLHg39DhjleTHPu6TnGsWIiwDYEslzYeVw/Cglx6eliYIr/qs7peEywuhtZsEFH ln6yR9IE6rX3b3GCvPSQ5uPhXWrd2kWaZvG4rQ4Oj1m3yTrFaPRqCBPvtCRBbGFu IFR1IDwxMDI1MzQuMjE2NUBjb21wdXNlcnZlLmNvbT6JAJUDBRAzyUJWl7OYGuXZ FeEBAc4TBACT8gLtyE0C8NBGs9aDa9kHfeNzN8VbNfUpoOiWi4duAAZFiAt/e+ji J2BUMLIY8kzm2WX4mVzpKYjvea5TtHeQgbESV1HVZ5k7abENMUYz5nSMloOE+bb+ XRzgGgFF3htGXDJNywlLNgoYi5vTMT0pbGlCzOu215Cc4mFls2w1iA== =CM85 -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: Guy Polis is a pedophile
by Information Security 17 Dec '03

17 Dec '03

Heh-heh-heh: it's so funny so see how high Dimitry jumps when he sees people being made aware of his body of work. > From: dlv(a)bwalk.dm.com > > I have perfected sucking my own cock! Call me for a video! Oh, Dimitry, we already know you are in love with yourself. ---guy And what a pathetic Net researcher... ;-)

1 0

Software Reverse Engineering
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Hi All - I've recently been disassembling some software written by idiots who never heard of operating systems other than messy-windows, so that I can re-implement it on my favorite platform (and fix numerous bugs). I know many of you have done work in this area so maybe you can give me a few tips. I ran the program and traced its execution, which quickly showed what parts were significant, and it's pretty easy to figure out what the relevant functions are and what they do. I was able to recompile sections of the code into my own program and make it work without too much difficulty. What is bugging me is this: The program contains huge amounts of 'junk code' such as the following (disassembled with gdb): movl 0x7c58c,%eax movl %eax,0xffffffa8(%ebp) movl 0xffffffa8(%ebp),%eax movl %eax,0x7c590 movl 0x7c590,%eax movl %eax,0xffffffa8(%ebp) movl 0xffffffa8(%ebp),%edx This segment of code accomplishes nothing execpt to move the same value around into different locations, which are never again read. At least half of the instructions consist of similiar garbage, writing data into locations that are never read, duplicating constants, copying values that are never used, and so on. The only thing saving the program from running out of memory is that the programmer mostly used static buffers, only sparingly doing dynamic allocation. I'm quite surprised that I haven't found any buffer overruns or security holes yet. So, does anyone have reccomendations of what is the best way to seperate the wheat from the chaff, so to speak? I can use the program as is, but the sheer amount of junk tends to make it run slowly, so I'd much prefer to completely rewrite it.

1 0

Re: GNU market penetration... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: Re: GNU market penetration... > Date: Sun, 8 Feb 1998 14:43:51 -0600 (CST) > From: ichudov(a)algebra.com (Igor Chudov @ home) > Jim Choate wrote: > > I have a question, after going to the GNU homepage (www.gnu.org) I have not > > been able to find out the numbers of how many if any corporate subscribers > > and participants to the GNU Foundation. Is there anyone out there who might > > have a pointer to this information, or better yet is an actual participant > > in the GNU heirarchy and can discuss these and related issues? > > The number of subscribers bears almost no relation to the number of users. Here is what I am thinking... - commercial success at larger commercial enterprises can be seen by looking at their gross orders of software. Consider that if a company decides they want to use Win95 and WinNT for their systems. Are they going to buy them one at a time? No, they are going to purchase either large quantities or site licenses. - Since GPL doesn't really support site licenses in the normal sense they won't be there to look at. In other words the total number of site licenses from corporations for software is a measure of its penetration. - Since GPL doesn't prohibit buying one copy and then making as many subsequent copies as you desire it is not likely that a given company is going to buy great quantities of GPL'ed software. What they'll do is have each department, through their own budget disbursement and orders, purchase such software as required. So we can expect to see one or more, but relatively few overall, purchases of software. Since this does not seem, to me anyway, to allow for a differentiation between one hacker purchasing the software in a comany or an entire department this also will not be a clear indication of penetration. - Large companies faced with the above situations and having committed to the continued survival of those sources of software will want to create a situation where they minimize their need to keep re-ordering software as its needed (expensive in people and process time) the reasonable thing is to subscribe for annual terms or similar programs. What I would like to know is what is the percentage of subscriptions by companies in regards to the total number of subscriptions of GNU software. I couldn't find any way to get this info on the www.gnu.org page. Since the question is at what point is current penetration of Linux into commercial entities as a standard business environment this seemed relevant. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Cypherpunks share cookies
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

I've updated the cookie-sharing page at: http://www.geocities.com/CapeCanaveral/Hangar/6354/cookies.html Please share your cookies! I'm having a bit of a problem with the cookie from Firefly.com and other sites that use their passport software (parts of barnes&noble, quitnet.org, mylaunch.com, filmfinder.com, etc). After a log in (as cypherpunks:cypherpunks, naturally), the server sends a FIREFLYTICKETV3 cookie which appears to contain the username and a timestamp. After about 24 hours the cookie expires and one has to log in again. If someone can set the expiration date far in the future, I'll add the cookie to the shared cookie list; otherwise they're useless. Here's a sequence of "firefly ticket" cookies over a few days: FIREFLYTICKETV3=WWKKILVVLLXVbVHKOHSNMH_\SVIHHHEGIIWRWUFIJI WWKKILVVLLXVbVHKOHSNMH_\SVGHJHLGMISRUUNIGI WWKKILVVLLXVbVHKOHTNFHa\WVHHGHKGFISRYUOILI WWKKILVVLLXVbVHKOHTNFHa\WVHHHHEGOIVR[UKIII WWKKILVVLLXVbVHKOHTNFHa\WVHHHHFGIIXRZUKIOI WWKKILVVLLXVbVHKOHTNFHa\WVHHGHKGFISRYUOILI WWKKILVVLLXVbVHKOHTNFHa\WVHHHHEGOIVR[UKIII WWKKILVVLLXVbVHKOHTNFHa\WVHHHHFGIIXRZUKIOI WWKKILVVLLXVbVHKOHTNFHa\WVJHGHEGJITRUUNIMI WWKKILVVLLXVbVHKOHTNFHa\XVEHLHJGKIXRRUNIHI WWKKILVVLLXVbVHKOHTNFHa\XVEHLHKGJIVRUUKIMI ^^^^^^ ********** The expiration is triggered by the piece I marked ^^^. Munging the end of the cookie (marked ***) doesn't seem to invalidate the cookie. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

