March 2010 - cypherpunks-legacy

thankee!
by Carolina Burnette 29 Mar '10

29 Mar '10

Windows 7 Ultimate 32 bit Retail Price: $399.99 Our Price: $99.95 You Save: $300.04 Languages: all Windows 7 Ultimate 64 bit Retail Price: $399.95 Our Price: $99.95 You Save: $300 Languages: all Windows XP Professional with Service Pack 3 Retail Price: $259.95 Our Price: $59.95 You Save: $200 Languages: all Office Professional 2007 Retail Price: $499.95 Our Price: $69.95 You Save: $430 Languages: all Office Home and Student 2007 Retail Price: $149.95 Our Price: $49.95 You Save: $100 Languages: all Office Enterprise 2007 Retail Price: $599.95 Our Price: $79.95 You Save: $520 Languages: all Office Ultimate 2007 Retail Price: $699.95 Our Price: $99.95 You Save: $600 Languages: all Office 2003 Professional (including Publisher 2003) Retail Price: $239.95 Our Price: $59.95 You Save: $180 Languages: all Visio Professional 2007 Retail Price: $559.95 Our Price: $79.95 You Save: $480 Languages: all Adobe Creative Suite 4 Master Collection Retail Price: $2599.95 Our Price: $329.95 You Save: $2270 Languages: all Adobe Creative Suite 4 Design Premium Retail Price: $1799.95 Our Price: $259.95 You Save: $1540 Languages: all Adobe Acrobat 9 Pro Extended Retail Price: $699.95 Our Price: $99.95 You Save: $600 Languages: all Adobe Photoshop CS4 Extended Retail Price: $999.95 Our Price: $119.95 You Save: $880 Languages: all CyberLink PowerDVD 9 Ultra Retail Price: $99.95 Our Price: $39.95 You Save: $60 Languages: all WinZIP Pro 14 Retail Price: $69.95 Our Price: $29.95 You Save: $40 Languages: all QuarkXPress 8 Retail Price: $799.95 Our Price: $129.95 You Save: $670 Languages: all CorelDRAW Graphics Suite X4 Retail Price: $499.95 Our Price: $119.95 You Save: $380 Languages: all AutoCAD 2010 32 and 64 bit Retail Price: $3995.95 Our Price: $189.95 You Save: $3806 Languages: all FileMaker Pro 10 Advanced Retail Price: $599.95 Our Price: $99.95 You Save: $500 Languages: all Nero 9 Reload Retail Price: $99.95 Our Price: $39.95 You Save: $60 Languages: all ACDSee Pro 3 Retail Price: $169.95 Our Price: $49.95 You Save: $120 Languages: all Kaspersky Internet Security 2010 Retail Price: $69.95 Our Price: $39.95 You Save: $30 Languages: all Adobe Creative Suite 4 Master Collection for MAC Retail Price: $2599.95 Our Price: $329.95 You Save: $2270 Languages: all Adobe Creative Suite 4 Design Premium for MAC Retail Price: $1799.95 Our Price: $259.95 You Save: $1540 Languages: all Adobe Photoshop CS4 Extended for MAC Retail Price: $999.95 Our Price: $119.95 You Save: $880 Languages: all Adobe Acrobat 9 Pro for MAC Retail Price: $699.95 Our Price: $99.95 You Save: $600 Languages: all Adobe Creative Suite 3 Master Collection for MAC Retail Price: $2499.95 Our Price: $299.95 You Save: $2200 Languages: all Adobe Creative Suite 3 Design Premium for MAC Retail Price: $1799.95 Our Price: $229.95 You Save: $1570 Languages: all Microsoft Office 2008 Standart Edition for Mac Retail Price: $499.95 Our Price: $99.95 You Save: $400 Languages: all StuffIt Deluxe 2009 for MAC Retail Price: $89.95 Our Price: $39.95 You Save: $50 Languages: all Roxio Toast 10 Titanium Pro for MAC Retail Price: $149.95 Our Price: $49.95 You Save: $100 Languages: all Mac OS X 10.6 Snow Leopard Retail Price: $129.95 Our Price: $29.95 You Save: $100 Languages: all Aperture 3 for MAC Retail Price: $199.95 Our Price: $59.95 You Save: $140 Languages: all Quark XPress 8 for MAC Retail Price: $799.95 Our Price: $119.95 You Save: $680 Languages: all Parallels Desktop 5 Retail Price: $79.95 Our Price: $39.95 You Save: $40 Languages: all FileMaker Pro 10 Advanced for MAC Retail Price: $599.95 Our Price: $99.95 You Save: $500 Languages: all Mac OS X v10.5.6 Leopard Retail Price: $139.95 Our Price: $69.95 You Save: $70 Languages: all Final Cut Studio 3 Full Pack with Content Retail Price: $999.95 Our Price: $269.95 You Save: $730 Languages: all Logic Studio 8 Full Pack with Content Retail Price: $799.94 Our Price: $199.95 You Save: $599.99 Languages: all

