December 2003 - cypherpunks-legacy

Sendmail Bugs
by don＠cs.byu.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- This has nothing to do with crypto, and is only remotely related to remailers. However, I thought I'd send it along to demonstrate to our conspiracypunks friends how to shorten the length of an off-topic post. There is a document on alt.security which describes exploitable sendmail bugs. The reference is <809544856snz(a)hacknet.demon.co.uk> I saved a copy in case anyone would like one. SEE! Now wasn't that easy! Don -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQB1AwUBMELCW8La+QKZS485AQGWMQL8DycUwDwZ9ACaLo27o6fUrqoz3KAXJB4C fz6FHp6LLBbTDpPQoSgYfhcYtpySs7IuXvr5ja+/qNFi6Jq6M98WBvFMuLug8HsR 8IFvu+KVF1VSJ8EOAcdQ9MEAs3m+Zbk0 =YZjS -----END PGP SIGNATURE----- <don(a)cs.byu.edu> fRee cRyPTo! jOin the hUnt or BE tHe PrEY PGP key - http://bert.cs.byu.edu/~don or PubKey servers (0x994b8f39) June 7&14, 1995: 1st amendment repealed. Death threats ALWAYS pgp signed * This user insured by the Smith, Wesson, & Zimmermann insurance company *

2 1

Searchnet
by The Gate 17 Dec '03

17 Dec '03

Some time ago, I posted a reply to an allegation that the Spotlight was a Klan paper. Of course, it is more Liberty Lobby/CIA, with Bo Gritz on the Board. The point of this post is that those who want to know what is up with the Spotlight need to subscribe to Searchnet, which covers all the information of like sort. There was also a wonderful post recently hailing hackers as the ones who are most likely to prevent government sponsored crypto-terror censorship. Those who would like the post, speak up. Those who want to subscribe to Searchnet, likewise. Hope this does not get in the way of PGP implementation. Onwards, Lee ____________________________|||||||||||||||||||||______________________________ R. Leland Lehrman@The Gate, New Haven, CT. http://id.wing.net/~gate/gate.html God, Art, Technology and Ecology Research and Development >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>Do you love the Mother?>>>>>>>>>>>>>>>>>>>>>>>>

2 1

Re: Florida Drivers Permits and a Hello
by Alan Olsen 17 Dec '03

17 Dec '03

>What is the capacity of the mag strips. Do they carry much more than some >ID code for computer reference? It seems unlikely that there is enough >storage >for a thumbprint. Some vitals perhaps, but again it would most likely simply >be a speedier way of referencing the card holder's supposed True Name. (After >all they'd have to be checking driving record information as well.) Still >decrypting the cards would be amusing, just to aggravate those who become to >used to the convienience. 'Oh.. sorry Governor Wilson... my but you look >different up close'. They would not have to include an entire thumbprint. The actual code used to verify fingerprints is not very large. All that would be needed is enough information to ID into the "official" records and enough checksum type information to prevent alteration/counterfitting. Using magnetic media for this is a bit foolish as it can be changed/destroyed with the stroke of a magnet. I will not say by what means I would think should suit as a better encoding scheme because: 1) They are not using it and 2) I do not want to give them any ideas. | Visualize whirled keys! | alano(a)teleport.com | |"The moral PGP Diffie taught Zimmerman unites | Disclaimer: | |all mankind free in one-key-stenography-privacy!"| Ignore the man | | -- PGP 2.6.2 key available on request -- | behind the keyboard.| | http://www.teleport.com/~alano | <fnord> |

3 2

Decoder ring
by dmandl＠panix.com 17 Dec '03

17 Dec '03

High-Tech Company Goes Back to the Future with Decoder Rings The Stuff of Cereal Box-Tops Becomes Real Repository of Data and Computer ID By Carlos Tejeda Staff Reporter of the Wall Street Journal Once, the only way to get a decoder ring was to carve up cereal box-tops or comic-book covers. Now Dallas Semiconductor Corp. is creating its own high-tech version of the "decoder" ring. Although this one doesn't break any codes, it can unlock some doors of information. It consists of a 64000-bit microchip, embedded in a silver ring made by class-rings titan Jostens Inc., of Minneapolis. The rings can be implanted with a replica of a driver's license, credit-card numbers and even a digitized photograph. Company officials say they hope the ring's data-carrying capability will help bring personal information literally to one's fingertips. "My wallet's stuffed with a dozen different plastic cards," said Hal Kurkowski, Dallas Semiconductor's group manager for auto-identification products. "It's an awful mess. You could put all that and more into the ring and not have a four-inch-thick wallet." The ring is triggered when the metal piece at the head of the ring comes in contact with a data reader. To prevent theft, the ring can be formated so that it only can be used in conjunc tion with a password, Mr. Kurkowski said. The technology already is being used at Dallas Semiconductor's headquarters, as something of a company ID card, said Syd Coppersmith, director of public relations. "I use it to get into my office, and it records who I am and when I went in," she said. "There's a reader on my PC, and I use it to get into my files." The rings cost about $60 each, while readers that can be plugged into a computer can be purchased for about $80. Ms. Coppersmith said several security companies already have the technology to install such readers for their clients. She said the system also has been tested commercially at a warehoiuse, where employees used the ring to record inventory changes. -- Dave Mandl dmandl(a)panix.com http://wfmu.org/~davem

