- cypherpunks-legacy - lists.cpunks.org

10 Million Email Addresses, Stealth Mass Mailer & More.. 12440
by d4rft＠yahoo.com 22 Mar '01

22 Mar '01

1 0

Slashdot | Don't Trust Code Signed by 'Microsoft Corporation'
by Jim Choate 22 Mar '01

22 Mar '01

VeriSign probably needs to update their verification process... http://slashdot.org/articles/01/03/22/1947233.shtml -- The Laws of Serendipity: 1. In order to discover anything, you must be looking for something. 2. If you wish to make an improved product, you must first be engaged in making an inferior one. Tivoli Certification Group, OSCT James Choate jchoate(a)tivoli.com Senior Engineer 512-436-1062

1 0

10 Million Email Addresses, Stealth Mass Mailer & More.. 394
by d4rft＠yahoo.com 22 Mar '01

22 Mar '01

1 0

Hacker obtains "Microsoft" code signing key;
by Trei, Peter 22 Mar '01

22 Mar '01

My reading of this is that a hacker managed to human-engineer Verisign into signing a public key used for codesigning. While the key is signed as being Microsofts, it is in fact the hackers. He can therefore sign his own ActiveX components and make them appear come from Microsoft. Trojan horses, anyone? Verisign should be getting a lot of flack on this one - they're who business model relys on being a trustworthy confirmer of identies. Peter Trei --------------------------------------- http://www.msnbc.com/news/548228.asp Microsoft digital certificate stolen Verisign issued "virtual notary seal" to computer criminal By Bob Sullivan MSNBC March 22 Microsoft Corp. issued a warning today to all its customers that a computer criminal has obtained a digital certificate with the company's name and authority. The equivalent of a royal seal, digital certificates prove software code was written by a particular company and is safe. Microsoft said the criminal tricked Verisign Inc. into issuing two of the certificates. The software giant is warning users to be suspicious of any program that arrives with a certificate claiming Microsoft's authority. MICROSOFT'S SCOTT CULP said Verisign issued the two fake certificates accidentally on Jan. 29 and Jan. 30, and discovered the mistake only recently. (MSNBC is a Microsoft-NBC joint venture.) Web browsers generally encounter such certificates when the arrive on a Web site that has an ActiveX control, which allows dynamic content. Usually, a dialog box pops up asking the users if they would like to trust the code and allow it to run on the their machines. The fraudulent certificates would indicate to a user that the code was written by Microsoft and might trick a victim into allowing the code to run. "That's exactly one of the scenarios that pose the greatest risk," Culp said. The firm is working on a downloadable solution for the problem, but it won't be ready for about a week, Culp said. In the meantime, he urged Web users to be suspicious of any digital certificate they encounter, suggesting they check the certificate's details. "Anything that says it was issued on 29th and 30th of January is bogus. Do not trust it," Culp said. HUMAN ERROR? Culp blamed the problem on human error inside Verisign. He said law enforcement is now working with the company to track the criminal, who apparently was able to convince Verisign he was a Microsoft employee. "This wasn't a failure of technology. It was a failure of one particular Certificate authority to follow its procedures," he said. Digital certificates are issued by third parties, called certificate authorities, as a way of virtually "notarizing" computer code. There are hundreds of authorities, but Verisign is one of the largest. Each authority is supposed to follow detailed procedures to verify the identity of the programmer making a certificate request. Verisign did not immediately return phone calls.

1 0

Companies crack down on loose lips - Tech News - CNET.com
by Jim Choate 22 Mar '01

22 Mar '01

http://news.cnet.com/news/0-1007-201-5209901-0.html?tag=bt_pr -- The Laws of Serendipity: 1. In order to discover anything, you must be looking for something. 2. If you wish to make an improved product, you must first be engaged in making an inferior one. Tivoli Certification Group, OSCT James Choate jchoate(a)tivoli.com Senior Engineer 512-436-1062

1 0

CNN.com - Suspect linked to bin Laden held secretly 4 months - March 22, 2001
by Jim Choate 22 Mar '01

22 Mar '01

http://www.cnn.com/2001/LAW/03/22/embassy.bombings.suspect.ap/index.html -- The Laws of Serendipity: 1. In order to discover anything, you must be looking for something. 2. If you wish to make an improved product, you must first be engaged in making an inferior one. Tivoli Certification Group, OSCT James Choate jchoate(a)tivoli.com Senior Engineer 512-436-1062

