December 2003 - cypherpunks-legacy

KeyNote v0.1 Release Announcement
by Angelos D. Keromytis 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: coderpunks(a)toad.com Subject: KeyNote v0.1 Release Announcement Cc: cypherpunks(a)toad.com Date: 06/01/98, 15:56:45 KeyNote is a trust-management system, designed on the same principles as PolicyMaker, but simpler and better-defined. This is the first public release, and although the code has been tested, it is by no means guaranteed bug-free (but then, what is). That said, you can get a copy from http://www.cis.upenn.edu/~angelos/keynote-0.1.tar.gz -Angelos PS. From the README file: There should be a real README file here, but in the meantime read draft-angelos-spki-keynote-01.txt for the spec of KeyNote. There's much to be done yet to improve the user interface(s). Signature verification is (deliberately) missing from this release, but the next one will have it. The hooks are obvious in the code (search for XXX in parse_assertion.c). The makefile creates the libkeynote.a library which can be linked with other applications. The program keynote-verify can be used to verify a request, given a set of assertions and an environment. There will be a man page in the next release both for the library and the program, along with some sort of graphical UI to make assertion generation (including signing) easier. For any questions, comments, bug reports, praise, or anything else you have in mind, contact me at angelos(a)dsl.cis.upenn.edu Angelos D. Keromytis May 31 1998 -----BEGIN PGP SIGNATURE----- Version: 2.6.3ia Charset: noconv Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface iQCVAwUBNXMHfr0pBjh2h1kFAQElOgP9FyKPDQPvctQyJLl5djz4xj/edgRgQrlb YmqwVQqGrKKC/KrgUbu/A6c/RyqT1l1/nk9U4pONQaJoAtT0pQcgpYISQ2Ji/0JY tG8y+r+WqhWElgUuPxZff5jH5V3mbCDInKoe4BvkE0wwnW7QvwCSVa/nP/Ecs+1e KpiewSL6Ug8= =0f31 -----END PGP SIGNATURE-----

1 0

Re: WinNT C2?
by Andrew White 17 Dec '03

17 Dec '03

Versions are important, too... Quote from current Microsoft Web site... "<The NT 3.51 ITSEC> evaluation along with the US TCSEC class C2 evaluation completed in 1995 for Windows NT 3.5 demonstrates Microsoft's commitment to building a secure operating system and continuing to provide customers with assurance of its security characteristics based on these evaluations>" NT 4.0 has never passed ANY security evaluation. NT 3.51 passed a UK one in October 1996, NT 3.5 passed C2 in 1995. Both these earlier versions are effectively unusable due to diverse and numerous bugs unrelated to security, and both the evaulations were without a network card. Later, Andrew.

2 1

Re: I need a compiler!
by one4evil＠juno.com 17 Dec '03

17 Dec '03

J-Dog >who says I am socalled "elite"? Gee, your 'handle' is J-Dog...And your sending your mail through EliteHackers.org...Very original...I think have been to your web site once or twice...The EliteHackers.org that is... >WOW.. A dual PII 266... then you will really be elite... because you >know.. if you have a fast machine, you don't ahve to know shit.. you can >just fake it.. because your machine will cover up for you..... fuqin >moron... First...I am not a hacker and don't pretend to be...I phreak a little and like phones and shit...I subscribe to Telecom Digest and just like to play with phones...I like to blow shit up for fun so you could say I am a pyro...I got five bitches on my dick so you could call me a pimp...But I never said I was a hacker...I just like to know about how shit works...And in order to exploit any system, for fun or money or super 3l33t props, you gots to know the system...I want to put linux on my system because linux does have bugs and quirks and you have to know how to do more than click a mouse button for the shit to work. >bwhahahhaha....if you can not detect the sarcasm in here, then damn, you >are a bigger idiot than I thought..... geez man.. Ya, sure...Sarcasm...You laugh at me but dude...William is to busy with Netscape trying to dick him up the ass for me to call him again... >> And you know this...MAN! I am wanting to write my own supper program...I >> want to take all the good h/p/v/c apps out there and make a nice point > >and click interface for them all...one in linux and one in win ( ...fuck >> the mac people... ) Put it all on a CD and send free copies to all the >> cool hackers out there...Sort of a library O' chaos...Of coarse, I would >> not send one to just anyone...r00t would get a copy...I would send Eric B >> one just for kicks...Then I would send one to Death Vegi and the rest of >> the cDc...They got the cool philes....Anywhoo...Let me know who bill is. >Good Yogi, and while your att it, stop world Hunger, Racism, and poverty >with your uberhacker program... Again, you laugh at me for sarcasm.... But back to the real problem...yes, gcc would be ideal...How ever...I am not running Linux as of yet...so do you or any of you know any OTHER WINDOWS BASED COMPILERS that are worth a shit...I know it is a stretch but god... And J-Dog, what is up with the fucked up lingo...This ain't the movies... _____________________________________________________________________ You don't need to buy Internet access to use free Internet e-mail. Get completely free e-mail from Juno at http://www.juno.com Or call Juno at (800) 654-JUNO [654-5866]

