December 2003 - cypherpunks-legacy

Re: Bay Area Cypherpunks meeting announcement
by Blanc 17 Dec '03

17 Dec '03

Lucky Green wrote: >o Cypherpunks Tonga will announce [...] > >o Cypherpunks Tonga will then combine [...] ........................................................ What is Cypherpunks Tonga? .. Blanc

2 1

WARNING: Serious Pentium Bug
by Anonymous 17 Dec '03

17 Dec '03

There is a SERIOUS bug in all pentium CPUs. The following code will crash any machine running on a pentium CPU, MMX or no MMX, any speed, regardless of OS (crash as in instant seize, hard reboot the only cure): char x [5] = { 0xf0, 0x0f, 0xc7, 0xc8 }; main () { void (*f)() = x; f(); } This require no special permissions to run, it works fine with average-joe-userspace permissions. I have verified this, it works. Demand a new CPU from Intel.

4 3

YOUR LISTING ON YAHOO!
by brian＠firstgear.com.firstgear.com 17 Dec '03

17 Dec '03

Hi: This email is in reference to YOUR LISTING ON YAHOO! If you are interested in placing your web site in the TOP TEN on the major search engines, please read on. (If not, please disregard this email and accept our apology for any intrusion.) reply with remove in the subject. For those of you who are interested, please read on! (Ed. note: Yahoo asked that we mention that our group and Yahoo are not affiliated --they probably wouldn't let us publish this if we were affiliated). ____________________________________________________________ SEARCH ENGINE SECRETS HOW YOU CAN GET YOUR SITE CONSISTENTLY IN THE TOP 10 ON MAJOR SEARCH ENGINES (and watch your hit count skyrocket) http://www.servicebrokers.com/SES3.htm As you probably noticed with the listing of your site on the search engines, it is becoming more and more difficult to be found among the MILLIONS of listings. If you"re like the rest of us you have found it extremely frustrating. You spend lots of time and money developing your site and then you're listed number 30, or 80, or even 200th. You're NEVER FOUND. *************************** GOOD NEWS The good news is we have found a SOLUTION. After months of fighting the search engine battle we got LUCKY. A programmer recently became associated with our firm who had done some CONSULTING WORK for six months with one of the major search engines. With his help we developed a REPORT on the major search engines and how they really work. ***************************** REPORT His report is excellent. We have been using the material in the report for over five months. IT WORKS! With it, our sites are in the top TEN listings on all major search engines and we have experienced a virtual stampede of people to the web sites. HITS ARE UP, SALES ARE UP, and most importantly, everyone is HAPPY. > > *************************** YOUR COPY > > Now, YOU CAN HAVE A COPY of his report. In it you will find: > > > > How to vault in the TOP TEN on any search engine using any keyword. Strategies that put you ahead of 95% of the other sites online. How to STAY in that TOP TEN. How to improve your chances of being found in about 10 MINUTES. > > How the search engines calculate CONFIDENCE ratings (and what that means to you). > > Killer META TAGS that totally blow away your competitors. > > Which search engines are the very BEST FOR YOU. > > How to get your site REGISTERED for FREE at over 200 locations, in one easy step (it takes 10 minutes). > > How to BLOCK out part of your site from the search engines (and why you should do it). > > The