Subject: RISKS DIGEST 14.90 (00) REPLY-TO: risks@csl.sri.com RISKS-LIST: RISKS-FORUM Digest Thus 2 Sept 1993 Volume 14 : Issue 90 (00) FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS ACM Committee on Computers and Public Policy, Peter G. Neumann, moderator Contents: SUMMARY OF RISKS VOLUME 14, collected in RISKS-14.00 (3 Nov 1992 - 2 Sep 1993) The RISKS Forum is a moderated digest discussing risks; comp.risks is its Usenet counterpart. Undigestifiers are available throughout the Internet, but not from RISKS. Contributions should be relevant, sound, in good taste good taste, objective, coherent, concise, and nonrepetitious. Diversity is welcome. CONTRIBUTIONS to RISKS@CSL.SRI.COM, with appropriate, substantive "Subject:" line. Others may be ignored! Contributions will not be ACKed. The load is too great. **PLEASE** INCLUDE YOUR NAME & INTERNET FROM: ADDRESS, especially .UUCP folks. REQUESTS please to RISKS-Request@CSL.SRI.COM. Vol i issue j, type "FTP CRVAX.SRI.COMlogin anonymousAnyNonNullPW CD RISKS:GET RISKS-i.j" (where i=1 to 14, j always TWO digits). Vol i summaries in j=00; "dir risks-*.*" gives directory; "bye" logs out. The COLON in "CD RISKS:" is essential. "CRVAX.SRI.COM" = "128.18.10.1". =CarriageReturn; FTPs may differ; UNIX prompts for username, password. For information regarding delivery of RISKS by FAX, phone 310-455-9300 (or send FAX to RISKS at 310-455-2364, or EMail to risks-fax@cv.vortex.com). ALL CONTRIBUTIONS CONSIDERED AS PERSONAL COMMENTS; USUAL DISCLAIMERS APPLY. Relevant contributions may appear in the RISKS section of regular issues of ACM SIGSOFT's SOFTWARE ENGINEERING NOTES, unless you state otherwise. ---------------------------------------------------------------------- RISKS 14.01 04 November 1992 Tandem Clock Outage (J. Lyngved via Paul Hicks and Bruce Baker) Re: Air Inter A320 descent (Pete Mellor) Re: Leaving greasy marks on monitors may be dangerous (Pete Mellor) Re: Risks of Cellular Speech (Phil Karn, Dave King) Re: Cash dispenser fraud (Pete Mellor) Re: Caller-ID and Modems (A. Padgett Peterson) Re: Symantec/Borland [and Brazilian President] (Rob Horn, anonymous) Re: Interesting/obscure interaction between users (Jerry Leichter) Re: 15th NCSC - eavesdropping (Brinton Cooper, Carl Ellison) Re: New risk reports (Pete Mellor) ASEE '93 EPPD Call for Papers (Ken Sollows) RISKS 14.02 9 November 1992 Voting Machine Horror Story (Al Stangenberger) Phone voting in NM (Gary McClelland) Salvage Association vs CAP Financial Services (Les Hatton) Computer system blamed for lack of official trade figures (John Jones) Privacy Digests (PGN) Another TV show showing computer `hackers' (Matthew D. Goldman) Re: Encryption Keys (Glenn Story, Steven Tepper, D. Longley) Re: Risks Of Cellular Speech (Johnathan Vail) London Ambulance Service computer fails again (Tony Lezard, Paul Johnson) Re: Cash dispenser fraud (Thor Lancelot Simon, Antoon Pardon) RISKS 14.03 10 November 1992 "To ensure the continuing access of law enforcement" (Jyrki Kuoppala) Credit Thieves (Paul Robinson) Concerns about quality in products of modern technology (Ralph Moonen) New emphasis for SDIO (Diego Latella) Accountant's error catches thief! (Joe Grace) Cellular misinformation (Barry C. Nelson) Re: Key Registration (Alec Isaacson, Peter Wayner [2], Andrew Klossner) Re: Interesting/obscure interaction between users (Rich Kulawiec) RISKS 14.04 11 November 1992 Abuse of federal computer access (Barry C. Nelson) Therac-25 (Nancy Leveson) When "yes" means "no" (More voting screwups) (Ted Shapin) Re: Voting Machine Horror Story (David Conrad) Voicemail problems (C Martin) FBI digital telephony article in IEEE Institute (M. Granger Morgan via Lance Hoffman) Key registration risks (Phil Karn, Otto Tennant, Robert Philhower, PGN) Re: Risks Of Cellular Speech (Robert Gezelter) Re: Persistent resources and hypertext (David A. Honig) RISKS 14.05 16 November 1992 Voting fraud (is it an accident?) (Ray Todd Stevens) Safe Conduct (Jonathan Bowen) Retirement award trips up a crook (Ray Todd Stevens) PINs and Needles (Dik Winter) Re: "End-Running" Key Registration (Bob Frankston) Re: Cellular Phones in Aircraft (Berry Kercheval) Re: Voice mail systems (Jim Purtilo) Radio to remote computer protocol design (Edward J. Huff) Re: RISKS of technical people disengaging brain (Daniel Lance Herrick) Re: Credit Thieves (and learning from mistakes) (Michael J. Zehr) Re: Accountant's error catches thief! (D King) Re: Caller-ID (yet again) (Greg Rose) UNIX security Tutorials (7 Dec, San Jose) (Sun User Group Conference) (Nancy Frishberg) Papers accepted for AUSCRYPT'92 (Yuliang Zheng) RISKS 14.06 17 November 1992 "Computer programming error" reverses election (Nathan K. Meyers) Detecting Voting Problems (Fred Baube) Inaccurate stock system believed to cause British Air large losses (John Jones) England fights on against system failures: LAS, aging systems (James H. Paul) Stock price too high? (David Wittenberg) $Million per second -- CHIPS (John Sullivan) Re: Tandem's clocks (Don Stokes) Photography from orbit (Daniel Burstein) Smart cars? (Steve Mestad) Warrants without notification (Steve Mestad) Re: Two hackers caught tapping into Boeing, federal computers (Graham Toal) Registering your color copier/printer (Carl M. Kadie) Self-configuring devices (David A. Honig) November Scientific American Article on Risks (Greg Phillips) RISKS 14.07 18 November 1992 [misdated 17 Nov] Re: Recommended POLL FAULTING by RISKS folks (Rebecca Mercuri) Cordless phone users gain some privacy rights (Jerry Leichter) How to tell people about risks? (Xavier Xantico) Risks of DYI Home movies (Alex Heatley) Re: A320 descent anomalies -- reported in French press (Pete Mellor) Redressing the record on English system maintenance (James H. Paul) Re: Safe Conduct (Ken Tindell) Re: Risks of cellular phones in