December 2003 - cypherpunks-legacy

[NOISE/Fun] some 'special' primes
by Laurent Demailly 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I hope this is not extremely already know,... but, seeing on the list a sig with someone claiming to have the 'last' prime, I played a bit this nite and searched for the *first* alphabetically sorted prime (once written as spelled, sorted like with unix's sort) dependending on the language : Easiest: English : 11 : eleven A bit more fun : German : 811 (dunno how to write it, but it starts with an "a") Exotic one : slovenian: 10019 desettisocdevetnajst And..... the tricky one, which I hope is the good one (challenge: find one 'before') : French (and possibly spanish/italian,...too) : 105 105 000 105 167 (it spells cent cinq mille cent cinq milliards cent cinq mille cent soixante sept) [note that 'billion' is not used for numbers in common language, and that soixante-dix has a - and not a space :-) ] More languages ? better results anyone :-) ? Regards dl ps: I used gnu MP lib for my hack when I hit the 2^32 limit, but it's rather slow... (ok, its prolly due to my lasy prime algo too, but...) is there some well-known fast mp lib to play around with primes ? (should I look and extract PGP's ?) - -- Laurent Demailly * http://hplyot.obspm.fr/~dl/ * Linux|PGP|Gnu|Tcl|... Freedom 105 105 000 105 167 -----BEGIN PGP SIGNATURE----- Version: 2.6.2i Comment: Processed by Mailcrypt 3.3, an Emacs/PGP interface iQCVAgUBMFEKvXk52/beodHxAQH+cgQAwUzDczvIzXaBzYx/Q5oerXFZ/ABDjp8b Sz20qgBmB3BP9jE8GbibqIF1FOExS2r3irg4PQHhUwuX7wWT/deo8KzWMrb3C2fi X3kMbtWM9hQNHJ1mRpAE41M1NuHgk8xM43WbkZcLyYOPXXWSAAs0qc+bdNamtUDT iujkF9fQxck= =mkaz -----END PGP SIGNATURE-----

2 1

Re: Web Exon A-rate
by dsc＠swcp.com 17 Dec '03

17 Dec '03

Somebody passed this along: >WS Journal, Sept. 8, 1995. > >Cleaning the Web: Companies to Seek Pornography Blocker > >Array of Technology Firms Will Join in Effort to Let >Parents Screen the Internet > >By Jared Sandberg [snip] This is a good idea. And maybe cryptography can get involved--see below. As a parent it is my responsibility to control what comes into the house and to determine what limited view of the net my kids see. The screening software to do this could be in my home or part of a service of my service provider. A few companies have some simple products for doing this. Most are discouraged by threats from congress to reduce the market need. Most products use a simple red list to block access according to literature sent me. Some look for key words. Normally, I would say that it is very premature for standards work. It would be good to see more ideas tried. The Exon threats probably do not allow this, so I see this news as a good thing. One place to start is the web. Depending on the kid's age and other factors I would want to have different limitations on what the kid sees. Older kids might just get warnings. I would like--for the little ones--to limit the view to some combination of sites listed on green lists. The view for slightly older kids might use red lists to exclude sites instead. (I really would want to create some logical combination of lists for each kid.) Organizations can compete for the list market. I might use these in what ever combination I like and also add my own. It is important to note that the kinds of things I would like to screen out or in might be different from what the next person would like to screen out or in. (I put little faith in content screening.) The problem might be in getting huge lists every week. And pages that seemed fine once could have changed. Current red list subscriptions are expensive--it is easier to keep kids off the computer. >>>>>> the part that mentions cryptography >>>>> As an alternative to green lists consumer organizations and do-gooder organizations might certify pages. These might be virtual green lists. Each web page would have the cert built in--perhaps in comments to allow most viewers to work. Instead of checking a list in this case, the screening software would ask the page to verify itself. If the cert was PGP based, then every home doing this would have to have PGP. The screening product could use PGP. Perhaps PGP would be slow. There might be some way to check signatures that is faster and does not have patent limitations. It would be nice if it was possible for the browser to see the first screenful without waiting for the screener to see the entire page. Only those that especially want to make their sites available to kids of picky parents would get the pages certified. Maybe just sending in e$3 would do it. Or e$50 to get to the head of the list. In whatever standards that come about, it is important that only those involved in the screening process pay the price ($, delays). Everybody else should be able to carry on. I do worry that some quick standards would be put into place and that innovation in this area would then become arrested. Dar =========================================================== Dar Scott Home phone: +1 505 299 9497 Dar Scott Consulting Voice: +1 505 299 5790 8637 Horacio Place NE Email: darscott(a)aol.com Albuquerque, NM 87111 dsc(a)swcp.com Fax: +1 505 898 6525 http://www.swcp.com/~correspo/DSC/DarScott.html ===========================================================

