December 2003 - cypherpunks-legacy

Re: macworld crypto articles
by lethin＠ai.mit.edu 17 Dec '03

17 Dec '03

In article <4444rl$nrh(a)life.ai.mit.edu> Chen writes: > It's truly a deplorable state of affairs. For the next version, include PGP free with every version of Quicken, and have Quicken just "call" PGP. Of course, users can encrypt their files now with PGP. Is there an Intuit bboard where someone could post instructions? -- --- Concurrent VLSI Arch. Group 545 Technology Sq., Rm. 610 MIT AI Lab Cambridge, MA 02139 (617)-253-0972

3 2

Colin Powell coming to Dallas
by Ed Carp [khijol SysAdmin] 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Colin Powell will be in Dallas at the Taylor's Bookstore out on Belt Line Rd. and Prestonwood (right next to Prestonwood Mall). October 3 at 6 PM. I plan to be there - anyone else from the DFW area going? Anyone have any questions they want asked (other than the usual "where do you stand on the administration's position regarding the use and exportation of so-called 'strong crypto' and the Clipper/Capstone fiasco"? - -- Ed Carp, N7EKG Ed.Carp(a)linux.org, ecarp(a)netcom.com 214/993-3935 voicemail/pager Finger ecarp(a)netcom.com for PGP 2.5 public key an88744(a)anon.penet.fi Q. What's the trouble with writing an MS-DOS program to emulate Clinton? A. Figuring out what to do with the other 639K of memory. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMGY6vSS9AwzY9LDxAQGLeQP/R9wlGd5wRImcP/37nX9oxAA8+ob2+QHX uCSgdVQOBEYWCEcUXXioa4YgOJx/aptrQBUI23IudEJMMbXTVnQeZx8DPFbzLERI cva9aHTVcQwp/tqOa8NSjvm5UtOC9YtSlyyfFDaH4Amai2dYUPFFZXhhLp6O6jLt PZ56cNfMRYk= =iIKo -----END PGP SIGNATURE-----

