December 2003 - cypherpunks-legacy

RE: Apple crypto engineer position available
by Anonymous Sender 17 Dec '03

17 Dec '03

>PGP cut the gordian knot and demonstrated that it was _possible_ >to have a successful PKI application without a CA. But that is not >to say that a trusted third party cannot add value to an >application. PGP validated PKI generally but it did not invalidate >the CA concept - in the PGP system everyone is a trust provider, >everyone is in that sense a CA. PGP did in fact invalidate CA concept, very successfully. There is a world of difference between "everyone is a trust provider" and several centralized CAs. Authentication is an essential part of security. If one assumes wrong who she is talking to then all "strong crypto" used is irrelevant, since the middleman is browsing the plaintext. If there is a need, CA customers will be given middleman's keys and all traffic will be systematically captured, re-encrypted and forwarded to the intended recipient for as long as required. Maybe even keys with the same hash (id) can be generated to pass the verification. What percentage of users would do the non-automated, manual check anyway ? If trusting a secret key to escrowing entity (GAK) is a bad deal, how is trusting someone's identity to CA any different ? In both cases security is deposited with an organization that can be influenced in any number of ways. The CA concept does not work because security and privacy are inherently individual, and any forced insertion of third parties in the process is bound to miserably fail. The Fool

1 0

The Great Internet Bandwidth Crisis
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

It seems to me that the chief impediment standing in the way of the Internet becoming a propaganda and marketing tool suitable for use and control by a few rich and powerful business entities is the comparatively inexpensive and easy access of millions of users to the same technologies available to megacorporations. History itself leads me to suspect that the money and power moguls will use a variety of real and imaginary issues to place greater monetary burdens and access restrictions on many aspects of the Internet and Web, particularly those that have commercial potential. A current example is the attempt by various Telecos to raise the cost of access for other businesses, citing alleged burdens placed on their resources by ISPs at the same time that they are scrambling to enter the same market by undercutting their competitors. The Great Teleco Resource Crisis will undoubtedly be mirrored at some point in the future by the Great Internet Bandwidth Crisis. I suspect that although it will be as bogus as the Telecos' current imaginary crisis, it will come at a time when the major players have divided up enough of the infrastructure pie among themselves to be unanimous in their nod-and-wink agreement as to the severity of the crisis. Undoubtedly, this will be just one of a variety of crisis in which will require restrictive legislation and cost-increasing regulations that will save bandwidth for future children and protect adult citizens from the extreme danger of engaging in commerce with other average adult citizens such as themselves. It seems to me that the *only* way that the Internet can be kept from being used as just another tool for herding the masses into larger and more efficient feeding pens is to enable and empower the citizens to freely and safely control their own financial and commercial destiny in their Internet transactions. The more accessible and widespread the control over one-to-one monetary transactions, the more difficult it will be for a few entities to lead the citizens around by financial rings run through their noses. The government currently has a variety of budgetary axes held over the heads of the citizens, such as federal funding and grants in which money taken away from the citizens is returned to them on a statewide, local or individual basis only upon conditions that involve giving up rights and liberties that are due them. In order to resist being herded by a myriad of legal, licensing and regulatory 'axes' into increasingly global feeding pens, the citizens will need access to tools which allow secure financial transactions with differing levels of identity versus anonymity available to them. The reason that major business has not yet been able to divide up the financial pie available through the Internet is the excessive amount of resources that they need in order to compete for the attention of Internet users, given that average citizens are providing equal or better information and services for free or for a low cost. The sooner that the masses are able to engage in free commerce with one another via the Internet--whether it be giving Grandma Jones a dollar for her cookie recipies, or engaging a student across the continent in private research in return for money, for goods or for services--then the sooner the masses will scream loud and long when government or corporate entities threaten to take this ability to be self-sufficient away from them. Those who wish to circumvent the loss of privacy, liberty and freedom that they forsee as being possible on the Internet need to realize that most of those who are not currently empowered to manifest those possibilities in their individual life will little recognize or protest the 'present' loss of those 'future' possibilities. Unless there is a widespread dissemination of working tools accessible to the average citizen, then the future will be controlled by those with the funds and resources to limit financial transactions on the Internet to a self-defined 'way things are.' "Teach a man to buy his fish from you, and you'll feed yourself for a lifetime."