1 0

Re: GAK Hacks
by Hal 17 Dec '03

17 Dec '03

It is interesting to see that the proposed solutions to avoiding GAK hacks (URL:http://www.eskimo.com/~joelm/criteria.txt) largely revolve around certificate restrictions. Only keys signed with certificates from accepted escrow agencies can be used, and there is a "root certificate" used to authorize new escrow agencies. This is similar to some of the restrictions in the widely used Netscape web browser. It only accepts certificates from a limited number of agencies (actually only one which is public, the RSA spinoff VeriSign). This limitation is not based on escrow approval as in the GAK papers, but it ends up with something of the same results: interoperability with Netscape is only possible if you go through approved channels. And supposedly VeriSign does not make it too easy to get a certificate if you are not a straight-arrow corporate type. Maybe it would be good practice for a future GAK hack to try fixing these problems with Netscape. I could see two possibilities. One would be to create a patcher which would let you change the set of certificate authorities accepted by the browser. Currently the browser accepts at least one (an internal Netscape test CA) which is not needed by end users. Maybe its public key could be statically overwritten by the patch program with the public key of the replacement CA. This sounds simple and safe. The patch program can confirm that the data being changed matches the test CA. Another idea would be to patch the browser to emit full 128 bit SSL rather than the crippled 40 bit SSL it currently creates. This would be trickier as it requires code changes, but they may not be as bad as it seems. The 40 bit SSL is actually calculated as 128 bits internally. Then 88 bits are sent in the clear. We would need to skip sending those 88 bits, and also change the transmitted bytes which encode which encryption is being used. This shouldn't be too bad as it mostly would eliminate code or change some static values. The one thing I am unsure of is whether the 40 bit version sends the entire 128 bit SSL key in the RSA encrypted data (88 bits of which would be redundant, also being sent in the clear) or whether it sends only the 40 bits RSA encrypted. If the latter it would be somewhat more work to do the patch because now a larger value will have to be packed into the RSA record. If it is sending the 128 bits all the time then the patch would be much easier. This second patch is more advantageous for end users as it allows them to have strong encryption rather than the weak 40 bits which we have been breaking. The first would be a more direct demonstration of the difficulties of using certificate restrictions to limit functionality. The criteria.txt paper suggests checksumming the cryptographic routines to prevent patches like this, but generally I think such checksums can be defeated pretty easily. I doubt that Netscape currently has any such thing, though. Netscape says they will allow some form of user specification of certificates in a future version of the browser, but they have been saying this for quite some time and still it is not here. Hal

