- cypherpunks-legacy - lists.cpunks.org

Web Based Encrypted Backup
by foodie＠netcom.com 17 Dec '03

17 Dec '03

Connected Corporation announced DataSafe, a Mac/Windows web based backup service. $14.95/Month for 50MB, archival CD-ROM for $24.95 each. Offers passwords and DES encryption. Storage is on 2 mirrored sites. Phone # (508) 270-0035, http://www.connected.com/. >From thier site: ------- Security DataSafe uses the federally approved Data Encryption Standard (DES) with a 56-bit key to encrypt all of your data before it leaves your PC. This level of encryption is so powerful, it is not permitted to be exported outside of the United States (we use a different, but similarly powerful encryption scheme for our international customers). You have the option to choose your own encryption password, which is never transferred to us over the modem. In this way, no one but you can read your data - not when it is in transfer to us, nor when it is being stored in encrypted format at our secure operations centers. When this level of encryption is combined with the fact that we only transmit the portions of each file that change every day, not the entire file, the chances that anyone will be able to read or make use of your data as it travels over the network are practically eliminated. DataSafe uses the TCP/IP communications protocol for both its private dial-up network and Internet-based services. -------- I really like the idea of distributed, encrypted backups, but this strikes me as the kind of thing that has the potential to get a lot of gullible people in trouble. Hopefully someone offshore with proven security and a wider choice of algorithms will compete... (I don't know if Connected is good at security, so this shouldn't be construed as a swipe at them. Does anyone know anything about them?) -j -- The signal is the noise. ____________________________________________________________________ Jamie Lawrence mailto:jal@cyborganic.net mailto:foodie@netcom.com

1 0

doubleclick monitoring web browsing habits
by Hal 17 Dec '03

17 Dec '03

A post on comp.risks described a web adverstising service called "doubleclick". As described in its web pages at <URL: http://ad.doubleclick.net >, this service provides targetted advertising on the web. Participating web sites include links to doubleclick to show graphic images. Advertisers sign up with doubleclick and specify profiles for where and when they want their ads to appear. Doubleclick then selects an ad for each user who visits a participating site. Participating sites get paid for each such hit, and advertisers pay based on how many hits are expected. Apparently this is being used quite a bit. But what I found disturbing was the scope of the information being collected by doubleclick. The various parameters that advertisers can use in setting up their profiles for where their ads should appear are described at <URL: http://ad.doubleclick.net/advertising/adreghelp.htm > and include: TARGET BY WEB PAGE/SITE CATEGORY TARGET BY SERVICE PROVIDER (SP) TARGET BY GEOGRAPHIC LOCATION We determine a person's geographic location through the physical location of their network or through user registration. We have created an extensive map of both organization and Internet Service Provider (ISP) networks. TARGET BY USER'S OPERATING SYSTEM TARGET BY USER'S BROWSER TYPE TARGET BY HIGH-LEVEL INTERNET DOMAIN TYPE TARGET BY ORGANIZATION TYPE (SIC CODE) TARGET BY ORGANIZATION SIZE OR REVENUE TARGET BY PERSONAL INTERESTS doubleclick.net continues to add to an extensive database of user interests from activity on doubleclick.net member web sites as well as from publicly available sources like netnews. User interests are kept strictly confidential and will not be released to advertisers. We do allow advertisers to target ad banners based on user's interests. The more your ad banner is targeted at specific user interests, the more likely you are to generate a response. Personal interest categories include: Arts and Literature Business, Finance, and Economy Computers, Software and Internet Culture, Religion, and Society Education and InstructionalEntertainment Government, Politics, and Military Health and Medicine News Recreation and LeisureScience and Technology Social Science Sports Travel This last category is the really worrisome one. doubleclick monitors the web browsing habits of users whenever they hit a doubleclick- participating site, and builds up databases about users from that, as well as from usenet posts. This is exactly what people have been talking about as an abuse of privacy on the net. One question is whether enough information to uniquely identify users is routinely provided by widely used browsers like Netscape. I have refrained from telling my Netscape browser my name and email address out of fear that it would reveal this information; as a result, I can't use mailto: links, which is annoying (and also suspicious; lynx allows me to do mailto: without permanently entering an email address). This points out the need for browser providers to be sensitive to the privacy needs of their users and to clearly explain when and under what circumstances private information is revealed. It also suggests that services like www.anonymizer.com will be increasingly important for people to protect their privacy while browsing. Hal

