December 2003 - cypherpunks-legacy

Re: Why no "Banner Ad Eaters"?
by Heinz-Juergen Keller 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- "Dr.Dimitri Vulis KOTM" <dlv(a)bwalk.dm.com> wrote: >Junkbusters works very nicely for me. I highly recommend it. >A warning about cookies: no proxy server I know can >stop the server from trying to set the cookie by >a) putting a <META HTTP-EQUIV="Cookie:" CONTENT="foo=bar;expires..."> >in the header; [SNIP] Installed Junkbuster yesterday with a blocklist that seems to work o.k. Just a silly? question on cookies: What will happen if I just link cookies.txt to /dev/null ? Is there anything speaking against this solution? - ------------------------------------------------------------------------------- Heinz-Juergen Keller hjk(a)[mail.]ddorf.rhein-ruhr.de hjkeller(a)gmx.[net,de] 2047bit PGP Public Key : http://www.ddorf.rhein-ruhr.de/~hjk/ MD5 Fingerprint: 4d33126fbf8c1bcd8e96ba90d99f0bdc - ------------------------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBNMsaoyZWWJBRAP1VAQE5Ugf7Bum+X0GRqAkGvp7Ir9MzpWI6XmlE01dc TrnG1ltkhIoU7JWTSNimsBeA0Pdw0fZZJpHhyNowCb0zR/H/J7/I/ksHUJWrr+/I eSRcO6Kwn8QlgjpDO+AfZiGtjtcm6ogPQhpLmyTFHRj6gNU+ksYTka6cC46zVfTI oWPx1vNLMZrG7OoMep61d9RQRSIIQQRzG3Ksc/5fwldmF7IWH5+9VnOncuT7ZJLm 59rvqyO4R9CaymI47jUTfpe+XNJzZR3PHix2OBiRtiXFgJsxc014Qk/lkVDiJH8T g+B5nE1N9xN7PqIAmMW7kuFaq4d4QhjMvYxGfa5ZCd8aPxhi5oLQMg== =2UCV -----END PGP SIGNATURE-----

1 0

Unabomber's Background
by Gregory L. Robinson 17 Dec '03

17 Dec '03

Could someone please post Mr. Kaczynski's (sp?) education background and some bio information or point me towards a website that contains some? Greg Robinson

2 1

Tossing your cookies [Re: Why no "Banner Ad Eaters"?]
by Jim Gillogly 17 Dec '03

17 Dec '03

Heinz-Juergen Keller skribis: > Just a silly? question on cookies: > What will happen if I just link cookies.txt to /dev/null ? > Is there anything speaking against this solution? Works fine on Unix and Linux systems if you're not a cookie fan: the remote sites think you've eaten their cookies, but you've merely frisbeed them into the bit bin. It's better than telling Netscape you want to be asked: some sites set a dozen cookies per hit, seems like, and saying "no" to each gets immediately tedious. If you tell Netscape to reject them, some sites won't serve you the content. Setting the browser to accept everything and linking cookies.txt to /dev/null works well for me. -- Jim Gillogly Highday, 4 Solmath S.R. 1998, 17:05 12.19.4.15.14, 5 Ix 12 Muan, Eighth Lord of Night

2 1

NYTimes web cookies
by ghio＠temp0199.myriad.ml.org 17 Dec '03

17 Dec '03

> Cookies and the NYTIMES subscription: NYTIMES.COM tries to store your > userid and password in the cookie with keywords PW= and ID=. Problem is, > it tries to encode them using 8-bit characters. Lucky for us, at this time > NYTIMES.COM does not check if userid/password are valid, just that they're > a part of the cookie!! So, just add these two lines to your junkbuster > config: > > wafer PW=0 > wafer ID=0 > > and nytimes.com will greet you as "0" and let you right in. It doesn't check the PW or ID at all except the first time you log in. After that it generates a new cookie titled NPLCNYT and that is the only cookie it checks; the PW and ID are not required to be there at all. If you delete the NPLCNYT cookie, it will check the PW/ID and generate a new one. An example cookie is below: NPLCNYT=AAAALw>AAAAAX9IUUWiPhfALqHZuSh2mUM0yzNOwGRReAAAAAsAAAAAY3lwaGVycHVua3M> ^^^^^^^^^^^^^^^^^^^^^^|||||##### The characters marked ^^^ appear to be random, and change every time a new cookie is generated. The ones marked ##### appear to encode the originating IP address, and ||||| appears to be date/time. The rest don't seem to change (tho I only tried ID=cypherpunks PW=cypherpunks). The server will still accept the cookie if your IP address changes. There does seem to be some sort of checksum on the data. While the relatively small area it uses to store the time and IP address wouldn't seem to leave much room for this, I wasn't able to find a spoofed cookie that it would accept - perhaps the checksum is included in the 'random' part.

