December 2003 - cypherpunks-legacy

FREE Software makes you MONEY
by Success＠www.kse.or.kr 17 Dec '03

17 Dec '03

Fellow Networker: Please take a close look at MEGA RESOURCE software for fast cash building and advertising you product and program on software WORLDWIDE! This is NOT Meganets, Megabucks, or like any of those other software programs out there. You actually get a product for each code you buy to unlock the software. UNLIMITED LEVELS-unlike the other programs where you drop off the disks. For a FREE EVALUATION copy and the download site and info, "mail to: freeinfo(a)globals-ads.com" for instant info back. DO NOT HIT "REPLY" If you wish to be REMOVED from *this* mailing list, please hit reply and type "REMOVE" in the SUBJECT field (not the body). Our servers are will automatically remove you from our database within 24hrs.

1 0

Mixed Messages / Re: F00FC7C8 Kills P5 AND Re: Major security flaw in Cybercash 2.1.2 (fwd)
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Eric Cordian wrote: > In comp.sys.intel, the keeper of the Intel Secrets Website, > rcollins(a)slip.net (Robert Collins) writes this absolutely amazing > paragraph: > > If nobody knew about this problem, nobody would be affected > > by it. > > No, I had no desire to publicize the bug. > Egads. Talk about "Security by Obscurity"! Robert Hettinga wrote: > Subject: Major security flaw in Cybercash 2.1.2 (fwd) > CyberCash v. 2.1.2 has a major security flaw that causes all credit > card information processed by the server to be logged in a file with > world-readable permissions. This security flaw exists in the default > CyberCash installation and configuration. We at the Electronic Fraud Foundation also have no desire for these bugs to be publicized. We're making a goddamn fortune off of them. (Damn near as much as we're making off of our remailer-donation scam.) Ura Fishpal, Flounder, Electronic Fraud Foundation [Note: You are required by Federal Law to pay me one dollar for reading this post. Send $1 to EFF, Box 281, Bienfait, Sask. Canada S0C 0M0] [Note From Your System Administrator: Failure to comply with the above will result in loss of your access privileges and a hernia.]

2 1

Sloppy Chips from Intel
by Eric Cordian 17 Dec '03

17 Dec '03

By now everyone has probably heard that Intel Pentium and Pentium MMX chips hang when executing the instruction sequence F00FC7C8 even when in an outer ring of privilege or in V86 mode. With numerous small Linux-based ISPs out there, often providing shell services to anonymous customers, or serving customer-provided CGI programs, the existence and public disclosure such an easily exploitable flaw in their CPU's hardware protection mechanism is catastrophic. Intel, rather than extensively verifying their microprocessors before shipping them out the door, now advertises that its chips may contain "errata," or "deviations from published specifications" and doesn't seem to regard such problems as any big deal. This latest flaw is the third unexpected surprise in Intel's Pentium product line. A serious precision problem in double precision floating divide was discovered in early Pentium chips, and it was recently disclosed that there are circumstances under which the Pentium Pro may fail to generate an exception when a Float to Integer conversion overflows. While today's problem does not permit clandestine entry into a system, since it kills the system when it is exercised, it does raise the question of whether there are other more subtle problems in the hardware protection mechanism, which might enable knowlegable users to execute an occasional instruction at the wrong privelege level, or otherwise do things which should be prohibited according to the published hardware specifications. It is interesting to note that such problems have not been reported in compatible chips manufactured by AMD, a competitor of Intel. Buggy microprocessor microcode can produce very subtle exploitable faults in a chip, which are almost impossible to notice when running ordinary applications and operating systems. Instructions may do the wrong thing only when they follow certain other instructions. There may be rare times when the processor is wrongly interruptable, or when a restricted instruction is not forbidden, or is given access at the wrong privilege level, or with incorrect address translation. Were such features to be deliberately introduced into a chip, in order to permit a backdoor for undetected entry, they could be made completely undetectable, and could depend upon any number of unlikely conditions, or even specific hidden register values, in order to be made manifest. Every microprocessor could even have its own "key" for the activation of such "special features." Unlike Unix, for which complete compilable source code is available, we know little about what what microcode is run through the several million transistors on a typical microprocessor. If sloppy engineering alone produces such dangerous faults, imagine what could happen should industry decide to deliberately cooperate with various LEAs and TLAs. (In the national interest, of course.) The possiblities are truly mind-boggling. Perhaps exploits like tapping Aldrich Ames' PC and crashing Saddam Husseins' PCs en masse were not done by black bag jobs and viri, but by the activation of "National Security" backdoors present in all complex modern microprocessors. -- Eric Michael Cordian 0+ O:.T:.O:. Mathematical Munitions Division "Do What Thou Wilt Shall Be The Whole Of The Law"