aircraft (James Olsen, Dan Sorenson, Bob Rahe) Re: Key registration: a naive thought about encryption (Martyn Thomas) Re: RISKS of technical people disengaging brain, encryption, outlaws ... (Mike Dixon, Dan Swartzendruber, Ken Arromdee, John Sullivan, Robert Hartman) RISKS 14.08 21 November 1992 Installer Programs (Macintosh) (Mark Thorson) Election hardware and software problems (A Urken) How to talk about risks (Alan Wexelblat, Stuart Wray, Rob Cameron, Mike Coleman, Pete Mellor, L. Bootland, Re: Software Reliability - how to calculate? (Pete Mellor to Janet Figueroa) Re: POLL FAULTING recommended for RISKS folks (Pete Mellor) Advanced technologies for automotive collision avoidance (Pete Mellor) Wanted: GRADUATE PROGRAM in RISKS (Simson L. Garfinkel) "The Information Society" (Bob Anderson) An airline software-safety database? (Dave Ratner) RISKS 14.09 24 November 1992 BNFL Sellafield nuclear incident (Peter Ilieve) Privacy Risks of Computerized Medical Billing (Paul Kleeberg via John Bonine) Teller machine networks (Steve Holzworth) Re: Election HW/SW problems (Rebecca Mercuri) The ultimate in anti-virus, anti-invasion security (Lee S. Ridgway) Technophones (David Honig) Re: London Ambulance Service (Trevor Jenkins) Mathematics of Dependable Systems (conference announcement, Vicky Stavridou) RISKS 14.10 25 November 1992 Police and Database [another name confusion] (Stanley (S.T.H.) Chow) Nuclear-plant risks in the US (Alan Wexelblat) Re: Election HW/SW Problems (Bill Murray) Voting-machine humor (submitted by Joshua E. Muskovitz from rec.humor.funny) Re: Smart cars? (Brinton Cooper) Re: Installer problems (Richard Wexelblat) Re: How to tell people about risks? (Richard Stead, John A. Palkovic, Arthur Delano, Phil Agre, George Buckner, Chaz Heritage) Re: Stock price too high? (John R. Levine, Randall Davis) RISKS 14.11 27 November 1992 Re: Computer Security Act and Computerized Voting Systems (Roy G. Saltman, Rebecca Mercuri) How Is Technology Used for Crime in the Post-Hacker Era? (Sanford Sherizen) Re: Nuclear plant risks (Brad Dolan) Re: Installer Programs (John Bennett, Mathew) Re: How to tell people about risks? (Sanford Sherizen, Mark Day) Change in the Maximum Length of International Telephone Numbers (Nigel Allen) Humorous submissions for a book (Andrew Davison) RISKS 14.12 30 November 1992 Laser Printer Sucks up Cat (Douglas M. Kavner) British Telecom find themselves being a phone pest (David Shepherd) "The risk is not obvious" (Don Norman, Rex Black) Re: Name confusions? (Don Norman, Jerry Leichter) Electronic Banking Risks (Ross Anderson) Re: How Is Technology Used for Crime ... (FoFP) SNL accidentally informs people about risks of caller ID (Sean Eric Fagan) Re: Nuclear plant risks (Victor Yodaiken) RISKS 14.13 2 December 1992 Blackmail risk in thefts from general practitioners (Paul Leyland) Computerized Voting (Doug Hardie) Global Positioning System - Position Errors (Stuart Bell) Re: Laser Printer Sucks up Cat (Dan Sorenson) Smokey is not always a bear (Alan Dahl) A310 Aerobatics (Karl Swartz) New Distributed Systems Engineering Journal (Morris Sloman) RISKS 14.14 2 December 1992 Akron BBS trial update! (David Lehrer) Holiday reading on Risks (Phil Agre) Re: Books on Probability (Pete Mellor) FME'93 Call For Participation and Programme (Peter Gorm Larsen) RISKS 14.15 7 December 1992 Similar But Different User Interfaces and Traces of Memory (Tom Swiss) Name Confusion and Democratic Concept of Limited Government (Roy G. Saltman) Re: Police and Database [name confusion with twist] (Alan (A.G.) Carter) Toronto Stock Exchange Virus Scare (Shyamal Jajodia) Re: Akron BBS trial update! (Phil Karn) Risks of children using BBSes (Re: Akron BBS ..) (Michael P. Deignan) Lost Technology (A. Padgett Peterson) Re: Computer theft from GP's; encryption is not a cure-all (Julian Thomas) Turn Signals (John Sullivan) Estimating risks (Jerry Leichter) Revenge via computer (Thomas Dzubin) Re: Risk reduction: Human Factors (Chris Norloff) Flood Stories (Lindsay F. Marshall) Re: holiday reading on Risks (Gary McClelland) RISKS 14.16 8 December 1992 Name confusion and its implications -- PART ONE (Don Norman, Guest Moderator, with contributions from Will Taber, George Buckner, Eric Johnson, Brian Hawthorne, Russell Aminzade, Bob Frankston, Chris Hibbert) [PART TWO IS IN RISKS-14.17.] RISKS 14.17 8 December 1992 Name confusion and its implications -- PART TWO (Don Norman, Guest Moderator, with contributions from Amos Shapir, J. Brad Hicks, Tarl Neustaedter, Chris Hibbert, Will Taber, Andrew Shapiro, Olaf Titz, Wayne A. Christopher, Craig Hansen, Jim Morris, Simon Marshall, Gary McClelland, Craig Partridge) [PART ONE IS IN RISKS-14.16.] RISKS 14.18 10 December 1992 Miscarriages -- chip workers in the U.S., VDT users in Finland (PGN) Programming errors affect state lottery (Mark Seecof) Systems causing unintended changes in behaviour (Doug Moore) ACM Code of Ethics and Professional Conduct; Ethics Starter Kit (PGN) Computers do it better (Don Norman) Traces of Memory and the Orange Book (Kraig R. Meyer) Library sans card catalog (Patrick White) Defence against hackers may be illegal; login banners grow (John Lloyd) RISKS 14.19 22 December 1992 Computer error leaves Bundestag speechless (Debora Weber-Wulff) Doctor service phone logs skewed (Steen Hansen) Statistical biasing (Clay Jackson) Solution found to risks of computers in elections! (Jan I. Wolitzky) Overheard by Don Knuth on recent trip (Phyllis Winkler via Les Earnest) Flying Books Threaten Computer Inventory (Bill McGeehan) Navy Cancels Jammer System (PGN) Public information (Phil Agre) Call for Comments on Computing and the Clinton Administration (Gary Chapman) RISKS 14.20 31 December 1992 Another Jail Computer Glitch (PGN) Antiviral technology target of legal action Dutch chemical plant explodes due