December 2003 - cypherpunks-legacy

Re: PGP Employee on MKR
by mark＠unicorn.com 17 Dec '03

17 Dec '03

A PGP Employee wrote: >> Unfortunately these people just don't get it. Corporations refused >> to buy 5.0 because it did not have any way for the corps to get at >> email encrypted to their employees. There are some very legitimate >> uses of this, such as when an employee dies and someone else has >> to take over for them. No, PGP Inc 'just don't get it'. I'm sure that there are plenty of people out there who disagree with the entire concept of CMR, and I'm not very happy with it myself. But that's not the most important issue here. Since this point just doesn't seem to get through to PGP Inc employees, I'm going to shout. FORCING ENCRYPTION TO MULTIPLE KEYS FOR ONE RECIPIENT IS ONE STEP AWAY FROM GAK. FORCING ENCRYPTION TO MULTIPLE KEYS FOR ONE RECIPIENT IS ONE STEP AWAY FROM GAK! FORCING ENCRYPTION TO MULTIPLE KEYS FOR ONE RECIPIENT IS ONE STEP AWAY FROM GAK!! FORCING ENCRYPTION TO MULTIPLE KEYS FOR ONE RECIPIENT IS ONE STEP AWAY FROM GAK!! !!!*FORCING ENCRYPTION TO MULTIPLE KEYS FOR ONE RECIPIENT IS ONE STEP AWAY FROM GAK*!!! Is that clear enough? Do you understand what I (and, apparently, Adam Back and others) am saying now? The problem is not so much with the fact that you're supporting company needs, but with the way you're doing so. >> They also don't seem to realize that you always have the ability >> to remove the MRK from your list of recipients. Just as government-supported rating schemes are purely voluntary and will be so for, oh, I don't know, a couple of years? Once the infrastructure is there, we need only an executive order to make it mandatory. If this software ships in its current form and becomes the dominant player in the market, in four or five years all keys will be GMR keys with the FBI or NSA as one mandatory recipient. You 'privacy zealots' will have created the government's surveillance infrastructure. I hope you'll feel proud. >> Sometimes I really feel like screaming at these people. _All_ of >> the developers at PGP are personal privacy zealots and no one >> likes the idea of the MRK. Good. Then reimplement it to avoid giving the government a GAK/GMR infrastructure. Yesterday I posted a modified version of PGP's CMR to the cypherpunks list which can't be used for GAK because it only encrypts to one key; Jon Callas just told me I'd 'redesigned PGP 5.5'. Cool. I've redesigned PGP 5.5 so that it can't support GAK; in that case, please implement it, or accept that you're deliberately choosing to support the thugs in governments around the world and have become part of the problem. >> That is why we refuse to make them >> required. Just 'mandatory voluntary' for companies which have your SMTP enforcer enabled. What's the difference? >> Most everyone at PGP has >> internalized personal privacy as a cause (actually most had it >> before they joined PGP). So prove it. Stop working on creating a GMR/GAK infrastructure. The current PGP CMR system has numerous problems which many people have pointed out on the cypherpunks list, and you'd do better to solve those problems rather than see them in a major New York Times article about '101 Ways PGP 5.5 Harms Company Security'. How long will PGP Inc last when it's reputation for providing secure products is in tatters, because it chose to release a product which deliberately reduced company security and opened them to new threats, rather than redesign their CMR to remove these problems? The current CMR implementation is bad for us, bad for PGP Inc's commercial customers, and bad for PGP Inc. Why is this so hard for you to accept? Why ship a bad product when you can fix the problems? Mark

5 4

Re: PGP Employee on MKR
by mark＠unicorn.com 17 Dec '03

17 Dec '03

[Resent because god-damned Netscape screwed up the line-breaks] A PGP Employee wrote: >> Unfortunately these people just don't get it. Corporations refused >> to buy 5.0 because it did not have any way for the corps to get at >> email encrypted to their employees. There are some very legitimate >> uses of this, such as when an employee dies and someone else has >> to take over for them. No, PGP Inc 'just don't get it'. I'm sure that there are plenty of people out there who disagree with the entire concept of CMR, and I'm not very happy with it myself. But that's not the most important issue here. Since this point just doesn't seem to get through to PGP Inc employees, I'm going to shout. FORCING ENCRYPTION TO MULTIPLE KEYS FOR ONE RECIPIENT IS ONE STEP AWAY FROM GAK. FORCING ENCRYPTION TO MULTIPLE KEYS FOR ONE RECIPIENT IS ONE STEP AWAY FROM GAK! FORCING ENCRYPTION TO MULTIPLE KEYS FOR ONE RECIPIENT IS ONE STEP AWAY FROM GAK!! FORCING ENCRYPTION TO MULTIPLE KEYS FOR ONE RECIPIENT IS ONE STEP AWAY FROM GAK!! !!!*FORCING ENCRYPTION TO MULTIPLE KEYS FOR ONE RECIPIENT IS ONE STEP AWAY FROM GAK*!!! Is that clear enough? Do you understand what I (and, apparently, Adam Back and others) am saying now? The problem is not so much with the fact that you're supporting company needs, but with the way you're doing so. >> They also don't seem to realize that you always have the ability >> to remove the MRK from your list of recipients. Just as government-supported rating schemes are purely voluntary and will be so for, oh, I don't know, a couple of years? Once the infrastructure is there, we need only an executive order to make it mandatory. If this software ships in its current form and becomes the dominant player in the market, in four or five years all keys will be GMR keys with the FBI or NSA as one mandatory recipient. You 'privacy zealots' will have created the government's surveillance infrastructure. I hope you'll feel proud. >> Sometimes I really feel like screaming at these people. _All_ of >> the developers at PGP are personal privacy zealots and no one >> likes the idea of the MRK. Good. Then reimplement it to avoid giving the government a GAK/GMR infrastructure. Yesterday I posted a modified version of PGP's CMR to the cypherpunks list which can't be used for GAK because it only encrypts to one key; Jon Callas just told me I'd 'redesigned PGP 5.5'. Cool. I've redesigned PGP 5.5 so that it can't support GAK; in that case, please implement it, or accept that you're deliberately choosing to support the thugs in governments around the world and have become part of the problem. >> That is why we refuse to make them >> required. Just 'mandatory voluntary' for companies which have your SMTP enforcer enabled. What's the difference? >> Most everyone at PGP has >> internalized personal privacy as a cause (actually most had it >> before they joined PGP). So prove it. Stop working on creating a GMR/GAK infrastructure. The current PGP CMR system has numerous problems which many people have pointed out on the cypherpunks list, and you'd do better to solve those problems rather than see them in a major New York Times article about '101 Ways PGP 5.5 Harms Company Security'. How long will PGP Inc last when it's reputation for providing secure products is in tatters, because it chose to release a product which deliberately reduced company security and opened them to new threats, rather than redesign their CMR to remove these problems? The current CMR implementation is bad for us, bad for PGP Inc's commercial customers, and bad for PGP Inc. Why is this so hard for you to accept? Why ship a bad product when you can fix the problems? Mark