2 1

Class III InfoWar: TST Article
by norm＠netcom.com 17 Dec '03

17 Dec '03

There are two things that they may be speaking of: 1. Causing transient errors to crash the system and cause restarts that may take many minutes. 2. Actually damage the machines. I imagine that only a small fraction of the energy required to damage the hardware is necessary to introduce serious transient errors. IBM used to test the main frames as they installed them. They had to resist several inch sparks drawn between the machine and a one meter frame. Software diagnostics ran during the test. I think that few desk top machines would survive that. EMP (Electro Magnetic Impulse), a side effect of nuclear devices, is purportedly able to damage electronics over distances of many miles. Some weapons may be designed to enhance this. Ordinary high explosives can produce a scaled down result. EMP is strategic only because it damages electronics that are too far enough to be damaged by the blast. I suspect that high explosive EMPs are similar in this regard. The physics behind this is not abstruse. A significant part of the explosive energy can be turned into EMP whether the source is nuclear or chemical. How well it can be directed is probably highly classified. The "antenna" is vaporized in either case and dissipates much of the energy. The energy comes out in 10's of microseconds for high explosives and fractions of a microsecond for nuclear. I don't know how much it takes to fry an IC but judging from the wrist straps that are recommended for installing ICs I would guess that it is a fraction of a Joule. (I once discovered that a one Joule jolt really hurt.) Faraday cages attenuate EMP by the same factor that they attenuate secrets. I think that if a blast doesn't damage the cage then neither will the EMP. Of course the cage may survive but fail to protect the interior (insufficient attenuation). I don't know whether a cage sufficient for tempest is sufficient for EMP protection. Comm lines and power cables go thru the cage and cause problems here as well. Perhaps hefty surge protectors suffice here. Communications equipment outside the cage should at least be equipped to recover quickly upon transient error and not tear donw circuits. Normal error control can then hopefully compensate for the transient. (IP, ATM, Frame relay??) A large capacitor can discharge a lot of power in a short time without causing nearly so much commotion as an explosion. Discharging a one kg 25000 volt capacitor makes a lot of noise, however. I don't know how well it can be muffled.

3 2

Make It Happen!
by P4XCPc9xC＠iftisnews1.net 17 Dec '03

17 Dec '03

LET US DO YOUR BULK E-MAILINGS!!! ..$450 PER MILLION (5 MILLION OR MORE $400 PER MILLION) ..$350 PER 1/2 MILLION THE WAY OF THE FUTURE FOR SUCCESS IN YOUR BUSINESS! Our company will do bulk emailing for your product/service. Addresses are extracted daily by 8 of our computers, which run 24 hours a day 7 days a week, scanning the net for new addresses. Estimated 100-150,000 addresses extracted daily. They are fresh! Over 40 million addresses on file. No more than 2 pages (50 lines), no porn, no sexual relative material and no foul language. $50 per page/25 lines per additional page. We do not do targeted mailings at this price. Addresses are deliverable, non-deliverable are removed with each mailing. All removes have been deleted from each mailing before mailing your ad. Targeted mailings: $200 per 50,000 addresses or less extracted. $125 per 25,000 addresses or less extracted. $75 per 10,000 addresses or less extracted. We can extract by country, occupation, organizations, associations, product, website, state, etc. If we can not search and extract what you need, then nobody can. No one can target your mailing for less. ***SPECIAL*** Targeted US ADDRESSES ONLY $750 per 1/2 million. A savings of $1,250. We have over 6 million addresses, non AOL, and collecting more each day. For those of you who would like to do you own mailings, we offer software for all bulk emailing success. Call for more details about the same software we use for our clients. Turn your computer into your personal mail server. There are no lower prices on the net. Your mailing can be done in a matter of hours, instead of days. For the fastest service, cheapest prices and cleanest mailings call our processing and new accounts department at 904-282-0945, Monday - Friday 9 - 5 EST. If the line is busy, please keep trying, as bulk mailing is growing fast. We do want to work with you to advertise your product. Check out our prices and compare with other emailers, you will find we have the BESt prices anywhere. To have yourname@domain removed, call our processing office. Any negative responses will be dealt with accordingly.

