• Risks Digest 32.18 (2/2)

    From RISKS List Owner@21:1/5 to All on Fri Aug 7 23:40:22 2020
    [continued from previous message]

    (NYTimes)

    Nearly two-thirds of GEDmatch's users opt out of helping law enforcement.
    For a brief window this month, that didn't matter.

    https://www.nytimes.com/2020/08/01/technology/gedmatch-breach-privacy.html

    ------------------------------

    Date: Tue, 4 Aug 2020 13:08:18 +0800
    From: Richard Stein <rmstein@ieee.org>
    Subject: Computers on verge of designing their own programs (Techxplore)

    https://techxplore.com/news/2020-08-verge.html

    "Gottschlich explained, 'Intel's ultimate goal for machine programming is to democratize the creation of software. When fully realized, machine
    programming will enable everyone to create software by expressing their intention in whatever fashion that's best for them, whether that's code, natural language or something else. That's an audacious goal, and while
    there's much more work to be done, MISIM is a solid step toward it."

    MISIM relies on AI to compare "correct programs" against a candidate specification. Correctly transliterating this specification, as per formal methods, should satisfy user expectations when the cooked code runs. I
    wonder if MISIM would succeed in a transliteration of a multi-threaded
    process specification per Hoare's communicating sequential processes?

    Would be interesting to see if Machine Inferred Code Similarity could eventually detect and triage race conditions, kernel or interruptible sleep state deadlock. Significant specification and test cases are needed (http://www.cs.uky.edu/ai/benchmark-suite/deadlock-detection.html retrieved
    on 04AUG2020) to identify these conditions.

    Someday, the app you buy might be authored and qualified by a bot. MISIM portends a solution, however partial, to the Turing Halting Problem.

    MISIM does not demand royalties -- a piece of the action -- from app license and sale. No sick leave, vacation, or retirement benefits are paid as carbon-based authors are largely out-of-the-loop: it codes for virtual
    peanuts, until it decides if it can or cannot.

    ------------------------------

    Date: Fri, 7 Aug 2020 01:11:00 -1000
    From: geoff goodfellow <geoff@iconia.com>
    Subject: AI bias detection; aka the fate of our data-driven world

    *Rooting out implicit bias in AI is fundamental to ensuring an equitable society. Is it even possible?*

    Here's an astounding statistic: Between 2015 and 2019, global use of
    artificial intelligence grew by 270% <https://venturebeat.com/2019/01/21/gartner-enterprise-ai-implementation-grew-270-over-the-past-four-years/>.
    It's estimated that 85% of Americans <https://news.gallup.com/poll/228497/americans-already-using-artificial-intelligence-products.aspx>
    *are already using* AI products daily, whether they now it or not.

    It's easy to conflate *artificial* intelligence with *superior*
    intelligence, as though machine learning based on massive data sets leads to inherently better decision-making. The problem, of course, is that human choices undergird every aspect of AI <https://www.zdnet.com/topic/artificial-intelligence/>, from the curation of data sets to the weighting of variables. Usually there's little or no transparency for the end user, meaning resulting biases are next to
    impossible to account for. Given that AI is now involved in everything from jurisprudence to lending, it's massively important for the future of our increasingly data-driven society that the issue of bias in AI be taken seriously.

    This cuts both ways -- development in the technology class itself, which represents massive new possibilities for our species, will only suffer from diminished trust if bias persists without transparency and accountability.
    In one recent conversation <https://www.zdnet.com/article/5-reasons-ai-isnt-being-adopted-at-your-organization-and-how-to-fix-it/>,
    Booz Allen's Kathleen Featheringham <https://www.boozallen.com/e/insight/blog/kathleen-featheringham-tells-stories-through-data.html>,
    Director of AI Strategy & Training, told me that adoption of the technology
    is being slowed by what she identifies as historical fears:

    Because AI is still evolving from its nascency, different end users may
    have wildly different understandings about its current abilities, best uses
    and even how it works. This contributes to a blackbox around AI decision-making. To gain transparency into how an AI model reaches end
    results, it is necessary to build measures that document the AI's decision-making process. In AI's early stage, transparency is crucial to establishing trust and adoption.