1 0

Fwd: 56-bit RSA/RC5 Cracked
by Jeffrey Gold 17 Dec '03

17 Dec '03

Apologies if this already seen - JG =================================== Date: Wed, 22 Oct 1997 18:26:52 -0400 To: mac crypto list <mac-crypto(a)vmeng.com> From: Vinnie Moscaritolo <vinnie(a)vmeng.com> Subject: RC5 cracked Press Release and Background Sheet FORMAL PRESS RELEASE For Immediate Release Contact: David McNett October 22,1997 205-458-8208 SECURE ENCRYPTION CHALLENGED BY INTERNET-LINKED COMPUTERS CHICAGO, IL (October 22, 1997) In what could be called the largest distributed-computing effort ever, tens of thousands of computers linked across the Internet, under the leadership of distributed.net, decrypted a message encoded with RSA Labs' 56-bit RC5 encryption algorithm. Considered by many experts to be a sufficient level of encryption, this feat has cast grave doubts in the minds of analysts as to the level of encryption required to keep private data secure. "Our effort has shown that it is dangerous to consider any 56-bit key secure", says David McNett, one of the primary coordinators of this distributed supercomputing project. The distributed.net effort to decrypt the encoded message required massive computing power, harnessed by utilizing the idle, or otherwise unused computing power from ordinary office and home computers. Combined, these machines managed to evaluate 47% of the keyspace, or 34 quadrillion keys, before finding the winning key. At the close of the contest there were over 4000 active teams processing over 7 billion keys each second at a combined computing power equivalent to more than 26 thousand high-end personal computers. The work was performed entirely using consumer PCs during off-hours or otherwise idle time. Add them all together, however, and you have the world's largest computer. The winning key was found by Peter Stuer, working for the STARLab Bovine Team coordinated by Jo Hermans and centered in the Computer Science Department (DINF) of the Vrije Universiteit in Brussels, Belgium. Of the US$10000 prize from RSA Labs, Mr. Stuer will receive US$1000. US$8000 is being donated to Project Gutenberg, a non-profit organization created for the purpose of converting the classics of literature into electronic format for the unlimited public use. The remaining US$1000 is being retained by distributed.net to assist in funding future projects. Distributed.net is the brainchild of Adam L. Beberg. It is the largest non-profit venture focused on developing the full potential of distributed computing. Its purpose is to utilize the Internet, allowing home and office computer users to join forces in tackling great and seemingly insurmountable computational challenges. The net result is computing power sufficient to challenge the dominance of even the most expensive mainframes and research computers. Information about distributed.net is available from the official distributed.net web site at: http://www.distributed.net/ MEDIA CONTACTS: David McNett, Voice: (205) 458-8208, Fax: (205) 458-8206 nugget(a)distributed.net ALTERNATE: Adam L. Beberg, (708) 396-9532, beberg(a)distributed.net ------------------------------------------------------------------ SECURE ENCRYPTION CHALLENGED BY INTERNET-LINKED COMPUTERS Background for release dated October 22, 1997 distributed.net data sheet distributed.net web site: http://www.distributed.net/ Related sites: Project Gutenberg: http://www.promo.net/pg/ RSA Labs: http://www.rsa.com/rsalabs/ RSA Secret Key Challenge: http://www.rsa.com/rsalabs/97challenge/ Principal organizers: Adam L. Beberg, Software Engineer, Chicago, Illinois Jeff Lawson, Junior Computer Science Major, Harvey Mudd College, Claremont, California David McNett, Computer Programmer/Network Administrator, Birmingham, Alabama Project statistics: Start of contest: January 28, 1997 Start of distributed.net effort: March 20, 1997 End of contest: October 19, 1997 Size of keyspace: 72,057,594,037,927,936 Number of "blocks":268,435,456 Number of keys in one "block": 268,435,456 Peak keys/day: 600,246,644,113,408 Peak keys/second: 7,200,000,000 (estimated) The unencrypted message: "It's time to move to a longer key length" Computing equivalents: Distributed.net is equivalent in processing power to: 14,685 Intel Pentium Pro 200 processors 13,362 Motorola PowerPC 604e/200 processors 116,326 Intel 486DX2/66 processors 58,163 Intel Pentium 133 processors Perspective: distributed.net could compromise 46-bit RC5 in under one hour. If you printed a single page to represent each key block as it was checked and placed those pages in a stack, it would grow 6.24 inches taller every minute. If keys were drops of water, the flow rate would be 464428 litres per second. If Keys were dollars, we could pay off the U.S. National Debt in 12.44 minutes. If keys were bytes, we could fill 290268 3 1/2" floppy diskettes every minute If keys were drops of water, the flow rate would be 122609 gallons per second. If Key Blocks were hamburgers, we could feed the entire city of Phoenix, AZ lunch each day The computer that found the key: CPU: Intel Pentium Pro 200 RAM: 128 megabytes Operating System: Microsoft Windows NT Workstation 4.0 Owner: Vrije Universiteit, Brussels, Belgium Operator: Peter Stuer More information: http://dinf.vub.ac.be/bovine.html/ MEDIA CONTACTS: David McNett, Voice: (205) 458-8208, Fax: (205) 458-8206 nugget(a)distributed.net ALTERNATE: Adam L. Beberg, (708) 396-9532, beberg(a)distributed.net --Brian Bechtel, blob(a)ricochet.net Vinnie Moscaritolo http://www.vmeng.com/vinnie/ Fingerprint: 3F903472C3AF622D5D918D9BD8B100090B3EF042 "You can get a lot more with a smile and a gun then a smile, alone." - Al Capone -- Robert Guerra - PGP public key available on PGP key servers Email-> mailto:az096@freenet.toronto.on.ca Home Page-> http://www.geocities.com/CapitolHill/3378

