December 2003 - cypherpunks-legacy

Where is Secure Drive 1.4?
by scottg＠b4a206.mdc.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- <Decloaking after 3+ years> Hi Folks, I have a previous version of SecureDevice (v1.3). Is v1.4 the current version or something higher? Where is an FTP site so I can grab it? TIA, scott gallaher <scottg(a)b4a206.mdc.com> | I believe in the 1st Amendment. TECO Master & DBA | Pornography is just a fringe benefit. PGP Key fingerprint: AD A8 C9 AA D7 D3 6A E3 0C 58 5A 10 41 37 45 EE GCS d- s+: a C++++ U->L++++ P? L>+++ !E[teco+++] W N++ k- w--- !O M- V$ PS+ PE Y++ PGP(++) t+ !5 X R(++) tv+ b++(+++) DI+ !D G e++ h----(*) r+++ y++++(++*) -- Geek Code V3.0 <Resuming lurking mode...> -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQBVAwUBME4SV9PstJd5R1NxAQFN9wH/UYh59UzgBKotUs/HDYJ7jHEPlcmOIy/E Zo74KQcSb9QtaPMntSpHiZq3W1ZaIRrl+jx9HkZbsBbXHRVi7+HGXQ== =xvbE -----END PGP SIGNATURE-----

1 0

Re:
by Peter Trei 17 Dec '03

17 Dec '03

> From: Mix <mixmaster(a)remail.obscura.com> > To: cypherpunks(a)toad.com > The optional penis smiled as the blue arc-phase > crossed the scamper gap. There were many of us > who felt gloved by the discharge, as if irradiated > with baby milk powder. > Later, the arc-monster cried quietly in the > humming chair, whilst remaining still enough > for the scamper gloves to plunge authoritatively. > - A'Tak A'Tdorn I assume that messages of this type are some form of steganographic communication. I just wish that they were in alt.anonymous.messages: here they are just noise to most of us (though I suspect John Young parses them just fine :-). At least they're more entertaining than Platypus' 'agraphic typo' technique. Peter Trei

1 0

BoS: Bug bugs privacy file but a fix is on the way (fwd)
by Patrick Oonk 17 Dec '03

17 Dec '03

Forwarded message: >From best-of-security-request(a)cyber.com.au Tue Aug 26 08:30:06 1997 Resent-Date: Tue, 26 Aug 1997 16:16:35 +1000 (EST) From: darrenr(a)melb.convergent.com.au (Darren Reed) Message-Id: <199708260343.NAA08202(a)duchess.melb.arcsystems.com.au> Date: Tue, 26 Aug 1997 13:43:37 +1000 (EST) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: darrenr(a)cyber.com.au Old-Status: O Resent-Message-ID: <"kYO8a.A.IkC.-PmA0"@plum> X-Loop: best-of-security(a)cyber.com.au Errors-To: best-of-security-request(a)cyber.com.au Precedence: list Resent-Sender: best-of-security-request(a)cyber.com.au To: best-of-security(a)cyber.com.au Resent-From: best-of-security(a)cyber.com.au X-OS: FreeBSD3.0-current X-Mailing-List: <best-of-security(a)cyber.com.au> ftp://ftp.cyber.com.au/pub/archive/b-o-s/ X-Subscription: To unsubscribe from this fine mailing list mail best-of-security-request(a)cyber.com.au with Subject: unsubscribe Subject: BoS: Bug bugs privacy file but a fix is on the way A "flaw" in the encryption program PGP 5.0 was reported to the Australian security organisation AusCERT lat week, and a recommended fix was issued later in the week. Security consultant Paul Drake, an expatriate Australian working for a company called NetSafe, said he had discovered a bug that menat PGP 5.0 (for "Pretty Good Privacy") kept passwords in memory "at all times", as well as part of the text of whatever had been encrypted. The keyfile was also being kept in a relatively insecure file, he said. AusCERT confirmed the problem had been reported and said they were investigating. PGP advocate peter Moon, who is pushing for wider use of the software in Australia, said while the problems pointed out by Drake were "valid", they were more weak points than "bugs". "The PGP encrpytion algorithm is - as anyone knows - as solid as a rock. The attacks are all based on the principal that if you want to break into the strongest box in the world, the easiest way is to pinch thekey." He said a product called bcwipe could clear the saved information and the keyfile should probably be deleted altogether. Drake said PGP, a United States-based company, would release "PGP 5.01" without the problem. -- Jenny Sinclair, Page D4, The Age, Tuesday 26 August 1997 -- | Patrick Oonk - http://patrick.mypage.org/ - patrick(a)pine.nl | | PGP Key ID 0xDA2E93FA - Internic PO59 - <clicketyclick> | | Pine Internet B.V. Consultancy, installatie en beheer | | Tel: +31-70-3111010 - Fax: +31-70-3111011 - http://www.pine.nl/ |