    While AI's promise is exciting, its adoption is slowed by historical fear
    of new technologies. As a result, organizations become overwhelmed and
    don't know where to start. When pressured by senior leadership, and driven
    by guesswork rather than priorities, organizations rush to enterprise AI implementation that creates more problems.

    One solution that's becoming more visible in the market is validation
    software. Samasource <https://www.samasource.com/>, a prominent supplier of solutions to a quarter of the Fortune 50, is launching AI Bias Detection, a solution that helps to detect and combat systemic bias in artificial intelligence across a number of industries. The system, which leaves a
    human in the loop, offers advanced analytics and reporting capabilities
    that help AI teams spot and correct bias before it's implemented across a variety of use-cases, from identification technology to self-driving
    vehicles. [...] https://www.zdnet.com/article/ai-bias-detection-and-the-fate-of-our-data-driven-world/

    ------------------------------

    Date: Mon, 3 Aug 2020 08:19:33 -0700
    From: Lauren Weinstein <lauren@vortex.com>
    Subject: The Truth Is Paywalled But The Lies Are Free (Current Affairs)

    https://www.currentaffairs.org/2020/08/the-truth-is-paywalled-but-the-lies-are-free/

    ------------------------------

    Date: Tue, 04 Aug 2020 20:11:37 -0400
    From: "Mike Alexander" <risksreply@msalexander.com>
    Subject: A very good fake message from Facebook

    I have turned on the option on Facebook to encrypt all messages from them
    using GPG. I recently got a message that came from a Facebook domain (based
    on the first Received: header) and was signed with their GPG key, but was apparently not from them. It appeared to be a notification of a private message from a friend of mine, but she says she didn't send me a message on Messenger, and the links that purport to open the message go to www.m.me and try to open a Flash movie (I don't have Flash installed). I really can't
    think of a good explanation for this that doesn't involve something bad happening at Facebook.

    ------------------------------

    Date: Fri, 7 Aug 2020 06:43:47 -0600
    From: "Matthew Kruk" <mkrukg@gmail.com>
    Subject: Job-related scams and frauds (CBC)

    Job scams are on the rise and becoming more sophisticated, said Jeff
    Thomson, senior RCMP intelligence analyst at the Canadian Anti-Fraud Centre.

    In 2019, the centre received more than 2,400 job-related fraud reports, he said. The number of reports counted in 2020 is already more than 2,300 -
    and that's only up to July.

    With more people losing their jobs during the COVID-19 pandemic and seeking work, as well as shifting to doing business primarily online, "it's sort of ripe for job scams right now," Thomson said.

    https://www.cbc.ca/news/canada/toronto/fake-company-job-scam-gux-it-1.5677217

    ------------------------------

    Date: Thu, 6 Aug 2020 01:10:00 -1000
    From: geoff goodfellow <geoff@iconia.com>
    Subject: Cheap, Easy Deepfakes Are Getting Closer to the Real Thing (WiReD)

    Using open-source software and less than $100, a researcher was able to
    create plausible images and audio of actor Tom Hanks.

    There are many photos of Tom Hanks, but none like the images of the leading everyman shown at the Black Hat computer security conference Wednesday:
    They were made by machine-learning algorithms, not a camera.

    Philip Tully, a data scientist at security company FireEye, generated the
    hoax Hankses to test how easily open-source software from artificial intelligence labs could be adapted to misinformation campaigns. His
    conclusion:

    ``People with not a lot of experience can take these machine-learning
    models and do pretty powerful things with them.''