MSDNFlash, Volume 2, Number 3, February 9, 1998
by MSDNFlash Editor 17 Dec '03

17 Dec '03

*** MSDN Flash *** A Twice-Monthly Newsletter for the Microsoft Developer Community Visit us today on the World Wide Web at: http://www.microsoft.com/msdn/ In this issue: PRODUCT AND TECHNOLOGY NEWS *Customers Choose Visual Studio *VBA PowerTools *New MSDN Online Feature - HelpDesk Code Sample *Dr. GUI on COM *XML-Data Submission to the W3C *Visual FoxPro Migration Sourcebook CD RESOURCES *MSDN Subscription January Release *Chat About MSDN Subscription *MSDN Online Member Downloads *New Chapter from Microsoft Mastering Series *Download Windows CE 2.0 Platform SDK *MSDN Online Membership Kit *J/Direct Jump Start Reviewers Guide *Learn Visual Basic Scripting Edition Now EVENTS *Windows DNA Development Lab *XML Conference *VBITS *Windows CE Developer Conference *Visual C++ Developer Conference *Visual J++ Developer Conference *Visual Foxpro Devcon 98 *Microsoft TechEd *Developer Events - United States *Developer Events - Europe MSDN FLASH TIP OF THE WEEK *Visual J++ Developer's Journal ================================================= PRODUCT AND TECHNOLOGY NEWS ================================================= CUSTOMERS CHOOSE VISUAL STUDIO Microsoft Visual Studio 97 is being widely adopted by enterprise customers, partners, and solution providers for building mission-critical business applications addressing a wide variety of scenarios and architectural challenges. Visit http://www.microsoft.com/vstudio/ to read case studies and customer testimonials. VBA POWERTOOLS If you're learning how to build VBA components for applications such as Word or Excel, the new VBA PowerTools series offers add-ins to install and examine, like a popup thesaurus. Download a dozen of them from http://www.microsoft.com/vba/vbapowertools.htm NEW MSDN ONLINE FEATURE - HELPDESK CODE SAMPLE Check out the new MSDN Feature package this month-the HelpDesk, an extensive sample intranet application with 24,000 lines of source code. Find out more about the package at http://www.microsoft.com/msdn/news/feature/020298/default.htm DR. GUI ON COM Check out Dr. GUI's COM column-a step-by-step, week-by-week guide to learning about components, COM and the Active Template Library. Visit http://www.microsoft.com/news/drgui/020298.htm XML-DATA SUBMISSION TO THE W3C The W3C acknowledged the XML-Data submission from Microsoft, ArborText, DataChannel and Inso. The joint submission outlines a richer method for describing and validating data - the goal is to make XML more powerful for integrating data from multiple, disparate sources, and building 3-tier web applications. The submission is available for public review from http://www.microsoft.com/standards/xml/ VISUAL FOXPRO MIGRATION SOURCEBOOK CD This free interactive guide is designed to make upgrading to Visual FoxPro 5.0 easier, addressing the two biggest concerns developers have when upgrading: The learning curve and the operating system. There is plenty of in-depth information on everything from Visual FoxPro's features to using Visual FoxPro to build client/server and Internet applications. For ordering information visit http://www.microsoft.com/vfoxpro/ ================================================= RESOURCES ================================================= MSDN SUBSCRIPTION JANUARY RELEASE The MSDN Subscription January Shipment includes Windows 98 beta 3, Windows NT® Option Pack 4.0, Windows NT DDK (for Windows NT Workstation 5.0 beta 1, Microsoft SQL Server Enterprise Edition, and Visual Studio Service Packs (Alpha). For complete interim details or a full listing of all MSDN subscription components, visit http://www.microsoft.com/msdn/services/subscription/index/ CHAT ABOUT MSDN SUBSCRIPTION Join us for a discussion about MSDN Subscriptions on Tuesday, February 17. 11:00 am - noon, PST. Chat about Library content, quarterly and interim shipments, licensing, and other subscriber benefits. If you can't make the chat but have a great question, please submit it to msdn(a)microsoft.com with "MSDN Chat" as the subject line. We'll post a transcript two days after the chat. For more information visit http://www.microsoft.com/msdn/newsgroups/chats.htm MSDN ONLINE MEMBER DOWNLOADS Check out this week's free downloads for Online Members: TeeChart Pro ActiveX from TeeMach is a charting and graphing ActiveX control. Also try Soffront TRACK - a customizable defect-tracking and technical-support database. For more information visit http://www.microsoft.com/windowsce/developer/download/ NEW CHAPTER FROM MICROSOFT MASTERING SERIES This month check out Creating ActiveX Code Components, Chapter 7 from Mastering Microsoft Visual Basic 5. Gain the skills you need to become an expert in database programming and ActiveX component creation. Available online and as a download. For more information visit http://www.microsoft.com/msdn/training/mastering.htm DOWNLOAD MICROSOFT WINDOWS CE 2.0 PLATFORM SDK If you're developing for Windows CE 2.0 you'll want to download the Windows CE 2.0 platform SDK. Visit http://www.microsoft.com/windowsce/developer/download/ for more information. MSDN ONLINE MEMBERSHIP KIT Sign up now to get your MSDN Online Membership Kit. Members in the US and Canada will start receiving the kit in February. The kit includes the Component Source CD, which includes 500 ActiveX controls and over 1200 software components and tools, including products from APEX Software Corporation, Distinct Corporation, Phantom Reality, and Spatial Technology. It also features discounts on books and magazines including PC Magazine, Microsoft Systems Journal, Inside Visual Basic, Computer Shopper, Visual J++ Developer's Journal, and featured books from Wrox Press and Microsoft Press. Not to mention rebates on MSDN Professional and Universal subscriptions. For more information visit http://www.microsoft.com/msdn/join/ J/DIRECT JUMPSTART REVIEWERS GUIDE The J/Direct Jumpstart Reviewers Guide discusses developing powerful Windows applications in Java. This guide provides introductory information on both J/Direct and J/Direct Jumpstart, including a description of the code samples and other materials designed to help familiarize developers with the basic concepts of programming with J/Direct. For more information visit http://www.microsoft.com/visualj/ LEARN MICROSOFT VISUAL BASIC SCRIPTING EDITION NOW Check out this sample chapter from the Microsoft Press book, LEARN MICROSOFT VISUAL BASIC SCRIPTING EDITION NOW, which explains the basics of the VB scripting language. Visit http://mspress.microsoft.com/prod/books/sampchap/364.htm ================================================= EVENTS ================================================= MICROSOFT DNA DEVELOPMENT LAB A DNA Development Lab has been established for teams needing assistance in moving their applications to Internet architectures. Corporate development teams can bring their projects into the Lab, an intensive 5-day knowledge-transfer "boot camp", and get assistance in architecting and implementing their solutions. The lab is a partnership between Microsoft, CoreTech Consulting Group and Hewlett Packard. This environment is ideal for proof-of-concept, porting, and startup projects. More information is available at http://www.coretech-group.com and http://www.microsoft.com/usa/mid-atlantic/ XML CONFERENCE March 23-27, Seattle, WA XML, eXtensible Markup Language, describes structured data and delivers the data the way you want it. Come to XML the Conference, and select from the Business, Technical, E-Commerce, Print Media, and Content Management Tracks. See tools that support XML today and those planned for tomorrow. For registration and additional information visit http://www.gca.org/ VBITS SAN FRANCISCO '98 March 23-27, San Francisco, CA VBITS brings Microsoft and independent speakers together to give in-depth, hands-on training on topics ranging from multithreading applications and servers, to leveraging component-based solutions to the Internet or intranet, to deploying N-tier Client/Server apps with MTS. Visit http://www.windx.com/vbits/ for more information. REGISTER NOW FOR THE WINDOWS CE DEVELOPERS CONFERENCE April 5-8, San Jose, CA In-depth technical sessions will teach you all you need to know about the latest advances in Windows CE-based devices. Anyone writing software for Windows 95 or Windows NT will want to come hear how they can leverage their existing Win32 skills into this area. Attendees will receive a complimentary Palm PC - so you can start developing cool applications right away. For more information or to register visit http://www.microsoft.com/events/windowsce/ MICROSOFT VISUAL C++ DEVELOPER CONFERENCE IV April 15-17, Boston, MA TPD Publishing and Microsoft are holding the fourth Visual C++ Developers Conference: three days of intense technical instruction with Microsoft product gurus and third-party speakers and authors. Come learn about COM and DCOM, MFC and ATL, MTS, hardcore Visual C++, and more. For more information Visit http://www.vcdj.com/ VISUAL J++ DEVELOPER CONFERENCE April 27-30, Los Angeles, CA Informant Communications Group, Inc. and Microsoft have announced the first Microsoft Visual J++ Developer Conference and Exposition. A technical forum on advanced Java development using Microsoft Visual J++, this event features four tracks and 48 sessions. For more information visit http://www.javaconference.com/ VISUAL FOXPRO DEVCON 98 May 17-20, Orlando, FL Come learn all about Tahoe, the next version of Microsoft Visual FoxPro. Presented by MSDN and FoxPro Advisor Magazine, this is the ultimate developer conference for Visual FoxPro developers. Join thousands of professionals from around the world and be among the first to get an in-depth look at Tahoe. For more information visit the Visual FoxPro Web site at http://www.microsoft.com/vfoxpro/ MICROSOFT TECHED 98 June 1-4, New Orleans, LA This is the definitive technical conference for building complete solutions with Microsoft technologies. Register now for the event that always sells out. For more information visit http://www.microsoft.com/events/teched/ MICROSOFT TECHED EUROPE 98 7-10th July, Nice Acropolis Convention Centre, France Book Now! For more information visit http://www.eu.microsoft.com/europe/teched/ DEVELOPER EVENTS - UNITED STATES EMERGING TECHNOLOGY SERIES The Emerging Technology Series hits Missouri, Kansas, and Tennessee in February and March with a six-city tour. This free one-day seminar includes sessions on "Developing Multi-tiered Applications with Visual Studio" and "Write Once, Run Everywhere? Alternatives to Cross Platform Application Development". For more information, visit http://www.microsoft.com/stlouis/ets/ BOB AND LARRY'S DEVELOPER WORKSHOP SERIES February 12, Waltham, MA February 17, Farmington, CT Learn how to deliver solutions faster, cheaper and easier. For more information on this free monthly series or to register head to http://www.microsoft.com/usa/newengland/developer/ MICROSOFT PROFESSIONAL DEVELOPERS SUMMIT The PDS hits the West Coast in February with a seven-city tour. This one-day seminar will focus on the Windows Distributed interNet Applications Architecture and the new capabilities of the Windows platform. For more information and to register visit http://www.microsoft.com/usa/pdswest/ TURNING DATA INTO INFORMATION Learn how to leverage desktop productivity tools, Internet technologies, universal data access and SQL Server in a building framework for effective data marts at a lower cost. For more information visit http://www.microsoft.com/usa/mid-atlantic/developer/ DEVELOPER EVENTS - EUROPE MICROSOFT SQL SERVER AND UNIVERSAL DATA ACCCESS TECHNICAL CONFERENCE March 25 - 26th Paris, March 30 - 31st Stockholm, April 2 - 3rd Frankfurt, April 6 - 7th London 1998. For more information visit http://www.eu.microsoft.com/europe/msdn/events/sql/ MICROSOFT WEB SOLUTIONS DEVCON February 16, Munich February 18, Dusseldorf March 3, Frankfurt The one day 2 track technical conference will cover the development, deployment and administration of web solutions built with Microsoft technologies. A pre-conference the day before will focus on component development with either VC++, VJ++ or VB. For more information visit http://microsoft.eusoft.com ================================================= MSDN Flash TIP ================================================= BE CAREFUL WHEN COMPARING STRINGS from Visual J++ Developer's Journal Java allows you to compare two String objects, strng1 and strng2 using the following code: if(strng1 == strng2) then ... Unfortunately, the effect may not be what you want. The code above actually compares the String locations, not their text value. To compare the text values, use this: if(strng1.equals(strng2)) then ... MSDN Online Members - we have a new Tip for you each week at http://www.microsoft.com/msdn. For a free issue of Visual J++ Developer's Journal visit http://www.cobb.com/vjp/freevyer.htm To receive the Visual J++ Developer's Journal Tip of the Week in email, visit Visual J++ tip sign-up: http://www.zdtips.com/vjp/msd-f.htm ================================================= HOW TO JOIN THE MAILING LIST: You received this e-mail newsletter as a result of your registration on the Microsoft Personal Information Center. You may unsubscribe from this newsletter, or subscribe to a variety of other informative newsletters, by returning to the Personal Information Center, http://register.microsoft.com/regwiz/personalinfo.asp and changing your subscription preferences. Alternatively, please send a reply to this e-mail with the word "unsubscribe" as the first line in the body of the message. ================================================= The information provided is for informational purposes only and Microsoft Corporation and its suppliers make no warranties, either express or implied, as to the accuracy of such information or its fitness to be used for your particular purpose. The entire risk of the use of, or the results from the use of this information remains with you.

