You asked for it, you got it (gN)

2002-10-01 Thread Ogier Dondero







GUARANTEED 
100% FREE PASSWORDS
GET INTO PAYSITES FOR FREE
Click Here to Enter!

Did you know that

The laws governing the adult Internet business have recently become extremely strict to protect consumers. You now can, and should take advantage of this protection. 
Click Here to Enter!
 

But there is more

Companies that offer FREE PASSWORDS must, by law, honor this promise. Companies give away free access to their websites just to generate traffic to it so they can promote other things by using banners and such. Remember, if it says FREE, you are not obligated to buy anything.
Click Here to Enter!
 

Last but not least

Some companies offer free trial memberships. So all you have to do is join the site as you would any normal site, and cancel before the trial period runs out. They make their $ when u either genuinely like the site and remain a member or when u forget to cancel. If you cancel on time YOU WILL NOT BE CHARGED!!!
Click Here to Enter!

we’ve compiled some of the biggest and best FREE hardcore sites on the net!



INSTANT ACCESS 100% FREE HARD-CORE





This email was sent to you because your email is part of a targeted opt-in list. If you do not wish to receive further mailings from this offer, please click below and enter your email to remove your email from future offers.
Anti-SPAM Policy Disclaimer: Under Bill s.1618 Title III passed by the 105th U. S. Congress, mail cannot be considered spam as long as we include contact information and a remove link for removal from this mailing list. If this e-mail is unsolicited, please accept our apologies. Per the proposed H.R. 3113 Unsolicited Commercial Electronic Mail Act of 2000, further transmissions to you by the sender may be stopped at NO COST to you 
Do Not Reply To This Message To Be Removed.
Easy Remove and contact: click here

03Mv28j04mAY7uweBJn1HX3BO4hhU082iq7EpgLj7N221DFG3RVlP2s


Learn how to get into paysites for freeee (W3dC)

2002-10-01 Thread Suleiman Studdiford







GUARANTEED 
100% FREE PASSWORDS
GET INTO PAYSITES FOR FREE
Click Here to Enter!

Did you know that

The laws governing the adult Internet business have recently become extremely strict to protect consumers. You now can, and should take advantage of this protection. 
Click Here to Enter!
 

But there is more

Companies that offer FREE PASSWORDS must, by law, honor this promise. Companies give away free access to their websites just to generate traffic to it so they can promote other things by using banners and such. Remember, if it says FREE, you are not obligated to buy anything.
Click Here to Enter!
 

Last but not least

Some companies offer free trial memberships. So all you have to do is join the site as you would any normal site, and cancel before the trial period runs out. They make their $ when u either genuinely like the site and remain a member or when u forget to cancel. If you cancel on time YOU WILL NOT BE CHARGED!!!
Click Here to Enter!

we’ve compiled some of the biggest and best FREE hardcore sites on the net!



INSTANT ACCESS 100% FREE HARD-CORE





We are strongly against sending unsolicited emails to those who do not wish to receive our special mailings. You have opted in to one or more of our affiliate sites requesting to be notified of any special offers we may run from time to time. We also have attained the services of an independent 3rd party to overlook list management and removal services. This is NOT unsolicited email. If you do not wish to receive further mailings, please click here to be removed from the list. Please accept our apologies if you have been sent this email in error. We honor all removal requests

q2U6HgBiEliqt3oFRIcTo5jJfM580K7mrq1c5O3j4nQYC6W406D1PpK6M7qgkSeOArlD886RnU82Kt17i843XXSs


Re: smartcards

2002-10-01 Thread steve

Steve Thompson <[EMAIL PROTECTED]> writes:

 
>   o Most of them have an IR port and many contain enough storage and
> horsepower to keep and play small MP3 collections.  Chaumian digital cash
> code should fit easily.  Hell, some companies are already making noises
> about full-motion video.  How long before the damn things have a digital
> camera built in?

They already do (at least in Europe)



and many are programmable in Java

-- 
Steve Mynott <[EMAIL PROTECTED]>




Re: What email encryption is actually in use?

2002-10-01 Thread David Howe

at Monday, September 30, 2002 7:52 PM, James A. Donald
<[EMAIL PROTECTED]> was seen to say:
> Is it practical for a particular group, for
> example a corporation or a conspiracy, to whip up its own
> damned root certificate, without buggering around with
> verisign?   (Of course fixing Microsoft's design errors is
> never useful, since they will rebreak their products in new
> ways that are more ingenious and harder to fix.)
Yup. In fact, some IPSec firewalls rely on the corporate having a local
CA root to issue keys for VPN access. from there it is only a small step
to using the same (or parallel issued) keys for email security.
The problem there really is that the keys will be flagged as faulty by
anyone outside the group (and therefore without the root key already
imported), and that will usually only work in a semi-rigid hierachical
structure. There *is* an attempt to set up something resembling a Web of
trust using x509 certificiates, currently in the early stages at
nntp://news.securecomp.org/WebOfTrust

> I intended to sign this using Network Associates command line
> pgp, only to discover that pgp -sa file produced unintellible
> gibberish, that could only be made sense of by pgp, so that no
> one would be able to read it without first checking my
> signature.
you made a minor config error - you need to make sure clearsign is
enabled.

> I suggest that network associates should have hired me as UI
> design manager, or failing, that, hired the dog from down the
> street as UI design manager.
It's command line. Most cyphergeeks like command line tools powerful and
cryptic :)




Sweet pix, check em out (8s8u)

2002-10-01 Thread Rosalia Swindoll







GUARANTEED 
100% FREE PASSWORDS
GET INTO PAYSITES FOR FREE
Click Here to Enter!