1 0

Re: PGP 5.5 CMR/GAK: a possible solution
by mark＠unicorn.com 17 Dec '03

17 Dec '03

tcmay(a)got.net wrote: > Our mileages apparently vary. When _I_ send a message to, say, Jon Callas > at PGP, Inc., it is to Jon Callas, not to others. It might be a job offer, > it might be an invitationf for him to help monkeywrench CMR, it might be a > stock tip, it might be a comment about a conversation we had a party, it > might be a lot of things. Hmm, as usual, you make a good point. The uses I was thinking of were the kind of uses that people have suggested as reasons for CMR; emailing orders, etc to companies. Today I rarely do that because telephoning companies is much easier, and in the future I'd expect to be sending most of them over the Web rather than by email. I presume these *are* the kind of uses that PGP Inc are expecting, since their system seems to have no other value except as snoopware. > If I was sending it to "Jon's coworkers in Department Z," I probably either > wouldn't encrypt it at all, or would (if the option existed) encrypt to > some departmental or group key. Yep, which is basically what I was suggesting. The user chooses which key to use based on their perception of the sensitivity of the message, not the enforced company policy. If it's confidential, it's confidential; if the company think I'm up to no good they can come around and force me to decrypt a particular message, or sack me if I refuse. Their call. > I expect those who adopt CMR will find an awful lot of folks will just give > up on trying to communicate with those living in a CMR regime. Ditto, at least if it's PGP's current 'mandatory voluntary' snoopware design. I won't be running any version of PGP which includes this 'feature' in its current form; I would also suggest that we boycott any scanning and proofreading efforts for future versions of PGP which include this code, or remove it from the source before release. If PGP's commercial customers lose business as a result, that's their choice. Mark