2 1

Re: Pre-allocating key segments
by ab411＠detroit.freenet.org 17 Dec '03

17 Dec '03

This was supposed to go out yesterday, but I mistyped the address. -----BEGIN PGP SIGNED MESSAGE----- Piete Brooks <Piete.Brooks(a)cl.cam.ac.uk> writes: >I wrote: >> ... but I still think the >> prefetching of some more segments would be useful. > >I'm seeing calls from calpoly.edu and albany.net taking less than a second. >Are you **REALLY** worried about wasting that sort of time, when even a single >segment usually takes a quarter of an hour even on the faster machines ? Wow, I knew it had been sped up, but I didn't realize... You've convinced me. :-) >[ Getting down to the implementation details > 1) it would be hard for brloop to know that brutessl is 3/4s done. > 2) I can't think how to do prefetching in a safe way, and without disc use >] Good points. Never mind the pre-allocation. Abashed, -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMEKVMREcrOJethBVAQENBQP5AeM1crT8+fqAkWKtFPQHi+ljbP2cwnIy 36jcC4WCQVdKtor5hZZu+0yfyENAirGI6SKFesJFrRi9avMHmOYTo2QTvnhZQYy/ patw2wRXDwrfWY6ndklmssROM59pLhZmngkMlIzEd1QVrmy2YGbKnJOvzIrUwaYL rGzztIzvLVo= =UAte -----END PGP SIGNATURE----- -- David R. Conrad, ab411(a)detroit.freenet.org, http://www.grfn.org/~conrad Finger conrad(a)grfn.org for PGP 2.6 public key; it's also on my home page Key fingerprint = 33 12 BC 77 48 81 99 A5 D8 9C 43 16 3C 37 0B 50 Jerry Garcia, August 1, 1942 - August 9, 1995. Requiescat in pace.

1 0

Re: Florida Drivers Permits and a Hello
by ab411＠detroit.freenet.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Scott Brickner <sjb(a)austin.ibm.com> writes: >What possible value could the LEAs get by having your thumbprint digitally >encoded on your driver's license? It's not like the average cop-on-the-beat >is qualified to lift a fingerprint and compare it. Even if he was, how >does it benefit that the fingerprint is on the license? One benefit to law enforcement, quite apart from the ability to verify a license, would be the accumulation of a database of thumbprints of all citizens, or at least all those who drive. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMEOxbBEcrOJethBVAQGnjAP/dPUwWKt+c5+wbg4O4aqoOSQrVjyXiM1j Vh/devoIQmLuVnTD8AAoUFahLtUmEByyKa/uz2hnJgIu1+y0OJevbALrjFdex6Wm xqGr70d6ShN65DMOcMVeRvg9MtbhHAt1ktk4+92vUt7AttgqQ5DKsFoAyBVs0SRL gAQ12b71Hfs= =AMKA -----END PGP SIGNATURE----- -- David R. Conrad, ab411(a)detroit.freenet.org, http://www.grfn.org/~conrad Finger conrad(a)grfn.org for PGP 2.6 public key; it's also on my home page Key fingerprint = 33 12 BC 77 48 81 99 A5 D8 9C 43 16 3C 37 0B 50 Jerry Garcia, August 1, 1942 - August 9, 1995. Requiescat in pace.

1 0

Autoresponder Crypto Export / Re: Fuck the usenet cabal
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Dr.Dimitri Vulis KOTM wrote: > Now, suppose some non-US person sets up an auto-responder that sends out > strong crypto software, and another non-US person requests it and gets it. How about hacking spammer's systems and setting them up so that their autoresponders send out copies of strong crypto? Everyone in the world would have a copy within days. Make the enemy your best friend. Sun Tzu

1 0

Re: Florida Drivers Permits and a Hello
by Jonathan Zamick 17 Dec '03

17 Dec '03

At 4:15 PM 8/29/95, Mark wrote: >>What possible value could the LEAs get by having your thumbprint digitally >>encoded on your driver's license? It's not like the average cop-on-the-beat >>is qualified to lift a fingerprint and compare it. Even if he was, how >>does it benefit that the fingerprint is on the license? > >Here it is possible to walk into a suitably equipped police station, put your >fingertips on a sensor pad and a few seconds, if records exist, have the appear >on the computer screen. Extrapolating this it isnt a big step for a patrol >car, already equipped with a packet radio link to HQ and a data terminal, >scan in your fingerprint and check it. If the system was offline they could >easily take your rpint and compare it to that on your license. It's just a >little more proof that the license is linked to you. > My only question though is why help them create more records about the average citizen? Jonathan ------------------------------------------------------------------------ ..Jonathan Zamick Consensus Development Corporation.. ..<JonathanZ(a)consensus.com> 1563 Solano Ave, #355.. .. Berkeley, CA 94707-2116.. .. o510/559-1500 f510/559-1505.. ..Mosaic/WWW Home Page: .. .. Consensus Home Page ..

1 0

Announcing SecureDrive 2.4 (fwd)
by Patrick Lear 17 Dec '03

17 Dec '03

Does anyone have any experience with the SecureDrive program and if so can you make any comments about it? I've been looking for something like this for a while and I'd also like to know which other programs compare / are better / are worse if any. Thanks for any input ... Patrick Lear, Sui Juris

1 0

Re: The BIG Lie (Jesus Confesses)
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Patrick Oonk wrote: > But hey, I just killfile everyone that discusses religion :) Your last two posts discuss religion. Killfile yourself! KillFileMonger

1 0