- cypherpunks-legacy - lists.cpunks.org

Re: Freeh says FBI doing great, supports Weaver killer
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tim May wrote: > I wonder how the SS at Stanford will react to my "Death Penalty for Waco > Commander in Chief!" placard? I'll ask around at alt.threaten.the.president, but they seem to have lost a lot of posters, even though the group is only a week old.

1 0

Munition (RSA/Perl) T-shirts Now Shipping From Stock!
by dhenson＠itsnet.com 17 Dec '03

17 Dec '03

By now, everyone knows about the TSHIRT that has been classified as a MUNITION by the US Goverment. If you don't know, just send email to wepinsto(a)colossus.net with a subject of 'TSHIRT STORY' and you will receive full details via return email. We have thus far shipped over 850 of the RSA/Perl Munition T-shirts and are now in a position to ship most orders from stock. You no longer have to pay your money and wait for months to get your t-shirt while someone else collects interest on YOUR money. We (WEPIN Store) can ship your t-shirt within two weeks of receiving your order. Orders are still pouring in. Don't be left out. Order your's today. (Read some comments of our customers at the end of this post.) For more information on how to own this classic example of civil disobedience, just send email to wepinsto(a)colossus.net with the subject of 'SHIRT'. (You don't have to be a US/Canadian citizen to request the info.) Or, if you have WWW access, just point your Web browser to: http://colossus.net/wepinsto/wshome.html By the way, 25% of the profits from the sale of the tshirt (in the US/Canada) goes to the PHIL ZIMMERMANN LEGAL DEFENSE FUND to help defend the author of PGP from harassment and possible prosecution by the Fedgoons. And if you get arrested for wearing the Munitions Tshirt, we'll refund your purchase price. :-) ====++++====++++ Here are some testimonials from a few of our many satisfied customers: "Got mine this afternoon. Wooohhaah!! Already had some folks at Blockbusters point, mumble to themselves, and then ask me what the munitions warning meant. This is going to be fun!! I'm a cyphernerd for sure..." "Thanks for the great T-shirt. I'm making copies of your paper order form for others." "I think I'll have to wear the shirt over to Logan Airport and hang around the International Arrivals terminal a few times. <G>" "I received the T-shirt on 8/3. Thank you, it has been a pleasure dealing with you!" "The first thing that I did after it arrived was to don it and then go visit the office of one of our visiting researchers from Russia. :)~" ====++++====++++ Get your Munitions Tshirt now. Who knows how long they'll stay in production! Don Henson, Managing Director (PGP Key ID = 0X03002DC9) West El Paso Information Network (WEPIN) email: wepinsto(a)colossus.net Check out The WEPIN Store at URL: http://colossus.net/wepinsto/wshome.html

1 0

Executing code on the stack, was Re: netscape bug
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

> very big, and you can do what you like. The 8lgm people wrote a demo > for Sparc as a proof of concept. It's worth mentioning that 8lgm (Eight little green men;) has recently changed their policy on how long they wait to make exploit scripts available. It has resonance with what's happened here on cypherpunks lately. They used to publish that there was a hole, but would hold up quite a while on making the exploit scripts available. They were trying to make it safer for manufacturers and give them time to make fixes available first. What actually happened is that manufacturers would put the fixes on the backburner, and often not get around to them at all. 8lgm found that publishing the exploit scripts usually resulted in quick fixes from the vendors. Now the exploitation details are available quite quickly. Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

1 0

Re: Another Netscape Bug (and possible security hole)
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

> > [I hear Perry in the background groaning and muttering "I told you so"] > These buffer overflow bugs should be taught in every programming > 101 course along with fencepost errors. > > I'm not even sure if I want to write the obligatory program to exploit > the hack given that some malicious jerk would probably use it > on his home page to attack people. > You should consider that there are people with a lot of expertise that are constantly on the lookout for things like this. I would bet a nickel to a donut that many people in the cracker community discovered this a long time ago and that exploit code was written long ago. How many people logged in as root use netscape? If the source was available we'd have told them about this long ago. Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

1 0

Forwarding of Federalist Papers from Canada for U.S. Citizens promoting democracy
by Six 17 Dec '03

17 Dec '03

If you have a desire to educate the citizens of foreign countries as to the value of democracy, I would be pleased to forward a copy of the Federalist Papers to any email address you desire, upon receipt of only the email addresses, with no instructions or requests.

