December 2003 - cypherpunks-legacy

Internet companies demonstrate portable security
by Vipul Ved Prakash 17 Dec '03

17 Dec '03

(Forward) Internet companies demonstrate portable security Six Internet companies have joined forces to develop a joint demonstration of smartcard technologies at the 1997 RSA Data Security Conference. Consensus Development Corporation, Gemplus, Hewlett-Packard, Litronic Inc., Netscape Communications Corporation and VeriSign, Inc., Monday announced "The Get Smartcard Demo." The interactive demo will allow each conference attendee to load X509v3 certificates on crypto-enabled smartcards. Participants will interact with the demo through mutually authenticated SSL connections and document signing. For the full text story, see http://www.merc.com/stories/cgi/story.cgi?id=1274540-213 -- Vipul Ved Prakash | - Electronic Security & Crypto vipul(a)pobox.com | - Web Objects 91 11 2233328 | - PERL Development 198 Madhuban IP Extension | - Linux & Open Systems Delhi, INDIA 110 092 | - Networked Multimedia

1 0

[ANNOUNCE] PGP Signatures
by winsock＠rigel.cyberpass.net 17 Dec '03

17 Dec '03

Dinghy Vindictive K[ondom]OfTheMinute died of AIDS last night with his queer lover. _ O O _ \-|-\_/-|-/ Dinghy Vindictive K[ondom]OfTheMinute /^\ /^\ ^^ ^^ ^^ ^^

1 0

Re: Genetic Algorithms
by winsock＠rigel.cyberpass.net 17 Dec '03

17 Dec '03

What a joy to make a public mockery of Dr.Defecated L>eech< Vicious! |\ \ \ \ \ \ \ \ __ | \ \ \ \ \ \ \ \ | O~-_ Dr.Defecated L>eech< Vicious | >----|-|-|-|-|-|-|--| __/ | / / / / / / / / |__\ |/ / / / / / / /

1 0

Re: Trigger-Words...
by Martin Janzen 17 Dec '03

17 Dec '03

harka(a)nycmetro.com writes: >does anybody know any contact points/Web pages, where I might get >some information on e-mail filtering via trigger-words? I am >interested in how this technology specifically works and a >acollection of trigger-words would be nice too :) You might start with the Mail Filtering FAQ: http://www.cis.ohio-state.edu/hypertext/faq/usenet/mail/filtering-faq/faq.h… It's pretty Unix-specific, covering procmail, Elm filter, and mailagent. For PC-based mailers, you're probably better off checking the documentation and/or the web page for the one you're using. Finally, take a look at the comp.mail.* newsgroups. Or just use the search engines, throwing in combinations of the above terms... -- Martin Janzen janzen(a)idacom.hp.com Pegasus Systems Group c/o Hewlett-Packard Company, CMD Vancouver

1 0

AltaVista sprouts a hole ...
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Sender: e$(a)thumper.vmeng.com Reply-To: Russell Stuart <R.Stuart(a)rsm.com.au> MIME-Version: 1.0 Precedence: Bulk Date: Wed, 29 Jan 1997 08:07:27 +1000 From: Russell Stuart <R.Stuart(a)rsm.com.au> To: Multiple recipients of <e$(a)thumper.vmeng.com> Subject: AltaVista sprouts a hole ... From: risko(a)csl.sri.com (RISKS List Owner) Newsgroups: comp.risks Subject: RISKS DIGEST 18.77 Message-ID: <CMM.0.90.1.853810937.risko(a)chiron.csl.sri.com> RISKS-LIST: Risks-Forum Digest Monday 20 January 1997 Volume 18 : Issue 77 FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks) ACM Committee on Computers and Public Policy, Peter G. Neumann, moderator ***** See last item for further information, disclaimers, caveats, etc. ***** <snip> ------------------------------ Date: Fri, 3 Jan 97 23:52:00 +0100 From: Anders Andersson <andersa(a)Mizar.DoCS.UU.SE> Subject: Leaking WWW surfer interest profiles I notice that AltaVista's inline advertisements link to a server outside Digital, "ad.doubleclick.net", and that the URL includes the user's list of keywords being searched. I'm concerned that these URL's may occasionally leak information about the user's interests and inclinations to third parties, information which the user may prefer to keep private. This is not a new problem that appeared with the inline ads, since also the Referer: field of the HTTP protocol discloses to a target server exactly what AltaVista index page led the user to it. However, this requires that the user willfully follows that link. If sensitive information being leaked via the Referer: field is a problem, the user may obtain client software that withholds Referer: data, either conditionally or unconditionally. Also, a user who has asked AltaVista for "gay" pages is probably not too concerned about accidentally disclosing this fact to the maintainer of said "gay" pages. However, the doubleclick.net ads appear to bear no relationship to the keywords being searched, and they appear not only in the URL for the hyperlink to follow, but also in the IMG SRC URL. This means that in order to avoid disclosing my keyword lists to doubleclick.net, I have to disable automatic loading of inline images when using AltaVista! Why is it that when I perform a search for, say, "gay OR nazi AND scientology", AltaVista tricks my browser to give this very search string away to an advertising company by means of an inline image (the contents of which has nothing to do with my search)? I think I can trust the AltaVista maintainers not to save my keyword lists for future analysis, but what about an advertising company? It's kind of serendipity reversed. When you open a book to look up information on a specific subject, the book scans your mind to find out what other interests and hobbies you have. Anders Andersson, Dept. of Computer Systems, Uppsala University Box 325, S-751 05 UPPSALA, Sweden +46 18 183170 andersa(a)DoCS.UU.SE ------------------------------ <snip> Regards Russell Stuart Software Development Manager RSM Technology PTY LTD ---------------------- Phone: +61 7 3844 9631 Fax: +61 7 3844 9522 Email: R.Stuart(a)rsm.com.au --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.shipwright.com/rah/ FC97: Anguilla, anyone? http://www.ai/fc97/ "If *you* don't go to FC97, *I* don't go to FC97"

1 0

Re: Trigger-Words...
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

harka(a)nycmetro.com wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hi there, > > does anybody know any contact points/Web pages, where I might get > some information on e-mail filtering via trigger-words? I am > interested in how this technology specifically works and a > collection of trigger-words would be nice too :) Look at http://www.algebra.com/~ichudov/usenet/scrm/robomod/robomod.html, and look for the explanation of how bad.words.list works in my robomoderator. - Igor.

