February 2001 - cypherpunks-legacy

Re: Secure Erasing is actually harder than that...
by Trei, Peter 20 Feb '01

20 Feb '01

> David Honig[SMTP:honig@sprynet.com] wrote: > At 11:38 AM 2/19/01 -0800, Ray Dillinger wrote: > >The problem is that data that's been written over once, or even > >twice or ten times, can often still be read if someone actually > >takes the platters out and uses electromagnetic microscopy on > >them. > > > > Really? You think the fed specs on secure wiping are disinfo? > I don't think they're disinfo, but I suspect they are dated. Also, for highly sensitive data, the secure wiping standards generally involve liberal use of thermite. The problem lies in the gap between what disk manufacturers are willing to spend on disk r/w mechanisms, and what an attacker is able to spend. If your threat model does not include seizure (or a secret swap-out) of the hard drive, then yes, a single overwrite with random data will protect you pretty well. If something could be done to use the existing head mechanisms to reliably recover over-written data, then the HD manufacturers would be using it to boost capacity. It's when your opponent can pull out the platters, and either put them in a drive with better heads, or into an AFM rig, that the remanent data becomes interesting. How many overwrites it takes to securly delete varies according to several factors, including: * How many random writes it takes to make the analog flux levels irrecoverable. * How much jitter there is in the drive - the likely hood that a given write of a sector will be a little closer or further from the center of the track, measured radially (I suspect that this is affected by termperature and the most recent head movement) * How accurate the drive is in speed and time - ie, if a given bit is written slightly earlier or later along the track than it was the previous time. Again, temperature may be an important factor. I would expect that as disks become denser, the head mechanisms also become more precise, and the recover problem gets harder. It's my vague recollection that some of the newer storage technologies (CD-RWs, MOs, etc) use preformatted pits to store the data bits. Its possible that for these technologies, the number of overwrites required to make data irrecoverable is considerably lower, but that's outside my area of expertise. Peter Trei

1 0

The answer mankind has been looking for... (No, really)
by Jim Choate 20 Feb '01

20 Feb '01

Quit looking to other people to solve your troubles. ____________________________________________________________________ Before a larger group can see the virtue of an idea, a smaller group must first understand it. "Stranger Suns" George Zebrowski The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re: [Re: [Sovereignty v. global justice [was... Mohammed gets Miranda]]]
by LUIS VILDOSOLA 20 Feb '01

20 Feb '01

Your response raises more questions for me Jim like: -what is property? -how can I appropriate of the cleanest air this world has to offer? -what property will give me quality of life and not take it from me? Jim Choate <ravage(a)ssz.com> wrote: > > > On 19 Feb 2001, LUIS VILDOSOLA wrote: > > > Before you can judge an act to be a crime against humanity. > > I'd like to know what acts can be identified as crime, > > where is humanity and how are both these ideas brought together. > > A crime is any act, or in some cases failure to act, which causes physical > damage to a person or their property, makes use of said property, or > breaks a public trust without prior permission by all involved. > > A crime is a violation of the responce 'No'. > > ____________________________________________________________________ > > Before a larger group can see the virtue of an idea, a > smaller group must first understand it. > > "Stranger Suns" > George Zebrowski > > The Armadillo Group ,::////;::-. James Choate > Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com > www.ssz.com .', |||| `/( e\ 512-451-7087 > -====~~mm-'`-```-mm --'- > -------------------------------------------------------------------- > ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

2 1

Re: Re: SHA-256 source code (fwd)
by Jim Choate 20 Feb '01

20 Feb '01

____________________________________________________________________ Before a larger group can see the virtue of an idea, a smaller group must first understand it. "Stranger Suns" George Zebrowski The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- -------------------------------------------------------------------- ---------- Forwarded message ---------- Date: Mon, 19 Feb 2001 20:47:59 -0800 From: Wei Dai <weidai(a)eskimo.com> To: sao19677(a)terra.com.br Cc: coderpunks(a)toad.com Subject: Re: Re: SHA-256 source code On Mon, Feb 19, 2001 at 09:12:20AM -0300, sao19677(a)terra.com.br wrote: > Sorry for the question, but how could we be sure > you are the *same* anonymous that posted the code? > And for that matter, how could any court possibly > judge authorship in this case? What prevents anybody > else from using the same amonymous remailer to claim > her ownership too? If the original anonymous author had the foresight to timestamp his code together with a public key before he posted the code, he can now claim authorship by publishing the timestamp and signing messages with that key. BTW, if anyone wants a public domain implementation of SHA-2 (including -256, -384, and -512) with known authorship, there's one available in Crypto++. It's written by myself, based on Steve Reid's public domain SHA-1 code.

1 0

Hi friends :)
by Imran Shaikh / JANI 20 Feb '01

20 Feb '01

hi my name is Jani living in hyderabad, Pakistan i am cute boy of age 22 somehow i got ur email address so i am eamiling you all ppl, hope u guys will guide me. I want to view passwords of PWl files. i dont know how i can do this. will you guys help me ? i need software for this that can decrpt it with all yahoo and hotmail logins and passwords. waiting imran shaikh (jani) imranshaikh.cjb.net _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

4 3

Re: [Re: [Re: The CIA for Kids?]]
by LUIS VILDOSOLA 20 Feb '01

20 Feb '01

you cannot have a cake and eat it at the same time Bear, that is because you have not decyphered interest rates policy. You have done good but you cannot eat your cake or you loose future returns on investment. Ray Dillinger <bear(a)sonic.net> wrote: > On 19 Feb 2001, LUIS VILDOSOLA wrote: > > >Encryption is used in economic policy, > >without it a minority wouldn't be so lucky over the stock markets > >and the majority wouldn't have consistent bad luck over it. > > I submit that the majority have consistent bad luck precisely > because they are relying on luck instead of doing the basic > value analysis to figure out what a company is actually worth. > > I've been making consistent returns in the market. I never needed > to "decrypt" anything. All that is required is the resolve to ignore > fear and greed, do your own homework, and restrict your buying to > companies you are confident that you will still want to own ten > years from now. > > A lot of people have been losing money in the market lately, but it > is not because there was any conspiracy; it is because they were > investing in companies with silly business plans and no revenues. > A few minutes doing basic homework could have saved them. > > Bear > > ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