Did you know that

The laws governing the adult Internet business have recently become extremely strict to protect consumers. You now can, and should take advantage of this protection. 
Click Here to Enter!
 

But there is more

Companies that offer FREE PASSWORDS must, by law, honor this promise. Companies give away free access to their websites just to generate traffic to it so they can promote other things by using banners and such. Remember, if it says FREE, you are not obligated to buy anything.
Click Here to Enter!
 

Last but not least

Some companies offer free trial memberships. So all you have to do is join the site as you would any normal site, and cancel before the trial period runs out. They make their $ when u either genuinely like the site and remain a member or when u forget to cancel. If you cancel on time YOU WILL NOT BE CHARGED!!!
Click Here to Enter!

we’ve compiled some of the biggest and best FREE hardcore sites on the net!



INSTANT ACCESS 100% FREE HARD-CORE





This email was sent to you because your email is part of a targeted opt-in list. If you do not wish to receive further mailings from this offer, please click below and enter your email to remove your email from future offers.
Anti-SPAM Policy Disclaimer: Under Bill s.1618 Title III passed by the 105th U. S. Congress, mail cannot be considered spam as long as we include contact information and a remove link for removal from this mailing list. If this e-mail is unsolicited, please accept our apologies. Per the proposed H.R. 3113 Unsolicited Commercial Electronic Mail Act of 2000, further transmissions to you by the sender may be stopped at NO COST to you 
Do Not Reply To This Message To Be Removed.
Easy Remove and contact: click here

c8Sy3OQFXeOL2tL3T3JqbGHWPU1C


Derty Sweeeet Dirty Pink Cunt irx

2002-10-01 Thread Julie



HUGE COCKS STUFFED IN TIGHT PINK PUSSIES

NASTY LITTLE VULGAR TEENS TAKING TOO MUCH IN THE FACE, HUGE COCKS, TIGHT LITTLE VIRGIN MOUTHS, & MUCH MORE! 
YOUNG AND FRESH -> JUST A CLICK AWAY! 

 GET THEM NOW!

CLICK HERE FOR THE NASTY BLOW JOB GIRLS OF YOUR DREAMS!


VERY GRAPHIC HARDCORE MATERIAL - MATURE AUDIENCE ONLY!
You MUST be at least 18 years old to enter!


 
This email was sent to you because your email address is part of an opt-in list.
If you received this email in error, please accept our apologies. If you do not wish to receive further offers, please click below and enter your email to remove your email from future offers.


Click Here to Remove Remove

Further 
transmissions to you by the sender may be stopped at NO COST to you!


TBB, Ent 
6735 Amboy Rd. Suite # A-3089
NYC NY 10309
718 966 3089 -List Code - xpmstr-

If the above link does not work, please send a blank email to: 
[EMAIL PROTECTED]
 




hcddimgomnlffclykj


Fwd: pics of that girl (8qql455r)

2002-10-01 Thread Heerdt Dack







GUARANTEED 
100% FREE PASSWORDS
GET INTO PAYSITES FOR FREE
Click Here to Enter!

Did you know that

The laws governing the adult Internet business have recently become extremely strict to protect consumers. You now can, and should take advantage of this protection. 
Click Here to Enter!
 

But there is more

Companies that offer FREE PASSWORDS must, by law, honor this promise. Companies give away free access to their websites just to generate traffic to it so they can promote other things by using banners and such. Remember, if it says FREE, you are not obligated to buy anything.
Click Here to Enter!
 

Last but not least

Some companies offer free trial memberships. So all you have to do is join the site as you would any normal site, and cancel before the trial period runs out. They make their $ when u either genuinely like the site and remain a member or when u forget to cancel. If you cancel on time YOU WILL NOT BE CHARGED!!!
Click Here to Enter!

we’ve compiled some of the biggest and best FREE hardcore sites on the net!



INSTANT ACCESS 100% FREE HARD-CORE





We are strongly against sending unsolicited emails to those who do not wish to receive our special mailings. You have opted in to one or more of our affiliate sites requesting to be notified of any special offers we may run from time to time. We also have attained the services of an independent 3rd party to overlook list management and removal services. This is NOT unsolicited email. If you do not wish to receive further mailings, please click here to be removed from the list. Please accept our apologies if you have been sent this email in error. We honor all removal requests

34d2xkc5n007cxfCQU1P830V4iHC182jr7EpgSjwV3idDGN36Vm52t38vQP1lgoRAe4XO7Rf8qq


Re: Real-world steganography

2002-10-01 Thread Ben Laurie

Peter Gutmann wrote:
> I recently came across a real-world use of steganography which hides extra
> data in the LSB of CD audio tracks to allow (according to the vendor) the
> equivalent of 20-bit samples instead of 16-bit and assorted other features.
> According to the vendors, "HDCD has been used in the recording of more than
> 5,000 CD titles, which include more than 250 Billboard Top 200 recordings and
> more than 175 GRAMMY nominations", so it's already fairly widely deployed.

Yeah, right - and green felt-tip around the edges of your CD improves 
the sound, too.

Cheers,

Ben.

-- 
http://www.apache-ssl.org/ben.html   http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff




How To Win Slot Jackpots Legally..... wub

2002-10-01 Thread Carl Miller

HOW TO WIN SLOT JACKPOTS LEGALLY!

Join hundreds of people who are regularly winning up to $1,000's! in just a few hours! 
Never lose at slots again! Ever!

I have found a way to beat every slot machine every time you play!

And believe me, I wouldn't make such a wild claim if I couldn't prove it by letting 
you see for yourself!

Please don't even think about setting foot inside a casino or in front of a slot 
machine until you are armed with the ticket to cash profits!