    Seen at full resolution, FireEye's fake Hanks images have flaws like
    unnatural neck folds and skin textures. But they accurately reproduce the familiar details of the actor's face like his brow furrows and green-gray
    eyes, which gaze cooly at the viewer. At the scale of a social network thumbnail, the AI-made images could easily pass as real.

    To make them, Tully needed only to gather a few hundred images of Hanks
    online and spend less than $100 to tune open-source face-generation
    software to his chosen subject. Armed with the tweaked software, he cranks
    out Hanks. Tully also used other open-source AI software to attempt to
    mimic the actor's voice from three YouTube clips, with less impressive
    results.

    By demonstrating just how cheaply and easily a person can generate passable fake photos, the FireEye project <https://www.fireeye.com/blog/threat-research/2020/08/repurposing-neural-networks-to-generate-synthetic-media-for-information-operations.html>
    could
    add weight to concerns that online disinformation could be magnified by AI technology that generates passable images or speech. Those techniques and
    their output are often called deepfakes, a term taken from the name of a
    Reddit account that late in 2017 posted pornographic videos modified to
    include the faces of Hollywood actresses.

    Most deepfakes observed in the wilds of the Internet are low quality and created for pornographic <https://www.wired.com/story/most-deepfakes-porn-multiplying-fast/> or entertainment purposes. So far, the best-documented malicious use of
    deepfakes is harassment of women <https://www.wired.com/story/forget-politics-deepfakes-bullies/>. Corporate projects or media productions <https://www.wired.com/story/covid-drives-real-businesses-deepfake-technology/> can create slicker output, including videos, on bigger budgets. FireEye's researchers wanted to show how someone could piggyback on sophisticated AI research with minimal resources or AI expertise. Members of Congress from
    both parties have raised concerns that deepfakes could be bent for political interference. [...] https://www.wired.com/story/cheap-easy-deepfakes-closer-real-thing/

    ------------------------------

    Date: Thu, 6 Aug 2020 14:41:44 -0400
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: Blackbaud breach

    ``We deeply appreciate your generous support of the Freedom Forum and our
    affiliates, the Newseum and the Freedom Forum Institute, and our mission
    to foster First Amendment freedoms for all. As part of our efforts to
    share important updates with our valued supporters, we are writing to
    inform you about a data incident involving one of our long-time vendors,
    Blackbaud, that may have affected some of your personal information.
    Blackbaud is the global market leader in not-for-profit software, and
    their products are commonly used to manage relationships and
    communications with constituents and donors.''
    https://www.blackbaud.com/
    http://engage.newseum.org/site/MessageViewer?dlv_id=10606&em_id=6687.0

    This is at least my fourth such notice from some organization using
    Blackbaud. Of course, there's no way for people to tell who else might be a victim of an outsourcing vendor. How many more? It's tough doing due
    diligence with such invisible infrastructure.

    ------------------------------

    Date: Mon, 3 Aug 2020 19:17:19 -0400
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: Ajit Pai calls for vigorous debate on Trump's social media
    crackdown (Ars Technica)

    "Tell the FCC to reject this," Democrat says as agency seeks public comment.

    https://arstechnica.com/tech-policy/2020/08/fcc-seeks-public-comment-on-trumps-attempt-to-punish-twitter-and-facebook/

    ------------------------------

    Date: Fri, 7 Aug 2020 15:13:20 -0700
    From: Lauren Weinstein <lauren@vortex.com>
    Subject: Sensitive to claims of bias, Facebook relaxed misinformation rules
    for conservative pages (NBC News)

    https://www.nbcnews.com/tech/tech-news/sensitive-claims-bias-facebook-relaxed-misinformation-rules-conservative-pages-n1236182

    ------------------------------

    Date: Wed, 5 Aug 2020 19:42:02 -0400
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: A Bug In Instagram's Hashtag Has Been Favoring Donald Trump
    (BuzzfeedNews)

    ``A technical error caused a number of hashtags to not show related
    hashtags. We've disabled this feature while we investigate.''

    https://www.buzzfeednews.com/article/ryanmac/instagram-related-hashtags-favoring-trump-over-biden

    A bug they call it, a poisonous bug...

