September 2000 - cypherpunks-legacy

CDR: Re: police IR searches to Supremes
by David Honig 27 Sep '00

27 Sep '00

At 06:52 AM 9/27/00 -0400, Sampo A Syreeni wrote: >Well, I think that as long as a conventional photograph is taken from a >public place, it does not constitute a punishable breach of privacy. What's >so very different about doing the same thing with IR? Heh, maybe someone should take some IR (video with IR filter removed) pictures of Janet Reno, and publish. (Then again, maybe not.)

1 0

CDR: Re: Lions and Tigers and Backdoors, oh, my...
by Wilfred L. Guerin 27 Sep '00

27 Sep '00

[If this is a duplicate, I appologise, ssz didnt accept first attempt ] -=|[ Relevance: Backdoor Systems, Spook penetration Tools, etc... ]|=- I believe it would be good to throw in some additional toys for analysis: Recently (many months ago) we came across a version of the TSAdBot system, produced by Conducent ( http://www.conducent.com ), which very easily utilized its given backdoors in various windows {95,98,98b,NT5/2000,etc} installations, heedless of any 3rd party security or protection system. In short, we watched this little deamon run streight through the first tier of Win 'security' and then begin iterative/enumerative analysis of registry entries at system level to conjure up a coherent (probibly bitmapped and cyphered) representation of the os and installed components, then to be sent off to a central server, which responeded back with the algo for the next level of penetration. Truthfully, with publicly available tools, you can watch the TsAdBot system and its multi-purpose components rip streight through your system, 'compromise' all personal and internal data in your registry, and then proceed to interact with its central control server for next-phase penetration instructions. Upon completion of this first task, the infiltration system is housed nicely amongst core system dll and other files, has numerous tautologic registry routes to ensure its stability and operation, and is among the first systems to be loaded by the os upon next boot... What it does while running? How should we know, it merely does ADVERTISING, right? ;) One version we analysed used a variety of old methods of simple ghosting and self-protection mechanisms, including a killable daemon which told the higher level system (which, after 3rd pass of infiltration, your user-level tools are no longer able to see within the win system components it has compromised) of its demise, thus allowing the higher-functioning code -- running invisbly in most of your systems at this moment -- to maintain its spooky existance. Various tactful methods are used by the system to be self-supporting; TsAdBot easily penetrates low-level system bounds (admin level/passwds/etc) and starts acting at the system level upon the commencement of its operation, but also uses a variety of hidden features (cloning, self-checking, and self-protecting mechanisms) to ensure its stability, but moreso used an interesting mechanism of registry re-routing that allowed the penetration code to be nestled within any number of system components, yet not visible due to cyphered and other round-about routes of accessing and activating itself upon reboot. In short, within a few flops, this system penetrates windows security and lodges at least one copy of itself in 'untouchable' space, contacts external servers for second phase penetration instructions, and moreso, disguises itself as a simple ADVERTISING CLIENT in most major software pacakges. We recall what happened to Aureate systems when they were disclosed, however, Conducent seems to have some additional support structures... How else would they know the intentional m$ provided backdoors, and moreso been able to easily introduce the package into 90% of business workstations and personal computers without the assistance of some overbearing entity? Now, I state here basic overview, possibly 'speculation' and nothing more. You are expected to review the various versions of this advanced Conducent system and its reality. Note: The version I worked with primarily was recovered a few months ago, and no formal report has been made regarding its mechanisms. Do note, especially, their press releases... such things as stating that the method and strange communication are harmless to the user, and other such bullshit which is most obviously frivilous sheep-talk. http://www.conducent.com/aboutus-presskit.shtm most of the articles I recall are still on their website. I would quote directly, but this is already a heavy message. Of other notes, Vmware and bochs/etc have imaging of fake drives, How about someone using their brain and runing some simulations on various versions? Simple code reversing is not that complex either. I personally won't go there at this second, but would be happy to inform anyone interested in the pursuit... Its not hard to map out and reverse a process... This is a fairly well coded operation and system, and it serves its purpose to penetrate your computer security quite well, however, there is nothing we cant fix, and this, dear friends, is something the non-affiliated public should very quickly act upon. Note: I have not analysed the current TsAdBot systems nor any other from this source recently, as their internal structure, mechanisms, or versions may have changed, but, I definitely still have on record a variety of the old versions for analysis... Its merely an advertising client, isnt it?... Regardless, the listing of software which uses the system is quite easily accessable on their site, including demo packages and whatnot for review. I strongly suggest, if you value the integrity of your winx systems, that you not run any programs on it until you have reviewed the realities. You probibly already have, though... I leave it at that. Open for 'speculation' and 'review'... however I expect 'review' to be quite a prominant element in the near future. Good day, dear friend sheeps :) -Wilfred L. Guerin Wilfred(a)Cryogen.com [SideNote: Originally, the code looked like something the FBfeds would come up with, but after more recent review, I truthfully cant speculate on the origin, its merely code, but talking to centralized servers and being so obvious is now a common trait of most of the organizations...] At 05:18 PM 9/26/2000 -0400, you wrote: >-----BEGIN PGP SIGNED MESSAGE----- > >Lions and Tigers and Backdoors, Oh, My. > >Frankly, I expect that NSA would be remiss in their grope-age indeed if >they *didn't* try to get a backdoor into anything it could, and, of > >I mean, can't they be a little more *creative*, fer chrissakes? How >stupid do they think the public really is? > >Oh. Right. I forgot... > >Cheers, >RAH > >-----BEGIN PGP SIGNATURE----- >Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> > >iQEVAwUBOdESj8UCGwxmWcHhAQHSDQgAlA1/+asZTagnQ4vL44WJ9If+fTVwkPCC >----------------- >R. A. Hettinga <mailto: rah(a)ibuc.com>

