[e-gold-list] Re: turing number

2002-02-03 Thread Danny Van den Berghe



   Some examples of easy to remember possibilities:
   turing number:  abcdef123456
   reverse:  fedcba 654321
 
  But how do you communicate the 'reverse / offset 3 right' etc.
  instructions? They are simple algorithms that can be programmed by a
  cracker and I think really lower usability.

 Here's an idea. Set the algorithm for deciphering the Turing Code, in the
 account. That way, a cracker would not know how to respond to the turing
 question. Of course, this makes logging-in very comlicated.


Yes, of course that's what I meant.

If the turing number is  abcdef, a simple setting in the account would tell the
server how you respond to the turing number.

For example fedcba would tell the server that the turing number will be returned
in reverse order.
abc2ef returns the turing number with a fixed 2 in the 4th position.
There are a lot of very simple possibilities, easy to remember, so it is not as if
you have to remember a second passphrase.

(Default setting would be abcdef , return the turing number as is, for those who
don't want this extra security.)


Craig remarks:

 I think you guys have lost track of the whole purpose of the Turing
 number.  It is to prevent automated trials by ensuring that a human
 being is there.  What you are proposing amounts to an additional or
 longer passphrase and in no way excludes automated trials any more
 than the simple number now being used.


Well, I think somebody already demonstrated that recognising the turing number can
be automised as well..
Of course, a hacker could do an automated attack on my turing scrammble code
setting , but there is the catch.
Each time a login attempt is made with the correct passphrase but a wrong turing
return, an automated email (pgp encrypted) could be sent to the owner to alert
that the passphrase was broken. If 3 login attempts are made with correct
passphrase and wrong turing return, the account should lock for 24 hours (one
could leave all this to be set by the user of course)

With this system , even if my passphrase is stolen, my account is still safe. That
is not the case with the simple turing number system that is currently used.
My turing scrammble code setting can be very easy to remember , yet there are
enough different possibilities to make it difficult to crack it in only 3 (or
less) attempts before the account locks.

For example if my turing return code setting is like this :  abmdef   (a
fixed character m in position 3)

Turing code Return code
12345612m456
54788254m882
23356123m561

As you can see , very easy to remember, not really more complicated to login than
it is now, yet much more difficult to crack. If we use upper and lower case
characters we have over 52*6  =  300 possibilities to alter the turing
number in this very easy to remember way (replacing only one digit with a fixed
character).
Include non alphabet characters and there are thousands of very easy ways to alter
the turing code.
The chance you can crack it in 3 attempts is small.

Some other possibilities:

cabcdef  (returns seven digits, more tricky..)
def;abac
...
The user can make it as complicated as he wants to.



So, suppose the hacker cracks or steals my passphrase. Even if he can intercept
(and decrypt) the email that is sent when he got the passphrase correct, that is
not going to be much of a help to crack the turing return code in only 3
attempts..


When something like this is implemented I will feel really safe to keep more
money in my e-gold account.
Right now, I don't even know how many attempts are made to crack my passphrase


Danny

http://two-cents-worth.com/?102468EG.







---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Re: turing number

2002-02-03 Thread SnowDog

  I think you guys have lost track of the whole purpose of the Turing
  number.  It is to prevent automated trials by ensuring that a human
  being is there.  What you are proposing amounts to an additional or
  longer passphrase and in no way excludes automated trials any more
  than the simple number now being used.

As Mr. Van den Berghe demonstrated, it's much more difficult to crack than a
longer passphrase. If someone catches your keystrokes, they can obtain your
passphrase, but if someone watches you respond to a 'turing query', they
won't be able to easily figure out the algorithm being used to respond to
it.

Eric Hollander demonstrated a crypto-card once, which gave a cryptic
response to a numerical query. In order to access his website, you had to
plug in a six digit number generated by the website, and then respond with a
numerical answer generated by the crypto-card. Using a passphrase, and the
crypto-card, the security was incredibly high. You had to have the
passphrase and the crypto-card to get in.