2 1

Open letter to Geoff Greiveldinger, DoJ
by Carl Ellison 17 Dec '03

17 Dec '03

I just posted the following. I'll have to wait to see if the moderator accepts it. Date: Sat, 9 Sep 1995 01:11:06 -0400 From: Carl Ellison <cme> To: risks(a)csl.sri.com Subject: Open letter to Geoff Greiveldinger, DoJ NIST (the National Institute of Standards and Technology) held a two day public meeting on September 6 and 7, 1995 to discuss Software Key Escrow as a possible means of achieving export of cryptography. In the morning of 9/7, Goeff Greiveldinger of the Department of Justice gave a description of the kinds of crimes which DoJ wants to use wiretapping to solve. He closed this litany of lawbreaking with the assertion that software manufacturers don't want to provide products which allow such lawbreakers to keep their criminal evidence hidden from law enforcement. I'm sorry to disillusion you, Geoff, but I *do* want to make such systems. Would you have Ryder stop renting trucks because some terrorist decided to fill one with explosives and kill many innocent children? Would you have Americans stop making automobiles because bank robbers have been known to use cars for getaways? Would you have all new buildings constructed with FBI microphones in every wall because some criminals meet in private rooms in order to plan crimes? When an American company sweeps its conference room for bugs, finds some and destroys them, it doesn't matter whether those bugs were planted by industrial spies or the FBI. The company has a right to eliminate them. When that company ties two such conference rooms together by video-conference equipment and encrypts the line between them using strong link encryption, it is performing the same defensive operation in cyberspace. It is protecting itself from spies and it doesn't matter that the wiretaps it frustrates might be illegal ones by industrial spies or legal ones by the FBI. The right to attempt to achieve privacy is a long-standing one in this country and not one to allow to be lost. When I design and build systems for privacy for my customers, I am providing products for law-abiding, honest people. I am aware of criminals, of course. Criminals are the threats against whom I protect my customers. These criminals are usually not in the government but that doesn't mean that I believe I should offer my honest customers up for a strip-search in cyberspace. The law enforcement agencies of this free country have no right to expect blanket access to the ciphertext of citizens. It will take legislation to get that right and I will do everything in my power to keep such legislation from passing. Barring such legislation, I will make sure that honest American citizens have cryptography with which to attempt to maintain their privacy, even from the government. We have the right to attempt to keep a secret from government agencies and continuous demonstration of that right is an important part of this free country. On the other hand, I am sympathetic to law enforcement officers. I have several friends in that business. I have asked my friends and acquaintances who do surveillance (2 IRS agents investigating organized crime for tax evasion; 2 undercover cops in Boston's highest drug neighborhood; 1 DEA agent in the midwest) if they ever encounter encrypted communications or files. They don't. Neither does anyone in their offices. Of course, even if they did it would remain so important to preserve our right to attempt to keep secrets from the government that their frustration would just have to be accepted. The fact that this isn't a real problem makes my decision that much easier. I am left with no moral qualms at all. In summary, criminals are so few that I will not design for them. I will not treat my vast majority of honest users as if they were criminals just because some criminal might someday use my product and frustrate you. ObRisk: We run the risk of losing our fundamental right to attempt to keep a secret from the government -- a practice we need to preserve in order to protect ourselves from criminals in cyberspace. There are powerful forces in the US government attempting to cajole us into giving up that right. [see http://www.clark.net/pub/cme/html/nist-ske.html for more on this subject]

1 0

Princes Die! / Re: None
by Anonymous 17 Dec '03

17 Dec '03

The metallic custard scent ripped through the stegosaurus' nostrils. Clearly, the monotreme journey it would begin as it had ended. The ponder-tree hung itself in the heavy air, it's sap becomming purple, and flowed engimatically like a river of broken curves and powdered eggshells. - A'Tak A'Tdurn

1 0

===>> FREE 1 yr. Magazine Sub sent worldwide- 315+ Popular USA Titles ===>> FREE 1 yr. Magazine Sub sent worldwide- 315+ Popular USA Titles
by janetdove＠infosat.com 17 Dec '03

