- cypherpunks-legacy - lists.cpunks.org

CDR: SSCP 15:1 STOCK SPLIT! Strong Buy Recommendation
by SSCP 15:1 Stock Split 29 Sep '00

29 Sep '00

SSCP 15:1 Forward Split FRIDAY SEPT 29.th............ Stereoscape.com announced that a 15:1 stock split of its common shares will be effective at the close of business on Friday Sept.29th. 2000. Strong Buy recomendation: Stereoscape.com,Inc. is a fully-reporting company. Has a small float of only 1.3 million shares. Up already OVER 300 % in one week. Current price- 3 3/8 Pre-split Target- 9.50 -12.00 Post-split Target-3.00 -5.00 (due to further aquisitions). Goodluck and GodBless..... We encourage everyone to do there own "Due Dilligence" before buying any stock.And to seek advice from a professional stock broker before buying or selling.

1 0

CDR: Shanah Tovah
by your_friends＠socialplus.com 28 Sep '00

28 Sep '00

SHANAH TOVAH from your friends at JewishMatch.com (owned and operated by SocialPlus.com) We are a leading provider of customized, turnkey solutions that enables your website users to meet each other for the purposes of companionship, dating and hopefully, marriage. With the New Year upon us and our renewed vows of bettering the world and performance of good deeds, what an ideal time to help Jewish singles! While providing your members with the most technologically advanced internet dating service, by linking us from your home page, you will get: - Added revenues: No costs whatsoever, just cash for you and value added service for your members. - Greater frequency and duration of site visits ("stickiness"). - Increased organizational value. - Activity reports of your members, 24/7. Our powerful and feature rich ASP (Application Service Provider) software is currently being used by numerous Company-owned and operated communities and over 700 Partners and Affiliate sites around the world, including "The Jerusalem Post." Won't you please take just a few seconds to peruse our site at http://www.jewishmatch.com to enable us both to perform this vital 'mitzvah.' We look forward to explore in greater detail the synergies of a strategic online alliance and a rewarding business involvement. With best wishes for the New Year 5761, I remain, Cheryl M. Gilan Director of Business Development JewishMatch.com mailto:cheryl@socialplus.com Tel: (212) 244-7779 Cell: (917) 523-6750 P.S. Please do not hesitate to contact me at the above numbers. Should you wish to get started right away, you can do so at http://www.jewishmatch.com/affil and you will be on your way _____________________________________________________________________________ If you wish to be removed from future mailings, please reply by inserting the word "Remove" on the Subject line.

1 0

Re: CDR: Why Free Speech Matters
by Duncan Frissell 28 Sep '00

28 Sep '00

At 07:20 PM 9/27/00 -0500, Jim Choate wrote: >It has to do with that term 'free' or 'freedom' you keep throwing around. >Your application does not do justice to the meaning of the term. > >The reality is that 'freedom' means (even in crypto-anarchy circles) the >right (note that word Timmy) to engage in whatever behaviour one chooses >so long as it is consensual and doesn't abridge anothers right to >expression. > >Trying to 'shun' somebody for their non-invasive behaviour (e.g. two dykes >kissing in a ball park) is the peak of anti-freedom. If a person really >respects freedom it is more than 'freedom for me but not for thee'. > >The kissing of the girls was nobodies business, in or out of the park in a >FREE society. > >Tim, you're a bigot and a hypocrite. Now James, you've been hanging around libertarians enough to know that their extreme notion of freedom includes property rights which involve the right to exclude anyone without a pre-existing contract right to use or be on the property. Thus a stadium owner excluding lesbians or a lesbian bar excluding men are both perfect examples of liberty. To hold otherwise would mean that property didn't exist. I want the right to exclude anyone from my property (government agents for example). DCF

