December 2003 - cypherpunks-legacy

Hack Microsoft?
by Ray Cromwell 17 Dec '03

17 Dec '03

Microsoft recently got C2-security status approved for Windows NT by the National Computer Security Center, a division of the NSA. They are supposed to put systems through "laborious testing and review" before they approve C2. So, if one can find bugs in NT's security, one can toss a little more egg on the NSA's face and the sham that part of their activies to *help* to secure american computers. A simple violation of NT's C2 status would be to demostrate a flaw in it's memory protection implementation. Personally, I think NT is *riddled* with bugs waiting to be discovered. Hell, even the NT "service pack" is included in the C2 status, which I bet has plenty of holes. If Cypherpunks can find flaws that the NSA can't, or won't divulge, what does that say about their so-called COMSEC ability. -Ray

4 3

ADMIN: Sudden CP Vacation, rest up while you can...
by hugh＠ecotone.toad.com 17 Dec '03

17 Dec '03

Toad.com (the cypherpunks host machine provided by John Gilmore) was down today for about 12 hours due to disk/netnews problems, and not the NSA or little green men (is there a difference...? :r) ||ugh Daniel Majordomo Potty Trainer Owner-Cypherpunks(a)toad.com hugh(a)toad.com

1 0

Re: Netscape "random" number seed generator code available
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <199509251159.EAA08528(a)mycroft.rand.org>, jim(a)acm.org (Jim Gillogly) wrote: >I'm nervous enough about all the Easter Eggs that have been reported in >Netscape, like the secret keystroke shortcut to get to Fishcam, or the >different behavior it exhibits when it finds a certain obscurely-named >directory at the top level. Would you please elaborate? TIA, - -- - -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMGdsfSoZzwIn1bdtAQG3ZwGAk5ZFceYsUmo9OgQJ9oVZGcNcXnorr9a2 cLP/xy3vB/COr3uKjfr0mcYY6JMMLxfa =nXHi -----END PGP SIGNATURE-----

3 2

Re: Security Update news release
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <9509251617.ZM167@tofuhut>, jsw(a)netscape.com ("Jeff Weinstein") wrote: >-- >--PART-BOUNDARY=.19509251617.ZM167.tofuhut >Content-Type: text/plain; charset=us-ascii > > Here is the press release we put out this morning regarding the fix >for RNG seed and stack overflow problems. Do the new versions use PGP's randseed.bin? If Netscape even only looks at data used to keep PGP secure, Netscape will be banned from my computer and every computer I am responsible for. -- For good. - -- - -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMGduUCoZzwIn1bdtAQFEgwGA3265JY1cahyqqd2VEe+1RPXI96DQBPRV r1EWdjxzjgXvxplLMagh9yWOPBq9OKRX =F3qb -----END PGP SIGNATURE-----

2 1

truerand
by Jeff Barber 17 Dec '03

17 Dec '03

Could someone please send me a copy of the truerand code Matt Blaze posted yesterday? I inadvertently deleted the message and Todd's Cpunk archives seem to have shut down about a month ago. Many thanks. -- Jeff

1 0

Re: Golden Coy Freeh
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <Pine.SUN.3.91.950925144659.21198A-100000(a)nic.cerf.net>, paulp(a)CERF.NET (Paul Phillips) wrote: >On Mon, 25 Sep 1995, John Young wrote: [...] >> If the head of the F.B.I. acknowledged that his agency was >> powerless to crack a cryptography program like Pretty Good >> Privacy, the stampede for that software on the Internet >> would make the run on Windows 95 look puny. > >That's a bizarre and naive statement. Is there anyone that thinks the >spread of strong crypto has been less than rapid only because people are >afraid it won't protect them against the government? Um, sorry, no. The general public doesn't use PGP. If the FBI director admitted that using PGP is safe even against the FBI, the general public just might become aware of it. Perhaps the statement isn't so naive after all. - -- - -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMGdpbioZzwIn1bdtAQG5zwGAmmSuPLdrDV9rBAUmJFuywUC4x1KgeVqP HiD9C8pP+L5xkZw8pyH8xhwfKPZeKOHb =w1IS -----END PGP SIGNATURE-----

