December 2003 - cypherpunks-legacy

Re: PAY-OFF TIME FOR BUG-BUSTERS, NETSCAPE PLEDGES "DOGFIGHT"
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

On Mon, 11 Dec 1995, Michael Coates wrote: > PAY-OFF TIME FOR BUG-BUSTERS, NETSCAPE PLEDGES "DOGFIGHT" > Netscape Communications has awarded two software sleuths $1,000 each for > finding security gaps in its Netscape Navigator 2.0 software. The company > also awarded gifts to 50 other contestants in its "Bugs Bounty" program for > identifying non-security problems. (Wall Street Journal 11 Dec 95 B7) Can anyone tell me whether Ian Goldberg and David Wagner got their $25,000 from Netscape for finding the HUGE security flaws in Netscape's existing product line?? I can't remember whether they got anything or not ... (Sorry, but I've been away from the list. One of those, "fate of the Free World hangs in the balance" thingies ... ;-) Have Netscape and AT&T shown some holiday goodwill, or are they still engaged in their felonious freeloading foolishness? Alice de 'nonymous ... <an455120(a)anon.penet.fi> ...just another one of those... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

2 1

Re: And the standard continues to lower...
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

On Fri, 15 Dec 1995, Peter Trei wrote: > This guy's home page is a hoot - he's into UFO contacts and dolphin > communication. > > After writing to him and getting back a description of his system, it's > clear that he's clueless. He seems to think that info sent to a vendor > using his system can't be sorted out from the gazillion other packets > on the Net. > > I described to him sniffer attacks, subverted routers, etal, and > reccomended some basic reading (Cheswick & Bellovin, Is this the two partners in crime from AT&T?? Cheswick & Bellovin?? I think that they're probably not all that reputable (or knowledgable) from what I've seen of their writings and contributions to the AT&T DSRP (Data Security Response Program) mailing list. (If they are the same people, I mean ...) > Kaufmann, Perlman, & Speciner, and Schneier). He said he'd > look into it. (Yes, I know there's plenty of other attacks, such as > OSPF spoofing, but I didn't describe them). > > I think we can educate this guy. Plenty of educating can probably be done, I think. Alice de 'nonymous ... <an455120(a)anon.penet.fi> ...just another one of those... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

1 0

Encrypted telnet...
by droelke＠rdxsunhost.aud.alcatel.com 17 Dec '03

17 Dec '03

I am looking for an encrypted telnet (or rlogin/etc) package that supports a Windoze client. It looks like all the normal ones that I can find (SSH, SRA telnet, SSLtelnet, etc) are just under Unixoids. Don't get me wrong - I would prefer to use Unix, but I am headed off to locations, where I know all I'll have access to is Windows, with a PPP stack to some ISP. I'ld write it myself, - pasteing different packages together, but I need it working in a day or two. Can anyone help me here? Thanks, Dan ------------------------------------------------------------------ Dan Oelke Alcatel Network Systems droelke(a)aud.alcatel.com Richardson, TX

3 2

Re: ADDRESS DATABASE?
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Sandfort-8802 unit: >> This took about a minute using a shabby consumer-level DB. >> *Now* do you get it? ^^^^^^^^^^^^^^^^^^^^^^^^ > > hint hint hint hint < >Nope. MY name isn't on your list. In addition, my home phone >number is unlisted--therefore contracturally unavailable for >resale. *Now* do you get it? It's kind of cool how much faith you have in the idea that your number is unlisted, considering the fact that you started this thread by griping that someone had the goods on you. The reason you were "taken aback" is because your beliefs don't correspond to reality -- "cognitive dissonance," in the lingo. H -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQBVAwUBMNHGg73g0mNE55u1AQEfcwH9HPcXAyMQPv9ZNQ2MxvBHfTtsIfqw15zG n7S7yppwR2AsayZgSZQFIDoee0tLRBqEvPFhxNqnOiPCht5PK01YGA== =gIKw -----END PGP SIGNATURE-----