2 1

***BULK EMAIL FOR PROFIT***
by kiqe11＠zeta.org.au 17 Dec '03

17 Dec '03

<HTML><PRE><BODY BGCOLOR="#000000"><FONT COLOR="#00FFFF" SIZE=3> ****************************************************** MAIL THOUSANDS OF EMAIL MESSAGES PER HOUR - NO KIDDING !! SEND YOUR EMAIL MESSAGES OUT, AT 1,000's MESSAGES / HOUR (28.8K modem) YES, as many as 50,000 Of Messages An Hour ****************************************************** 45,000,000+ EMAIL ADDRESSES ******** $100.00 ******* ****************************************************** YOU'LL RECEIVE 2 HIGH-SPEED EMAIL SOFTWARE PROGRAMS Introducing...."FLOODGATE BULK EMAIL LOADER" AND...."GOLDRUSH STEALTH MASS MAILER" This is the same software that all bulk emailing services use! ---------------------------------------------------- Floodgate Bulk Email Loader Version 5.2 AND Goldrush Stealth Mass Mailer Version 2.018 for Windows 95 and Windows 3.1 now Supports 17 (really more with the free form filter) File Formats ---------------------------------------------------- SEND OUT 20,000+ MARKETING LETTERS EVERY SINGLE DAY if you want! Or...every few days. In fact, when I send out just a few thousand marketing letters each day, it doesn't take long before I'm completely swamped with email inquiries and phone calls. This is very easy to do. And each one of these bulk mailings costs me nothing. I can teach you how to do this and provide you with the tools you'll need. If you've got a good marketing letter, I'll show you how to open the floodgates. You'll be deluged with inquiries, leads, and real sales, using nothing but email alone. Writing a good marketing letter is not easy. I often have to rewrite my marketing letters a half dozen times before I get the results I'm looking for. But once you have a good letter, as you probably know, you can use the same letter over and over again, predictably and consistently, closing sales, week after week, month after month. It takes me about one hour to send my marketing letter to THOUSANDS of fresh email addresses. I can do this, thanks to a Windows program I use. It's called Floodgate and Goldrush Stealth Mass Mailer. It's a bulk email loader and an email software program. If you're interested in electronic marketing, you should know about these programs. PROGRAM #1: FLOODGATE FOR WINDOWS The Floodgate Bulk Email Loader imports simple text files that anyone can download from CompuServe, Prodigy, Delphi Genie, or the Internet. These text files contain classified ads, forum messages, or data from the member directory. Each of these files is filled with email addresses. Floodgate is designed to read these files and strip out the email addresses. It then sorts the addresses, removes any duplicates, and formats them into an output file, with 10, 20 or 30 addresses per line. This is all done in one simple step. Just point and click. You'll need either a Windows based Internet account or an America On-line account to send out your marketing letters. Neither AOL nor the Internet charges to send email. Send your letter to 1,000 people or 10,000 people -- the cost is always the same. NOTHING! NEW! PREPARE A MAILING OF 50,000+ IN LESS THAN A 1/2 HOUR If you open an Internet account, you can send each letter to 20,000+ people. The new Floodgate now directly writes distribution lists. Some people are always collecting new addresses, but if you publish a newsletter or adsheet, you'll be using the same addresses over and over again. That's real power! When using addresses you've previously collected, you can press a few buttons and prepare a mailing of 50,000+ in less than a half hour. (To get a list of all the Internet access providers in your local calling area goto: http://thelist.com and click on your area code.) The Floodgate Users Guide will teach you, step by step, how to download the right files, how to strip the addresses, and finally, how to cut and paste the formatted addresses into your marketing letter. Or, if you have an Internet account, how to create distribution lists. One you've done this a few times you won't even have to think. It's that simple! FOR THE BRAVE & DARING: PUSHING TECHNOLOGY TO ITS LIMITS As you may know, the practice of sending unsolicited email is usually frowned upon, and most service providers have rules against it. But, like jay-walking, there is little enforcement. It's not illegal. If someone tells you that it is, ask them to provide the citation (and don't let them give you some nonsense about faxes - that's not email). They can't do it because it's not there. Sometimes, when a lot of people complain, I get a warning letter. And that's about it. About 1 in 200 will write back and tell me, "take me off the list", which I can do, thanks to Floodgates Remove List feature. Many people reply back thanking me for sending them my informative letter. That's always nice. Most people though, just reply and say, "send me more info." In this way, it usually takes me two or three letters to close a sale. The Floodgate Users Guide will provide you with proven formats for writing a successful marketing letter. You'll test and rewrite, test and rewrite. Then, once you've got it, just push a few buttons, and open the floodgates!!! THE FLOODGATE BULK EMAIL LOADER CURRENTLY SUPPORTS 17+ FILE FORMATS 1. CompuServe Classifieds: Send your marketing letter to everyone who is running a classified ad. I'll teach you how to download all the classifieds from any single ad category. This is one of the most responsive list of buyers. They check their email every day and they're already in business. 2. America On-line Classifieds: Download 1,000 addresses in 15 minutes. These are excellent lists for business to business sales. 3. CompuServe Forums: You can join a forum and download hundreds of forum messages in a matter of minutes. 4. America On-line Forums: Choose from dozens of forums. All good targeted lists. 5. Prodigy Forums: Prodigy allows you to easily export any group of forum messages. More targeted lists. 6. Internet Newsgroups: These are all targeted lists. You'll be able to send your marketing letter to everyone who posts a message in any newsgroup. Easily collect 1,000's of addresses per hour. 7. America On-line Member Directory: Most member directories only allow you to search by city and state. With AOL, you can search by business type, hobbies, computer type, etc. This is the gem of all member directories. Build huge targeted lists. 8. CompuServe Member Directory: This is a major resource. If you're willing to target your mailing to a single city, you can collect about 1,000 email addresses an hour. 9. Delphi Member Directory: The Delphi member directory allows you to search for people based on key words. These are good targeted mailing lists. A single search can easily generate 5,000 addresses. 10. Genie Member Directory: Similar to the CompuServe member directory, only you can download names much quicker. You can easily pull hundreds of thousands of addresses out of each of these member directories. 11. CompuServe File Cabinet: If you run classified ads, and save the responses in the CIM file cabinet, you'll be able to easily reuse these addresses. You can send your marketing letter to everyone in any single folder. Build master lists and clean UP your hard drive. 