17 Dec '03

Hi fellow 'netters, My name is Janet Dove and I recently started using a magazine subscription club in the USA that has a FREE 1 yr. magazine subscription deal with your first paid order- and I have been very pleased with them. They have over 1,500 different USA titles that they can ship to any country on a subscription basis. As for computer magazines from the USA, they more of a selection than I ever knew even existed. They have magazines for most every area of interest in their list of 1,500 titles. Within the USA, for their USA members, they are cheaper than all their competitors and even the publishers themselves. This is their price guarantee. Overseas, on the average, they are generally around one-fourth to one-half of what the newstands overseas charge locally for USA magazines. On some titles they are as little as one-tenth of what the newstands charge. They feel that mgazines should not be a luxury overseas. In the USA, people buy magazines and then toss them after reading them for just a few minutes or hours. They are so cheap in the USA! Well, this company would like to make it the same way for their overseas members. They are also cheaper than all their competitors in the USA and overseas, including the publishers themselves! This is their price guarantee. Around one-half their business comes from overseas, so they are very patient with new members who only speak limited English as a 2nd language. Their prices are so cheap because they deal direct with each publisher and cut-out all the middlemen. They will send you their DELUXE EMAIL CATALOGUE (around 400K-big and juicey) !)...if you completely fill out the form below. It has lists of all the freebies, lists of all the titles they sell, titles broken down by categories and detailed descriptions on nearly 1000 of the titles that they sell. Please do not email me as I am just a happy customer and a *busy* student. I don't have time to even complete my thesis in time, let alone run my part-time software business! Email them directly at: munish(a)grfn.org *------------cut here-----------------------------------------------* REQUEST FOR MORE INFO: please copy this section only and email to: munish(a)grfn.org (sorry, but incomplete forms *cannot* be acknowledged) Name: Internet email address: Smail home address: City-State-Zip: Country: Work Tel. #: Work Fax #: Home Tel. #: Home Fax #: Name of USA mags you currently get on the newstand or in the store: Name of USA mags you currently get on a subscription basis, through the mail: Name of USA mags you would like price quotes on when we call you: Catalogue format desired from below 2 choices (list "1" or "2"): (1. 22-part email message; 2. atttached file by email) {{{Note- 22-part email can be received by anyone with any computer. Attached file format may not be for you: it is sent as an uncompressed 400K file formatted in Microsoft World text only format, on a Mac; if you don't use Microsoft Word on a Mac - you will have to know how to convert into a usable text format. We cannot help you with this. If in doubt, we suggest you go with the universally acceptable 22-part email message. You can always manually spend a few minutes pasting the parts into one whole.}}} If you saw this on a newsgroup, which newsgroup did you see it on?: How did you hear about us (name of person who referred you or the area of the internet that you saw us mentioned in): Janet Dove 090895BGV *------------cut here-----------------------------------------------* They guarantee to beat all their competitors' prices. Sometimes they are less than half of the next best deal I have been able to find and other times, just a little cheaper - but I have never found a lower rate yet. They assured me that if I ever do, they will beat it. They have been very helpful and helped me change my address from the USA to Finland and then back again when I moved last month. They are very knowledgeable about addressing mags worldwide. They have a deal where you can get a free 1 yr. sub to a new magazine from a special list of over 300 popular titles published in the USA. They will give you this free 1 yr. sub when you place your first paid order with them to a renewal or new subscription to any of the over 1,500 different popular USA titles they sell. They can arrange delivery to virtually any country and I think they have clients in around 35 or 36 countries now. Outside the USA there is a charge for foreign postage and handling (on both paid and freebie subs) that varies from magazine to magazine. I have found their staff to be very friendly and courteous. They even helped me with an address change when I moved from one country to another. The owner thinks of his service as a "club" and his clients as "members" (even though there is no extra fee to become a member - your first purchase automatically makes you a member) and he is real picky about who he accepts as a new member. When he sets you up as a new member, he himself calls you personally on the phone to explain how he works his deal, or sometimes he has one of his assistants call. He is kind of quirky sometimes - he insists on setting up new members by phone so he can say hi to everyone (I sure wouldn't want to have his phone bills!), but you can place future orders (after your first order) via E-mail. He has some really friendly young ladies working for him, who seem to know just as much as he does about this magazine stuff. If you live overseas, he will even call you there, as long as you are interested, but I think he still makes all his overseas calls on the weekends, I guess cause the long distance rates are cheaper then. He only likes to take new members from referrals from satisfied existing members and he does virtually no advertising. When I got set-up, they had a 2-3 week waiting list for new members to be called back so that they could join up. (Once you are an existing member, they help you immediately when you call. ) I think they are able to get back to prospective new members the same day or within a few days now, as they have increased their staff. I am not sure about this.........but if you email the above form to them, that is the way to get started! They will send you some FREE info. via E-mail (the short version (around 40K) of their catalogue, or if you request it the DELUXE LONG VERSION (around 400K-big and juicey) !)...if you fill out the form near the top of this message. They then send you email that outlines how his club works and the list of free choices that you can choose from, as well as the entire list of what he sells; and then they will give you a quick (3-5 minute) friendly, no-pressure no-obligation call to explain everything to you personally and answer all your questions. Once you get in, you'll love them. I do. For more info, just fill out the form near the top of this message and email it to: munish(a)grfn.org Sincerely, Janet Dove

