December 2003 - cypherpunks-legacy

Re: OS/2 encryption
by JonWienke＠aol.com 17 Dec '03

17 Dec '03

In a message dated 96-04-21 22:11:06 EDT, Lucky Green wrote: >Back up the HD to tape (encrypt the data on the tape). Move the tape out of >reach. And don't tell anyone, especially not this list, that you did that. Personally, I recommend the Syquest EZdrive over tape. The EZ is a fully functional (bootable, too) 130 MB hard drive ($200 for an IDE internal model, also available in SCSI and parallel port versions) that uses removable cartridges ($20 each) for storage. Most backup programs let you back up to a hard drive, which is much faster than tape, and more reliable as well. Ditto the bit about storing the backups (whatever media) somewhere the CO$ will never find them, and keeping your mouth shut about it.

1 0

Draft paper on law of digital signatures, CAs
by Michael Froomkin 17 Dec '03

17 Dec '03

[cross-posted to Cyberia-L, Cypherpunks & Cyberprof; apologies for duplication] A preliminary draft of my paper on Digital Signatures, Certification Authorities, and a few of the legal problems they (may) create can be found under the title, "The Essential Role of Trusted Third Parties in Electronic Commerce" at this URL: http://www.law.miami.edu/~froomkin/articles/trusted.htm A. Michael Froomkin | +1 (305) 284-4285; +1 (305) 284-6506 (fax) Associate Professor of Law | U. Miami School of Law | froomkin(a)law.miami.edu P.O. Box 248087 | http://www.law.miami.edu/~froomkin Coral Gables, FL 33124 USA | It's warm here.

1 0

Re: ApacheSSL
by Bill Stewart 17 Dec '03

17 Dec '03

At 01:50 PM 4/20/96 +0000, umwalber(a)cc.UManitoba.CA wrote: >An ISP that I have ties with is looking to set up a secure server. >Currently, they are running Apache. I told them that for ~$500 they >can put on Apache SSL and be all ready. However, they want to buy >Netscape (for the name, I've already given them the 40bit gospel), >put it on a separate, firewalled machine, allow no access to it, etc, >etc. Is all this paranoia necessary? If they're handling money, then, yes, the paranoia is probably necessary. Aside from the 40-bit vs. 128-bit issue, one of the big security risks of SSL and similar systems is that the server they run on is typically sitting right out there on the Internet waiting for somebody to crack it, and keeping credit card information on the same rather than handing the encrypted information across some secure interface (whether a firewall or dedicated RS232 or whatever.) A bulletproof 128-bit interface doesn't help if it's running on a cracked machine. Putting it on a separate firewalled machine is a Good Thing. # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com, +1-415-442-2215

5 4

Re: java security
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 23:35 4/21/96, Bill Stewart wrote: >Were they Java, or JavaScript? Much different. Among other things, >JavaScript runs on Win3.1, and Netscape doesn't let you turn it off. >I've had at least one event of JavaScript crashing Netscape; the part >of the script I noticed was scrolling lots of stuff along the bottom Javascript started the new browser. The renegade applet was Animator, which is Java, I believe. I didn't spend much effort investigating it, since I try to stay away from doing things over that have hosed my system twice in a row. Win95, Atlas beta. The offending page was http://www.dippybird.com/java.html Disclaimer: My opinions are my own, not those of my employer. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

1 0

Re: java security
by Alan Olsen 17 Dec '03

17 Dec '03

At 01:26 PM 4/22/96 -0700, Lucky Green wrote: >At 23:35 4/21/96, Bill Stewart wrote: > >>Were they Java, or JavaScript? Much different. Among other things, >>JavaScript runs on Win3.1, and Netscape doesn't let you turn it off. >>I've had at least one event of JavaScript crashing Netscape; the part >>of the script I noticed was scrolling lots of stuff along the bottom > >Javascript started the new browser. The renegade applet was Animator, which >is Java, I believe. > >I didn't spend much effort investigating it, since I try to stay away from >doing things over that have hosed my system twice in a row. Win95, Atlas >beta. The offending page was http://www.dippybird.com/java.html The one advantage to Netscape 3.0 is that you can turn Javascript off. (You may be able to do that in 2.01 as well...) 3.0 has some pretty nasty bugs. There appears to be a memory leak dealing with forms, as well as a number of nasty little gotchas. (I have been getting crashes that seem to be assocaited with one of the plug-ins.) Hopefully the next beta is out for 3.0. (I have not checked in the last couple of days, so it may be... Sunday night seems to be the favored time of posting.) --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon

1 0

EYE_suk
by John Young 17 Dec '03

17 Dec '03

4-22-96. WaPo: "Counter-Terrorism to Be Olympic Event for-U.S." Federal authorities are taking precautions against the use of unconventional weaponry such as poison gas, germ weapons or even a nuclear device. Those attending the Games will see only a small portion of the immense security operation. At its heart will be an estmated 3,000 Army troops, 6,300 National Guardsmen, and at least 10,000 other police and private security guards at peak strength, with an additional force of agents from the FBI, ATF, DIA, CIA, NSA and FEMA. The Pentagon's office of special operations and low-intensity conflict plans to place its elite counter- terrorism teams in readiness. "We keep telling everybody we wil be armed with a radio and a smile," said Maj. Gen. Robert R. Hicks Jr. EYE_suk (A scary skinhead rumble for I-MAX gouge)