    ------------------------------

    Date: Thu, 6 Aug 2020 09:48:12 -0700
    From: Lauren Weinstein <lauren@vortex.com>
    Subject: Big Problem: Twitter users attempting to expose @realDonaldTrump
    lies are being blocked for surfacing his lies! (CNN)

    https://www.cnn.com/2020/08/06/politics/twitter-democratic-national-committee-trump/index.html

    ------------------------------

    Date: Sun, 2 Aug 2020 16:52:11 -0700
    From: Lauren Weinstein <lauren@vortex.com>
    Subject: From Minecraft Tricks to Twitter Hack: A Florida Teen's Troubled
    Online Path (NYTimes)

    https://www.nytimes.com/2020/08/02/technology/florida-teenager-twitter-hack.html

    ------------------------------

    Date: Tue, 4 Aug 2020 10:36:13 -0400
    From: Monty Solomon <monty@roscom.com>
    Subject: FBI Used Information From An Online Forum Hacking To Track Down
    One Of The Hackers Behind The Massive Twitter Attack (TechDirt)

    https://www.techdirt.com/articles/20200802/16255545023/fbi-used-information-online-forum-hacking-to-track-down-one-hackers-behind-massive-twitter-attack.shtml

    ------------------------------

    Date: Wed, 5 Aug 2020 19:44:42 -0400
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: Pranksters Stream Porn During Zoom Hearing for Alleged
    17-Year-Old Twitter Hacker (gizmodo)

    Pranksters disrupted judicial hearings on Wednesday for the 17-year-old
    Florida kid who allegedly hijacked the accounts of prominent Twitter users
    last month, according to multiple <https://twitter.com/WFLARyan/status/1291003400881147906> people <https://twitter.com/TheMateoJones/status/1291006211983388672> on the teleconference call. There were several intrusions during the first attempt
    at the hearing, and it was finally stopped after pornography was streamed
    via Pornhub. [...]

    ``How the judge in charge of the proceeding didn't think to enable settings that would prevent people from taking over the screen is beyond me. My guess
    is he didn't know he could,'' security expert Brian Krebs tweeted Wednesday morning. ``This guy's reaction sums it up.''

    The reaction, of course, was one of shock and bewilderment.

    https://gizmodo.com/pranksters-stream-porn-during-zoom-hearing-for-alleged-1844618440

    ------------------------------

    Date: Sun, 2 Aug 2020 10:42:00 +0200
    From: Peter Bernard Ladkin <ladkin@causalis.com>
    Subject: Re: Darwin's tautology? (RISKS-32.12,15,16,17)

    It is somewhat unkind of Amos Shapir (Risks 32.17) to suggest that a 940-year-old problem in logic is a "quagmire". 141 years ago, someone could have said the same about the distribution of terms, which was then solved elegantly and definitively by Herr Frege in his Begriffschrift pamphlet in 1879. (See Peter Geach, Logic Matters, Basil Blackwell 1972 for extensive discussion of distribution, and Jean van Heijenoort, From Frege to
    G=C3=B6del: A Source Book in Mathematical Logic, 1879-1931, Harvard
    University Press, 1967 for an english translation of the Begriffschrift.)

    Whether a RISKS reader wants to "step into" the subject of Anselm's argument
    in the Proslogion depends on whether she is interested in logic. An interest
    in conceptions of gods is secondary (although not for Anselm).