3 2

CDR: US spy software could devour RIP
by anonymous＠openpgp.net 28 Sep '00

28 Sep '00

H David Ludlow and Liesbeth Evers, Network News , Wednesday 27 September 2000 Developers in the US have uncovered a way of snubbing the American equivalent of the Regulation of Investigatory Powers (RIP) Bill, prompting speculation that a similar system could be introduced into the UK. The US government's software, called Carnivore, is installed on ISP networks to enforce court orders calling for electronic monitoring. Operating in a similar way to commercial so-called sniffers, Carnivore looks at all data on a network, throwing away information that is not contained by the court order. For example, it could capture emails to and from a specific account. Until now, only the FBI knew how the product worked. Hiding behind claims that Carnivore was partially based on commercial software, and that hackers could find a way to circumvent it, the FBI refused to open the source code. But its attempts at secrecy have backfired, after a company called Network Ice released the source code for a rival product, altivore.c (www.networkice.com/altivore) The code complies with the requirements for Carnivore, and is a legal substitute in the case of a court order. By making it open source, Network Ice has shown how the software works, and how public privacy can be maintained. The UK's equivalent of Carnivore is a black box that, under the RIP Bill, will be placed at ISP premises to monitor emails. It is unclear whether it will be a mandatory device, which will leave the public suspicious of what it does, or an open source device that meets a defined technical description. Security analyst Peter Williams, of DataCheck Consultants, said that if the technology can be developed in the US there is no reason why it could not be used to scupper the RIP in the UK. "The government didn't really think through the technology for this," he said. A Home Office spokesman said that the government intends to discuss the matter with a technical advisory board. First published in Network News This article is available online at http://vnunet.com/News/1111717

1 0

CDR: Re: IR TEMPESTING
by A. Melon 28 Sep '00

28 Sep '00

IR-blinding laser diodes with 10s of mW outputs are readily available. And deciwatt CO2 is feasible, and makes the point better. But really folks, they made national forests for a reason. >Certainly gives a new twist to TEMPEST. I suppose now if you wanted to >tempest your home, youd additionally have to install randomly "blinking" >heat generators. > >Hmmm, something like a big grid of resistors where they get turned on and >off at random. > >You might want the resistors to spell out "Mind your own business, pigs!" >when viewed with a thermal device, but of course this kind of thing will >only attract their attention. A Clandestine Math Lab

1 0

CDR: Re: Lions and Tigers and Backdoors, oh, my...
by brflgnk＠cotse.com 28 Sep '00

28 Sep '00

The words of Steve Furlong: -- begin quote -- I've been trying to find evidence of this, too. I've sent messages to self from several versions of Netscape Messenger on Windows and FreeBSD, then examined the headers. -- end quote -- You're looking in the wrong place. The "help fields" would be somewhere in the SSL tunnel setup. That's where the Wells Fargo case came to light. Suddenly one day, the banking site required me to "upgrade" my browser, allegedly because of an expired certificate. As others have mentioned, simply upgrading the cert itself didn't satisfy the site. So ostensibly, the NSA, et al, have a bit of assistance in cracking the 128-bit SSL session. You may recall a few years ago when the information lifetime of 40-bit SSL fell somewhere below 3 hours, given access to enough parallel CPU (like a college workstation farm). Moore's Law hasn't slowed down. I'd be surprised if 40-bit could stand much more than an hour of dedicated attack today, if even that. And these rumored "help fields" could easily reduce the keyspace far below 40 bits, if they don't simply expose the whole key to a knowledgable eavesdropper. "They" don't care much about your email... "they" want your bank balance and credit card numbers.

