snooping cell phone pictures via URLs?

2003-09-17 Thread Major Variola (ret)
I received a few URLs pointing to cell phone pictures stored at pictures.sprintpcs.com. The URLs contained long seemingly-random strings, though with my sample (of 2) I only saw 5 identical characters in the same locations. Has anyone done any less casual cryptanalysis on these kind of URLs? One

Police state

2003-09-17 Thread Major Variola (ret.)
Good article at http://wired.com/news/conflict/0,2100,60440,00.html on abuses of anti-terrorism (tm) laws. - The unit of coercivity for magstrips is being changed to the "Ashcroft"

Verisign's Wildcard A-Records and DNSSEC Plans?

2003-09-17 Thread Bill Stewart
Matt - I'm interested in finding out Verisign's plans for DNSSEC support for the *.com and *.net wildcards. Are there obvious semantics for securing them? What does it mean to say that "64.94.110.11" is or is not certified by .com as the address for bad-example-12345.com , or that something else is

Re: Versign creates man-in-the-middle attack on DNS

2003-09-17 Thread Neil Johnson
Official notice from verisign. Today VeriSign is adding a wildcard A record to the .com and .net zones. The wildcard record in the .net zone was activated from 10:45AM EDT to 13:30PM EDT. The wildcard record in the .com zone is being added now. We have prepared a white paper describing VeriSign

Re: Verisign's Wildcard A-Records and DNSSEC Plans?

2003-09-17 Thread Morlock Elloi
> What does it mean to say that "64.94.110.11" is or is not > certified by .com as the address for bad-example-12345.com , > or that something else is? Is it really the same as a > wild-card that points to real sites? Your Best Practices says that At this point it is immaterial what Verisign wil

Re: Versign creates man-in-the-middle attack on DNS

2003-09-17 Thread Kerry Thompson
Tim May said: > > I didn't get a Verisign page...I go the usual error. > > "Could not open the page http://www.thisisjunk55666.com/ because the > server www.thisisjunk55666.com could not be found." > Try http://www.thisisjunk55666.net - I think .com hasn't been switched or hasn't propagated ye

Neocon flashbacks

2003-09-17 Thread Steve Schear
http://www.newamericancentury.org/statementofprinciples.htm Notice the date and signatures... ...if America were tempted to ''become the dictatress of the world, she would be no longer the ruler of her own spirit.'' What empires lavish abroad, they cannot spend on good republican government at

Re: Versign creates man-in-the-middle attack on DNS

2003-09-17 Thread Neil Johnson
On Monday 15 September 2003 09:50 pm, Tim May wrote: > > I didn't get a Verisign page...I go the usual error. > > "Could not open the page http://www.thisisjunk55666.com/ because the > server www.thisisjunk55666.com could not be found." Try: http://www.bfafasfas.com Word on the North Americ

Versign creates man-in-the-middle attack on DNS

2003-09-17 Thread Neil Johnson
Just a few hours ago Versign modified the Internet's root DNS servers to respond to ANY DNS lookup that doesn't resolve in a real hostname to return the IP address of one their servers where they claim to have a search engine. For example, if you access http://www.thisisjunk55666.com , you will

Mexifornia Driver's License

2003-09-17 Thread Tim May

Re: Mexifornia Driver's License

2003-09-17 Thread Adam Shostack
On Mon, Sep 15, 2003 at 04:07:02PM -0700, Bill Stewart wrote: | Tim May wrote: | > http://vikingphoenix.com/immigration/davis_sign_illegal.htm | | Does anybody remember 10+ years ago when a "Driver's License" | wasn't quite a National ID Card or a Citizenship Credential Yeah. The real problem wi

Re: Power Grab: Ashcroft overturns 4th Amend

2003-09-17 Thread Peter Fairbrother
Major Variola (ret.) wrote: > Administration Calls for Unprecedented Subpoena Powers > > http://www.latimes.com/news/nationworld/nation/la-na-subpoena14sep14,1,689004. > story?coll=la-home-todays-times > > Unlike in ordinary criminal investigations, Ashcroft would not need the > approval of a gr

Re: Mexifornia Driver's License

2003-09-17 Thread Bill Stewart
Tim May wrote: > http://vikingphoenix.com/immigration/davis_sign_illegal.htm Does anybody remember 10+ years ago when a "Driver's License" wasn't quite a National ID Card or a Citizenship Credential or a Probably-Not-A-Deadbeat-Dad Right-to-Work Card, or a Homeland Security Internal Passport, or an