    Martin Ward cites Goedel's formulation of an Ontological Argument for the existence of a god. The version written down by Dana Scott appears to be formally correct (Benzm=C3=BCller and Woltzenlogel Paleo, ECAI Proceedings
    2014 http://page.mi.fu-berlin.de/cbenzmueller/papers/C40.pdf ) Paul
    Oppenheimer and Ed Zalta had looked somewhat earlier at other versions and showed some were formally provable (see, e.g., Australasian Journal of Philosophy, 2013, https://mally.stanford.edu/Papers/ontological-computational.pdf). John
    Rushby verified a version of the Oppenheimer-Zalta proof in PVS (CAV Proceedings, 2013 http://page.mi.fu-berlin.de/cbenzmueller/papers/C40.pdf ).

    I have even done a little twiddling myself, though with traditional analysis
    of premises and arguments, not with ATPs. Peter Millican (a philosopher at Oxford) claimed to have found a fatal flaw in Anselm's argument (in Mind
    113, 2004, http://millican.org/papers/2004OntArgMind.pdf ). I didn't agree
    with Millican that the flaw is "fatal". I think I found some missing
    premises and supplied them (preprint January 2017). I had some discussion
    with Millican and my former tutor Ralph Walker, a Kant specialist, about
    it. (Kant had some thoughts about Anselm's argument also.)

    Shapir also defines "tautology"

    Tautology is a term in logic defined as a statement which is true unconditionally, determined just by its formulation, e.g., "A or not A" -- Thus when a statement is a tautology, its truthfulness requires no proof.
    A statement cannot "become a tautology" by a proof.

    He thereby contradicts Ward (RISKS-32.15), who thinks that all valid mathematical theorems are tautologies, whereas you could surely only claim a few of them are "determined just by [their] formulation". Fermat's Last
    Theorem certainly wasn't. Its formulation is in the language of +, x and
    exp, and no one I know finds it remotely plausible that there is a proof in that language alone.

    The term "tautology" is wider than what Shapir suggests. Wikipedia https://en.wikipedia.org/wiki/Tautology indicates at least three different meanings. Looking just at "term[s] in logic", per Shapir, one can wonder whether a tautology is a statement (1) "true in virtue of its form"
    (Shapir), or one (2) "true in every possible interpretation" (Wikipedia https://en.wikipedia.org/wiki/Tautology_(logic) ). Those are by no means the same: Fermat's Last Theorem is true in every possible interpretation, so fulfills (2) but, as I just observed, not (1).

    Ward, for his part (in RISKS-32.15), calls "circular" arguments out as being "fallacious". Whatever bad things might come with being "fallacious", some circular arguments are both valid and good. "A, therefore A" is as circular
    as you can get. It is also an inference rule of Natural Deduction and an
    axiom of Sequent Calculus, two of the most useful formulations of logic(s).

    ------------------------------

    Date: Sun, 2 Aug 2020 12:48:20 PDT
    From: "Peter G. Neumann" <neumann@csl.sri.com>
    Subject: Re: Darwin's tautology? (Ladkin, RISKS-32.18)

    My long-time colleague John Rushby in the SRI Computer Science Laboratory
    has been studying what Peter Ladkin refers to in the above RISKS item,
    and John has two papers. See his website:
    http://www.csl.sri.com/users/rushby/biblio.html

    * The Ontological Argument in PVS
    Fun With Formal Methods, Invited paper presented at the CAV Workshop,
    St. Petersburg, Russia, 13 July ‎2020
    An 11th Century proof of the existence of God is revisited, and proven
    using the SRI PVS proof system.

    * Mechanized Analysis of Anselm's Modal Ontological Argument
    International Journal of the Philosophy of Religion, 2020, in press.

    [I'm blowing the whistle on this topic, which quickly gets outside the
    realm of logic, although the subsequent still-ongoing private exchanges
    are quite interesting. PGN]

    ------------------------------

    Date: Sun, 2 Aug 2020 02:22:50 +0000
    From: Douglas Lucas <dal@riseup.net>
    Subject: Re: When tax prep is free, you may be paying with your privacy
    (Dorsey, RISKS-32.17)

    I do not understand why people are willing to pay any money to do
    it online when doing it by hand is simple and cheap unless you have a
    lot of income or very complex deductions.

