December 2003 - cypherpunks-legacy

Public report of the EU crack.
by hallam＠Etna.ai.mit.edu 17 Dec '03

17 Dec '03

>From the Sunday times:- http://www.sunday-times.co.uk/news/pages/Sunday-Times/stifgnnws01015.html?y… AMERICAN intelligence agents have hacked into the computers of the European parliament and European commission as part of an international espionage campaign aimed at stealing economic and political secrets, according to investigators, write Tim Kelsey and David Leppard. The European parliament has called in British communications experts to improve its security and to block further attempts by American govern ment agents to spy on its workings. Security officials at the parliament's Luxembourg offices say they have discovered several recent instances in which its communications system was compromised by American hacking. They have also found evidence that the Americans used information obtained from hacking to help them in negotiations last year on the General Agreement on Tariffs and Trade (Gatt). Lord Plumb, leader of the British Tory MEPs in the European parliament, said he was shocked by the disclosure. "I will be taking this up directly with the American ambassador [to the European Union]," he said. The CIA has already been accused by the Japanese and French governments of hacking into their communications networks in an attempt to obtain confidential trade secrets. The European parliament's computer network links more than 5,000 MEPs, officials, researchers and other staff to each other, and to the European commission headquarters in Brussels and the council of ministers. Traffic across the network by telephone and computers includes details of the private medical and financial records of many MEPs and officials, and discussion documents on confidential issues, including trade, tariff and quota agreements. The records of closed committees of inquiry into BSE and fraud are also stored on the system. European parliament sources say the Americans accessed the network by compromising the information exchanges that link the parliament's internal networks with the Internet and external users. The devices, called "routers", filter entry to the European parliament's network. It is understood the Americans were able to obtain access to what is called the simple network management protocol (SNMP), the language that enables the networks to talk to each other. They were able to exploit the fact that parts of the system were manufactured by two American firms. The breach came to light when officials believed that American negotiators had been given advance warning of confidential European Union positions in last year's trade negotiations. "It was established that the system had been penetrated just days before the talks," an EU source said. "Our principal concern is not to establish what has already been copied but to ensure that it does not happen again. This is an on-going problem." A spokeswoman for Antonio Cavaco, director of data processing at the commission, confirmed that allegations of hacking had been investigated. However, she said she was unable to provide any details. [end] I consider the political dimension of this affair to be more significant that the technical. This brings the US and the French into the same category of anti-crypto government with a habit of poking its nose into other people business and getting caught. Phill

1 0

A SPANIARD IN THE WORKS? (non-crypto)
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, Is there anyone on the list who lives in Spain? If so, please reply by private e-mail. Thanks, S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Re: Tolerance (fwd)
by peter honeyman 17 Dec '03

17 Dec '03

Declan McCullagh writes: > This is attempted proof by credentalism. I call him on it. > > Okay, Jim, what _do_ your lawyers say on this? Have you asked them? I, > too, have an attorney, a civil liberties specialist and a graduate from > Princeton law. So what? declan, you are a fucking liar, and i am calling you on it. princeton does not have a law school. peter

2 1

Re: Corporate e-mail policy
by James C. Sewell 17 Dec '03

17 Dec '03

At 11:22 PM 8/3/96 -0400, Rabid Wombat wrote: > What you >publish as a use policy, and what you actively enforce do not have to be >the same. > Unfortunately this is a problem in many companies. There are policies which are enforced to the letter, guidelines which are just suggestions, and fake-rules which are not even attempted to be enforced. The problem comes when the employee and employer can't distinguish them from each other. Personally I think I would approach it as the privacy we have with the eontents of our car's trunk. If an officer has probable cause to search the trunk then he can, otherwise he can't. It's not a perfect system but it does work better than other alternatives I can think of. Write into your policy: "Electronic mail may be monitored if there is sufficient reason to believe that it is being improperly used which includes, but is not limited to: mail to competitors, more than 20 recipients (spam), and incoming mail from questionable sources. If such monitored mail is encrypted the employee must provide a clear text version of the mail which is to be unencrypted under supervision to avoid substitutions. Any employee refusing to make available such mail will be ...." Just remember, as was said, once you make a policy it becomes precedence and will stick with you forever... longer if it's a bad one. Best Wishes Jim Jim Sewell - jims(a)tansoft.com Tantalus Incorporated - Key West, FL