E-Gold needs this.

SnowDog



---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Re: turing number

2002-02-03 Thread jeff fitzmyers

 For example if my turing return code setting is like this :  
 abmdef   (a
 fixed character m in position 3)

 Turing codeReturn code
 123456 12m456

I get it. I like this idea for some situations (still won't fix the 
challenge with creating multiple accounts though). If an account is 
randomly assigned a position for the user to 'fix' that would also make 
it so the user could not just pick a favorite position and character to 
use for other accounts.

Of course I would forget all these things even if I had just a few 
accounts.
- savings is a 4 in the 5th spot,
- company is a M in the 3rd spot,
- goddaughter's savings is a 5 in the 4th spot :)

I think it is important to let the user supply a pgp key so that the 
current settings can be safely emailed.

But, to provide really safe logins we should have the option of 
requiring 1 time passcodes. Lose your list of ~20?, just request a pgp 
email with new ones. A hassle to enter, but not when a dumb mistake on 
my part would expose a years worth of my Au! ACK!

Jeff


---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Re: turing number

2002-02-03 Thread Craig Spencer

On 3 Feb 2002, at 9:33, SnowDog wrote:

   I think you guys have lost track of the whole purpose of the
   Turing number.  It is to prevent automated trials by ensuring that
   a human being is there.  What you are proposing amounts to an
   additional or longer passphrase and in no way excludes automated
   trials any more than the simple number now being used.
 
 As Mr. Van den Berghe demonstrated, it's much more difficult to crack
 than a longer passphrase. 

I won't argue the security/passphrase issues.  They have been hashed
over on this list ad infinitum.  My point remains: the purpose of the
Turing number is not security per se but to eliminate automated
trials.  How well the turning number actually does this is
irrelevant.  This proposal does not serve to advance that purpose.

Best,

CCS


---
-  Virtual Phonecards - Instant Pin by Email  -
-Large Selection - Great Rates-
-  http://speedypin.com/phonecard/start.mhtml?af=743  -
---

  ***
  *  Craig  Spencer *
  *  [EMAIL PROTECTED] *
  ***

---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Fw: [undergroundpatriot] Another globalist defector, from the World Bank

2002-02-03 Thread John

Slowly, ever so slowly the truth comes out.



World Bank Insider Speaks Out
by Greg Palast February 1 2002, Fri, 3:45pm

The World Bank's former Chief Economist's accusations are eye-popping -
including how the IMF and US Treasury fixed the Russian elections



The Globalizer Who Came In From the Cold
Observer, London
Wednesday, October 10, 2001

JOE STIGLITZ: TODAY'S WINNER OF THE NOBEL PRIZE IN ECONOMICS

by Greg Palast

The World Bank's former Chief Economist's accusations are eye-popping -
including how the IMF and US Treasury fixed the Russian elections

It has condemned people to death, the former apparatchik told me. This was
like a scene out of Le Carre. The brilliant old agent comes in from the
cold,
crosses to our side, and in hours of debriefing, empties his memory of
horrors
committed in the name of a political ideology he now realizes has gone
rotten.

And here before me was a far bigger catch than some used Cold War spy.
Joseph
Stiglitz was Chief Economist of the World Bank. To a great extent, the new
world economic order was his theory come to life.

I debriefed Stigltiz over several days, at Cambridge University, in a
London
hotel and finally in Washington in April 2001 during the big confab of the
World Bank and the International Monetary Fund. But instead of chairing the
meetings of ministers and central bankers, Stiglitz was kept exiled safely
behind the blue police cordons, the same as the nuns carrying a large wooden
cross, the Bolivian union leaders, the parents of AIDS victims and the other
'anti-globalization' protesters. The ultimate insider was now on the
outside.