3 2

CDR: Choate physics again
by A. Melon 28 Sep '00

28 Sep '00

>By the time the coherent radiation (needed to make an image) passes Were not talking holograms, Jimmy-boy

1 0

CDR: Re: Lions and Tigers and Backdoors, oh, my...
by Michael Motyka 28 Sep '00

28 Sep '00

> On Wed, 27 Sep 2000, David Honig wrote: > > >Modularity *is* useful for keeping things simple enough to analyze, but > >isn't a library with a well-defined API sufficient? > > This sort of highlights how the current models of shared code fail. A good > deal of modularity and independence of cryptography implementations (what > Tim probably drives at with his comment of making life too easy for Three > Letter Agencies) could be achieved with proper shared libraries with well > thought out APIs. Only DLLs and alike aren't quite stable enough to be used > for such heavy inter-vendor use. If they were, the massive single function > apps could be implemented as lighter wrappers around them and modularity > would be maintained, all without compromising ease of use. There would be > security considerations in using someone else's library, yes, but a proper > authentication architecture and/or open source development could be used to > alleviate those. Too bad M$ does not place a lot of weight on such design > considerations, instead pushing its own centralized model. > > Sampo Syreeni <decoy(a)iki.fi>, aka decoy, student/math/Helsinki university > You're running these crypto modules on an MS OS? Plaintext is entered via the PC HW/MS Drivers and then exists in memory on the MS system? This probably describes the environment for most users, though not necessarily most of those on this list. So why run any crypto at all? On Linux, maybe, unless you installed a binary that was compromised or there is a keyboard logger built into the chipset. But on MS it is probably wasted cycles. Unless it gives you a warm fuzzy feeling, I guess. Maybe I'm just paranoid. Mike

3 2

CDR: Re: Lions and Tigers and Backdoors, oh, my...
by Michael Motyka 28 Sep '00

28 Sep '00

DH wrote : >One very common security model is that the security perimeter includes >the PC and you're only concerned with transmission interception. > Definitely the wrong place to draw the dotted line if you're truly worried about your information. >MS is swiss cheese but most OS have some weakness in many configs. > >How many people actually look at the source of the code they >install on *nix machines??? How many of those who do are actually qualified >to do security reviews? Cf. recent PGP bugs. > Not enough. >If you're really worried you'd use a sealed PDA (that you can control at >all times) to capture/render and the PC is just for transport. [This >applies Tim's modularity argument to hardware.] > >I'd consider a Starium unit a dedicated PDA in this context. > >Of course, both PDA and Starium remain succeptible to shoulder surfing, bugs, >your windows modulating a laser, etc. > >dh > Using an embedded system is not a new topic here. I think its the only viable method of securing data. On that note, given the little wireless gizmo of Tim's description, the device could have, via appropriate applications on the insecure host/transport gateway, access to a services on the host that would expand its list of resources without compromising security. The obvious useful resources are the network and mass storage though other i/o might be interesting. All storage of course would be encrypted and never available as plain text on the host. Any i/o used should not carry information that is to be kept private, only as a means to transport non-critical data into the PDA. What is required is a PDA that is open sourced all the way down to the HW. Is the Palm this way? I think I've asked this before but frankly I don't remember the answer. There are probably others that are OK. Yopy looks interesting. Which ones will still be around in a couple of years?

1 0

CDR: Re:
by sunder 28 Sep '00

28 Sep '00

> sjstapler wrote: > > Hi, > > I received an e-mail about this organization but, so far, I've not been able to find out any more information about it. > I've tried looking for the articles that the e-mail mentioned with no luck. Where is it located? > > I would appreciate any information you can give me. > > Steve I'm curious, where did you receive an email about this organization and what did that email claim? This isn't an organization it's a set of mailing lists for discussions relating to cryptography - at least most of the time. -- ----------------------Kaos-Keraunos-Kybernetos--------------------------- + ^ + :Surveillance cameras|Passwords are like underwear. You don't /|\ \|/ :aren't security. A |share them, you don't hang them on your/\|/\ <--*-->:camera won't stop a |monitor, or under your keyboard, you \/|\/ /|\ :masked killer, but |don't email them, or put them on a web \|/ + v + :will violate privacy|site, and you must change them very often. --------_sunder_(a)_sunder_._net_------- http://www.sunder.net ------------

1 0