1 0

Salon.com People | Welcome to my world
by Jim Choate 22 Mar '01

22 Mar '01

A reflective view on American culture... http://www.salon.com/people/col/pagl/2001/03/21/spring/print.html -- The Laws of Serendipity: 1. In order to discover anything, you must be looking for something. 2. If you wish to make an improved product, you must first be engaged in making an inferior one. Tivoli Certification Group, OSCT James Choate jchoate(a)tivoli.com Senior Engineer 512-436-1062

1 0

Release: "Medical Privacy" Doesn't Mean Privacy
by Kent Snyder-The Liberty Committee 22 Mar '01

22 Mar '01

FOR IMMEDIATE RELEASE - Thursday, March 22, 2001 Contact: Kent Snyder, 703-241-1003 E-mail: mailto:kentsnyder@thelibertycommittee.org Web site: http://www.thelibertycommittee.org The Liberty Committee 701 W. Broad St., Fifth Floor Falls Church, VA 22046 "MEDICAL PRIVACY" DOESN'T MEAN PRIVACY IN WASHINGTON "Washington's dirty little secret is out -- the so-called 'final federal medical privacy rule' recently announced by the federal government gives us less privacy, not more," stated Kent Snyder of The Liberty Committee. Section 160.310: Grants the U.S. Department of Health and Human Services access to a person's medical information without his consent or a warrant. Section 164.512: Grants many third parties access to a person's medical information (including genetic information) without his written, informed, non-coerced (as in "sign away your right to privacy or we will deny treatment") consent. Sections 164.502 and 164.506: The U.S. Department of Health and Human Services has the ultimate authority to decide who can access your medical records without your informed consent. "The truth is that laced throughout the 367-page federal medical privacy rule are provisions that actually give a patient less control over his own medical records than he currently has. At the same time, these regulations give federal, state, and local governmental agencies -- along with insurance companies, HMOs and others -- more access and more control than the patient himself has," Kent Snyder stated. Reacting to growing public concern, U.S. Department of Health and Human Services Secretary Tommy Thompson reopened the comment period on these deceptive "privacy" regulations. Unfortunately, in order for a citizen's comment to be acceptable, it must follow guidelines as to form and content -- thus ensuring that many well-meant and deeply felt concerns will be discarded as simply not in compliance. As a public service, The Liberty Committee is providing a free on-line petition that meets the guidelines for comments and reminds Washington what the true definition of "privacy" is. The petition can be found at http://www.thelibertycommittee.org/medprivacypetition.htm . The Liberty Committee is a nationwide, grassroots organization of over 51,000 Americans whose goal is to defend and advance liberty by restoring our national government to its constitutional limitations. -30-

1 0

Join Shopping & Investing Club...
by Specialty Online Sales 22 Mar '01

22 Mar '01

This is not Junk Mail. See our Anti-Spam Alert below... This is an invitation for you to review the newest concepts in both Shopping and Investing. Visit our web site at http://specialtysalesonline.com/cgi-bin/redirect.cgi?52616e646f6d4956db91cc… and review these concepts to see if they fit into your style. Click on the link to seamlessly explore. SHOPPING: Each month SpecialtyOnlineSales.com will present a category of products (usually four to six items), direct from the manufacturer to you. There will be a limited quantity of these items available for a limited time. You can review and make a selection by clicking onto our store at Yahoo.com. Your purchase will be shipped directly to your home or office. Then, each month, we will send you an e-mail itemizing the newest selections. INVESTING: Are you an online investor? Do you want to gain an edge on the big boys? SpecialtyOnlineSales.com is a clearinghouse for an Investing Consortium. You still do all of your own investing and handle all of your own money, but you do it in consort with many other club members. SOS2001.net is a consortium of independent traders interested in maximizing their investment potential by acting as a collective block. Volume of trading can influence price and subsequent participation. Click on our site to review this newest concept. ANTI-SPAM ALERT: This e-mail invitation was sent to you because at some time you opted-into a list and asked to receive information on special offers. If this e-mail is not acceptable to you, please reply by clicking the link below and we will remove you immediately from any further mailings. Click here: http://sos2001.net/cgi-bin/optout.cgi?52616e646f6d4956db91cc7c7fe475e35e552…

1 0

What the Founding Fathers wanted
by Jim Choate 22 Mar '01

22 Mar '01

The intent of the founding fathers was not to put ourselves in the place of the them. It was a much harder and more rewarding road, To understand the philosophy and process of Americal democracy. We have failed. ____________________________________________________________________ If the law is based on precedence, why is the Constitution not the final precedence since it's the primary authority? The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0