1 0

business intelligence or BI
by mjsus＠atlanta.com 17 Dec '03

17 Dec '03

>It's important here to distinguish economic "espionage" and economic >"intelligence." > There is also the difference between the business intelligence and business espionage ! The business intelligence is used to collect, evaluate, analyze etc. the business information and data that may include competitors, markets, economic trends, suppliers among others. The sources of this information are publicly and legally available for all companies and individuals. The formal or informal business intelligence system can be used. The successful use of the traditional business intelligence will result in the best results, when this information and data is eveluated, analyzed and disseminated in the most intelligent, reliable, timely and accurate manner. 100% of companies are already using the business intelligence (all companies are just not calling it the BI): some more successfully than others. The business intelligence can be used both for strategic and tactical purposes. Regards, Mark

1 0

Netscape bug and the IMG tag.
by goedel＠tezcat.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- You can plunk a nasty url into the SRC field of an IMG tag, thus eliminating the need for clicking on the offending url. Also, it makes it harder to check the html of a page. Check out http://www.redweb.com/experiment/bug2 html if you feel like rebooting. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQBgAwUBMGMCc3If3YegbdiBAQFTMgJYsAEPkSWTtGDswAYpT1repQjd8n3unMg3 CIXNlxmg43BkMgyNRrqYP2P61aMJt4FwPZt+PgE4NYxVj6PzaPtsf/Y/6BSsWNxb cKcr =/ORS -----END PGP SIGNATURE----- Dietrich Kappe | Red Planet http://www.redweb.com Red Planet, LLC| "Chess Space" | "MS Access Products" | PGP Public Key 1-800-RED 0 WEB| /chess | /cobre | /goedel/key.txt Web Publishing | Key fingerprint: 8C2983E66AB723F9 A014A0417D268B84

1 0

Reno and Freeh to be assassinated!
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Dave Del Torto wrote: > "All members of Congress, and particularly those of us on the Intelligence > Committee, have a responsibility to find the proper balance between forward > thinking commercial policies and the unquestioned need to protect the > security of the American people and America's national interests." said > HPSCI Chairman Porter J. Goss I think we should all send Chairman Goss a letter of appreciation for his offer to assassinate Child Murderer Janet Reno and Murderer Louis Freeh. Most politicians are too cowardly to promise strong actions such as this. > Terrorist groups that plot to blow up buildings; drug cartels > that seek to poison our children, and those who proliferate in deadly > chemical and biological weapons are all formidable opponents of peace and > security in the global society. These bad actors must know that the United > States' law enforcement and national security agencies, working under the > proper oversight, will have the tools to frustrate illegal and deadly > activity and bring international criminals to justice," Goss said. Chairman Goss is also going to prosecute the employees of the CIA as well. It is good to finally see someone taking a strong stance in this regard. What a wonderful, wonderful man. He is probably a good husband and father too.

1 0

Re: Another Netscape Bug (and possible security hole)
by Duncan Frissell 17 Dec '03

17 Dec '03

At 01:17 PM 9/22/95 -0400, Thomas Grant Edwards wrote: >On Fri, 22 Sep 1995, Dietrich J. Kappe wrote: > >> Netscape 1.1N on a powermac crashes hard on that url. If anyone wants to try >> it out, I've put up a simple page with the url at >> http://www.redweb.com/experiment/bug.html > >Netscape also crashes (error 1) on regular Macs...sigh. I'm contacting >someone who just wrote a http server to see how tough it would be drop >some code on the stack. > >-Thomas On my 486 running Windoze for Workgroups 3.11 and the latest Netscape Beta it causes Netscape to die but doesn't lock me up. Generally I've found Netscape blows up in a much firendlier way than other Windoze programs. I can often recover the Netscape session itself and it doesn't lock me up as much. DCF > > >

1 0

Worms and New Netscape Bug
by lethin＠ai.mit.edu 17 Dec '03

17 Dec '03

Although Netscape will certainly fix their new bugs, it's likely that many old copies will remain on computers on the net, and the holes will remain. Netscape could "fight" against this with a modified worms/webcrawler which looks for blatantly dangerous domain names in URLs and reports them to "CERT" or blockware companies like Surfwatch. For example, they'd find the foo* link at the bottom of My page Not a complete solution obviously (e.g. the server could selectively reply to requests, and hide from the webcrawler IP). What happens when someone using the AOL browser clicks on one of these HREF's... does it crash all of AOL? --- Concurrent VLSI Arch. Group 545 Technology Sq., Rm. 610 MIT AI Lab Cambridge, MA 02139 (617)-253-0972

1 0