1 0

Design of LOKI97
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

http://www.adfa.oz.au/~lpb/papers/ssp97/loki97b.html

1 0

Someone IS falling for these scams!
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

Web Investment Con Artists Prove Elusive, Insufferable to Regulators By RIVKA TADJER Special to THE WALL STREET JOURNAL INTERACTIVE EDITION When it comes to con artists who target individual investors, none are proving to be more elusive -- or more infuriating -- to federal regulators than Internet scammers. The explosion of Internet investment fraud has prompted the Federal Trade Commission, in cooperation with the Securities and Exchange Commission, the Department of Justice, and Federal Bureau of Investigation, to coordinate elaborate surveillance tactics to combat these on-line con artists, says Paul Luehr, attorney and chairman of the FTC Internet Coordinating committee, which oversees law enforcement. Although many investors are becoming more savvy about dubious investment claims posted on the Web, fraud still abounds. Investors who use the Internet for research and discussion need a healthy dose of skepticism when visiting any investment Web site. Barry White, a 40-year-old CPA in Charlotte, N.C., and, ironically, now a fraud examiner, says he learned this lesson the hard way. Last year, he became the victim of what the FTC called "an elaborate, electronic version of a chain letter" called Fortuna Alliance. But he thought his nightmare was finally over when the FTC in the spring of 1997 nabbed the operators of Fortuna Alliance and shut down its Web site. Customers of Fortuna Alliance, the Bellingham, Wash., company charged with conducting the operation, were told that if they "invested" between $250 and $1,750 a month, they could get back $5,250 monthly. Fortuna Alliance took in at least $5 million from people like Mr. White, according to the FTC. Mr. White had been optimistic that with the FTC on the case, he might actually get back some of the $5,000 he sunk into Fortuna Alliance's pyramid scheme. But now he's losing hope. And he has discovered that the operators of the on-line scam are back in business. The principals of Fortuna are now living offshore in Antigua and have set up a new Web site (www.fa2.com) says Susan Grant, director of the National Consumers League Internet Fraud Watch in Washington, whose mission is to use collective consumer opinion to influence business practices. The Fortuna site's operators are so brazen that they haven't even bothered to change the name, she says. Fortuna officials would not return phone calls. "One thing is true about Web scammers -- they are so arrogant. Fortuna just put up a new Web site recently and went back in business," she says, lamenting that "there will always be plenty of people who don't check with us or the FTC to see whether there are law suits against an investment site." "I think it's pretty poor that the FTC can't get them," says Mr. White, who says he testified before a Senate committee hearing on the matter of Internet fraud last month "more for community service at this point than to actually get my money back. I don't want other people to get screwed." Indeed, law enforcement in cyberspace may be one of the toughest challenges government agencies face. "We're out there and making headway, but a global community where scams can pop up today and disappear tomorrow is a big job," says Mr. Luehr. The Fortuna Alliance Web site is a classic example. It's cheap to set up a new Web site under a slightly different name, and since there is no legal recourse for Internet service providers to judge what sort of sites they are hosting, the Fortuna principals could theoretically continue to operate indefinitely. One of the most frustrating problems for regulators is that individual investors often overlook important warning signals that are universal in scam Web sites. Mr. White, the investor, says he wasn't uncomfortable at all with sending his money order for $5,000 to Fortuna Alliance, even though he'd never once spoken to a Fortuna official about the details. "There were very detailed on-line documents that promised a 90-day money-back guarantee," he said. "They said they were launching a huge ad campaign ... and my return on investment would be quick." Two months later, Mr. White quite unexpectedly discovered he'd been scammed. "I just happened to put in the keyword 'fraud' on one of the [Internet] search engines ... and news that the FTC had just shut them down popped up." Looking back, Mr. White says, he should have been tipped off that it was an Internet scam by one red flag: After many attempts he was never able to get a Fortuna representative on the phone after he made his initial investment. The good news for consumers, however, is that conducting due diligence on investment sites is extremely easy using the Internet. The National Consumers League, and the FTC, SEC, and FBI Web sites all have fraud watch updates that allow consumers to e-mail questions and file complaints on-line. This kind of interaction is crucial, experts say, to detecting Web fraud. "We follow leads and need as many tips ads we can get," says Mr. Luehr. The bad news, however, is that on-line cons can go undetected for years and new mutations of old cons that take advantage of the Internet technology are popping up all the time. "One way we see the investment scams mutating is the combination of loan fraud and pyramid schemes," says the National Consumers League's Ms. Grant. "The con artists make use of spam to get investors." She cites a recent Las Vegas pyramid scheme that promised a $59,000 loan for those who mail in $20. It works like this: An e-mail arrives offering a chance to apply for a loan that you'll never have to pay back. All you have to do is mail in a $20 "processing fee." Mr. Luehr of the FTC says investors who have already fallen for one on-line scam should be especially cautious. "These scammers sell lists of names -- like any marketers -- and the ones that have already been suckered are considered prime targets," Mr. Luehr says. Mr. White will vouch for that. "I get phone calls all the time now for new 'get-rich' investment opportunities," he says. He says other red flags for investment fraud are sites that demand money upfront, and those touting "money-making opportunities" that promise a quick return with minimal risk. Ms. Grant agrees these are the two top signs of an investment scam. But it is not always so simple. Con artists understand all too well the appeal of high-tech investments to investors world-wide as scammers capitalize on investors' desire to be in on the ground floor of the next Netscape. So many are turning to cloaking pyramid schemes in high-tech language, Mr. Luehr says. "FutureNet was a perfect example," he says. "They used buzzwords like WebTV to lure investors and give the products a legitimate-sounding air." Similar sounding technology names add to the confusion. For example, the name "WebTV" is so familiar to the average consumer that many fraud schemes involve giving products or companies names such as NetTV. "This is such a problem we have set up 'Operation Net Opp', which is a surveillance task force to watch out for precisely this sort of high-tech fraud," says Mr. Luehr. - Igor.