1 0

CDR: Quantum crypto secrets from Japan
by sunder 27 Sep '00

27 Sep '00

http://www.theregister.co.uk/content/1/13536.html Quantum crypto secrets from Japan By: Lucy Sherriff Posted: 26/09/2000 at 13:29 GMT Mitsubishi and Hokkaido University have completed a latest round of experiments in quantum cryptography over optical fibres. The two organisations say that their quantum cryptographic system is a success, and could have important implications for optical fibre networks already in use. The data was sent along 200 meters of optical fibre at a rate of one kbps. Not exactly fast, but there we go. The researchers reported a quantum bit rate error of one percent, which was kept low by the ability of the system to compensate for fluctuations in the phase and polarisation of the light. <SNIP> -- ----------------------Kaos-Keraunos-Kybernetos--------------------------- + ^ + :Surveillance cameras|Passwords are like underwear. You don't /|\ \|/ :aren't security. A |share them, you don't hang them on your/\|/\ <--*-->:camera won't stop a |monitor, or under your keyboard, you \/|\/ /|\ :masked killer, but |don't email them, or put them on a web \|/ + v + :will violate privacy|site, and you must change them very often. --------_sunder_(a)_sunder_._net_------- http://www.sunder.net ------------

1 0

CDR: Linux Encryption HOWTO
by Blank Frank 27 Sep '00

27 Sep '00

http://fachschaft.physik.uni-bielefeld.de/leute/marc/Encryption-HOWTO/Encry…

1 0

CDR: A lesson in book-entry settlement
by R. A. Hettinga 27 Sep '00

27 Sep '00

Forwarded without (too much) comment, except that I can't wait until the auditors see *this* one on IBUC's books. :-). For those who don't know them Gold-Age is one of the new gold exchanges instituted in the e-gold system so that e-gold itself can concentrate on the wholesale end of things. Cheers, RAH --- begin forwarded text

