- cypherpunks-legacy - lists.cpunks.org

JavaScript to grab email
by Jyri Kaljundi 17 Dec '03

17 Dec '03

Another annoying feature in JavaScript and Netscape. Have a look at <http://www.popco.com/grabtest.html> The page uses JavaScript to steal your e-mail address and sends a test e-mail message to the address it grabbed. It works with Netscape, which is probably only browser supporting JavaScript. Probably there will soon be thousands of pages which include this code, and people using Netscape 2.0 will be spammed with commercial messages. So just put some false e-mail address in your Netscape browser to disable this feature. The script was developed and announced by Glenn Fleishman, moderator of the Internet Marketing mailing list. Thanks for letting people know. Jüri Kaljundi jk(a)digit.ee Digiturg http://www.digit.ee/

5 6

IBM Breakthrough?
by John Young 17 Dec '03

17 Dec '03

IBM has an ad in the Feb 26 New Yorker where a joker e- mails a recipe-swapping friend in Osaka that "I'll teleport you some goulash." The text then states: Margit is a little premature, but we are working on it. An IBM scientist and his colleagues have discovered a way to make an object disintegrate in one place and reappear intact in another. It sounds like magic. But their breakthrough could affect everything from the future of computers to our knowledge of the cosmos. What is this breakthrough or is it just a chump tease?

3 2

Re: Internet Privacy Guaranteed ad (POTP Jr.)
by dan＠milliways.org 17 Dec '03

17 Dec '03

Perhaps you should apply for an export license for your software. I'm sure that the ability to use your system across national borders fits nicely within your marketing strategy. To do so, you simply submit your product to the U.S. National Security Agency, and submit a Commodity Jurisdiction application to the State Department. After the NSA evaluates its security, you'll be able to sell your product overseas. Please see pages 610-618 of Applied Cryptography, Second Edition for general information on the process. By the way, you might note that Cypherpunks is only a mailing list, there is no way to get the signed consent of everyone on the list to agree to anything, much less formal rules of a contest. My suggestion is to post the OTP-expansion algorithm to sci.crypt. It's really in all of our best interests to have the greatest number of people examining your product. Think of the publicity it will generate. Your work will remain protected with whatever patents or copyrights you have applied for. This approach is nothing new, RC2 and RC4 were both posted to sci.crypt. Both are in wider use today because of it. Both algorithms stood up to many people's tight scrutiny. I think your algorithm should be given the chance to do the same. Dan ************************************************************************** Support your local info-calypse dan(a)milliways.org "The Internet cannot be regulated. It's not that laws aren't relevant, it's that the nation state is not relevant." Nicholas Negroponte, 1996 The Cypherpunks: Civil liberties through complex mathematics. **************************************************************************

4 5

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

I have just read your conditions for releasing the information tha the group felt was necessary to evaluate your product. A couple of comments. First, the Cypherpunks are not an organized group who can agree to your conditions. This is simply a mailing list not a corporate entity to be contracted with. To attempt to treat them as such and to use their resources for your marketing gain is, in my opinion, less than honest. If the code has not been broken in 5 months, nothing will have been proved. A better model to follow would be that used (eventually) by Netscape. Release the code for comment and make changes based on weaknesses discovered by the group. My last point has to do with one of your restrictions. Why will you not release the information to Canadians? It cannot be ITAR, because it does not apply to Canadians. How can you claim that the Cypherpunks failed to break your system if you exclude its most brilliant members! <G>. Regards from Canada, Tim Philp =================================== For PGP Public Key, Send E-mail to: pgp-public-keys(a)swissnet.ai.mit.edu In Subject line type: GET PHILP ===================================

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Kristian Sagi wrote: [..] > Only 6 are connected ... Has anyone ideas, how this card works ... i > something like telephone card hardware tutorials or something ... I [..] What kind of telephone card? Probably a smart card with PK crypto which isn't so easy to defeat. In terms of technical details, check 2600 magazine (but avoid alt.2600, since there's more noise there than this group has) or do a web search. You might want to check other magazines like Hac Tic (no longer printed?) - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMSqqvSoZzwIn1bdtAQHIMQF+N7aisKNZZ+wM7sSUSRxfo7cZ2DC1maxR 8i3tFjE8yPc6CPbuQf4j5vwcPBa64D9N =IPIj -----END PGP SIGNATURE-----

1 0

Re: Internet Privacy Guaranteed ad (POTP Jr.)
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 15:24 2/20/96, Ed Carp wrote: >On Wed, 21 Feb 1996, Tim Philp wrote: > >> The issue that I have not seen you address is one that has been >> brought up by several posters to this thread. This issue has to do with >> the fact that if you generate all of the keys (or whatever) what is to >> stop someone from offering one of your employees a LARGE bribe to cough up >> the keys? > >Not to mention GAK. No bribe needed - just a "suit" showing up with what The threat is mote. IPG generates the keys. Therefore, their system is insecure from the user's point of view. This is just about as fundamental of a security flaw as you are ever going to find. Let's not waste our time on IPG (what a misnomer) any longer. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