1 0

hi im Sandra
by PDNJMD 17 Dec '03

17 Dec '03

To: PDNJMD(a)aol.com Subject: hi im Sandra From: PDNJMD <PDNJMD(a)aol.com> Date: Mon, 30 Mar 1998 08:27:00 EST Organization: AOL (http://www.aol.com) hi my name is Sandra i am an 18 year old model from Italy..Me and my friends made a webpage with our pictures on it...tell me if im pretty.. <a href="http:/www.angelfire.com/nj/iconz/index.html">Click here to see our pictures</a>

1 0

Re: PBS show
by jim bell 17 Dec '03

17 Dec '03

At 12:40 PM 6/13/96 -0400, Warren wrote: >I enjoyed the show as well...I was a bit young when the Altair was first >published in Radio Elec., Nope. Popular Electronics. January, 1975 issue. Jim Bell jimbell(a)pacifier.com

1 0

NSA on TDC....
by Jim Choate 17 Dec '03

17 Dec '03

Hi, There is a show on TDC right now (21:09 Ctl.) on the NSA. Has some interesting shots of their CRITIC center as well as a brief discussion of their computing resources. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re: Class III InfoWar: TST Article
by frantz＠netcom.com 17 Dec '03

17 Dec '03

N.B. Joss(a)netcom.com was not acceptable to netcom At 1:13 PM 6/13/96 -0800, Norman Hardy wrote: >EMP (Electro Magnetic Impulse), a side effect of nuclear devices, is >purportedly able to damage electronics over distances of many miles. Some >weapons may be designed to enhance this. I vaguely remember hearing that a nuclear device exploded high over the midwest would have significant EMP effects over half the continental USA. When a USSR pilot flew a "state of the art" fighter out and US intelligence got their hands on it we were surprised that all the electronics were vacuum tubes. However, vacuum tubes are highly resistant to EMP. (They arc between elements, rather than fry like ICs.) >Faraday cages attenuate EMP by the same factor that they attenuate secrets. >I think that if a blast doesn't damage the cage then neither will the EMP. >Of course the cage may survive but fail to protect the interior >(insufficient attenuation). I don't know whether a cage sufficient for >tempest is sufficient for EMP protection. Comm lines and power cables go >thru the cage and cause problems here as well. Perhaps hefty surge >protectors suffice here. Communications equipment outside the cage should >at least be equipped to recover quickly upon transient error and not tear >donw circuits. Normal error control can then hopefully compensate for the >transient. (IP, ATM, Frame relay??) Makes you want fiber optic comm cable. Protection inside the cage probably depends on how powerful the EMP is. However, the need for some degree of stealth in Class III InfoWar will limit the strength of the EMP. ------------------------------------------------------------------------- Bill Frantz | The Internet may fairly be | Periwinkle -- Consulting (408)356-8506 | regarded as a never-ending | 16345 Englewood Ave. frantz(a)netcom.com | worldwide conversation. | Los Gatos, CA 95032, USA

1 0