1 0

*Burp Test - Ignore *
by Anonymous 17 Dec '03

17 Dec '03

* BURP Monger *

1 0

Bypassing the trap door for LanMan
by Rick Osborne 17 Dec '03

17 Dec '03

I was thinking about LanMan passwords on NT (thanks to Hobbit and Mudge for the background) when it occurred to me that you don't *really* have to brute force the entire keyspace to get a password under the two systems. Bear with me here for a sec, and please let me know if something I say is incorrect. I haven't read through Applied Crypto in a while and may be a bit rusty. What I'm thinking is this: why do you need *the* password? Can't you just find an MD5 collision by working the algorithm in reverse? Obviously, when working it in reverse you are highly unlikely to get *the* password, but if you then shove what you got back through and it hashes out to the same thing, what difference does it make? We know that you can grab Win32 password hashed with minimal effort (thanks to pwdump), and since the salt in those passwords is constant, and since the LanMan password is just an uppercased version of the NTLM password, could we not reverse-engineer that hash to get a working version of the password? It shouldn't have to be *the* password, as no challenge/response system is in place for LanMan, and it only has to hash out to the same thing (which is guaranteed). Also, in a RL scenario, you'd only need the password once: to add a given account to the Domain Admins group, or to create such an account in the first place. At that point, you use your dummy account and you are good to go. So we have a system here: 1. Use `net view` to get a list of all nodes on the network. 2. Get the list of Domain Admins. 3. Pass that list of nodes to successive calls to pwdump to grab passwords from the registries, until you find one that a Domain Admin has logged into. 4. Reverse-engineer the Domain Admin's password and create an account in the Domain Admin group. 5. Use pwdump on the PDC to get the list of all usernames and passwords. Now, if pwdump could be done in Perl (using Win32::Registry), then this entire process could be automated (also using Win32::AdminMisc and a backwards version of Cypto::MD5) trivially. Also, since MS has yet to truly fix the GetAdmin problem, steps 1-4 can be replaced with a single call to that. Using L0phtCrack (or something similar) and a nice big wordlist (say, 2 million words), I estimate that some 60%-70% of the user passwords could be gotten in this manner, including a few of the Domain Admins' (assuming normal, non-cypto-savvy Domain Admins), in under 2 hrs of work. Now, as a lighter side of this, this could also be useful: Say you already are a domain admin and are unhappy with the level of security your site is using. And say that whenever a user forgets their password it is reset to something trivial (like 'password' or their employee number, etc). A large number of employees are not going to change that reset password (unless User Must Change Password is set). An Admin could therefore hash out 'password', dump the entire user/pass list, and force the ones with the same hash to change their password at the next logon (this is in a bitfield somewhere). This script could be set to run once a week, insuring non-trivial passwords. In an environment where management refuses to institute strong-password securities, this could be a trivial way for an Admin to do it him/herself, without making it obvious what is going on or without making too much work for themselves. --Rick [Who has *just* that kind of management. :( ] -- Rick Osborne, <osborne(a)gateway.grumman.com> Real programmers don't use APL, unless the whole program can be written on one line.

1 0

Re: Direct Socket to Remailer?
by loki＠obscura.com 17 Dec '03

17 Dec '03

At 11:41 PM 9/3/95, starrd(a)iia2.org wrote: >On Fri, 1 Sep 1995, Lance Cottrell wrote: > >> You should try the telnet port 25 trick. It is amazingly simple (but not >> secure). Just "telnet some.machine.com 25" and type help. It will guide you >> through it. It is quite informative. > >Se sure to test it first, sometimes it records who *really* sent it as >well as the "forged" return address. > >Test it by mailing to yourself and then look at all the headers. > I should have been more clear. I was advocating this as interesting and educational, not as an effective anonymity technique. -Lance ---------------------------------------------------------- Lance Cottrell loki(a)obscura.com PGP 2.6 key available by finger or server. Mixmaster, the next generation remailer, is now available! http://obscura.com/~loki/Welcome.html or FTP to obscura.com "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche ----------------------------------------------------------