1 0

getting netscape to support the remailers
by sameer 17 Dec '03

17 Dec '03

I started thinking about what it would take to get Netscape to support sending mail through the remailers, after having read the S/MIME specs which Netscape 2.0 is apparently going to support. Perhaps with enough browbeating Netscape 3.0 will support the remailers. I think that in order to get netscape to support the remailers the remailers will have to: A) Support S/MIME B) Have a documented protocol, MIME-related Did Ray Cromwell do some work towards MIMEifiying the remailers? My impression of his work back when he posted was that it trusted the remailers too much, but perhaps my memory is flawed-- in any case his work may be helpful towards developing a remailer standard, which could then help get support incorporated into MIME agents. I will begin work on a preliminary specification, and post my results. I figure MIME remailers would allow for: 1) Transparent reply-blocks Someone could have a multipart mime message where one of the parts is Content-Type: reply-block and the MUA would see that and understand to send replies with that reply block to the remailers. I will be posting more as I work out the details. I welcome comments, suggestions, etc., as I figure that my initial specification will require much improvement. -- sameer Voice: 510-601-9777 Community ConneXion FAX: 510-601-9734 An Internet Privacy Provider Dialin: 510-658-6376 http://www.c2.org (or login as "guest") sameer(a)c2.org

3 2

Re: RSA/Cylink arbitration agreement on-line
by Jonathan Zamick 17 Dec '03

17 Dec '03

At 7:13 AM 9/25/95, Brian A. LaMacchia wrote: >[I haven't seen this mentioned yet on the list...] > >Cylink has been kind enough to put a copy of the arbitration panel's >decision on their web page. Cylink's home page is www.cylink.com. The >URL for the actual agreement is: > > http://www.cylink.com/arbtrn_1.html > >Spin doctors aside, it doesn't look like either company gained much over >the other. I'm not an attorney, but the way I read the agreement RSAREF >can continue to be used without violating the Stanford patents. RSA DSI >cannot *sublicense* the Stanford patents to third parties, but can *sell >code* that practices the methods claimed in the Stanford patents. That >code can then be incorporated into other products, which is exactly what >PGP 2.6.2 does (it's linked against a copy of the RSAREF library, which >is covered by the RSAREF license agreement). > As far as I can tell, that seems to sum it up. In addition, RSA agrees in all their contracts to indemnify the licensee regarding RSA's rights to assign the various technologies. When I called to speak to them, they reiterated their stance. Since, we are going to be handling RSAREF, the validity of RSAREF licenses was of some importance. Having gone through the arbitration ruling things seem to be on track. I'll post more of this to the RSAREF Announce list for folk. Jonathan ------------------------------------------------------------------------ ..Jonathan Zamick Consensus Development Corporation.. ..<JonathanZ(a)consensus.com> 1563 Solano Ave, #355.. .. Berkeley, CA 94707-2116.. .. o510/559-1500 f510/559-1505.. ..Mosaic/WWW Home Page: .. .. Consensus Home Page ..

1 0

Re: Decompiling Netscape
by Ray Cromwell 17 Dec '03

17 Dec '03

Doug, I've managed to find a URL which can place an arbitrary value in the PC register without disassembly. What I did was make a URL abcdefg....ABCDEFG....ZAaBbCcDd.....ZzAAaaBBbbCCcc.....ZZzz then, when Netscape coredumped and the PC gets modified, I look at the PC, say 0x54535251 and see that it is QRST, so I place the PC register there. Now all I need is some 386 code under BSDI2.0 to do an execve. I just wrote a simple execve in C, compiled it, and stole the appropriate magic kernel library invocation sequence. What I need to do now is 1) find out the approximate address of the stack pointer, 2) generate some code that has a whole lotta NOPs, followed by the execve sequence, and finally, preface all that by a PC value that will hopefully land somewhere inside that field of NOPs on the stack. And all this has to be done without using any characters which will stop netscape from reading in more pieces of the domain string. You might be able to use the same techniques to whip up a quick exploit on your systems. By far, the best exploits will be on the Mac and Windows (especially), because those make up the majority of people using Netscape. Create an exploit on Windows, and stun the world. ;-) -Ray