1 0

CDR: 25 MILLION EMAIL LIST OFFER VOLUME 4
by winmail 27 Sep '00

27 Sep '00

S P E C I A L---- R E P O R T How To Reach Thousands Of Prospects Every Month Our research has found that many people have tried one or more of the following... Free Classifieds? (They just don't work anymore) Web Site? (Takes thousands of surfers) Banners? (Expensive and losing their punch) E-Zine? (Hope they have a *huge* subscriber list) Search Engines? (Forget it, unless you're in the top 20) S O W H A T D O E S W O R K ? Although often misunderstood, there is one method that has proven to succeed time-after-time. E - M A I L M A R K E T I N G ! ! IT'S A FACT..... if you're not using your computer to generate income, GOOD income, you're leaving money on the table. Here's what the experts have to say about E-Mail Marketing: "A gold mine for those who can take advantage of bulk e-mail programs" - The New York Times "E-mail is an incredible lead generation tool" -Crains Magazine "Blows away traditional Mailing" - Advertising Age The way to reach thousands of people, generate orders and build wealth is person-to-person direct. 1. How do you find the millions of people on the Internet? 2. What are you going to tell them when you do reach them? HERE'S THE ANSWER TO QUESTION #1 25 MILLION EMAIL ADDRESSES + SOFTWARE The cleanest, most comprehensive e-mail address list in the world, BAR NONE! We're proud to offer it. O N E - O F - A- K I N D This is a first. No one has gone to the work it takes to produce an e-mail address list of this quality. Here's how we prepare our e-mail lists: 1. We clean and eliminate all duplicates. 2. Next, we use a filter list of 400+ words/phrases to clean even more. No address with inappropriate or profane wording survive! 3. Then we used our private database of thousands of known "extremists", opposed to commercial e-mail, and kicked off every one we could find. 4. And finally, we sorted the list into easy-to-manage packets of 100,000 addresses in a simple text (.txt) format. 5. All domains have been verified as valid. WHAT DID WE END UP WITH? Volume 3... 25 Million Addresses Strong! An address list so clean you'll want to start mailing today! N O - B R A G - J U S T - F A C T LOW LOW PRICE.........................�99 OR $US170 With our super clean e-mail address lists you'll send less...and get better results... * Y O U - G E T - W H A T - Y O U - P A Y - F O R * Our NEW 25 Million, Volume 3 , address list CD will result in: * Higher Response Rates * Higher Sales Conversion Ratios * More Receptive prospects; Less Flames & Non-Buyers. * Less Contact With Anti-Commerce Radicals & Extremists. DON'T HESITATE on this offer or you will miss out on the least expensive, legal and most effective way to market... PERIOD! We also include as a free bonus: F R E E --B O N U S E S Order within 72 hours and we'll include the following FREE Bonuses... we call this our "BUSINESS ON A CD" bonus. 1. To help you get started we include basic proven Professional PC Mailing Software. This software has sold for as high as �460 in the past. No demo, but a full working version (SORRY, SINCE THE SOFTWARE IS FREE WE CANNOT OFFER ANY TECHNICAL SUPPORT, however set-up instructions are included). 2. Every survey has always indicated that the most profitable product to sell on the Internet is INFORMATION! Our "BUSINESS ON A CD" gives you 450 reports/manuals/books that are yours to use and sell. With these "Special Reports" you may instantly start your "Information Product" business... plus a sample SALES LETTER is included to help you GET STARTED FAST! 3 "LIST MANAGER" - This is the software the Pro's use to manage their mailing lists. (FULLY FUNCTIONAL..NOT A DEMO) D O N ' T -- H E S I T A T E ...... E-Marketing is the most effective and fastest way to market anywhere... PERIOD! E-MAIL winpost(a)buylow.co.uk in the subject box please type......... volume 4 LOW LOW PRICE.........................�99 OR $US170 (INC P&P) please complete and mail the order form, please email confirmation to us to ensure preparation and prompt despatch of your cd-rom NAME�� ADDRESS�� . ��.��........................................................................ E-MAIL ADDRESS�� I enclose a cheque for ��made payable to M. Walters (or cash by registered post) send to....WINBET SYSTEMS, P.O.BOX 1722, ANDOVER, SP10 1YR, ENGLAND We apologize profusely for troubling you, if you are not interested in offers of this nature, please either delete and/or reply with remove in the subject header. We do how ever feel this type of marketing is more user friendly than chopping down forests for junk mail via the letterbox. Again our apologies. Please pardon the intrusion.... Under Bill s.1618 TITLE III passed by the 105th US Congress this letter Cannot be considered Spam as long as the sender includes contact information & a method of "removal". To be removed from future mailings just reply with REMOVE in the subject line. Thank you for your kind consideration