1 0

"Free" Gift!
by Mzxyteq＠ibm.net 17 Dec '03

17 Dec '03

This is a one time mailing. You will receive no further E-mail. $$$$ NEED MONEY RIGHT NOW ? $$$$ "THE MONITORED CLUB" (Started September 1, 1997) THIS IS NOT MLM! JOIN TODAY AND RECEIVE A "FREE" GIFT!!! Your "FREE" bonus gift will consist of 500 reports showing you how to start your own shoe-string business. Everything from Basket Weaving, Day Care Centers, and Oil Changes to Franchising and much more. These reports alone are valued at $700.00. Yours free!!! Just for joining our club. Your "FREE" report will be e-mailed, via the monitor. THIS IS THE FAST ONE WHILE YOU'RE WAITING FOR THE OTHERS TO WORK...Guaranteed -You will have $5,000 in four weeks. IT'S TOTALLY MONITORED TO SAFEGAURD AGAINST DISHONEST PEOPLE, AND COMPLETELY LEGAL. This program is 100% legal because your investment will buy you three (3) valuable reports, that are guaranteed to put $5,000.00 in your bank account in 30 days! This program really works! YOU CAN'T LOSE! If you want to make a few thousand dollars really quickly, then please take a moment to read and understand this powerful program we're about to share with you. THIS IS THE FASTEST, EASIEST, MOST LUCRATIVE PROGRAM you will ever do. If you are doing other programs, by all means stay with them. The more the merrier. But PLEASE READ ON! First of all, no one gets cheated like the other programs. The response rate for this program is VERY HIGH, VERY FAST, and you receive your cash in about 30 DAYS. That's only FOUR WEEKS - not three months. Just in time to pay next month's bills!!! THIS PROGRAM WILL ANSWER YOUR PRAYERS! TRUE STORY: Julie Price tells how she participated in a similar program four times last year. "The first time I received $3,000 in cash in two weeks, and then $7,000 in cash the next three times". "THIS CAN DO IT FOR YOU"!!! A QUICK OVERVIEW: Send this program to as many people as you possibly can; the more the better. Keep in mind it's nothing more than a numbers game. Even if you are already in a program, continue to stay with it, but do yourself a favor and DO THIS ONE as well; RIGHT NOW!!! It is simple and takes a very small investment - not hundreds of dollars. It will pay you before your other programs begin to trickle in. Just give the three (3) people below $5.00 each (by way of the monitor),and request a report from each one of them. Dont forget to include your name, mailing address, and e-mail address. You will replace #3 on the list below. #3 moves to the #2 position. #2 moves to the #1 position. #1 is then removed from the list. Follow the simple instructions below, and in FOUR WEEKS, you will have at least $5,000, because most PEOPLE WILL RESPOND due to the LOW INVESTMENT, SPEED, and HIGH PROFIT POTENTIAL. So let's all keep it going, and help each other in these tough times. INSTRUCTIONS: 1. Please address three (3) individual envelopes to the people listed below. 2. Include a one time only investment of: A. $5.00 to Person # 1. Person #1 will send you report #1. B. $5.00 to Person # 2. Person #2 will send you report #2. C. $5.00 to Person # 3. Person #3 will send you report #3. 3. Make U. S. Money Orders Only (or equivalent), payable to persons #1, #2, and #3. Don't leave any Money Orders blank! NO PERSONAL CHECKS! 4. Please place each money order in the three (3) individual envelopes. Include a note asking each individual to send you a report (dont forget to include your name, address, and e-mail address). Request report #1 from person #1. Report #2 from person #2. And report #3 from person#3. 5. Place a POSTAGE STAMP ON ALL THREE OF THESE ENVELOPES. You must also put a Return Address on them in case they get lost in the mail. PLEASE DO NOT SEAL THESE THREE ENVELOPES (explanation below)! 6. If you dont have an e-mail address, include a large Self Addressed Stamped Envelope to receive your master printout, ID number, and additional information from the monitor. 7. Please fill out the Membership form below. 8. Include a one time only membership fee of $10.00 (CASH OR MONEY ORDER) made PAYABLE TO: Net Promo (The Monitor). 9. Make a copy of this entire letter for yourself and send a copy to the Monitor. 10. Place items 1-9 into a larger (9x12 or suitable) envelope. 11. See, it's just that easy. Your entire investment is only $25.00. And dont forget, youll receive your "FREE" bonus gift just for joining the club. PLEASE DO NOT SEAL THE THREE (3) ENVELOPES. Why??? Because the monitor must see these envelopes before you can receive your master printout and ID number. You will need the master printout to make duplicate copies of this letter for future mailings. Your ID number will be used for tracking purposes. This is to insure that everyone receive their cash. Your master copy and ID number will be e-mailed to you. All others will be postal mailed within 24 hours from the time they are received by the monitor. PLEASE POSTAL MAIL EVERYTHING TO THE MONITOR. Your Monitor Is: Net Promo 2100 Roswell Rd. Suite 200-C Marietta, GA 30062 Office: 770.977.5363 Email: Mailserve(a)aol.com ***************************************************************** Membership Form: (Please fill out completely, and Print clearly). Name: Address: City: State: Zip: E-mail: Telephone Number (optional): Please send $5.00 to: Request report #1 from Person #1 Anthony Thomas (ID# 118) 974 East 49th St. Brooklyn, NY 11203 Request report #2 from Person #2 Z. Williams (ID# 102) 8150 East Hildale Detroit, MI 48234 Request report #3 from Person #3 Success Communication (ID# 101) 1516 Garden Lake Dr. Riverdale, GA 30296 ***************************************************************** Don't remove any names from the list above. The Monitor will send your master copy to you, showing your name and ID number in the #3 position. #3 will be moved to the #2 position. #2 will be moved to the #1 position. #1 is then removed form the list. Please dont forget to request a copy of all three (3) reports from Persons #1, 2, and 3. All reports will be e-mailed, or U.S. Postal mailed. Dont forget to include your name, mailing address and e-mail address when requesting your reports from Persons #1, 2, and 3. Report #1- How to Extract and Mass E-mail for "FREE". Report #2- How to gather U. S. Postal Addresses For "FREE". Report #3- How and where to Advertise on the Internet for "FREE". If you would like to use our mass e-mail services (YES! We do the actual e-mailing for you), please mail a money order to Net Promo. Our rates are: ($15.00 / 500 names)($25.00 / 2,000 names)($50.00 / 7,000 names). For more than 3,000 names, please e-mail: Mailserve(a)aol.com for a price quote. We also have a mailing list service which we ship the same day we receive your order. Our rates are: ($20.00 / 200 names)($35.00 / 600 names)($50.00 / 1,500 names). For more than 1,000 names, please e-mail: Mailserve(a)aol.com for a price quote. ***Please, dont forget the following: PRINT this letter and read it TWICE for clarity. We strongly encourage you to save this letter to your hard or disk drive immediately. You will use it again to do mass e-mailings. Make sure items 1-9 (from instructions above) are in the large envelope you're sending to the Monitor! Congratulations, and we'll "See You At The TOP"