1 0

Re: Re: yo bud
by jonathan 29 Mar '10

29 Mar '10

hi arthur... I quit my job. Now I`m making $8000-$15000 a month by "working" 4-5 hours a day :) I`ll tell you how I`m doing it because you also halped me 2 years ago when I needed help. I found a way how to win in roulette everytime, I only bet on reds or on blacks. If you bet $1 on reds and it goes red you win $2, if it goes black you loose your $1. So I bet $1 on reds, if it goes black I bet $3 on reds, if it goes black bet $8 on reds (I always multiple my previous lost bet around 2.5), if it AGAIN goes black bet $20 on reds, if this time it goes red I win $40. So I bet $1 + $3 + $8 + $20 = $32 and I win $40 so I just made $8 and it took me around 2 minutes. Did someone ever paid you $8 for 2 minutes work? If I play for 4 hours I make $300-$500, EVERYTIME. That`s why I quit my daily job. Now all you have to do is find a casino that allows progressive betting. I play here www.vipgames24.com and for 6 months I made almost $80k. And don`t worry about casino, they make millions off jerks called "regular players" :) You just have to download casino games, register and start playing. You`ll find roulette in "speciality games" section. You can share that info but only with your friends or family. I won`t wish you luck because with that method you won`t need it, you`ll win everytime :) best regards jonathan

