February 2001 - cypherpunks-legacy

ATA-3 drive security
by Pawel Krawczyk 22 Feb '01

22 Feb '01

I've recently got interested the security feature of ATA-3 hard disk interface standard (described e.g. in [1]). It's vendored under different names, mostly in portable computers environment, for example Compaq notebooks refer to DriveLock feature. It allows an user to lock the drive at hardware level with user and master passwords (the latter allows removing user password, in short). I wondered how it works internally and what level of security it provides? A quick guess is that it works only at the HDD controller level and involves no actual data encryption. An implication would be that if you have such drive, you can try to change the electronics, leaving the plates untouched, and retain open access to the data stored on the disk. Anyway, it would be another step of protection, requiring much more technical knowledge and capabilities from the thief than just removing the disk and putting it into some other laptop (like it can be done to bypass computer's BIOS passwords etc.). But maybe I'm wrong - could anyone clarify or at least point me to some more detailed documentation? [1] http://viking.delmar.edu/courses/Cis312J/EBOOK/wrh09.htm#E69E196 -- Paweł Krawczyk *** home: <http://ceti.pl/~kravietz/> security: <http://ipsec.pl/> *** fidonet: 2:486/23

1 0

Re: Strong encryption
by aluger＠hushmail.com 22 Feb '01

22 Feb '01

At Wed, 21 Feb 2001 22:08:51 -0500, "PTR Centre" <ptrc_cmha(a)hotmail.com> wrote: >I also advocate MD-4/MD-5 You are a complete blathering idiot.

1 0

We are all terrorists now. It is illegal to pay tax.
by Ken Brown 22 Feb '01

22 Feb '01

The Prevention of Terrorism Act 2000 defines an action as terrorist if it both fits one of these 5 criteria: (a) involves serious violence against a person, (b) involves serious damage to property, (c) endangers a person's life, other than that of the person committing the action, (d) creates a serious risk to the health or safety of the public or a section of the public, or (e) is designed seriously to interfere with or seriously to disrupt an electronic system. and also "involves the use of firearms or explosives". The recent bombing of Baghdad fits all 5 of the criteria and involved explosives, therefore it is a terrorist act under these rules. As Ian Jackson pointed out (below), the British government itself is not subject to its own law in this way: but I am. The act also makes it illegal to supply money which is to be used for terrorism without the express consent of a constable. I pay my taxes. QED. Ken Brown, International Terrorist. ========================================= Forwarded from the UKcrypto mailing list: Ian Jackson wrote: > > Pete Chown writes ("Re: Terrorism Act 2000"): > > Ken Brown wrote: > > > The bombing of Baghdad is terrorism under these definitions. > > > > Acts of Parliament don't bind the Crown unless they specifically say > > that they do. So although you are right that the definition is > > satisfied, the government would not have committed an offence. > > Indeed. However, does this not make it an offence to pay tax ? > > 15. - (3) A person commits an offence if he- > (a) provides money or other property, and > (b) knows or has reasonable cause to suspect that it > will or may be used for the purposes of terrorism. > > There doesn't seem to be an exception for people who give Crown agents > money for (partly) terrorist purposes. > > There is an exception to this: > > 21. - (1) A person does not commit an offence under any of sections 15 to > 18 if he is acting with the express consent of a constable. > (2) Subject to subsections (3) and (4), a person does not > commit an offence under any of sections 15 to 18 by > involvement in a transaction or arrangement relating to > money or other property if he discloses to a constable - > (a) his suspicion or belief that the money or other property is > terrorist property, and > (b) the information on which his suspicion or belief is based. > (3) Subsection (2) applies only where a person makes a disclosure- > (a) after he becomes concerned in the transaction concerned, > (b) on his own initiative, and > (c) as soon as is reasonably practicable. > > Therefore how about the following tactic: > > * If you are already a taxpayer through PAYE, then you probably fall > under 21(3)(a) at the moment and should immediately write, recorded > delivery, to your local Police station, and ask for a confirmation > that they've received your letter. Your letter should state that you > believe the UK government may be committing terrorism abroad and your > reasons, and that your source is the newspapers and general media. > > * If you are *not* already a taxpayer then 21(3)(c) and (b) can't both > apply. You cannot lawfully start paying tax without express consent > of a constable. So you must write, recorded delivery, to Inland > Revenue and your local Police, asking for permission from the Police > to pay your taxes. You have to make sure to let the Inland Revenue > know why you're not paying, so that they know that you have an excuse. > > Alternatively perhaps Inland Revenue could confirm that taxes will not > be used for terrorist purposes, such as bombing Baghdad. > > Interestingly, seeking money or property for terrorism is an offence > too, so ad agencies involved with tax-raising campaigns should perhaps > look out. > > What have I missed ? > > Ian.

2 1

Strong encryption
by PTR Centre 22 Feb '01

22 Feb '01

I whole-heartedly advocate Nortel Entrust CAST, it is cryptograhphically strong. Rotor-machine, Base64, and clipper-chip is snake-oil. P.C.T is also passe. Generallized secure sockets(G.S.S.A.P.I framework from Cygnus, and Transport layer security, with Java compiler servlets, is the approach of choice.Simple substitution ciphers are cryptograhphically weak. I advocate DES/3DES, RSA, Diffie-Hellmann ciphers, Verisign, and especially Nortel Entrust CAST encryption. I also advocate MD-4/MD-5, RC 4/RC-5.