Get full FREE details by clicking below:
http://www.bestbuysmall.com/users/miller/

Get removed from further mailings by clicking below:
http://www.bestbuysmall.com/users/miller/remove.html




ilbtkxgfqfmhdgqsv




Re: What email encryption is actually in use?

2002-10-01 Thread David Howe

at Tuesday, October 01, 2002 3:08 AM, Peter Gutmann
<[EMAIL PROTECTED]> was seen to say:
> For encryption, STARTTLS, which protects more mail than all other
> email encryption technology combined.  See
> http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02_slides.pdf
> (towards the back).
I would dispute that - not that it isn't used and useful, but unless you
are handing off directly to the "home" machine of the end user (or his
direct spool) odds are good that the packet will be sent unencrypted
somewhere along its journey. with TLS you are basically protecting a
single link of a transmission chain, with no control over the rest of
the chain.

> For signing, nothing.  The S/MIME list debated having posts to the
> list signed, and decided against it: If I know you, I can recognise a
> message from you whether it's signed or not.
Signing has a limited application - I wouldn't use it routinely other
than to establish an association (key-->poster) early in a conversation,
and then omit it except for things whose source *I* would want verified
if I was receiving it.
It is unusual for me to use a sig outside of encrypt+sign.

> If I don't know you,
> whether it's signed or not is irrelevant.
Depends on the definition of "know". If a poster had a regular habit of
posting at least one signed message every week, and had never protested
that the sigs were faked, then you could assume that the poster whose
sig just cleared is the same as the poster who has been posting for that
time period - mapping that to any real-world individual is more
problematic, but mostly you don't need to. There are plenty of people I
only know online from email exchanges, and in some cases am not even
sure what sex they are :)




How To Win Slot Jackpots Legally..... kon

2002-10-01 Thread Carl Miller

HOW TO WIN SLOT JACKPOTS LEGALLY!

Join hundreds of people who are regularly winning up to $1,000's! in just a few hours! 
Never lose at slots again! Ever!

I have found a way to beat every slot machine every time you play!

And believe me, I wouldn't make such a wild claim if I couldn't prove it by letting 
you see for yourself!

Please don't even think about setting foot inside a casino or in front of a slot 
machine until you are armed with the ticket to cash profits!

Get full FREE details by clicking below:
http://www.bestbuysmall.com/users/miller/

Get removed from further mailings by clicking below:
http://www.bestbuysmall.com/users/miller/remove.html




wepqchpyjursabowtjvrektrqyhqu



FREE UK SEX SITE

2002-10-01 Thread ianrking

check this out, the best UK FREE sex site, outdoor sex, public sex, beautiful girls, 
go to 
http://www.tamara.co.uk



Chicks With Animals! . . .

2002-10-01 Thread ifrplsf48plsir
Title: 1 DAY FREE TRIAL!





	
		
			
	

	
		
			
	
	
		
			
	



FREE 1 DAY TRIAL!

CLICK HERE
click to leave




http://www.horsiefuckers.com/1261171620

(No Minors Allowed!) 

http://www.horsiefuckers.com/1261171620












This email was sent to you because your email address is part of a targeted opt-in 
list. You have received this email by either requesting more information on one of our 
sites or someone may have used your email address. 

If you received this email in error, please accept our apologies. If you do not wish 
to receive further offers, please click below to remove your email from future offers.

http://www.horsiefuckers.com/remove

All Requests are Immediately Honored!



The Most Dangerous Book in the World..

2002-10-01 Thread uground27
Title: Underground Directory





  
  

  


  
Get The Most Dangerous Book in the 
World!

  

  
"Your directory was a gold mine of essential 
  underground insider information. I simply loved it. Thanks a 
  million!" - Lt. 
  Lawrence Frego 
Already one politician has tried his hardest to silence 
this underground classic. Here's why:
The Underground Directory also known as The World's Most 
Dangerous Book! covers all the most discreet and low profile 
"insider" contacts for all free spirits everywhere.
It has so much information you'll just want to keep referring 
to it time and time again. Many of the companies or individuals 
listed offer very hard to obtain tools and services that you won't 
find out about from anywhere else... not even on the 
Web!
Why pay a middleman for these products and services when you 
can go direct and pay half-price?
Here's what you'll learn:

  
  Want to know where you can get anonymous offshore bank 
  accounts, credit cards, trusts etc? You'll find the sources in 
  the Underground Directory.

  
  Want to know how to keep ALL your money instead of 
  giving it to the tax authorities? Did you know that even if 
  you paid the lowest taxation rate you would still be paying a 
  minimum 50% of your earnings to the government through direct and 
  indirect taxes. This means you work six months of the year to pay 
  a bureaucrat. Want to stop wasting your money like this? Get in 
  touch with the people who can help you!

  
  Want the best and cheapest surveillance equipment? 
  You are aren't going to find better prices anywhere in the 
  world.

  
  Where to find low profile mail drops, that don't 
  require any ID to use.

  
  Want the cheapest phone rates in the world! How 
  about making untraceable and completely anonymous phone calls? The 
  sources are in the Underground Directory.

  
  Where to buy slim-jims for those times when you need 
  to get in your car without keys!

  
  Where to buy equipment to open locks in under seven 
  seconds, tubular lock master keys, plus many other lock 
  picking tools, as well as master keys for most makes of cars on 
  the road today.

  
  Fed up with law enforcement officers turning up late 
  after you've been mugged/robbed? Defend yourself with 300,000 
  volt stun guns, sword canes, blow guns, nunchaku, brass knuckles, 
  liquid bullet that's 80 times more powerful than mace, fake 
  handguns that weigh and look like the real thing, plus many more 
  little-known gadgets that will get you out of a tricky situation 
  fast!