2 1

IntenseWhore VidKid Sex Machine
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

http://www.pathfinder.com/time/magazine/1998/dom/980420/notebook.techwatch.… PLAY STATION Vidkids hooked on high-impact games with stereo sound tracks will have a tough time leaving their seats at next month's E3 convention. That's when BSG Laboratories will debut the Intensor, a $500 speaker-studded chair (with between-the-legs bass and separate subwoofer) to give hard-core players a body-thumping shot of visceral reality. It seems to me that enterprising children with mechanical ability should be able to use common household items, such as vacume cleaners, blow-driers, doorknobs and wax-fruit to 'enhance' the vidiot experience that BSG Laboratories will be pimping. It seems to me that an enterprising young Tom Cruise type might be able to combine an enhanced version of the IntenseWhore with a variety of adult MPEGs and pick up some major cash in between his friends' 'cumings' and goings. Sounds like something for the 'Got My Nut'ly News to pursue.

1 0

RE: NT
by Brown, R Ken 17 Dec '03

17 Dec '03

Yeah, lots of people know. Mostly the ones who've read the NT manuals. > ---------- > From: nobody@nsm.htp.org[SMTP:nobody@nsm.htp.org] > Sent: 16 April 1998 04:25 > To: cypherpunks(a)toad.com > Subject: NT > > Anyone know how to completely crash a NT > workstation with no possibility of recovery? >

1 0

NYT on Daley Deal
by John Young 17 Dec '03

17 Dec '03

The New York Times, April 16, 1998, p. D2. Commerce Secretary Seeks Compromise on Encryption Administration Reconsiders F.B.I. Position By Jeri Clausing Washington, April 15 -- The Clinton Administration's attempts to control encryption technology have been a failure and are forcing American software makers to concede ground to foreign competitors, Commerce Secretary William M. Daley said today. Mr. Daley's remarks, made in a speech here to the high-technology industry, were the strongest indication yet that the Administration was seriously considering parting ways with Louis Freeh, the Director of the Federal Bureau of Investigation, and other law enforcement and spy agencies over the issue of how data should be scrambled. "We are headed down a lose-lose path, and we have to get back to win-win," Mr. Daley said. He blamed both industry and law enforcement officials for the failed policy, saying that the two sides had failed to find a reasonable compromise between the need to monitor the activities of criminals and the need to offer consumers strong security for on-line transactions. The purpose of his speech today was to release the Commerce Department's first comprehensive report on the impact of electronic commerce on the nation's economy. The report shows that information technology, including business on the Internet, is growing twice as fast as the overall economy, employing some 7.4 million workers at salaries 64 percent above the national average. But while the report was full of impressive numbers and glowing predictions for the future, Mr. Daley said that strong encryption and a solid encryption policy were essential if electronic commerce was to realize its full potential. Mr. Daley's blunt comments marked the first public acknowledgment that the Clinton Administration's encryption policy had failed. And his remarks echoed what the industry has contended for years -- that foreign companies are fast taking over the high-demand market for products that protect the privacy of communications. The software industry is currently prohibited from exporting strong encryption programs, which scramble data in ways that make it difficult or impossible for unauthorized people -- including law enforcement agencies -- to decode. Such software is essential to electronic commerce, which requires that credit card information and other private data be encrypted when products are ordered on the Internet. The software industry has long argued that the export rules put American companies at a great disadvantage relative to foreign competitors not under such restrictions. Mr. Freeh and the National Security Agency argue that the threat of terrorists and other criminals scrambling data to thwart law enforcement is so great that the export restrictions should be removed only if the police are given keys to unlock encrypted data. At the end of 1997, Mr. Daley said, an estimated 656 encryption products were being produced in 29 countries outside the United States. Products from Germany, Ireland, Canada, Israel and Britain can compete with anything made domestically, he said, and can meet the needs of the world's computer networks. "Our policy, ironically, encourages the growth of foreign producers at the same time it retards growth here," Mr. Daley said. He called for a sincere dialogue between industry and law enforcement, but stopped short of saying that the Administration would withdraw its support of the F.B.I. and N.S.A. position. "There are solutions out there," Mr. Daley said. "Solutions that would meet some of law enforcement's needs without compromising the concerns of the privacy and business communities. But I fear our search has thus far been more symbolic than sincere. "The cost of our failure will be high. The ultimate result will be foreign dominance of the market. This means a loss of jobs here, and products that do not meet either our law-enforcement or national security needs." Mr. Daley declined to offer examples of what the Administration might be willing to give up to reach an agreement. Industry officials, however, said there was no room for compromise. "People want complete privacy," Peter F. McCloskey of the Electronic Industries Alliance said. Harris N. Miller, president of the Information Technology Association of America, said that companies were willing to continue discussions with the Administration, but he asserted that Government officials "think compromise is something in the middle; sometimes compromise is found outside of the box." Mr. Miller said that the solution needed to be a technical one, perhaps one that gave law enforcement better training and equipment to crack encrypted criminal communications without requiring that everyone hand over spare keys to their computer files. "Law enforcement has legitimate concerns," Mr. Harris said. "What we disagree with is their demand for unlimited access." [End]