In 1999 the World Bank fired Stiglitz. He was not allowed quiet retirement;
US
Treasury Secretary Larry Summers, I'm told, demanded a public
excommunication
for Stiglitz' having expressed his first mild dissent from globalization
World
Bank style.

Here in Washington we completed the last of several hours of exclusive
interviews for The Observer and BBC TV's Newsnight about the real, often
hidden, workings of the IMF, World Bank, and the bank's 51% owner, the US
Treasury.

And here, from sources unnamable (not Stiglitz), we obtained a cache of
documents marked, confidential, restricted, and not otherwise (to be)
disclosed without World Bank authorization.

Stiglitz helped translate one from bureaucratise, a Country Assistance
Strategy. There's an Assistance Strategy for every poorer nation, designed,
says the World Bank, after careful in-country investigation. But according
to
insider Stiglitz, the Bank's staff 'investigation' consists of close
inspection of a nation's 5-star hotels. It concludes with the Bank staff
meeting some begging, busted finance minister who is handed a 'restructuring
agreement' pre-drafted for his 'voluntary' signature (I have a selection of
these).

Each nation's economy is individually analyzed, then, says Stiglitz, the
Bank
hands every minister the same exact four-step program.

Step One is Privatization - which Stiglitz said could more accurately be
called, 'Briberization.' Rather than object to the sell-offs of state
industries, he said national leaders - using the World Bank's demands to
silence local critics - happily flogged their electricity and water
companies.
You could see their eyes widen at the prospect of 10% commissions paid to
Swiss bank accounts for simply shaving a few billion off the sale price of
national assets.

And the US government knew it, charges Stiglitz, at least in the case of the
biggest 'briberization' of all, the 1995 Russian sell-off. The US Treasury
view was this was great as we wanted Yeltsin re-elected. We don't care if
it's
a corrupt election. We want the money to go to Yeltzin via kick-backs for
his
campaign.

Stiglitz is no conspiracy nutter ranting about Black Helicopters. The man
was
inside the game, a member of Bill Clinton's cabinet as Chairman of the
President's council of economic advisors.

Most ill-making for Stiglitz is that the US-backed oligarchs stripped
Russia's
industrial assets, with the effect that the corruption scheme cut national
output nearly in half causing depression and starvation.

After briberization, Step Two of the IMF/World Bank one-size-fits-all
rescue-your-economy plan is 'Capital Market Liberalization.' In theory,
capital market deregulation allows investment capital to flow in and out.
Unfortunately, as in Indonesia and Brazil, the money simply flowed out and
out. Stiglitz calls this the Hot Money cycle. Cash comes in for
speculation
in real estate and currency, then flees at the first whiff of trouble. A
nation's reserves can drain in days, hours. And when that happens, to seduce
speculators into returning a nation's own capital funds, the IMF demands
these
nations raise interest rates to 30%, 50% and 80%.

The result was predictable, said Stiglitz of the Hot Money tidal waves in
Asia and Latin America. Higher interest rates demolished property values,
savaged industrial production and drained national treasuries.

At 

[e-gold-list] Cigars

2002-02-03 Thread Patrick Chkoreff

Anyone know of a good place I can buy cigars online with e-gold?

-- Patrick



---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] crypto card

2002-02-03 Thread jpm

There is no question that e-gold needs a crypto card for large accounts.

Go, Jay!


Eric Hollander demonstrated a crypto-card once, which gave a cryptic
response to a numerical query. In order to access his website, you had to
plug in a six digit number generated by the website, and then respond with a
numerical answer generated by the crypto-card. Using a passphrase, and the
crypto-card, the security was incredibly high. You had to have the
passphrase and the crypto-card to get in.

E-Gold needs this.