1 0

Re: rec.guns et.al. blocked by censorware
by Igor Chudov ＠ home 17 Dec '03

17 Dec '03

In rec.guns, Dan <ywq(a)wco.com> wrote: * I guess I should not be surprised but blocking software Cyber Patrol apparently * blocks rec.guns and rec.hunting because we are militant extremists, advocate * violence and swear. The whole story starts at: * http://www.spectacle.org/cwp/index.html * You have to keep going until you get to newsgroups. * * If Cyber Patrol is doing this I suspect their competition is doing so as well. * * Magnum: I know this is sort of off topic, but I believe it's important for the * group at large to know. Just fyi, I did look at the site and was astonished. Indeed anyone who uses this Cyber Patrol is a fool. Examples of HUNDREDS of blocked newsgroups: rec.games.mecha Giant robot games. (Moderated) Quest/Illegal/Gamble Violence/Profanity Intol news.groups Discussions and lists of newsgroups. Intol news.groups.questions Where can I find talk about topic X? Intol rec.guns Discussions about firearms. (Moderated) Militant/Extreme Violence/Profanity * -- * Dan - ywq(a)wco.com * I love the smell of Hoppes #9 in the morning. * Follow the Money - Who funds the election of your Congresscritter - www.opensecrets.org ---------------------------------------------------------------------------- char*p="char*p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);} \=/, _-===-_-====-_-===-_-==========-_-====-_ | @___oo ( )_ /\ /\ / (___,,,}_--= ) ) /^\) ^\/ _) =__ Anything is good and useful if ) ) /^\/ _) (_ ) ) _ / / _) ( it's made of chocolate. ) /\ )/\/ || | )_) (_ ) < > |(,,) )__) ( http://www.algebra.com/~ichudov ) || / \)___)\ (_ _) | \____( )___) )___ -==-_____-=====-_____-=====-___== \______(_______;;; __;;;

2 1

Re: rec.guns et.al. blocked by censorware
by Tim May 17 Dec '03

17 Dec '03

At 3:02 PM -0800 2/8/98, Igor Chudov @ home wrote: >In rec.guns, Dan <ywq(a)wco.com> wrote: >* I guess I should not be surprised but blocking software Cyber Patrol >apparently >* blocks rec.guns and rec.hunting because we are militant extremists, advocate >* violence and swear. The whole story starts at: >* http://www.spectacle.org/cwp/index.html >* You have to keep going until you get to newsgroups. >Examples of HUNDREDS of blocked newsgroups: > >rec.games.mecha Giant robot games. (Moderated) Quest/Illegal/Gamble >Violence/Profanity Intol >news.groups Discussions and lists of newsgroups. Intol >news.groups.questions Where can I find talk about topic X? Intol >rec.guns Discussions about firearms. (Moderated) Militant/Extreme >Violence/Profanity Interestingly, rec.guns is moderated (not that I like that), and there is virtually no profanity or discussion of anything remotely of a sexual nature. The discussion is on-topic, about revolvers, rifles, ammunition, target shooting, defense methods, etc. That the "cyber nannies" are blocking it (and other similarly nonsexual, nonprofane newsgroups) is exactly what was expected. These cyber nannies become tools for political correctness. Perhaps the strategy should be to post material to other newsgroups to get them blocked as well. (Though I expect the blocking is not being done using robots to monitor for illegal words, as rec.guns would not have been blocked this way. Rather, the cyber nannies are probably using their "PC judgment" to block groups they don't like. --Tim May Just Say No to "Big Brother Inside" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^3,021,377 | black markets, collapse of governments.

2 1

Zero Knowledge Access
by Secret Squirrel 17 Dec '03

17 Dec '03

Dumbfuck Rimjob (Dr.) Dimitri Vulis fucks apes with a spiked metal pole on the weekends and dreams of someone doing it to him. Buttfuck on, Dimitri.

1 0

re: Driver Licenses
by WebWarrior3＠InfoWar.Com 17 Dec '03

17 Dec '03

William H. Geiger III wrote: >My question is what is the best way to remove this information from the >cards? > >A few passes over a strong magnet sufficient or should a chemical solvent >be used? Either should work...I'll bet that scratching the shit off with his keys worked too ;) I'll have to remember that when it's time to get mine done. That was a good question, though, does anyone know how much data those little stripes can hold? Scott R. Brower http://www.infowar.com http://www.efflorida.org

1 0

re: Driver Licenses (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Sun, 08 Feb 1998 17:54:56 -0500 > From: "WebWarrior3(a)InfoWar.Com" <WebWarrior3(a)InfoWar.Com> > Subject: re: Driver Licenses > William H. Geiger III wrote: > >My question is what is the best way to remove this information from the > > >cards? > > > >A few passes over a strong magnet sufficient or should a chemical > solvent > >be used? > > Either should work...I'll bet that scratching the shit off with his keys > worked too ;) > I'll have to remember that when it's time to get mine done. My suggestion is not to alter the card such that a visual inspection would show. In most states it's a felony to modify or alter a drivers license, they are considered the property of the state and not yours personaly. Next time a cop asks for ID and you hand him your d.l. you could be in for a lot more than couple hundred dollars and a ticket. > That was a good question, though, does anyone know how much data those > little stripes can hold? Anywhere from a few hundred bytes to a k. Depends on the bit density of the tape. Go down to your local electronics or audio supply and get a polarized loupe and count them. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

re: Drivers Licenses
by WebWarrior3＠InfoWar.Com 17 Dec '03

17 Dec '03

>In most states it's a felony to modify or alter a drivers license, >they are considered the property of the state and not yours personaly. > >Next time a cop asks for ID and you hand him your d.l. you could be in for a >lot more than couple hundred dollars and a ticket. That's silly! I mess up my credit card strips all the time by keeping them in my pocket with keys on motorcycle rides, or in my tool belt when I used to do carpentry, or even slipping them into my money clip the wrong side out....the tape has never lasted longer than a month on any of my cards...I doubt, seriously, that a cop will harrass anyone who does not come out and say, "Yes, officer, I intentionally defaced my DL. And ya know why, Mr. Poleesse Man? Well, I'll tell ya <yadda, yadda, yadda, privacy, yadda, yadda, biometrics, yadda....>" I do agree that it is proably better to do the damage without it being noticable. Less suspicion is ALWAYS better. Best, -S

1 0

re: Drivers Licenses (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Sun, 08 Feb 1998 20:44:58 -0500 > From: "WebWarrior3(a)InfoWar.Com" <WebWarrior3(a)InfoWar.Com> > Subject: re: Drivers Licenses > That's silly! I mess up my credit card strips all the time by keeping > them in my pocket with keys on motorcycle rides, or in my tool belt when > I used to do carpentry, or even slipping them into my money clip the > wrong side out....the tape has never lasted longer than a month on any > of my cards...I doubt, seriously, that a cop will harrass anyone who > does not come out and say, "Yes, officer, I intentionally defaced my > DL. And ya know why, Mr. Poleesse Man? Well, I'll tell ya <yadda, > yadda, yadda, privacy, yadda, yadda, biometrics, yadda....>" > > I do agree that it is proably better to do the damage without it being > noticable. Less suspicion is ALWAYS better. Well I just looked at my Tx. d.l. to make shure my memory was correct. At least on Texas d.l's the *only* way to get to the mag stripe is to break the clear plastic laminating cover. And I assure you that if that cover is broken or tampered with the officer will become much more suspicous. It has this nifty little seal embossed all over the laminating cover on both sides. So going down to the local laminating shop won't work either. Proceed at your own risk, it's your neck after all. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Re: re: Driver Licenses (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 9 Feb 1998 04:22:54 +0100 (MET) > Subject: Re: re: Driver Licenses (fwd) > From: nobody(a)REPLAY.COM (Anonymous) > "Yeah, officer, I dropped my ID in the street and it got run over. Don't > give me such a hard time about it, I'm just glad I got it back..." > I really doubt you are going to get convicted for accidently dropping your > wallet because your ID got scraped up a little bit on the back side. See a previous post I submitted earlier in this regards... > Seriously, the best way is a strong magnet. You can also put it in your > shirt pocket and iron it, then apply a strong magnet. The heat will make > it lose its magnetism more quickly; just make shure you don't melt it. :) The 'Currie Point' (the point a magnetic material looses its magnetic behaviour) for Iron Oxide is 600F so I rather doubt your home clothing iron will significantly effect it. The plastic that the license is made of will melt at about 250 - 300. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

re: Drivers Licenses (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: "William H. Geiger III" <whgiii(a)invweb.net> > Date: Sun, 08 Feb 98 21:25:30 -0500 > Subject: re: Drivers Licenses (fwd) > A couple of times through the washer and dryer and that lamination > seperates. Any cop that has worked traffic has seen plenty of DL's in this > shape (heh should have seen my old DL when I truned it in to get it > renewed <g>). I rather doubt that. I have had a Texas drivers license since I was 16, I'm now 38. I have washed them innumerable times and I have never had the lamination break or otherwise degrade. The lamination is quite heavy. I did have one crack at the seam one time because of a bad lamination and was specificaly instructed by the officer who wrote me a speeding ticket to get it replaced. I did so immediately. The law here is that if the license is damaged, you move, or otherwise make the information invalid you have 30 days to correct it. I suspect quite strongly that had I shown up at the court house to pay that ticket with the same damaged license (required to be shown at the time of payment) they would not have accepted the payment and might have asked to to discuss the situation with one of the officers they so thoughtfuly have placed about the room. Texas takes counterfeiting of licenses quite seriously. My suggestion would be don't try such juvenile tricks here, the DPS have seen it before and won't be pleasant people to deal with unless you're a juvenile. I have a proposal. Lucky is supposed to be in Austin for the CFP conference. If he is agreeable, he could ask to examine a Tx. d.l. We could leave it up to his opinion as to whether these would be easy to alter. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

No Subject
by Anonymous 17 Dec '03

17 Dec '03

>Odd. When I first got a card with the stripe, I was a little paranoid so >I took a bar magnet and erased it. Actually, I don't know whether my >eraser worked because nobody has ever asked to swipe my card thru a >reader. I got a wallet with a plastic fold-out so if someone asks to see >my id, I open my wallet and show it to them, then put it away. How many of us have done this? I nuked mine in the parking lot of the DMV.

