From cjc@novell.com  Mon Aug 19 23:28:53 1996
Received: from novell.com (nj-ums.fpk.novell.com [147.2.128.54]) by suburbia.net (8.7.4/Proff-950810) with SMTP id XAA26638 for <best-of-security@suburbia.net>; Mon, 19 Aug 1996 23:28:31 +1000
Date: Mon, 19 Aug 1996 23:28:31 +1000
From: cjc@novell.com
Message-Id: <199608191328.XAA26638@suburbia.net>
Received: from INET-NJ-Message_Server by novell.com
	with Novell_GroupWise; Mon, 19 Aug 1996 08:28:01 -0400

>From cjc Mon Aug 19 09:18 EDT 1996 remote from fpk
Content-Length: 760
Message-Id: <s2182591.015@novell.com>
Date: Mon, 19 Aug 1996 09:15:00 -0400
From: Chris Calabrese  <cjc@novell.com>
To: best-of-security@suburbia.net
Subject: Re: BoS: 128-bit Netscape registration

 > While trying to download the 128-bit high-security version of Netscape,
 > there was a notice about how they try to verify that you are a US Resident.
 > Apparently they pass on the information you entered to another service and
 > presumably if you don't show up you don't get to download the software.
 > 
 > That service is: http://www.lookupusa.com/lookupusa/ada/ada.htm
 > [[ SHORTC~1.URL : 4620 in SHORTC~1.URL ]]

Hmm, that is interesting.  Neither me nor my wife were listed.
However, it was trivial to find people who were listed, so a foreigner
trying to download the 128-bit version of NetScape could build a fake
profile pretty easily...


--
Christopher J. Calabrese
Security Architect
Novell Information Services and Technology
cjc@novell.com

