- cypherpunks-legacy - lists.cpunks.org

Re: ed yourdon on Y2k armaggedon
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

>That said, I'll bet the first taker a dollar against a doughnut that 90% >of U.S. nuke plants sail right through into the new millenium and don't >even trip for any technical reason. (I won't bet against >*political* reasons.) > >Why do I think so? > >Nuke plants are much less computerized than you might think. > >Many still use electromechanical relays to provide important logic >functions. Relays have a lot going for them - for instance you never have >to worry about introduction of stupid software bugs. What about real bugs introducing themselves into relays? :) A few years ago a nuke plant wanted to build a computerized control system and USNRC absolutely gave them hell, requiring them to document every damn line of it and prove that it could handle all special cases. But they did finally approve it.

1 0

Win95/NT attack in CNN news
by David Honig 17 Dec '03

17 Dec '03

http://www.cnn.com/TECH/computing/9803/04/internet.attack.ap/ Hacker attack crashes Windows systems coast-to-coast March 4, 1998 Web posted at: 10:05 a.m. EST (1505 GMT) SAN DIEGO (AP) -- Computer security experts blame hackers for an Internet attack that caused computers running Microsoft's Windows NT software to crash from coast to coast, mostly in government and university offices. While no real harm was done, it was too early to gauge the full extent of the attack. Experts said the far-flung glitches could only have been the result of a deliberate act, The San Diego Union-Tribune reported Wednesday. The crash Monday night affected computers running Windows NT -- the operating system for larger computers and networks -- and Windows 95. Problems were reported at the Massachusetts Institute of Technology, Northwestern University, the University of Minnesota and University of California campuses in Berkeley, Irvine, Los Angeles and San Diego. Unclassified Navy computers connected to the Internet also crashed on Point Loma and in Charleston, South Carolina, Norfolk, Virginia, and elsewhere. "It happened so fast," said Craig Huckabee, a research associate in the Computer Systems Laboratory at the University of Wisconsin. "In our department, I would have to say about 90 percent of the machines were affected." Despite the coordination of the attack, the computers that crashed could be restarted without losing information, computer security experts said. The attackers used the Internet to broadly distribute a snippet of deliberately malformed data, said Ron Broersma, a civilian computer security expert at the Navy labs on Point Loma. The prank exploits a glitch in the Windows NT program by instructing the computer to devote excessive memory resources to solve a problem that can't be solved. Microsoft security manager Ed Muth said the company is working on a software patch that fixes the vulnerability in Windows NT programs. An unidentified Microsoft executive told the Union-Tribune it was unknown if the attack was related to Microsoft Chairman Bill Gates' appearance Tuesday at a Senate hearing where he defended his company against allegations of antitrust violations. ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu "But if we have to use force, it is because we are America; we are the indispensable nation." ---Secretary of State Madeleine K. Albright http://www.jya.com/see-far.htm

2 1

Re: Digital Bearer Settlement
by Bill Stewart 17 Dec '03

17 Dec '03

Nice article, and I'll have to see if I can get Ian to talk about HINDE for this month's Bay Area Cypherpunks. One thing I noticed while reading it, though, is that you still have "and then you go to jail" at the end of some transaction failure branches, though most of the failure branches end with "Nothing happens". While you're not doing book entry at every step, bearer instruments still depend on the maker honoring them, whether it's exchanging the bank note for gold pieces or trading the digicash bits for Federal Reserve Notes -- "then the banker goes to jail" can still happen, and a digicash world may not have as many S&L Bailout political favors as the Reagan Years provided. Also, there are the transactions where you trade digicash for goods&services, and there's still the problem of making sure the goods&services got delivered, making sure the payment got delivered, and dealing with poor quality products. For purely digital products, like consulting hours, movies, and microcode, there are protocols that can take care of the exchange, but for goods&services involving real stuff, like pizza delivery, there's still an element of trust required. Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