3 2

Re: Soft Tempest
by Ryan Lackey 17 Dec '03

17 Dec '03

Anyone interested in working on this for linux? It should be fairly trivial to modify the linux console drivers, disk driver, and possibly keyboard driver to take these changes into account. At the same time, it might be nice to add the permanence counters for RAM and magnetic media. I'm a bit busy until at least after FC '98, or I'd do it myself. One of my goals is to keep my laptop as secure as possible, and that's an application where TEMPEST shielding is rather prohibitive. -- Ryan Lackey rdl(a)mit.edu http://mit.edu/rdl/

6 8

Laptop TEMPEST
by Jim Choate 17 Dec '03

17 Dec '03

Hi, Doesn't the FCC have to test the RF emissions of all laptops as well as monitors for sale as Class A and Class B in the US? Shouldn't that material be available? I searched the main site, www.fcc.gov, but didn't find anything regarding this. I sent a request for instructions on how to obtain the emissions test results on computer monitors and laptops for commercial and non-commercial use, foia(a)fcc.gov. If anyone actualy knows of the location I would be much obliged if you would pass it along. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

time to learn chinese?
by Adam Back 17 Dec '03

17 Dec '03

Listened to an analyst on the radio expressing view that towards 2010 China will be leading world economic power. Anyway interesting was that the analyst expressed that in her view China was keen to avoid the mistakes of the socialist welfare state as market liberalization and prosperity grew. She considered the burden of a welfare state to be a large burden which would mean that China would outstrip growth in the west. Also she stated that she thought democracy was in decline. When interviewed asked about human rights, she opined that these would improve as the market became freer. She stated that China hopes to bypass democracy going straight to free market. China may be interesting in a few more decades... Adam

2 2

Re: Laptop TEMPEST
by Ryan Lackey 17 Dec '03

17 Dec '03

FCC RF/EMC testing is well nigh useless for TEMPEST protection. Compliance engineering firms have some equipment which might be useful for TEMPEST experimentation, but the actual specs for Class B (Class A is basically anything that won't kill you) are pretty worthless for this application. I imagine there may be some other "dual use" technologies through for testing TEMPEST equipment. Perhaps some medical equipment has stringent stray emanation specs? I believe the equipment you'd really want is the real "TS" (technical surveillance) gear, which is 1) not available on the open market and 2) expensive. The paper seems to have involved an AM radio and an obsolete piece of British TS kit; van Eck used a modified TV. Any HAM could probably build a suitable receiver, the real problem is knowing how much attenuation is necessary to defeat the real TS gear. This is why I am fundamentally impressed by the obfuscation techniques from the paper, rather than just straight shielding. -- Ryan Lackey rdl(a)mit.edu http://mit.edu/rdl/

1 0

re: Drivers Licenses
by Anonymous 17 Dec '03

17 Dec '03

Jim Choate wrote: >> From: "William H. Geiger III" <whgiii(a)invweb.net> >> >> A couple of times through the washer and dryer and that >> lamination seperates. Any cop that has worked traffic >> has seen plenty of DL's in this shape (heh should have >> seen my old DL when I truned it in to get it renewed <g>). > > I rather doubt that. I have had a Texas drivers license > since I was 16, I'm now 38. I have washed them innumerable > times and I have never had the lamination break or > otherwise degrade. The lamination is quite heavy. I did > have one crack at the seam one time because of a bad > lamination and was specificaly instructed by the officer > who wrote me a speeding ticket to get it replaced. I did > so immediately. "Yes SIR!" > The law here is that if the license is damaged, you move, > or otherwise make the information invalid you have 30 > days to correct it. "Yes SIR!" > I suspect quite strongly that had I shown up at the > court house to pay that ticket with the same damaged > license (required to be shown at the time of payment) > they would not have accepted the payment and might have > asked to to discuss the situation with one of the > officers they so thoughtfuly have placed about the room. "Yes SIR!" > Texas takes counterfeiting of licenses quite seriously. "Yes SIR!" > My suggestion would be don't try such juvenile tricks here, "No, SIR!" > the DPS have seen it before "Yes SIR!" > and won't be pleasant people to deal with unless you're > a juvenile. "No SIR!" This is one of the things I love so about Texas and Texans. Despite inexplicable rumors and propaganda about independence and rugged frontier indivuality, Texans are as fucking obedient to authority as the most lock-stepped fucking Germans. The People's Republic of Texas is on the leading edge of Big Brother statism. Sales tax fully as high as New York's, fingerprints at driver license renewal time, roadblocks to fish for people who have been indulging in adult beverages or who have outstanding warrants, and some of the most dumb-fuck, clueless, fuckwit people behind badges in the known universe. Texans will give anyone their SS number at any time for any reason. Many print it on their checks. Texas is without doubt the Rube State. The only reason it isn't on the bleeding foreskin of Big Brother technology is that there aren't enough clues in the state to rub together to make a spark. When you run into anyone halfway sharp or better in Texas, it's a cinch they are a refugee from the unforgiving North.

1 0

Online Credit Card Transactions for $39.95!!
by yourfriend8950＠psynet.net 17 Dec '03

17 Dec '03

Lease to own your merchant account equipment, software, and shopping cart system for only $39.95 per month! WE GUARANTEE APPROVAL no matter what your credit status may be! The benefits include: * 2% Discount Rate * No Monthly Minimum Billing Fee * No Statement Fee if No Sales Made for the Month * Money Available in 3 Business Days * Windows-Based or Macintosh Compatible Credit Card Processing Software (Available) * Shopping Cart System To Take Orders Securely Right On-Line (Available) * Checks By Fax/Email/Phone software. Please call us at 912-236-6676 for more information. Please fill out the form below and fax to 970-927-0964. ======================================================= Merchant Account Application Legal Business Name: ____ State: __________________ DBA: ____________________ Business Address: _______ Suite: __________________ City State Zip: _________ Describe Business: ______ Business Hours: _________ Percent Mail Order: _____ Percent Phone Orders: ___ Percent Trade Show: _____ Locations: ______________ Year Started: ___________ Fed Tax ID: _____________ State Tax ID: ___________ Principal Contact: ______ Title: __________________ Phone No: _______________ Fax No: _________________ Est Card Sales Month: ___ Average Ticket: _________ Type of Business: _______ State Incorporated: _____ Age of Business: ________ Date Acquired: __________ OWNER PRINCIPAL INFORMATION: President Owner: ________ Title: __________________ Ownership: ______________ Residence Address: ______ City State Zip: _________ Own Rent: _______________ Since: __________________ Home Phone: _____________ Previous Address: _______ DOB: ____________________ CO OWNER INFORMATION: Co-Owner: _______________ Title: __________________ Percent Owned: __________ Residence Address: ______ City State Zip: _________ Since: __________________ Own Rent: _______________ BUSINESS TYPE: Type of Building: _______ Found EMS By: ___________ CREDIT INFO: Rank Your Credit: _______ Prior Bankrupt: _________ Year: ___________________ TERMINAL: Prefer PC Software or Terminal?: ___ Terms/Lease or Purchase?: __________________ REFERENCES: BUSINESS REFERENCES: (Please list three)

1 0

re: Drivers Licenses (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 9 Feb 1998 09:25:55 +0100 (CET) > From: Lucky Green <shamrock(a)cypherpunks.to> > Subject: re: Drivers Licenses (fwd) > On Sun, 8 Feb 1998, Jim Choate wrote: > > I have a proposal. Lucky is supposed to be in Austin for the CFP conference. > > If he is agreeable, he could ask to examine a Tx. d.l. We could leave it up > > to his opinion as to whether these would be easy to alter. > > Why me? Convenience. You seemed like the right person who would be in the right place with the right technical skills to ask for indipendent opinion. You obviously don't feel comfortable with it. I apologize for the intrusion. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: Driver Licenses (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 9 Feb 1998 09:00:12 +0100 (CET) > From: Lucky Green <shamrock(a)cypherpunks.to> > Subject: Re: Driver Licenses > The clerk at my local 7/11 assured me the information captured would not > be forwarded to a central site. Yet. It appears the stores are installing > these systems to protect themselves against police sting "test buys", in > which the authorities take persons just days shy of their 21st birthday, > put theater makeup and/or a gray beard and wig on them and thus entrap > store clerks into selling controlled substances to minors. > > As any fool can predict, the information captured will not remain local > for long. After all, the system is ideal for monitoring gun^H^H^H alcohol > purchases of parolees, tracking down deadbeat dads, etc. I have worked doing technical support for McDonalds in two of my past jobs. I assure you that when they dump the stores records each night they are dumping this as well. They dump gas sales from the automated machines as a matter of course. The real question is who besides Southland Corp. subsidies are they selling this info to? ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: Laptop TEMPEST (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: Re: Laptop TEMPEST > From: Ryan Lackey <rdl(a)mit.edu> > Date: 09 Feb 1998 02:34:15 -0500 > FCC RF/EMC testing is well nigh useless for TEMPEST protection. I disagree, it would give you a gross baseline on the total emissions between monitors and laptops. That field strenght measurement would at least allow you to calculate radiuses of equal strength to calculate approximately how far the emissions are from each class of device for equal probabilities of detection. One of the specific goals is to measure how effective the device is at effecting other co-located devices (such as seeing ghost images on other monitors or causing static in paging equipment). I suspect one could do it with a spectrum analyzer or a grid dip meter. > I imagine there may be some other "dual use" technologies through for > testing TEMPEST equipment. Perhaps some medical equipment has stringent > stray emanation specs? We're not trying to bring the individual vertical retraces out of the chaff...we're trying to calculate the total comparitive emission strengths. If that isn't high enough then trying to get individual componants of that field will be useless. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

EPIC World Crypto Survey
by John Young 17 Dec '03

17 Dec '03

The New York Times, February 9, 1998, p. D10: U.S. Losing Battle on Control of Data Encryption, Study Says By Jeri Clausing Washington -- The Clinton Administration is losing its battle to increase international controls over how reliably computer data can be scrambled to insure privacy, according to a report to be released Monday by an independent research group. ... The Electronic Privacy Information Center <http://www.epic.org> says that its survey of 243 governments showed that the United States is virtually the only democratic, industrialized nation seeling domestic regulation of strong encryption. That finding directly contradicts the Clinton Administration's assertions in Congressional hearings that it has the support of most nations on this issue. ... William Reinsch, the Under Secretary for export administration in the United States Commerce Department, denied that the study contradicted the Administration's assertions. "All the Administration has ever said is that there are more countries that go farther than we do," Mr. Reinsch said. "The study confirms that."