5 5

Re: Tossing your cookies [Re: Why no "Banner Ad Eaters"?]
by Alan Olsen 17 Dec '03

17 Dec '03

At 09:16 AM 1/25/98 -0800, Jim Gillogly wrote: > >Heinz-Juergen Keller skribis: >> Just a silly? question on cookies: >> What will happen if I just link cookies.txt to /dev/null ? >> Is there anything speaking against this solution? > >Works fine on Unix and Linux systems if you're not a cookie fan: >the remote sites think you've eaten their cookies, but you've >merely frisbeed them into the bit bin. > >It's better than telling Netscape you want to be asked: some >sites set a dozen cookies per hit, seems like, and saying "no" >to each gets immediately tedious. If you tell Netscape to reject >them, some sites won't serve you the content. Setting the browser >to accept everything and linking cookies.txt to /dev/null works >well for me. You can also make the cookie.txt file read only. Both of these options only make the cookies valid for the current session. They do not make them go away all together. Some of the site that cookie bomb do so out of ignorance. Old versions of Apache have such cookie bombing set by default. (They changed the name of the option soon after. The option was originally called "Mod_cookies" and people left it figuring that if they disabled it, they could not use cookies. Actually it is a method for tracking usage patterns within a site. The module was renamed to reflect that.) I am willing to bet that most of the sites that send cookies are not even using the data they provide. Few log file crunchers can make use of the cookie data from user tracking in any worthwhile manner. Any company that relies on cookies to hold onto membership information is foolish. (Cookie files only hold 300 entries. Surf enough and the membership infomation gets washed away with the tide.) Cookies are not needed for storefronts. There are better ways to accomplish the same thing. (There are CGI storefronts that save the information on files on the server, for instance.) I can understand why cookies were thought up in the first place. Much of cgi programming is overcoming the stateless nature of http. Unfortunatly, the idea was not thought out that well... --- | "That'll make it hot for them!" - Guy Grand | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0