to typing error (Ralph Moonen) 911 in Massachussetts (Barry Shein) What about "little brother?" (Brian Seborg) Re: Electronic democracy (Barbara Simons) Re: Programming errors affect state lottery (Charles D. Ellis) Re: Bundestag speechless (Boris Hemkemeier, Markus U. Mock, Daniel Burstein) Latest (?) credit card scams (Jerry Leichter) Risks of satellite-controlled anti-theft devices (Jim Griffith) OECD Security Guidelines (Marc Rotenberg) RISKS 14.21 31 December 1992 3rd Conference on Computers, Freedom and Privacy (Bruce R Koball) RISKS 14.22 4 January 1993 Things that cannot possibly go wrong (Pete Mellor) DISA yaks to FCC on PCS (Paul Robinson) Re: Dutch chemical plant explodes (Nancy Leveson, Meine van der Meulen) Re: Antiviral company target of legal action (Aryeh Goretsky) Microprocessor design faults (Brian A Wichmann) Call for Papers, 1993 National Computer Security Conference (Jack Holleran) RISKS 14.23 7 January 1993 Leap Year Causes Problems for ATM Machines (Conrad Bullock) Ross Perot Campaign Steals Credit Data? (Richard N. Kitchen) Computer failures in B767 (Wm Randolph Franklin) Laserprinter Forgery (Matt Healy) Large Foreign Exchange Rates (R. Y. Kain) Stolen to order systems (Lord Wodehouse) Prosecution in the Cindu case (Meine van der Meulen) Re: Microprocessor Design Faults (A. Padgett Peterson) Release of Maps to NGOs? (Daniel J Yurman) AFCEA ACCE Conference Announcement (John Wack) RISKS 14.24 11 January 1993 Organizational Analysis in Computer Science -- PART ONE (Rob Kling) RISKS 14.25 11 January 1993 Organizational Analysis in Computer Science -- PART TWO (Rob Kling) RISKS 14.26 12 January 1993 Florida Rental Car Scam (Dewey Coffman) Computer games may endanger your health (Olivier MJ Crepin-Leblond) Ford's honesty saves county $2 million (John Cigas) Name+birthdate=no drivers license (Bruce Hayden) Student Load Errors Blamed on Computer (Steve Peterson) "Softkiller" as Arts? (Klaus Brunnstein) Computer Theft of Criminal Records (Gary McClelland) Computer hacking of flight details "was illegal" (Jonathan Bowen) Upcoming Telephone Number problems (Rob Horn) FAA prohibits pilot knowing GPS altitude in IFR flight (Jim Easton) Risks of networks (Larry WB Ching via Monty Solomon and Jerry Leichter) Version numbers (Andrew Marchant-Shapiro) About Computer Expense... (Paul Robinson) [humor?] Re: Large Foreign Exchange Rates (Mark Brader, Peter Trei, Dik Winter) Correction on Computers, Freedom and Privacy 1993 (Bruce Koball) 1993 Complex Systems Engineering Synthesis and Assessment (C.A. Meadows) RISKS 14.27 13 January 1993 Under 50 miles hurts with Hertz [Hertz hat kein Herz?] (Bruce Baker) Re: Computer games may endanger your health (Rick Russell, J. Eric Townsend) Medical Records on smart cards (John Gray) DoJ Has NOT "Authorized" Keystroke Monitoring (Dennis D. Steinauer) More on the Orange Book (Kraig Meyer) Slipstreamed Software Changes, the Titanic, and my Pontiacs [Re: Version Numbers, sort of] (A. Padgett Peterson) Public Service for Cornell Hackers (dclawson) Killing me with kindness [extra MHz] (Bear Giles) Re: name+birthdate=no driver's license (Jim Roberts, Andrew Koenig) Re: Upcoming Telephone Number problems [4 messages, somewhat redundant] (Andrew Klossner, Kraig Meyer, Randal L. Schwartz, Spencer W. Thomas) RISKS 14.28 19 January 1993 Racetrack goes to the dogs as computer fails (Mark Colan via John Markoff) Earthwinds balloon crash (John Sullivan) More on the Air-Inter politics (Peter B Ladkin) Attempted Mindvox Break-in (John F. McMullen) New E-journal on computer security (J.B. Condat) Lautro assessment of computer reliability (Pete Mellor) Released GSA Docs Slam FBI Wiretap Proposal (Dave Banisar) Four charged with theft of registration microfilms in Sapporo Japan (Hank) Nintendo and Epileptic attacks (Marvin Moskowitz, Robert A. Morris) RISKS 14.29 27 January 1993 Synthesis report on DoD software problems (James H. Paul) EM Radiation - is smoking safer? (Paul Menon) Brazilian Banking Reserve Data Disappear (Sanford Sherizen) Clinton Transition Team E-Mail (David Daniels) Computer promises nothing (Conrad Bullock) The FBI and Lotus cc:Mail (Dick Joltes) A stopped clock never foils? (Paul Eggert) Re: Racetrack goes to the dogs as computer fails (Conrad Bullock) Request to Post Office on Selling of Personal Information (Dave Banisar) TAPSOFT '93, APRIL 13-16, 1993, ORSAY, FRANCE (Cliff B Jones) RISKS 14.30 2 February 1993 Clever Tactics Against Piracy (Jay Rolls) Educational computer game banned in Milpitas CA (shaun) "Two charged with computer fraud in credit scam" (Norm deCarteret) Bible belt broadcast bungle (Peter J. Scott) Phone Fraud numbers (John Mello) Re: Clinton Transition Team E-Mail (James Barrett) Re: EM Radiation (and cell phones) (Lauren Weinstein, Andrew Klossner) Certification - Proposed Legislation (USA) (Alan Underwood) Erratum: GAO ordering number (James H. Paul) The Federal Criteria for Information Technology Security review (Nicki Lynch) Preliminary Program for 1993 Security & Privacy (Dick Kemmerer) Computers, Security and the Law (reply to Francoise Vassie) RISKS 14.31 5 February 1993 "Computer Blamed For Phone Jam" [Ohio Bell] (Joe Brownlee) BNFL prosecuted for unauthorised software changes (Martyn Thomas) Residues in a surplus bank computer (Fred Cohen) Re: Educational computer game banned (Guy K. Haas) Re: Clever Tactics Against Piracy (Gerd Meissner) Anecdotes Wanted on the Risks of Information Security (Dorothy Denning) Re: The FBI and Lotus cc:Mail (Isaac Rabinovitch, Roger D Binns, Bill Stewart, Dorothy Denning [3x], Dick Joltes [2x], Ray Ozzie via Peter Wayner) Anyone can get your U. of Illinois transcript (Carl M. Kadie) Phone Company Cleverness (Jon Leech) RISKS 14.32 5 February 1993 Programmer Licensing (Paul Robinson) **** pointer-> Injured using Computer Pointing Device? (Pete