7 12

[Laffs] Citizen in need of correction
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: 21 Apr 1996 03:25:13 +0200 From: anon-remailer(a)utopia.hacktic.nl (Anonymous) (by way of rah(a)shipwright.com (Robert A. Hettinga)) To: rah(a)shipwright.com Subject: Citizen in need of correction Organization: Hack-Tic International, Inc. Path: news-central.tiac.net!news-in.tiac.net!news.kei.com!newsfeed.internetmci.com!how land.reston.ans.net!EU.net!sun4nl!xs4all!utopia.hacktic.nl!not-for-mail Newsgroups: talk.politics.crypto,talk.politics.libertarian,alt.politics.libertarian,alt.soci ety.anarchy,alt.privacy,alt.security.pgp,alt.activism,alt.anarchism,alt.cyberpun k,alt.politics.datahighway Lines: 4 Sender: remailer(a)utopia.hacktic.nl NNTP-Posting-Host: utopia.hacktic.nl Comments: <postmaster(a)utopia.hacktic.nl> Xref: news-central.tiac.net talk.politics.crypto:205 talk.politics.libertarian:3955 alt.politics.libertarian:5165 alt.society.anarchy:606 alt.privacy:251 alt.security.pgp:802 alt.activism:3485 alt.anarchism:116 alt.cyberpunk:492 alt.politics.datahighway:297 X-Newsreader: Yet Another NewsWatcher 2.1.2 We seem to have a problem with an inconsiderate citizen. This is a call for bids on the case of jimbell(a)pacifier.com (jimbell) -- Please send your bids to getjim(a)blacknet.net by midnight GMT, April 25th, 1996. --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "If they could 'just pass a few more laws', we would all be criminals." --Vinnie Moscaritolo The e$ Home Page: http://thumper.vmeng.com/pub/rah/

1 0

Biometric ID
by Duncan Frissell 17 Dec '03

17 Dec '03

Someone asked about biometric ID requirements in HR 2202 "Immigration in the National Interest Act of 1996". This passed the House a few weeks ago. The Senate may pass it this week or next. Watch out for stuff to slip back in in the Conference Committee. The whole "pilot program" to develop a forge resistant biometric ID card has been removed from the bill. The Border Crossing Cards that speed crossings from Mexico are supposed to have machine readable finger prints or hand prints added but those can probably be duped by the forgers. The online SS# verification program is reduced to a voluntary (for the employer) pilot. DCF

1 0

Save 50% on Office Pro 97 & 40% on NT 4.0 !!!
by gsmith＠ultragrafix.com 17 Dec '03

17 Dec '03

Special #1 - Save over 50% on Microsoft Office Professional 97 (FULL Version) These are brand new Full Versions that we are selling for $285.00 (USD) This product usually retails for $585.00 in popular stores such as Comp USA and Computer City. Please call us at (817) 557-4945 for more information. Microsoft Office 97 includes new versions of each of the component applications, including Microsoft Word, Microsoft Excel, the PowerPoint® presentation graphics program and Microsoft Access, as well as the new Microsoft Outlook. Common to these Office 97 applications is the integration of new Internet technologies. Please call us at (817) 557-4945 for product availability and to order by all major credit cards. Please stop by our web site at http://www.globaltech2000.com for more great deals on software! Shipping is $6.00 (USD)for U.S. orders Shipping is $20.00 (USD)for Canada, Great Britain, Australia Shipping is $24.00 (USD) for all other International orders ----------------------------------------------------------------------- Special #2 - 40% OFF Windows NT Workstation (Full Version) ! This product normally sells for over $300 but we are selling our remaining inventories for $175 Due to our limited supply, please call us at (817)557-4945 if you are interested in this product! Shipping is $6.00 (USD)for U.S. orders Shipping is $20.00 (USD)for Canada, Great Britain, Australia Shipping is $24.00 (USD) for all other International orders Please call us at (817) 557-4945 for product availability and to order by all major credit cards. PLEASE be sure to check out our web site at http://www.globaltech2000.com for other great software deals! ******************************************************************* Please Note - All remove requests will be honored and enforced by our postmaster. If you'd rather not receive offers for large discounts on software in the future (usually about 1 per month) simply send an email to remove(a)ultragrafix.com and you will automatically deleted from any future mailings. Thank You *******************************************************************

1 0

[NOISE]: Test, please ignore.
by Laszlo Vecsey 17 Dec '03

17 Dec '03

Just bouncing a message off the server in the hopes that cypherpunks messages begin to flow again... (define(RSA m e n)(list->string(u(r(s(string->list m))e n))))(define(u a)(if(> a 0)(cons(integer->char(modulo a 256))(u(quotient a 256)))'()))(define(s a)(if (null? a)0(+(char->integer(car a))(* 256(s(cdr a))))))(define(r a x n)(cond((= 0 x)1)((even? x)(modulo(expt(r a(/ x 2)n)2)n))(#t(modulo(* a(r a(1- x)n))n))))

1 0