12. Free Form: If you have a text file with email addresses that floodgate does not support, chances are the Free Form filter will be just what you need. Just enter a key word to search for. 13. CompuServe Form Profiles (Forum Membership Directories): Easy to build targeted lists here. Each search can easily bring you 500+ addresses. 14. Genie Profiles: If you're building targeted lists, you'll get a lot of addresses very quickly from Genie. 15. Plain Addresses: Read Floodgate Master Files back into Floodgate to merge files and do selective mailings. Also useful for the management of email address lists that you might purchase. Floodgate also has filters to allow you to include or exclude any groups of addresses in your final distribution lists. For example, you could include only email addresses that ended in .com or exclude all with .gov. You could exclude all noc, root, and other addresses that almost guarantee a negative response. These filters are fully configurable and can be used together. BUILD REUSABLE MASTER FILES Floodgate maintains Master Files for each of your marketing letters. If you download from the same place on a regular basis, you only want to send your letter to the new people. Floodgate will compare the new addresses with those in the Master File, and prepare a mailing list of only new people. The new addresses are, of course, then added to the Master File. With each new mailing your Master File grows and grows. You may create as many Master Lists as you need. When you start a new marketing campaign, you'll want to send your new letter to everyone on your Master List. If you write a newsletter, each time you send your newsletter, you'll send it to everyone on a Master List. THE REMOVE LIST Very often, people will reply and tell you to take them off your mailing list. Place these addresses in the REMOVE.MST file and they will never receive another letter from you again. In this way, you will be operating your business with the most professionalism possible. DON'T BE FOOLED We have some new competitors that have tried to copy Floodgate. The following list describes why Floodgate is BETTER....... **Floodgate is a mature, bug free product. Not an initial release. **Floodgate comes with over 100 pages of step by step documentation. **Floodgate is the only one offering a money back guarantee. **Floodgate has more testimonials. **Filter for filter, Floodgate offers more capabilities, way more. **Floodgate does everything all the others *combined* claim. **Floodgate is by far the easiest to use. **There is NO *cutting and pasting* with Floodgate. **We have by far, the BEST technical support. SOME QUICK MATH Floodgate can pay for itself in a few days. It can also cut your advertising costs down to almost nothing. Think of what the competition will do when they get their Floodgate program. Don't be left in the dust - there are 75 million people out there, just a few keystrokes away. Let's do the math: - Email 50,000 sales letters (takes about 1-2 hours) - Let's say your product will bring you $5 profit per sale. - Let's also say you only get a 1% response(occasionally higher). * That's 500 orders x $5 = $2,500 profit !! Now imagine what 500,000 letters would do for your business !! WHAT CAN I MARKET ON-LINE? You can market anything on-line using direct email, that can be marketed using conventional postal direct mail marketing. The possibilities are practically endless. If it sells off-line, you can sell it on-line. EASY TO INSTALL AND EASY TO LEARN The Floodgate Email Loader requires Windows. The SUPPLIED MANUAL tells you where to go, what to do, and how to do it. All you need are basic computer skills that can be learned with a little practice or help from our computer savvy technicians. PROGRAM #2: GOLDRUSH STEALTH MASS MAILER Do not get this program confused with other slow speed programs that call themselves "STEALTH". This program is the only one in the world that can send email out at HIGH SPEEDS with one single connection to the internet. This is NEW, Cutting Edge Email Technology. First Of It's Kind.. The Most Powerful BULK EMAIL SENDER In The World.. NOTHING CAN EVEN COME CLOSE! Thanks to our top programmer's, this technology is NOW available and we are the only place you can get it from! *ONLY "ONE" DIAL-UP OR ISDN CONNECTION NEEDED. *NO MORE TERMINATED CONNECTIONS. *NO MORE WAITING TO SEND LARGE AMOUNTS OF EMAIL. *IMMEDIATE RESPONSE TO YOUR MASS MAILINGS. *YOU WILL HAVE ALL THE CONTROL AND CONFIDENCE OF SENDING EMAIL THE WAY IT SHOULD BE SENT... IN HUGE AMOUNTS! *SEND YOUR WHOLE LIST IN ONE DAY, WHETHER IT BE 500,000 OR 5 MILLION - AND JUST SIT BACK AND WAIT FOR YOUR ORDERS TO POUR IN. *NO MORE DOWNLOADING UNDELIVERABLE NAMES. Bulk Emailer's Dream Come True!!! - >>>GOLDRUSH STEALTH MASS MAILER<<< Connect to multiple mail servers (20 or more), make multiple connections to a single server or any combination of the two ( All Simultaneously ) with one single dial-up connection. SEND MULTIPLE SIMULTANEOUS MAILINGS... View complete details about your mailings. Shows each server your connected to, the status of that connection, how many messages are going out through that connection, etc... We show you ALL the tricks all the mass e-mailers don't want you to know... Here are just a few features the GOLDRUSH STEALTH MASS MAILER offers to you... *Forge the Header - Message ID - ISP's will Spin their wheels. *Add's a Bogus Authenticated Sender to the Header. *Add's a complete bogus Received From / Received By line with real time / date stamp and recipient to the Header. *Does NOT require a valid POP Account be entered in order to send your mailings. *Easy to use and operate *Plus much more! All this, at speeds of up to 50,000's messages/hour (28.8k modem and heigher). SPECIAL INTRODUCTORY PRICE... NOW YOU CAN HAVE BOTH THE FLOODGATE AND GOLDRUSH STEALTH MASS MAILER FOR JUST $499.00! UPDATE ... SAVE $149.05 AND ORDER NOW, BE ONE OF THE FIRST 100 ORDERS! Step up to the plate and play with the big boys TODAY and receive the COMPLETE 2 SOFTWARE PACKAGE for the unbelievably low price of ONLY $349.95! (Other bulk email software has sold for as much as $2,500 and can't even come close to the cutting edge technology of EASE, ACCURACY AND SPEED ... SPEED ... SPEED!) Try the Goldrush Stealth Mass Mailer & Floodgate Bulk Email Loader for 10 days FREE. And receive UNLIMITED technical support for 30 days. ************************************************************** 45,000,000+ EMAIL ADDRESSES MILLIONS AND MILLIONS OF EMAIL ADDRESSES CD with 45,000,000+ email addresses separated by domain name. All addresses are simple text format one per line. Addresses from the following domains: Pipleline, MSN, MCI, Juno, Delphi, Genie, AOL, Compuserve, Internet, .com & .net, MILLIONS OF THEM! Not available on diskette or download. ===> WANT THE 45,000,000+ MILLION ADDRESSES FOR $100.00? <=== Just buy our Floodgate / Goldrush software package (with ALL the bonuses INCLUDED), and the 45,000,000+ addresses are yours for just $100.00 additional. These addresses will be delivered to you in simple text files that any bulk emailing program can use, on CD Rom. With this CD, YOU CAN BEGIN MAKING MONEY