2 1

Airport security cracked by flaw [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > X-within-URL: http://www.cnn.com/TECH/computing/9802/08/security.reut/index.html > REPORT: COMPUTER DESIGN FLAW OPENS AIRPORTS TO TERRORISM > > graphic February 8, 1998 > Web posted at: 1:25 p.m. EST (1825 GMT) > > NEW YORK (Reuters) -- The computer security systems that control > access to 40 airports worldwide through electronic badges have a > design flaw that could make them vulnerable to terrorism, The New > York Times reported Sunday. > > A California computer security consulting firm, MSB Associates, > found the flaw in December in a routine audit of a large California > financial services software company, the identity of which was not > disclosed, according to the newspaper. > > Government buildings, including that of the CIA, and prisons and > industries with sensitive military, drug or financial information or > material also use the system and are also vulnerable to attack, the > Times report said. [text deleted] ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

CYBERsitter caught mail-bombing (fwd)
by Ken Williams 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 6 Feb 1998 23:25:04 -0500 From: bennett(a)peacefire.org To: peacefire-broadcast(a)vorlon.mit.edu Subject: CYBERsitter caught mail-bombing CYBERsitter has been caught in the act of mail-bombing someone who wrote a letter to Brian Milburn, the CEO of CYBERsitter, complaining about their product. Spefically, a lady names Sarah Salls sent the following letter to Brian Milburn at bmilburn(a)solidoak.com: http://peacefire.org/archives/SOS.letters/asherah.2.bm.2.4.98.txt She was writing to CYBERsitter regarding their harassment of Peacefire and their blocking of anti-censorship sites, which is described in more detail at: http://www.peacefire.org/censorware/CYBERsitter/ CYBERsitter replied by flooding her account with over 446 junk messages. While the attack was in progress, Ms. Salls had her ISP's postmaster monitor the incoming attack and shut it off. Naturally, her ISP, Valinet.com, kept copies of the mail logs for that day and has passed them on as evidence to their lawyers. A complaint was also forwarded to MCI's security department, which handles network abuse and illegal denial-of-service attacks that are perpetrated by their customers, which include lower-end network users like CYBERsitter: http://peacefire.org/archives/SOS.letters/valinet.2.mci.2.5.98.txt C-Net's NEWS.com picked up on the story and interviewed Sarah Salls, her ISP, me, and Brian Milburn from Solid Oak Software. Their story is at: http://www.news.com/News/Item/0,4,18937,00.html (Note that the C-Net article compares the act of mail flooding with conventional spam, and says that a bill is being considered in Congress that would outlaw what CYBERsitter did. This is not quite true; flooding a person's account with 500 junk messages is a denial-of-service attack, which is already illegal, and it usually gets you in a lot more trouble than spamming would.) Far from denying the accusations, Brian Milburn gave C-Net the following quote: "Certain people aren't going to get the hint. Maybe if they get the email 500 times, they'll get it through their heads... If they send it to my private email account, they're going to get what they get." No kidding, Brian! bennett(a)peacefire.org (615) 421 6284 http://www.peacefire.org/ ---

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash middle latent cut ek"; $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp pgponly hash cut ksub reord ?"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp pgponly hash latent cut ek"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"reno"} = "<middleman(a)cyberpass.net> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{"cracker"} = "<remailer(a)anon.efga.org> cpunk mix remix pgp hash ksub esub latent cut ek reord post"; $remailer{'redneck'} = '<config(a)anon.efga.org> newnym pgp'; $remailer{"bureau42"} = "<remailer(a)bureau42.ml.org> cpunk mix pgp ksub hash latent cut ek"; $remailer{"neva"} = "<remailer(a)neva.org> cpunk pgp pgponly hash cut ksub ?"; $remailer{"lcs"} = "<mix(a)anon.lcs.mit.edu> mix"; $remailer{"medusa"} = "<medusa(a)weasel.owl.de> mix middle" $remailer{"McCain"} = "<mccain(a)notatla.demon.co.uk> mix middle"; $remailer{"valdeez"} = "<valdeez(a)juno.com> cpunk pgp pgponly hash ek"; $remailer{"arrid"} = "<arrid(a)juno.com> cpunk pgp pgponly hash ek"; $remailer{"hera"} = "<goddesshera(a)juno.com> cpunk pgp pgponly hash ek"; $remailer{"htuttle"} = "<h_tuttle(a)rigel.cyberpass.net> cpunk pgp hash latent cut post ek"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix reno winsock) (weasel squirrel medusa) (cracker redneck) (nym lcs) (valdeez arrid hera) This remailer list is somewhat phooey. Go check out http://www.publius.net/rlist.html for a good one. Last update: Thu 23 Oct 97 15:48:06 PDT remailer email address history latency uptime ----------------------------------------------------------------------- hera goddesshera(a)juno.com ------------ 5:03:45 99.86% nym config(a)nym.alias.net +*#**#**### :34 95.82% redneck config(a)anon.efga.org #*##*+#**** 2:00 95.44% mix mixmaster(a)remail.obscura.com +++ ++++++* 19:18 95.27% squirrel mix(a)squirrel.owl.de -- ---+--- 2:34:19 95.16% cyber alias(a)alias.cyberpass.net *++***+ ++ 11:26 95.11% replay remailer(a)replay.com **** *** 10:06 94.93% arrid arrid(a)juno.com ----.------ 8:50:34 94.41% bureau42 remailer(a)bureau42.ml.org --------- 3:38:29 93.53% cracker remailer(a)anon.efga.org + +*+*+*+ 16:32 92.80% jam remailer(a)cypherpunks.ca + +*-++++ 24:14 92.79% winsock winsock(a)rigel.cyberpass.net -..-..---- 9:59:18 92.22% neva remailer(a)neva.org ------****+ 1:03:02 90.39% valdeez valdeez(a)juno.com 4:58:22 -36.97% reno middleman(a)cyberpass.net 1:01:28 -2.65% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

Re: the best justice money can buy --Lessig (fwd)
by mark＠unicorn.com 17 Dec '03

17 Dec '03

Jim Choate (ravage(a)ssz.com) wrote: >So do I, and I bet both our incomes combined doesn't add up to 15 minutes of >Bill G's and it won't. Of course not, because Bill has jackbooted copyright enforcers to subsidise his corporation. Without them his income would be dramatically reduced. >From a market perspective we're flies on the back of >great elephant. Please be so kind as to describe how and why this marketing >mechanism (copyleft) will succed? Uh, I said copyright should be abolished, you said noone would write software, I said that Linux disproved that claim. How is this relevant to that discussion? Of course it's not going to take over when companies can get billions of dollars of subsidies in the form of copyright enforcement, but it clearly shows that without copyright people will produce better software than Microsfot has ever written. >I've been using and supporting Linux since >1993 (SSZ is listed as a source site in the back of 'Running Linux' since >day one) in this manner neither I or anyone else has gotten rich. Exactly. So tell us how Bill would have become a billionaire without copyright? >It's copyrighted in the important sense in that it uses the copyright to >enforce its conditions. That is just as important as the marketing decisions >made by it. All it enforces is source-code distribution (and I've yet to hear of a single case where it's ever been used). That's important to the developers, but not to the average user. The situation would be little changed in a world with no copyright, because if anyone did try to keep their source secret anyone who got a copy could freely distribute it. I'm truly amazed to find all these pro-copyright views on the list, when cypherpunks have been at the forefront of creating technologies to make it unenforceable and obsolete. Mark

2 1

Eureka! Tue Feb 10 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Tuesday's issue of Eureka! EROTIC PARADISE One of the largest pay sites on the web, Erotic Paradise, has now opened its doors to FREE memberships. That's right, you can now get an entire week of hot videos, 1,000s of pix, and much, much more - and it's complely FREE. Check it out! ------> http://www.mr-cash.com/cgi-bin/gold.cgi/raw_3266/999 My Sister NAKED! FREE PIX http://205.134.162.9/sister/ I took pictures of my sister naked! EATING AT THE "Y" Creative use of webdesign. Lots of free pix. These are not your ordinary women. These are hot looking babes! Saddle on up to the bar for some real food. Snack on a brunette, dine with a blonde. Maybe food does mix with sex? Surf by. Eating at the Y ... http://207.156.223.181/they/warning.html DEVIL'S DELIGHT This is a paysite. There are three free pix however. They load fast and are high resolution. One is of a woman taking on two large cocks. Next is a hot looking blonde. Pussy! Devil's Delight .............. http://www.devilsdelight.com/ PLANET EROTIC This is a paysite. But that is not a bad thing. There is something you have to see to believe. Click the guest button and proceed by clicking on the free pics text links. After about four pages of these links (located at the bottom) you will arrive at some thumbnails. On the second row of pix third one to the right, click that one. Mysterious labia! Planet Erotic .................. http://www.planeterotic.com PORNO MACHINE Pretty good website! Decent webdesign and use of graphics. They feature some free pix as well. Lots of pussy filled to the brim with cock. The pix are not huge but they load quick. Oh and there are free videos! This is a busy server. Porno Machine ................. http://www.pornomachine.com/ READ THIS!! WIN $25,000 and a Fantasy Date - Click Here Now! $25,000! ---> http://208.195.150.31/us/us_main.cgi/us_5267/A HOORAY! THE ADULT SEARCH ENGINE Now you can search for the sex sites you are looking for and fast! This new search engine is setting the standard others will follow. It offers pop-up search and detailed listings! Hooray! -----------------> http://eureka.abc-web.com/hooray/ FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here --> http://www.netscape.com/download/ Three dicks -------------------> http://207.168.184.26/trip/ CHAT WITH OTHER READERS Hey, if you haven't checked out the Eureka! Chat sites yet, you're missing out on some great stuff. Every day you'll find hundreds of other readers just like you looking to chat have fun and maybe a little 'cyber'. We know you'll love it! Adult/Sex Chat -----------------> http://137.39.63.229/chat/ General/Fun Chat -------> http://137.39.63.229/chat/funchat/ HOT LIVE PHONE SEX TO MAKE YOU CUM! LD Call only! - Live Hot Girls!!!!----------->1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline-------->1-800-644-8779 FREE: Live 1-on-1 (international call only)--->011-678-77416 NEW! CENTERFOLD PIC OF THE DAY Exclusive! We proudly present unpublished Pictures of your favorite Centerfolds. Featured This Week: Dec 80-PMOY Terri Welles, Dec 89-Petra Verkaik, Sept 93-Carrie Westcott, Kerri Kendall, Rebecca Ferratti, Lydia Schone and many more too! ---------------------------> http://www.gatefold.com/eureka/ AMATEUR SITE OF THE DAY Claire: Claire and her husband (Andy) are true exhibitionists who love to show off, especially together. Claire keeps an erotic diary that puts most magazines to shame. This is one hot couple, check them out and read about all their dirty adventures. ---------------------------> http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY StoriesAndPics.com: StoriesAndPics.com gives you the best of both worlds. Visit the site Yahoo calls "The Ultimate Erotic Stories Site" Over 50 categories of sex stories and XXX pics! ....................... http://www.storiesandpics.com/ DAILY CARTOON ----------> http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Woah, our Adult Star pics are getting hotter and hotter, so make sure you stop by and check out today's - definitely not to be missed! --------> http://www.xxxadultstars.com/eureka/ OTHER EUREKAS! GAY EUREKA! ----------> http://eureka.abc-web.com/gayeureka/ DEUTSCH ------> http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ------> http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ----> http://eureka.abc-web.com/eureka/francais.htm ITALIANO ----> http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE > http://eureka.abc-web.com/eureka/portuguese.htm TODAY'S FREE PIX Pic 1 --------------------------> http://137.39.63.229/?100 Pic 2 --------------------------> http://137.39.63.229/?101 Pic 3 --------------------------> http://137.39.63.229/?102 Pic 4 --------------------------> http://137.39.63.229/?103 Pic 5 --------------------------> http://137.39.63.229/?104 Pic 6 --------------------------> http://137.39.63.229/?105 Pic 7 --------------------------> http://137.39.63.229/?106 Pic 8 --------------------------> http://137.39.63.229/?107 Pic 9 --------------------------> http://137.39.63.229/?108 Pic 10 --------------------------> http://137.39.63.229/?109 ============================================================ TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS EMAIL RIGHT BACK TO US. ============================================================