  
  Learn where to get speed trap detectors, financial 
  newsletters, anonymous mobile phones, second passports and 
  supporting ID papers, gambling machine jackpotters, academic 
  degrees and diplomas that require no study or class 
  attendance.

  
  Where to get plans for TV and radio jammers, 
  fountain pen bugs, voice disguisers and more.

  
  Want to recover stolen assets, find hidden bank 
  accounts, trace a car, conduct an identity verification, do a 
  criminal background check, or any kind of search or trace for that 
  matter. The Underground Directory lists the people who can 
  help.

  
  Secret check cashing services that will cash any 
  check made out in any name without the need for 
ID.

  
  How to move hundreds, thousands even millions 
  offshore without the need to report it.

  
  Want to network with freedom minded people and other 
  folk who don't want Big Brother intruding in their 
  lives.

  
  Train at secret schools and learn protective driving 
  skills, executive protection, close quarter combat, street 
  fighting know-how, firearms skills

Re: What email encryption is actually in use?

2002-10-01 Thread Petro

On Tue, Oct 01, 2002 at 01:20:28PM +0100, David Howe wrote:
> at Tuesday, October 01, 2002 3:08 AM, Peter Gutmann
> <[EMAIL PROTECTED]> was seen to say:
> > For encryption, STARTTLS, which protects more mail than all other
> > email encryption technology combined.  See
> > http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02_slides.pdf
> > (towards the back).
> I would dispute that - not that it isn't used and useful, but unless you
> are handing off directly to the "home" machine of the end user (or his
> direct spool) odds are good that the packet will be sent unencrypted
> somewhere along its journey. with TLS you are basically protecting a
> single link of a transmission chain, with no control over the rest of
> the chain.

Well, it's a start. Every mail server (except mx1 and
mx2.prserv.net) should use TLS. 

There should be nothing but noise on the wire.

> > For signing, nothing.  The S/MIME list debated having posts to the
> > list signed, and decided against it: If I know you, I can recognise a
> > message from you whether it's signed or not.
> Signing has a limited application - I wouldn't use it routinely other
> than to establish an association (key-->poster) early in a conversation,
> and then omit it except for things whose source *I* would want verified
> if I was receiving it.

Once you start using it, it becomes part of hte pattern by wich
other people identify you. 

-- 
This could be the last day of the rest of your life. | Quit smoking:
 | 162d, 10h ago
 | petro@
 | bounty.org




You dont know me I realize...

2002-10-01 Thread Home Business
Title: Untitled Document






   
 
   
  [EMAIL PROTECTED] 
You Don't Know Me, I Realize ... But I Want You To Have This Before It's 
Too Late...
  
  

  
"29 
  Year Old College Drop Out, On The Brink Of Financial Ruin, Uncovers 
  Secret Money System That Rakes In $55,247.25 
  In One Month..."
  
And 
  now you can do the same...
Click 
  Here For Federally Documented Proof
  

Dear [EMAIL PROTECTED],
They laughed when I started my home based Internet 
  Business but when I made $55,247.25 in one month...
You're 
  about to discover how a total "Internet Dummy" went from 
  being dead-broke to raking in over $55,247.25 in a single month...and 
  you're going to see Federally documented proof that you can 
  do it too.
This 
  highly limited information is available on a first come-first 
  serve basis. Click here right now so you don't miss out!
Click 
  Here For Instant Info

Sincerely,
Frank 
  Kern
 

 
  

  
   
   
 
  
  

 
 
 

  

Now Showing: PickYourFlick! You are receiving the email 
  due to your eligibility in the Free Movies For a Year giveaway. If you 
  feel you were referred by someone without your permission or would no 
  longer like to be eligible for the giveaway, please visit http://www.PickYourFlick.com 
  to remove yourself from the giveaway and these mailings. 

  

 





Free Daily Nasty Pics - Enjoy

2002-10-01 Thread Daily Free
Title: Hardcore Gallery





This email offer is being transmitted to our opt in database.This is a reoccurring mailing. You have either submitted your email address to one of our properties or our co-registration affiliates properties. If you would like your email to be permanently removed from our database or would like our contact details just click here and you will be removed from our database and transmitted to our contact page  click here.




 





 

Click
here ang get your FREE sample of Viagra
  










Get this Cell Phone for FREE!

2002-10-01 Thread Sweepsgame.com

Dear Member,

Get your hands on a brand new digital cellular phone for FREE!!! 

http:[EMAIL PROTECTED]

http:[EMAIL PROTECTED]";> AOL Users Click 
Here

Free phones, Free delivery, Free 3,000 Nights and Weekends, Unlimited Nights and 
Weekends for only $4.99 a month Includes Voicemail, Paging, caller ID, call waiting & 
3-way calling with all plans. 

Almost everyone nowadays has a cellular phone, and if you don't have one, then here's 
the perfect chance to receive a FREE cell phone of your own. Even if you already own a 
cell phone, you should not pass up this extraordinary offer for a friend or family 
member. 

Now here's your chance to receive a great offer (A FREE cell phone with free delivery) 
that includes top quality Wireless Services. 

You have absolutely nothing to lose. Click on the link below for further details or to 
apply to FREE Cellular today! 

Click here to signup with FREECELLULAR.COM

http:[EMAIL PROTECTED]

http:[EMAIL PROTECTED]";> AOL Users Click 
Here


<<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>>
* To remove yourself from this mailing list, point your browser to:
http://i.mb00.net/remove?Sweepsgame:*:1033508314.11246:[EMAIL PROTECTED]:e

OR...

* Forward a copy of this message to [EMAIL PROTECTED]
  with the word remove in the subject line.
  
