January 2001 - cypherpunks-legacy

Antigen found JS/Kak@m.Worm virus
by ANTIGEN_EXCHANGE 30 Jan '01

30 Jan '01

Antigen for Exchange found Unknown infected with JS/Kak(a)m.Worm virus. The file is currently Deleted. The message, "CDR: hi", was sent from David Arguelles and was discovered in IMC Queues\Inbound located at ITC/Corporate/EXCHANGE.

1 0

APM: Crypt::RC4 module (fwd)
by Jim Choate 30 Jan '01

30 Jan '01

____________________________________________________________________ Before a larger group can see the virtue of an idea, a smaller group must first understand it. "Stranger Suns" George Zebrowski The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- -------------------------------------------------------------------- ---------- Forwarded message ---------- Date: Tue, 30 Jan 2001 09:13:14 -0600 From: David Bluestein II <dbii(a)mudpuddle.com> To: austin-pm(a)pm.org Subject: APM: Crypt::RC4 module Okay- I've progressed, but aren't understanding something. I tested the 4-line perl implementation of RC4 algorighm and it was an asymetric cypher (give it encrypt key and value n and in encrypts, give it decrypt key and n and it decrypts). Yet the Crypt::RC4 only takes a passphrase, which I gave it the encrypt key and it decrypts with the encrypt key also. Does anyone know how to give it the encrypt key and n to encrypt so that the decrypt key and n works properly? The man page and perldocs for this module are lacking in that information, I understand the algorithm, but not how to combine the keyparts to make it work. The one example I found on the net obviously read the docs and didn't run it, since they used just the encrypt and decrypt keys, which doesn't work. Thanks- David ---------- David H. Bluestein II President & Lead Developer dbii(a)mudpuddle.com ii, inc. http://www.interaction.net - Specializing in Designing Interactive Websites - - and Searchable Internet Databases -

1 0

PrePlay - Hacking Prepaid Phone Cards
by Pdck 30 Jan '01

30 Jan '01

Cyperpunks, In the Netherlands you can buy a so called "Hi PrePay Phone". This is a GSM phone based on the prepay-system. In order to upgrade your calling balance, you can do multiple things. One of the things you can do is buying a yellow prepay card at one of the numerous stores. On this card you find a 15-digit- long number, you need to type in to upgrade your balance. We will denote this upgrade-number as U. On the same card you will also find a 11-digit-long serial number, which we will denote as S. In front of every serial number you can find a letter, which is the same for a batch of serial-numbers. We collected some of these cards and put them into a database. A Comma Seperated File of this database can be found at http://bigdaddy.webcriminals.com/~bastiaan/prepay/getCodesCSV.php3 [amount, batch letter, serial number S,upgrade number U, person who entered it into the database, when it was entered] The obvious relation between U and S is that they both share the same first 6 digits. We will call the last 5 digits of S (serial number) Sx, and the last 9 digits of U (upgrade-number) Ux. If you put them into a graph, then it looks like a linear graph, but if you look closer you see it is not completely linear. Graphs can be found at http://bigdaddy.webcriminals.com/~bastiaan/prepay/linear.php3 This made us curious, so we started investigating. Unfortunately we didn't figure it out yet, so we want to ask you guys to help us. We hope you find some new insights with a fresh memory. Questions, Comments, and ideas are welcome. The official research website is located at http://hi.precalc.net/ but we still have to update the site. Paulus De Cyber Kabouter <pdck(a)cuba.xs4all.nl> Bastiaan Bakker <bastiaan.bakker(a)lifeline.nl> Tim TimeWaster <tim(a)cuba.xs4all.nl>