1 0

Re: Laptop TEMPEST (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: Re: Laptop TEMPEST > Date: Mon, 09 Feb 1998 17:07:23 +0000 > From: Markus Kuhn <Markus.Kuhn(a)cl.cam.ac.uk> > Jim Choate wrote on 1998-02-09 06:57 UTC: > > Doesn't the FCC have to test the RF emissions of all laptops as well as > > monitors for sale as Class A and Class B in the US? Shouldn't that material > > be available? I searched the main site, www.fcc.gov, but didn't find > > anything regarding this. > > I suspect that FCC material is not helpful with regard to Tempest. As to calculating a realistic estimate of range to intercept, I disagree strongly. > Results of such EMI tests only measure the general power spectrum > emitted by a device. Of interest for Tempest purposes however is > not the power spectrum, but the spectrum of the cross-correlation I am aware of how to do Tempest in practice as well as in theory. The process goes something like this. The first target is the vertical retrace. This signal is usualy the strongest because the voltage required (and hence the dv/dt) is the largest to sling that e-beam from the lower right to the upper left. It usualy resides in the 50-70Hz range. The next target is the horizontal retrace. It slews the beam from the right edge of the display to the left in order to start another trace. You can use this signal to syn both the vertical retrace steps (in order to move the beam down verticaly to start another trace) as well as the ramp that is required to slew the beam across the screen to write the pixes. Once these 4 signals are aquired and fed to the appropriate control terminals of a CRT you are ready to begin decoding the actual trace data for each line of the display. This is the hardest since the actual modulation of the e-beam is done via a screen grid (who said tube theory was out of date?) and that signal is quite small and generaly has a cardoid emission pattern aligned axialy along the central axis of the CRT tube. So if given a choise you want your antenna to be behind the viewer in line with the display. It is of some import to note that larger displays are easier to aquire usable signals from since the distances the e-beam is slewed and as a result the control voltages are much larger. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Re: Washington on the verge of being nuked?
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

David Honig <honig(a)otc.net> writes: > The water supply systems of LA are easy targets for causing civil > disruption, too. Don't know about LA, but New York City gets its water supplies from open reservoirs upstate - a terrorist's dream. > > Lewinsky for President '2012 Vote for Monica - get a free blow job. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Re: rec.guns et.al. blocked by censorware
by Animal Protection League 17 Dec '03

17 Dec '03

At 03:22 PM 2/8/98 -0800, Tim May wrote: >At 3:02 PM -0800 2/8/98, Igor Chudov @ home wrote: >>rec.games.mecha Giant robot games. (Moderated) Quest/Illegal/Gamble >>Violence/Profanity Intol > >Perhaps the strategy should be to post material to other newsgroups to get >them blocked as well. (Though I expect the blocking is not being done using >robots to monitor for illegal words, as rec.guns would not have been >blocked this way. Rather, the cyber nannies are probably using their "PC >judgment" to block groups they don't like. You need to consider that rec.games.mecha is primarily a dumbed down alt.flame and includes postings from that obnoxious avowed 300 pound communist bisexual converted jew Camille Klein (she claims she is down to 275 lbs.). I wouldn't my kids to read her garbage posts.

1 0

Interview with the man who creamed Bill Gates
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Mon, 9 Feb 1998 09:29:44 -0800 (PST) From: Declan McCullagh <declan(a)well.com> To: politech(a)vorlon.mit.edu Subject: Interview with the man who creamed Bill Gates Is at: http://cgi.pathfinder.com/netly/opinion/0,1042,1733,00.html -Declan

1 0

Godin Interview - Bill G's pie in the eye [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > X-within-URL: http://cgi.pathfinder.com/netly/textonly/1,1035,1733,00.html > Today's News Let's pie! Let's pie! Nincompoop guys! > by Hugues Henry February 9, 1998 > > Until last week, Noel Godin was relatively unknown in the United > States. A 52-year-old Belgian author, film historian, actor ("The > Sexual Life of the Belgians"), writer ("Cream and Punishment") and > "entarteur" (a Godin coinage that roughly translates as "encaker" or > "pie-er"), Godin led the gang that gave to Bill Gates what so many of > us only dream of: a big wet pie in the face. The attack took place at > the entrance of Le Concert Noble on Arlon Street in Brussels and was > widely reported in the press. > > Godin doesn't own a computer and didn't even know what a URL is. > His girlfriend, however, uses a PC. (This interview was conducted and > translated by Hugues Henry.) > > The Netly News: Who are you, Noel Godin? > > Noel Godin: I'm part of a gang of bad hellions that have declared the > pie war on all the unpleasant celebrities in every kind of domain > (slogan: "Let's pie! Let's pie! Nincompoop guys!"). We began to act > against "empty" celebrities from the artistic world who were thinking > they were the cat's whiskers. Then we attacked the TV news business in > France, for instance, Patrick Poivre D'Arvor [a famous French TV > presenter]. Then it became political with Philippe Douste-Blazy in > Cannes, the French minister of culture, or the other French minister > Nicolas Sarkozy last year in Brussels. > > NN When did you first pie someone? > > Godin: In November 1969, with French writer Marguerite Duras, who > represented for us the "empty" novel. > > NN Why did you choose Bill Gates? > > Godin: Because in a way he is the master of the world, and then > because he's offering his intelligence, his sharpened imagination and > his power to the governments and to the world as it is today -- that > is to say gloomy, unjust and nauseating. He could have been a utopist, > but he prefers being the lackey of the establishment. His power is > effective and bigger than that of the leaders of the governments, who > are only many-colored servants. So Bill Gates was at the top of our > lists of victims. The attack against him is symbolic, it's against > hierarchical power itself. Our war cry was explicit: "Let's pie! Let's > pie the polluting lolly!" [text deleted] ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: rec.guns et.al. blocked by censorware
by Anonymous 17 Dec '03

17 Dec '03

>That the "cyber nannies" are blocking it (and other similarly nonsexual, >nonprofane newsgroups) is exactly what was expected. These cyber nannies >become tools for political correctness. > >Perhaps the strategy should be to post material to other newsgroups to get >them blocked as well. (Though I expect the blocking is not being done using >robots to monitor for illegal words, as rec.guns would not have been >blocked this way. Rather, the cyber nannies are probably using their "PC >judgment" to block groups they don't like. These companies are attempting to provide the services desired by their customers. These are generally cautious, conservative parents who want to allow their young children access to the internet without them stumbling over dangerous or disturbing information. Like it or not, many parents are very protective of their children. We have no right to force our own views of childrearing on them. The filtering companies are filling a legitimate need in the marketplace. They are not evil and they are not trying to prevent adults from viewing the material they desire via their own personal accounts. They give concerned parents a sense of safety in allowing their children to use the internet, and in that way allow young people access to the net who would not otherwise be allowed to use it.

1 0

New Security Paradigm Workshop '98 Call For Papers
by Mary Ellen Zurko 17 Dec '03

17 Dec '03

======================================================================== Call For Papers New Security Paradigms Workshop '98 A workshop sponsored by ACM 22 - 25 September 1998 ======================================================================== Paradigm shifts disrupt the status quo, destroy outdated ideas and open the way to new possibilities. This workshop explores deficiencies of current computer security paradigms and examines radical new models that address those deficiencies. Previous years' workshops have identified problematic aspects of traditional security paradigms and explored a variety of possible alternatives. Participants have discussed alternative models for access control, intrusion detection, new definitions of security, privacy and trust, biological and economic models of security and a wide variety of other topics. The 1998 workshop will strike a balance between building on the foundations laid in past years and exploring new directions. To participate, please submit the following, preferably via e-mail, to both Program Chairs (Mary Ellen Zurko and Steven J. Greenwald) by Friday, 3-April-1998. 1 - Your Paper You should submit either a research paper, a 5 - 10 page position paper or a discussion topic proposal. Softcopy submissions should be in Postscript or ASCII format. Papers may besubmitted in hardcopy. To submit hardcopy, please mail five (5) copies to Program co-chair Steven Greenwald. Please allow adequate time for delivery. The hardcopy deadline is 27-March-1998. Discussion topic proposals should include a description of the topic to be discussed, a pro and con position statement on the topic, identification of the parties who will uphold each position, any assurances that the participants agree to attend, and any other information that the proposer thinks would support their proposal (such as who will moderate). One potential topic for discussion is "Is there a current security paradigm?". 2 - Justification You should describe, in one page or less, why you think your paper is appropriate for the New Security Paradigms Workshop. A good justification will describe which aspects of the status-quo security paradignm your paper challenges or rejects and which new model or models your paper proposes or extends. 3 - Attendance Statement You should state how many authors wish to attend the workshop and should indicate whether at least one author will be able to attend for the entire duration of the workshop. The program committee will referee the papers and notify the authors of acceptance status by 12-June-1998. We expect to be able to offer a limited number of scholarships. More information will be provided on-line as it becomes available. 4 - The Workshop The workshop will offer a creative and constructive environment for approximately 25 participants. It will be held at the Boar's Head Inn in the vicinity of "historic" Charlottesville, Virginia. Steering Committee Bob Blakley, Mary Ellen Zurko, Steven J. Greenwald, Darrell Kienzle, Hilary Hosmer Workshop Co-Chairs Bob Blakley IBM 11400 Burnet Road, Mail Stop 9134 Austin, TX 78758 USA e-mail: blakley(a)us.ibm.com voice: +1 (512) 838-8133 fax: +1 (512) 838-0156 Darrell Kienzle MITRE, Mail Stop W422 1820 Dolley Madison Blvd. McLean, VA 22102 USA e-mail: kienzle(a)mitre.org voice: +1 (703) 883-5836 fax: +1 (703) 883-1397 Program Committee Co-Chairs Mary Ellen Zurko The Open Group Research Institute 11 Cambridge Center Cambridge, MA 02142 USA e-mail: zurko(a)opengroup.org voice: +1 (617) 621-7231 fax: +1 (617) 225-2943 Steven J. Greenwald 2521 NE 135th Street North Miami, FL 33181 USA voice: +1 (305) 944-7842 fax: +1 (305) 944-5746 e-mail: sjg6(a)gate.net Program Committee Alfarez Abdul-Rahman, University College London Steven Cheung, University of California, Davis Shaw-Cheng Chuang, University of Cambridge John Dobson, University of Newcastle, UK Heather Hinton, Ryerson Polytechnic University, Canada Tom Lincoln, RAND Masahiro Mambo, Tohoku University Catherine Meadows, Naval Research Laboratory Ruth Nelson, Information System Security Thomas Riechmann, University of Erlangen-Nuernberg Marvin Schaefer, Arca Systems, Inc. Cristina Serban, AT&T Labs Anil Somayaji, University of New Mexico Brenda Timmerman, University of Southern California / ISI Ian Welch, University of Newcastle upon Tyne John Michael Williams Local Arrangements Chenxi Wang (University of Virginia) +1 (804)982-2291 Scholarships Hilary Hosmer (Data Security Inc.) +1 (781) 275-8231 Publications Marv Schaefer (ARCA Systems) +1 (410) 309-1780 Publicity Daniel Essin (University of Southern California) +1 (213) 226-3188 Treasurer/Registration Dixie Baker (SAIC) +1 (310) 615-0305 ACM-SIGSAC Chair Ravi Sandhu (George Mason University) +1 (703) 993-1659