IMMEDIATELY!!! *************************************************************** ***SPECIAL BONUS #1:*** STOP Losing ISP Dial Up Accounts! If you order The FLOODGATE / GOLDRUSH software within the next 5 days - When you receive your program, you will also receive: *Complete instructions on "how to keep your dial up account from showing up in the header", plus everything you will need to get started doing this. IMPORTANT NOTICE! We will initially only be offering 100 copies of the program for sale, First come / First Served basis only. We are doing this because of the extreme power that these programs offer. ***SPECIAL BONUS #2*** When you receive your two programs, you will also receive: OVER 250 REPRINT AND RESELL RIGHTS REPORTS YOU CAN START TO MARKET AND MAKE MONEY IMMEDIATELY!!! These HOT sellers include: 1) How to Get a Top Rating in the Search Engines 2) 70 Money Making Reports 3) 75 MONEY MAKING PLANS & TRADE SECRETS and MUCH MUCH MORE!!! ($200 RETAIL VALUE - FREE!!!) ***SPECIAL BONUS #3*** With your two software programs, you will also receive our NEW "Address Grabber" utility program that enables you to grab 100's of THOUSANDS of email addresses from newsgroups in minutes ($100 RETAIL VALUE - FREE). ***SPECIAL BONUS #4*** RECEIVE CHECKS BY EMAIL, PHONE OR FAX MACHINE. With this software program, you can receive payment for your product or service INSTANTLY!! There is no more waiting for your customers chec to arrive. This software will no doubt, add to your sales, for customers who don't have credit cards, as well as the impulse buyers. With this software, you can print up your payments as soon as your customer gives you his/her checking information. You will then add the information given, to the proper blank check spaces, then just print and go to the bank!! **************************************************** HURRY ... RESERVE YOURS TODAY! So, if you are interested in taking advantage of the most powerful bulk email software in the world and start making money hand over fist..... Print out the EZ ORDER form below and FAX or MAIL it to our office. If you have any questions don't hesitate to call us at: 1-954-784-0312 ext505 SYSTEM REQUIREMENTS 386 or larger Windows 95 OR Windows 3.1 with 8 meg ram Extra 5 MB hard drive space Floodgate & Goldrush can be run on a fast Mac with 24 MB RAM and SoftWindows. NOTES FROM SATISFIED USERS "It is everything you said it was. Within one week of my first mailing, I received a record number of orders. All you need to print money is a decent sales letter. Thanks." Randy albertson, Wolverine Capital. "After using Floodgate and your utility program all day today, let me say these are as two of the finest programs I have ever bought in my 52 years! Your support has been superb. Thank You!" Vernon Hale, Prime Data Systems "My first day and I just used Floodgate and Pegasus to send 1,469 sales letters. So far I've got about 25 positive responses. It works GREAT!!! Thanks." Donald Prior "I was able to use Floodgate to extract the names from the Internet news groups. It works perfectly. Needless to say, I am very excited about the use of this new technology." Mark Eberra, Inside Connections "This is a great piece of software and an invaluable marketing tool." Joe Kuhn, The Millennium Group "I just thought you'd like to know that this program is fantastic. After loading it on my system, I wanted to test it out. In my first hour of using this, I collected 6,092 email addresses!" Richard Kahn, LD Communications "I just love the Floodgate program. It saves me hours and hours of time. This is the beginning of a wonderful FUN time marketing on-line. Thank you so much for writing this program." Beth O'Neill, Eudora, KS "Your software is brilliant, and from the technical support I've received, I can see you have a genuine love and respect of people...Floodgate is a divine package. Wish I had found it sooner." Tom Sanders, Peoria, IL ------------------------------------------------- E-Z ORDER FORM: Please print out this order form and fill in the blanks...... Please send order form and check or money order, payable to: Dave Mustachi DEPT KA P.O. Box 772261 Coral Springs, FL 33077-2261 (954) 784-0312 ext.505 ______Yes! I would like to try your cutting-edge software so that I can advertise my business to thousands of people on-line whenever I like! I understand that I have 10 days to trial the software. If I am not fully delighted, I will cheerfully be refunded the purchase price, no questions asked! Please rush me the FLOODGATE and GOLDRUSH package now! ______I am ordering within 72 hours! That qualifies me to receive the FLOODGATE and GOLDRUSH package at a substantial discount! I am ordering BOTH software packages for only $349.95. (Save $150 off the retail price....Software has sold for as much as $2,499.95) ______I am ordering within 72 hours! That qualifies me to receive UNLIMITED technical support for 30 days. ______I want to receive the package OVERNIGHT. I'm including $18.00 for shipping charges. ______I want to receive the package 2nd DAY. I'm including $3.00 for shipping charges. ______I'm ordering Floodgate / Goldrush software and want to order the 45,000,000+ email addresses as well. My additional cost is $100.00 enclosed. ______I'm NOT ordering your Floodgate / Goldrush software, but I want to order your 45,000,000+ addresses on CD. Enclosed is $249.00. (CHECKS: ALLOW 1 WEEK FOR BANK CLEARANCE) YOUR NAME_________________________________________________ COMPANY NAME_________________________________________________ YOUR POSITION_____________________________________________ STREET ADDRESS______________________________________________ CITY, STATE, ZIP____________________________________________ PHONE NUMBERS_______________________________________________ FAX NUMBERS_________________________________________________ EMAIL ADDRESSES_____________________________________________ ************************************************************ We accept Checks, Money Orders, MasterCard, Visa, American Express. You can either mail your order to us OR fax your order to: 954-572-5837 ************************************************************ Today's date:_____________ Visa____MasterCard____American Express____ Card #:____________________________________________________ Expiration date:___________________________________________ Name on card:______________________________________________ Billing address:___________________________________________ Amount to be charged: $________________ Signature:___________________________________________ I agree to pay Dave Mustachi an additional $29 fee if my check is returned for insufficient or uncollectable funds. SIGNATURE: X________________________________DATE:_______________ Please send all order forms and check or money order to payable to: Dave MustachI DEPT KA P.O. Box 772261 Coral Springs, FL 33077 (954) 784-0312 ext.505 *************************************************** OR: PLEASE PASTE YOUR CHECK HERE (If you fax a check, there is no need for you to send the original check by mail. We will draft up a new check, with the exact information from your original check that you faxed to us) Please fax the above order form and check to: 1-954-572-5837 </FONT><FONT COLOR="#000000" SIZE=3>