effect of REPEATING KEY WORDS. (good or bad?) What happens when you repeat them too many times? > > LATEST FORMS for developing the best meta tags. Meta Tag strategies that can broaden your audience and build high volume web traffic for you. We tell you exactly what to do and show you SPECIFIC EXAMPLES. And it's SIMPLE and EASY to understand. So you can put the principles to immediate use. > > The benefits of site UPDATING. How often? What NOT to do! Avoid making those errors which can cost you. > > > and even > > How to legally "steal" your competitor's web traffic and send it to your site. Type in your competitor's name and YOUR NAME will appear FIRST! > > > *************************** > > WHAT DOES IT COST? > > The material is only $19.95, and is unconditionally guaranteed to work for you. Just follow the instructions and you will find your site in the top ten too. Ordering is SAFE and EASY. For more information, or to RECEIVE this 18 page report by email just go to our INSTANT-DELIVERY SECURE order form at: http://www.servicebrokers.com/SES3.htm (Order on line and you will receive your report in JUST 60 SECONDS.) Now that your site is up shouldn't you take this MOST IMPORTANT LAST STEP so people can find it. ****************************** UNCONDITIONAL GUARANTEE Remember, we UNCONDITIONALLY GUARANTEE IT WORKS. You can't lose. ******************************** SPECIAL FREE BONUS Order within 48 hours, we and will include, AS A FREE BONUS, information on over 500 SEARCH ENGINES and directories where you can list your site for free. (Some are very specialized and targeted). SPECIAL NOTE: If you are busy and don't have time to go to our web site INSTANT-DELIVERY SECURE ORDER FORM, you can order by FAX. (The unconditional guarantee still applies!) Just fill in the FAX FORM AT THE BOTTOM OF THIS PAGE. Then FAX it to us at: > > 1-305-289-1884 > If you order by FAX your copy of the report will be sent to you by email within 24 hrs. Or, if you prefer, you can send your order with a CHECK by snail mail to the address below. (Be sure to include your email address for delivery.) Whichever method you choose to order, YOU'LL BE GLAD YOU DID! Best of luck with your web site! Leeds Publishing 5800 Overseas Hwy., St. 35-154 Marathon Key, Fl. 33050 Fax 305-289-1884 http://www.servicebrokers.com/SES3.htm ________________________________________________________________________ >________________________________________________________________________ > FAX ORDER FORM > (Please print clearly) > >FAX TO: Leeds Publishing > >FAX NUMBER: 1-305-289-1884 Hi: Here is my order for Search Engine Secrets at $19.95 only. I understand it is unconditionally guaranteed. Include my FREE BONUS of 500 search engines. Send by email ASAP. Date:__________________ > NAME:_______________________________________________ > E-MAIL ADDRESS:______________________________________________________________ (PLEASE be accurate. One small error and we can't send your order). > >CARD TYPE:_________________ > >CARD NUMBER:_________________________________________________ > >EXPIRATION DATE:______________ > >NAME ON CARD:________________________________________________ > > >Thanks for ordering. Your copy of the report will be sent to you by email ASAP. > >____________________________________________________________ >____________________________________________________________ > > >Copyright 1997 Leeds and Rousseau Publishing. All rights reserved. Form 102 GD-Yahoo >