1 0

In the comfort of home
by dawn＠iTribe.net 17 Dec '03

17 Dec '03

<HTML><PRE><BODY BGCOLOR="#ffff80">Subj: MAKE MONEY with your COMPUTER too...it's EASY! Date: 97-08-22 12:53:52 EDT From: 18112320(a)gte.net Reply-to: the.money.tree(a)make.money.on.line.21.com To: all.investors.21(a)investing.on.the.net.com PLEASE TAKE THE TIME TO READ THIS. THIS PROGRAM REALLY DOES WORK! ***********We Will SEND 5000 E-Mails FREE************ Dear friend, Do you realize hundreds of thousands of dollars are made each day by way of the internet. Haven't you ever thought "I wish I could find a way to make money with my computer and my internet connection"? Well you can! The internet is making it possible for everyday, ordinary people like you and me to make lots of money. Many of you will read this and think "That can't work" or "It sounds too good to be true". But I challenge you to discard traditional thinking and allow yourself the opportunity to make some of those thousands of dollars that are exchanging hands each and every hour. The opportunity below is no scam and is very legal. It is a simplified form of email marketing using MLM techniques. The first time I saw it I deleted it immediately. But the next time I saw it I figured I had nothing to lose with so very little investment required. This is my 2nd time doing this program. The first time I did this I made very good money. I decided to do it again but make it even better by sending out more mail. Please at least read this as it may be the answer you've been looking for. You certainly have nothing to lose. "THINK ABOUT IT" Before you delete this program from your mailbox, as I almost did, take a little time to read it and REALLY THINK ABOUT IT. Get a pencil and figure out what could happen when YOU participate. Figure out the worst possible response and no matter how you calculate it, you will still make a lot of money! Definitely get back what you invested. Any doubts you have will vanish when your first orders come in. IT WORKS! Paul Johnson, Raleigh, NC Everything below this line is what was sent to me. *** Print This Now For Future Reference *** $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ This is a MONEY-MAKING PHENOMENON. PRINT this letter, read the program... THEN READ IT AGAIN !!! You are looking at the most profitable and unique program you may ever see. It has demonstrated and proven ability to generate large sums of money. This program is showing fantastic appeal with a huge and ever growing population which needs additional income. This is a legitimate LEGAL money-making opportunity. It does not require you to come in contact with people, do any hard work, and best of all, you never have to leave the house, except to get the mail. If you believe that some day you will get that lucky break that you have been waiting for, THIS IS IT! Simply follow the easy instructions, and your dream will come true! This electronic multi-level marketing program works perfectly...100% EVERY TIME! Thousands of people have used this program to raise capital to start their own business, pay off debts, buy homes, cars, etc., even retire! This is your chance, so don't pass it up. OVERVIEW OF THIS EXTRAORDINARY ELECTRONIC MULTI-LEVEL MARKETING PROGRAM Basically, this is what we do: We sell thousands of people a product for $5.00 that costs us next to nothing to produce and e-mail. As with all multi-level businesses, we build our business by recruiting new partners and selling our products. Every state in the U.S. allows you to recruit new multi- level business online (with your computer). The product in this program is a series of four business and financial reports. Each $5.00 order you receive by "snail mail" will include the e-mail address of the sender. To fill each order, you simply e-mail the product to the buyer. THAT'S IT!...the $5.00 is yours! This is the GREATEST electronic multi-level marketing business anywhere! FOLLOW THE INSTRUCTIONS EXACTLY! Let's face it, the profits are worth it! THEY'RE TREMENDOUS!!! So go for it. Remember the 4 points and we'll see YOU at the top! ******* I N S T R U C T I O N S ******* This is what you MUST do: 1. Order all 4 reports listed and numbered from the list below. For each report send $5.00 CASH, YOUR E-MAIL ADDRESS and YOUR RETURN POSTAL ADDRESS (in case of a problem) to each person listed. When you order, make sure you request each SPECIFIC report. You will need all four reports, because you will be saving them on your computer and reselling them. 2. IMPORTANT--DO NOT alter the names, or their sequence other than instructed in this program! Or you will not profit the way you should. Replace the name and address under REPORT #1 with yours, moving the one that was there down to REPORT #2. Move the name and address under REPORT #2 to REPORT #3. Move the name and address under REPORT #3 to REPORT #4. The name and address that was under REPORT #4 is dropped off the list and is NO DOUBT on the way to the bank. When doing this, please make certain you copy everyone's name and address ACCURATELY!!! Also, DO NOT move the Report/Product positions! 