W. Johnson) Suggestions for a hi-tech crime-investigators' seminar ?? (Jim Warren) Revised Computer Crime Sentencing Guidelines (Dave Banisar) RISKS 14.33 18 February 1993 Cable freeloaders (Tony Scandora) Esperanto from a computer error (Philip Brewer) A "Handy" Risk for AirTravel? (Klaus Brunnstein) Released GSA Docs Slam FBI Wiretap Proposal (A. Padgett Peterson) Re: Tapping phones (Fred Cohen) Re: Joltes Vs Denning (Gary Preckshot) Mobile phones: "too secure"? (Marc Horowitz) PLCs : Request for information (Pete Mellor) User interface at the checkout stand (Rob Slade) Where's the fire? (Jim Carroll) RISKS 14.34 22 February 1993 And You thought Your Computer Chat Was Private (Marty Leisner) _Friendly Spies_ (Peter Wayner) The "Information America" service (Brian Randell) "Telephone Service Cut Off" (Lin Zucconi) Computer delays response to fatal fire (Lauren Wiener) Tapping the new digital car phone systems (John W. Sinteur) A quick request for opinions (Fred Cohen) London Ambulance Service (Brian Randell) DCCA-4 Call for Papers (Teresa Lunt) Technology and Society, Call for Papers (William J. Kelly) Privacy Digests (PGN) RISKS 14.35 23 February 1993 Seeing red over valentine envelopes (Luis Fernandes) KIO diskettes stolen from Spanish Government (Miguel Gallardo) Citibank outage (Marty Leisner) Japanese Bank Hit By Phone Fraud (John Mello) Long Distance..Is the next best thing to praying there (Paul Robinson) Re: _Friendly Spies_ (Sean Matthews) Re: The "Information America" service (John Pettitt) MIT's on-line Student Information Services (SIS) (Jonathan I. Kamens) Re: Tapping Phones (Mark W. Schumann) 1st ACM Conference on Computer and Communications Security (Dorothy Denning) Call for Papers: Computer Security Applications Conf (Marshall D. Abrams) RISKS 14.36 24 February 1993 3rd Conf. on Computers, Freedom, & Privacy, CFP 1993 (Bruce R. Koball) 2nd Conf. on Computers, Freedom, & Privacy -- PROCEEDINGS (Lance J. Hoffman) Educational Loan Services -- ELSI (Steve Hoffman) Phone problems: Re: "...Phone Jam", and a new problem (Bill Warner) MIT's on-line Student Information Services (Steve Bellovin) Kerberos and password-guessing attacks (Jonathan Kamens) Re: Tapping Phones (Fred Cohen) Re: On-line services (lack of) security (Bill Seurer) Re: request for opinions on Artificial Life (Bill Humphries) RISKS 14.37 4 March 1993 Power Outage Locks Up Jail System (Jennifer Smith) Hacker disables cancer database (Jonathan Bowen) Smells like Green Spirit... (Jeffrey S. Sorensen) Evacuation plan, generators fail in World Trade Center blast (Jay Elinsky) Bank account problems (Jeremy Epstein) The White House Communication Project (Shellie Emmons via David Daniels) Re: your permanent record (Richard A. Schumacher) New York Telephone's newest dis-service (Jeffrey S. Sorensen) Phone Company Writes to a Public Telephone (Warren via Mark Brader) Cohen/Radatti on Unix and Viruses (Pete Radatti) London Ambulance Service - the Report (Brian Randell) Bank machine glitch leaves users poorer, but empty-handed (Randal Schwartz) Does Publisher's Clearinghouse Use Information America? (Jane Beckman) RISKS 14.38 7 March 1993 6th Int'l Computer Security and Virus Conf (Richard W. Lefkon) Problem with PLC Software (Lin Zucconi) Mass electronic scanning of UK int'l telexes from London (James Faircliffe) `Untested' Risk Management System for Nuclear Power Stations (Anthony Naggs) Re: Evacuation plan, generators fail in WTC blast (Scott E. Preece) Re: Where to buy emerg. stairwell lightbulbs? (Joel Kolstad) Re: Does Publisher's Clearinghouse Use InfoAm? (Karl Kraft) Re: Smells like Green Spirit... (Barry Salkin) Re: The White House Communication Project (Joseph T Chew, Randall Davis) Clinton/Gore technology policy (Bill Gardner)J Cellular Phreaks & Code Dudes [`WIRED'] (John Stoffel) RISKS 14.39 9 March 1993 Bruce Nuclear Plant - Potential Safety Problem (David Levan) Steve Jackson Games/Secret Service wrapup (Eric Haines) `Interrupt' by Toni Dwiggins (PGN) Short Course on Software Safety? (Nancy Leveson) Ohio student database under legal attack (Tim McBrayer) Royal Bank client cards (Mich Kabay [2]) Political -> Personal risks (WTC/NYC) (Stephen Tihor) Re: World Trade Center blast (Frank Caggiano, Jay Elinsky, Chaz Heritage) RISKS 14.40 16 March 1993 Garage door burglaries (Chuck Payne) MCI 800 problem (Andrew Marchant-Shapiro) System Dynamics of Risks (Dan Yurman via Bill Park) Facing the Challenge of Risk and Vulnerability in Information Society (Klaus Brunnstein) RISKS 14.41 17 March 1993 Automated Teller Machine network problems in New Jersey (Joel A. Fine) ATM problems in California East Bay (Lin Zucconi) Buy IBM and get fired (Ross Anderson) [sci.crypt,alt.security] New meaning to "program blowing up"... (David Honig) No anonymity for Canon copiers? (Brad Mears) Re: Steve Jackson Games (PGN) Re: System Dynamics of Risks (John Mainwaring) Re: 'Untested' Risk Management System for Nuclear Power (Anthony Naggs, T. Kim Nguyen) Electronics on Aircraft (Rob Horn) International Card Fraud (Ralph Moonen) Re: Garage door burglaries (King) Re: Computer Controlled Parachutes (Robert Vernon) Yet another White House address (Paul Robinson) RISKS 14.42 23 March 1993 Her Majesty's Government's missing millions (Pete Mellor) What a fragile, interconnected world we live in! (David Daniels) Technological Manipulations in Political Advertising (David Daniels) Conspiracy trial ends in `Surprise' acquittal (Jonathan Bowen) RISKS of brain interference (Mich Kabay) Interference on airplanes (John Sullivan) Virus Catalog update/New VirusBase (Klaus Brunnstein) Re: Buy IBM and get fired (Todd W. Arnold, Bennet S. Yee) RISKS Backlog (PGN) Eleventh Intrusion Detection Workshop (Teresa Lunt) RISKS 14.43 24 March 1993 Dutch computer hacker arrested under new Dutch Law (Ralph Moonen) Minnesota phone