1 0

can you still trust your NIC?
by Eugen Leitl 29 Mar '10

29 Mar '10

http://www.ssi.gouv.fr/site_article185.html Can you still trust your network card ? 24 March 2010 During the CanSecWest international conference in Vancouver, members of ANSSI (French Network and Information Security Agency) described how an attacker could remotely take full control of a particular network card model. This page gives a summary of the materials that have been presented and aims at answering questions corresponding to this presentation. 1. Summary The presentation was entitled b Can you still trust your network card?b. The talk explained how an attacker could be able to exploit a flaw to run arbitrary code inside some network controllers (NICs). The attack uses routable packets delivered to the victimbs NIC. Consequently, multiple attacks can be conducted including: Man in The Middle attacks on network connections, access to cryptographic keys on the host platform, or malware injection on the victimbs computer host platform (see B' 2). The presentation included a description of the flaw as well as a demo of the exploitation possibilities. The tools used for the demo, as well as the proof of concept code were not released during the conference, and will never be. The slides used for the presentation are available here. 2. An unauthenticated remote attack on a network card! Is it as dangerous as it seems to be? An unauthenticated remote attack on a network card is almost the most efficient attack one can imagine. A remote attacker located anywhere on the network can take full control of the victimbs network in order to: intercept all packets sent to and from the victimbs machine and forwards them to an attacker on the network; perform man in the middle on all unauthenticated network connexion (such as ARP or DNS) to redirect traffic to target machines; remotely shutdown, reset or wake up the machine. Moreover, if no IOMMU is used (see below), the attacker can gain access to the victimbs computer memory and take full control of the machine. However, the attack presented only applies to a specific network card model (Broadcom NetXtreme) whenever a remote administration functionality (called ASF for Alert Standard Format 2.0) is turned on (it is off by default) and configured. According to vendors, this functionality is far from being widely used. As a consequence, this vulnerability is really likely to have a very limited impact in practice. The vendors issued a patch for this vulnerability (see B' 5). 3. Is there a proof of concept? Yes. A proof of concept attack has been demoed during the CanSecWest conference. It showed how an attacker can remotely shutdown or wake up his victimbs machine, and fully compromise a COTS operating system machine (Linux for the demo, but all operating systems are vulnerable). Please note however that the tools used for the demo, the proof of concept code and network packets were not provided during the conference and will not be released. 4. How can I find out if my machine is vulnerable? Any computer using Broadcom NetXtreme chips with ASF activated and configured is vulnerable. Users of such computers should apply the official patches (see B' 6). Other vendor cards and other cards models are not impacted by this vulnerability. Machines using Broadcom NetXtreme chips when ASF has never been configured (Requires to launch the Broadcom ASF configuration tool) are not vulnerable but patching is highly recommended. Readers are also advised to follow CERT advisories, e.g CERTA-2010-AVI-121 5. How can I protect my computers from such an attack? If your computer is vulnerable to this attack you can either (in order of preference): apply the vendor patch (see B' 6) ; deactivate ASF. This should be done using the Broadcom ASF Configuration tool and not by turning off ASF in the BIOS of the machine; configure all your network packet-filters to filter UDP ports used by ASF (623 and 664). Please note that some operating systems actually deactivate ASF at boot time. Some operating systems or hypervisors might also take advantage of hardware technologies such as Intel Vt-d and AMD I/OMMUs that would limit the impact of the attack. 6. Where can I find the patch correcting the flaw? Patches are provided by OEMs in firmware updates for the NICs. Vendor patches: HP: http://h20000.www2.hp.com/bizsuppor... 7. What is the purpose of publishing this in an international conference? Our goal is to raise awareness on the security problems related to hardware vulnerabilities. We believe that this kind of publication should lead to an improvement of the quality of low level embedded firmware. So far, no research was performed on network card vulnerabilities. 8.Who might be able to carry a similar attack? Carrying out an attack similar to the one we presented requires: to identify a flaw in a NIC embedded firmware; to get sufficient knowledge of the hardware; to develop tools to identify if and how the flaw will be exploitable; to craft the correct attack packets and make the exploit stable on a non standard architecture. We do not expect to see many of these attacks around in the next few months of years, but we proved that carrying out such attacks was possible in practice. 9. Are there other risks related to hardware vulnerabilities? Hardware components (CPUs, chipsets, graphic adapters, NICs; USB and PCI devices) generally run embedded software (firmware). Flaws in low level firmwares could be exploited by attackers for b rootkitb concealment or privilege escalation purposes. 10. What is the French government doing to improve the things as they are now? ANSSI has been repeatedly raising awareness in scientific and technical conferences about the attack vectors related to hardware components. ANSSI have been talking to hardware vendors to explain why they should care about security of their hardware and embedded firmware design. About ANSSI The ANSSI was established by a decree issued in the Journal Officiel de la RC)publique FranC'aise of July 8th, 2009. The creation of the French Network and Information Security Agency is a milestone in the process of improving Francebs capability to protect its sensitive information systems. The core missions of the new agency are: To detect and early react to cyber attacks, thanks to the creation of a strong operational center for cyber defence, working round-the-clock and being in charge of the continuous surveillance of sensitive Governmental networks, as well as the implementation of appropriate defence mechanisms; To prevent threats by supporting the development of trusted products and services for Governmental entities and economic actors; To provide reliable advice and support to Governmental entities and operators of Critical Infrastructure; To keep companies and the general public informed about information security threats and the related means of protection through an active communication policy. ANSSIbs work on trusted computing and low level security ANSSIbs scientific publication are collected here.

