- cypherpunks-legacy - lists.cpunks.org

Information Sent by Netscape during Queries
by Bill.Humphries＠msn.fullfeed.com 17 Dec '03

17 Dec '03

Here's some questions I hope some of the Netscape staffers on the list can help with. 1) Can we delete/rename or otherwise disable the MagicCookie file and still use Navigator? 2) Are there headers besides the standard HTTP/1.0 fields sent with our http transactions? What are they? 3) Can we go completely stealth inside of Netscape without a proxy server? In a privacy seeking frame of mind, Bill Bill Humphries \/\/\/ bill.humphries(a)msn.fullfeed.com /\/\/\ Madison, WI, USA PGP Public Key Fingerprint = 84 05 17 9D B9 6E 2D FE A7 D1 E0 DC D0 96 63 FB

3 2

Re: Digital postage and remailer abuse (was Re: Novel use of Usenet and remailersto mailbomb from luzskru@cpcnet.com)
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 8:47 1/13/96, Alan Bostick wrote: >Maybe I'm misunderstanding how using digital postage with remailers would >work. I was assuming that the postage stamp would be included *inside* >the encrypted envelope, that what the remailer would do on receipt of >mail would be: (a) decrypt the envelope; (b) validate the postage stamp; >and (if the stamp is valid) (c) forward the message according to the >now-decryped instructions. > >Using this model, if the perpetrator doesn't include a postage stamp, >then the message is ignored. If the perp includes a stamp, the first >horny net geek's message is relayed but subsequent ones get bounced for >invalid postage. You are right. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

1 0

new web security product
by Ed Carp, KHIJOL SysAdmin 17 Dec '03

17 Dec '03

I wouldn't pass this along normally, but it seems to allow folks to use their credit cards at home securely. Bye-bye, First Virtual... ;) http://www.cnn.com/TECH/9601/encryption/index.html -- Ed Carp, N7EKG Ed.Carp(a)linux.org, ecarp(a)netcom.com 214/993-3935 voicemail/digital pager 800/558-3408 SkyPager Finger ecarp(a)netcom.com for PGP 2.5 public key an88744(a)anon.penet.fi "Past the wounds of childhood, past the fallen dreams and the broken families, through the hurt and the loss and the agony only the night ever hears, is a waiting soul. Patient, permanent, abundant, it opens its infinite heart and asks only one thing of you ... 'Remember who it is you really are.'" -- "Losing Your Mind", Karen Alexander and Rick Boyes

3 2

Re: Alta Vista, Great Stuff!
by Duncan Frissell 17 Dec '03

17 Dec '03

At 11:26 PM 1/16/96, Beethoven wrote: >Imagine your nym is related to something common-place at >the time of posting. Even though you may be well known >under that nym, simple searches for that name will turn up >loads of crapola, or at least some light entertainment >for someone searching for oyur past posts. My name is rare and matched mostly by lists of the highest points of elevation in each state (Mt. Frissell in Connecticut) and museum shows of the work of a distant cousin Toni Frissell who was a fashion photographer in NYC. Most of the rest is mine. If you have a common name/nym it would be harder to track (except by searching for email address rather than name). DCF "Now everyone knows that Mohammed and Lee are the most common names in the world. Maybe I should change my name to Mohammed Lee."

2 1

TOR_del
by John Young 17 Dec '03

17 Dec '03

1-16-96. NYPaper: "Louis W. Tordella, 84, Who Helped Break Cerman Military Code in World War II." A mathematician who helped break Enigma, and later spent 16 years as the deputy director of the National Security Agency. An intelligence visionary who had helped create and shape NSA even before he became its deputy director in 1958, Dr. Tordella was regarded both as a pioneer in the development of ever more powerful and sophisticated computers to break enemy codes and as a master administrator who established a combined code-breaking operation and then ran it. Since decryption devices did not exist, he and his colleagues simply designed and built them, not only breaking the enemy codes but helping to lay the theoretical and practical groundwork for what has become a vast computer industry. TOR_del [For more on Tordella, see Bamford's "The Puzzle Palace."]

