December 2003 - cypherpunks-legacy

PK & Re: Is spam really a problem?
by Information Security 17 Dec '03

17 Dec '03

> From sunder(a)brainlink.com Thu Feb 19 15:43:54 1998 > > Information Security wrote: > > > > From sunder(a)brainlink.com Wed Feb 18 15:58:46 1998 > > > > > > Anonymous wrote: > > > > > > > > I see discussion of spam here and everywhere on > > > > the net. But who finds it a *real* problem, and > > > > why? > > > > Why are you asking the cypherpunks list? > > I didn't. Anonymous did. Seth Breidbart (Mr. BI>20 == SPAM) insists it is a valid style of attribution to give it once at the top. My question was obviously directed at "Anonymous". So you don't get confused again, I'll keep repeating the attributions: > From sunder(a)brainlink.com Thu Feb 19 15:43:54 1998 > > Information Security wrote: > > > > From sunder(a)brainlink.com Wed Feb 18 15:58:46 1998 > > > > > > There are nice technical solutions to this. If sendmail > > > didn't transport things unauthenticated it could be done, > > > but at a cost in CPU cycles on mail servers: > > > > > > Have every sendmail server use a PK scheme to talk to > > > every other server and authenticate the connection. > > > Have every sendmail server accept mail only from those > > > whose key is verified. > > > > Nonsense. > > > > We (NANA) already know where spam comes from, > > and when we complain about it, they are terminated. > > Until someone else gets a throw away $10 account and uses it to > spam, right? By the time you track'em down, they already gave up > that account. All ISP's do is to delete the spamming account, which > the spammer doesn't care about anyway. So you achive nothing. Talk about achieving nothing: what does server-to-server authentication have to do with overcoming spam from throw-away accounts? Hey, at least ISPs are making money from terminating accounts. ;-) > From sunder(a)brainlink.com Thu Feb 19 15:43:54 1998 > > Further one can generate fake headers and you would not know exactly > where it comes from, though you could have some idea since it would > be one of many sites it was relayed from. One could send messages > from an ISP that doesn't mind spammers who won't help you track down > the bitch that just slimed your machine, etc. Jeez, take a breath between thoughts, will ya? It is standard practice to trust only the last "Received" line. What of it? Again: what does server-to-server authentication have to do with known unhelpful ISPs? > From sunder(a)brainlink.com Thu Feb 19 15:43:54 1998 > > Information Security wrote: > > > PK authentication would change nothing. > > > > Show a single spam with a forged IP address. > > IP addresses won't be forged, but one could send > a mail with extra Recieved-By: headers, etc. And how would throw-away accounts be affected by your proposed massive change in SMTP protocol? > From sunder(a)brainlink.com Thu Feb 19 15:43:54 1998 > > Information Security wrote: > > > PK authentication would only lead us down the > > road of everyone being tattooed with barcodes > > of our own making - and incredibly dumb idea. > > > > It would be like requiring a smart card for Internet access. > > Bullshit. PK auth with a central repository would be Big Brotherish. > Having each user gen their own PK pair is what I suggested. But these keys must be registered somewhere: whether it's at a centralized site or distributed, *requiring* everyone to have a digital signature for Internet access is twisting this elegant crypto-related technology: to number each and every one of us, and is exactly what will make CDA legal, because as soon as it's in place attributes such as "age" will be attached. Required identity repositories are a bad idea. > Relaying is a big problem. What, you want _me_ to solve the UCE problem? Okay. I think if Brad (EFF Director) Templeton's whitelist system were made available at the firewall/enterprise level, then widely deployed, spam would be dead. It's a handy little bot-reply mechanism that asks unknown authors to verify they aren't sending UCE, else face a monetary penalty. Replying correctly automatically causes the original email to go through. Thus achieving the legal right to sue the spammer without the legislation CAUCE is pushing. The most important part of this design is that it requires no control-freak changes to the Internet. Don't suggest solutions that *require* digital signatures of everyone. Sheesh. This might work too: Throttle email going through the ISP's mailserver. Maybe 5/minute limit, flagging attempts to go faster to the admins. As for direct PPP connectivity, upgrade router software to throttle. (Port SMTP traffic) Certain people, at the ISP's choice, would have a higher limit, for mailing lists and such. ---guy Think.

2 1

about AES
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

What is the encryption method that thinks to become Advanced Encryption Standard (AES)?