1 0

FINALLY, FRESH & CLEAN !!
by FRIEND＠hotmail.com 17 Dec '03

17 Dec '03

IT WAS JUST RELEASED!! INTRODUCING...MILLIONS VOL. 1 We took a total of over 92 million email addresses from many of the touted CD's that are out there (bought them all - some were $300+)! We added the millions we had in storage to those. When we combined them all, we had in excess of 100+ million addresses in one huge file. We then ran a super "sort/de-dupe" program against this huge list. It cut the file down to less than 25 million!!! Can you believe that? It seems that most people that are selling CD's are duping the public by putting numerous files of addresses in the CD over and over. This created many duplicate addresses. They also had many program "generated" email addresses like Compuserve, MCI, ANON's, etc. This causes a tremendous amount of undeliverables, and for those that use Stealth programs, clogs up servers quickly with trash, etc. We then ran a program that contained 150+ keywords to remove addresses with vulgarity, profanity, sex-related names, postmaster, webmaster, flamer, abuse, spam, etc., etc. Also eliminated all .edu, .mil, .org, .gov, etc. After that list was run against the remaining list, it reduced it down to near 16 million addresses! So, you see, our list will save people hundreds of dollars buying all others that are out there on CD and otherwise. Using ours will be like using the 100+ million that we started with, but a lot less money and alot less time!! We also purchased Cyber-Promos ($995.00) CD. We received it just prior to finishing production work on the new CD. We had our people take a random sample of 300,000 addresses from the touted 2.9 that they advertised. We used a program that allows us to take a random sample of addresses from any list. We were able to have the program take every 9th address, thus giving us a 300,000 list of Cyber's email addresses from top to bottom. We did not clean these, but we did create 3 seperate files named cyber1.txt, cyber2.txt, & cyber3.txt of 100,000 addresses each. This will give all people that use the list a opportunity to send mail to the list before deciding if their CD is all it's hyped to be. We also included a 2+ million "Remove/Flamer" file broke into seperate files for ease of extracting and adding to your own database of removes. "You can buy from the REST or you can buy from the BEST. Your choice. _____________________________ What others are saying: "I received the CD on Friday evening. Like a kid with a new toy, I immediately started bulking out using the new email addresses. Over the course of the weekend, I emailed out over 500,000 emails and I received less than TWENTY undeliverables!! I am totally satisfied with my purchase!! Thanks Premier!!" Dave Buckley Houston, TX "This list is worth it's weight in gold!! I sent out 100,000 emails for my product and received over 55 orders! Ann Colby New Orleans, LA **************************************** HERE'S THE BOTTOM LINE Here is what you get when you order today! >> 16 Million Email Addresses... 