1 0

Totally breakable V(aporware) M(oney-making) E(ncryption)
by semprini＠theschool.com 17 Dec '03

17 Dec '03

I just finished reading the contents of the VME web-site. I have a few things to say. :) First of all the web-site blows elephant cock. You would think with guys smart enough to come up with "unbreakable encryption", they would at least be able to design a good site. Second, they make a big deal about how fast it is and how it can encrypt *ONE WHOLE FAT MEGABYTE A MINUTE*! Big whoop. Hope nobody wants to encrypt anything useful besides teensy weensy e-mails, 'cause you're gonna grow old before it finishes encrypting. Third, what the hell good is it if nobody can see the source code? It's well known that a trademark of bad cryptographic systems are the ones that rely on secrecy of the algorithm. Some happy little geek in his college computer lab is going to spend the time needed to reverse engineer the program, which they claim is "impossible to reverse engineer". Well, they didn't say it was "impossible", but they did say that the code is so complicated that nobody would be able to understand it if they ever did reverse engineer it. Bullshit. I know a 15 year old kid who actually has the patience to go through a few thousand lines of assembly code just to see what a program really does. Fourth, as someone else pointed out, the description of the algorithm is filled with words like "revolutionary" and "super-fast", etc. The descriptions of how the program works are so vague and general that it hards to believe they even have a running program. The description of the encryption sounds all very pretty, but I seriously wonder if that's the extent of the security. Almost like having a gold plated sign on your door saying "Keep out!" and then leaving your door unlocked. Fifth, their "challenge" to these major corportions merely states that they gave IBM, MS, and Netscape this big challenge to crack the system, but it never actually says the companies took up the offer and are actively trying to crack it. How's this one? "Microsoft, Netscape, and IBM!! I challenge you to crack my version of the Caesar Cipher!" There. I can now claim that I have challenged all the big corps to crack my crypto scheme. Challenging a big company doesn't prove a thing. Anyway, that's my rant and rave. Just as a small side note, if you would like to see some good examples of Madison Avenue at work then just visit this web-site: http://www.meganet.com > News report Nov 7, 97: > > AT&T, Hewlett Packard, Intel Corporation, Dell Computers, and > many other leading computer corporations have been added to the > challenge list by Meganet Corporation. The challenge started > last week with Bill Gates, now some of his peers have an opportunity > to validate or discredit the bold claim that Meganet's VME > (Virtual Matrix Encryption) is totally unbreakable. > > Unbreakable encryption is the only answer to security > in our electronic world. This is graphically illustrated > by the recent report from the National Security Agency > reporting the open market availability of a $10 chip that > can test up to 200 million keys per second. The 56-bit key, > government and banking standard, can be compromised in > twelve (12) seconds with brute force using ASIC > (Application-specific Integrated Circuits) chips. > > Meganet has the answer with its new VME (Virtual Matrix > Encryption). The impenetrable VME also has extreme speed, > much faster than any existing program available today. > > Major computer companies are already starting discussions > to acquire the rights to market this incredible new data > encryption system. More information about this > exciting new technology can be found at: www.meganet.com > > ---------- > > Hmm, wonder if it has impenetrable GAK and CAK options. > >

1 0

Free Wallpaper Tip!!
by 62789105＠06090.com 17 Dec '03

17 Dec '03

Free Wallpaper Tip!!!! A lot of people have had dark wallpaper installed or have installed it themselves, over a light colored wall, and over time the wall shows through because the seams have expanded. _____________________________________________________ Here is how to remedy this problem. Take a latex (eggshell finish) paint tinted to the color of the wallpaper background. Paint seam about 3ft down the wall with a small paint brush. (1inch) Wipe off immediately, and continue on down to finish off the seam. Repeat on every seam that needs it. Move the brush up and down to color the wall in between seams. ______________________________________________________ You just saved yourself a new wallpaper job. Now the room is like new, and just in time for the holidays! Want to save more money with great tips like this? Of course you do, everybody would. Well I have ALL of the tips and tricks that the pros use to hang paper. Not because I collected them..no, because I used them every day. I am a retired paperhanger with over 25 years experience. I have written an in depth guide for hanging wallpaper. This guide cuts through all the clutter and gets down to the one thing you need to know...how to hang successfully. This guide will teach you lots of tips and tricks, my way. That's not all, I have also put together a report on all the tricks and tips that paperhangers use! Including devious things unscrupulous contractors use to cheat you. These are the tricks that cost you money. The tricks that homeowners just never know, but the paperhangers do! Now you can too!! You can have both reports for the one low price of just $14.95 Print out form below , fill in and mail with check or m/o to: ImagePro Press 2018 Electric Rd SW, Suite 227 Roanoke,VA 24018 NAME______________________________________________ ADDRESS___________________________________________ APPT#________ CITY__________________ STATE________ ZIP____________ EMAIL ______________________________________________ HOME PHONE___ (____) ______ _______