1 0

Cyberterrorism report according to the NYT
by Ariel Glenn 17 Dec '03

17 Dec '03

Day before yesterday I actually saw Ian Goldberg and David Wagner on CNN Headline news, second billing after some auto fuel cell thing, talking about weak encryption etc. in the context of the White House report on cyberterrorism. In any case here's the NYT take on it... Ariel Glenn ariel(a)columbia.edu ----- [beginning irrelevance deleted] The use of encryption by United States residents has been a hotly debated security issue in the White House, in Congress and on the Internet. Louis J. Freeh, the director of the Federal Bureau of Investigation, has testified repeatedly that allowing private citizens to use unbreakable encryption would enable criminals to mask their activities unless the police are allowed keys to all scrambled communications. Even so, the commission's report appears to suggest that widespread use of encryption is the nation's first line of defense against attacks by terrorists or spies who want to steal information or eavesdrop. Sophisticated systems like digital signatures can prevent terrorists from shutting down networks, crashing individual computers or erasing databases. Several people familiar with the commission's work, all of whom asked that they not be named, said that the panel had come under intense pressure to support the FBI's plan to build in trap doors known as "key recovery systems" into encryption schemes to make scrambled data easily accessible to the police. In the end, the commission did endorse key recovery, but only because such systems would allow people and companies to recover data if their own keys were lost. It stopped short of recommending easy access for law enforcement. In the interview on Tuesday, Marsh avoided commenting directly on the FBI's assertion that it needs "instant access" to all communications in the nation, saying only that the commission did not "probe into that in great depth." "Exactly how that is done," Marsh said of key recovery systems, "the commission is not expert at that." Some security analysts have argued that a widespread key recovery system could turn out to be a major vulnerability because if it was ever infiltrated or compromised, it would offer cyber-terrorists a database full of keys that could unlock significant portions of communications and computer systems in the United States. In addition to terrorists, any insider could easily reveal secret or proprietary data, either accidentally or maliciously. In recent months, for example, the FBI has been criticized for releasing the background files of Republican leaders to the White House, apparently because of a clerical error. [more irrelevance deleted] Peter Neumann, author of Computer-Related Risks, said of the report: "I think the Commission has made a very important first step toward recognizing the vulnerabilities, threats, and risks." Even so, Neumann said: "They could have gone much further in addressing the risks of the inherently weak computer-communication infrastructures that underlie our critical infrastructures. Also, they almost completely ducked the importance of nonsubvertible cryptography, and issues relating to the intrinsic risks of key-recovery schemes. But the real question is: Where does the government go from here?"

1 0

(no subject)
by Scott L. Haire 17 Dec '03

17 Dec '03

Whats the deal on checking out DL info. on the web? I'd like to know what available info is on the web concerning my DL.