1 0

VanEck, Noise, & Palmtops...
by Jim Choate 17 Dec '03

17 Dec '03

Hi, Palmtops are noisy, this is bad for Van Eck. Van Eck relies on the fact that the device is emitting display signals significantly above the noise floor or that there is a method to pull that signal out of the noise. Considering the power draw of palmtops, while they are noisy they are also very low power. My guestimate on emitted rf is in the micro-watt range. That means for a succesful intercept the receiver would need to be in most situation within feet of the device. It'd be much simpler to simply ask to see the PDA because you were thinking of buying one than lugging all that obvious equipment around... If you want to defeat Van Eck you want either very quite or you want lots of noise smoothly distributed across the rf spectrum. ____________________________________________________________________ | | | The obvious is sometimes false; | | The unexpected sometimes true. | | | | Anonymous | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Argentina rules: no software copyright
by Adam Back 17 Dec '03

17 Dec '03

(from cpsr list, from edupage) : ARGENTINE SUPREME COURT RULES SOFTWARE PIRACY LEGAL : : Executives of Microsoft, IBM and Unisys are protesting a recent : Argentine Supreme Court decision ruling that antiquated copyright : laws don't cover computer software. Software makers point out that : royalties aren't paid on about 70% of the software sold in : Argentina, resulting in roughly $165 million in revenue losses : annually. A recent study by Price Waterhouse & Co. indicates the : biggest abusers are Argentine federal and local government agencies : and small private businesses. "There's no culture in Argentina of : assigning value to software," says a Unisys unit president. (Wall : Street Journal 6 Feb 98) I like best Mark Grant's comment on why copyright should be scrapped: it is a form of government subsidy. Adam

1 0

Computer design flaw opens airports to terrorism
by William Knowles 17 Dec '03

17 Dec '03

NEW YORK (Reuters) [2.9.98] - The computer security systems that control access to 40 airports worldwide through electronic badges have a design flaw that could make them vulnerable to terrorism, the New York Times reported Sunday. California computer security consulting firm, MSB Associates, found the flaw in December in a routine audit of a large California financial services software company, the identity of which was not disclosed, according to the newspaper. Government buildings, including that of the CIA, and prisons and industries with sensitive military, drug or financial information or material also use the system and are also vulnerable to attack, the Times report said. American and British aviation officials have notified airports of the flaw, the Times said. The system, introduced several years ago by a small company, Receptors, Inc., of Torrance, CA., relies on a secure, isolated computer in a guarded room to control door-locks and an inventory of electronic badges, the Times reported. The company found, however, that in some cases an individual could dial in to the computer and create security badges and unlock doors. Receptors' equipment was removed from the House of Representatives after the Inspector General found that 757 former employees appeared on the rolls of active employees and had working badges that would have allowed them access to the House buildings, the Times said. Receptors' chief operating officer Dale Williams said that the problem is not with the system but with the way it was installed in some cases. Some systems were connected to networks instead of being accessible only by a modem that would only be turned on when a Receptor employee performed maintenance, Williams told the Times. Testing the system, MSB found that the problem persisted as late as last week in the company they audited, the Times said. MSB created a fictitious employee, Millard Fillmore, which the company spotted on its rolls and removed. However, even after he was removed, the faux former president was still able to gain access to the company buildings, meaning any dismissed employee would have the same access, the Times said. == The information standard is more draconian than the gold standard, because the government has lost control of the marketplace. -- Walter Wriston == http://www.dis.org/erehwon/

1 0

[test - ignore]
by BMM 17 Dec '03

17 Dec '03

ping

1 0

fingerprinting
by D'jinnie 17 Dec '03

17 Dec '03

Immigration & Naturalization Department has been fingerprinting ppl for years. Does anyone have any ideas what agencies that information is shared with and what they need it for anyway? And what's with that new thumbprint thing in banks? I haven't had occasion to refuse it yet but I wonder if they'd open an account without it... --- Reality leaves a lot to the imagination. jinn(a)inetnebr.com

1 0

Re: Driver Licenses
by Brian B. Riley 17 Dec '03

17 Dec '03

On 2/9/98 12:25 PM, Tim May (tcmay(a)got.net) passed this wisdom: >Lucky is right that that "underage stings" are on the increase. >Underage persons, often in high school, beome self-righteour >warriors in the War On Demon Rum, and "narc out" their local >shopkeepers. As I write this there are advertisements up in the halls at the HS (obviously with school blessings) where I teach (a few miles east of Burlington, VT) specifically soliciting 17 year olds to work for a private company under contract to the state to 'test buy' tobacco products. I haven't heard about any takers yet nor anything backfiring. >Hey, it would serve these junior narcs right if, upon being carded >and being shown to be underage, a store owner made a citizen's >arrest. Perhaps putting the perp in the back freezer for a few >hours would send a message. I wonder, though, how long it would go on if some shopkeeper indeed did this? But, is it a crime to try to buy booze or tobacco underage, if you do not try to show fraudulent indentification? Brian B. Riley --> http://members.macconnect.com/~brianbr For PGP Keys <mailto:brianbr@together.net?subject=Get%20PGP%20Key> "He's not dead -- He's electroencephalographically challenged."

2 1

11 CENTS A CLICK - PINKCASH PAYS CA$H UPFRONT
by nobody＠nowhere.com 17 Dec '03

17 Dec '03

Friends, I am Scott Phillips from www.pbits.com, My apologies for this short spam, I`m only sending it because as a fellow ADULT WEBMASTER I know you will be interested in the first click thru system to pay you IN ADVANCE, BEFORE YOU EVER SEND A HIT! Lets keep it short and sweet so HERE IS THE DEAL! Sign up here http://usa-6.gsd.com.au/moremoney And get paid 11c a unique click by ww.pbits.com WE OFFER THE FOLLOWING BENEFITS - Real time stats - Click counts that are 100% real - NEVER BEEN ACCUSED OF SHAVING HITS - Rated "good as gold" on Serge`s good bad ugly sponsor list http://pusi.com/~contest - FRESH banners that pull HARD - straight, gay, hardcore, teen, fetish sites, we have it ALL covered - On the net since May 96 never ripped off a webmaster - The checks are cut by the legendary Serge, who has never been late with a payment ever! - Auto-signup - I answer email personally - Software designed by BobX who wrote the clickthru for cybererotica.com http://usa-6.gsd.com.au/moremoney This is my personal guarantee to you, my fellow webmasters. Pinkcash *is* and will always be the highest paying clickthru on the net. No matter what others claim to pay, at the end of the day you make more money with us, its a FACT! If you earn more with other clickthru programs I will refund the difference. Statistics show that a .11 banner for pinkbits earns TWICE what an xpics banner at 14c does. This is because we DON'T shave hits or filter every AOL proxy to steal from you. http://usa-6.gsd.com.au/moremoney HOW DO WE PAY IN ADVANCE? After you have a trading history with us for a month or two we put you on the advance program. Currently 93% of our traffic is payed before the hits are sent. This is not an idle promise, we send checks everyday. Look at http://www.pbits.com/whosyerdaddy to see a few real checks for people you probably know. And by the way, we pay an extra cent per click when we pay you in advance, its our way of thanking you for being trustworthy honest webmasters just like us. http://usa-6.gsd.com.au/moremoney I live in Australia but I`m travelling around the USA at the moment catching up with webmaster friends and buying more traffic. If you have the ability to send bulk volume traffic contact me and I`ll visit you while I`m in the USA Nobody has ever left our clickthru ever. Nobody has ever had a complaint EVER. This is state of the fucking art software, we are cool people, we want your business, and we treat you right. AND WE PAY MORE! Sign up now http://usa-6.gsd.com.au/moremoney Thanks Scott Phillips --- TO REMOVE YOURSELF FROM THIS LIST CLICK BELOW --- http://207.33.10.200/maillist/remove.html