3. Take this entire program text, including the corrected names list, and save it on your computer. 4. Now you're ready to start a massive advertising campaign on the WORLDWIDE WEB! Advertising on the WEB is very, very inexpensive, but there are HUNDREDS of FREE places to advertise also. Another avenue which you could use is e-mail mailing lists. You can buy these lists for under $20/1,000 addresses. START YOUR AD CAMPAIGN AS SOON AS YOU CAN. ALWAYS PROVIDE SAME-DAY SERVICE ON ALL ORDERS!!! REQUIRED REPORTS ***Order each REPORT by NUMBER and NAME*** ALWAYS SEND $5 CASH (Concealed) FOR EACH ORDER REQUESTING THE SPECIFIC REPORT BY NAME AND NUMBER. ALWAYS SEND FIRST CLASS OR PRIORITY MAIL AND PROVIDE YOUR E-MAIL ADDRESS FOR QUICK DELIVERY. ______________________________________________________________ REPORT #1 "HOW TO MAKE $250,000 THROUGH MULTI-LEVEL SALES" ORDER REPORT #1 FROM: D.R. Marketing 2318 Halyard Lane Cheasapeake Va 23323 ___________________________________________________________________ REPORT #2 "MAJOR CORPORATIONS AND MULTI-LEVEL SALES" ORDER REPORT #2 FROM: Ann Rossi P.O. Box 5894 Glen Allen Va. 23058 ___________________________________________________________________ REPORT #3 "SOURCES FOR THE BEST MAILING LISTS" ORDER REPORT #3 FROM: "Bonni Cakes" (Randy) P O BOX 7247 Endicott, NY 13760-7247 ___________________________________________________________________ REPORT #4 "EVALUATING MULTI-LEVEL SALES PLANS" ORDER REPORT #4 FROM: Information Services 11006 4th St. North Box 160 St. Petersburg, FL 33716 ______________________________________________________________________ HERE'S HOW THIS AMAZING PLAN WILL MAKE YOU $MONEY$ Let's say you decide to start small just to see how it goes. Assume your goal is to get 10 people to participate on your first level. (Placing a lot of FREE ads on the internet could EASILY get a better response.) Also assume that everyone else in YOUR BUILDING ORGANIZATION gets ONLY 10 downline members. Follow this example for the STAGGERING results below. 1st level--your 10 members with $5 $50 2nd level--10 members from those 10 ($5 x 100) $500 3rd level--10 members from those 100 ($5 x 1,000) $5,000 4th level--10 members from those 1,000 ($5 x 10,000) $50,000 THIS TOTALS-----------> $55,550 Remember friends, this is assuming that the people who participate only recruit 10 people each. Dare to think for a moment what would happen if everyone got 20 people to participate! Some people get 100's of recruits! THINK ABOUT IT! By the way, your cost to participate in this is practically nothing.You obviously already have an internet connection and email is FREE!!! REPORT#3 will show you the best methods for bulk emailing and purchasing email lists. REMEMBER: Approx. 50,000 new people get online monthly! ORDER YOUR REPORTS NOW!!! *******TIPS FOR SUCCESS******* TREAT THIS AS YOUR BUSINESS! Send for the four reports IMMEDIATELY, so you will have them when the orders start coming in because: When you receive a $5 order, you MUST send out the requested product/report to comply with the U.S. Postal & Lottery Laws, Title 18,Sections 1302 and 1341 or Title 18, Section 3005 in the U.S. Code,also Code of Federal Regs. vol. 16, Sections 255 and 436, which state that "a product or service must be exchanged for money received." * ALWAYS PROVIDE SAME-DAY SERVICE ON THE ORDERS YOU RECEIVE. * Be patient and persistent with this program. If you follow the instructions exactly the results WILL undoubtedly be SUCCESS! * ABOVE ALL, HAVE FAITH IN YOURSELF THAT YOU CAN SUCCEED! *******YOUR SUCCESS GUIDELINE******* The check point that guarantees your success is simply this: You MUST receive 10 to 20 orders for REPORT #1! THIS IS A MUST! If you don't within two weeks, advertise more and send out more programs until you do. Then, a couple of weeks later you should receive at least 100 orders for REPORT #2. If you don't, advertise more and send out more programs until you do. Once you have received 100, or more orders for REPORT #2, YOU CAN RELAX, because you will be on your way to the BANK! -OR- You can DOUBLE your efforts! REMEMBER: Every time your name is moved down on the list you are in front of a DIFFERENT report, so you can KEEP TRACK of your PROGRESS by watching what report people are ordering from you. IT'S THAT EASY!!! NOTE: IF YOU NEED HELP with starting a business, registering a business name, how income tax is handled, etc., contact your local office of the Small Business Administration (a Federal agency) for free help and answers to questions. Also, the Internal Revenue Service offers free help via telephone and free seminars about