1 per line in simple text format on a CD. Files are in lots of 100,000 (no codes needed to open files). All files are separated by domain name for your convenience. PLUS you receive a tremendous REMOVE list! AND the a sampling of CyberPromo's HOT list. >>> NOW ONLY $149.00! This price is effective for the next seven days, thereafter the price will be $199.00 so ORDER NOW! All lists are completely free of any Duplicates. We also on a continual basis, add New Names and Remove Undeliverables and Remove Requests. The result is the Cleanest Email Addresses Available Anywhere to use over and over again, for a FRACTION of the cost that other companies charge. Typical rates for acquiring email lists are from 1 cent to as high as 3 cents per email address - that's "INFORMATION HIGHWAY" ROBBERY!. Don't even hesitate on this one or you will miss out on the most effective way to market anywhere..PERIOD! To order our email package, simply print out the EZ ORDER FORM below and fax or mail it to our office today. We accept Visa, Mastercard, Discover, Checks by Fax and Mail. _________________ EZ Order Form _____Yes! I would like to order MILLIONS Vol. 1 email addresses for only $149.00. *Please select one of the following for shipping.. ____I would like to receive my package OVERNIGHT. I'm including $15 for shipping. (outside US add an additional $25 for shipping) ____I would like to receive my package 2 DAY delivery. I'm including $10 for shipping. (outside US add an additional $25 for shipping) DATE_____________________________________________________ NAME____________________________________________________ COMPANY NAME___________________________________________ ADDRESS_________________________________________________ CITY, STATE, ZIP___________________________________________ PHONE NUMBERS__________________________________________ FAX NUMBERS_____________________________________________ EMAIL ADDRESS___________________________________________ TYPE OF CREDIT CARD: ______VISA _____MASTERCARD CREDIT CARD# __________________________________________ EXPIRATION DATE________________________________________ NAME ON CARD___________________________________________ AMOUNT $____________________ (Required) SIGNATURE:x________________________ DATE:x__________________ You may fax your order to us at: 1-704-784-5595 CHECK BY FAX SERVICES! If you would like to fax a check, paste your check below and fax it to our office along with all forms to: 1704-784-5595 ****************************************************** ***24 HOUR FAX SERVICES*** PLEASE PASTE YOUR CHECK HERE AND FAX IT TO US AT 1-704-784-5595 ******************************************************* If You fax a check, there is no need for you to send the original check. We will draft up a new check, with the exact information from your original check. All checks will be held for bank clearance. If you feel more comfortable sending payment through the mail, please send all forms and Check or Money Order to: CONSUMER CONNECTIONS 10223-B UNIV. CITY BLVD. #197 CHARLOTTE, NC 28213

1 0

PGP and crypto News from France
by Anonymous Sender 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------- PLEASE REPLY ONLY TO : <pplf(a)usa.net> - ---------------------------------------------------------- SUBJET : PGP and crypto News from France Hi all, We're glad to announce an english "PGP and crypto News from France" on the PGP FOR FRENCH site, and a "beta" ;-) translation of our little PGP History, here : http://www.geocities.com/SiliconValley/Bay/9648/pgpnews.htm Bye - -------------------------------------------------------------------- PGP pour les francais / PGP even for the French <pplf(a)usa.net> http://www.geocities.com/SiliconValley/Bay/9648 PGPkey 14A0 4A67 0431 2402 684D 6EBA 537F 664D 3F80 0D58 http://www.geocities.com/SiliconValley/Bay/9648/pplf.txt - --------------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.5.3i for non-commercial use <http://www.pgpi.com> iQA/AwUBNTRhsVN/Zk0/gA1YEQJQHACfWWAhaHVKblH2S0VSazSw94F8FXUAoPt+ bxFrPDrfbgcPQgLD3NgULSA2 =8Wr+ -----END PGP SIGNATURE-----