1 0

Re: Trigger-Words...
by Martin Janzen 17 Dec '03

17 Dec '03

harka(a)nycmetro.com writes: >does anybody know any contact points/Web pages, where I might get >some information on e-mail filtering via trigger-words? I am >interested in how this technology specifically works and a >acollection of trigger-words would be nice too :) You might start with the Mail Filtering FAQ: http://www.cis.ohio-state.edu/hypertext/faq/usenet/mail/filtering-faq/faq.h… It's pretty Unix-specific, covering procmail, Elm filter, and mailagent. For PC-based mailers, you're probably better off checking the documentation and/or the web page for the one you're using. Finally, take a look at the comp.mail.* newsgroups. Or just use the search engines, throwing in combinations of the above terms... -- Martin Janzen janzen(a)idacom.hp.com Pegasus Systems Group c/o Hewlett-Packard Company, CMD Vancouver

1 0

AltaVista sprouts a hole ...
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Sender: e$(a)thumper.vmeng.com Reply-To: Russell Stuart <R.Stuart(a)rsm.com.au> MIME-Version: 1.0 Precedence: Bulk Date: Wed, 29 Jan 1997 08:07:27 +1000 From: Russell Stuart <R.Stuart(a)rsm.com.au> To: Multiple recipients of <e$(a)thumper.vmeng.com> Subject: AltaVista sprouts a hole ... From: risko(a)csl.sri.com (RISKS List Owner) Newsgroups: comp.risks Subject: RISKS DIGEST 18.77 Message-ID: <CMM.0.90.1.853810937.risko(a)chiron.csl.sri.com> RISKS-LIST: Risks-Forum Digest Monday 20 January 1997 Volume 18 : Issue 77 FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks) ACM Committee on Computers and Public Policy, Peter G. Neumann, moderator ***** See last item for further information, disclaimers, caveats, etc. ***** <snip> ------------------------------ Date: Fri, 3 Jan 97 23:52:00 +0100 From: Anders Andersson <andersa(a)Mizar.DoCS.UU.SE> Subject: Leaking WWW surfer interest profiles I notice that AltaVista's inline advertisements link to a server outside Digital, "ad.doubleclick.net", and that the URL includes the user's list of keywords being searched. I'm concerned that these URL's may occasionally leak information about the user's interests and inclinations to third parties, information which the user may prefer to keep private. This is not a new problem that appeared with the inline ads, since also the Referer: field of the HTTP protocol discloses to a target server exactly what AltaVista index page led the user to it. However, this requires that the user willfully follows that link. If sensitive information being leaked via the Referer: field is a problem, the user may obtain client software that withholds Referer: data, either conditionally or unconditionally. Also, a user who has asked AltaVista for "gay" pages is probably not too concerned about accidentally disclosing this fact to the maintainer of said "gay" pages. However, the doubleclick.net ads appear to bear no relationship to the keywords being searched, and they appear not only in the URL for the hyperlink to follow, but also in the IMG SRC URL. This means that in order to avoid disclosing my keyword lists to doubleclick.net, I have to disable automatic loading of inline images when using AltaVista! Why is it that when I perform a search for, say, "gay OR nazi AND scientology", AltaVista tricks my browser to give this very search string away to an advertising company by means of an inline image (the contents of which has nothing to do with my search)? I think I can trust the AltaVista maintainers not to save my keyword lists for future analysis, but what about an advertising company? It's kind of serendipity reversed. When you open a book to look up information on a specific subject, the book scans your mind to find out what other interests and hobbies you have. Anders Andersson, Dept. of Computer Systems, Uppsala University Box 325, S-751 05 UPPSALA, Sweden +46 18 183170 andersa(a)DoCS.UU.SE ------------------------------ <snip> Regards Russell Stuart Software Development Manager RSM Technology PTY LTD ---------------------- Phone: +61 7 3844 9631 Fax: +61 7 3844 9522 Email: R.Stuart(a)rsm.com.au --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.shipwright.com/rah/ FC97: Anguilla, anyone? http://www.ai/fc97/ "If *you* don't go to FC97, *I* don't go to FC97"

3 2

Re: Best Computer School?
by Matthew Toth 17 Dec '03

17 Dec '03

MIT is one the best schools in the country for C.S. Close behind is Carnegie Mellon University (C.M.U.) in Pittsburgh, PA. (the folks who put out CERT.) Not sure how much Crypto they do, though.

1 0

Recovery of Windows NT administrator password
by Garrard, David 17 Dec '03

17 Dec '03

An inherited Windows NT system that I am involved with has a lost administrator password ( no one no longer knows what it is ). Can anyone point me to software products/companies that can help in the recovery. Given Microsoft's dismal record on security I am sure there must be solutions to this dilemma. Any help would be greatly appreciated. Best Regards David L. Garrard

1 0