1 0

secure file system for Linux?
by Mike_Spreitzer.PARC＠xerox.com 17 Dec '03

17 Dec '03

Is there a secure file system (or secure directory branch) for Linux?

3 2

Re: secure file system for Linux?
by mch＠squirrel.com 17 Dec '03

17 Dec '03

> Is there a secure file system (or secure directory branch) for Linux? Yes, you can use CFS, which works on several versions of UNIX as well as Linux. Send email to cfs(a)research.att.com to get a copy. Someone exported it, and it is also available from ftp://ftp.hacktic.nl/pub/crypto/CRYPTOapps/cfs.1.3.tar.gz There is also something called the "loop filesystem" for Linux. I haven't tried it and don't know how well it would integrate into the newer Linux kernels. ftp://tsx-11.mit.edu/pub/linux/BETA/loop -- Mark Henderson -- markh(a)wimsey.bc.ca, henderso(a)netcom.com, mch(a)squirrel.com PGP 1024/C58015E3 fingerprint=21 F6 AF 2B 6A 8A 0B E1 A1 2A 2A 06 4A D5 92 46 cryptography archive maintainer -- ftp://ftp.wimsey.com/pub/crypto ftp://ftp.netcom.com/pub/he/henderso/change-sun-hostid-1.5.0.tar.gz

1 0

Re: Netscape for Linux?
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:42 PM 9/23/95 -0400, you wrote: >It seems to me that you folks are going out of your way to deny the >fact that the Linux market exists. I think that its because you are >embarassed that all these people with a $20 operating system are >throwing money at you while all the folks with $10K operating systems >aren't talking to you at all. > >While you may WANT to have all your sales be for OSF/1 machines or >solaris, but refusing to support Linux and ignoring the demand for >your products by the Linux community just because you don't think it >would sound as impressive, is actually quite childish and doesn't make >any financial sense. Foo. Supporting applications in a professional way on Linux is _tough_; everybody's got their own self-hacked copy that may have started out as SlackOS 4.1.3 but has the TooManyNotes Sound Widget replacement and has the XBrokenX video driver instead of the original one that didn't work on the TiltedSquareSneakyVideoCard and a way-cool new Obfuscated File System. It's like supporting things on "Unix" was back when everybody had source and a different flavor of M680x0 box. You can't just ask "Have you changed the AUTOEXEC.BAT since the machine came from the factory?" like Windoze app-vendors. Netscape may not have ever been _compiled_ with the compiler version the user has, much less tested on that kernel version, and the user may or may not know if their X Window System really is installed right or the TCP/IP connection works well and has working DNS support. Sure, it's easy to charge money for shipping the stuff with a diskette and a manual, but not doing so until they're ready to provide high-quality support isn't childishness, it's ethics (well, and/or bad-reputation-avoidance.) Now, I haven't checked whether they've trained all their people who answer phone calls from the public to acknowledge that there is an unsupported Linux version for folks who don't mind dealing with unsupported software, or if they've even got it on their Web site; the current version is there for ftp. #--- # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #---