    Imagine not people but ideas and actions. Then imagine a protagonist who
    begun hiking the Appalachian Trail prior to COVID-19's arrival in the United States. 2/3 through the hike, he begins hearing from other hikers of some virus, some disease, that might be fake news or ancient ideograms. It is now time for him to leave the Appalachian Trail, and as the climactic moment arrives, night before tax day in the United States (14 April 2020), we are passed through a single flux capacitor like a f(x) chain rule from Mars.

    I argue to myself and but few others in person that any frozen image,
    whether the paragraphs above or a painting in a gilded frame of a gilded museum, can be analyzed by applying 4 criteria: 'holistic context'
    (oxymoronic, but bear with me); changes in distance; changes in time; and changes in emotions (e.g., love/shame battling through yap stones and
    Catholic indulges and dolla dolla bills; prisoner dilemmas; and ethics vs
    moral compasses)...

    And lo, the capacitor fluxes a second time: from Mars, seen are immigrants, lumpenproles, refugees, political prisoners, criminals, traffickers of armaments of all shapes and colors, in a word, the neurodivergent.

    The final flux of this capacitation is that I performed zero background research on who 'Scott Dorsey' is, who 'kludge@panix.com' is, what his
    primary second or third language is, and so on, meaning I am earnestly attempting to abstract from my above argument, ad hominem, ad authoritatem.

    Does the passing the above through the quoted focal lens of "I do not understand why..." make the understanding better or worse, or do we simply
    wait for more or less dire RISKS digest headlines to tell us that answer?

    ------------------------------

    Date: Wed, 5 Aug 2020 22:04:36 +0100
    From: Chris Drewe <e767pmk@yahoo.co.uk>
    Subject: Re: When tax prep is free, you may be paying with your privacy.
    (RISKS-32.17)

    Similar in the UK (I can't speak from experience); however, legend has it
    that the UK tax system is the most complicated in the world, although it's a highly-competitive field and many other countries may claim the title. Therefore there's plenty of potential for errors and differences of opinion, and that's apart from the constant changes of course. As the old joke says,
    if you get a gas bill for a million pounds then everybody has a good laugh,
    but if you get a tax bill for a million pounds, you need a good accountant
    and lawyer, and fast.

    Part of the problem seems to be that UK tax policy is as much about
    punishing and rewarding behaviour as raising funds for government spending,
    so the basic approach is high basic tax rates with loads of exemptions, reliefs, concessions, etc. to show how caring they are for letting you do
    the right thing. And part of *this* problem is politicians coming up with kludges and tweaks to fix this month's headline worry, forgetting that the fixes usually stay around much longer after the original problem has been forgotten. Some people have suggested a 'flat tax' policy, i.e. add up your income on one side and your deductions on the other, then pay a straight tax of, say, 20% on the difference. Wonderfully simple, but the UK policy is
    the complete opposite.

    One possible problem for me is tax on interest and share dividends. Historically, if you saved money in a bank deposit account, then tax was deducted from the interest at a standard rate, and the bank sent periodic statements saying "your account has earned X pounds of interest, we have deducted Y pounds of tax, and paid X-Y pounds into your account"; if you
    paid higher tax then you declared this on your tax form, or if you didn't
    pay tax then you could claim it back. A similar arrangement applied to
    share dividends and suchlike. Hence the vast majority of people paid tax at the right rate by default.

    Nowadays, this doesn't apply -- any payments are given without deductions,
    and you have to declare these if they exceed your allowance, currently 1,000 pounds for interest and 2,000 pounds (was 5,000 pounds) for dividends. So
    in my case I would have to keep an eagle eye out for all of these payments during the year and then be ready to 'fess up if the thresholds are reached. Retired people often rely on investment income to supplement their pensions, and commentators have pointed out that many of them many have gone through their entire working lives without having to worry about filing tax details, then may well unexpectedly find themselves having to grapple with taxation bureaucracy in their advancing years.

