December 2003 - cypherpunks-legacy

Decrypt Unix Password File
by Jerome Tan 17 Dec '03

17 Dec '03

How can I decrypt Unix password file?

5 4

RE: Boobytraps and the American Legal System [France Legal System]
by Jean-Paul Kroepfli 17 Dec '03

17 Dec '03

TCM wrote: (...) >Still, I remember vividly in college when the court case was decided >involving a guy in Florida who was tired of being burglarized and the cops >doing nothing about it: he rigged a shotgun to go off when someone broke a >window and entered. A perp did, was shot, survived, and the case went to >trial. > >The boobytrapper was found guilty of some serious crime--I don't recall the >details (this was circa 1972). > (...) > >As Vinnie said, "only in Amerika." Not only, in France too. Circa twenty years ago a man booby-trapped his secondary house (a radio set with explosive) and was successfully sued by the burglar for damages. I think it is also the point of view of the central european society. Jean-Paul ~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~- Jean-Paul et Micheline Kroepfli (our son: Nicolas and daughter: Celine) eMail: JeanPaul.Kroepfli(a)utopia.fnet.fr Also Compuserve and MSNetwork Phone: +33 81 55 52 59 (F) PostMail: F-25640 Breconchaux (France) or: +41 21 843 27 36 (CH) or: CP 138, CH-1337 Vallorbe Fax: +33 81 55 52 62 (Switzerland) Zephyr(r) : InterNet Communication and Commerce, Security and Cryptography consulting PGP Fingerprint : 19 FB 67 EA 20 70 53 89 AF B2 5C 7F 02 1F CA 8F "The InterNet is the most open standard since air for breathing"

2 1

Code of Password File
by Jerome Tan 17 Dec '03

17 Dec '03

What is the code of password file of Unix? I have them but don't know how read them. Any file converter or viewer for that?

1 0

Re: Netscape download req
by pjn＠nworks.com 17 Dec '03

17 Dec '03

-=> Quoting Int:dlv@bwalk.dm.com to pjn(a)nworks.com <=- In> of Archimedes Plutonium, Dr. Jozeph Goebbels, and Janet Reno combined. Ewwww... (Two is fine, but Reno pushed it over the edge :) P.J. pjn(a)nworks.com ... Hey Bill Clinton: I'll give you something to censor.... ___ Blue Wave/QWK v2.20 [NR]

1 0

Re: Responding to Pre-daw
by pjn＠nworks.com 17 Dec '03

17 Dec '03

>> ichudov(a)algebra.com (Igor Chudov @ home) writes: >> David Sternlight wrote: >> <spam spam spam spam spam spam spam spam spam spam spam spam spam> > >> It is not surprising that after the society decided to label >> natural economic activities (drug dealing) as crimes, it has >> to resort to unnatural methods of enforcing the unnatural >> legislation. >> ... > Please do not respond to anything "Dr." David Sternlight posts to this > mailing list, no matter what nonsense he says. The asshole is starved > for attension. He's just trolling for flames. Please ignore him. Thank > you. > -!- Get real... I dont like him or his posts, but he has the right to do so, and you have no right to censor him or anyone else. If you dont want to read his posts, then dont...Its that simple... For a mailing list that has so many people complaining about the government censoring people... P.J. pjn(a)nworks.com ... (A)bort (R)etry (S)mack the friggin' thing ___ Blue Wave/QWK v2.20 [NR]