2 1

RE: Your Trade Posting
by 01088496＠17733.com 17 Dec '03

17 Dec '03

Dear Trader, We saw your posting and would like more information... We are open to discovering a new product and true opportunity. We would like to take this opprotunity to introduce ourselves as manufacturers and exporters for Hot-Selling products in these categories: Health Care, Personal Electronics, Security and Home & Gifts. More than that, we offer China price at Japanese quality. OEM projects are welcome. Are you marketing on the Internet? If not, YOU SHOULD!! Discover the secrets of Online Marketing! REACH "MILLIONS" - ABSOLUTELY FREE - WITH OUR AMAZING NEW USER-FRIENDLY INTERNET MARKETING EMAIL SOFTWARE! ELMED provides everything your company needs to communicate around the world, around the clock: manage a commercial email system, collect email addresses from multiple sources, create personalized messages, and email out to your list at the touch of a button. If we can further assist you, please do not hesitate to contact me directly at <nikolaa(a)usa.net>. We look forward to being able to develop a long and mutually beneficial business relationship. Best Regards, Elmed International (China,HongKong,Cyprus) Ltd Nikola ************** The products Every Home Will Want *************** (*) LAUNDRY BALLS "CODE WASH" ANTI-BACTERIAL, HYPO-ALLERGENIC, ECONOMICAL SOAP SUBSTITUTE, NON-TOXIC, ENVIRONMENTALLY SAFE, REUSABLE UP TO 750 TIMES Say Goodbye to Detergents !!! It's a whole new concept in washing that's so economical, it saves time, energy, water and fabric softener. (*) FULLY AUTOMATIC TREATMENT APPARATUS "World's Best Health Care Product" Effective pain & disease relief; Improves metabolism, blood circulation, the nervous system and immunity function; Gold medal EUREKA-Brussel (*) BACK-STOP Gets Stolen Cars Back /ON-LINE AUTO ALARM/ Patented anti-theft paging facility that allows users to immobilise a car being stolen, from a safe distance. (*) The World's Leading Internet Marketing Tools! Get Your Business Noticed. You cannot successfully market your product, service, or MLM on the Internet without our tools: - Precision WebPage Email Address Collector will begin searching for targeted email addresses - The World's Number #1 Bulletproof Bulk Email Software - The best Web Site Submission software available ! Auto submits your Web Site to hundres of Major Search Engines. - The Web Position Analyser software to analyze, to track, and to help you improve all your Internet search positions (*) IDEAL PRODUCTS FOR MAIL ORDER, TV SHOP, MLM, DIRECT MARKETING : - OPTIMAX Internet Relaxation Tool - "EINSTEIN" - A BRAIN WAVE ENHANCING MACHINE - CAMMY-BELLE Apparatus for Beautification & Weight Reduction - ROCKY-BO Magnetic Beauty-Fit Apparatus - WONDER CREAM Human body-cell potential activator - SLEEP SOOTHER (THE DREAM MACHINE) - $3.55 Personal Organizer (Data Bank) - A WONDERFUL WORLD OF SOUNDS - Talking Children's Books - New Solar Products (lights, radio, premiums...) . . . AND MUCH MORE !!!

1 0

List of college and graduate courses in crypto and security
by Avi Rubin 17 Dec '03

17 Dec '03

I maintain a list of college and gruaduate level courses in security and cryptography at http://www.cs.nyu.edu/~rubin/courses.html >From time to time, I like to update the list. If you know of a full semester course in crypto or security that is not on my list please let me know. URLs are especially useful. Also, if you see something on my list that is out of date, let me know. Thanks, Avi ********************************************************************* Aviel D. Rubin rubin(a)research.att.com Secure Systems Research Dept. Adjunct Professor at NYU AT&T Labs - Research 180 Park Avenue http://www.research.att.com/~rubin/ Florham Park, NJ 07932-0971 Voice: +1 973 360-8356 USA FAX: +1 973 360-8809 --> Check out http://www.clark.net/pub/mjr/websec/ for a new book on web security (The Web Security Sourcebook). *********************************************************************

1 0

WARNING!
by Ekkoh1 17 Dec '03

17 Dec '03

Warning! You're about to see something great! If you are interested, visit this web site.... http://207.36.85.71 or click here!