    In my case I'm donating my modest holdings of shares to charity (there's a 'Sharegift' scheme to do this on a no-cost basis, avoiding the usual hefty trading fees on tiny shareholdings), and today's interest rates ("high interest" means anything >0.0%) mean that I'm unlikely to earn much here. Luckily I don't have any dependents as the UK welfare system is at least as complex as tax, with a good deal of interaction between them, so that's one
    can of worms avoided.

    The UK tax authorities accept more and more information on-line only, which
    may require access to expensive dedicated software and/or a steep learning curve, so not much scope for DiY there. People with a regular income from employment or a pension normally have this done for them by their employer
    or pension provider; this is more problematic for those with irregular
    sources of money. One instance mentioned in the news a few years ago
    concerned those working in the broadcasting industry. As their work is
    usually erratic, they often form themselves into companies and contract themselves to programme makers or whoever, so are paid by company rules
    instead of as employees, with lower tax rates. The authorities declared one
    of these schemes operated by the BBC to be illegal, so not only did the
    stars have to pay large unexpected tax bills, but they complained that the
    BBC had demanded this arrangement as a condition of gaining work with them, assuming that it had all been cleared beforehand.

    ------------------------------

    Date: Wed, 5 Aug 2020 18:41:59 -0600
    From: "Matthew Kruk" <mkrukg@gmail.com>
    Subject: Bill English

    Bill English, the computer engineer who built the very first prototype
    mouse, was the behind-the-scenes mastermind of the "Mother of All Demos" and later assisted Alan Kay in building the Xerox Parc Alto computer, has died
    at the age of 91.

    https://www.i-programmer.info/news/82/13892.html

    "The Mother of all Demos" included at URL. 1968 - wow.

    ------------------------------

    Date: Mon, 1 Aug 2020 11:11:11 -0800
    From: RISKS-request@csl.sri.com
    Subject: Abridged info on RISKS (comp.risks)

    The ACM RISKS Forum is a MODERATED digest. Its Usenet manifestation is
    comp.risks, the feed for which is donated by panix.com as of June 2011.
    SUBSCRIPTIONS: The mailman Web interface can be used directly to
    subscribe and unsubscribe:
    http://mls.csl.sri.com/mailman/listinfo/risks

    SUBMISSIONS: to risks@CSL.sri.com with meaningful SUBJECT: line that
    includes the string `notsp'. Otherwise your message may not be read.
    *** This attention-string has never changed, but might if spammers use it.
    SPAM challenge-responses will not be honored. Instead, use an alternative
    address from which you never send mail where the address becomes public!
    The complete INFO file (submissions, default disclaimers, archive sites,
    copyright policy, etc.) is online.
    <http://www.CSL.sri.com/risksinfo.html>
    *** Contributors are assumed to have read the full info file for guidelines!

    OFFICIAL ARCHIVES: http://www.risks.org takes you to Lindsay Marshall's
    searchable html archive at newcastle:
    http://catless.ncl.ac.uk/Risks/VL.IS --> VoLume, ISsue.
    Also, ftp://ftp.sri.com/risks for the current volume/previous directories
    or ftp://ftp.sri.com/VL/risks-VL.IS for previous VoLume
    If none of those work for you, the most recent issue is always at
    http://www.csl.sri.com/users/risko/risks.txt, and index at /risks-32.00
    ALTERNATIVE ARCHIVES: http://seclists.org/risks/ (only since mid-2001)
    *** NOTE: If a cited URL fails, we do not try to update them. Try
    browsing on the keywords in the subject line or cited article leads.
    Apologies for what Office365 and SafeLinks may have done to URLs.
    Special Offer to Join ACM for readers of the ACM RISKS Forum:
    <http://www.acm.org/joinacm1>

    ------------------------------

    End of RISKS-FORUM Digest 32.18
    ************************

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)