1 0

Re: lack of evolution (So What!)
by Peter Trei 17 Dec '03

17 Dec '03

One factor which everyone seems to be overlooking in this thread is the future impact of biotechnology. Sure, evolution by natural selection has largely halted for the human race - we were, on average, probably at our fittest about 10,000 years ago, before the introduction of agriculture. However, artificial evolution will soon take over. There are two main forms - purely biological evolution through genetic engineering, and a continued evolution in our collaboration with devices. We are on the verge of achieving the first. We may soon be able to eliminate many genetically related diseases and conditions. While Rifkin and other Luddites rail against the unnaturalness of it all, they will fail. There are too many cases where GE is an unquestionable good. If parents had the option of the following traits in their children, how many would refuse? * Perfect teeth - natural immunity to caries. * Immunity to cancer. * Immunity to AIDS (about 1% of the current population is naturally immune) * Ditto many other diseases, genetic and infectious. All the above may be available in the next 20 years. (The anti-AIDS gene maybe in 10 - it looks like an easy one). In the longer run, almost anything that can be imagined may be possible, including physical immortality and increased intelligence. Secondly, we've evolved as a tool-using species for a million years, and our technology is as much a part of our inheritance as are our genes. Where will it take us no one knows, but the future will be richer and stranger than we can imagine. Our machines will help re-make what it is to be 'human'. This includes all devices - cyborg or external, nano or macro, sentient or dumb. So I'm not too worried that the cull rate due to sabre-tooth tigers has dropped off, nor even that the irresponsible are no longer starving to death, which Tim would seem to want. Our technology can and will overcome these little problems. 'Not in vain the future beckons, Forward, forward let us range. Let the great world spin forever Down the ringing grooves of Change.' - Tennyson Peter Trei trei(a)process.com

2 1

Re: Collection of personal info
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 8:39 PM 9/6/95, David Neal wrote: >From the huge number of people in the database, it would seem that TRW >is now marketing a subset of their credit records they keep on everyone. >Does anyone else remember the flap over Lotus' product (Magellan) that >was going to allow something similar? > >The risks? This is the perfect database if you want to red-line your offerings. >I'm sure others will have more creative answers. About the Lotus Marketplace product of several years ago, many of us thought at the time that the furor was misdirected, and the result ultimately damaging to privacy concerns. Why? Because the ZIP code data is _already_ available to the mass marketers, etc. The Marketplace produce merely made it available to "the rest of us," allowing many people to have their eyes opened about what exists. By getting Lotus to pull the product, the public went back to sleep, lulled into the false sense of privacy that their ZIP codes were once against private. Privacy needs to be protected by keeping some things secret, not by passing laws limiting the records others can collect from public or voluntarily offered information. Don't get me wrong--I don't like TRW Credit, Equifax, TransUnion, or anyone else compiling "dossiers" on my spending habits, my travel itineraries, etc. But by using my VISA and MasterCard cards, and by agreeing to their terms and conditions, I am tacitly accepting that credit reporting agencies will have access to my transactions. If there is a "market for privacy," and this is something we've talked about before, then someone will offer "The Privacy Card." We can debate what this card might offer, randing from complete unlinkability (ecash protocols of various sorts) to non-reporting of records to the Big Three of credit reporting agencies. Even cards issued in the name of pseudonyms, of various sorts and backings. Should there be laws _against_ this kind of Privacy Card, we should fight these laws. But we should not lull ourselves into a false sense of security by adopting the unconstitutional and anti-liberty approach of having "Fair Credit Reporting Act" and "Data Privacy Act" sorts of laws. In my opinion, of course. --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

Re: Welfare / Norplant
by Peter Trei 17 Dec '03

17 Dec '03

Tim May writes: > At 5:33 AM -0700 8/25/97, Peter Trei wrote: > >Several years ago I came up with a little variation on the > >Welfare Mother problem which I thought was a lot more > >palatable. > >Offer a 'birthday present' program, under which *any* > >female over the age of 11 who has not yet had a child or become > >pregnant, on her birthday, gets a cash award. The award should > >be high enough to encourage participation; $250 seems about > >right. A woman who can deliberatly turn down a $250 lump sum > >every year for the rest of her life is almost certainly able > >to afford to raise a child. > Possibly more palatable to the majority not already on welfare, but hardly > an incentive to a single mother contemplating the increase in her > AFDC/WIC/etc. benefits should she add to her brood. You are not thinking this through. Under this scheme, every welfare mother would march her girls down to the clinic and get them Norplanted as soon as she could. Those girls would not be able to further add to the welfare rolls until they reach legal age, and could have the contraceptive removed without their mother's permission. By then they'd have developed a habit of contraception, which would likely continue. [...] > But given the obvious flaws in Peter's plan, he probably has a future as a > bureaucrat in Washington. :-) Tim: Your keyboard is on, but the processor socket is empty.... > --Tim May Peter Trei

1 0

Re: PGP5i supports RSA keys?
by John Smith 17 Dec '03

17 Dec '03

>TWOK! Au contraire, mon ami... > >Eric Drexler estimates that with nanotech, it should be possible >to create a 1 GHz processer that fits in 1/8 of a cubic micron. >It would take 1E24 such processors to factor a 2048 bit number. >If we wanted to factor that 2048 bit key in 1E6 seconds, a couple >of weeks, we would need 1E18 processors, which would fit in a cube >100,000 microns on a side. This is 10 cm on a side, about the >volume of a soccer ball. A far cry from the whole earth, no? GURK! I meant that it would take 1E24 seconds for one such processor to factor a 2048 bit number. The rest is right. Use an 8K bit key and it will be 1E30 times harder than a 2K key. Now your soccer ball is comfortably bigger than the earth. You will have to convert the sun into a CPU to break it with nanotech. "John ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

1 0