December 2003 - cypherpunks-legacy

Re: Recent Web site cracks
by pjb＠ny.ubs.com 17 Dec '03

17 Dec '03

yes, i heard that about 50 microseconds after i posted. another thing that i have been thinking is that both of these cracks were inside jobs, which would explain any number of things. -paul > From stewarts(a)ix.netcom.com Tue Oct 8 12:36:57 1996 > From: stewarts(a)ix.netcom.com > X-Sender: stewarts(a)popd.ix.netcom.com (Unverified) > X-Mailer: Windows Eudora Light Version 1.5.2 > Mime-Version: 1.0 > Content-Type> : > text/plain> ; > charset="us-ascii"> > Date: Tue, 08 Oct 1996 09:37:23 -0700 > To: pjb(a)ny.ubs.com > Original-From: Bill Stewart <stewarts(a)ix.netcom.com> > Subject: Re: Recent Web site cracks > Cc: cypherpunks(a)toad.com > Content-Length: 1263 > > At 09:46 AM 10/8/96 -0400, pjb(a)ny.ubs.com wrote: > >The recent cracks of the DOJ, CIA and Dole web sites have caused me to think > >about just what is going on here. > > > >Do you suppose that these entries were made via the httpd route, maybe via > >cgi-bin, or just a straight telnet-type entry to the server? I don't know > >what operating systems were involved with these three systems, or even if > > The DOJ and CIA sites were actually cracked; don't know the mechanisms. > The dole-kemp96.com and dole-kemp96.org domains were spoofs - they > have similar names to the real site, and people reach them by accident > or by hearing about them. According to today's San Jose Mercury News, > the web designer who registered them did so just before Dole announced > Kemp as his VP, and tried to sell his design services to the campaign. > They didn't buy it, and the names were sitting around with nothing > better to do anyway, so he decided to have a good time with them. > Supposedly he's gotten about 40,000 hits and the "real" site got 1,000,000. > > > # Thanks; Bill > # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com > # You can get PGP outside the US at ftp.ox.ac.uk > Imagine if three million people voted for somebody they _knew_, > and the politicians had to count them all. > >

1 0

RE: Recent Web site cracks
by Mullen Patrick 17 Dec '03

17 Dec '03

Which firewalls did they use, what are the holes, and how can you plug and/or exploit them? PM _______________________________________________________________________________ From: Dr.Dimitri Vulis KOTM on Wed, Oct 9, 1996 3:20 Subject: Re: Recent Web site cracks To: cypherpunks(a)toad.com stewarts(a)ix.netcom.com writes: > The DOJ and CIA sites were actually cracked; don't know the mechanisms. They used firewalls that are known to be easily crackable. ^^^^^^^^^^ ^^^^^^^^^^^^^^^^ --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps ------------------ RFC822 Header Follows ------------------ Received: by mail.ndhm.gtegsc.com with SMTP;9 Oct 1996 03:20:19 -0400 Received: from toad.com by delphi.ndhm.gtegsc.com with SMTP; Wed, 9 Oct 1996 7:17:16 GMT Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id QAA26393 for cypherpunks-outgoing; Tue, 8 Oct 1996 16:51:04 -0700 (PDT) Received: from uu.psi.com (uu.psi.com [136.161.128.3]) by toad.com (8.7.5/8.7.3) with SMTP id QAA26380 for <cypherpunks(a)toad.com>; Tue, 8 Oct 1996 16:50:40 -0700 (PDT) Received: by uu.psi.com (5.65b/4.0.061193-PSI/PSINet) via UUCP; id AA00949 for ; Tue, 8 Oct 96 19:43:02 -0400 Received: by bwalk.dm.com (1.65/waf) via UUCP; Tue, 08 Oct 96 16:54:14 EDT for cypherpunks(a)toad.com To: cypherpunks(a)toad.com Subject: Re: Recent Web site cracks From: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) Comments: Dole/Kemp '96! Message-Id: <9VZHVD1w165w(a)bwalk.dm.com> Date: Tue, 08 Oct 96 16:53:43 EDT In-Reply-To: <199610081636.MAA10912(a)attrh1.attrh.att.com> Organization: Brighton Beach Boardwalk BBS, Forest Hills, N.Y. Sender: owner-cypherpunks(a)toad.com Precedence: bulk

