- cypherpunks-legacy - lists.cpunks.org

Re: Protocols for Insurance to Maintain Privacy
by Anonymous 17 Dec '03

17 Dec '03

Two ways to tell if the person has had the test: A) The company performing the test keeps track of everyone who has had it. This could be by some biometric ID, perhaps even a DNA fingerprint. B) The company performing the test marks people who have had it. They could have a harmless radioactive tracer injected. This would degrade after a while but it could be used to see if the test had been taken within some time interval. Both of these require that all companies able to issue the test cooperate and that there is no black market source of testing.

2 1

No Subject
by Anonymous 17 Dec '03

17 Dec '03

http://www.itd.nrl.navy.mil/ITD/5540/ieee/cipher/news-items/980713.LISTWATCH .html My online review of this list and others. Mary Ellen Zurko "We will be obliged to take action ourselves" -Gore on privacy

5 5

RE: Democracy... (fwd)
by Matthew James Gering 17 Dec '03

17 Dec '03

> Try pantheism. If one fundamentaly believes that god does not > exist, which clearly involves faith, then yes it is a religion. Then I guess you could say that pantheism is an atheist religion, as opposed to a theist religion. My nice definition of atheism is reason over faith, science over mysticism, basically an anti-religion. While that may be etymologically unjustified, it does accurately reflect the views of the majority of people I know who call themselves atheist, myself included. Notice my brackets: a- (without) + [theos (god) + ismos (practice or doctrine)] not [a- (without) + theos (god)] + ismos (practice or doctrine) > By your view an agnostic can't be religion No, and it's not, it's like standing in the doorway of a religion, not sure whether to enter or leave, perhaps practicing but not believing. Such indecisiveness annoys me, but it accounts for the majority of the population. Matt

1 0

RE: Search engines and https
by Fisher Mark 17 Dec '03

17 Dec '03

I suspect this is just a hangover from the earlier days of the Web (1993-1994) when it seemed to me that a lot of Web content was repurposed from other sources (gopher, FTP, Telnet -- the old "page after page of links"). I suspect that http://-only indexing occurred so that the early search engines could manage the amount and types of data indexed. The other aspects are that: * https:// can be significantly slower to server off of a smaller server (http:// giving OK performance, but https:// being a dog), which may prevent some from serving more content via https://; and * Many of us find being your own Certificate Authority makes for greater security, as you never have to let your private keys out the door, but only recently have the tools for creating and maintaining Certificate Authorities and server certificates become really commercialized (i.e. GUI front ends, available from Netscape and Microsoft, etc.) These aspects, I think, have combined to reduce the number of pages served by https://, such that the search engine vendors probably haven't been bugged very much to index https:// pages. I expect this to change. > ========================================================== > Mark Leighton Fisher Thomson Consumer Electronics > fisherm(a)indy.tce.com Indianapolis, IN > "Their walls are built of cannon balls, their motto is > 'Don't Tread on Me'" >

4 3

Re: rsync and md4
by Andrew Tridgell 17 Dec '03

17 Dec '03

> The odds of a certain file having a certain hash are one in 2^128. But, > the odds of any two files having the same hash (the "Birthday Attack") is > just one in 2^64. The birthday paradox doesn't apply in my case I believe. Its not an all-to-all comparison. One file is "given" by the user. I'm definately not a crypto-expert, however, so I could be wrong. > That's good, because MD4 collisions can be produced in a matter of > minutes. But if you're not concerned about attacks, then MD4 is probably > more than you need. I'd like to know more about this. > You could, but why bother? If you've got a 14.4 or faster modem, you can > send a lot of hashes in a short time. The real load won't come until you > try to download an altered file. You'd have to read the tech report on rsync. It does not download the whole file when a checksum mismatch is found, that would be next to useless. It effectively creates binary diffs of the two files, without direct (local) access to both files. As far as I know this is a new type of algorithm. In practice the hashes and checksums dominate the data that is sent over the link. They total about 1/30 of the total file size for the default settings. > MD4 is not strong- people can deliberately produce files with the same > hash in a matter of minutes. MD5 is secure for now, but it seems to be > gradually falling to cryptanalysis, and should be phased out of use before > it breaks. IMO the best hash algorithm is SHA1 (which is an updated > version of the original SHA). Do a web search for "FIPS PUB 180-1" for the > specs. Do you have references to the md4 collision stuff? The situation I have is a bit unusual so its just possible some of the results may apply. > For what you're doing it sounds like you don't need a cryptographically > secure hash function. If you're not concerned about people deliberately > trying to defeat the system, then just use a 32-bit CRC. It already uses a 16 bit hash as a first level filter and a 32 bit "rolling checksum" as the 2nd level. The 2nd level fails about 25 times on a 25MB test file I've been using. The failure rate goes as the square of the file length. When the 2nd level fails it is detected by the md4 hash which has to be much stronger. Cheers, Andrew