SnowDog



-- 



- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Most of the world's great religions are hijacked from time to time by
men who use the religious faith of others to manipulate them for self-
serving purposes. Environmentalism is different however. It is not a
religion that happens to be manipulated from time to time for political
purpose--for the power and money it can bring to its controllers.
Environmentalism is a religion which has been deliberately created, for
the sole purpose of manipulating its followers. Arthur B. Robinson, 2001.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -





---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Re: crypto card / free at 1mdc

2002-02-03 Thread jpm

On 4 Feb 2002, at 8:07, [EMAIL PROTECTED] wrote:

  There is no question that e-gold needs a crypto card for large
  accounts.

Why not digital certificates. They are cheaper I think and work
really well. For those who want maximum security, you can always
have your certficicate store on a smart card.

Claude
Ormetal Inc.

Claude, IMHO, using a cryptocard is even more secure, considerably 
more secure, than using a cert (even with your cert stored on a smart 
card).

Also, you can take your cryptocard anywhere and use it on any 
computer; if you're talking a smart card you need the right computer 
set up etc.

Incidentally I do think e-gold should ALSO offer the certificate method.

Have you used a cryptocard?  They're great.

Incidentally, fastgrams will offer cryptocards (for free) to all 
larger customers.

JP!


---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Re: crypto card

2002-02-03 Thread jpm

Yes, that's the same idea as a cryptocard.  It's great!

RSI Security makes the SecureID card which generates a new 6 digit code
every 10 seconds. Sites use this on top of a username/password combination
which makes it impossible to login unless you have the secureID in your
hand.


---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Re: http://www.BBTrader.com, and others!

2002-02-03 Thread jpm

That is great news, Bull  Bear Trader!

In fact the gold market's premier technical analylsis bulletin

http://www.itsallinthecharts.com

also accepts e-gold or goldmoney for payment!

(Actually, we only accept DGC.)

I believe FMGR, The Ormetal Report, http://www.itsallinthecharts.com/ 
and BBTrader all accept payment in DGC grams.

(Any others?)

Incidentally no-oone subscribing to IAITC makes an average of 
$500-$1,000 a day :)

JP May
IAITC
itsallinthecharts.com


Bull and Bear Trader is proud to announce they are now excepting E-Gold
for membership purchase into our premier stock newsletter and for payment
our our best selling trading EBook which has shown thousands of people
like you how to make thousands of dollars (or gold grams) trading
part-time or full time.  Some have said to be making an average of
$500-$1,000 a day.  Now E-Gold members get a discount on both the yearly
membership fee and EBook price of $49.95 and even better you can earn a
huge referal fee spent directly into your account for referrals for both
membership and EBook sales.  Go check out the site.  You won't regret it.

Staff,
Bull and Bear Trader
BBTrader.com



---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Re: crypto card

2002-02-03 Thread major bosco

From what I understand -- E-Bullion is already offering the crypto-card 
upgrade.

When I e-mailed them with questions last week they said the upgrades will 
start on this Wends the 6th.

Here's the link:

http://www.e-bullion.com/news_detail.php?id=34

John..




From: [EMAIL PROTECTED]
To: e-gold Discussion [EMAIL PROTECTED]
Subject: [e-gold-list] Re: crypto card
Date: Mon, 4 Feb 2002 10:21:08 +1100

Yes, that's the same idea as a cryptocard.  It's great!


_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.


---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Re: GoldenDir.com Mistery

2002-02-03 Thread Alexis Golzman

 Well Alexis,
 Not to be RUDE but My email from Thursday went begging.  
 
 What was that problem, what were YOU afraid of?
 
 I think You did not understand my New York written accent.  

That's right! I'm better at Irish accent ;-)

 What type of traffic are getting, we'd like to know.

Check out http://extremetracking.com/open;unique?login=agolzman

But I won't get more traffic if people doesn't ever add content (listings)
to my site...

 Also, no one demands help from a New Yalker if that is the case, then I
 have a gif file for you, only by your request.

OK, if you mean New Yorker, you can send me that gif file.

 Great site that does not support NS 4.7 old school.

No offense, but why do you guys use such old crappy browsers? NS4 doesn't
even support the IFRAME tag! It just makes building a complete, full
featured website with all bells and whistles a bloody nightmare.