2 1

Re: crypto CD source
by Remo Pini 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit To: cypherpunks(a)toad.com Date: Mon Aug 05 10:08:19 1996 I'm looking for contents for the crypto CD. Since this CD will (might) be mastered in Switzerland, no ITAR applies to the CD, but if anyone wants to include some restricted stuff, send it to me (dat, disk or encrypted email) Address: Pini Computer Trading "Crypto CD" Hofwiesenstr. 234 8057 Zuerich Switzerland My wish list: - - PGP - - A lot of algorithms in C, Pascal, ASM (for diverse processors) - - Private Idaho - - Pronto Secure - - a suite of html pages describing all files (I'll probably have to do that myself) - - Netscape (the secure versions, if its legally feasable -> Netscape?) - - Crypto papers - - Crypto analysis papers - - Lawtexts concerning crypto (ITAR, France, ...) Anything else? - --------< fate favors the prepared mind >-------- Remo Pini rp(a)rpini.com PGP: http://www.rpini.com/remopini/rpcrypto.html - ------< words are what reality is made of >------ -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBMgWr9BFhy5sz+bTpAQEOuQf+PAfJrxDLo4mEDsC8QelbBE5WHqNecmcq soPN0ZDSDzSEdbofALHBEiAW8SHVT4h1XWPNG1QjNvuCsluLN4HX1IQSfCjjCNzO /T9jqNqKbwDL5ssluD9nc/tbjaTN2zdXIVRE2/1QZmyrysT5MK5tiHzbbkrFjSy2 tVwUmEk9W+gTAzNBxLE5ni2Q6oLLuf+jnzw0jBn15nA3S7USN+G+dMsNG2ROR7ZI Lp1a9XvqtjZ41Ju1C0QVR6u53a7mB8unrxxALewF2TjJUXxJOA0W1QbxM8/aI6cb jjePr0NoohyCORLNh+pGaBQ+DXYY28JL5keCyGCr8k/INXHIksbEIQ== =aTqo -----END PGP SIGNATURE-----

3 2

viruss'
by Zero Cool 17 Dec '03

17 Dec '03

Does anyone know where thre is good virus page???? I know that there is one out there, but dont have the add. Zero Cool

2 1

FUCK YOU, SHITOPUNKS
by nobody＠zifi.genetics.utah.edu 17 Dec '03

17 Dec '03

FUCK YOU, SHITOPUNKS DAVID STERNLIGHT

5 4

Re: Stealth cookies
by jfricker＠vertexgroup.com 17 Dec '03

17 Dec '03

At 12:10 AM 8/6/96 -0700, you wrote: >John F. Fricker wrote: >> Solution? >> >> 1) Don't put your name in the netscape configuration (d'oh) > > No, no, no. Netscape navigator does not reveal your name or >put it into cookies. The only way to get your name or other >personal information about you into a cookie is for you to type >it into a web site, and have that site send you back a cookie. > > The only time we reveal your name is in e-mail headers, and >when doing anonymous FTP when you have manually disabled the default >of sending 'mozilla@' as the anon ftp password. > > --Jeff > Oh I was just being paranoid I guess. There used to be JavaScript that would automatically send email from a page. something like <html> <body onLoad="document.mailme.submit()"> <form method=post name="mailme" action="mailto:john@vertexgroup.com?subject=user address"> <input type=hidden name="userAddress" value="done"> </form> </body> </html> But even if that still works it would be a good trick to associate it with a cookie.

2 1

Mac Crypto/ internet commerce workshop registration
by Vinnie Moscaritolo 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE-----BY SAFEMAIL 1.0----- Attention: I have setup a webpage to handle registrations for the Mac Crypto/ internet commerce workshop. http://webtuff.apple.com/~opentpt/crypto.html please signup and book your airlines and hotel as soon as you can. I am still looking for presenters, if you plan to talk, please drop me an outline, pronto ciao -----BEGIN PGP SIGNATURE-----BY SAFEMAIL 1.0----- Version: 2.6.i iQCVAwUBMggHRfMF2+rAU+UdAQEocwQAi347wC62qlgoV0E8nL2E57beK0Uo3fjo 0ZYSYSwu0zOdF9gqGyBfM0ZEHFGh9CEiJik3JCKww4B4Pl6HVWjm9Ay1DN4IqdOo fvanrRRJXcBi00HnyaJmjq9jIrsGoH6nZ3sxM58yaldm/6iVuKezhgBprPF0WwOr aq9NPOZaePg= =Zm8+ -----END PGP SIGNATURE----- Vinnie Moscaritolo Apple Developer Tech Support http://www.vmeng.com/vinnie/ Fingerprint: 4FA3298150E404F2782501876EA2146A

1 0

F2 hash?
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

Does anyone have a descriptoin of the F2 hash? F2 is a secret hash from SecurityDynamics, and is used in their client software. (Its not the hash in the cards, but if anyone has a copy of that, it might be fun.) I'd be very interested in seeing source code in the public domain to try out a few hacks... Anyone? Anyone? Bueller? Bueller?

3 5