2 1

Anonymous web servers
by Hal 17 Dec '03

17 Dec '03

[This is somewhat of a follow-up to Black Unicorn's idea about private web pages a few weeks ago, also motivated by thinking about Ross Anderson's Eternity service, about which I just posted.] Right now you can get anonymous web pages at various places. But these are basically just regular web pages where you haven't told the service provider what your name is. If somebody doesn't like what you have posted there they may be able to get your pages shut down just as easily as if you were non-anonymous. I was thinking about ways to allow more truly anonymous web pages. The goal would be to allow them to operate even if someone powerful didn't like them. I'm not sure the idea I have really works but I thought I'd lay out some possibilities. The web is basically a client-server environment. The server sits there all the time ready to accept connections from users running clients (browsers). The client connects briefly to a web page and downloads the data for the page. It disconnects and displays the data. Some of the newer technologies have extended this model but it is the original concept. The idea I have is to provide a meeting place for anonymous servers and clients. There would be a sort of "meta-server" which runs software which just pairs up interested parties. The idea is that both servers and clients would be relatively transient. Two people would arrange in advance to interact via web protocols, and agree on a transient URL which they would share. The client and server both connect to the "meeting place" host, specifying the magic name they have agreed on. The meeting place software would then pair up connections which shared the same name and allow them to interact via conventional protocols. URL's for the meeting place server would be interpreted in this context rather than simply as file names. In some ways the role of the "meeting place" software is similar to an IRC server. In fact, this concept could be thought of as HTTP over IRC. The big question mark is whether the meeting place would be blamed for the possibly illicit transactions it facilitates. It can argue that it didn't know what people are doing (it might require people to use SSL for their transactions so it doesn't see them). But in practice it may be easy for attackers to prove that illegal transactions are going on (they just arrange to connect to an illicit server and download incriminating evidence). It does seem though that IRC, despite having a reputation as a place where a lot of illegal transactions occur, manages to keep running, without the servers taking the blame. Maybe it is just a matter of having a low enough profile? You'd also have a problem if a server, protected by anonymity, decided that being transient was stupid and arranged to always be ready to respond to one of the anonymous URL's. Then there seems effectively no difference between the "meeting place" with an anonymous server URL, and an ordinary host with an objectionable file available via URL. In each case clients connect and get the same illegal data. One thing we haven't seen (AFAIK) is anonymous posters offering to supply illegal data to anyone who asks for it. Something like "just post your email address and I'll mail you (anonymously) some Holocaust revisionism" (or Christian literature, or whatever else may be banned in your particular jurisdiction). This is the kind of application where it would seem that the anonymous web pages would be effective. Maybe there is not much demand for it, after all. Hal

2 1

RE: Distributed DES crack
by Andy Brown 17 Dec '03

17 Dec '03

On 22 July 1996 22:48, Ben Holiday[SMTP:ncognito@gate.net] wrote: > I've a few machines around that could be dedicated almost full time to the > task. What are the bandwidth requirements? Specifically, could the > keycracker be run over a 28.8 (with a 486 running linux)? If so, how many > 486's could I get over a single 28.8 (i.e. 28.8 -> multiple 486's daisy > chained with ppp over direct serial connection)? It's not a factor of the bandwidth, you search offline and send in your results to a central server. But first, a little reality check is in order. According to libdes, the 200Mhz Pentium Pro on my desk will do 1,827,997 ECB bytes/sec, or 228,499 ECB blocks. A DES crack would have to try, on average, 2^55 blocks. That would take my machine 43,798,875 hours, or 1,824,953 days. OK, so let's be reasonable and say that a week would be a good time to come up with a DES key. We would need 260,707 200Mhz Pentium Pro's to achieve this. Looking at that, 30 days seems not such an unreasonable target. We would need 60,831 200Mhz Pentium Pro's to achieve this. It seems obvious to me that DES is still *way* out of reach of anything other than special purpose hardware. Regards, - Andy (hoping he got his sums right) PS. For those more acquainted with Sun hardware, an Ultra-1 will do 1,683,647 ECB bytes/sec (gcc 2.7.2).

1 0

Returned mail.No such addressee
by Remo Pini 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: cypherpunks(a)toad.com Date: Tue Jul 23 13:53:56 1996 To: cypherpunks Date: Tue Jul 23 13:53:09 1996 Check out Pronto Secure (I think there's a mac version around!?) http://www.commtouch.com/ - --------< fate favors the prepared mind >-------- Remo Pini rp(a)rpini.com PGP: http://www.rpini.com/remopini/rpcrypto.html - ------< words are what reality is made of >------ -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBMfS9VRFhy5sz+bTpAQHYFQgA1BzJQY9dM29KYpuzdhW9GRG/Ng0M9x5o d2obC6MWa3th3vCjr3qSb1yC4IKLXLACFvTa4/jHky8P3//3UOUVNZ0IffPSlY9/ a3dKSKFyMUaKtyzi7rzCV24NlBFT1eJVVNZjYsH8pbCGbxteH5+dRAvvbkmSPukX GGa1oY6u/XK7Ti8IaOifWFDvYi76W37UlLs9aSGAfpTWKlM88bnkUL3iPxHf8qs6 DE0PQZOE8M4JyQTc/H7E5oNkEhE9RxIOgJNpZGPSOazwh3MVjTBLIZZOpmsV3srv EH6aNobS5shKOs8t/t7aCXIzhvNRDEqB652bfPP79Q13ICOT7BBYyA== =4iqW -----END PGP SIGNATURE-----