1 0

CHALLENGE to Meganet VME: million dollar hype?
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Meganet Corporation (818) 757-3890 19528 Ventura Blvd. Suite 317 Tarzana, CA 91356 OPEN CHALLENGE TO YOU over the last 30 years I have seen hundreds of new "unbreakable" encryption programs; all of them have the same claims, the same challenges, and the same secrecy. but, with several notable exceptions, each has contained a fatal flaw. and I have seen even my own "perfect" algorithms fall apart when I awake... therefore, if you want any serious encryption experts to endorse your product as having a factor of "unbreakability" by forcing the level of brute force necessary to do so, provide the algorithm and the associated source code to a few of us who enjoy breaking algorithms as much as we enjoy trying to create them. I dont have time, any more than my colleagues will have time, to waste on foolishness represented by your amateur challenge. until you are willing to submit to an open review by your peers, your supposed encryption product is YAP. secondly, until your methodology is reviewed, we will consider the product a schill to Louis Freeh and other GAK and trap door mandated system advocates. if you wish to be considered a serious contender to replace RSA, it's time to put your cards on the table; we see your nickel and call. in the matter of public encryption, there is no secrecy, or there is no use. your move. attila out... cc: cypherpunks(a)cyberpass.net -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQBVAwUBNGRf3LR8UA6T6u61AQGbHgH8CRQZShIUzW0wr1ib7cQGSfMcUbJTygx9 ckzuU/NB4W4u11rEjSQzC5ozybWWxHcjSQel+CZ79wPAP0vM+HM7Jg== =zTyp -----END PGP SIGNATURE-----

2 1

Major security flaw in Cybercash 2.1.2 (fwd)
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text From: Bob Antia <antia(a)leftbank.com> Subject: Major security flaw in Cybercash 2.1.2 (fwd) To: mjbauer(a)leftbank.com (Michael Bauer), rah(a)shipwright.com Date: Sat, 8 Nov 1997 10:04:14 -0500 (EST) MIME-Version: 1.0 Approved-By: aleph1(a)UNDERGROUND.ORG Message-ID: <f58bccfc52aba91d0973f9bf33160ddd(a)anon.efga.org> Date: Fri, 7 Nov 1997 22:54:16 -0500 Reply-To: Anonymous <anon(a)ANON.EFGA.ORG> Sender: Bugtraq List <BUGTRAQ(a)NETSPACE.ORG> Comments: This message was remailed by a FREE automated remailing service. For additional information on this service, send a message with the subject "remailer-help" to remailer(a)anon.efga.org. The body of the message will be discarded. To report abuse, contact the operator at admin(a)anon.efga.org. Headers below this point were inserted by the original sender. From: Anonymous <anon(a)ANON.EFGA.ORG> Subject: Major security flaw in Cybercash 2.1.2 To: BUGTRAQ(a)NETSPACE.ORG CyberCash v. 2.1.2 has a major security flaw that causes all credit card information processed by the server to be logged in a file with world-readable permissions. This security flaw exists in the default CyberCash installation and configuration. The flaw is a result of not being able to turn off debugging. Setting the "DEBUG" flag to "0" in the configuration files simply has no effect on the operation of the server. In CyberCash's server, when the "DEBUG" flag is on, the contents of all credit card transactions are written to a log file (named "Debug.log" by default). The easiest workaround I've found is to simply delete the existing Debug.log file. In my experience with the Solaris release, the CyberCash software does not create this file at start time when the DEBUG flag is set to 0. The inability to turn off debugging is noted on CyberCash's web site under "Known Limitations". The fact that credit card numbers are stored in the clear, in a world readable file, is not. --jet -b Bob Antia antia(a)leftbank.com The Left Bank Operation, Inc. http://www.leftbank.com TCP/IP Internetworking LAN/WAN/NT/UNIX Admin PGP fingerprint 9B 70 FF 2D 03 CC 5F C1 3E 29 6E D4 16 79 44 A8 --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Re: Bay Area Cypherpunks meeting announcement
by Colin Plumb 17 Dec '03

17 Dec '03

Additionally, there will be a release of the PGP 5.0 Unix Specific Source Code Update at the public meeting. -- -Colin

1 0

DO YOU WAGER / GAMBLE ON SPORTS ?
by 99001680＠msn.com 17 Dec '03

17 Dec '03

MR ACTION HAS THE WINNERS FOR SUNDAY & MONDAY NFL & BASKETBALL GUARANTEED TO WIN !!! UP NOW AT 1-900-484-7777 $18.00 per call Under 18 years of age ?? Don't Call!!! This is a guaranteed pick line. If you do not have a winning day with these selections we will replace the selections or make a refund!!