2 1

- Once In A Lifetime Opportunity -
by Afriend＠good-buddy-911.com 17 Dec '03

17 Dec '03

Below Ground Floor Opportunity, Don't Be The Last One In Again! An Amazing OFFER! Your Own Electric Power Company For Under $300! Best of All There is a way to NEVER PAY A MONTHLY FEE!! Electric Power Marketers Are Needed Immediately In All 50 States! Imagine having a choice between suppliers of Electric Power with savings of 20%-40%. Now imagine being a marketer of those savings and earning a recurring monthly commission on the Utility usage of consumers across the country! This is a $215 Billion Dollar Opportunity! You CAN MAKE UP TO $561,490 A YEAR As An Executive! Here's A SPECIAL OFFER To Help You Make Executive, If You Join within NEXT 7 DAYS, I Will Provide You and Your Group With 200 FREE/Fresh Responsive Leads & 200 Free PostCards Each & Every Month.(Example: You & 6 others equal 1400 FREE LEADS & 1400 PostCards.) Also, Get 5 Free Web Pages & more. Here Are The First States To Go Starting Jan '98, So If you Know Anyone in These States Call Them Now! Better Yet, You Sign Up First, Then Sign Them Up! California, Delaware, Maine, Massachusetts, Montana, Nevada, New Hampshire, New Jersey, Oklahoma, Pennsylvania, & Rhode Island just for starters! Note: If Your State Is Not Deregulating for a Couple Years, Don't let that Stop You Because This is the ONE Opportunity Where The Poor Will Get Rich And The Rich Will Get Richer. By Acting Now You Secure A Spot and Then when your State does finally deregulate you already have a Group in place from the other states in which you are getting paid Big Time Profits from. So become a Marketer Now & get paid handsomely from the usage of Electric Power & the Bundling of other Home Services In Those Other States. CONSUMERS GET COMPENSATED BY...Getting All their home services bills i.e. Utilities; Telecommunications; Cellular; Cable; Digital Satellite TV; Home Security; Internet Access & Services; Business & Financial Services; Worldwide Electronic Home Shopping etc. bundled into ONE MONTHLY payment, PLUS A SAVINGS! Businesses & HouseHolds Sign Up For Free! You Get COMPENSATED BY Front & Back End Bonuses, Training Bonuses!...Plus Monthly OverRides! That's just to name a FEW OF THE payment options! Be On The Road To Earning Enough To Quitting Your Full Time Job! Goal is 5 to 8 mths after Starting. When You Join Us You Will Receive A Membership Package That Is Like the SAM's Club For Businesses Which Includes Great Benefits & Services Worth more than the Price Asked. Company- Membership; International Business Portfolio; Company Training System; $100 Company Product Voucher; & MANY MORE BENEFITS. For A Complete List Please Ask For More Information on what's included in the Business Package. JOIN A WINNING TEAM; 13 1/2 Year Old Company Listed On NYSE; 1.5 Billion In Sales....Debt Free Company...Listed By D&B As A 5A-1 Financial Rating... Only 1% Of Business Have Reached That Rating....PROVEN RECORD OF SUCCESS... Again, I Say You Can't Lose! To Listen To Our Live InterActive Opportunity Call On Tues. OR Thurs. Night at 1005pm EST, call 1-800-473-3479 for the number and the access code for 10 cents a minute. Just leave your name and phone number. I will call you back ASAP! To Join or To Request More information: POC: D.P. SIMPSON; Call For Fax On Demand Number and security code; Email address: nolongerbroke(a)goplay.com Snail Mail address: Solutions Unlimited, 9292 Statesman Road, Fort Belvoir, VA 22060; Business # 1-800-473-3479, 24hrs. PS JOIN TODAY & RECEIVE 1000 HOW-TO REPORTS FOR FREE OR YOU CAN ORDER THE 1,000 HOW-TO REPORTS FOR $59.95 & Become An Instant Publisher. THAT'S $40 DOLLARS BELOW Market Price. Order by credit card, money order, or check made out to SOLUTIONS UNLIMITED. COME JOIN A WINNING TEAM TODAY! 30 DAY MONEY BACK OFFER ON BOTH! PPS If Requesting more information please provide: Name;Occupation; Phone;Fax;Address; Best Time To Call. Thank You And GOD Bless!