1 0

RE: Bill Gates, the Bully Savior
by Arturo Grapa Ysunza 17 Dec '03

17 Dec '03

I too have my doubts about Microsoft software. Yes, they clearly >dominate a very lucrative market largely due to, as you mention, "sheer incompetance on the part of the rest of the industry" but another important reason is better marketing. Netscape, for example, could have beaten out MS if they had had better marketing and strategy (incompetance?). I believe the point of the Justice Dept. investigations is anti-trust issues more than it is a witch hunt. We all know that monopolies can, but not necesarily do, produce inferior products. Anti-trust laws are meant to facilitate competition on even ground and that can lead to better products for us the consumers. MS canŽt be blamed for the incompetence of the rest of the industry. If MS wins anti-trust litigation then so be it but someone has to keep them in check. We elect the people who appoint others to review these matters. If no one does it then soon weŽll see "Microsoft Compatible" stickers on the dashboards of our cars, toasters, beepers, etc. And what will happen to Unix then when we live in a Microsoft compatible world? BTW, my beef with MS is primarily quality. If they want to dominate the market then they better give me quality or IŽll spend my money elsewhere. Would you buy a Ford if you knew the tires would fall off if you donŽt install the **latest-and-greatest Service Pack**? I, for one, will keep bugging MS to produce better products. In the meantime, IŽll keep buying from the Unix side (which is also lagging). Arturo Grapa Ysunza agrapa(a)banamex.com Ing. de Comunicaciones Banco Nacional de México, S.A. http://www.banamex.com/ >---------- >Desde: Declan McCullagh[SMTP:declan@well.com] >Enviado el: Miércoles 22 de Octubre de 1997 1:07 PM >Para: Lizard >Cc: Jennifer S. Granick >Asunto: Re: Bill Gates, the Bully Savior > >There was a good op-ed in the WSJ on Monday. The Politics of Envy, >basically. Why everyone in Silicon Valley hates Microsoft... > >But some of the complaints about Microsoft come down to personal taste. The >masses offend refined sensibilities when they buy Windows 95 in droves. >Rein them in! Stop them from buying what they want! Don't let them get free >copies of Internet Explorer. > >I share Lizard's distaste for Microsoft products. My Unix workstation at >home has not one MSFT application on it. I have only Microsoft Word on my >Duo at work, and I could get by with WordPerfect. But our dislike for their >products doesn't mean that we are morally justified in restricting what the >company can do. > >-Declan > > > >At 10:42 -0700 10/22/97, Lizard wrote: >>Uhm...how do 'we all' benefit from having the same Justice Department which >>defended the CDA (and which is pushing for GAK) decide for us all what is, >>and is not, part of an operating system? >> >>These people are not qualified to make ANY judgements about computers -- I >>have to assume the 'experts' they got to tell them about OS software are no >>more qualified than the 'experts' they got to testify about the CDA (L-18, >>anyone?). >> >>I have no great love for Microsoft (I don't think anyone forced to use >>their crappy software does), and, emotionally, I'd like to see them get >>taken down a peg -- but legally and ethically, they are not doing anything >>wrong. They're just being tough competitors. Microsoft has prospered not >>due to any technical brilliance on their part, but due to sheer >>incompetance on the part of the rest of the industry, who have made a hobby >>of underestimating Bill Gates and overestimating their own customers >>loyalty. >> >>It's a pity I'm a mind-flaying victim. If I wasn't, I could forget >>principles and ideals and just say, "Microsoft Big. Microsoft Nasty. Uncle >>Sam stomp Microsoft. Yay, Uncle Sam." But because I work from principle >>FIRST, I have to grant Microsoft the same rights I would grant Sam's Deli >>or Joe's Shoe Store, and that includes the right to offer any combination >>of products or services they wish, and let the market decide to buy or not. > > > >------------------------- >Declan McCullagh >Time Inc. >The Netly News Network >Washington Correspondent >http://netlynews.com/ > > >

1 0

What RSA & Netscape have to offer
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hi, While the list is busy knocking PGP for not doing the "right thing" or being the "first ones to blink" I though I would share with the list what some of the "big boys" are doing for the spread of "Strong Crypto to the Masses". Below is from the most current S/MIME draft "draft-dusse-smime-msg-05" dated 19-Oct-1997: 2.6 ContentEncryptionAlgorithmIdentifier Receiving agents MUST support decryption using the RC2 [RC2] or a compatible algorithm at a key size of 40 bits, hereinafter called "RC2/40". Receiving agents SHOULD support decryption using DES EDE3 CBC, hereinafter called "tripleDES" [3DES] [DES]. Sending agents SHOULD support encryption with RC2/40 and tripleDES. I think that when taking pot-shots at PGP, Inc. and Phil Zimmerman one should look at what the alternatives are and who are really are friends here. IMNSHO companies like RSA, Netscape, Microsoft, Verisign, et al, who would sell us all out if it improved their bottom lines do not qualify. - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBNE8Iqo9Co1n+aLhhAQGWswP+MnvOCL1EoURWpEPt23I/UIuRWBovby8d AxZS3N8/exnI2M3kDCC2mTUWmvaKdsUnwErnXCQ9nQTDa9B+2VUBlijtkC+nsTV8 Vuv484AU51havdyttE87YMDXx8LSkdWnGXLs8TpjrRXiDZlxPJWIif3haK1hC5kg I3VmdwaZc/4= =7Fan -----END PGP SIGNATURE-----

1 0

Announcement
by Phillip R. Zimmermann 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 In light of the great amount of discussion currently taking place in regard to the benefits and disadvantages of my latest bid for money, power, fame and the respect of the corporate computer industry, I would like to reassure the cynics that my committment to privacy has never been stronger. However, I have reassessed my views of who truly has a right to control access to privacy and have come to the conclusion that privacy is too important an issue to be left in the hands of the individual, with the obvious potential for misuse. After a review of the astounding success of the PGP Public Key Server's use, in conjunction with our PGP Privy Products, in ensuring proper key management and control of forgery, spoofing and misuse of Public/Private Key technology, it has become clear that individual privacy can best be ensured under the watchful eye of those with the resources to provide proper surveillance of those who have earned the right to privacy, in order to prevent abuse of that right. I would like to thank my other brother, Phil (Hallam-Baker), for helping me to see that unsupervised use of the right to privacy could result in individuals misusing that right to publish extremely embarassing pictures of me in compromising positions which could affect my credibility. As a matter of fact, it was PH-B who suggested my new signature line. PRZ ~~~ "I don't put them in the PGPtray...I just turn on the GAK." ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBNE/sV17MfpC8gEO7EQKaCQCePKAo033KBg/O/T9Nz5IrGLIcCZcAn0L4 JDtdMovT9RZKA4PXwJTNdvpr =Xvzl - -----END PGP SIGNATURE----- -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBNE/svUlfPVhsMJvfEQI2zgCg8aQ15PEU4eNItEprsLQHd2259fIAn2a1 wwKyecnoEQuCElB3ZtJBZQBz =53jb -----END PGP SIGNATURE-----

1 0