1 0

eligable receiver
by David Honig 17 Dec '03

17 Dec '03

THE WASHINGTON TIMES April 16, 1998 Bill Gertz Computer hackers could disable military; System compromised in secret exercise Senior Pentagon leaders were stunned by a military exercise showing how easy it is for hackers to cripple U.S. military and civilian computer networks, according to new details of the secret exercise. Using software obtained easily from hacker sites on the Internet, a group of National Security Agency officials could have shut down the U.S. electric-power grid within days and rendered impotent the command-and-control elements of the U.S. Pacific Command, said officials familiar with the war game, known as Eligible Receiver. "The attack was actually run in a two-week period and the results were frightening," said a defense official involved in the game. "This attack, run by a set of people using standard Internet techniques, would have basically shut down the command-and-control capability in the Pacific theater for some considerable period of time." Pentagon spokesman Kenneth Bacon said, "Eligible Receiver was an important and revealing exercise that taught us that we must be better organized to deal with potential attacks against our computer systems and information infrastructure." The secret exercise began last June after months of preparation by the NSA computer specialists who, without warning, targeted computers used by U.S. military forces in the Pacific and in the United States. The game was simple: Conduct information warfare attacks, or "infowar," on the Pacific Command and ultimately force the United States to soften its policies toward the crumbling communist regime in Pyongyang. The "hackers" posed as paid surrogates for North Korea. The NSA "Red Team" of make-believe hackers showed how easy it is for foreign nations to wreak electronic havoc using computers, modems and software technology widely available on the darker regions of the Internet: network-scanning software, intrusion tools and password-breaking "log-in scripts." According to U.S. officials who took part in the exercise, within days the team of 50 to 75 NSA officials had inflicted crippling damage. They broke into computer networks and gained access to the systems that control the electrical power grid for the entire country. If they had wanted to, the hackers could have disabled the grid, leaving the United States in the dark. Groups of NSA hackers based in Hawaii and other parts of the United States floated effortlessly through global cyberspace, breaking into unclassified military computer networks in Hawaii, the headquarters of the U.S. Pacific Command, as well as in Washington, Chicago, St. Louis and parts of Colorado. "The attacks were not actually run against the infrastructure components because we don't want to do things like shut down the power grid," said a defense official involved in the exercise. "But the referees were shown the attacks and shown the structure of the power-grid control, and they agreed, yeah, this attack would have shut down the power grid." Knocking out the electrical power throughout the United States was just a sideline for the NSA cyberwarriors. Their main target was the U.S. Pacific Command, which is in charge of the 100,000 troops that would be called on to deal with wars in Korea or China. "The most telling thing for the Department of Defense, when all was said and done, is that basically for a two-week period the command-and-control capability in the Pacific theater would have been denied by the 'infowar' attacks, and that was the period of the exercise," the official said. The attackers also foiled virtually all efforts to trace them. FBI agents joined the Pentagon in trying to find the hackers, but for the most part they failed. Only one of the several NSA groups, a unit based in the United States, was uncovered. The rest operated without being located or identified. The attackers breached the Pentagon's unclassified global computer network using Internet service providers and dial-in connections that allowed them to hop around the world. "It's a very, very difficult security environment when you go through different hosts and different countries and then pop up on the doorstep of Keesler Air Force Base [in Mississippi], and then go from there into Cincpac," the official said, using the acronym for the Commander in Chief, Pacific. The targets of the network attacks also made it easy. "They just were not security-aware," said the official. A second official found that many military computers used the word "password" for their confidential access word. ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu Clarke's Third Law: Any sufficiently advanced technology is indistinguishable from magic.