1 0

CDR: Re: <nettime> Rebirth of Guilds
by Gil Hamilton 27 Sep '00

27 Sep '00

Sampo Syreeni writes: >On Wed, 27 Sep 2000, Gil Hamilton wrote: > >Then, too bad. They haven't *done* anything to you. > >A distinction without a difference, I say. Sampo, somewhere in the world today, there is a child starving to death. I have no doubt that you could have done something to prevent it. However, having chosen to spend your time reading and writing to the cypherpunks mailing list instead, you failed to do so. Hence, I think it only fair that you be arrested and charged with murder for having failed to save that starving child. Since you are so brave and caring, I know you'll have the decency to run down to the nearest police station and turn yourself in. Thanks. (On second thought, considering the thousands of people around the world who've starved to death over the years in the face of your inaction, I think it safe to say that you are actually a mass murderer many times over. I think you'd better turn yourself into the World Court for Crimes Against Humanity.) - GH _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com.

1 0

Re: CDR: Re: Lions and Tigers and Backdoors, oh, my...
by Michael Motyka 27 Sep '00

27 Sep '00

> > I'm still waiting for RIP-USA to rear its ugly mug. > > I think, if they do that, they kill internet commerce. > How so? Our communications and financial systems are already pretty transparent and yet commerce of all sorts is going full steam. States and municipalities are eager to have tracking SW installed at vendors who sell into their states. It will happen eventually : the Big Bro tax tracker and business license manager thread will be required. And businesses will not stop operating over the phone, through catalogs and on the internet. The part of RIP that I'm expecting to surface soon is the LEA access to plaintext for both communications and stored data. THEY ( the black helicopter, cattle slashing, alien dissecting, door crashing, head-stomping, universal snooper folks ) need that to protect our children from Osama Bin-NAMBLA. And to collect taxes. Don't they? Mike

2 2

CDR: Lions and Tigers and Backdoors, oh, my...
by R. A. Hettinga 27 Sep '00

27 Sep '00

-----BEGIN PGP SIGNED MESSAGE----- http://www.zdnet.co.uk/news/2000/38/ns-18077.html Has an NSA "analyst" cum "Center" for "Democracy" and Technology "analyst" saying, yes, Virginia, Commercial Software has, indeed, NSA Backdoors In It. Lions and Tigers and Backdoors, Oh, My. Frankly, I expect that NSA would be remiss in their grope-age indeed if they *didn't* try to get a backdoor into anything it could, and, of course, I would expect that the um, spuke version of the Misian calculation problem itself would take care of those efforts; WTMI, fall of totalitarian hierarchy, routing around surveillance as damage, and all that. If not simple counter-sniffage, for that matter, as the average 31337 hacker-dude, if not cypherpunk, would see fairly clearly, and has been going on as long as said sniffage was possible. However, it amuses me more -- as long as I don't think too hard about it - -- that any such ostensible "privacy advocacy organization" would use the same old Randian Legislation-threat fund-raising-FUD game (or, maybe it's the same old Randian Legislation-promise fund-raising-FUD game, whatever), on something as demonstrably *testable* as the old NSA back-door-FUD gag. I mean, can't they be a little more *creative*, fer chrissakes? How stupid do they think the public really is? Oh. Right. I forgot... Cheers, RAH -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQEVAwUBOdESj8UCGwxmWcHhAQHSDQgAlA1/+asZTagnQ4vL44WJ9If+fTVwkPCC ydIhcJFUjXXUFFEonRFDny7Yx3OuvspFU2EApL/gN9RLQ/8grObgffen/Vc5G5bM uiOty9MqqrX5PJvmLp2M5gEHP6lXrb7EIaac+DTc+BcShpXzoh+PFWrEX7F7Nhvb o1hQnppFlQ0Ka5DqGcCnqQr5CWt/5em5paSwOnGj//GlvVVY/FRZUYIkRjJ6Cvnj UP4Liq5HkE22OZM5XbkfXC95+oKgCikKG4iudPEc6M9SoW4eJB0HEfoClRgBH8ms wG1BwpBxjmuVpXXQQPJ280Y5seeN8rFT3/yrZCJWMGDy8XNKEWl5Kg== =Uj0N -----END PGP SIGNATURE----- -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

2 1

CDR: Re: cc
by No User 27 Sep '00

27 Sep '00

Ldave109 wrote: > can you give me a credit card #?A valid one Try 4313089803003006. Expiration: August, 2004.

1 0