Re: HEY!!! WAS: The Next Hack

Looks like we've got a perfect candidate for the first Official Cypherpunks
Press Release, folks.

   --D.

At 7:16 AM 9/23/95, Censored Girls Anonymous wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>
>Hey wait a minute!!!
>
>You HAD stated a patch would be available by Friday.
>Now we are at early next week.
>
>I watched the stock rise in the face of bad facts.
>Almost 25% of your stock changed hands yesterday.
>
>For the moment, it seems to me, anyway, you're getting
>a lot of work done here for dirt cheap. I don't know
>cypher codes very well, but I know Wall St. codes really
>well. And THEY ARE BEING VIOLATED! I am glad there is no
>anonymity on Wall St. We are starting to get into the
>realm of SEC action. And I could really care much about
>what happens out on the list.
>
>This is not a problem that lends itself to 'quick fixes'.
>For the only "quick fix you can give is still insecure crypto".
>
>That is the point of this.
>You can't really fix it.
>Most of us know it.
>The lies mount up
>on the stock price.
>
>I normally couldn't care less, I'm a Coca-Cola trader.
>My stock is at an all time high as I write this.
>It's up over 1200% in 10 years. No one can match it. (even MSFT)
>
>This is much worse than NEW COKE!
>
>For you are now better off letting them break key after key,
>server after server, until the laws change.
>
>I'd go back and talk to your management fast.
>For now you've become a pawn in a political game.
>And millions of dollars change hands daily as a result.
>
>Soon they will halt your stock trading if this keeps up.
>
>Something, in a way far worse than ever having Netscape cracked!
>
>Think about it.
>
>Love Always,
>
>Carol Anne
>ps I shipped all the postings to Washington already.
>
>>  What exactly is the point of this?  We have:
>>
>>       1) acknowledged that the RNG used in the server private-key
>>               generation has the same problem
>>
>>       2) said that we will provide a patch early next week
>>
>>       3) said that we will provide new certificates for all customers
>>
>>       4) promised to make source code for our new seed generation code
>>               publicly available
>
>>  What else do you hope to gain by breaking a server key?  I think
>>Jeff Weinstein - Electronic Munitions Specialist
>>Netscape Communication Corporation
>>jsw@netscape.com - http://home.netscape.com/people/jsw
>>Any opinions expressed above are mine.
>
>
>-----BEGIN PGP SIGNATURE-----
>Version: 2.6.2
>
>iQCVAwUBMGP6MIrpjEWs1wBlAQFh3QP8D+m5NyD4WNZEyOSzollcUDqEQusjxr5s
>0t9455KBAGnvt/5UAyaQ0JdDqZ3wRePsoC9VVxHiiITjhZGbwalcgrDVmajAXVbG
>T+Hm4PEpM7tWt+R6pMvjhGcP2ldtzZf+OErE/yCSPTooxuOX5H6bBpb5e88n0eqo
>JpbxSBXgCX4=
>=C7J9
>-----END PGP SIGNATURE-----
>--
>
>Member Internet Society  - Certified BETSI Programmer  -  Webmistress
>***********************************************************************
>Carol Anne Braddock (cab8)  carolann@censored.org   206.42.112.96
>My Homepage
>The Cyberdoc
>***********************************************************************
>------------------ PGP.ZIP Part [017/713] -------------------
>M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M
>MF=O0H+*%(-S%&>S%+FS&<LS%3(Q&#W1"<]2%`H^;,]^1C$'HBN8PX$4SYAU^
>MPGD<Q0ZLA0D+,`MCT!LA**4M[-JPAK9F?40!AJ,CW"'%DR#:'9?Q)3[%<DQ`
>-------------------------------------------------------------
>for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/

--
Dave Mandl
dmandl@panix.com
http://wfmu.org/~davem

David Mandl writes:
 > Looks like we've got a perfect candidate for the first Official
 > Cypherpunks Press Release, folks.

Then sign me off.  If something that inane were to go out with the
word "cypherpunk" affixed to it, I'd cringe.  It could only be worse
if it ended with the catchphrase "hack the planet".  

[ David quoted the "Censored Girl": ]
 > >Hey wait a minute!!!
 > >
 > >You HAD stated a patch would be available by Friday.
 > >Now we are at early next week.
 > >
 > >I watched the stock rise in the face of bad facts.
 > >Almost 25% of your stock changed hands yesterday.

So?

 > >For the moment, it seems to me, anyway, you're getting
 > >a lot of work done here for dirt cheap. I don't know
 > >cypher codes very well, but I know Wall St. codes really
 > >well. And THEY ARE BEING VIOLATED! I am glad there is no
 > >anonymity on Wall St. We are starting to get into the
 > >realm of SEC action. And I could really care much about
 > >what happens out on the list.

I won't even dignify this by calling it speculation; it's simply and
absolutely wrong.  Any "Netscape insiders" are locked out; they
couldn't manipulate the stock price if they wanted to, and if they
have any brains in their heads at all they're absolutely the last
people on earth who'd make a move that stupid.  It won't be until
January at the very earliest that anyone who holds restricted shares
will be allowed to trade.  The stock's in all likelihood being bounced
back and forth between big technology funds, who don't give a rat's
ass about some security bug in the product.

 > >That is the point of this.
 > >You can't really fix it.
 > >Most of us know it.

Gee, I don't know that.

 > >The lies mount up
 > >on the stock price.

Huh?  Do you actually have any earthly idea how the market works?

 > >I normally couldn't care less, I'm a Coca-Cola trader.
 > >My stock is at an all time high as I write this.
 > >It's up over 1200% in 10 years. No one can match it. (even MSFT)
 > >
 > >This is much worse than NEW COKE!

Ridiculous.

 > >Soon they will halt your stock trading if this keeps up.

I'll eat my shoe if that happens.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| Nobody's going to listen to you if you just | Mike McNally (m5@tivoli.com) |
| stand there and flap your arms like a fish. | Tivoli Systems, Austin TX    |
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~