2 1

Re: .PWL spin
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

On Sat, 9 Dec 1995, Joel McNamara wrote: > One system administrator said the problem would have a greater effect on > less-secure environments, such as universities and other institutions, > than on corporations. I didn't quite understand the "corporate speak" here. It sounds like something coming from Bosnia or something. It's Greek to me. What would make a University less secure than a corporation?? Universities (at least the ones, I've checked) have entire departments and theoreticians devoted to Computers ... companies usually don't. I'd think that Universities are much, much more secure environments than corporations are. Doesn't Microsoft know this?? Or is this unique to Seattle?? Alice de 'nonymous ... <an455120(a)anon.penet.fi> ...just another one of those... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

5 4

Re: And the standard continues to lower...
by Peter Trei 17 Dec '03

17 Dec '03

At 05:17 PM 12/13/95 -0600, you wrote: >Dr. Brian L. Crissey includes in his .sig, courtesy of cactus(a)hks.net >>[ much WRT YetAnotherSecureInternetCreditCardPaymentSystem(*tm) deleted ] >> ***Dr. Brian L. Crissey, Chair CS Dpt, Linfield Col., McMinnville, OR 97128 >> (503)-434-2426 brianc(a)linfield.edu >> Professionals built the Titanic, amateurs built the Ark... > >However, the Ark was *designed* by GOD (if you believe the story). Can Dr. >Brian L. Crissey say the same thing about his payment system? This guy's home page is a hoot - he's into UFO contacts and dolphin communication. After writing to him and getting back a description of his system, it's clear that he's clueless. He seems to think that info sent to a vendor using his system can't be sorted out from the gazillion other packets on the Net. I described to him sniffer attacks, subverted routers, etal, and reccomended some basic reading (Cheswick & Bellovin, Kaufmann, Perlman, & Speciner, and Schneier). He said he'd look into it. (Yes, I know there's plenty of other attacks, such as OSPF spoofing, but I didn't describe them). I think we can educate this guy. speaking only for myself, Peter Trei

1 0

RE: ADDRESS DATABASE?
by andr0id＠midwest.net 17 Dec '03

17 Dec '03

>Not. As of 12/1/95, the FCC requires all cellular carriers (and IXCs for >that matter) to transmit ANI & CLID information, even on cellular calls. >BellSouth thoughtfully put a notice in my last two monthly bills, but then >again I think the FCC required that too. > >-Paul At least I know that my cellular carrier is safe for now. The phone company in our area still can't handle ANI from the cellular switch. The default number for our carrier ends in 0000 which happens to be my number. I get calls every month from people with 800 numbers verifying what number this was. I have to explain that someone from our cellular system made a call to their number but the bill defaults to mine. Its no big deal since I work for the cellular carrier though. ;) Dr0id

1 0

INT_mes
by John Young 17 Dec '03

17 Dec '03

The WP, Dec 15, 1995: Internet Mess: Return to Sender [Editorial] The negotiations between House and Senate conferees on the restriction of pornography in cyberspace have gone from bad to worse. A tentative accommodation arrived at last night, which the conferees must still vote to accept or kill, combines some of the worst of a broad array of misguided restrictions on speech, none of them likely to protect children. INT_mes Digital claims that its new crawler called Alta Vista, can find data on the World Wide Web at speeds of up to 100 times faster than currently popular crawlers from Yahoo Corp., Open Text Corp. or Lycos Inc.

1 0

Re: e$: Seven Days
by rah＠shipwright.com 17 Dec '03

17 Dec '03

At 6:36 AM 12/16/95, Timothy C. May wrote: >By the way, in honor of the "geodesic network" and "geodesic payment >systems," and the geodesic dome the party was in, I propose we rename "e$" >with a more fitting name: "buckybucks." Or just "buckys" for short. ("Did >you remember to replenish the buckybits?") Snoop Bucky Bucks? Sounds like a Cyberdog part to me... <ducking many tomatoes> Maybe not... Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA (617) 958-3971 "Reality is not optional." --Thomas Sowell The NEW(!) e$ Home Page: http://thumper.vmeng.com/pub/rah/ >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

Apology...
by mphillips＠CCTR.UMKC.EDU 17 Dec '03

17 Dec '03

To all concerned: I, have recieved SEVERAL messages regaurding a post that was sent to this newsgroup. I am apologizing for such a mistaken address and post. Please accept my sincere apology and believe me when I say that I have NEVER meant to offend anyone. This was a situation that WE have taken care of HERE and I hope never happens again. Again, please accept my apology and I hope we can consider this subject closed.

1 0