business taxes. ******* T E S T I M O N I A L S ******* This program does work, but you must follow it EXACTLY! Especially the rule of not trying to place your name in a different position, it won't work, you'll lose a lot of money. I'm living proof that it works. It really is a great opportunity to make relatively easy money, with little cost to you. If you do choose to participate, follow the program exactly, and you'll be on your way to financial security. If you are a fellow Christian and are in financial trouble like I was, consider this a sign. I DID! Good Luck & God Bless You, Sincerely, Chris Johnson P.S. Do you have any idea what 11,700 $5 bills ($58,500) looks like piled up on the kitchen table?...IT'S AWESOME! My name is Frank. My wife Doris and I live in Bel-Air, MD. I am a cost accountant with a major U.S. Corporation and I make pretty good money. When I received the program I grumbled to Doris about receiving "junk mail"! I made fun of the whole thing, spouting my knowledge of the population and percentages involved. I "knew" it wouldn't work. Doris totally ignored my supposed intelligence and jumped in with both feet. I made merciless fun of her, and was ready to lay the old "I told you so" on her when the thing didn't work... well, the laugh was on me! Within two weeks she had received over 50 responses. Within 45 days she had received over $147,200 in $5 bills! I was stunned. I was sure that I had it all figured and that it wouldn't work...I AM a believer now. I have joined Doris in her "little" hobby. I did have seven more years until retirement, but I think of the "rat race" and it's not for me...We owe it all to MLM. Frank T., Bel-Air, MD This is the only realistic money-making offer I've ever received. I participated because this plan truly makes sense. I was surprised when the $5.00 bills started filling my mail box. By the time it tapered off I had received over 8,000 orders with over $40,000 in cash. Dozens of people have sent warm personal notes too, sharing the news of their good fortunes! It's been WONDERFUL. Carl Winslow Tulsa, OK The main reason for this letter is to convince you that this system is honest, lawful, extremely profitable, and is a way to get a large amount of money in a short time. I was approached several times before I checked this out. I joined just to see what one could expect in return for the minimal effort and money required. Initially I let no one in the organization know that I was an attorney and, to my astonishment, I received $36,470.00 in the first 14 weeks, with money still coming in. Sincerely yours, Phillip A. Brown This plan works like GANG-BUSTERS!!! So far I have had 9,735 total orders...OVER $48,000!!! I hope I have sparked your own excitement, if you follow the program exactly, you could have the same success I have, if not better. Your success is right around the corner, but you must do a little work. Good Luck! G. Bank Not being the gambling type, it took me several weeks to make up my mind to participate in this plan. But conservative that I am I decided that the initial investment was so little that there was just no way that I wouldn't get enough orders to at least get my money back. Boy I was surprised when I found my medium-size post office box crammed with orders. After that it got so over-loaded that I had to start picking up my mail at the window. I'll make more money this year than any 10 years of my life before. The nice thing about this deal is that it doesn't matter where in the U.S. the people live. There simply isn't a better investment with a faster return. Mary Rockland, Lansing, MI This is my third time to participate in this plan. We have quit our jobs, and quite soon we will buy a home on the beach and live off the interest on our money. The only way on earth that this plan will work for you is if you do it. For your sake, and for your family's sake don't pass up this golden opportunity. Remember, when you order your four reports, SEND CASH. Checks have to clear the bank and create too many delays. Good luck and happy spending! Charles Fairchild, Spokane, WA Typically when I look at a money-making deal I want to know if the company is strong, will it be here when it's time for my big pay off. In this crazy thing there is no company intervention for management to blow it. Just people like me ordering directly from the source! Interesting...I had a couple of projects I'd been trying to fund to no avail so I thought; Why not give it a try? Well 2 1/2 weeks later the orders started coming in. One project is funded and I'm sure the other will be soon! Marilynn St. Claire, Logan, UT We could be printing YOUR testimonial next!!! ORDER YOUR REPORTS TODAY AND GET STARTED DOWN THE ROAD TO YOUR FINANCIAL FREEDOM!!! - Comments: Authenticated sender is <the.money.tree(a)make.money.on.line.21.com> </PRE></HTML>