1 0

PLEASE take Mormon/LDS stuff to private mail.
by Peter Trei 17 Dec '03

17 Dec '03

While I realize that religious arguments, in the large sense, are a well-honed skill of many of the participants of this list, the current threads concerning the LDS/Mormon church are so far off-topic that it isn't funny, just annoying. PLEASE take this stuff to private mail. Most of us have little or no interest in it, and it's creating entirely unnecessary discord and hatred (not to mention using up bandwidth). Unless a group takes a stand on encryption, lets keep them out of it. Please! Peter Trei trei(a)process.com

2 1

Re: ElGamal
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

> Tim May sits at his terminal dressed in five-inch stiletto heels, fishnet > stockings, a gold-lame mini-skirt, a purple halter with girdle underneath to > keep in his flabby gut, A Fredericks of Hollywood padded bra also underneath > the halter, a cheap Naomi Sims pink afro wig, waiting to yank his crank > whenever a black man responds to one of his posts. No, you must be confused, I believe you are talking about Dmitri Vulis or whatever his fucked up name is.

1 0

Re: Anonymous E-mail
by Graham Toal 17 Dec '03

17 Dec '03

Do not email this site again. Do not telephone or fax. Put us on your "Do not call" list. By the way, it's not a very good sign of confidentiality when one connects to your web server and receives a flood of cookie requests. Also I see no pgp encryption, no mix of independent remailers - this system has no privacy whatsoever. Even if you're not a front for the KCIA yourself, all it takes is someone to monitor the 3 trunks to your servers and your entire anonymity is lost. I think the cypherpunks will have a good laugh at this one. G > From isp(a)PINmail.com Tue Oct 8 06:29:37 1996 > From: isp(a)PINmail.com > To: Internet Service Provider <isp(a)PINmail.com> > Date: Tue, 8 Oct 1996 16:43:35 +0000 > Subject: Anonymous E-mail > > Dear Internet Service Provider, > > Sorry for bothering you, but we would like to introduce a new Internet > service which may be of interest. > > PINmail utilizes our proprietary software to make it easy for users to > send anonymous e-mail and newsgroup postings through the World Wide > Web. > > Private and confidential. Easy to use. Low annual cost. No software > installation and upgrade headaches for your subscribers. And no > customer service nightmares for you. > > Please take a look at http://www.PINmail.com/ > > We are now seeking to establish mutually beneficial business > relationships with aggressive Internet Service Providers (ISPs) > to develop distribution channels for PINmail. > > Our Distributor Program offers you an opportunity to provide your > subscribers with an exciting value-added service, and create a > potentially lucrative revenue stream for yourself. > > For each new PINmail client with your domain name in his/her e-mail > address, we will pay you $5 (US currency). > > You have the option to retain the $5 for yourself, or rebate it > partially or entirely to your customer(s). > > ALL YOU HAVE TO DO IS SIGN-UP AS A PINmail DISTRIBUTOR. THEN > EVERYONE WITH YOUR DOMAIN NAME IN THEIR E-MAIL ADDRESS > WHO REGISTERS WITH PINmail WILL EARN YOU $5!!! > > EVERY SINGLE ONE, NO MATTER THE SOURCE!!! > > In return, we require that you do two things. First, place a PINmail > banner ad on your site. Second, send an e-mail message to all your > subscribers introducing them to PINmail. That's it! > > Many thanks for your patience and bandwidth, and we look forward to > working with you to develop this dynamic new method of confidential > Internet communications. > > Best regards, > > > Jack W Flader, Jr > Director > AsiaFocus International Inc > > PS. If you would like to test this service, please send an e-mail to > isptest(a)PINmail.com specifying your preferred PINmail address and PIN. > We will provide you with a complimentary account for one month, which > will allow you to experience the many powerful features of PINmail. > > _______________________________________ > PINmail > Private and Confidential E-mail Service > www.PINmail.com >