2 1

funny #1
by Perrin . 17 Dec '03

17 Dec '03

A guy, a pig, and a dog are the survivors of a terrible shipwreck, and they find themselves stranded on a desert island. After being there = awhile, they get into a ritual of going to the beach every evening to watch=20 the sun go down. One particular evening the sky was red with beautiful=20 cirrus clouds, the breeze was warm and gentle - a perfect night for = romance! =20 Well, that pig started looking better and better and pretty soon the guy = rolled toward thepig and put his arm around it. The dog was not very=20 happy with this and growled fiercely at the guy, until he removed his = arm=20 from the pig. They continued to enjoy the sunsets together, but no more = cuddling. A few weeks passed by, and lo and behold, there was another=20 shipwreck. The only survivor was a beautiful young woman. She was in a = pretty bad way when they rescued her and they slowly nursed her back to=20 good health. When she was well enough they introduced her to their=20 evening beach ritual. It was another beautiful evening, red sky, cirrus clouds, warm gentle breeze, perfect for romance, the four of them lying there. The guy started getting 'those' ideas again, so he leaned over toward the girl=20 and said, "Um...would you mind taking the dog for a walk?" ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

1 0

funny #2
by Perrin . 17 Dec '03

17 Dec '03

A man who smelled like a distillery flopped on a subway seat next to a = priest. =20 The man's tie was stained, his face was plastered with red lipstick, and = a=20 half empty bottle of gin was sticking out of his torn coat pocket. he = opened=20 his newspaper and began reading. After a few minutes the disheveled guy = turned=20 to the priest and asked, "Say, father, what causes arthritis?" "Mister, it's caused by loose living, being with cheap, wicked women, = too much=20 alcohol and a contempt for your fellow man." "Well I'll be damned." the drunk muttered, returning to his paper. The priest, thinking about what he had said, nudged the man and = apologized. =20 "I'm very sorry. I didn't mean to come on so strong. How long did you = have=20 arthritis?" "I don't have it father. I was just reading here that the Pope does." ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

1 0

Diffie-Hellman vs RSA
by Eric J. Tune 17 Dec '03

17 Dec '03

Can anyone tell me the differences between the Diffie-Hellman algorithm and the RSA algorithm? Is one cryptologically better? (DH let's you use 4096 bit keys versus 2048 bit keys for RSA in PGP 5.5). Thanks for any and all info. Eric Tune

2 1

Pensacola Police have lost their mind!!
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I don't know if this story has reached the AP wire or not but today the brave defenders of the faith here in Pensacola, FL have done their sworn duty to protect us all by arresting a 5yr old on assault charges (againts one of the Adult staff of the school). These are the same brave soles who a few months ago when confronted by a man sitting in his car with a gun to his head solved this problem by riddeling his car, surrounding buildings, and a McDonalds playground with over 100 rounds. As soon as I have some more information on this I will post a full report. - -- - --------------------------------------------------------------- William H. Geiger III http://users.invweb.net/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://users.invweb.net/~whgiii/pgpmr2.html - --------------------------------------------------------------- Tag-O-Matic: Windows: The Gates of hell. -----BEGIN PGP SIGNATURE----- Version: 2.6.3a-sha1 Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBNO4vbI9Co1n+aLhhAQF7WwP/YrKBFkxLWHjmkX+oU/N58bBqiORWYZvA ceEXVavR+hhtse+dDZQjVwu1O/mUQsnhGZvs3ichG+kl3f1Uonyze9EFdxkSpK8T f4bR/um/UlobMDusOdG4HjUyTBw/h7rLuORFm4KvGxH3AS5hii2fGeEpQnUIabQQ lPYLStK7TUg= =rLlC -----END PGP SIGNATURE-----

1 0

Re: Request for Web Browser Information
by Joshua Kunken 17 Dec '03

17 Dec '03

Sure, check out: http://www.autobahn.org/main/addr.shtml What year is it? 1984? hehhehe Lates... At 05:51 AM 2/21/98 -0800, you wrote: >I would like to know the information my browser makes available to web sites. I use both Netscape and Internet Explorer. > >Obviously web sites can determine my IP address for any given session; they can also look at cookies left by themselves and other sites. > >Can anyone point me to where I can learn exactly what other information is made available (browser version?, OS version?, system name?, user name?, etc.)? > >Thanks in advance. > >David > Joshua Kunken Administrative Computing jkunken(a)uclink4.berkeley.edu "100% uptime? You betcha!"

1 0

Pensacola Police have lost their mind!! (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: "William H. Geiger III" <whgiii(a)invweb.net> > Date: Fri, 20 Feb 98 20:27:22 -0500 > Subject: Pensacola Police have lost their mind!! > I don't know if this story has reached the AP wire or not but today the > brave defenders of the faith here in Pensacola, FL have done their sworn > duty to protect us all by arresting a 5yr old on assault charges (againts > one of the Adult staff of the school). It made it to CNN. > These are the same brave soles who a few months ago when confronted by a > man sitting in his car with a gun to his head solved this problem by > riddeling his car, surrounding buildings, and a McDonalds playground with > over 100 rounds. > > As soon as I have some more information on this I will post a full report. Their story was that the child had a behavioral problem and the parents refused to get counceling when the school requested. She apparently goes on room smashing temper tantrums on a regular basis. The father of the child said it was the most ludicrous thing he had ever heard of, reportedly. Can't say that changes the situation a heck of a lot though... ____________________________________________________________________ | | | When a man assumes a public trust, he should | | consider himself public property. | | | | Thomas Jefferson | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