1 0

Re: List of US representitives
by Lynne L. Harrison 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 01:37 PM 9/25/95 EST, Brian Gorka wrote: >Someone posted a list of US reps awhile back... Can someone forward me a copy? >Thanks. Brian, Here's the list you requested. Linda Thompson (lindat(a)iquest.net) posted this in August, 1995. Regards - Lynne ++++++++++ senator(a)boxer.senate.gov senator_brown(a)brown.senate.gov, sen_dodd(a)dodd.senate.gov, senator_lieberman(a)lieberman.senate.gov, joe_biden(a)biden.senate.gov, senator_coverdell(a)coverdell.senate.gov, tom_harkin(a)harkin.senate.gov, chuck_grassley(a)grassley.senate.gov, larry_craig(a)craig.senate.gov, dirk_kempthorne(a)kempthorne.senate.gov, senator(a)simon.senate.gov, senator(a)moseley-braun.senate.gov, wendell_ford(a)ford.senate.gov, senator(a)breaux.senate.gov, senator(a)johnston.senate.gov, senator(a)kennedy.senate.gov, john_kerry(a)kerry.senate.gov, senator(a)mikulski.senate.gov, senator(a)levin.senate.gov, mail_grams(a)grams.senate.gov, senator(a)wellstone.senate.gov, john_ashcroft(a)ashcroft.senate.gov, max(a)baucus.senate.gov, conrad_burns(a)burns.senate.gov, bob(a)kerrey.senate.gov, mailbox(a)gregg.senate.gov, opinion(a)smith.senate.gov, senator(a)bradley.senate.gov, senator_Bingaman(a)bingaman.senate.gov, senator_domenici(a)domenici.senate.gov, senator_reid(a)reid.senate.gov, senator_dewine(a)dewine.senate.gov, nickles(a)rpc.senate.gov, lugar(a)iquest.net senator_chafee(a)chafee.senate.gov, senator(a)hollings.senate.gov, tom_daschle(a)daschle.senate.gov, larry_pressler(a)pressler.senate.gov, senator_frist(a)frist.senate.gov, senator(a)hutchison.senate.gov, senator_robb(a)robb.senate.gov, senator(a)warner.senate.gov, senator_leahy(a)leahy.senate.gov, vermont(a)jeffords.senate.gov, senator_Gorton(a)gorton.senate.gov, russell_feingold(a)feingold.senate.gov, senator(a)rockefeller.senate.gov, everett(a)hr.house.gov, budmail(a)hr.house.gov, sbachus(a)hr.house.gov, jdickey(a)hr.house.gov, edpastor(a)hr.house.gov, dcaucus(a)hr.house.gov, woolsey(a)hr.house.gov, gmiller(a)hr.house.gov, sfnancy(a)hr.house.gov, talk2tom(a)hr.house.gov, petemail(a)hr.house.gov, annagram(a)hr.house.gov, tellnorm(a)hr.house.gov, zoegram(a)hr.house.gov, samfarr(a)hr.house.gov, george(a)hr.house.gov, andrea22(a)hr.house.gov, tellbuck(a)hr.house.gov, jharman(a)hr.house.gov, tucker96(a)hr.house.gov, housesst(a)hr.house.gov, rpackard(a)hr.house.gov, skaggs(a)hr.house.gov, schaefer(a)hr.house.gov, bozrah(a)hr.house.gov, cshays(a)hr.house.gov, delaware(a)hr.house.gov, kthurman(a)hr.house.gov, cstearns(a)hr.house.gov, canady(a)hr.house.gov, pdeutsch(a)hr.house.gov, hastings(a)hr.house.gov, jlinder(a)hr.house.gov, georgia6(a)hr.house.gov, saxby(a)hr.house.gov, ga10(a)hr.