Eureka! Mon Jan 26 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Monday's issue of Eureka! PUSSY PARADISE Yet again Eureka! has managed to negotiate a special week's free access to one of the web' s premier porn sites. Pussy Paradise is simply packed with 100s of videos (many live), thousands of photos, and so much more. You will need your credit card as adult verification but it will not be charged for your free week! So check it out - there's smut a plenty! Pussy Paradise .... http://www.pussyparadise.com/eureka.html PLEASE VISIT THIS FINE EUREKA! PARTNER SITE The Babe Experience! http://www.unitedadultsites.com/freesex Hot site featuring babe pictures, and I mean really beautiful babe pictures. Also hot phonesex, video and audio feeds! UTOPIAN FILTH Pretty girls get down dirty. The horny harlots take you by the hand and take you on a tour of their own carnal lust. See their pics, see their hot bodies entwined. Clean site, filthy content. Nice girls. (When can we shower with them)! Utopian Filth .......... http://www.firstsightimages.com/uf/ 4 BOOBS It's not just for boob lovers. It's for asian, bondage, group, lesbian, and toy lovers to name just a few. It's easy to access the different categories, to get to what turns you on. Plenty of pix, busty boobs included. Go milk this site. 4 Boobs ............................. http://www.4boobs.com/ CANDID CAMERA Smile. You're naked, fornicating, and on Candid Camera. This site would sure be a ratings winner if they brought the TV show back with this kind of content. Get your kicks spying on unsuspecting chicks with their tits and bits out? You'd better believe it. These babes are surprised and naked! Candid Camera ................... http://www.dragonking.com/ FABULOUS FEMALES Spend some time with these fabulous females. They've got no clothes on, no inhibitions, and know how to get you horny. These girls are stunning enough to hold your rigid attention as you check out their raw strip pix. Hot site. Hot girls! Fabulous Females ................... http://www.sexhost.net/ BRAND NEW - HOORAY! THE ADULT SEARCH ENGINE Now adult surfers have our very own search engine, directly designed to only list adult sites, and so run fast because all other types of site are ignored. Check it out today! Hooray! -----------------> http://eureka.abc-web.com/hooray/ FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here --> http://www.netscape.com/download/ 20vids+Chat .. http://209.1.31.175/chat/videochat.cgi?eureka CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Adult/Sex Chat -----------------> http://137.39.63.229/chat/ General/Fun Chat -------> http://137.39.63.229/chat/funchat/ THE BEST PHONE SEX NEW!!!! LD Call only! - Live Hot Girls!!!!--->1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline-------->1-800-644-8779 FREE: Live 1-on-1 (international call only)--->011-678-77416 AMATEUR SITE OF THE DAY MISTY SEX: This sexy lady is from jolly England. Her site is full of bare ass pictures, kinky AVIs and nasty wave files. Her accent will give anyone a quick boner! This gal is one hot commodity, jump on her soon, what could be better than a little FISH & chips? ---------------------------> http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY TeenStories.com: Dozens of steamy sex stories about teen sexual experiences! This site is as hot as they come! Visit TeenStories.com today! ......... http://www.teenstories.com/ DAILY CARTOON ----------> http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Every day we bring you an exclusive choice pic of a famous adult porn star. And we must tell you - these pix are abso- luletly brilliant! ---> http://www.xxxadultstars.com/eureka/ GAYEUREKA! The gay newsletter is now available. You can get it here! Gay Eureka! ----------> http://eureka.abc-web.com/gayeureka/ EUREKA! TRANSLATIONS As well as English you can now choose any of these languages DEUTSCH ------> http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ------> http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ----> http://eureka.abc-web.com/eureka/francais.htm ITALIANO ----> http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE > http://eureka.abc-web.com/eureka/portuguese.htm TODAY'S FREE PIX Pic 1 --------------------------> http://137.39.63.229/?260 Pic 2 --------------------------> http://137.39.63.229/?261 Pic 3 --------------------------> http://137.39.63.229/?262 Pic 4 --------------------------> http://137.39.63.229/?263 Pic 5 --------------------------> http://137.39.63.229/?264 Pic 6 --------------------------> http://137.39.63.229/?265 Pic 7 --------------------------> http://137.39.63.229/?266 Pic 8 --------------------------> http://137.39.63.229/?267 Pic 9 --------------------------> http://137.39.63.229/?268 Pic 10 --------------------------> http://137.39.63.229/?269 ============================================================ TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS EMAIL RIGHT BACK TO US. ============================================================

1 0

Your nyrealty.com preferences
by aptinfo＠nyrealty.com 17 Dec '03

17 Dec '03

Thank you, Random Q. Hacker, for setting your preferences at nyrealty.com Now, every time you return to www.nyrealty.com, the site will be customized according to your preferences. If you have any questions regarding the operations of the site or if you need assistance in finding an apartment in New York City, please contact us at aptinfo(a)nyrealty.com Sincerely, Real Estate On-Line http://www.nyrealty.com

1 0

More dumb ad sites for your killfile
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

ads.lycos.com ad.doubleclick.net ads.altavista.digital.com ad.preferences.com ph-ad*.focalink.com www.news.com/Banners ads.lycos.com static.wired.com/advertising