fraud (Vic Riley) Follow-up on the Lehrer Case from RISKS-14.14 (David Lehrer) Re: Conspiracy trial ends in ... acquittal (Olivier MJ Crepin-Leblond, Peter Debenham) Re: Buy IBM and get fired (Ross Anderson, Michael J Zehr) [Re: Buy IBM] Smart card/electronic cash security (Niels Ferguson) Re: RISKS of brain interference: not as tabloid as you'd think (David Honig) Software Warranties (Paul Robinson) [longish] RISKS 14.44 29 March 1993 The FORTRAN-hating gateway (Joe Dellinger) Call for the Class of '88 (Ed Ravin) If they mention flying saucers, they're out to get you (Derek Cooper via Christopher Maeda) Computer problems at Empire Blue Cross (Robert Wentworth) Fantasy Baseball Journal Virus (Ed Amoroso) Reported procedural problems with TCAS (John Dill via Lorenzo Strigini) Dutch hacker in jail for another month (Hans van Staveren) Correcting computer information held on you (Peter Debenham) Re: Conspiracy trial ends in ... acquittal (Anthony Naggs) Re: Software Warranties (Geoff Pike) Akron BBS Sting Update 3 (David Lehrer) Virginia voters & Social Security Numbers (Jeremy Epstein) SSN in the news -- Charles Osgood (Chris Phoenix) Court Bans SSN Disclosure (Dave Banisar) RISKS 14.45 1 April 1993 Formation of new society/discussion group (Pete Mellor) Re: Turn of the century date problems (Steve Peterson) Daylight Savings Time hampers police (Debora Weber-Wulff) Computer does the right thing -- shuttle launch scrubbed (Pete Mellor) More on Minnesota Legislature phone fraud (Steve Peterson) Re: Call for the Class of '88 (Jonathan Rice) Re: Correcting computer information ... (Pete Mellor) Re: Dutch hacker in jail for another month (Ralph Moonen) Credit and Avis rent a car re-visited (Boyd Roberts) Little green sting (saucers) (Joseph T Chew) Re: The FORTRAN-hating gateway (Phil Karn) RISKS 14.46 6 April 1993 Sound of the Fury: Sub-liminal highway monitoring... (Peter Wayner) Computer company helps students with fake IDs (Phil Haase) Mangled zip code leads to collection agency (Ken Hoyme) NREN WRAP [Joe's Final Houston Chronicle NII Story] (Joe Abernathy) Danny Dunn, Automatic House, Automatic Electric Post Office (Jerry Bakin) Teenage Hackers (Jim Haynes) Re: If they mention flying saucers (Ian Phillipps, Olaf Titz, Robert VanCleef) Re: FORTRAN-hating gateway (Nick Andrew) Re: FORTRAN-hating gateway, Hayes Sequence Triggered (A. Padgett Peterson) Re: Correcting computer information ... (Roger D Binns) Re: Dutch hacker in jail for another month (Ralph Mooonen) Internic Registration Services Security Compromised (Mark Boolootian) Call for Papers, PSAM II (System-Based Models) (Charlie Lavine) RISKS 14.47 7 April 1993 Another Mystery for the San Francisco Muni Metro (PGN) Columbia and Discovery shuttle problems (PGN, Jim DePorter, Ken Hollis via Paul Robichaux) ``Organized Crime Gets into Phone Fraud'' (PGN) An interesting bug for users of "at" (Dave Parnas) RISKS of Complacency (DOS 6.0) (A. Padgett Peterson) Using your company's E-mail for private purposes (Omer Zak) Re: Personal letters (Paul Robinson) Re: Hayes Sequence Triggered (Ron Dippold) Groupware (non)security query (Rob Slade) Legal Net Monthly Newsletter (Paul Ferguson) Injured Using a Computer Pointing Device?: Read This (Pete W. Johnson) FTCS-23 ADVANCE PROGRAM (Mohamed Kaaniche) RISKS 14.48 7 April 1993 Shuttle Failure Blamed On Computer Glitch (Kriss A. Hougland) Safety-Critical Software, special issue of IEEE Software (John Knight) London Ambulance Service Inquiry Report (Brian Randell) [long/definitive] RISKS 14.49 9 April 1993 Re: Columbia and Discovery shuttle problems (Dan Sorenson) "Massive Tax Fraud found in Toronto" and EFILE security (Peter Yamamoto) Video Surveillance Tapes and TV Programs (Sanford Sherizen) Re: Using your company's E-mail for private ... (Pat Place) Re: Sound of the Fury: Sub-liminal highway monitoring... (Rob Horn) Lessons from the London Ambulance Service (Bill Murray) Re: Another Mystery for the San Francisco Muni Metro (Joe Brennan) Review of "Syslaw" by Rose/Wallace (Rob Slade) Availability of Berne Convention (Selden E. Ball, Jr., Mike Godwin, Jerry Leichter) RISKS 14.50 14 April 1993 Head-on train collision in Berlin (Debora Weber-Wulff [2]) Discovery discovery of ozone data (PGN) ``Navy Calls Satellite a Total Loss'' (PGN) Police data misused to find home address (Arthur R. McGee) 36,000 dollar bug! (John Pettitt) Hardware GOOD, software BAD? (Caveh Jalali) Re: ... San Francisco Muni Metro (Robert J Woodhead) Re: Discovery shuttle problem (D King) Re: Turn of the century date problems (Mark Brader) Re: The FORTRAN-hating gateway (Bob Frankston) IFIP Call for Papers (Harold Joseph Highland) RISKS 14.51 21 April 1993 CLIPPER CHIP (NIST [3], Padgett Peterson, Paul Johnson, Ralph Moonen, Lance J. Hoffman) RISKS 14.52 21 April 1993 The Clipper Chip: A Technical Summary (Dorothy Denning) CPSR calls for public debate on encryption initiative (Dave Banisar) Clipped Wings: The Economic Impediment to the Clipper Chip... (Peter Wayner) Letter to Clinton, re: the encryption proposal (Carl Ellison) Hacking turnpike signs (Paul Schmidt) Re: Head-on train collision in Berlin (Joseph T Chew) Pliers Found Attached To Discovery Shuttle SRBs (Marc Schwartz) Re: Columbia and Discovery Shuttle Problems (Stephen E. Bacher) Badge entry and forgotten badges (anonymous) RISKS 14.53 22 April 1993 CLIPPER CHIP (Don Alvarez, Carl Ellison, Steve Holzworth, Keith Hanlan, Derek Beatty, Lars-Henrik Eriksson, Kristoffer Eriksson, Jay Schmidgall, Dave Weingart, Jim Sims, C. Martin, Neil W Rickert, Mark Seecof) RISKS 14.54 26 April 1993 CLIPPER CHIP (Dorothy Denning, Magnus Kempe, Jeffrey I. Schiller, Daren Stebner, Paul R. Coen, Tony Harminc, Padgett Peterson, A.E. Mossberg, David P. Reed, Jonathan Papai, Lauren Weinstein) RISKS 14.55 27 April 1993 Computer criminal executed in China (Jani Pekkanen) New Disclosures in 2600 Case (Dave Banisar) Hacker Accused of Rigging Radio Contests (Don Clark via Peter Shipley) Photocopier operation monitored totally by computer (Ian Staines) Risk of using too much electricity (Phil Miller) Incidents in civil airliners (Martyn Thomas) CLIPPER CHIP (Jim Bidzos, Bill Campbell, Robert Firth, Padgett Peterson, John A. Pershing Jr., Magnus Kempe) RISKS 14.56 29 April 1993 747 autopilot faults? (Stephen L Nicoud) Human vs. computer in space [Apollo 8] (Pete Mellor) Spanish Computer Crime Research Association (Miguel Gallardo) Crypto-Schemes and Mobile Digital Services (Roger Clarke via Lance Hoffman) How to rob a bank the cashcard way (Lord Wodehouse) Re: Too much electricity (Mark Shanks, Jim Griffith, Jim Huggins, Dave Bakken, Randall Gray, Edwin Culver, Kevin Paul Herbert) Can Wiretaps Remain Cost-Effective? (Robin Hanson) CLIPPING CLIPPER (PGN) EICAR'93 Call for Papers (Klaus Brunnstein) RISKS 14.57 3 May 1993 The risks of non-24-hour days (Debora Weber-Wulff) Flaws in government computer bond auction (Mark Seecof) Evading 1-900 blocking (John Carr) `New Computer Virus Reported in Japan (David Fowler) Stunning vending machines (Edward N Kittlitz) Junk mail reduction request can add to your junk mail, too (Rich Rosenbaum) Re: SSN for Health Identifier (John R. Levine) Re: How to rob a bank the cashcard way (Anthony Naggs) Humans NOT needed to save NASA (Don Norman) Re: Human vs. computer in space (Craig Partridge, Espen Andersen, Scott Alexander, R. Mehlman) Re: Clipper - A dumb idea (Brian Seborg) Re: Worries over the Clipper Chip (Brinton Cooper) Re: Too much electricity (DonB) RISKS 14.58 10 May 1993 2 Women Accused in Sale of Adoption Information (John C Slimick) Caller-ID mistakes (John H. Dale) A RISK of Mailing Lists? (James Garven, discussed by Cal Jewell) Census imposters invading Cary (George Entenman) Analog vs Digital Speedometers (Martin Minow) Computer Problem reveals tax details (John Gray) Videoconferencing Bridge Likes Muscular Lungs (Shyamal Jajodia) AIS BBS Capture log (anonymous) Re: Pyramids in space (Wayne Throop) Re: Epilepsy and video games (Antonella Dalessandro) Re: Humans NOT needed to save NASA (Flint Pellett) Re: Junk mail reduction request can add to your junk mail, too (Steve Mick) Re: China executes hacker (Jonathan Bowen) Re: Evading 1-900 blocking (David A Willcox) Re: Utility-derived information (Phil Agre) RISKS 14.59 11 May 1993 Worst Computer Nightmare Contest (Shari Steele via Arthur R. McGee) IFIP resolution on demeaning games (Richard Wexelblat) Fake ATM Machine Steals PINs (Eric) Teller Users Beware (Tapper) More on Census imposters invading Cary (George Entenman) NIST Advisory Board Seeks Comments on Crypto (Clipper-Capstone Chip Info) New NIST/NSA Revelations (Dave Banisar) RISKS 14.60 12 May 1993 IFIP resolution on demeaning games (Barbara B. Simons) Thoreau on Pyramids and Space (Victor Yodaiken) Re: Fake ATM Machine Steals PINs (K. M. Peterson, Al Donaldson) Re: Epilepsy and video games (Larry Hunter, Mich Kabay) Mobile ComSec in Europe (A5) (Klaus Brunnstein) Security&Control of IT in Society (Klaus Brunnstein) RISKS 14.61 15 May 1993 Opel Corsa Stops for Mobile Phones (O\ystein Gulbrandsen) Re: Analog vs Digital Speedometers (Roger Crew) Re: New NIST/NSA Revelations (Dorothy Denning) Clipper - A Trojan Horse (Bill Nicholls) Testimony to Boucher's House Science Subcommittee (Whitfield Diffie) RISKS 14.62 17 May 1993 Cut and Paste risks (Elizabeth Zwicky) CHI & the Color-blind? (Vannevar Yu) Update on risks in semiconductor manufacturing (Rob Horn) Re: Epilepsy and video games (Edwin Culver) Don't Depend on makedepend (Dave Wortman) makedepend problem - a real world example (Michael Turok via Dave Wortman) Business Week: ADP Flubs (Bob Frankston) Mobile Phones and airbags (was: Opel Corsa ...) (Olivier MJ Crepin-Leblond) Re: Denning on NIST/NSA Revelations (Marc Rotenberg, Bill Murray) NIST Answers to Jim Bidzos' Questions (Ed Roback via Jim Bidzos) [longish] RISKS 14.63 18 May 1993 Read any good magazines lately? (Robert M. Slade [copyrighted article]) Re: Cut and Paste risks (Pete Mellor, Byron Rakitzis, Tim Cook, Christopher Lishka, Joseph Hall) Re: CHI & the Color-blind? (Eric Haines, Tom Ohlendorf, David Tarabar) Re: Denning on NIST/NSA Revelations (Dorothy Denning) Re: NIST's reply to Bidzos (Jim Horning, Frederick Roeber, Jim Sims, Chris Phoenix, Carl Ellison) Compromising the escrow agencies (Mickey McInnis) RISKS 14.64 19 May 1993 A Risk of Risks Elided (or no news not always best) (Mike Coleman) Rewards offered for finding bugs in Japanese encryption methods (Forman) Re: Clipper (Jim Bidzos, Eric Raymond, Dorothy Denning, Pyramid??, Doug Rand) Re: Clipper "destroyed keys" and Spycatcher (Roger Crew) Re: Clipper/Capstone: Expectations of privacy? (Henry Burdett Messenger) Re: Clipper and the "Man in the Middle" (Stephen G. Smith) Re: Epilepsy and video games (David Honig) Re: makedepend problem - a real world example (Conrad Hughes) Re: Cut and Paste risks (Robert L Krawitz) Re: CHI & the Color-blind? (Flint Pellett) RISKS 14.65 30 May 1993 Flight control computers `to bypass pilots' (Brian Randell) UK Hacker trial (Brian Randell) Computerised Intensive Care Unit (H}kan Karlsson) Computerized telephone solicitations (Jane Beckman) Credit-card retention by phone number (Andrew Koenig) Cash machine keypad risk? (Paul Potts) Stop The Madness! (Arthur R. McGee) The risks of teaching about computers and the law (Peter D. Junger) Disaster Avoidance & Recovery Conference & Exhibition May 26-28 (Nigel Allen) RISKS 14.66 1 June 1993 Possible RISK in data retrieval? (Dale Drew) X application to finger (Nandakumar Sankaran) Re: Fake ATM Machine Steals PINs (Brinton Cooper) COMPASS '93 ANNOUNCEMENT (14-17 June) (Dolores Wallace) [Extended Early Reg] RISKS 