December 2003 - cypherpunks-legacy

Re: Political Cleanup program [NOISE]
by James A. Donald 17 Dec '03

17 Dec '03

Phill <hallam(a)w3.org> wrote: >>It is not simply an issue of money, it is an issue of national security. If a >>foreigner were to control the majority of the media there would be a significant >>threat to the national interest. This threat has been realised in the UK with >>the comming to power of Rupert Murdoch. Fortunately his influence on the US >>political scene has thus far been minor. In his own country he has brought down >>the government more than once. At 01:37 AM 12/20/95 -0500, Jim Ray wrote: >So what??? He gives us "The Simpsons" and "Married, With Children!" >[IMO] Rupert has done more for humor than any humor-impaired liberal >has ever done! Murdoch is bitterly hated by our elites, because things are speakable on his networks that are unspeakable on other networks. Hence their perfectly true claim that he has overthrown several governments. I hope he overthrows some more. I especially love the political humor on "married with children" Cypherpunk relevance: Murdoch got in deep shit because of his famous speech that the communication revolution would profoundly undermine the power of oppressive governments. Murdoch sometimes calls himself a libertarian, but he is more a conservative with bombs. Still, I am strongly in favor of bombs. It seems clear to me that Murdoch, whatever his political beliefs may be, has done much for liberty. He has been a powerful disruptive influence. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

mailing list
by JerelRobertson 17 Dec '03

17 Dec '03

Hey I want to get on this list. How do I do it?

1 0

ANNOUNCE: Windows 95 .PWL Security "Functionality Enhancement"
by Rich Graves 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have been instructed that it is not a bug fix; it is a "Functionality Enhancement." Please note headers before replying -- you're probably in a Bcc field. The patch for the problem we started discussing on November 1st is dated yesterday, but no one outside Microsoft appears to have seen it until today. pr/password.htm started forwarding to the patch distribution page some time between 2PM and 7:30PM Pacific Time today (yes, I had hit "reload"). http://www.microsoft.com/windows/software/mspwlupd.htm http://www.windows.microsoft.com/software/mspwlupd.htm Anyone who uses passwords for just about anything -- network servers, dialup networking, remote registry services -- should get this patch. For a rough start at a technical discussion of the problem that this patch is supposed to solve, see http://www.c2.org/hackmsoft/ or the gopher list archive below. The Web page says it uses a 128-bit key. Intriguing. Anyone seen the CJR, or is Microsoft exempt? Microsoft had told various people that the new security algorithm would be published in advance and reviewed by outside security experts, but I have not been able to verify this. This was supposed to affect Windows for Workgroups as well; anyone know anything about that? - -rich owner-win95netbugs(a)lists.stanford.edu ftp://ftp.stanford.edu/pub/mailing-lists/win95netbugs/ gopher://quixote.stanford.edu/1m/win95netbugs http://www-leland.stanford.edu/~llurch/win95netbugs/faq.html -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMNENt43DXUbM57SdAQG4xwP9EqXu5wXBOfpThtEUikqngrQNpe7RGKSv FqNSlZnh6GKJff6zQnZ3GyH0lYU8Mg+ApJVmSeSxq3ApA5Oc+jTUW6B4RNm+bxfT YBSThGmGbNNt948E/7oyXJdYVtWhuAleQtU7LxKNJfXoQlO/R05cc8O0zj7EiBR+ 777AbiM201s= =K2IQ -----END PGP SIGNATURE-----

1 0

900mhz digital phones - how much to trust ?
by John Pettitt 17 Dec '03

17 Dec '03

Whats the current thinking on the security level of 900Mhz digital spread sectrum cordless phones? Clearly it's not a basic scanner job but how much more equipment is needed to monitor one ? John Pettitt, jpp(a)software.net VP Engineering, CyberSource Corporation, 415 473 3065 Favorite quote: "Security is mostly a superstition. It does not exist in nature, nor do the children of man as a whole experience it. Avoiding danger is no safer in the long run than outright exposure. Life is either a daring adventure, or nothing." - Helen Keller