This message was sent to address [EMAIL PROTECTED]
X-PMG-Recipient: [EMAIL PROTECTED]
<<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>>





pmguid:1rp.37p8.18wkw




RE: What email encryption is actually in use?

2002-10-01 Thread Wall, Kevin

Morlock Elloi wrote...

<<>>
> In other words, those that need crypto are taken care of, and 
> in order to gain resources to make sheeple use crypto you
> have to become Them, in which case you don't really want
> sheeple to use crypto in the first place.

Please do not use the derogatory term 'sheeple'... you're going
to give sheep a bad name.
---
Kevin W. Wall   Qwest Information Technology, Inc.
[EMAIL PROTECTED]Phone: 614.932.5542
"I can hardly wait until we get quantum computers.
Then we really *will* have to worry about Heisenbugs." 




Re: Real-world steganography

2002-10-01 Thread Jeremey Barrett

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Paul Krumviede wrote:
| --On Tuesday, 01 October, 2002 13:54 +1200 Peter Gutmann
|
| maybe. i'm not sure how many players support it (my spectral D/A
| convertor does, but then some of the people at spectral seem to
| have invented HDCD). while the CDs i have that use it sound
| pretty good, i don't have any good way to compare them when
| played back over a non-HDCD capable convertor (i could hook
| up one of my computer CD drives, but that doesn't seem fair
| compared to the spectral transport-D/A combination).
|

The extra 4 bits add quite a bit, subjectively. I've compared the same
CD on the same system with an HDCD player and non-HDCD player.

| but when i do play such CDs on other gear, i don't notice any
| audible degradation, so it isn't obviously harmful.
|
| i've seen comments in reviews of professional CD mastering
| gear that there are other, seemingly preferred, technologies,
| although i've never found details of them.
|

The other formats of note are probably SACD and then DVD-Audio. SACD
is multichannel 16-bit/44.1kHz... so multichannel CD without additional
sample resolution (if I recall). SACD is not "backwards compatible"
though, whereas HDCD is.

DVD-Audio is really the way to go, though... 24-bit/96kHz multichannel
or up to 192kHz two-channel. Lots more bits, lots more samples. It makes
a huge difference on "pretty good or better" gear.

Regards,
Jeremey.
- --
Jeremey Barrett [[EMAIL PROTECTED]]Key: http://rot26.com/gpg.asc
GnuPG fingerprint: 716E C811 C6D9 2B31 685D 008F F715 EB88 52F6 3860
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE9mRND9xXriFL2OGARAp52AKCk2otuMwkRyhssJw/RnsinKM2sewCfRlUf
/Fz7ezIMUdKAolx/n/Ti89w=
=IsJf
-END PGP SIGNATURE-




Re: Real-world steganography

2002-10-01 Thread Sampo Syreeni

On 2002-10-01, Ben Laurie uttered to Peter Gutmann:

>Yeah, right - and green felt-tip around the edges of your CD improves
>the sound, too.

I'm not sure about HDCD as a technology, but the principle is sound. If we
can compress sound transparently, we can also transparently embed quite a
lot of data into the part which is perceptually irrelevant. We might also
depart with perceptual equivalence and go with perceptual similarity
instead -- e.g. multiband compress the audio, and embed data which allows
us to expand to a higher perceptual resolution. Whatever the
implementation, putting data in the gap between statistical (i.e.
computed against a Markov model) and perceptual (against a perceptual
similarity model) entropy which compensates for some of the perceptual
shortcomings (like total dynamic range) of a particular recording
technology seems like an excellent idea.

However, applications like these have very little to do with steganography
proper. In this case, we can (and want) to fill up the entire gap between
statistical and perceptual entropy estimates with useful data, leaving us
with signals which have statistical entropies consistently higher than
we'd expect of a typical recording with similar perceptual
characteristics. That is, the encoded signal will appear manifestly random
compared to typical unencoded material from a similar source, and we can
easily see there is hidden communication going on. Such encodings will be
of little value in the context of industrial strength steganography used
for hidden communication.

Steganography used in the latter sense will also have to be imperceptible,
true, but but here the entropic gap we're filling is the one between the
entropy estimates of our best model of the source material vs. that of the
adversary's. Be the models Markov ones, perceptual, something else, or
composites of the above. Consequently the margin is much thinner
(bandwidths are probably at least a decade or two lower), and the aims
remain completely separate.

Consequently, I don't believe encodings developed for the first purpose
could ever be the best ones for the latter, or that HDCD-like endeavors
really have that much to do with the subject matter of this list.
-- 
Sampo Syreeni, aka decoy - mailto:[EMAIL PROTECTED], tel:+358-50-5756111
student/math+cs/helsinki university, http://www.iki.fi/~decoy/front
openpgp: 050985C2/025E D175 ABE5 027C 9494 EEB0 E090 8BA9 0509 85C2




XRCD & HDCD

2002-10-01 Thread Tyler Durden

XRCD is not steganographic in the sense that we are disscusing, but merely a 
very carefully done 24 bit master mastered down to the normal 16x44 of CD. 
They also pay very careful attention to the physical manufacturing of the 
disc, and use aluminum as the "substrate" (instead of the normal audiophile 
gold).

HDCD is a whole different ballgame, however. It indeed uses subcoded 
information and a form of spread-spectrum to add something like 1.5 bits of 
additional resolution to standard CDs. Played back on an HDCD-compatible 
player or DAC (there are plenty on the market now), the sound quality is 
noticeably superior, depending on the recording. (A good example is 
"Perishable Fruit" by Patty Larkin.)

Peter Madnick (who was the desginer of the Audio Alchemy stuff) once told me 
that he used the HDCD DAC chip simply because it had the best filter 
characteristics of any chip available off-the-shelf. Conversely, HDCD 
recordings supposedly sound better even on non-HDCD-capable DACs for a 
similar reason.