1 0

Re: [SURVEY try again] pgp5.x / pgp2.x users
by Robert A. Costner 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 12:23 AM 11/9/97 +0100, Ulf Möller wrote: >> > 20 % of the users who have posted digitally signed messages that are >> > available in my news spool (international and local newsgroups and >> > mailing lists) use PGP 5. The sample contains 545 unique e-mail >> > addresses. YMMV. Just to skew the numbers, I for instance have PGP 5.0 but am using a 2.6.2 DOS generated key that is RSA, not DSS. Grepping would show me to be PGP5.x, which perhaps technically I am, but my key is really 2.x -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQBVAwUBNGUQUEGpGhRXg5NZAQF7fQH5AfV2VfTwuLYs1ND6UTwoWIzAf3OjTSA8 saBlUQJquCUotwr5zk3cU+KiJJ9/hgLsLzOfet16ow1Do3zop7zUJw== =VDPv -----END PGP SIGNATURE----- -- Robert Costner Phone: (770) 512-8746 Electronic Frontiers Georgia mailto:pooh@efga.org http://www.efga.org/ run PGP 5.0 for my public key

1 0

Make money From People Watching TV
by skyway＠t-1net.com 17 Dec '03

17 Dec '03

Just Released Bill Gates has just joined with Ted Turner and Rupert Murdock to form the greatest consortium of combined technology and opportunity available today! Their plan is to take over the digital communications market by setting up people with DSS satellite equipment at no charge. As a representative with our company, you will get paid between $25 and $100 for "giving away" Digital Direct Satellites, For every person that joins the business with you to give away free Digital Direct Satellites, you will make an additional $55 to $280 We are getting paid for getting consumers set up with a total Digital Direct Satellite system with no charge, and building the distribution network of the future. Imagine how easy it is to give these away! In the first week sharing it with friends I gave away 5 not even trying and made an extra $375. There are no credit applications for the client to fill out, no mandatory 12 month contracts to join, and no surprises later down the line. The company will even upgrade the system later if it becomes obsolete, For Free! This new union was created intentionally to capture a huge active ongoing database of consumers. That's right, consumers who will purchase continuously from shows like QVC, HSN and many others, and when they purchase off of the TV you as a distributor will also make a commission off everything that they order, even while you are out golfing or sleeping, 24 hours a day. All this from you having them fill out an application that should take no more than 60 seconds. There are several other ways to get paid also, and I have enclosed the actual application for you to review. Could you imagine Christmas when they are buying like crazy and you are getting paid up to 30% of what they purchase off the television? I could and that's why we are here. Come "profit from the future of television" and join the fastest growing segment of this company and become a winner with us. If you are ready for the greatest business opportunity to come down the pike, don't miss this one, it is only 2 months old!!! Give our information hot line a call at 1-800-942-9304 pin #20088 CHECK OUT http://www.millenniumgroup2000.com -------------------------- Removes to skyway(a)t-1net.com, put remove in subject, thanks.

1 0

Re: [SURVEY try again] pgp5.x / pgp2.x users
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Robert A. Costner wrote: > Just to skew the numbers, I for instance have PGP 5.0 but am using a 2.6.2 > DOS generated key that is RSA, not DSS. Grepping would show me to be PGP5.x, > which perhaps technically I am, but my key is really 2.x > > -----BEGIN PGP SIGNATURE----- > Version: PGP for Personal Privacy 5.0 This information is mostly for advertising/accreditation purposes. As such, it provides very little information useful for statistical purposes. e.g. - whether people are using PGP 5.X mostly for management of their PGP 2.6.X keys.