2 1

DCI_kgb
by John Young 17 Dec '03

17 Dec '03

The 12-20-95 WPost reports the Deutch/Perry move to kremlinize finance of the 13 spy agencies under the DCI -- to transform the "vaguely associated medieval guilds into a modern corporate team" -- and palmly slather $29 billion IC grease: National Forward Intelligence Program (CIA, NSA, DIA, NRO, parts of three G2s, DOE and FBI): $16bn. Tactical and Related Activities (warfighting support): $10bn. Joint Military Intelligence (cryptology, aerial recon, counter-narc and mapping): "Several billion." DCI_kgb (6 kgb)

1 0

No subject
by an170150＠anon.penet.fi 17 Dec '03

17 Dec '03

Hi, excuse me for interrupting your conversation with a different subject, but I am not on the list (any longer, due to the bandwidth) so please reply "directly" to me at an170150(a)anon.penet.fi ...my question is: Are there any other anon servers running the same software as the one @alpha.c2.org? --****ATTENTION****--****ATTENTION****--****ATTENTION****--***ATTENTION*** Your e-mail reply to this message WILL be *automatically* ANONYMIZED. Please, report inappropriate use to abuse(a)anon.penet.fi For information (incl. non-anon reply) write to help(a)anon.penet.fi If you have any problems, address them to admin(a)anon.penet.fi

1 0

Re: KOD
by John Young 17 Dec '03

17 Dec '03

Responding to msg by dmandl(a)bear.com (David Mandl) on Wed, 20 Dec 4:3 PM >Can you reveal who they are? No way am I going to buy >Newsweek to find out. Anyone out of Newsweek's range, return this msg, empty, to me to get the 50 mugshots, then ... sort out the living from the dead. Best not to cypherdunk the already nym-shot victims. Privacy is paramount, bellows this list, no?

3 2

Please cut the "tude"!
by Ernest Hua 17 Dec '03

17 Dec '03

The "tude" level is getting a bit out of hand. Please take your personal attacks elsewhere. Moderator, please beat them silly with a banana until they stop! Thanks! Ern

1 0

ex encrypted script
by andr0id＠midwest.net 17 Dec '03

17 Dec '03

Forgive me if this is a stupid question. I'm using AT&T unix Version 5 release 3.2.2 ( UNIX System V/386 Release 3.2) I have several simple scripts that are simple yet handle important realtime call proccessing tasks and remote control operations. These programs are my programs but are running on a system that is dialed into by the vendor once in a while. Is there a way to encrypt a script yet still allow it to be runnable? I know that the simple answer is to write it in C and compile it but I don't have the means of doing that at the moment. (i.e. there is not compiler on the system) I thought of a few simple protections but they all involve decrypting before running. Dr0id ( Computer Consulting & Management ) (P.O. Box 421 Cambria, IL 62915-0421) -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQENAzCsIi4AAAEH/1hb5+tO/n99Nbppf0ImLJ6AaVZ3NlZP0ZHwRQor00uA129i d4zWixNXxc8t2auaqN+asV99LpIip3/nQzBnjydiumeBdGLF2PR9+6X8X/RrqKa1 dVIukxM5Agg2eM6ih+0J38hgKJ3qzKXSz6sjYmpaxvbXZoHHOLUk/ZtHUKvvEyPw hnJEYnut8NUnIeK56lqeqRw86yoeRKymbfCdjdpgeY2aRwK2FJts8sbb7Fs10s4y jgxWIxIipBznbGUTh1hb2XrLGPENwk3E/qqXQJEsrySbtwdl6VgTVQjhDDEJMitL DYeiQ3W5EgxfcdbM1j2FwYu3P/dM6Y0I8xLMYT0ABRG0NmFuZHIwaWRAb2ljdTgx Mi5jb20gKG9pY3U4MTIuY29tIHN5c3RlbSBhZG1pbmlzdHJhdG9yKYkBFQMFEDCs LO90C7R/GkJcSQEB01cH/0KC3sd+u4OxMku5378SJktoN6QIQYLJ7uVbuV4S51yK NAotCGf4Wl6wwjynzZvXKU0H87oDuMiq7FybgMNL2n+4bQIZi0iz0lIuzwoMDu63 NrHUW9Kz42pOnhrEhrdkHhHL9O5GgD1yc40fJ3qw5h7LQEjDxgypyw0IFILFc34u LeRLliNibxKp8JwAxXNHWSgxu28TQvmnkHi0AHP6tJ/uZYe+4dqJtrMMsYFjzZaz DPmxD+dzbTwlQKtJaP1ZkDI0Sr072wrZDv+G86GyGBMX2lpSafpRitnxuUttjU9o wsQ9Qo5xiH1nZRCs/bDzJe/gng+GHzevixDIITurtNA= =SgPT -----END PGP PUBLIC KEY BLOCK-----