4 3

Echelon Furor
by John Young 17 Dec '03

17 Dec '03

The UK Sunday Times on the Internet had a story yesterday on the rising Echelon furor in Europe, "Spy Station F83." http://www.sunday-times.co.uk (see Focus feature) If you don't want to register we've mirrored the piece: http://jya.com/nsa-f83.htm It reviews the rapidly-growing NSA operation at Menwith Hill and Bad Aibling, with some recent information not covered in earlier reports. Several European pols -- German, French, Italian, et al -- are calling for investigations of alleged economic spying by NSA. NSA denies all, the writers say, except the Agency claims it's the best in the world at what it's capable of but not doing.

1 0

Commerce Echelon
by John Young 17 Dec '03

17 Dec '03

The UK Sunday Times article claims that there is a unit in the Department of Commerce that receives NSA Echelon interceptions of economic data for massaging and passing on to interested US parties. Any information on this unit and how it decides who gets which secrets?

3 2

Re: I need a compiler!
by one4evil＠juno.com 17 Dec '03

17 Dec '03

Ok, this is starting to get really odd. I am not a hacker...I DO NOT want to make some supper program...IT WAS A CRACK BASED ON WHAT YOU SAID ABOUT WIDOZE CODE!!! I don't know shit about hacking other than how to maybe use a cheese scanner like 'Phonetag' (which I have set up at school so that I don't get busted useing it at home.) I mean what is the argument here? Also, you keep putting things in here like: > uberl33t > k-rad > /<-rad Well, what the hell is up with that...I don't talk like that...Do you talk like that? Do you walk up to your local dealer and say you want some K-rad KB? No! You just say you want a fat once of KB! You don't fuck around. >Not running linux as of yet? hehe so when are you gong to do a search for >linux.exe and start to run it?.. as soon as your superkool P2 266 gets >here... wowwie... I am impressed...... Hey DK.. pass me another beer... Well, I have no net access...Boy that's 3L33T...and when I tried last time I had access, I kept having trouble makeing the boot disk...Maybe you can explane it to me...You do know stuff about linux and for that I ask a question...The page I was trying to get it from said that I needed to save some program ( this has been like eight months ago ) and then put the program, which was 1.44 mb, onto a floppy then boot your computer off the floppy...I put in a brand new, unnamed formated disk and it said that there was not enough disk space...I dont' have a damn clue as to why it would not work...Also, with my thirst for info, I am going to get the QUE linux book that comes with Linux 3.0.8 (?) slackware, redhat, a disk of misc. utilitys and a disk of net utilitys... I don't know why we are bitching at each other...You hack, I don't, you use jargon, I don't, I can spell and type, you can't...Where is the problem? Anyone back me up on this? I really don't like to fight with people I don't know...So what does the J stand for? Sort of ironic, my initals are JD, Jordan David...Fucked up, O my brothers... D. _____________________________________________________________________ You don't need to buy Internet access to use free Internet e-mail. Get completely free e-mail from Juno at http://www.juno.com Or call Juno at (800) 654-JUNO [654-5866]

1 0

refrigerator magnet
by bill payne 17 Dec '03

17 Dec '03

Monday 6/1/98 6:05 PM Masanori I put the refrigerator magnet 1945 509th COMPOSITE GROUP 1995 FIRST ATOMIC BOMBARDMENT 50th ANNIVERSARY in the mail to you today. Reason I sent the magnet is to show THAT THERE ARE SOME REALLY-SICK MINDS [see reverse side of magnet] IN POWER in the US. Just got off the phone with John Young. Governments, including Japan, TRY to mess with peoples' minds. There is a book on this. http://www.amazon.com/exec/obidos/quicksearch-query/002-2147604-1106833 But I have a solution. I do not read e-mail. At this time. I also believe in what Kahn wrote Thursday, March 20, 1980, 09:30 David Kahn addressed Congress, the Committee on Government Operations. Kahn stated to the committee, A final benefit is that refusing to restrict cryptologic studies erects yet another rampart against the chipping away of American liberties. Is this rampart, again, worth the danger to national security? Yes, because the danger is not as acute as the N.S.A. wishes people to see it. N.S.A. wants people to think that publication of cryptologic material would slam shut its window into the Third World countries. In fact such publication has little effect ... The national security dangers are not so great as to dismantle individual freedom. For all of these reasons, then, no limitation should be placed on the study of cryptology. And beyond them all lies something more fundamental, in the end, will probably prevent any restrictions anyway. It is called the First Amendment. I thank you. I hope you see that I am using the seventh amendment. http://www.jya.com/whp052898.htm And even more adamantly I believe For what shall it profit a man if he shall gain the whole world and lose his own soul. Kahn on Codes page 172 Best regards bill