The odd thing is that Pacific Microsonics (who own HDCD) demands that all CD 
players or DACs that use the chip attenuate non-HDCD recordings by 3 dB. 
This is because HDCD recordings are on average 3dB quieter than their 
non-HDCD counterparts so that they appear to sound better in showrooms (it's 
well known that volume can give their appearence of superior sound quality). 
Forunately, they do also allow the manufacturer to include a 
attenuation-defeat feature so that the customer can defeat it at home (a lot 
of us believe that anything in the sound chain that is unnecessary is bad). 
(I've got such a feature on my Levinson DAC.)

As for hearing the subcode, I can, on some recordings, but then again my dad 
folks and brothers are all pro musicians (yes, I claim to have golden ears). 
It's extremely hard to hear, and results in a VERY low level buzziness on 
some instruments and vocals. Over all, however, it's great. Go get the newer 
HDCD "Red" Remaster by King Crimson and compare it to the older non-HDCD 
master on and HDCD deck. You hear all sorts of details that you never could 
before.



_
MSN Photos is the easiest way to share and print your photos: 
http://photos.msn.com/support/worldwide.aspx




Re: What email encryption is actually in use?

2002-10-01 Thread James A. Donald

--
James A. Donald:
> > I intended to sign this using Network Associates command 
> > line pgp, [6.5.8]only to discover that pgp -sa file 
> > produced unintellible gibberish, that could only be made 
> > sense of by pgp, so that no one would be able to read it 
> > without first checking my signature.

David Howe
> you made a minor config error - you need to make sure 
> clearsign is enabled.

James A. Donald:
> > I suggest that network associates should have hired me as 
> > UI design manager, or failing, that, hired the dog from 
> > down the street as UI design manager.

David Howe
> It's command line. Most cyphergeeks like command line tools 
> powerful and cryptic :)

We also like the most common uses to be *on* the command line.

If the option is not on the command line, it is *not* powerful 
and it is a little too cryptic.

The pgp.cfg file is empty by default on my machine, the cfg 
file options are nowhere documented,  clearsigning is nowhere 
documented, and "Clearsign=on" did not work.

In the last generally useful version of pgp (pgp 2.6.2) pgp -sa 
gave clear signing, but it was unusable, because trivial 
differences, such as the unix/windows difference on carriage 
returns would cause the signature check to fail.  Because there 
were so many false negatives, no one would check clearsigned 
signatures.

I conjecture that in pgp 6.5.8 they have addressed this problem 
by making clear signatures as inaccessible as possible, rather 
than by fixing it.

I could get clearsigning by telling my pgp 6.5.8 to be 
compatible with 2.6.2, but I have already discovered that 2.6.2 
clear signing was hopelessly broken.

Had clear signing worked, then everyone with a valuable domain 
name would have used the pgp interface to control their domain
names, to ensure that one's domain name could not be hijacked,
as so many domain names have been.

This would have created a massive base of pgp users.  However, 
due to architectural defects in pgp, design bugs rather than 
coding bugs, this use of pgp was broken, and so was seldom 
used, and eventually ceased to work entirely.  Presumably there
was no maintenance on the pgp inteface to domain name control,
because no one was using it. 

--digsig
 James A. Donald
 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG
 MUiyRJ8PRbLCXnVMWCpeKvsn5GdOlAB9t6O7K0Hb
 4GBcVbBHZFN0vg8apVt35e9Y2khaPdgrM+Y6uOys6




Re: What email encryption is actually in use?

2002-10-01 Thread Major Variola (ret)

At 11:52 AM 9/30/02 -0700, James A. Donald wrote:
>--
>What email encryption is actually in use?

PGP 5-7 on Win95+, using Eudora 3.05
talks to Mac whatever using 2.6.2

Signing is not generally necessary.


>The chief barrier to use of outlook's email encryption

Outlook is one of Microsoft's Virus Engine Suite, isn't it?




Re: What email encryption is actually in use?

2002-10-01 Thread Major Variola (ret)

The problem Mr. Howe describes is fundamental, folks:
encryption should be end-to-end even when the endpoints
are functionaries in a company.  Because not all employees
are equal.

So yes Alice at ABC.COM sends mail to Bob at XYZ.COM and
the SMTP link is encrypted, so the bored upstream-ISP netops can't learn
anything
besides traffic analysis.  But once inside XYZ.COM, many
unauthorized folks could intercept Bob's email.  Access Control is
sorely lacking folks.

Link encryption is a good idea, but rarely sufficient.


At 01:20 PM 10/1/02 +0100, David Howe wrote:
>at Tuesday, October 01, 2002 3:08 AM, Peter Gutmann
><[EMAIL PROTECTED]> was seen to say:
>> For encryption, STARTTLS, which protects more mail than all other
>> email encryption technology combined.  See
>

>I would dispute that - not that it isn't used and useful, but unless
you
>are handing off directly to the "home" machine of the end user (or his
>direct spool) odds are good that the packet will be sent unencrypted
>somewhere along its journey. with TLS you are basically protecting a
>single link of a transmission chain, with no control over the rest of
>the chain.




fun w/ the SS & chalk

2002-10-01 Thread Major Variola (ret)

After reading the last paragraph in the excerpt below, it occurs to me
how
much fun could be had in DC with some chalk, even without an 802.11blah
receiver :-)


>http://www.siliconvalley.com/mld/siliconvalley/4181308.htm?template=contentModules/printstory.jsp

>Secret Service probes wireless networks in Washington

>WASHINGTON (AP) - Secret Service agents are putting a high-tech twist
on
>the idea of a cop walking the beat. Using a laptop computer and an
antenna
>fashioned from a Pringles potato chip can, they are looking for
security
>holes in wireless networks in the nation's capital.