4 3

Re: 900mhz digital phones - how much to trust ?
by andr0id＠midwest.net 17 Dec '03

17 Dec '03

> >Whats the current thinking on the security level of 900Mhz digital spread >sectrum cordless phones? Clearly it's not a basic scanner job but how much >more equipment is needed to monitor one ? Well when you listen into a spread spectrum conversation what you will hear is open squelch white noise. The spread spectrum radios that I know about send information on several deffrent frequencies throughout the conversation. Unless you have a system to receive the encoding bit that signal what frequency is next you can't easily find the next freqency before it changes again. This change happens several time a second. The information is "packet-like", that is why you are able to use so many spread spectrum units at once. Example, Lynx spread spectrum T1 information signal (data) is combined with a high rate spreading code (chip sequence). A multiplier performs the combination. Because the spreading code is pseudo-randomly generated, the combined signal occupies a significantly expanded bandwidth with a lower uniform power density. At the receiver, a locally generated, synchronized replica of the spreading code recovers the information signal, through a second multiplication. The same code sequence must be used in the transmitter and receiver to avoic losing the information. The coding is direct sequence, 16 x spreading rate, the number of codes is a 9 DIP switch selectable. Intresting is taht the radio acquisition time is 500 msec, typical. If this a security hole I don't know. Note this is typical of a Spread Spectrum Microwave radio, a lot of the same applies to 900MHz T1 and cordless phones. As soon as I have further info on encryption of signal/Freq. destination I'll post it. Dr0id ( Computer Consulting & Management ) (P.O. Box 421 Cambria, IL 62915-0421) -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQENAzCsIi4AAAEH/1hb5+tO/n99Nbppf0ImLJ6AaVZ3NlZP0ZHwRQor00uA129i d4zWixNXxc8t2auaqN+asV99LpIip3/nQzBnjydiumeBdGLF2PR9+6X8X/RrqKa1 dVIukxM5Agg2eM6ih+0J38hgKJ3qzKXSz6sjYmpaxvbXZoHHOLUk/ZtHUKvvEyPw hnJEYnut8NUnIeK56lqeqRw86yoeRKymbfCdjdpgeY2aRwK2FJts8sbb7Fs10s4y jgxWIxIipBznbGUTh1hb2XrLGPENwk3E/qqXQJEsrySbtwdl6VgTVQjhDDEJMitL DYeiQ3W5EgxfcdbM1j2FwYu3P/dM6Y0I8xLMYT0ABRG0NmFuZHIwaWRAb2ljdTgx Mi5jb20gKG9pY3U4MTIuY29tIHN5c3RlbSBhZG1pbmlzdHJhdG9yKYkBFQMFEDCs LO90C7R/GkJcSQEB01cH/0KC3sd+u4OxMku5378SJktoN6QIQYLJ7uVbuV4S51yK NAotCGf4Wl6wwjynzZvXKU0H87oDuMiq7FybgMNL2n+4bQIZi0iz0lIuzwoMDu63 NrHUW9Kz42pOnhrEhrdkHhHL9O5GgD1yc40fJ3qw5h7LQEjDxgypyw0IFILFc34u LeRLliNibxKp8JwAxXNHWSgxu28TQvmnkHi0AHP6tJ/uZYe+4dqJtrMMsYFjzZaz DPmxD+dzbTwlQKtJaP1ZkDI0Sr072wrZDv+G86GyGBMX2lpSafpRitnxuUttjU9o wsQ9Qo5xiH1nZRCs/bDzJe/gng+GHzevixDIITurtNA= =SgPT -----END PGP PUBLIC KEY BLOCK-----

1 0