1 0

RE: LACC: Re: Is hate code speech?
by Francis, Catherine 17 Dec '03

17 Dec '03

I worry that, in the process of laying all this flame-bait, y'all are hoping that naive people might think that a job where there's racial and sexual hate-speech isn't a hostile work environment. Putting this sort of language in code does not shelter it from co-workers. It doesn't matter that the offensive names weren't directed at her. It's much worse that they were directed towards an entire group. Or maybe you just admire ethnic slander in terms of cost-efficiency, a sort of more-bang-for-the-buck maximization of intolerance where it's a question of offending the greatest number with the least amount of effort, and simply admire the mechanism by which it's been accomplished? This isn't an issue of free speech. Well, maybe. The coder is free to name her/his/its variables what they like, all ethical issues aside, and equally free to live with the consequences of those actions, which should have been the company not using something so vastly unprofessional and guaranteed to eventually open them up to a suit like this. There are standards of behavior in a workplace that are slightly more restrictive than standing on a soapbox on the quad. A software company's code is an internal company document. The code that you write at home is your document. You may find this distinction instructive. I'm sorry to digress, since this isn't why the article was originally posted, but I was forced to succumb to the troll. Free speech is essential in an open society. Freedom from discrimination is essential in a democracy. Carry on. > ---------- > From: William H. Geiger III[SMTP:whgiii@openpgp.net] > Reply To: lacc(a)suburbia.net > Sent: Tuesday, August 25, 1998 6:24 PM > To: lacc(a)suburbia.net > Cc: proff(a)suburbia.net; aucrypto(a)suburbia.net; cypherpunks(a)toad.com > Subject: LACC: Re: Is hate code speech? > > > > -----BEGIN PGP SIGNED MESSAGE----- > > In <Pine.SUN.3.91.980825155854.3483A-100000@baker>, on 08/25/98 > at 04:19 PM, Xcott Craver <caj(a)math.niu.edu> said: > > >On Tue, 25 Aug 1998, William H. Geiger III wrote: > > >> <sigh> Now we have to worry about PC variable and function names. What > a > >> crock. > > > Oh, yeah, you really have to worry about *accidentally* > > calling your variables getwatermelons and somefriedchicken. > > Reminds me of this one guy in our neighborhood who was just > > jogging by our house, bent down to tie a shoelace, lost > > his balance and accidentally planted a huge burning cross > > in our front lawn. Woops! Those damn PC-mongers are > > making it a crime to jog! > > Yes and if I want to name my variables getwatermelons and somefiredchicken > who are you to tell me I can't? > > > One note: I don't see why this lawsuit would be hard to win > > on the grounds that source code isn't necessarily "speech." > > If co-workers left a big wooden swastika on her desk it > > wouldn't be speech either, but I'd call that actionable. > > But they didn't. There is no proof that any of theses variable names were > written to be directed at her and the majority of them were written > *before* she ever started working there!! > > - -- > - --------------------------------------------------------------- > William H. Geiger III http://www.openpgp.net > Geiger Consulting Cooking With Warp 4.0 > > Author of E-Secure - PGP Front End for MR/2 Ice > PGP & MR/2 the only way for secure e-mail. > OS/2 PGP 5.0 at: http://www.openpgp.net/pgp.html > - --------------------------------------------------------------- > > Tag-O-Matic: OS/2: Not just another pretty program loader! > > -----BEGIN PGP SIGNATURE----- > Version: 2.6.3a-sha1 > Charset: cp850 > Comment: Registered_User_E-Secure_v1.1b1_ES000000 > > iQCVAwUBNeM6Qo9Co1n+aLhhAQEHMAP+OdR38utDHJd4s8r3/fTVedI+xH9A+lNX > CU/yeqOx2Y9P8K/ol1wdLf4U3Dzv3VZ+CvRUmVB4juRdFBTnor7wrS3CQiQ1krut > K3nLi7HtUqb92VD55eCM4W61c67lqLTD7TTXW2p6sHm8ti3NgK1fGfRPTSk5Ay9S > j2tEl6HI5P8= > =jRNy > -----END PGP SIGNATURE----- >

3 2

99 Toyotas as low as 2% over invoice
by accutone＠earthlink.net 17 Dec '03

17 Dec '03

Please accept our appologies for your inconvenience if you are not interested in this e-mail offer. If you are interested in a new 99' toyota car, truck, or van at prices as low as 2% over invoice on selected models and/or huge savings on pre-owned certified toyotas as well as 100's of other pre-owned vehicles of all makes and models below kelly blue book, please respond with your name, phone #, e-mail address and the specific model you are interested in. Please include all the required information that we have requested, or there will be a delay processing your request. We thank you for your time. please accept our apologies for the intrusion and de-select yourself from our mailing list if not interested. Thank you.

1 0

Proof that Free Market Works!
by TruthMonger 17 Dec '03

17 Dec '03

* In May, police raided a construction site in Oporto, Portugal, and discovered that 12 drug addicts were working dawn to dusk on an apartment building in exchange for employer-provided heroin shoot-ups at breakfast, lunch, and dinner. According to police, the doses were just enough so that the men would remain employed to get the next fix. ~~~ Send a message to notw-request(a)nine.org with the Subject line of Subscribe. To read these News of the Weird newspaper columns from the past six months, go to http://www.nine.org/notw/notw.html (That site contains no graphics, no photos, no video clips, no audio. Just text. Deal with it.)

1 0

Vote Carol Anne Cypherpunk!
by TruthMonger 17 Dec '03

17 Dec '03

* While her colleagues were debating, in July, whether the New Life Massage Parlor was a front for prostitution, Oak Grove, Ky., City Councilwoman Patty Belew, 26, said she already had enough information to decide. She said she knows for sure that the massage parlor paid bribes to some police officers to ignore prostitution because she used to work there. ~~~ Send a message to notw-request(a)nine.org with the Subject line of Subscribe. To read these News of the Weird newspaper columns from the past six months, go to http://www.nine.org/notw/notw.html (That site contains no graphics, no photos, no video clips, no audio. Just text. Deal with it.)

1 0