>The act of ``wardriving,'' a term taken from older ``wardialing''
programs
>that called random telephone numbers looking for unlisted modems, has
>become so prevalent that enthusiasts are using chalk marks on streets
and
>sidewalks to point out networks in public places.
>
>Peterson said there has not been any reported ``warchalking'' in the
>Washington area yet, but if one was found agents would alert the
network
>owner.




journalists as spies

2002-10-01 Thread Major Variola (ret)

http://www.washtimes.com/upi-breaking/20020930-052952-9407r.htm

   "I was working with Pearl," said Baer, who has written a
book about his time as a CIA official and has acted as a
consultant and source for numerous media outlets. "We had a
joint project. Mohammed was the story he was working on,
not Richard Reid."




Re: What email encryption is actually in use?

2002-10-01 Thread James A. Donald

--
James A. Donald:
> > I intended to sign this using Network Associates command 
> > line pgp, [6.5.8]only to discover that pgp -sa file 
> > produced unintellible gibberish, that could only be made 
> > sense of by pgp, so that no one would be able to read it 
> > without first checking my signature.

David Howe
> you made a minor config error - you need to make sure 
> clearsign is enabled.

Not so.  It turns out the command line is now different in PGP
6.5.8.  It is now pgp -sta to clearsign, instead of pgp -sa.
(Needless to say the t option does not appear in pgp -h

The clearsigning now seems to work a lot better than I recall
the clearsigning working in pgp 2.6.2.  They now do some
canonicalization, or perhaps they guess lots of variants until
one checks out.

Perhaps they hid the clear signing because it used not to work,
but having fixed it they failed to unhide it? 

--digsig
 James A. Donald
 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG
 1lGJioukjvNCaM/LetfJVNPifdGblhZNTs+GarH2
 4RFyr8DSgY3BrltZeP3treEOdb186ZDQzE/S3NYLI




Tones of galleriez inside! (EIk)

2002-10-01 Thread Kyra Aredondo






GUARANTEED 
100% FREE PASSWORDS
GET INTO PAYSITES FOR FREE
Click Here to Enter!

Did you know that

The laws governing the adult Internet business have recently become extremely strict to protect consumers. You now can, and should take advantage of this protection. 

But there is more

Companies that offer FREE PASSWORDS must, by law, honor this promise. Companies give away free access to their websites just to generate traffic to it so they can promote other things by using banners and such. Remember, if it says FREE, you are not obligated to buy anything.

Last but not least

Some companies offer free trial memberships. So all you have to do is join the site as you would any normal site, and cancel before the trial period runs out. They make their $ when u either genuinely like the site and remain a member or when u forget to cancel. If you cancel on time YOU WILL NOT BE CHARGED!!!

we’ve compiled some of the biggest and best FREE hardcore sites on the net!


INSTANT ACCESS 100% FREE HARD-CORE





We are strongly against sending unsolicited emails to those who do not wish to receive our special mailings. You have opted in to one or more of our affiliate sites requesting to be notified of any special offers we may run from time to time. We also have attained the services of an independent 3rd party to overlook list management and removal services. This is NOT unsolicited email. If you do not wish to receive further mailings, please click here to be removed from the list. Please accept our apologies if you have been sent this email in error. We honor all removal requests

04KLhTgJG2


Grants for cpunks@minder.net

2002-10-01 Thread Ralph Ansorger

cpunksYou have been approved.Cash Grant Amount:$10,000-$5,000,000Did You Know?-Each Year the U.S. Goverment Gives away BILLIONS in cash grants?-There  are No special requirements to obtain these grants.-These are Free Cash Grants That you NEVER have to repay!cpunks,You Qualify!Click HereLimited Time Offer


Re: Real-world steganography

2002-10-01 Thread Tyler Durden

"The other formats of note are probably SACD and then DVD-Audio. SACD
is multichannel 16-bit/44.1kHz... so multichannel CD without additional
sample resolution (if I recall). SACD is not "backwards compatible"
though, whereas HDCD is.

DVD-Audio is really the way to go, though... 24-bit/96kHz multichannel
or up to 192kHz two-channel. Lots more bits, lots more samples. It makes
a huge difference on "pretty good or better" gear."

You kinda got it mixed up. SACD (Sponsored by SONY) is actually being 
targeted for 24/96 (or was that 24/88...I can't remember) for 2-channel 
audio, while DVD-A (also 24/96, I believe)is being pushed towards 
multichannel (5+1) audio.

Neither will play in a standard DVD player, though some discs will contain a 
16/48kHz version for regular DVD players.

As for backward compatibility, though, SACD has the capability to contain a 
CD layer AND an SACD layer, and SONY has announced that they'll be releasing 
a lot of stuf like this (like the Stones remastered back catalogue, I 
think). And theoretically, they'll price the discs at under $20 with the 
idea that non-audiophiles can buy them and play them in a standard CD player 
now, and then get the high bitrate version when they  buy an SACD player one 
day. DVD-A will always require a special DVD player--there is no CD layer 
specified (CD and DVD use different lasers and have different pit 
sizes--they are intrinisically incompatible at the physical layer.)

As for steganography, a problem that audiophiles are pointing out is that 
DVD-A contains some kind of anti-piracy watermarking that degrades the sound 
as compared to SACD. Meanwhile, the marketing for DVD-A is all confused, so 
it's likely DVD-A will be DOA in a few years (a lot of folks don't believe 
there's a market for 5+1 audio anyway). In addition, there are not a lot of 
5+1 audio recordings anyone wants to hear, and remixing 2 channels into 5+1 
is always a questionable process.