>(0) I'm not aware of any class library objects or methods in stand-alone Java >for calling the local mail transport agent. Is there any class library >support in Java+{Navigator, HotJava, Mosaic, NetCruiser, the AOL web tool, >etc.} for applet calls to the local mail agent that's configured in the >browser ? A look at the documentation does not show one. You may have to implement the whole MTA protocol yourself :-(. It does occur to me that such a library would only be possible in a browser that knows (via configuration) how to find MTAs. Good luck - Bill ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

The original message was received at Wed, 21 Feb 1996 03:37:32 -0500 (EST) from ncrgw1@localhost ----- The following addresses have delivery notifications ----- sandiegoca.ncr.com!chris.claborne (unrecoverable error) ----- Transcript of session follows ----- 451 sandiegoca.ncr.com!chris.claborne... reply: read error from ncr-sd.sandiegoca.attgis.com. 550 sandiegoca.ncr.com!chris.claborne... Host unknown (Name server: ncr-sd.sdca.attgis.com.: host not found) ----- Message header follows ----- Return-Path: cypherpunks(a)toad.com Received: from ncrgw1.UUCP (ncrgw1@localhost) by ncrhub5.attgis.com (8.7.3/8.7.3) with UUCP id DAA22660 for sandiegoca.ncr.com!chris.claborne; Wed, 21 Feb 1996 03:37:32 -0500 (EST) Received: by ncrgw1.ATTGIS.COM; 21 Feb 96 03:37:17 EST Received: from toad.com by relay3.UU.NET with SMTP id QQadvt15500; Wed, 21 Feb 1996 03:22:15 -0500 (EST) Received: by toad.com id AA18685; Tue, 20 Feb 96 19:22:49 PST Received: from cs.umass.edu (freya.cs.umass.edu) by toad.com id AA18672; Tue, 20 Feb 96 19:22:36 PST Received: from thor.cs.umass.edu by cs.umass.edu (5.65/Ultrix3.0-C) id AA26087; Tue, 20 Feb 1996 22:22:16 -0500 Received: (from lmccarth@localhost) by thor.cs.umass.edu (8.6.12/8.6.9) id WAA12154 for cypherpunks(a)toad.com; Tue, 20 Feb 1996 22:22:15 -0500 From: lmccarth(a)cs.umass.edu Message-Id: <199602210322.WAA12154(a)thor.cs.umass.edu> Subject: Re: Secure Split To: cypherpunks(a)toad.com (Cypherpunks Mailing List) Date: Tue, 20 Feb 1996 22:22:15 -0500 (EST) Reply-To: cypherpunks(a)toad.com (Cypherpunks Mailing List) In-Reply-To: <9602210251.AA16675(a)cti02.citenet.net> from "Jean-Francois Avon (JFA Technologies, QC, Canada)" at Feb 20, 96 09:47:39 pm X-Mailer: ELM [version 2.4 PL25] Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-cypherpunks(a)toad.com Precedence: bulk ----- Message body suppressed -----

1 0

Re: Bravo, mostly (Re: Banned Zambian newspaper now on the Web)
by Frank Stuart 17 Dec '03

17 Dec '03

>[Please forward along to fight-censorship if non-redundant] > >I applaud your quick response. However, you should read more and consult >people with area expertise. At least do the five-minute AltaVista and >DejaNews search I did; don't just trust the information that gets sent to >you, or you're likely to be used. [...] Good advice. In this case, the copy of the banned issue of _The Post_ came from a confidential source, but I have reason to believe it is a true copy. I know very little about Zambia and had nothing to do with the additional commentary. | (Douglas) Hofstadter's Law: | It always takes longer than you expect, even Frank Stuart | when you take into account Hofstadter's Law.

1 0

Telephone card tech. howto needed
by Kristian Sagi 17 Dec '03

17 Dec '03

Hello guys ! Here is used such telephone cards like this one here ... Sorry , not very good picture here ;-) ... In the middle of this plastic card /------------\ is a chip ... See this picture here : | | | | | | [1] [2] [3] [4] | | | | | | | | | | | | | ___ | | | | | | | | | | | | | | | | | [ Chip ] | ----- | | \ | | | \ \------------/ | | | | [5] [6] [7] [8] As you see this chip has 6 legs ... and telephone card has 8 connectors ... Only 6 are connected ... Has anyone ideas, how this card works ... i mean something like telephone card hardware tutorials or something ... I have some ideas ... There is a something : when disconnect connector number [8] then The machine can't decrement the money value in card ... maybe he reads the value.. then he decrement the value in card , then reads "the new value" and if comparing between the old and the new value are the same , then machine disconnects he's telephone line ... Ok ... this is only one point ... But i want to know how this tech. works ... Anything is welcome ... please ... BTW Don't put answers to here , please mail-to me : sagi(a)physic.ut.ee Kristian

1 0