1 0

Re: Return of the Living Zundel, from The Netly News
by Steve Thompson 17 Dec '03

17 Dec '03

In local.lists.cypherpunks-moderated you write: >http://cgi.pathfinder.com/netly/editorial/0,1012,1561,00.html >The Netly News Network (http://netlynews.com/) > "A lot of people think this case is about censoring the Net," > said Bernie Farber, national director of community relations for the > Canadian Jewish Congress. "It isn't. It's about a Canadian violating > Canadian law. In Canada and in every other Western democracy but the > U.S., there are limits to free speech and one of those points is > vilification. I should feel I have as much right to get on the Net and > not feel demeaned because I'm a part of a particular group." I took a short 'course' on hate-crimes in downtown Toronto where this goof was the speaker. In very short order, I had decided that his agenda was merely to be in some small position of authority. He's a pro-censorship freak who wants to protect the chiiillldreeeen from views he doesn't like. It was quite amusing to pin him down a little -- he squirmed and stated that he _did_ want the government to protect him from things he didn't want to hear; in a rather shrill tone. It made me laugh in retrospect but at the time I was, I confess, shocked -- having encountered such idiocy only in print or on USENET. I wish that I had been better at articulating my thoughts during some of the discussions during the 'course'. It was difficult to portray the idea that well-supported arguements are the only _fair_ means to debunk someone else's ideas with which you disagree. I suppose that I should not have been suprised that the other participants in the course were sympathetic to Bernie's right-wing leanings, but there was a woman who owned or ran a feminist bookstore who admitted that many books ordered by her store had been held (or outright banned(?) by Canada Customs based on content; and yet, she was more-or-less in agreement with this proto-tyrant with respect to the issue of supressing the ideas of white supremists. It boggles the mind. -- Steve Thompson Misanthrope System Admin O.B. Spam: bogus(a)myofb.org --------------------------------------------------------------------------- Lately every time you turn around somebody's saying: "The eighties are coming!" Like at the stroke of midnite on New Year's Eve it's all gonna be _different_! And when you tell 'em, "Come on, you know everything's just gonna keep on slowly sinking," they get downright _mad_! -- Lester Bangs, December 1979

1 0

Sloppy Chips from Intel
by lcs Mixmaster Remailer 17 Dec '03

17 Dec '03

>The possiblities are truly mind-boggling. Perhaps exploits like tapping >Aldrich Ames' PC and crashing Saddam Husseins' PCs en masse were not done >by black bag jobs and viri, but by the activation of "National Security" >backdoors present in all complex modern microprocessors. Of course a conspiracy theorist might guess that this "new bug" is really a result of somebody hitting some "national security opcode" and we just happened to hit one of the more benign "bugs". I think you alluded to this.

1 0

CHALLENGE to Meganet VME: million dollar hype?
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Meganet Corporation (818) 757-3890 19528 Ventura Blvd. Suite 317 Tarzana, CA 91356 OPEN CHALLENGE TO YOU over the last 30 years I have seen hundreds of new "unbreakable" encryption programs; all of them have the same claims, the same challenges, and the same secrecy. but, with several notable exceptions, each has contained a fatal flaw. and I have seen even my own "perfect" algorithms fall apart when I awake... therefore, if you want any serious encryption experts to endorse your product as having a factor of "unbreakability" by forcing the level of brute force necessary to do so, provide the algorithm and the associated source code to a few of us who enjoy breaking algorithms as much as we enjoy trying to create them. I dont have time, any more than my colleagues will have time, to waste on foolishness represented by your amateur challenge. until you are willing to submit to an open review by your peers, your supposed encryption product is YAP. secondly, until your methodology is reviewed, we will consider the product a schill to Louis Freeh and other GAK and trap door mandated system advocates. if you wish to be considered a serious contender to replace RSA, it's time to put your cards on the table; we see your nickel and call. in the matter of public encryption, there is no secrecy, or there is no use. your move. attila out... cc: cypherpunks(a)cyberpass.net -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQBVAwUBNGRf3LR8UA6T6u61AQGbHgH8CRQZShIUzW0wr1ib7cQGSfMcUbJTygx9 ckzuU/NB4W4u11rEjSQzC5ozybWWxHcjSQel+CZ79wPAP0vM+HM7Jg== =zTyp -----END PGP SIGNATURE-----