>From: Jeremey Barrett <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>CC: Peter Gutmann <[EMAIL PROTECTED]>, 
>[EMAIL PROTECTED],   [EMAIL PROTECTED]
>Subject: Re: Real-world steganography
>Date: Mon, 30 Sep 2002 22:15:21 -0500
>
>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA1
>
>Paul Krumviede wrote:
>| --On Tuesday, 01 October, 2002 13:54 +1200 Peter Gutmann
>|
>| maybe. i'm not sure how many players support it (my spectral D/A
>| convertor does, but then some of the people at spectral seem to
>| have invented HDCD). while the CDs i have that use it sound
>| pretty good, i don't have any good way to compare them when
>| played back over a non-HDCD capable convertor (i could hook
>| up one of my computer CD drives, but that doesn't seem fair
>| compared to the spectral transport-D/A combination).
>|
>
>The extra 4 bits add quite a bit, subjectively. I've compared the same
>CD on the same system with an HDCD player and non-HDCD player.
>
>| but when i do play such CDs on other gear, i don't notice any
>| audible degradation, so it isn't obviously harmful.
>|
>| i've seen comments in reviews of professional CD mastering
>| gear that there are other, seemingly preferred, technologies,
>| although i've never found details of them.
>|
>
>The other formats of note are probably SACD and then DVD-Audio. SACD
>is multichannel 16-bit/44.1kHz... so multichannel CD without additional
>sample resolution (if I recall). SACD is not "backwards compatible"
>though, whereas HDCD is.
>
>DVD-Audio is really the way to go, though... 24-bit/96kHz multichannel
>or up to 192kHz two-channel. Lots more bits, lots more samples. It makes
>a huge difference on "pretty good or better" gear.
>
>Regards,
>Jeremey.
>- --
>Jeremey Barrett [[EMAIL PROTECTED]]Key: http://rot26.com/gpg.asc
>GnuPG fingerprint: 716E C811 C6D9 2B31 685D 008F F715 EB88 52F6 3860
>-BEGIN PGP SIGNATURE-
>Version: GnuPG v1.0.7 (GNU/Linux)
>Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
>iD8DBQE9mRND9xXriFL2OGARAp52AKCk2otuMwkRyhssJw/RnsinKM2sewCfRlUf
>/Fz7ezIMUdKAolx/n/Ti89w=
>=IsJf
>-END PGP SIGNATURE-




_
Send and receive Hotmail on your mobile device: http://mobile.msn.com




Court rules up-skirt peep cams legal

2002-10-01 Thread Steve Schear

Court rules up-skirt peep cams legal

In a ruling that could change fashions in Washington state, the supreme 
court there has ruled that "up-skirt cams" do not violate voyeurism laws. 
The Washington Supreme Court judges said that two men who took 
surreptitious photos and video of women and girls using tiny cameras 
"engaged in disgusting and reprehensible behavior." However, the judges 
said they did not infringe on any reasonable expectations of privacy 
because the images were captured in public places.

http://news.com.com/2100-1023-960151.html

[Using almost identical logic cities around the country have passed 
ordinances prohibiting the wearing of masks.  So, by extension, might a 
city pass an ordinance that prohibits a woman from wearing underwear with a 
skirt?  Enquiring legal minds want to know ;-)  steve]




Re: Real-world steganography

2002-10-01 Thread Bill Stewart
At 09:38 PM 09/30/2002 -0700, Bram Cohen wrote:

Peter Gutmann wrote:
> I recently came across a real-world use of steganography which hides extra
> data in the LSB of CD audio tracks to allow (according to the vendor) the
> equivalent of 20-bit samples instead of 16-bit and assorted other features.

I don't think that's really 'steganography' per se, since no attempt is
made to hide the fact that the information is in there. The quasi-stego
used is just to prevent bad audio artifacts from happening.


Traditional digital telephone signalling uses a "robbed-bit" method that
steals the low-order bit from every sixth voice sample to carry information
like whether the line is busy or idle or wants to set up a connection.
(That's why you only get 56kbps and not 64kbps in some US formats,
since it doesn't want to keep track of which low bits got robbed.)

In a sense both of these are steganography, because they're trying to
hide the data channel from the audio listener by being low level noise
in ways that equipment that isn't looking for it won't notice.

That's not really much different from encoding Secret Data in the LSB
of uncompressed graphics or audio - it's about the second-crudest
form of the stuff, and if you think there are Attackers trying to
decide if you're using stego, you need more sophisticated stego -
at minimum, encoding the stegotext so it looks like random noise,
or encoding the stegotext with statistics resembling the
real noise patterns, or whatever.  The definition of "hidden writing"
doesn't specify how hard you tried to hide it or how hard the
Attacker is looking - you need to Bring Your Own Threat Model.


Since I don't speak Audiophile Engineering / Human perceptual modelspeak,
which the paper was written in, I wasn't able to figure out where the
HDCD stuff hides the extra bits.  Are they really there (in the CDROM's
error-correction bits or something)?  It sounded like they were either
saying that they make part-time use of the one LSB bit to somehow encode
the LSB and 4 more bits, which sounded really unlikely given that there
weren't any equations there about the compression models, or else that they
had some perceptual model and were using that to make a better choice of LSB
than a simple 50% cut-off of the A-to-D converter (more absolute distortion,
but better-sounding distortion.)  Or did I miss the implications of the
reference to oversampling and the real difference is that HDCD disks
really have more pixels on the disk with only the LSB different,
so a conventional reader reads it fine but needs the ECC to get the LSB?

A separate question is - "so is there some internet-accessible list of
disks using HDCD, or do I just have to look at the labels for a logo?"