[iwar] [risks] Risks Digest 21.70 (fwd)

From: Fred Cohen (fc@all.net)
Date: 2001-10-20 07:01:55


Return-Path: <sentto-279987-3170-1003586509-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 [204.181.12.215] by localhost with POP3 (fetchmail-5.7.4) for fc@localhost (single-drop); Sat, 20 Oct 2001 07:03:08 -0700 (PDT)
Received: (qmail 19406 invoked by uid 510); 20 Oct 2001 14:01:24 -0000
Received: from n34.groups.yahoo.com (216.115.96.84) by 204.181.12.215 with SMTP; 20 Oct 2001 14:01:24 -0000
X-eGroups-Return: sentto-279987-3170-1003586509-fc=all.net@returns.onelist.com
Received: from [10.1.1.224] by n34.groups.yahoo.com with NNFMP; 20 Oct 2001 14:01:49 -0000
X-Sender: fc@red.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-8_0_0_1); 20 Oct 2001 14:01:48 -0000
Received: (qmail 57111 invoked from network); 20 Oct 2001 14:01:48 -0000
Received: from unknown (10.1.10.27) by 10.1.1.224 with QMQP; 20 Oct 2001 14:01:48 -0000
Received: from unknown (HELO red.all.net) (65.0.156.78) by mta2 with SMTP; 20 Oct 2001 14:01:48 -0000
Received: (from fc@localhost) by red.all.net (8.11.2/8.11.2) id f9KE1tq13345 for iwar@onelist.com; Sat, 20 Oct 2001 07:01:55 -0700
Message-Id: <200110201401.f9KE1tq13345@red.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL3]
From: Fred Cohen <fc@all.net>
X-Yahoo-Profile: fcallnet
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Sat, 20 Oct 2001 07:01:55 -0700 (PDT)
Reply-To: iwar@yahoogroups.com
Subject: [iwar] [risks] Risks Digest 21.70 (fwd)
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Date: Mon, 15 Oct 2001 13:12:29 -0400
From: Tim Hollebeek <tim@hollebeek.com>
Subject: Stray bomb caused by typo

Several sources are now reporting that a satellite bomb that went astray and
hit a residential area did so because the pilot entered one digit wrong when
entering the target coordinates.

Without more information, it is hard to say definitively how this problem
could be avoided, but it certainly seems feasible that systems which display
or accept GPS coordinates could use a check digit that detects one digit
errors and transpositions, much like the one used in credit-card numbers.
If at all possible, systems attached to 2000-lb warheads should be as
resistant to typos as commercial systems are.

Tim Hollebeek

Date: Wed, 3 Oct 2001 22:45:59 -0400
From: Monty Solomon <monty@roscom.com>
Subject: Your stolen Passport

ZDNET, OPINION, By Wayne Rash, 26 Sep 2001

The way Dave Thomas describes it, he and his staff were trying to track down
a series of unusual bugs in Windows, when they stumbled across something
that really worried them. There, on their screens along with the code they
were debugging, was the name and password they'd just used for Microsoft's
Passport service. Worse, it was in plain text, and readily accessible. As he
looked more deeply, he realized that creating a worm that could recover that
information would be, in his words, "trivial."

http://techupdate.zdnet.com/techupdate/stories/main/0,14179,2814881,00.html

------------------------------

Date: Wed, 17 Oct 2001 06:55:24 -0700
From: "Edward W. Felten" <felten@cs.princeton.edu>
Subject: ACM Forum on Legal Regulation of Technology

ACM Forum on Legal Regulation of Technology
(http://www.cs.princeton.edu/lawtech)

Laws and legal regulations are increasingly affecting what technologists can
do. The ACM Forum on Legal Regulation of Technology is a new venue for
technologists to discuss how the law is changing their work.

There are many examples of the law's impact on technology. The growth of
intellectual property claims, including software and business-model patents,
has affected many technologists. Prohibitions on specific technologies, such
as those in the U.S. Digital Millennium Copyright Act, have affected both
researchers and practitioners. Applications of antitrust law have shaped the
landscape for companies both large and small.

Legal scholars have been discussing these issues for some time, but computer
scientists have not been nearly as active in the debate. The forum seeks to
bring technologists into the debate. Although we welcome the contributions
of legal scholars, the forum belongs to technologists and has a
technology-centric view.

Many discussions will necessarily focus on the laws of a particular country,
often the United States, but the forum is international in scope. Discussion
of any country's laws will be welcome. In light of economic globalization,
international treaties, and countries' efforts to harmonize their laws with
each other, we expect technologists throughout the world to face many of the
same issues.

The forum will follow the model of ACM's successful RISKS Forum, issuing a
periodic digest of contributions. Contributions will be chosen by a
moderator, and generally will be short but may point to lengthier
discussions elsewhere.

The forum is sponsored by ACM. It is hosted by the Department of Computer
Science at Princeton University. The moderator is Edward W. Felten.

  How To Subscribe:

  To subscribe, send an e-mail message to majordomo@cs.princeton.edu. The
  body of the message should contain the single line "subscribe lawtech".
  If all goes well, you will receive a reply message saying that you have
  been subscribed to the forum.


------------------------ Yahoo! Groups Sponsor ---------------------~-->
Pinpoint the right security solution for your company- Learn how to add 128- bit encryption and to authenticate your web site with VeriSign's FREE guide!
http://us.click.yahoo.com/yQix2C/33_CAA/yigFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-12-31 20:59:56 PST