14.67 1 June 1993 Crypto as "Right to Bear Arms" issue (Larry Hunter) Re: Peter D. Junger's risks of teaching... (Paul Robinson, Bill Murray [2], Carl Ellison, Tim Poston, Jonathan Haruni, Martin Minow, Jerry Leichter) RISKS 14.68 1 June 1993 Error on California Unemployment Checks (PGN) Re: Fake ATM Machine Steals PINs (Dan Franklin) Re: CHI & the Color-blind? (John R. Levine) Defending Crypto with the 2nd Amendment (Peter K. Boucher, David A. Honig, Jim Purtilo) Get yer RSA encryption now! (more on CLIPPER) (Jay Schmidgall) Re: Clipper (Carl Ellison) AIS BBS (Kim Clancy, Paul Ferguson, Vesselin Bontchev, Jim Thomas) RISKS 14.69 4 June 1993 Interference from mobile telephones (Erling Kristiansen) Zapped by the phone? (Richard Wexelblat) Re: Flight control computers to bypass pilots (Erling Kristiansen) WANTED: Article describing 10 Biggest Failures of Technology (R.J. Frost) Cryptic probable cause (Gary Preckshot) Re: Keypad security risks (Sean Matthews, Michael S. Polymenakos) Re: Fake ATM Machine Steals PINs (Phil White, Lars Wirzenius, Bob Frankston, Grant Grundler) Re: Cryptography and the Bill of Rights (Robert I. Eachus) More on the risks of teaching ... (Peter D. Junger) White House Electronic Mail (Steen Hansen) Did they have an address for Hillary? (Paul Robinson) RISKS 14.70 4 June 1993 Re: Did they have an address for Hillary? (Olivier MJ Crepin-Leblond, Sidney Markowitz) Health effects of VDTs - an update (Kenneth R Foster) RISKS 14.71 8 June 1993 RISKS Summer Slowdown Time (PGN) Phone Company Malfunction (Brinton Cooper) NIST Official Says Private Crypto May Be Outlawed (Mark Seecof, Marc Rotenberg) NIST CSSPAB Resolutions, 4 June 1993 (Dave Banisar) Fuzzy subway control used successfully in Sendai, Japan (Paul Eggert) French Fry Robots! (Dwight D. McKay) My grocery store is not dumb (Martin Minow) Radio smartcards (Gary McClelland) Formal Methods in Safety-Critical Standards (Jonathan Bowen) 2nd Call for Papers, ISOC Symp. on Net. and Dist. Sys. Security (Dan Nessett) Workshop on Digital Systems Reliability and Nuclear Safety (John Camp) AMAST'93 (Algebraic Methodology and Software Technology) (Pippo Scollo) RISKS 14.72 9 June 1993 Phone lottery in Phoenix (Kriss A. Hougland) Grassroots vs. Astroturf Movements (Shyamal Jajodia) RISK of undefined abbr., Re: Health effects of VDTs (Mark A. Hull-Richter) Citibank ATM risk (Steve Kass) Re: Fake ATM Machine Steals PINs (Debora Weber-Wulff) What's in it for the grocer? (Dave Kristol) Re: French Fry Robots! (Dean Kling, Jerry Hollombe) Error in DSRNS workshop announcement (Paul Robinson, Bruce Limber) Re: White House Electronic Mail (Nick Rothwell) Cryptography, Free Speech, and so on (Jerry Leichter) Re: Denning on NIST/NSA Revelations (Kevin S. McCurley) RISKS 14.73 12 June 1993 Palo Alto library computer system calamity (PGN) Computer errors in Spanish elections (Miguel Gallardo) Seattle Hackers Fined (Dave Weingart) Re: Flight control computers 'to bypass pilots' (Timothy Buchanan) Across the Computer Divide (Marty Leisner) The Internet is international (Frederick Roeber) Re: Whitehouse mail (Marcus J Ranum) Re: Grassroots vs. Astroturf Movements (Max Stern) Re: French Fry Robots! (Hugh JE Davies) Re: Citibank ATM risk (Jerry Hollombe, Dave Weingart, Greg Brail) Re: Cryptography, Free Speech, and so on (Carl Ellison) Re: Clipper (Dave Banisar) Re: Health effects of VDTs (correction) (Kenneth R Foster) Re: Errors in the correction of the error (Bruce Limber, BillV) Re: What's in it for the grocer? (Geraint Jones, David Carroll, Mike Olson, Brad Hicks) RISKS 14.74 6 July 1993 Major New York Telephone outage: cable cut in Mount Vernon (John Hawkinson) Another mobile phone RISK hits "Sunset Boulevard" (Jonathan I. Kamens) German Bundestag microphones STILL not working (Debora Weber-Wulff) Strasbourg A320 crash: "Pilot Error" - Official! (Pete Mellor) The great bancard network breakdown (Bertrand Meyer) UK National Savings "computer problem" (Jonathan Bowen) An extreme risk of poor computer security (Ross Anderson) 2 Men Arrested in Bogus Connecticut ATM Fraud (PGN) Digital Signature Patents (Noah Friedman) RISKS 14.75 14 July 1993 Bugs in the computer [Ant-ics in the Sun] (Clive Feather) Re: Important words in other fonts (Frederick G.M. Roeber) IEEE Computer Magazine Article Analyzes Therac-25 Accidents (Jim Haynes) Medical Reimbursements and Computer Glitches (Sanford Sherizen) Software Safety Workshop: Call for Papers and Participants (Lon D. Gowen) Application of Software Metrics and Quality Assurance in Industry: Workshop announcement (Pete Mellor) "Russian Day" in St.Petersburg (Klaus Brunnstein) Incident Response Workshop info (Gene Spafford) RISKS 14.76 20 July 1993 Earthquake `early' warning system (Bill Owens) DSS as a stamp tax (Mark Seecof) Privacy report in Canada (Mich Kabay) Remote Control Car Locks (David Plumpton) Airline entertainment systems - a true captive audience (Jon Leech) Re: Strasbourg A320 crash: "Pilot Error" (Flint Pellett) Re: Medical Reimbursements (Dan Yurman, Amos Shapir, Bob Frankston) ATM Fraud/Databases/Ouch! (Russ Smith [2]) CFP94 (George Trubow via Willis Ware) Science and Technology Through Science Fiction Workshop (Miquel Barcelo) RISKS 14.77 21 July 1993 Another "time bomb" -- MOSS (Dave Horsfall) Flood forecast risks (Douglas W. Jones) Re: Earthquake `early' warning system (Richard Stead) Re: Strasbourg A320 crash: "Pilot Error" (Lars-Henrik Eriksson) Re: ATM Fraud/Databases/Ouch! (Scott Schwartz) Credit Cards on the Internet (Paul Robinson) Re: Medical Reimbursements ... (Michael T. Palmer) Re: DSS as Stamp Tax (A. Padgett Peterson, Steve Bellovin, Jim Bidzos) CPSR Secrecy Statement (Dave Banisar) Announcements of NIST documents (Dolores Wallace) RISKS 14.78 27 July 1993 Computer-aided tax fraud (Mich Kabay) Industrial Espionage (Mich Kabay) Stingers (Bob Frankston) Chinese Airline Crashed a British Aerospace-made 146 "Whisperjet" (Li Gong) Biz Card Machine -- New Risk! (Dan Hartung) Re: Earthquake "early warning" systems (Lauren Weinstein, Brian Herzog) Re: Credit Cards on the Internet (Blake Sobiloff, Nandakumar Sankaran, Matt Crawford) Re: Seecof's reading ability (Mark Seecof) Dependability conference; call for participants (Jeremy Jacob) High-assurance software courses (Nancy Leveson) Centre for Software Reliability Workshop 1993 (Pete Mellor) RISKS 14.79 10 August 1993 Industrial espionage (Mich Kabay) Criminal record data leakage and tampering (Mich Kabay) Billion-dollar tax bills (Mich Kabay) More data remanence (Mich Kabay) Pizza RISK (Dale Drew) Yet another lottery screwup (Reva Freedman) "Terminal Compromise" by Winn Schwartau, on the Net (A. Padgett Peterson) ATM modem insecure? (Andrew Marchant-Shapiro) Jurassic Park Networks (Mich Kabay) Intrusion Detection workshop (Teresa Lunt) Computers, Freedom and Privacy (cfp'94) announcement (George Trubow) RISKS 14.80 dated 11 August 1993 (but issued 10 August) Article by Dorothy Denning on Clipper Chip (Al Stangenberger) SKIPJACK Review (Dorothy Denning) The Rule of Law and the Clipper Escrow Project (Peter Wayner) RISKS 14.81 11 August 1993 Colorado prison is escape-proof! (We'll see...) (Lance Gatrell) Surprise! contained in tar file (Olaf Titz) Exploiting Medco's database (David J. States) SAAB JAS 39 "Gripen" crashed (Lars-Henrik Eriksson) MD-11 slat extension (Robert Dorsett, Peter Ladkin) Call forwarding with "remote code" feature (Reva Freedman) Re: "Terminal Compromise" on the Net (Espen Andersen) Re: Jurassic Park Networks (rebooting through power reset) (Lauren Weinstein) Re: ATM modem insecure? (Lauren Weinstein) CfP, IEEE Symposium on Research in Security and Privacy (John Rushby) RISKS 14.83 16 August 1993 Dorney Park Hercules roller coaster injures 14 (Steve Walker) About 'Terminal Compression' (Paul Robinson) Ghost in the machine (Mich Kabay) Clusters and electromagnetism (Phil Agre) Re: SKIPJACK Review (Brandon S. Allbery) Clipper & French key escrow (Richard Schroeppel) Privacy Digests --- reminder (PGN) PDCS2: Predictably Dependable Computing Systems, Open Workshop (Louise Heery) RISKS 14.82 17 August 1993 RISKS-14.83!!! and RISKS-%&#@!! (PGN) Re: Dorney Park Hercules roller coaster injures 14 (Scott Walker) Re: Surprise! contained in tar file (David Wittenberg) Re: Terminal compression (csvcjld) Re: Terminal compromise (Mich Kabay) Re: Clusters and electromagnetic fields (Kenneth R Foster) Re: Gripen crash: pilot's view (Martyn Thomas) RISKS 14.84 17 August 1993 Re: BARFmail and other list headaches (Dennis G. Rears) Prototype voice-operated ATM (Malcolm Butler) Filling Station Ripoff (Matt Healy) President Clinton's Tax Plan (Richard Schroeppel) Terminal Consternation (A. Padgett Peterson) Preserving electronic memos -- a serious problem (Bob Frankston) Call for Clipper Comments (Dave Banisar) [FED REG in RISKS-14.84N] Call for papers -- 2nd Workshop on Feature Interactions (Nancy Griffeth) Call for papers IFIP SEC'94 Caribbean (F. Bertil Fortrie) RISKS 14.85 20 August 1993 Child-Prodigy or Prodigy-Child? 14-year-old triggers alarms (Jason Harrison) IRS accounting bugs (Mich Kabay) IRS & security (Mich Kabay) Re: Dorney Park Hercules roller coaster ... (Gary Wright) Accessible answering machines may grant too much access (Tsutomu Shimomura) Re: ATM Scam (Gene Spafford) High-speed password matching (Steve Stevenson) Re: Crash of JAS 39 Gripen (Derrick Everett) Risks of coming mass-communication capabilities (Jim Hiller) Re: Computers dialing 911 (Mark) Good news from the front lines (Jeremy Grodberg) Gideon Kunda, Engineering Culture (Phil Agre) Virus Catalog: new edition (Klaus Brunnstein) InfoWar announcement (Mich Kabay) RISKS 14.86 23 August 1993 Everyone gets a 'A' for Welsh exam (Richard Clayton) Medicare checks for $0.01 (Bear Giles) E-mail privacy (Mich Kabay) Re: Child-Prodigy (Ed Ravin, Jeffrey I. Schiller) AT&T Security Authenticators (thomp962) Re: Remotely accessible answering machines (Mark A Biggar) Worrying about online education (Steve Talbott) NCSC 16 Announcement (Louise Reiner) RISKS 14.87 25 August 1993 Mars Observer (PGN) Chronicle of a bug foretold (Paul Eggert) Quote for the Day (Brinton Cooper) RISKS of elaborating on exploitation of known RISKS (David P. Reed, PGN) Cisco routers (Al Whaley) Phone Number Gridlock Looms (Sanford Sherizen) Digital markets (Phil Agre) Re: Everyone gets a 'A' for Welsh exam (Lars-Henrik Eriksson) InfoTech Security and Control, Conference Report (Klaus Brunnstein) RISKS 14.88 25 August 1993 Re: Mars Observer (Lee Mellinger, Michael Stern) Re: RISKS of elaborating on ... known RISKS (Bob Brown, Douglas W. Jones) Re: Telephone verification (Tom Swiss) Re: Digital Markets (A. Padgett Peterson) Re: Child-Prodigy or Prodigy-Child? (Bob Frankston) 911 & Call Privacy *67 problems (US West) (David Kovanen via Richard Jensen) More Gripen Griping (Peter B Ladkin) RISKS 14.89 27 August 1993 Re: The Mars Observer (Ron Baalke at JPL via Ted Lee and Sandy Murphy) Re: More Gripen Griping (Mary Shafer) Be careful with your test cases! (Kenneth Wood) Re: Quote for the Day (Wes Plouff) Dial 1 first (Fredrick B. Cohen) Re: Cisco backdoor? (Paul Traina) sendmail debug option? RISK or friend? (Eric Allman) Re: RISKS of elaborating on exploitation of known RISKS (Jim Hudson) Call Privacy *67 faults (Ed Ravin, Stuart Moore) Re: Electronic Education (Shyamal Jajodia) Use of PIN as authenticator to humans (Jim Horning, Joe Konstan) Call for Papers: IEEE Computer Security Foundations Workshop VII (Li Gong) RISKS 14.90 2 September 1993 SUMMARY OF RISKS VOLUME 14, collected in RISKS-14.00 (3 Nov 92 - 2 Sep 93) ------------------------------ End of RISKS-FORUM Digest 14.90 ************************