house.gov, runderwo(a)hr.house.gov, brush(a)hr.house.gov, luisg(a)hr.house.gov, hfawell(a)hr.house.gov, dhastert(a)hr.house.gov, durbin(a)hr.house.gov, johnhost(a)hr.house.gov, emailpat(a)hr.house.gov, edky01(a)hr.house.gov, mward2(a)hr.house.gov, bunning4(a)hr.house.gov, torkma06(a)hr.house.gov, jmoakley(a)hr.house.gov, cardin(a)hr.house.gov, tellhoek(a)hr.house.gov, congehlr(a)hr.house.gov, davecamp(a)hr.house.gov, repsmith(a)hr.house.gov, chrysler(a)hr.house.gov, lrivers(a)hr.house.gov, jconyers(a)hr.house.gov, gil(a)hr.house.gov, dminge(a)hr.house.gov, mn03(a)hr.house.gov, vento(a)hr.house.gov, tellbill(a)hr.house.gov, tocollin(a)hr.house.gov, oberstar(a)hr.house.gov, goldsmit(a)iquest.net talentmo(a)hr.house.gov, demldr(a)hr.house.gov, bemerson(a)hr.house.gov, bthompson(a)hr.house.gov, funnc02(a)hr.house.gov, thechief(a)hr.house.gov, mail2nc5(a)hr.house.gov, crose(a)hr.house.gov, myrick(a)hr.house.gov, chtaylor(a)hr.house.gov, melmail(a)hr.house.gov, epomeroy(a)hr.house.gov, zeliff(a)hr.house.gov, franksnj(a)hr.house.gov, dzimmer(a)hr.house.gov, mpforbes(a)hr.house.gov, lazio(a)hr.house.gov, tmanton(a)hr.house.gov, molinari(a)hr.house.gov, rangel(a)hr.house.gov, jserrano(a)hr.house.gov, engeline(a)hr.house.gov, boehlert(a)hr.house.gov, bpaxon(a)hr.house.gov, portmail(a)hr.house.gov, hokemail(a)hr.house.gov, istook(a)hr.house.gov, furseor1(a)hr.house.gov, pdefazio(a)hr.house.gov, murtha(a)hr.house.gov, jonfox(a)hr.house.gov, mchale(a)hr.house.gov, pa16(a)hr.house.gov, jspratt(a)hr.house.gov, cwilson(a)hr.house.gov, samtx03(a)hr.house.gov, barton06(a)hr.house.gov, doggett(a)hr.house.gov, frost(a)hr.house.gov, ggreen(a)hr.house.gov, enidutah(a)hr.house.gov, ortonut3(a)hr.house.gov, opickett(a)hr.house.gov, talk2bob(a)hr.house.gov, ninthnet(a)hr.house.gov, bsanders(a)igc.apc.org, repwhite(a)hr.house.gov, asklinda(a)hr.house.gov, dunnwa08(a)hr.house.gov, rtate(a)hr.house.gov, mneumann(a)hr.house.gov, badger02(a)hr.house.gov, roth08(a)hr.house.gov, commerce(a)hr.house.gov, slabmgnt(a)hr.house.gov, resource(a)hr.house.gov, housesst(a)hr.house.gov, smbizcom(a)hr.house.gov -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMGdiOj5A4+Z4Wnt9AQH5dwP+ItAzI/4EpqKaO34oKpOyI2QFcX8o5IYf vqAWC9u4D/cEuWx8hmVIe+r5iFmgbx3jIW2fPtzeu9G8VnPu5YrefzQGVR1UQsNz ockVde+WJb96M+To8u2141zMkHSr3ZurHjWk+K6Ft4c1ek0eRkYchUwEnvfigwZb DQCDjR+mb84= =az85 -----END PGP SIGNATURE----- ******************************************************************** Lynne L. Harrison, Esq. 34 Cannon Street Poughkeepsie, New York 12601 (914) 454-8130 E-Mail: lharrison(a)mhv.net "Say not, 'I have found the truth', but rather, 'I have found a truth.'" - Kahlil Gibran from "The Prophet" ********************************************************************

1 0