1 0

No Subject
by one4evil＠juno.com 17 Dec '03

17 Dec '03

Ok, I was just going through Phrack 51again and found this...I don't know if you people care or are seeing it for the 51 time, but if you want the whole thing, e-mail me or just go do a search for Phrack and look at there archives...There is a lot more to the artical, but this little bit lets you know what it is about. D. ---[ Phrack Magazine Volume 7, Issue 51 September 01, 1997, article 13 of 17 -------------------------[ Monoalphabetic Cryptanalysis (Cyphers, Part One) --------[ Jeff Thompson aka 'Mythrandir' <jwthomp(a)cu-online.com> Written for Phrack and completed on Sunday, August 31st, 1997. --------- First a quick hello to all of those I met at DefCon this year. It was incredible fun to finally put faces to many of the people I have been talking with for some time. It was truly was a treat to meet so many others who are alive with the spirit of discovery. ---------- This is the first in a series of articles on Cryptology that I am writing. The goals of these articles will be to attempt to convey some of the excitement and fun of cyphers. A topic of much discussion in regards to cryptography currently, is about computer based cyphers such as DES, RSA, and the PGP implementation. I will not be discussing these. Rather, these articles will cover what I will term classical cryptology. Or cryptology as it existed before fast number crunching machines came into existance. These are the sorts of cyphers which interested cryptographers throughout time and continue to be found even to this very day. Even today, companies are producing software whose encryption methods are attackable. You will find these commonly among password protection schemes for software programs. Through the course of these articles I will explain in practical terms several common cypher types and various implementations of them as well as cryptanalytic techniques for breaking these cyphers. Creating cyphers is fun and all, but the real excitement and often times tedium is found in Cryptanalysis. Many of the ideas presented in these articles will based on three sources. The following two books: The Codebreakers by David Kahn (ISBN: 0-684-83130-9) and Decrypted Secrets by F.L. Bauer (ISBN: 3-540-60418-9). Both authors have put together wonderful books which both cover the history and methods of Cryptology. Do yourself and the authors a favor and purchase these books. You will be very pleased with the lot. Finally, a miniscule amount of these articles will be written based on my own personal experience. The fun is in the journey and I welcome you on what is certain to be an interesting trip. Please feel free to raise questions, engage me in discussions, correct me, or simply offer suggestions at jwthomp(a)cu-online.com. Please be patient with me as I am traveling extensively currently, and may be away from the computer at length occasionally. Out the door and into the wild... --Monoalphabetic Cyphers Monoalphabetic cyphers are often currently found in simple cryptograms in books and magazines. These are just simple substitution cyphers. This does not mean that they are always simple for the beginning amateur to solve. Three common monoalphabetic cyphers which are used are substitution, cyclical, and keyed cyphers. -Substitution Cyphers By taking an alphabet and replacing each letter with another letter in a unique fashion you create a simple monoalphabetic cypher. Plaintext Alphabet A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Cypher Alphabet Z I K M O Q S U W Y A C E B D F H J L N P R T V X G Plaintext Message The blue cow will rise during the second moon from the west field. Cyphertext Message nuo icpo kdt twcc jwlo mpjwbs nuo lokdbm eddb qjde nuo toln qwocm. -Cyclical Cyphers By taking an alphabet and aligning it with a rotated alphabet you get a cyclical cypher. For example: Plaintext Alphabet A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Cypher Alphabet N O P Q R S T U V W X Y Z A B C D E F G H I J K L M Indeed, you may recognize this cypher as a ROT13 which is commonly used on news groups to obscure messages. -Keyed Cypher Another way to create a monoalphabetic cypher is to choose a keyword or phrase as the beginning of the cypher alphabet. Usually, only the unique letters from the phrase are used in order to make sure the plaintext to cyphertext behaves in a one to one fashion. For example: Plaintext Alphabet: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Cypher Alphabet L E T O S H D G F W A R B C I J K M N P Q U V X Y Z The passphrase in this cypher is "Let loose the dogs of war" The advantage of such a system is that the encryption method is easy to remember. Also, a method of key change can be created without ever having to distribute the keys. For example, one could use the 4 words at a time of some piece of literature. Every message could use the next four words. Indeed, this change could occur more frequently, but that is a subject for another article. _____________________________________________________________________ You don't need to buy Internet access to use free Internet e-mail. Get completely free e-mail from Juno at http://www.juno.com Or call Juno at (800) 654-JUNO [654-5866]