1 0

E-Peso's for tractors - McCaffrey on banking
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text From: "Blair Anderson" <blair(a)technologist.com> To: "dcsb(a)ai.mit.edu" <dcsb(a)ai.mit.edu> Date: Sun, 09 Nov 97 01:53:59 +1300 Priority: Normal MIME-Version: 1.0 Subject: E-Peso's for tractors - McCaffrey on banking Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: "Blair Anderson" <blair(a)technologist.com> 06:24 p.m Nov 05, 1997 Eastern U.S. drug czar appeals to banks to track laundering By Anthony Boadle WASHINGTON (Reuters) - Bankers, watch those ``smurf'' accounts. That was the message drug enforcement authorities gave the American Bankers Association and the American Bar Association at their annual money laundering conference Wednesday. Any innocent-looking person could be depositing a drug baron's cash parceled into amounts smaller that the $10,000 reporting threshhold to avoid suspicion, so get to know your customer, they warned. Traffickers hire individuals or ``smurfs'' who open small accounts at U.S. banks in their own or fictitious names. Once in the system, drug money becomes very hard to trace, White House drug policy director Gen. Barry McCaffrey said. Americans spend $49 billion a year on illegal drugs and much of that cash has to go through banks and corporations to get back to the Colombian cartels that ship cocaine and heroin to the the United States, he said. McCaffrey said drug traffickers were becoming increasingly sophisticated in laundering their proceeds, resorting to high tech communication encryption and ``cybercash'' transactions over the Internet. ``We are not going to find dumb guys stumbling into bank branches in New York City with cardboard boxes full of $20 bills that test positive for cocaine,'' he said. ``We are losing contact with the enemy,'' the general said. ''The government cannot follow laundering by itself. You are going to have to help.'' McCaffrey said the drug trade was moving into new areas such as the securities industry to launder its profits. Treasury Department Undersecretary for Enforcement, Raymond Kelly, said Colombian cartels were using a black market peso brokering system to send home their profits. Cartels sell their dollars at a discount to Colombian businessmen who need to buy goods in the United States. The dollars go to pay the U.S. manufacturer or exporter. The pesos never leave Colombia and end up in the drug baron's account. A hooded Colombian woman testified in Congress last month that she had laundered money through large U.S. banks and corporations unwittingly used by black market peso brokers. She cited the case of drug dollars going to pay for a tractor for a Colombian farmer. Keely, a former New York City police commissioner, warned that money laudering was corroding financial institutions. ``It is the source and the product of a burgeoning global parallel trading system that serves the emerging criminal holding companies,'' he told the bankers and lawyers. Kelly said the Clinton administration has worked to lessen the burden of the Suspicious Activity Reports that banks are obliged to file under the Banking Secrecy Act. The banking industry complained it had to file 12 million such reports in 1996, a time consuming and costly activity. New regulations exempts banks from reporting on certain customers, such as corporations listed on stock markets and their subsidiaries. But a new set of rules exempting additional businesses has caused an uproar among bankers because they would have to track the daily currency operations of these businesses for one year and project their annual currency needs. Copyright 1997 Reuters Limited. All rights reserved. Blair Anderson (Blair(a)technologist.com) International Consultant in Electronic Commerce, Encryption and Electronic Rights Management "Techno Junk and Grey Matter" (HTTP://WWW.NOW.CO.NZ [moving servers, currently inactive]) 50 Wainoni Road, Christchurch, New Zealand phone 64 3 3894065 fax 64 3 3894065 Member Digital Commerce Society of Boston ---------------------------- Caught in the Net for 25 years ---------------------------- For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

2 1