- cypherpunks-legacy - lists.cpunks.org

Re: Nuclear Hedge Funds / Social Engineering in History / Wiretap DiFi
by Sean Roach 17 Dec '03

17 Dec '03

At 11:01 PM 9/8/97 -0700, Bill Stewart wrote: ... >On the other hand, 0.5 kt of ANFO in the basement wasn't quite enough >to take the towers out. ... The version that I read was that the truck was merely parked next to a pillar hoping that that would do it. The guys weren't physics majors. With enough people here who speak in pure math, there might be a few who could calculate the best spot for such a device based on blueprints of the building. My opinion, one place the charges primarily along one side. The north one. That way, when the columns give, the building falls on more of Manhattin. BOOM! Timberrr.. This is speculation, of course. Purely for academic consideration and all that.

1 0

Re: Bright, Loud and Quick OR...?
by Sean Roach 17 Dec '03

17 Dec '03

At 09:20 AM 9/9/97 -0500, Frank wrote: > "Building a nuclear capability would cost $1 billion or more, require 1,300 engineers, and take years. Developing biological weapons could cost less than $100,000, require five biologists, and take just a few weeks, using equipment that is readily available almost anywhere in the world." Science News 5/18/96 ... >Disregarding the creative chemistry experiments available under your sink and around the house, but considering the way the government and media can characterize any assortment of household items or literature a question arises - If you have meat in your refrigerator do you in fact have the basis for a biological weapon of mass destruction? The fact that many foods can be readily converted (by improper handling or outright negligence) to poisons can beg the question of whether having food in your posession does not constitute a health hazard to your children. AND we all know that the well being of one child is what it is all about. Don't we? ... Don't disregard them too quickly. I can't remember the name of the fungus, or the toxin extracted from it, (and my science and technology encyclopedias are 2 hours away), but there is a common fungus found in soil. This is the stuff that can survive high temp treatment. IF memory serves, it's botulism, that is no guarantee. Anyway, this toxin was listed in the text that I have access to as being one of the strongest known to man. And it is literally under your feet. Of course I don't know how to distill it, but I could probably make some guesses.

1 0

Re: Bright, Loud and Quick OR...?
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Lucky Green wrote: > At 09:20 AM 9/9/97 -0500, Frank wrote: > >>>> > Based on recent statements by "officials" of the former > Soviet Union a number of "suitcase" nukes are missing. > Possible sale price - $1,000,000. > <<<< > $1,000,000 per suitcase nuke seems way to cheap. Heck, at that price, > some individuals on this list might be in the market. What's the yield > of these suitcase nukes? > > BTW, any idea what the law has to say about private ownership of nukes > by US citizens? Assume for a moment that the actual device is kept > outside the US. They are legal to own, as long as you don't carry them concealed on your physical person. It is legal to keep them in a locked suitcase. Only two left. 10% discount for cypherpunks. Can drop-ship to destination of your choice for no extra charge. (I'll need the cash up front if you live in the DC area.) Toto "The Xenix Chainsaw Massacre" http://bureau42.base.org/public/xenix "WebWorld & the Mythical Circle of Eunuchs" http://bureau42.base.org/public/webworld "The Final Frontier" http://www3.sk.sympatico.ca/carljohn

1 0

Re: Removing Tyranny from Democracy (Part II), (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: amp(a)pobox.com > Date: Tue, 09 Sep 1997 09:26:21 -0500 > Subject: Re: Removing Tyranny from Democracy (Part II), > was Democracy is the true enemy... > > > I don't believe there are intrinsic flaws in democracy, so much as > > there are intrinsic flaws in *human*nature* that are coming to light > > after decades. government is a reflection of our human natures. > > one cannot really expect a government to correct the flaws of its > > users, any more than software could do the same. > > No intrinsic flaws in democracy? > > Surely you jest. Please be so kind as to detail your top three flaws... ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Chelsea Clinton's PGP
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Stanford Newspaper Promises to Help Chelsea Clinton Keep Low Profile AP 08-SEP-97 STANFORD, Calif. (AP) Don't look for news about Chelsea Clinton in Stanford University's school paper: The editor is promising to treat the first freshman like any other student. Chelsea, accompanied by her parents, is expected on campus Sept. 19, when 1,600 first-year students move into their dormitories and begin several days of orientation. Like the mainstream media, the Stanford Daily plans to cover the Clintons' arrival and their participation that day at a welcoming ceremony for freshmen and their parents. But after that, said Carolyn Sleeth, the Daily's editor in chief, Chelsea "will be treated by us as a student, a regular student." That means her classroom and social life will largely go unreported. "Of course, if she involves herself in a newsworthy event, we'll cover it for example, if she founds a Stanford Democratic Club," Sleeth said. On the other hand, the student editor said if Chelsea were to get a speeding ticket or violate some minor campus rule, it would be ignored. "We wouldn't do a story if another student got a speeding ticket," Sleeth said. Sleeth also said a gag order of sorts will be imposed on Daily employees, barring them from talking or as she put it, "punditing" with the "outsider press" about Chelsea. Anyone who does so will be fired, she said.