5 5

Netscape closes up 1 3/8 today!
by tomw＠orac.engr.sgi.com 17 Dec '03

17 Dec '03

In article <DF84AJ.41K(a)sgi.sgi.com>, carolann(a)censored.org (Censored Girls Anonymous) writes: > Lookit that! 416 trades and 11 times there was more > buying pressure than selling pressure.. > The rumors of bug fix are outweighing the facts of the crack! > I am totally amazed! But think company insiders are probably > supporting the stock. Holding up better than ascii armor, it is. I think it probably has more to do with the fact that the name "Netscape" has been on the front page of every major newspaper in the US. I guess bad press is better than no press at all. And the press hasn't even been that bad. -- Sure we spend a lot of money, but that doesn't mean | Tom Weinstein we *do* anything. -- Washington DC motto | tomw(a)engr.sgi.com

11 14

Re: Freeh says FBI doing great, supports Weaver killer
by Brian B. Riley 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 9/15/97 12:36 AM, Douglas L. Peterson (fnorky(a)geocities.com) passed this wisdom: >Declan, just an observation, but have you noticed that the media seems >to incapable of saying the name Randy Weaver without using the words >white supremacist (or separatist)? Do you think this is deliberate or >just a case of following a pattern set by others? Randy Weaver maybe wasn't the most politically correct citizen of the state, but the whole thing that got him in trouble was that they wanted him to spy on the white supremacists that lived up in the hills near him and he refused. He had a 'live and let live' attitude about the whole thing. So far as I have read he wasn't an active white supremacist so much as he wouldn't come out against them ... now maybe other evidence has been unearthed since the last time I looked into the matter in any detail, but that is how I read it. -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBNB0sxcdZgC62U/gIEQJ+QQCg5/35nA58vcGCw0RwEdFQ7xGgpegAn0vZ +5bb/FWbCNOSZgUzsZHOTza5 =6QIX -----END PGP SIGNATURE----- Brian B. Riley --> http://www.macconnect.com/~brianbr For PGP Keys - Send Email Subject "Get PGP Key" "Home is where your books are" -- Kitty O'Neal

1 0

Re: Ship Code! Re: House Intelligence Committee Press Release
by Brian B. Riley 17 Dec '03

17 Dec '03

On 9/15/97 1:14 AM, Bill Frantz (frantz(a)netcom.com) passed this wisdom: >An encrypt to FBI key system has some really serious >vulnerabilities. I scares me to have our financial system, >utilities, and airlines, to name just a few vital civilian >services, depend on a system with such an obviousflaw. There are >people and organizations out there who would love to disrupt these >systems, and flawed encryption would give them a powerful tool. ... not the least of which is that the computing horsepower to look at each and every message (ya never know; a naked picture of my dog my get through) and do even the barest of evaluations on it would swamp the system. By way of barest evaluation, just examining the To and From fields to see if one of them is on *the list* of suspicious persons. Brian B. Riley --> http://www.macconnect.com/~brianbr For PGP Keys - Send Email Subject "Get PGP Key" "When you find yourself on the side of the majority, it is time to reform." -- Mark Twain

1 0

New Netscape RNG
by Ray Cromwell 17 Dec '03

17 Dec '03

I just glanced at the new Netscape RNG source. I don't really see anything bad, but I haven't analyzed it. However, I'm curious as to why variables like the username or the language locality are used as sources of entropy. These seem to provide almost nil. The username is going to be pretty much constant. In fact, even the current directory which is used as a seed can't provide more than a few bits of entropy. In all probability, the user name will usually be the same, and so will the current directory (and how many directories are there? 65,000 would only give you 16 bits of entropy, assuming you get a directory listing from the machine) I'm thinking from the standpoint of someone gathering data on someone or some server to mount a specific attack. a "most common directories on the macintosh" file for instance could be used to attack the current directory method. Using those sources probably can't hurt, they just seemed like odd choices, "grasping for straws" so to speak. Nevertheless, I would like to commend Netscape for releasing the source code for public review. You guys are clearly an intelligent company, in both your current developments, but also the way you have handled this bad press. -Ray p.s. i hope you guys do a good internal review of your code to remove buffer overflow bugs

3 3