 How has arhentenia changed since the 70s?

Not much really. There's still a nazi government here.

Regards,
Alexis.
http://www.GoldenDir.com

---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Re: crypto card / free at 1mdc

2002-02-03 Thread Patrick Chkoreff

- Original Message -
 Also, you can take your cryptocard anywhere and use it on any
 computer; if you're talking a smart card you need the right computer
 set up etc.

 Have you used a cryptocard?  They're great.

OK JP, I took a look at www.cryptocard.com, and this looks truly awesome.
This would give me enough security to access a fairly valuable account from
a point-of-sale computer, wouldn't you think?  Maybe even from an internet
cafe!  (Not that I'd want to push my luck or anything.)

Does anyone know of any plans by e-gold or GoldMoney to support cryptocard
authenication?

One more thing, JP, am I to understand that fastgrams.com is going to use
cryptocard?  Or were you just referring to e-bullion?

Regards,
Patrick



---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Re: crypto card / free at 1mdc

2002-02-03 Thread SnowDog


 OK JP, I took a look at www.cryptocard.com, and this looks truly awesome.
 This would give me enough security to access a fairly valuable account
from
 a point-of-sale computer, wouldn't you think?  Maybe even from an internet
 cafe!  (Not that I'd want to push my luck or anything.)

 Does anyone know of any plans by e-gold or GoldMoney to support cryptocard
 authenication?

Absolutely great idea! With a crypto-card, you don't have to worry about
losing your password, or inadvertently entering it on the wrong website, and
it doesn't require any new hardware. If you have the card, you can access
the website; and if you lose the card, the DGC company still has your
contact information, and can send you another one. If it gets lost in the
mail -- no big deal because no one who gets it will have your password, and
both should be required to log-in.

SnowDog



---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Re: Gold Economy Conference

2002-02-03 Thread Ken Griffith

Hi Jim, I think the trend in conversions to a new technology tends to follow
a cubic curve, where the initial acceptance is very slow (such as the first
four years of e-gold going from 0 accounts to roughly 8,000 accounts), then
it hits an exponential growth phase, and then tapers off to a relatively
flat, but slightly increasing line.

Cell phones and fax machines both followed this pattern.  Digital Gold
Currencies will probably experience a similar pattern.  We are probably just
at the very beginning of the fast adoption part of the curve and it could
last ten to fifteen years.  In my opinion, the DGC infrastructure and legal
issues are still not hammered out enough to be ready for the world to start
using them in mass.  But things are RAPIDLY improving.

E-Bullion finally has a Cryptocard, there are now three or four DGC-linked
debit cards available out there, and I hear that Pecunix is going to offer a
novel new service that integrates its currency with the traditional banking
system.

Ken

Don't miss the Gold Economy Conference!
http://www.goldeconomy.com/conference/


---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] New Interview On Planetgold!!!

2002-02-03 Thread Ragnar

A new interview has been published on Planetgold.com !!

Read it now, bookmark the site!
Be updated on the hot digital currency scene!

http://planetgold.com/interview.asp
http://planetgold.com/interview.asp
http://planetgold.com/interview.asp

Regards,

Ragnar


=
Liberty Impact!

Check out this free, hard-hitting weekly newsletter about
privacy, liberty, offshore banking, tax avoidance  digital currencies.

http://list.netatlantic.com/cgi-bin/lyris.pl?join=liberty-impact

__
Do You Yahoo!?
Send your FREE holiday greetings online!
http://greetings.yahoo.com

---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.



[e-gold-list] Re: MMs - EPs stop wasting your time

2002-02-03 Thread jpm



   Check out http://www.xivix.net/xspenderv2.php for more info.


Xspender is awesome!  everyone should have it!


   On a different note, Banangold and GoldPay are awesome.  I just found
that that you can shop target through bananagold.  Check out the Target part
of Amazon.

I did not even know that! :O






---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.