1 0

Re: not a flame please read and think about this
by an116512＠anon.penet.fi 17 Dec '03

17 Dec '03

to make my point: why is pat farrel helping the nsa and nist make better key escrow? i quote mr farrel: We reworded #5 to say "want to Trust the Product." This means that it is untampered, works as expected, etc. We then hashed out ways to know this. The list ended up looking like: 1. is available only as object code 2. contains some "hash" function to check for modifications 3. contains some unique hash, with uniqueness based upon something like "site," "per copy" or "per release" 4. Contains policies against modification, such as liscense language against decompilation. 5. OS-related security, such as runs "protected mode" instead of as a wild DOS program. and We then developed "goals" including: 1. One version for sale worldwide 2. Allow development in the US 3. Domestic Law Enforcement Agencies want Escrowed (I almost wrote GAK :-) 4. Must interoperate with everything 5. Receiver can only decrypt if escrow agencies can decrypt. hey why not just write the escorw code for them!!!??? is mr farrel just being naive or is does he realize who hes working for? sorry to single him out but this is just an example of what im talking about. he is not the only example by far. think people!!!!! ---------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. If you reply to this message, your message WILL be *automatically* anonymized and you are allocated an anon id. Read the help file to prevent this. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

1 0

Re: Scientology tries to break PGP - and fails? (fwd)
by kelso＠netcom.com 17 Dec '03

17 Dec '03

> >Tom Rollins writes: > >> If this is the file that the Co$ is trying to crack, then what the > >> is being asked for is a pass phrase that can be handed to the Co$ > >> that will pass the PGP valid key check and still not decrypt the > >> data to anything usefull. > > > >Well, I don't have the PGP 'conventional' encryption format memorized, but > >there is probably a constant after the IV that is prepended to the data. The > >constant is used to determine if the key is correct. Since the conventional > >encryption runs in CFB mode and there is a full block of random IV at the > >beginning of the file, it is extremely unlikely that a key could be found > >that would properly decrypt only the first two blocks while leaving the rest > >unreadable... > > > >> If Larry Wollersheim does have the valid key. It would be a simpler > >> process to know what fake key to use and work it backwards through > >> the MD5 to arrive at an ascii string to produce the fake key. > > > >Not really. Even if you could find an IDEA key that would produce the > >desired output it would be hard to find a passphrase that would produce that > >key when hashed. One of the properties of one-way hash functions is that it > >is difficult to find a plaintext that produces a given hash. Hence the term > >'one-way'.... Even if you did find a passphrase (which, if MD5 is strong, > >would require something like 2^64 operations), it would likely be long, have > >8-bit chars, and would be impossible to type in. It would be tough to > >convince anyone that it was the real passphrase. > > > > > >andrew > > > > > There was a hack to pgp ui published a while back that would allow > someone decrypting a RSA encrypted file to print out the idea key. > > Another feature of the hack allowed someone with the idea key to decrypt > an RSA PGP encrypted file ignoring the RSA headers and using the IDEA > key directly. > > Using this software should allow the reciever of an RSA PGP encrypted > file to allow someone else to decrypt it (by giving them the IDEA key) > without exposing the secret key. The IV block check will allow them to > check that they are using the correct idea key. > Looking at the source code showes that all that is needed to pass the PGP key check is for the first two blocks to decode in such a way that the last 2 bytes of the IV match the 2 check bytes before the actual message. Thus the first 6 bytes of the IV and the last 6 bytes of the next block need not match the actual message. There was a bug in the older versions of PGP that set the IV to a constant instead of a random value when encrypting with the "-c" option. I made a mistake thinking that knowledge of the correct key would help in creating a fake key.

1 0

9K P6
by John Young 17 Dec '03

17 Dec '03

There's a bit more on Intel's supercomp virtual NW tester at: URL: http://www.ssd.intel.com/press/asci1.html Here's a sample: ---------- Intel Scalable Systems Division Fortunately, advances in computer hardware and software technologies are making computer-based virtual weapons testing and prototyping a viable and affordable alternative to the traditional nuclear and non-nuclear testing of stockpile stewardship. The Intel teraflop computer announced today is a key milestone in the shift from nuclear testing to computer-simulated testing. The ASCI Program Located within the DOE's Defense Programs (DP) laboratories, the U.S. Department of Energy's Accelerated Strategic Computing Initiative (ASCI) is a multi-year program to extend DOE's computational resources to support virtual testing and prototyping capabilities for nuclear weapons. ... ASCI has four objectives, each of which requires computational capabilities that are beyond the capabilities of existing systems: * Performance -- Create credible virtual tests to analyze the performance and predict the behavior of nuclear weapons. * Safety -- Predict the behavior of full weapons systems in complex accident scenarios. * Reliability -- Develop the ability to make predictions that will extend the lifetime of current weapons, predict failure mechanisms and reduce routine maintenance requirements. * Renewal -- Use virtual prototyping to reduce production and testing facilities for stockpile requalification and replacement work. ... Beyond its weapons safety impact, the teraflop computer will have a wide range of other applications -- from developing safer, more efficient cars to simulating natural disasters in real-time to finding new drugs to fight disease. The machine will be one of the world's foremost scientific research tools and will act as a magnet for advanced research projects. In 1963, John Kennedy referred to a test ban treaty as a shaft of light cut into the darkness of the Cold War -- a chance to step back from the shadows of war. Today, by making it possible to ensure the safety, reliability, and performance of the weapons stockpile while foregoing nuclear testing, the Intel/Sandia teraflop computer can help the world take a further step back from the shadows of war into the light of peace.

2 1