6 10

Anthrax suspect predicts attack on US [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: http:--www.cnn.com-US-9802-20-anthrax.arrests- > MAN SUSPECTED OF HAVING ANTHRAX PREDICTED ATTACK > > February 20, 1998 > Web posted at: 10:15 p.m. EST (0315 GMT) > > LAS VEGAS, Nevada (CNN) -- A man arrested on charges of possessing > what is believed to be the deadly toxin anthrax predicted on a radio > talk show the day before his arrest that the United States would be > the target of a major biological attack within two years. > > Tuesday, Larry Wayne Harris, speaking on Talk America Radio > Network's "The Buck Stops Here," gave a detailed description of what > he said was a plot involving more than 200 "sleeper cells" of Iraqi > students poised to unleash anthrax and bubonic plague bacteria on > the American people. > > "The odds of us making it through even the end of this century > without a major biological incident are very low," Harris said. > > Harris, 46, and William Leavitt Jr., 47, were arrested Wednesday > night in a Las Vegas suburb after an informant called the FBI to > report the two men told him they had anthrax. They are being held at > the Clark County Detention Center. > > Laboratory test results to determine whether a substance seized was > in fact anthrax were delayed Friday. No reason was given. > > Leavitt's attorney: Tests will be negative > > > > Leavitt's attorney, Lamond Mills, said in an interview with CNN in > Las Vegas he believes the tests will prove negative. > > "On Monday, I think the test results will be in and show that it's > non-toxic, and they're going to have to stand up and acknowledge > that. And their case is going to be flushed," Mills said. [text deleted] ____________________________________________________________________ | | | When a man assumes a public trust, he should | | consider himself public property. | | | | Thomas Jefferson | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Pensacola Police Need a Reality Check
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- News Story Pensacola News Journal Friday, Febuary 20, 1998 Kindergartner arrested in school scuffle By Sonja Lewis and Lesley Conn New Journal Staff Writters Her daddy told her it was like finger-painting, but 5 yaer-old Chaquita Doman was actually being fingerprinted following her arrest Wednesday and it wasn't fun. The Edgewater Elementary kindergarten student was booked on a felony battery warrant at the Department of Youth Services after scuffling with her school counselor. Linda green, 51, told Escambia deputies Chaquita bit and scratched her Feb. 3 when she tried to calm the girl. The warrant for battery of an elected official or educator was issued the day of the incident. Escambia deputies have never arrested anyone younger, a spokeswoman said. Chaquita's father, Lee Ernest Middleton, said the arrest is the most ludicrous thing he's ever experienced. District spokeswoman Barbara Frye said school officials were making sure a child with "an-out-of-contorl rage" got some counseling. Deputies notified Chaquita's parents Tuesday of the arrest warrant. Her parents brought her in Wednesday. "Can you imagine what it's like to have your daughter fingerprinted and escorted by a deputy to a juvenile facility?" asked her father. Middleton, 35, said he plans to contact a lawer as early as this morning because of the emotional trauma suffered by his daughter and her identical twin sister, Shakita. He took his daughters out of school Thursday. Missing four of her front teeth, Chaquita nodded Thursday that she bit and scratched someone. "She's good", she said tossing her thumb towards her twin. "I'm bad". Chaquita threw furniture and inflicted at least 27 deep scratches and bit Green's arm to cause "significant bleeding," Frye said. Chaquita was suspended for three days and her parents were asked to sign a counseling referral slip, Frye said. Because Green wanted the child to be councled, she called deputies. Middleton says he was not asked to sign anything until her suspention was up. He said he agreed to counseling. Because of juvenile protection laws, the State Attorney's Office could not say what action was taken. But her parents were told there would be no charges filed, they said. - -- - --------------------------------------------------------------- William H. Geiger III http://users.invweb.net/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://users.invweb.net/~whgiii/pgpmr2.html - --------------------------------------------------------------- <HTML><META HTTP-EQUIV="Content-Type:text/html"> <SCRIPT> function X() {var Text = "HTML is not acceptable for using in mail " + "or usenet so your browser will stop."; alert(Text); parent.close();}; </SCRIPT> </HEAD><BODY onLoad="X();return true">Hi</HTML> Tag-O-Matic: Don't be held back by yesterday's DOS! Try today's OS/2! -----BEGIN PGP SIGNATURE----- Version: 2.6.3a-sha1 Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBNO47fY9Co1n+aLhhAQGJZgP9HC6ShbPuPct2BdtqRdNMs7ZFh8rcHHje Bxrdd1cXW/sWDZfFTofygPn1TI+C6TUsOkepzFqWs2aHEgkV21Fy4c7B3o/dNuFL 56z7nKwDFiurTh8+5s1qtN9CK3xgFoS0EfOW8VgG7onHq18806rTyqggj4sZzwX4 g3RNsCbftKE= =8TIn -----END PGP SIGNATURE-----

1 0