1 0

$.03 PHONE CALLS?
by debiloo＠juno.com 17 Dec '03

17 Dec '03

$.03 PHONE CALLS? 1+ dialing and 800 incoming Hard To Believe... But TRUE With the amazing new Technology, you'll see calls on your phone bill for $.06, $.04......even $.03 Best of all, it doesn't matter what company you're now using. You don't need to switch carriers! Call anytime and leave your name,phone # and a representative will call you back with information the phone company never wanted you to find out about. Don't wait , call now! you'll love what we have to share with you on this exciting New Technology! Call: Owen @ 1-408-393-0106

1 0

No Subject
by Ken Williams 17 Dec '03

17 Dec '03

Hello, I have more of a general privacy rather than a crypto question. I am trying to set up "tripwires" in the various computer accounts that i have so i will know if a superuser or sysadmin has accessed them. (it should be taken for granted at this point that all sensitive or personal data is encrypted and/or stored on floppies) i of course am only concerned with doing so for accounts that i don't already have su access with. i have accounts on various flavors of UNIX, but i am most interested in tripwires/scripts for Solaris 2.4-6. so far, the best i have been able to come up with is a couple of very ineffective tripwires. 1. a few lines in .Xlogout that write the host/date stamp to a file that is hidden a few directories deep. - this of course only works if someone logs in to my account using my own login/passwd, and it doesn't work over dialup at all. 2. i have a .environment file that will write all of the relevant user info to a file if that user adds my directory with the "add" command - this will catch all superuser accesses *if and only if* they add my directory. they could simply cd into my directory to bypass it. anyone have any ideas for tripwires or any other methods i can use, having only regular user access, to monitor ANY accesses made to my account, especially by superusers/sysadmins? thanks for your consideration of this question, ken

4 3

Feds bust Inet gambling
by David Honig 17 Dec '03

17 Dec '03

All parties were consenting but the Fed doesn't like it. First the virtual betting parlors. Then the virtual banks and cryptocash. http://dailynews.yahoo.com/headlines/technology/wired/story.html?s=n/reuters /980304/wired/stories/gambling_1.html Wednesday March 4 4:56 PM EST U.S. authorities launch Internet gambling crackdown NEW YORK (Reuters) - U.S. federal authorities charged 14 people on Wednesday with running gambling sites on the Internet in violation of federal laws. In complaints unsealed in Manhattan Federal Court, the U.S. Attorney's office charged the 14 with using Internet Web sites and telephone lines to bet on U.S. football, basketball, hockey and baseball games, charging a 10 percent commission per bet. At least some of the defendants were scheduled to appear before a U.S. magistrate judge later on Wednesday. The defendants were charged with using Internet sites to open bettor accounts, usually with a minimum deposit of $500, and then accepting bets on games and game score spreads and maintaining accounts for clients. Client funds were directed to banks or addresses in such offshore locations as Antigua, Curacao, Costa Rica and Panama, where betting is legal. But the complaints alleged that the six operations conducted much of their business within U.S. borders. One defendant, Steven Budin, 27, of SDB Global (www.sdbg.com) said his business used the Internet only for marketing, not to take bets. "We don't take wagers over the Internet," he said. ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu "But if we have to use force, it is because we are America; we are the indispensable nation." ---Secretary of State Madeleine K. Albright http://www.jya.com/see-far.htm

2 1

No Subject
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

In doing a search on the "RELIGIOUS FREEDOM AMENDMENT", Lycos popped over 2000 hits. In checking out several sites, this one seemed the most rational in discussing the issue. http://www.religioustolerance.org/const_am.htm

1 0