1 0

Новый закон для официальной обналички
by Бухгалтеру 29 Mar '10

29 Mar '10

Дата: Вtоrоe aпpeля 20l0 г. Налоговое планирование в условиях кризиса: как жить без обналички и фирм-однодневок и не разориться В современных условиях использование таких традиционных способов псевдооптимизации, как обналичка и фирмы-однодневки становится опасным, дорогим и малодоступным. Цель семинара - помочь компаниям, применяющим "серые" и "черные" схемы оптимизации налогов, уйти от них, и при этом не разориться, не уступить конкурентам, не уйти с рынка Найти законные альтернативы таким схемам, платить налоги, но не переплачивать - вот основная идея налогового планирования без "помоек" и "черного нала". Стоимость: 7 900 рублей В стоимость включены: раздаточные методические материалы, обед, кофе-брейки. Место проведения: г. Москва Четыре девять пять (это код) четыре четыре пять тридцать два шесть шесть Программа: Обналичивание. Для чего используется: "черная" зарплата и доходы собственников бизнеса; оплата расходов, которые не хочется проводить официально; незаконная деятельность (взятки, откаты, финансирование политической деятельности); Законные альтернативы (только для законных целей!): зарплата в большом размере - нулевая ставка страховых взносов; платежи от нерезидентов на карты, основания. Аутстафинг от нерезидента; перевод расходов в безналичную форму. Представительские расходы. Однодневки. Для чего используются: псевдооптимизация НДС и налога на прибыль в отдельных сделках или всей деятельности; "серый импорт"; "серая конвертация"; незаконная деятельность. Законные альтернативы однодневкам (только для законных целей!) затратные механизмы или трансфертное ценообразование с участием низконалоговых субъектов; выявление (создание) покупателей (заказчиков), не нуждающихся в вычете НДС, разделение финансовых потоков "с НДС" и "без НДС"; простое товарищество с участием субъектов УСН и/или нерезидентов, работа по агентским или комиссионным договорам с ними; прямой импорт с использованием или не использованием трансфертных цен и затратных механизмов и т.д. Расчет налоговой нагрузки на примере. Каковы будут (и будут ли) потери при отказе от "черных" схем. Когда при этом можно даже сэкономить. Ответы на вопросы. За более подробной информацuей обpащайтеcь по тел: \495\ 4Ч5-4О/95; (495) 4Ч5З266 PCSOB0871LFB

1 0

Fwd: vi4gr0w #71
by mary chapman 29 Mar '10

29 Mar '10

hey! worlds best male enhancment Check inside http://topmenshop.com/

1 0

Breakthrough Herbal Formula for permanent Enlargement of your member!
by Grow_Several_Inches 29 Mar '10

29 Mar '10

http://hunweek.com

1 0

MaxGentleman Enlargement is 100% Herbal, 100% Safe.
by MaxGentleman 29 Mar '10

29 Mar '10

http://hunweek.com

1 0

Cializ+Viagre=$76, BuyViagra online at the *** Chepeast *** Price! zti pc
by Lorean Eura 29 Mar '10

29 Mar '10

Order from CanadianPharmacy & Save You Money ** We are having Specials Hot Promotion this week ** We have package start from $65 - We have following: ViagraProfessional, CialisSoftTabs, GenericViagra, ViagraSoftTabs, Levitre, Propecia, Casodex, Cializ, CialisProfessional, Vprx Oil, Acomplia Virility Patch, Pheromone Cologne For Men, Horny Goat Weed, Maxaman Enhance9, Rockit247, ViagraOralJelly, Spermamax, Flomax, Pro-Erex CialisJelly, Virility Pills - Price are 82% Cheaper than regular price - No Doctor visit/hassles - We accept Visa/MC - All countries shipping and quick delivery to your door http://bestrx2you.com

1 0

Функциональные обязанности и этикет служебных отношений секретаря
by Современный секретарь 29 Mar '10

29 Mar '10

Секретарь, офис-менеджер, помощник руководителя Вся информация по тел: Код москвы: четыре девять пять, далее четыреста сорок пять, тридцать два, шестьдесят шесть. Tрidцать пeрвоgo мaртa 20l0 г. Внешний и внутренний консультант по управлению предприятием и работе с персоналом, практик-консультант по реструктуризации и построению управленческих структур, сертифицированный специалист по ИСО стандартам, постановщик задач по вопросам оценки и аттестации для программы Босс-кадровик. Программа: Основные функции помощника руководителя: Работа с документами организации -общий документооборот √ номенклатура дел √ архив предприятия Работа с входящей и исходящей документацией Телефонные переговоры Дополнительные функции: Планирование рабочего дня руководителя Контроль заданий руководителя Организация деловых совещаний, встреч Ведение протоколов заседаний Перевод Образцы документов Пример распорядка дня помощника руководителя √ элементы тайм-менеджмента Нормативные документы и требования Имидж помощника руководителя Cтоимоcть: 7 200 руб. По вопpоcам подробной информации и pегucтаpацuu обpащайтеcь по тел: \495\ 4Ч5-4О/95; (495) 4Ч5З266 PV52WPN

1 0

All medications from A to Z
by Brand~Name Medications 29 Mar '10

29 Mar '10

http://myguardrxtoday.com

1 0