1 0

RE: Blank Frank and Lori Banks
by Andrew Jenks 30 Jan '01

30 Jan '01

You can always chat with MS about "fixing" the password problems. If your child is a minor, you've got the right to access that information (and depending upon your state, maybe even if he isn't). -----Original Message----- From: Bill Stewart [mailto:bill.stewart@pobox.com] Sent: Thursday, January 25, 2001 12:35 AM To: Lori Banks; cypherpunks(a)toad.com Subject: Re: Blank Frank and Lori Banks At 07:51 AM 1/23/01 -0600, Lori Banks wrote: > I just read an interesting email that you sent concerning cracking .pwl files. >I have a need to crack a .pwl file, but I don't know how to make that program work. > I'm really not computer literate (if you can't tell). >I am a concerned parent that has stumbled upon information that is >not good regarding my teen and the Internet. >Could you help me find out what these passwords are or how to work that program? > I downloaded some sort of password pwl program and it showed 17 passwords, >but they are encrypted. Any help would be greatly appreciated. Thanks, Mrs. Banks Mrs. Banks - Cypherpunks is a large, noisy mailing list. In addition to talking about cryptography, privacy, and the effects on economics and politics of being able to talk and conduct business without government interference, and random other topics, we end up receiving lots of mail from people pretending to be teenagers asking us about bombs, hacking, credit cards, etc. Some of them are clueless kiddies who think we'll tell them how to steal stuff to make bombs so they can be rilly kewl d00ds, some of them are annoying kiddies who've found they can stir up lots of annoyed discussion by posting provocative or clueless questions, and some are probably cops who think they can stir up business by finding people doing stuff with Bombs and Computer Crime that make good headline material.* So don't be surprised if readers like Blank Frank take you for one of these three categories (start at the middle and work your way out), and either gives you the flames you're looking for or the abuse you deserve if you're one of the clueless types. Your message could be perfectly legitimate, but it's just dripping with troll bait.... We haven't had anybody saying their somebody's Mom who wants to break into her kid's machine before, but hey, there's a first time for everything. On the other hand, many of us were once teenagers who had parents who didn't understand us (what a surprise, eh?) and a request saying "I don't trust my kid and I want to crack his passwords to spy on him" isn't guaranteed to get more sympathy for you than for your kid. Anyway, that being said, there are only a few reasons for having lots of Microsoft password files around. One is that your son has created lots of logins on your home computer, either for his friends to use or because he's creating lots of different identities for himself. The former is something you may want to talk to him about, depending on how much control you want to have over that computer (is it his bedroom game machine or are you running the family business on it?) Another is that he has logins of his own on multiple machines using Microsoft-style logins. That's kind of odd - is he running a bunch of web pages on FrontPage-based servers, or is he cracking into corporate machines? The "17 passwords" is pretty close to a magic number, which is the number of "access devices" it takes for possessing stolen/cracked passwords to become a US Federal crime. I forget if the number is 15, in which case by asking us to crack them you're asking us to commit a Federal crime (remember the discussion about cops trying to win friends and influence headlines through entrapment?), depending on whether you have authorization to access the machines that those passwords apply to (if you give us permission to crack the passwords for your own machine, it's not a crime, but if they're the passwords for your kid's publishing accounts on commercial porn sites, that might be criminal, and if they're for accounts your kid's trying to break into, or if you're really the kid or a cop, it could be criminal.) So if you're thinking about breaking into your kid's machine, because you don't trust him, yes, you've got some relationship problems you'll have to deal with. Not much different from asking your kid where he went and having him say "Out" - either you go ask all the neighbors where he went because he won't tell you, or you work on the relationship, or you hire a private detective to track him, just as you could probably hire Access Data or somebody to break his password files, if you were willing to risk criminality. I'd recommend going for the relationship.... =================== * (Perhaps some are even good cops trying to do what they think is their job by stopping clueless kiddies from posting dangerous inaccurate information where more clueless kiddies will find it. We do have some cops and Feds on the list that are open about it, and they're good folks we go shooting with :-) Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

None
by cecil.estler 30 Jan '01

30 Jan '01

1 0

Re: hi (This e-mail is virus-free!)
by auto129994＠hushmail.com 30 Jan '01

30 Jan '01

"David Arguelles" <davida(a)bevisco.com.au> wrote in a virus-infected message: [snip HTML, ActiveX, Mid/Kakworm, Ebola, and the common cold] > i have a virus called 'W32/Hybris-B' how do i get it off my computer? > > Help!!! > Regards David Hybris is almost impossible to get rid of. According to the security department of Network Affiliates, Inc., a leading vendor of anti-virus software, the only known method of removing Hybris is as follows: 1.) Unplug your computer 2.) Remove all hard disks 3.) Douse hard disks with kerosene 4.) Ignite with matches or Bic(r) lighter. Zippos not advised due to Flash incompatibility. After you allow them to cool, your hard disks will once again be safe for use. Don't worry -- this won't damage them; hard disk drives are made with heat-resistant aluminum platters, and some more modern ones use ceramic technologies. Note that Hybris uses photoelectric quantum nanoscopy to infect all magnetic and optical media within approximately 20 feet of the infected computer; you should include any media such as floppies, CD-ROMs, data tapes, and VHS cassettes in the above procedure, and wipe down all integrated circuits such as RAM and CPU chips with a chlorine bleach solution. Otherwise, you will be re-infected. Since Hybris is currently in the process of destroying the entire Internet, the U.S. Department of Security (DoS) has decided to close down the Internet for cleaning and administration. This process will involve high-voltage shocks to all servers and high-intensity laser pulses over backbone fibers. For your own protection, disconnect from the Internet and do not reconnect until you receive an e-mail telling you that it is safe to do so. I would advise you to check on the CERT advisory regarding this situation, but I really do think that you should disconnect immediately. Hope that this helps. P.S. -- Was that Snow White and Seven Dwarves program really seeexxxxy?

1 0

Antigen found Mid/Kakworm virus
by ANTIGEN_BAMBI 30 Jan '01

30 Jan '01

Antigen for Exchange found Unknown infected with Mid/Kakworm virus. The file is currently Deleted. The message, "CDR: hi", was sent from David Arguelles and was discovered in IMC Queues\Inbound located at Cognex/Natick/BAMBI.

1 0

Fresh Quality Mortgage Leads
by expr18＠uole.com 30 Jan '01

30 Jan '01

Deal directly with the source..... No middleman! We can offer you fresh pre-qualified mortgage leads on a daily basis. Our quality mortgage leads are generated daily from homeowners interested in second mortgages, refinancing, debt consolidation, home improvement loans, etc. You can now purchase leads based on your criteria and requirements. All leads are within one business day old. Ten leads per week is our minimum. Our supply is limited. to a first come first served bases. Please email us your name and phone number so we can contact you. email: expr19(a)uole.com mailto:expr19@uole.com?subject=Fresh Mortgage Leads Thank you, Internet Mortgage Leads Service Reply with delete-mort in the subject to be excluded from further communication.

1 0

Consultants Design Showcase - 900MHz @ 1M bit
by Jim Choate 29 Jan '01

29 Jan '01

http://www.maxim-ic.com/showcase_2463.htm -- ____________________________________________________________________ Before a larger group can see the virtue of an idea, a smaller group must first understand it. "Stranger Suns" George Zebrowski The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Opportunity
by INQUIRE＠CAREEREXPANSION.COM 29 Jan '01

29 Jan '01

1 0