1 0

Re: TEMPEST (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: Re: TEMPEST > Date: Mon, 09 Feb 1998 21:07:22 +0000 > From: Markus Kuhn <Markus.Kuhn(a)cl.cam.ac.uk> > Things are somewhat more complicated and I am not convinced that > the e-beam is the primary source of radiation. Only of the individual pixel modulations. Go back and re-read my post you missed a whole slew of implications. The vertical and horizontal positioning is via the yoke not the screen grid. Electrostatic steering of an e-beam is expensive and slow, you can't change the charge on the plates that fast. In regards the data for the individual scan lines, where else are you going to modulate that beam than a screen grid? This is a high-voltage low-current point. You can't drive the beam off the screen, the inside of the tube is coated in a carbon based chemical called 'aquadag' that will short the beam to ground and blow your flyback transformer in short order. Not to mention that the inertia of the e-beam will be a bit of a hassle to deal with as well. It won't move that fast. > Your claim that > the Tempest radiation is modulated by the screen grid does not agree with > my practical experience: All signals I get are close to harmonics of > the dot clock and not of the screen grid rate. The screen grid is where the dot clock goes to modulate the e-beam, or is your claim we're going to modulate the filament directly? If so I would suggest you re-take your electronics class and learn how to read a schematic a tad better. A short trip to either your local library or electronics repair business will pay off wonders. You're looking for a Sam's Photo-Facts on the particular monitor you are examining. There is also the fact that the dot clock itself is a low-voltage low-current device until it gets to the tube drive electronics where it switches the high voltage drivers to the tube. If your getting your signal off the harmonics you're doing it the hard way. Go back and re-read your texts on Fourier Transforms and then do a power-spectrum analysis on the signals to the tube; what you will find is that the primary frequencies get the majority of the signal (eg 1st harmonic of a square wave (ie a dot clock) only gets, at best, 1/3 of the energy of the primary). In any case, it's the high voltage emissions of the tube drive electronics that are detected, not the small 5V to 12V drive signals. The same is true for LCD, Plasma, and other flat panel displays. You detect the high-voltage emissions of the display drive electronics. Note that on active transistor displays (where you don't have the high voltage bias as in a LCD) you don't get these sorts of emission magnitudes and they are *much* harder to detect. In addition in the active transistor displays the display drive electronics should buffer the data and so, unlike a CRT, you don't have to send each individual pixel every time. You can actualy send only the changes and impliment those. Unless you're integrating the signals you receive your Tempest display will be gibberish. > In addition, the > Tempest monitor cannot distinguish between an all-black and an all-white > image, which it should in the case of a screen-grid caused modulation. What? This is malarky. If the screen is black the filament emissions are being blocked by the screen grid and the charge cloud gets shunted to ground via the aquadag coating. This means there is no current, and as a consequence no emitted rf field to monitor. And what keeps it from blowing the flyback in this case is that the charge cloud acts as a capacitor and limits the dv/dt to something that the flyback can deal with, it has to leak past the screen grid. You can also discern this using Tempest to monitor NTSC where the black pulse is a negative going pulse at the end of the scanline waveform. It's there so the receiver electronics can know when to turn the e-beam off so you don't get those annoying retrace lines across your screen when it moved back to the left and down one line. Since it's a negative going pulse with respect to the vertical and horizontal retrace it's dv/dt is going in the opposite direction. If you get a schematic find the horizontal retrace clock and disable it and monitor the display. > If there is indeed a screen-grid modulation, then it is *much* weaker > than any modulation that you get by software dithering. This is just plain silly. The switching of the software is drowned in a sea of such noise on the board. Anyone who claims they can pull a valid signal off a cpu pcb at more than a few feet is a liar or else they have some pretty remarkable extra-terrestrial technology. There are litteraly 10's of thousands of state transitions all over the pcb that are going on in parallel and the positive transition fields cancel the negative transition fields so what you end up with is a hash of noise. 30 seconds of looking at a spectrum analyzer will make this obvious. In modern computers what drives the crt is the data residing in the video frame buffer that drives the output electronics on the card and not the data on the cpu pcb. > Monitors are pretty strange antennas: For instance, my monitor still > radiates quite well (although noticeably weaker) if I switch its power > supply off. It can take as much as 20 minutes to drain a good high-voltage supply (read the documents of all power supplies that operate above a couple hundred volts, it should include the discharge time constant - you want to wait through at least 3 of those). There is also the issue that a crt tube sitting unconnected in the open dry air will develop enough of a charge to knock the shit out of you if you're silly enough to grab the grounding connection on the side with one hand and be grounded to earth with the other. So even if the machine is turned off you get a continous charge build up on the tube that gets drained through various resistors to ground. Unfortunately this is a pretty incoherent signal and low power as well. I routinely deal with voltages in the 1MV range and currents (usualy not at those voltages) in the 100A range (I build 12 ft. Tesla Coils for grins and giggles that throw discharges in the 8-12 ft. range). When you start talking about voltages above a few hundred there isn't any such thing as 'off', only a higher impedance path to ground and longer time constants. NOTE: if you do decide to play in your monitor then make shure that one of your hands is in your back pocket at *ALL* times. Otherwise make shure there is somebody there to call 911 so they can haul your body off. If you don't the discharge leakage current through your heart *when* you make a mistake will cause it to go into ventricular fibrillation (v-fib). Unless you got a de-fibrillator handy your dead in about 3 minutes. > Just the passive resonance of the chassis gives a clear > signal in around a meter radius with a simple untuned dipole antenna. If they get within a meter of my machine I seriously doubt they will be using VanEck but rather rubber hose or eye ball monitoring... We're talking real world here not some Tom Clancy novel. > Switching off a monitor alone does not protect you from eavesdropping > a VDU signal, especially if the signal is not just text but a pattern > optimized for reception. True, but instead of being within a couple hundred feet (the average succesful range for interception) you're now talking about 10's of feet. At that range my dogs barking will let me know that Mallet is in the house. > After I unplug the VGA cable however, I can't pick up any signal with > our Tempest receiver unless I bring the antenna almost in contact with > the cable or connector. Duh, can you say 'impedance'....go back and study your analog and rf electronics. A monitors off impedance per line is somewhere in the 50 to 75 ohms range. The impedance of a wire hanging in the air is much higher and as a consequence the current flow and as a result the emitted em field will be much lower. > The closed PC chassis also appears to be no very > big source of VDU emanations, certainly much below the levels that > our receiver can detect. And this surprises you? A pc chassis, provided you put all the screws in it and don't have lots of holes in it, is a Faraday Cage, it's the reason they make them out of expensive metal and not cheaper plastic. A very effective method to confuse Van Eck is to have several monitors sitting next to each other with different displays. A more active display is much more effective than one that is static (eg. such as a person typing in an email to cypherpunks). I strongly suggest the following reference: High-speed Digital Design: a handbook of black magic H.W. Johnson, M. Graham ISBN 0-13-395724-1 ~$60 US ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

E-CDA
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Congressional Record: February 5, 1998 (House) ELECTRONIC CAMPAIGN DISCLOSURE ACT (Mr. WHITE asked and was given permission to address the House for 1 minute.) Mr. WHITE. Madam Speaker, in March we are going to vote on campaign finance reform in this House. It is a very important issue but also a very difficult issue, and it is made particularly difficult because most of the bills before us are big bills that deal with the whole comprehensive issue that we have to talk about. I have got one of those bills, and I hope that we can pass one. But just in case we cannot, today I am introducing what we might call a small bill that will deal at least with some of the problems. This bill is called the Electronic Campaign Disclosure Act, and what it does is tell the Federal Elections Commission to get into the 21st century. It directs the FEC to establish a database on-line to search over the Internet for all the information needed about campaign finances in our country. Every campaign would have to file within 10 days a report of every contribution that it receives and contributors, and PACs would also have to file. Madam Speaker, sometimes we cannot do it all in one step. The longest journey begins with a single step, and I think if we cannot pass a big bill a small bill like the one I am introducing today would be a step in the right direction. ____________________

1 0

Driver Licenses
by Anonymous 17 Dec '03

17 Dec '03

Recently had to renew my DL here in Florida. While we are not forced to give up our fingerprints (yet)we have a new little magnetic strip similar to those on a credit card or ATM card and I can see this as a way for the State to start holding more and more data about us on these I.D.'s (like fingerprints, criminal records, etc... Coincidentally, that day when I went into my grocery store to get a six pack of brew, I got carded. I handed my new little card over and the teller and rather than looking at my date of birth she started to swipe the damn thing through her credit card reader machine! I stopped her, grabbed my DL back and told her to manually enter the date as they have always done. When she explained that it is against store policy and that she 'had' to swipe any IDs that had the strip I got my keys outta my pocket and all but removed the strip from the back of my little nemesis. Handed it back to her and told her to swipe away; it is against MY policy to provide ! ! ! the store with my address. I don't want any damn pepsi coupons mailed to me each time I buy coke, or northern tissue coupons when I buy charmin. Nor do I want the store collecting information on how much beer I buy. Sure, I want my alchohol purchases going to the Dept of Motor Vehicles and the other State departments...like hell. My question is, how much information can be stored on these strips?

11 17

Re: SOFT TEMPEST (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: Re: SOFT TEMPEST > Date: Mon, 09 Feb 1998 16:44:52 +0000 > From: Markus Kuhn <Markus.Kuhn(a)cl.cam.ac.uk> > The software that displays the license number plus activation instance > random code in your windows toolbar as an easy receivable spread > spectrum barcode would have to take care of this depending on how > exactly your license agreement is formulated. This can be resolved > in many ways. Has your technique been verified by any 3rd parties who are not affiliated with you or your firm? Do you expect to do any public demonstrations of this technology in the near future? Would it be possible to arrange for a indipendant 3rd party to receive a test setup for evaluation? > The technique of hunting software license violators via Tempest > monitoring is not really targeted at providing 100% accurate > and reliable identification of abuse at any point of time as That's good. The thought that given current technology a signal reception van could pull one monitors display out of a building that could potentialy have 1,000+ pc's (my last job had about 1500/floor and 3 floors) at a range of say 200 ft. is truly incomprehensible. If it works that is a feat worth many laurels. > (e.g., has bought a single copy of an expensive CAD software but > uses it on over 80 workstations all day long), which then can > justify to get court relevant proof by traditional means of > police investigation. You show up in my companies parking lot without my permission and start snooping you'll be the one sitting in jail facing industrial espionage charges. Any defence lawyer worth a damn would be able to blow this out of the water, private citizens don't have the right to invade my privacy any more than police without a warrant - and that take probable cause. > One obvious countermeasure are Tempest shielded computers or rooms, It's the monitors that need shielded, the computers already sit in a Faraday cage. Simple copper screen glued to the inside of the monitor case with a paper sheild and then grounded will resolve that problem. Be shure to put a grounded screen on the front of the tube as well (similar to those radiation shields that some companies make that don't work because they aren't grounded). > Another countermeasure are software reverse-engineering and modifying > the broadcast code. This is around as difficult as removing dongle > checking code: Not impossible, but for the majority of users too > inconvenient. A simple Gunn Diode oscillator driving a broad-band 100W rf amplifier will swamp any signal you could hope to catch. Cost, about $250 ea. With the new low-power transmitter rulings there wouldn't be much anyone could do about it either. > an interesting application. Tempest research requires some > expensive equipment (special antennas, very high-speed DSP > experimental systems, an absorber room, etc.). Gee, and to think that when I've done this sort of stuff I only used a Commodore 1702 composite monitor and some rf amplifiers and filters... Duh, silly me. Any claim that it can *only* be done with lots of money is almost always wrong. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

4 4

Re: Washington on the verge of being nuked?
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

David Honig <honig(a)otc.net> writes: > > > LA has a combination of closed pipes and open aqueducts, often > in remote areas. Simple disruption, not poisoning, would > be easier. The resivoirs don't hold enough for more > than a few days. One can "disrupt" the water supply by just making a credible assertion that it's been poisoned - but it won't kill nearly as many people as actual poison (or virus/bacteria). --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0