1 0

Passatempo de Carnaval
by info＠giganetstore.com 22 Feb '01

22 Feb '01

Se pretender visualizar esta informação numa página do seu browser em formato HTML, basta clicar aqui. <http://www.giganetstore.com/dynamic/promotions/mails/carnaval.htm> Passatempo de Carnaval Acha que o ditado: "A vida são 2 dias e o carnaval são 3" se aplica a si ? Você é uma daquelas pessoas que, adora mascarar-se e divertir-se no carnaval ? Então este passatempo é para si. Envie-nos uma fotografia sua, dos seus filhos, tios ou primos, alusiva a esta ápoca festiva. Sabendo que o nosso critério de selecção é a originalidade e o humor veja os prémios que poderá ganhar: 1º Classificado - Jogo Diablo II, PC-CDROM 2º Classificado - Pokemon -VHS - O Grande Héroi de Pikachu 3º Classificado - Filme Titanic - VHS Para Participar basta estar registado no nosso site e enviar-nos o seu trabalho com o seu nome e username para: Giganetstore.com Passatempo de Carnaval Av. Defensores de Chaves nº45 7º 1000-112 Lisboa Ou para o Email: apoio(a)giganetstore.com <mailto:apoio@giganetstore.com> O Resultado deste Passatempo será divulgado no dia 14/03/2001. Todos os trabalhos terão de ser apresentados até ao dia 11/03/2001. Serão devolvidas as imagens que nos forem enviadas acompanhadas da respectiva solicitação, bem como de envelope devidamente selado e endereçado. Será, ainda, necessário o envio de uma autorização para a publicação dos trabalhos premiados. Não nos responsabilizamos pelo extravio ou deterioração da qualidade das imagens enviadas. Poderá ser solicitado a apresentação do comprovativo da autenticidade do autor dos trabalhos seleccionados. E agora que já sabe tudo participe e divirta-se! Para retirar o seu email desta mailing list deverá entrar no nosso site http:\\www.giganetstore.com <http://www.giganetstore.com/> , ir à edição do seu registo e retirar a opção de receber informação acerca das nossas promoções e novos serviços.

1 0

Re: Archive Request
by Reese 22 Feb '01

22 Feb '01

>Hi, Could you send it on, now that you've picqued my interest? After receiving a number of offlist queries, I've decided to post the url for the post I referred to. For a slightly humorous, but thought-provoking address on how memory failure may encroach when questions stray from the pertinent, see <http://www.inet-one.com/cypherpunks/dir.98.11.30-98.12.06/msg00103.html> Will the real Anonymous please stand up? Reese

2 1

Sealand and Experimental Rocketry
by Jim Choate 22 Feb '01

22 Feb '01

Sealand would be a perfect place for a group of suitably motivated persons to attempt to place experimental class rockets with can-sat's into orbit. They could of course apply for a slot in the orbital parking orbits or buy one from one of the S. Pacific islands whose major incomes is sales of same. A more optimal mechanism is put them in a short term parking orbit that decays in about 2 months. Then put another bird up with new keys and potentialy capabilities. Then you wouldn't necessarily need anyone permission to play. ____________________________________________________________________ Before a larger group can see the virtue of an idea, a smaller group must first understand it. "Stranger Suns" George Zebrowski The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

8 11

Slashdot | Spying and Technology: Robert Philip Hanssen
by Jim Choate 22 Feb '01

22 Feb '01

http://slashdot.org/articles/01/02/22/0622249.shtml -- ____________________________________________________________________ Before a larger group can see the virtue of an idea, a smaller group must first understand it. "Stranger Suns" George Zebrowski The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

The Register - IBM withdraws content protection proposal
by Jim Choate 22 Feb '01

22 Feb '01

http://www.theregister.co.uk/content/2/17107.html -- ____________________________________________________________________ Before a larger group can see the virtue of an idea, a smaller group must first understand it. "Stranger Suns" George Zebrowski The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re: Sealand and Experimental Rocketry
by Jim Windle 22 Feb '01

22 Feb '01

I think Tim's point was simply that Sealand's location is too far north to be a good launch site. To put a useful satellite in an orbit with a useful footprint for this purpose from a launch site so far north would require a lot lift capacity eliminating small launch systems, raising the issue of Sealand's ability to support the launch infrastructure. It would probably also mean launching to the east over highly populated areas in the EC which would probably object to the launch as well. -- On Tue, 20 Feb 2001 20:59:25 Jim Choate wrote: > > >On Tue, 20 Feb 2001, Tim May wrote: > >> Sealand is a _terrible_ launch location. For multiple reasons. >> >> Your ignorance is astounding to behold. > >Really? You know of another place that is likely to allow you to launch >rockets to LEO with the express intent of putting wild-card remailers and >such in orbit? You know many countries with the sort of technical >infrastructure required for even amateur attempts? While it's true it's >latitude and weather aren't optimal for any sort of sustained commercial >or government effort but we're not talking about that now are we? It's >certainly someplace on the E. coast of the horn of Africa would be ideal I >think the S. Africans ban amatuer experimental rocketry (you are aware >MOST countries ban amateur rocketry?). > >No, given the choices it's about optimal. Belize would be a good place as >well provded you could get permission. There being a member of the English >commonwealth will probably prohibit it. > > ____________________________________________________________________ > > Before a larger group can see the virtue of an idea, a > smaller group must first understand it. > > "Stranger Suns" > George Zebrowski > > The Armadillo Group ,::////;::-. James Choate > Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com > www.ssz.com .', |||| `/( e\ 512-451-7087 > -====~~mm-'`-```-mm --'- > -------------------------------------------------------------------- > > > Join 18 million Eudora users by signing up for a free Eudora Web-Mail account at http://www.eudoramail.com

4 3