1 0

DNA printing at birth
by William "Bud" Kennedy 17 Dec '03

17 Dec '03

[IMAGE] UK News Electronic Telegraph Monday July 22 1996 [IMAGE] Issue 432 See text menu at bottom of page [IMAGE] Labour plans DNA tests for everyone from birth By Rachel Sylvester, Political Staff _________________________________________________________________ External Links [IMAGE] Identity cards - A solution looking for a problem [IMAGE] Conservative Way Forward - Danger of compulsory ID cards [IMAGE] Centre for Computing and Social Responsibility - response to Green Paper on ID cards _________________________________________________________________ RADICAL plans to take the genetic fingerprints of everyone in Britain and put them on a compulsory ID card are being considered by Labour. A database of DNA identities would be used to solve crimes and cut benefit fraud. Frank Field, tipped as a possible Social Security Secretary in a Labour government, has drafted proposals to produce a genetic database of the nation. Blood samples would taken from babies and from people applying to live in Britain. The samples would be used to extract DNA. Only identical twins have the same DNA, making it a more accurate fingerprint. Chris Smith, shadow social security secretary, confirmed that the party was examining the plans. "We are not ruling them out. We are determined to cleanse the national insurance system of fraud." John Wadham, director of the pressure group Liberty, said it was incredible that a senior Labour politician could suggest such a "draconian" measure which breaches European law. "There is no evidence that such a massive invasion of our privacy would do anything very much towards stopping crime." Mr Field, chairman of the Commons Social Security Select Committee, also advocates taking compulsory fingerprints from every citizen as a fall back to confirming a person's identity. The combination of genetic and physical fingerprints would be used to "rebuild the national insurance system", Mr Field said yesterday. Each person would be given a number at birth, combining national insurance and health numbers, which would tally with their genetic code. The information would go on a computerised identity card. It would also contain an individual's address, medical history or criminal record. It would be impossible to claim benefit without the card. Mr Field believes that Mr Blair is "sympathetic" to the proposals and that any opponents would be "Old Labour". Mr Blair will express his determination to reduce fraud in a speech tomorrow. Mr Field, MP for Birkenhead and described as one of Blair's "gurus", believes that the scheme would eradicate the use of multiple identities by benefit fraudsters and wipe off a large part of the annual £2.5 billion cost of social security fraud. There are millions of bogus national insurance numbers in circulation. It would also allow police to solve more crimes because traces of semen, hair or skin found at a burglary or rape would lead to the culprit. Ann Widdecombe, the Home Office Minister, said: "There are huge practical and resource implications. Think what it would cost to test every person in the country." Mr Wadham said there was no guarantee that the benefits would follow. "Not all fraud is to do with bogus national insurance numbers. I do not understand why, even if you have an identity card, you would need a genetic database." Mr Field advocates setting up a commission to regulate the use of the information. It is unlikely that any policy would be announced before the general election. Mr Blair, who is known to be looking for radical ideas on social security, has told shadow ministers to "think the unthinkable" and remind the public that "with rights come responsibilities".

1 0

Re: Borders *are* transparent
by Remo Pini 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: cypherpunks(a)toad.com Date: Tue Jul 23 13:52:55 1996 > What about the possibility of using DSP's? Is there any brand of 28.8 K > modem which uses a "standard" DSP and EPROM firmware? Such a beast > might be > the easiest way to get a large amount of CPU horsepower operating > independently of the host computer. DSP's are optimized to execute a > large > number of instructions with little I/O needs. > > Jim Bell Zyxel modems (ISDN and V34) have a Motorola 56000 DSP and a Motorola 68000. - --------< fate favors the prepared mind >-------- Remo Pini rp(a)rpini.com PGP: http://www.rpini.com/remopini/rpcrypto.html - ------< words are what reality is made of >------ -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBMfS9GBFhy5sz+bTpAQFQbggAp7H0bJyZYUzD87QQorzRQ8PTaTkkB1r3 tsEj6JWmq4PlppRd0lvjP2mN4LmfR700A8O7qdr6d9IfKrNmQzItDEPjq2zv+Lbf P9e2mi7Jz1xl1faZv3YiBAbdhv/jlnI0m4o3x6AwZNkAy1pe3xkj61H9n8tQ3cqf eAwDqZlOCCsjuN/hdJAiIHuiuqC2W0i59bZR59u6ek8iXE+8LnXXxeMxuUOZVIgI 2efgoJk6ev5/7IOoDaMlgffkHcWTTnjEClBI3JnGcIOnauacYG8t8UuPa5R8Td0t ZL/O8/gEDKGpos8j92DSyDgjb6XrRWq3CWZbfoXDhfRbnTKU/ZqXUg== =2afe -----END PGP SIGNATURE-----

1 0