1 0

Re: Spiderspace
by Bill Stewart 17 Dec '03

17 Dec '03

>... I was under the impression that the only documents that most web crawlers >will search are documents that are link-accessible. Are you saying that this >isn't true? Are you saying that Alta-Vista will search EVERYTHING that's >publicly accessible, whether by anonymous FTP or web? Don't archie servers already pick up the anonymous ftp fairly well? Also, aside from no-robots conventions, you can build a cgi program for access to files that might be more effective at blocking searches while still preserving access. Also, it wouldn't be hard for a web-crawler to follow ftp links, as long as the root of an anon-ftp site is pointed to by a URL somewhere. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com, Pager/Voicemail 1-408-787-1281 # # "Eternal vigilance is the price of liberty" used to mean us watching # the government, not the other way around....

3 2

Re: Crypto anarchist getting through customs
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 3:27 AM 1/16/96, Alan Horowitz wrote: >My bullshit detector is starting to pin the needle. > >US Customs doesn't care about your political status or leanings. >They want to collect the proper excise and catch contraband. > >There are INS people at passport control. I am skeptical that they >would detain a US passport holder for 36 hours. I would like to see some >evidence that this actually happened. > >US citizens can't be excluded from the country, nor have their >citizenship taken away from them. Since you're addressing this to me, what exactly did I say--be specific--that you think I was bullshitting about? They can, and do, detain entering citizens, as the Zimmermann case showed. And our own Fred Cohen confirms that he was detained upon re-entering the U.S. from Canada. --Tim May We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Need confirmation of Win95 password encryption back door
by Rich Graves 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- A Major Media Outlet requires confirmation that Windows 95, to facilitate its automatic reconnect feature for sleeping laptops and temporary network outages, caches all network passwords (NetWare, NT, UNIX running Samba, SLIP/PPP dialup) in unprotected memory in clear text, whether you've disabled persistent "password caching" to disk and applied the December 14th 128-bit RC4 .PWL patch, or not. There seems to be no way to turn this off. The idea, of course, is that a simple trojan horse could do whatever it wanted with this information. We know that this vulnerability exists in Windows for Workgroups, and Peter wrote a little demo (on hackmsoft page below, without source), but the APIs appear to have changed in Win95. So, anyone have Win95 and some time to kill, or can anyone recommend a good DOS/Windows RAM grepper? - -rich(a)c2.org http://www.c2.org/hacknmsoft/ $ Mon Jan 15 22:17:10 PST 1996 $ $ From llurch(a)networking.stanford.edu to cypherpunks(a)toad.com $ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMPtDLo3DXUbM57SdAQEN7QP+J6Gmk6m8dv3X96SKZciI/L7DM04bDSoi HZa+dIoajAiRrfG9oSNcIYbVDDs67qwCSKGFg9hc5K3x99nhbq3Aw2mio62YQj+2 K62pBT9hQLe4dv8AMhLtIqyG4ZztYy+dDjGzsaUIkBUZKo5//Eh8c81xXLQrqXtk RFV+xkXBgww= =12rk -----END PGP SIGNATURE-----

1 0

Re: Spiderspace
by jfricker＠vertexgroup.com 17 Dec '03

17 Dec '03

At 11:38 AM 1/16/96 -0800, you wrote: > >I've been thinking a lot about the problems and opportunities that are >coming up as more and more "spiders" (Web searchers, crawlers) are indexing >directories and files on systems they can find. <a snip of agreement> I haven't checked my logs for Alta Vista but many of the spiders do follow the robot exclusion standard. A simple text file that should be retrieved first by any spider that explains where one may not go. The standard is fully explained at: http://info.webcrawler.com/mak/projects/robots/norobots.html But this does nothing for those items sitting in more traditional public space. Obscurity is no longer security.

1 0

Re: Reach out! Update 01 (CypherPurists trash this)
by Jeremy Mineweaser 17 Dec '03

17 Dec '03

At 10:10 AM 1/13/96 EST, Dan Bailey wrote: >Regarding the *67 feature to disable Caller ID: >This does not stop your ANI information from travelling >with your call. >A *much* better way to do this is the following: >Dial the Operator. >Ask him/her to dial the 800 number for you. > >This will result in your ANI being (000) 000-5555 >I tested this a couple months >ago using AT&T's 1-800-MY-ANI-IS service. I directly dialed >1-800-MY-ANI-IS and it read back my phone number. Then I had >the operator dial it for me and got (000) 000-5555. This >service doesn't work anymore, YMMV.

1 0