1 0

Nortel Networks Custom News
by cnews＠nortelnetworks.com 20 Feb '01

20 Feb '01

Dear Cypher, Nortel Networks is launching the next generation web environment so you can harness the real power of the Internet. 'My Nortel Networks' is a new, personalized environment that gives you easier and faster access to the information you need. You can customize your 'My Nortel Networks' page as well as the Customer Support website by selecting the Content that is important to you and your business. And by taking control of the what, when and how information is displayed, you save time and have a powerful window into Nortel Networks. The launch of the new, My Nortel Networks will integrate the current www.nortelnetworks.com, Custom News and the Marketing Product Catalog. As subscribers of these services, you will automatically get My Nortel Networks. The Customer Support Product Catalog will also be available within the new My Nortel Networks later in the Summer. As My Nortel Networks gets closer to launch we will be contacting you again with more details, including how you can get access from day one. My Nortel Networks - a web experience as individual as you.

1 0

Re: [Sovereignty v. global justice [was... Mohammed gets Miranda]]
by LUIS VILDOSOLA 20 Feb '01

20 Feb '01

Before you can judge an act to be a crime against humanity. I'd like to know what acts can be identified as crime, where is humanity and how are both these ideas brought together. This is not to question the merit of such an enterprise but to question the means of it's corruption. "Aimee Farr" <aimee.farr(a)pobox.com> wrote: > > [I refrained from posting yab, but Declan's latest Politech "FC: U.N. hopes > to shut down accused Rwandan journalist's web site" gigged me.] > > Phillip H Zakas said: > > > hmm. does this mean le/intelligence agencies will soon need to have a > > warrant to perform wiretaps on overseas communications? And if > > no warrant, > > can collected evidence eventually be disallowed if foreign suspects are > > brought to us courts? slippery slope. > > Or, no slope ... according to some people's opinions of the International > Criminal Court. Many say we will be yielding our sovereignty, our > Constitution, and our procedural protections to this Court. (ICC advocates, > on the other hand, are quick to point out concord between the ICC and the US > Constitution: http://www.wfa.org/issues/icc/usconst.html .) > > The ICC is an international court, judging _individuals_, not nation-states, > in regard to: > "the crime of genocide; crimes against humanity; war crimes; and the crime > of aggression." Many have expressed concern over subsequent extensions of > the Court's subject matter jurisdiction. One commentator stated that even > if a nation is not a party to the Rome Statute, the ICC can still > investigate a crime within that nation according to ICC rules. [I haven't > read all the documentation, and I'm not about to, so I can't say about such > nuances....] > > Yet another ill wind for criminal nation-states, sheltering sovereigns, and > putative techrepublics. > > A:mee > > > > > > ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

4 3

[release] OutGuess 0.2 - universal steganography (fwd)
by Jim Choate 20 Feb '01

20 Feb '01

____________________________________________________________________ Before a larger group can see the virtue of an idea, a smaller group must first understand it. "Stranger Suns" George Zebrowski The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- -------------------------------------------------------------------- ---------- Forwarded message ---------- Date: Tue, 13 Feb 2001 18:01:59 -0500 From: Niels Provos <provos(a)citi.umich.edu> To: cryptography(a)c2.net Cc: coderpunks(a)toad.com Subject: [release] OutGuess 0.2 - universal steganography Release announcement of OutGuess 0.2 ------------------------------------ OutGuess is a universal steganographic tool that allows the insertion of hidden information into the redundant bits of data sources. It is undetectable by known statistical tests and provides for plausible deniability. You can download OutGuess from http://www.outguess.org/ Version 0.2 includes the following new features: - Undetectable by any statistical test based on frequency counts. - Determines maximum message size that can be hidden safely. - Increases message space for JPEG format. What does OutGuess do differently? OutGuess modifies the least-significant bits of the quantized DCT coefficients in case of the JPEG format. While some people view this as simple and primitive, it allows OutGuess to preserve statistics based on frequency counts. As a result, no known statistical test is able to detect the presence of steganographic content. Before embedding data into an image, OutGuess can determine the maximum message size that can be hidden while still being able to maintain statistics based on frequency counts. Regards, Niels Provos.

4 3

Re: [Re: The CIA for Kids?]
by LUIS VILDOSOLA 19 Feb '01

19 Feb '01

Encryption is used in economic policy, without it a minority wouldn't be so lucky over the stock markets and the majority wouldn't have consistent bad luck over it. Forget General Dynamic, General Electric or NBC. Put your attention on how interest rates fluctuation is argumented in favor of, question it and you will have decyphered the mistery. Ray Dillinger <bear(a)sonic.net> wrote: > > > > On Mon, 19 Feb 2001, Matthew Gaylor wrote: > > >The CIA for Kids? > > > >The Central Intelligence Agency now has a web site for children. And > >I'm not kidding. http://www.cia.gov/cia/ciakids/index.html > > > <clip> > > > >And nary a ripple surfaced last year by the mainstream media when it > >was revealed that the US Army's Psychological Operations Units do > >Internships at CNN and other news outlets. > > Have you noticed that General dynamics owns General Electric, who > in turn own NBC and RCA? So how do we like getting large chunks of > our news broadcasts and pop music from one of the government's major > arms dealers? > > Bear ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

2 1