3 2

Re: Why no "Banner Ad Eaters"?
by John Kelsey 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- [ To: cypherpunks ## Date: 01/25/98 ## Subject: Re: Why no "Banner Ad Eaters"? ] >Date: Thu, 22 Jan 1998 23:53:19 -0800 >From: Bill Stewart <bill.stewart(a)pobox.com> >Subject: Re: Why no "Banner Ad Eaters"? >At 11:16 PM 1/22/98 -0800, Wei Dai wrote: >>It seems to me that blocking ads is no different from >>blocking porn. All of the technology being developed for the >>latter purpose (PICS for example) will eventually be used >>for the former. >With both PICS ratings for web pages and the new TV ratings, >somehow the ratings only apply to the program and not the >ads. After all, if each TV commercial had to be separately >rated, people would rapidly develop equipment to autoblock >commercials, and that just wouldn't do. Note that there's a difference in incentives, here, too. Porn sites in most countries, including the US, have some strong legal and social incentives to rate themselves honestly, and probably have relatively little financial incentive to rate themselves inaccurately. (Think of the hassles you get with things like disputed credit card payments made by someone's 14-year-old kid.) This makes the blocking software's job a lot easier. I just can't see what incentive advertisers have to co-operate with rating systems of this kind. How would it improve your bottom line? Advertisers are likely to get paid either on the basis of number of people who see the ad, or on the basis of number of people who click on the ad. In either case, letting your ad be casually filtered out is just not going to make you any money. About the only incentive I can see for letting your ads be blocked is the desire not to make too many ad recipients mad at the advertiser. (Presumably, this is the reason why spam is almost never used by reputable companies--they don't want to make too many potential customers angry.) But this doesn't seem to apply to webpage ads, which manage not to be quite intrusive enough to enrage their targets. >Unfortunately, you're probably right, though providers and >advertisers who really want their messages to get through >will find ways to do it. The current banners are nice, >friendly implementations in that they're easy to identify >and block; newer ones will just be sneakier. I assume that, sooner or later, the advertisements will be woven in so well that it's all-but-impossible to get rid of them without also getting rid of the useful content you're trying to read/see/use. [Good comments deleted.] >Alternatively, >they may go to clickthrough payment models - the web page >owner only gets paid when people click on the ad, though >perhaps at a higher rate than current "impressions". Maybe. Either way, in the long run, ads that don't seem to be generating sales aren't going to be renewed. Being able to count clicks gives you one metric for this; another is completed sales from those clicks. This defines why web page owners that are making lots of ad revenue will have lots of incentive to make people who use their services look at and respond to their ads. People will try various things to make this happen. If none of them work, then ad-supported pages will cease to exist. Many of the services now supported by ads have other good revenue models. Sites like Dejanews and Altavista have enough name-recognition to do things like sell custom searching or research from their Usenet and Web databases, or provide statistical customer profiles that don't reveal customer identities but are still of use to marketers. >Bill >Bill Stewart, bill.stewart(a)pobox.com Note: I read CP-LITE instead of the whole list. Please CC me on replies. - --John Kelsey, kelsey(a)counterpane.com / kelsey(a)plnet.net NEW PGP print = 5D91 6F57 2646 83F9 6D7F 9C87 886D 88AF -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBNMwNTiZv+/Ry/LrBAQH6KgP/c0o0ZiraSW7PbmDK6YQh+D3wp48cIn3S manFeca05yuoJDvs6ZKO85ycvVTvVZXBP8tvVDDAMD35CEfxGMNc/0bk1hqS/rx9 /gkHy/OYeKvcSscP9KwWTRtGu+DhHxjNqxOuFFgw6QBCxA5KDdUakF64POlYbi/2 +/kMlWS3on0= =QsU7 -----END PGP SIGNATURE-----

1 0

Technolgies of Political Control
by John Young 17 Dec '03

17 Dec '03

Thanks to Axel Horns and Ulf Möller we offer an excerpt of the draft European Parliament report on global surveillance cited in news reports recently: An Appraisal of Technolgies of Political Control Scientific and Technological Options Assessment Working Document (Consultation version) PE 166 499 Luxembourg, 6 January 1998 The report covers: - The Role & Function of Political Control Technologies - Recent Trends and Innovations - Developments in Surveillance Technologies - Innovations in Crowd Control Weapons - New Prison Control Systems - Interrogation, Torture Techniques and Technologies - Regulation of Horizontal Proliferation - Further Research See excerpt: http://jya.com/atpc.htm Printed copies are available from the staff of the British MEP Glyn Ford (tel +322 2843748 fax +322 2849059, jford(a)europarl.eu.int)

2 1