2 1

RE: crypto cd once more
by Alan Olsen 17 Dec '03

17 Dec '03

At 03:23 PM 10/8/96 +0100, JR(a)ROCK.CNB.UAM.ES wrote: >>1) is there a system that can handle unix, windows and mac filenames >> > Yes. Use Rock Ridge extensions. That will allow for long UNIX >names. If you couple it with ISO9660 youget both worlds. Windows 95 will read rockridge discs, but will not display the long filenames. (Why they have not added those extensions to MSCDEX on Win95 is a mystery. Maybe Bill Gates had a bad experience at a showing of "Blazing Saddles".) --- | "Remember: You can't have BSDM without BSD." - alan(a)ctrl-alt-del.com | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.teleport.com/~alano/ | alano(a)teleport.com |

1 0

pgp, edi, s/mime
by Jeff Ubois 17 Dec '03

17 Dec '03

Interesting comments from a member of the IETF EDI-INT group, which is developing standards for secure EDI over the net, and managing a Commercenet pilot project: - S/MIME and PGP are the two leading candidates for encrypting EDI messages, S/MIME inside the US, and PGP outside the US where S/MIME is unavailable. - If PGP 3.0 comes out on time with promised features, it could gain adoption by large companies as a standard means of encrypting EDI messages; that would pull smaller companies along, but it has a narrow window of opportunity and could lose to S/MIME products like those from Deming. - The G7 governments will impose key escrow on large companies trading over the net, and while non-escrowed systems will continue to be available, they are likely to be illegal, and certainly will be marginalized.

1 0

Re: "European Union Bank"
by Duncan Frissell 17 Dec '03

17 Dec '03

At 07:06 PM 10/8/96 +0300, Jüri Kaljundi wrote: >According to one offshore magazine European Union Bank is a very bad >choice for Internet banking. What they did was they assigned they named >Lord Mancroft who sits in the UK's House of Lords as chairman of the bank. >Only thing Lord Mancroft himself did not know a thing about it, although >the bank marketing materials had a letter of welcome supposedly from that >prominent person. So he is thinking of taking legal action against the >bank. I have at hand a brochure from "Shorex 96 - The Premier Offshore Exhibition" to be held November 20-22 in London. Day One features a section on "Offshore and the Internet" including a panel "Will the Internet Increase the Market Share of the Offshore Industry?" Featuring "Lord Mancroft, Chairman, European Union Bank, Antigua." I wonder if he'll be there. If we are both there, I'll ask him. DCF "If control measures are so effective, why does everything seem to be more and more out of control?"

3 2

Re: Seeking help on WordPerfect 6.1 cracks [Done, thanks]
by Rich Graves 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Got it, thanks for the offers of help. FYI, none of the currently available freeware will decrypt WP 6.1 files; the WPCRAK mentioned in the sci.crypt FAQ stops at 5.2. But AccessData was kind enough to decrypt one for free, and the others had the same password. - -rich -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQBVAwUBMlqzB5NcNyVVy0jxAQE6WAH/Wg2NIeaZxdfbRi2tTgdeynMdqXfSm0E6 zhq9aBRdpQEtZSRY5jABH24pLlSd3OfugyhyNqD+qULy4XzIygm5Fw== =lMjI -----END PGP SIGNATURE-----

1 0

Be careful where you put up
by Donald Weightman 17 Dec '03

17 Dec '03

Apropos the thread about asset allocation and relocation to hedge political risk, today's FINANCIAL TIMES reports: >Offshore banking centres agree to greater scrutiny > > Tuesday October 8 1996 > > By George Graham, Banking Correspondent > > Banking supervisors from large offshore financial centres have agreed to > co-operate more with their counterparts in industrialised nations in > investigating irregular behaviour at banks under their control. <SNIP> > The drafting involved hard negotiations on issues such as when a > supervisor could ask for the identity of an individual depositor or investor. > A supervisor in Europe may, for example, want to know that a bank is not > dependent for all its deposits on one source, but the offshore centre does > not want that to serve as an excuse for trawling for tax evaders. > > In all 140 countries have endorsed the deal, which sets out procedures for > exchanging information between supervisors and also establishes a > checklist to ensure that banking operations in a particular country are > subject to effective supervision. > > The agreement says home supervisors should be able to inspect the books > of shell branches wherever they are kept. "In no case should access to > these books be protected by secrecy requirements in the country that > licenses the shell branch," it says. Don Weightman dweightman(a)radix.net

1 0