3 2

RE: House National Security committee guts SAFE, worse than no bill
by Hiawatha Bray 17 Dec '03

17 Dec '03

I hate to tip folks off as to my column for tomorrow, but that's exactly what I'm doing in it. I have written that if the Feds try to impose key-recovery crypto on me, I'll start using some encryption program that doesn't comply with the law, and I'll send copies of the messages to the Feds, so they can come and arrest me. If I really thought they would, I wouldn't have written it! But I'll stand by it. Anyway, I don't presently encrypt my mail. No reason to--I ain't no pedophile...;-) So if I want to send crypto I must find some partner in crime. Any volunteers? Hiawatha Bray Technology Reporter Boston Globe P.O. Box 2378 135 Morrissey Blvd. Boston, MA 02107-2378 USA 617-929-3115 voice 617-929-3183 fax http://members.tripod.com/~krothering/index.html On Wednesday, September 10, 1997 10:04 AM, Syniker(a)aol.com [SMTP:Syniker@aol.com] wrote: > >>Perhaps it's time to dare the Feds to prosecute you. Any volunteers?<< > > Me. > Whatever anyone else does, I'm going to first... > ignore any government mandates or law on crypto [use it anyway] > then, challenge them... and finally, defy them. Period. > That's where I'm at. > And, I'm going to tell them that's what I'm going to do. > On any website I can. > > Larry. >

4 3

Netscape Server Attacks
by Ray Cromwell 17 Dec '03

17 Dec '03

No, calmdown, I haven't found a hole in the server yet, but if you want to win some T-Shirts, here's some potential avenues to try. I've been messing with these, and maybe some other c'punk can find one that will work. 1) buffer overflow attacks in the HTTP request header Example: The HTTP/1.0 full request has an "If-Modified-Since" header which takes a date string. If Netscape assumes this string is not going to be longer than a certain width.... Look for ways to attack the HTTP request headers. See http://www.w3.org/pub/WWW/Protocols/HTTP1.0/draft-ietf-http-spec.html CGI attacks 2)Shell metacharacters, or extremely long paths, may lead the way to executing arbitrary shell commands on the server. 3) Overflow the URL in a CGI GET by using too many form variables in the response. Server attacking client 4) use the Location: redirection header to send a long domain 5) use Location: redirection or Refresh: to load up file:localfile You can force the browser to load up any arbitrary file the user has access to local to his client Example: Refresh: 1 file:config.sys 6) send back a page with an EXTREME number of Motif HTML FORM widgets in a <FORM>. E.g. send back 10,000 radio buttons. Happy Hunting, -Ray

1 0

Re: Patents and trade secrets was: Encryption algorithms used in PrivaSoft
by David Van Wie 17 Dec '03

17 Dec '03

>> Now, this is all expected to change, to become more harmonious >> with the rest of the world. The changes that I've heard are >> 1) Go to first-to-file instead of first-to-invent Michael Shields wrote: > Does this mean that prior art would no longer invalidate a patent? No. It just moves the prior art date from the date of invention to the date of filing the patent application. dvw

3 2

Arena as well (was: Netscape Bug)
by Halvor Kise jr. 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I am sorry to report that also Arena has this bug.. :-( - - Halvor. Ray Cromwell said: I've found a Netscape bug which I suspect is a buffer overflow and may have the potential for serious damage. If it is an overflow bug, then it may be possible to infect every computer which accesses a web page with Netscape. To see the bug, create an html file containing the following: <a href="http://foo.bar.foo.foo.foo.foo.foo.foo...... [lots deleted :-] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: PGP Signed with PineSign 2.0 iQCVAwUBMGKC4mzoaW8/SAL5AQFPrAP+Jy8fJqK5BCNQASE36NUQGs3rISlLZ1QV PswGNegapIuD+UlTKGpNi+8QVHG5ZEKbtAmRVO9SdOiPyFWBbpLBuh9IVIstj8d1 StcqTc9FcILpxBDsi/OLuZyL3iN/CgMFlwmYj0ClEQGG4DexWP+mbD9MPANC7Nf/ duSH+Dpzf3c= =9onX -----END PGP SIGNATURE----- -- *** MEMENTO MORI *** PGP-key by fingering halvork(a)frodo.hiof.no http://www.hiof.no/~halvork/ * Support The Phil Zimmermann legal defense fund * http://www.netresponse.com/zldf

1 0

Cypherpunk Press <sarcasm>
by Michael Wilson 17 Dec '03

17 Dec '03

<sarcasm alert> Perhaps we should start suggesting to members of the press that they ask the U.S. Congress members how far they take the position of key escrow. After all, the primary government utilization of cryptography is in the military and intelligence community. Given the long, colourful history of rogue operations and criminal actions hidden under the cover of secrecy (including the usage of strong cryptographic systems), we might propose that the U.S. and other governments escrow their own keys--how about the UN, with the Security Council members having the right to decipher messages, or InterPol, or the World Court. After all, if individuals have no right to privacy, why should any organization have one? Is the right to privacy and secrecy something that comes from additive rights? Does it come from possession of military force, up to and including nuclear weapons? What's the line? I personally wouldn't mind knowing the threshold I need to cross to have a 'right' to privacy. It gives me a goal. What is not good for the swarm is not good for the bee. --Marcus Aurelius Antoninus Michael Wilson http://www.7pillars.com/

1 0