2 1

E-Peso's for tractors - McCaffrey on banking
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text From: "Blair Anderson" <blair(a)technologist.com> To: "dcsb(a)ai.mit.edu" <dcsb(a)ai.mit.edu> Date: Sun, 09 Nov 97 01:53:59 +1300 Priority: Normal MIME-Version: 1.0 Subject: E-Peso's for tractors - McCaffrey on banking Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: "Blair Anderson" <blair(a)technologist.com> 06:24 p.m Nov 05, 1997 Eastern U.S. drug czar appeals to banks to track laundering By Anthony Boadle WASHINGTON (Reuters) - Bankers, watch those ``smurf'' accounts. That was the message drug enforcement authorities gave the American Bankers Association and the American Bar Association at their annual money laundering conference Wednesday. Any innocent-looking person could be depositing a drug baron's cash parceled into amounts smaller that the $10,000 reporting threshhold to avoid suspicion, so get to know your customer, they warned. Traffickers hire individuals or ``smurfs'' who open small accounts at U.S. banks in their own or fictitious names. Once in the system, drug money becomes very hard to trace, White House drug policy director Gen. Barry McCaffrey said. Americans spend $49 billion a year on illegal drugs and much of that cash has to go through banks and corporations to get back to the Colombian cartels that ship cocaine and heroin to the the United States, he said. McCaffrey said drug traffickers were becoming increasingly sophisticated in laundering their proceeds, resorting to high tech communication encryption and ``cybercash'' transactions over the Internet. ``We are not going to find dumb guys stumbling into bank branches in New York City with cardboard boxes full of $20 bills that test positive for cocaine,'' he said. ``We are losing contact with the enemy,'' the general said. ''The government cannot follow laundering by itself. You are going to have to help.'' McCaffrey said the drug trade was moving into new areas such as the securities industry to launder its profits. Treasury Department Undersecretary for Enforcement, Raymond Kelly, said Colombian cartels were using a black market peso brokering system to send home their profits. Cartels sell their dollars at a discount to Colombian businessmen who need to buy goods in the United States. The dollars go to pay the U.S. manufacturer or exporter. The pesos never leave Colombia and end up in the drug baron's account. A hooded Colombian woman testified in Congress last month that she had laundered money through large U.S. banks and corporations unwittingly used by black market peso brokers. She cited the case of drug dollars going to pay for a tractor for a Colombian farmer. Keely, a former New York City police commissioner, warned that money laudering was corroding financial institutions. ``It is the source and the product of a burgeoning global parallel trading system that serves the emerging criminal holding companies,'' he told the bankers and lawyers. Kelly said the Clinton administration has worked to lessen the burden of the Suspicious Activity Reports that banks are obliged to file under the Banking Secrecy Act. The banking industry complained it had to file 12 million such reports in 1996, a time consuming and costly activity. New regulations exempts banks from reporting on certain customers, such as corporations listed on stock markets and their subsidiaries. But a new set of rules exempting additional businesses has caused an uproar among bankers because they would have to track the daily currency operations of these businesses for one year and project their annual currency needs. Copyright 1997 Reuters Limited. All rights reserved. Blair Anderson (Blair(a)technologist.com) International Consultant in Electronic Commerce, Encryption and Electronic Rights Management "Techno Junk and Grey Matter" (HTTP://WWW.NOW.CO.NZ [moving servers, currently inactive]) 50 Wainoni Road, Christchurch, New Zealand phone 64 3 3894065 fax 64 3 3894065 Member Digital Commerce Society of Boston ---------------------------- Caught in the Net for 25 years ---------------------------- For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

2 1