1 0

Re: I need a compiler!
by one4evil＠juno.com 17 Dec '03

17 Dec '03

On Mon, 01 Jun 1998 21:37:58 -0400 "Robert A. Costner" <pooh(a)rboc.net> writes: >People are making fun of you for the following reasons: > > * The 'C' compiler comes with the operating system What OS? > * Your email address is well... you look at it :) I am a satanist, sorry... > * Most of the crypto programs are GPL, which is not freeware, but > you probably would not know the difference. (You don't need cash) I don't care if I have to pay...I was just asking for everyone's oppinion > * You sound like you are under 25 17... > * You use vulgarities (Juno kicking my ass, net access blows) And always will...Sorry, nothing gets the point across like a good vulgarity > * You can't spell. OK w/o the other stuff. I know I can't spell...But I am doing better than J-Dog, what other stuff? > * Your dual PII-266 that you need, seems overblown to those running > 386-25Mhz, or even 10Mhz systems. Hey, at least I didn't say I wanted my oun cray or a duel 400 :) > * You don't seem to know what PGP is. PGP: Pretty Good Privicy...Not for export, puplic encryption, you puplish your key then people can send you encrypted files...I think... >Try reading the list for a month before you make your next message. >It >might work better. Or just get PGP and learn how to use it without >asking >the list. Besides, my domain is more elite than the other guy's >hackerorg >domain. I have been on for about a week...My welcome message got no replys, all I seam to get are political messages, I have seen one question about crypto, and the reply was half joke...I DO NOT HAVE NET ACCESS! how do I get pgp with out net access...I just wanted to know what everyone else was useing...What is up with J-Dog jumping my shit (sorry) with this stuff about, "Then again, if I was to say linux to you, you would prolly run in ph33r"? I know linux, I want linux, you have read the other posts so I won't go into it...I guess i am just on the wrong list...I sent out a post befor about are there any better 'newbie' lists on crypto but got no responce...oh well. D. p.s, I like Juno... :( _____________________________________________________________________ You don't need to buy Internet access to use free Internet e-mail. Get completely free e-mail from Juno at http://www.juno.com Or call Juno at (800) 654-JUNO [654-5866]

1 0

Dr. Abdul Qadeer [Kahn]
by bill payne 17 Dec '03

17 Dec '03

Sunday 5/31/98 6:06 PM J Orlin Grabbe Read at http://www.aci.net/kalliste/ tonight India vs. Pakistan Another Pakistan Nuke.. Dr. Abdul Qadeer Friday 5/15/1998 Albuquerque Journal, Universal Press Syndicate, Syndicated Columnist Richard Reeves writes U.S. Indignation at Indias Nuclear Testing Hypocritical London - So, India has conducted its second test of a nuclear weapon, and its third, fourth, and fist and sixth, in the past few days. That put it 1,026 tests behind the United States. ... This has been coming for a long, time - and we have been foolish or deliberately looking the wrong way for decades. Fifteen years ago, in 1983, we the Reeves family, were living in the district called E-7, the best neighborhood in Islamabad, the capital of Pakistan. (My wife was doing work involving refugee camps in the northwest of the country, across the border from the Afghan-Soviet war.) Like everyone else around there, including American diplomats, we knew why military car arrived each morning to take the fellow around the corer, Abdel Qadeer Kahn, to his office - or laboratory. Kahn was in charge of building the bomb out in the Pakistani desert at a place called Kahuta. This was the so-called Islamic bomb ready for use against India, which had conducted its first test in 1974. Whatever we though, Pakistanis believed nuclear weapons were essential to checkmate the change of being overwhelmed by India., their 10-time-as-big neighbor. ... Small world. See Los Angeles Times syndicated columnist Richard Reeves at http://www.jya.com/whp052898.htm John Young's voice telephone is being picked-up by his fax tonight. Let's all hope for prompt peaceful settlement of the unfortunate matter. Later bill

1 0