1 0

---> How Can I Pay You For My Order
by 1-800-893-6001＠toll.free 17 Dec '03

17 Dec '03

Turn Key Payment Solutions - Sell From Your Web Site Take Checks By Phone - Fax - Or At Your Web Site - FREE or Take Credit Cards - MasterCard - Visa - AMEX and more... Our site has changed since you last visited, so please take the time to visit again, you will be glad you did. <a href=" http://www.hoststar.com/payments/">Internet Payment Solutions</a> You can call us directly at 1-800-893-6001 or see our site for other contact information. No company offers easier web commerce solutions - Checks by phone Credit card merchant accounts Secure Payment Form Hosting for your web site Free Collection Services ***************************************************************** This mailing was sent by RCS Promotions on behalf of the above client. RCS is not affiliated with the above client, other than to provide a mailing service. Removal options are available at the above listed web site. Questions about names, lists and marketing may be directed to RCS Promotions at 781-892-4191. *****************************************************************

1 0

None Re: Gary Lee Burnore, Registered Sex Offender in Raleigh, NC
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Gary Lee Burnore <gburnore(a)databasix.com> wrote: > In 11/96, I kissed a 17 year old girl. I'm not going to provide you > with a lot of detail because this isn't the place for it. If the girl's mother had heeded the earlier warning she received via e-mail about your behavior several months earlier (the one you called "harassment" at the time), this all could have been prevented. You're lucky that the 11/96 "kiss" is all you were arrested for. You were foolish to continue it knowing that Nancy had already been tipped off. In case you've forgotten, you whined: -> So now the cowards in Ronald Francis's corner (I'm outright expecting the -> culprit to be ronald francis himself) have taken to sending email to -> those who have names listed on databasix's web page. Sending comments to -> a 17 year old that they're going to tell her mother that she's having an -> affair with me. Telling her mother that I'm molesting her daughter. -> Having all sorts of fun. And you threatened to report the anonymous whistleblower to the authorities? What chutzpah! You're molesting a minor, someone tips off her mother, and you threaten to report the person who tipped her off about your behavior? Your claim has now been proven to be a lie. How would the mere fact that the girl had a web page at databasix.com have alerted an outsider to the fact that you were molesting her? Presumably she didn't post her diary on her web page, detailing your sexual activities towards her. Where would "Ronald Francis", or any other random "harasser" have obtained this information? You were too quick to dismiss the idea that all the alleged "harassment" and spam baiting might have originated from a DataBasix insider with detailed knowledge of your private life, as well as the complete list of all DataBasix employees and customers that Belinda Bryan claimed had been "spam baited". Who else is getting ahold of all this inside info, Gary? > I pass no > judgment on whether or not she instigated it. I held myself > responsible. That's why I went to see a counselor and offered to pay > for hers if she wanted to do the same. > > It was at the counselor's office that I learned what had happened was > considered a crime under CA law. I discussed this with the girl and > her mother; neither wanted to get law enforcement involved. But apparently it was serious enough that both your victim and her mother thought you needed psychiatric help. (Plenty of people on usenet could have told you that.) > To date, this ordeal has cost me nearly $30,000.00 in legal fees, lost > wages, and other costs. That however, is nothing compared to the > emotional stress of this. You spent $30K on what was supposedly a misdemeanor charge to which you pled guilty? Someone must have seen you "coming"? Was it Nancy? The maximum penalty for a misdemeanor is what? 6 months + $500? You spent $30K to get off with 3 years probation? On a 6 month sentence, you'd probably have been out in 3 months, and that's assuming you got the maximum sentence. Or was the $30K to get it plea bargained down from a more serious charge? > It goes on and on and on. I thought the shrink was to ensure that if didn't. > You know what's so damn frustrating about this? I chose to talk to a > councelor about this even though I knew it would bring charges. I was > doing the right thing. What statute in California makes it a misdemeanor to kiss a 17 year old girl? (It must make senior proms a lot of fun there if such a law really exists as you claim.) Or does it depend on what part of her body you "kissed" her? It's also interesting that when it was revealed that you had also been arrested in San Francisco for unlawful assembly in blocking traffic, you minimized it and called it a mere "traffic ticket", concealing the fact that you had already been convicted of something more serious. Then when someone finally reveals a second criminal conviction on your record, your sock puppets whine that it's a "half truth". Well, gee, Gary, you were content when the WHOLE truth was being concealed. So much for you "I have nothing to hide" boast!

1 0