December 2003 - cypherpunks-legacy

Re: WARNING: Serious Pentium Bug
by Anonymous 17 Dec '03

17 Dec '03

"William H. Geiger III" <whgiii(a)invweb.net> wrote: >For the same reason Intel does nothing about any of thier bugs: they are >assholes. The only way any of these type of things are ever addressed is >by enough users putting pressure on Intel to fix their fuckups. (Really >slopy not testing the microcode) Yeah. A conspiracy theorist might be prompted to theorize that Intel deliberately placed this in their processor, took a chance that nobody else would find it and publically release it, and then leaked the information themselves. If they refuse to replace the P5s many people will upgrade to a PPro or a P5. Of course Cyrix and AMD throw a wrench into this theory, but I doubt there are a whole lot of people who won't be buying any more Intel products due to this, and some of the clones have or did have big problems such as annoyingly slow FPUs. If they don't make it extraordinarily easy for me to replace my processor I'll probably be one of the people who falls into the latter catagory and goes off to Cyrixland.

1 0

Re: [patent] Secure electronic message transfer and voting scheme
by ulf＠fitug.de 17 Dec '03

17 Dec '03

>Patent Number: 5682430 >Inventor(s): Kilian, Joseph John{#buSako, Kazue#} The full text is available at <http://patent.womplex.ibm.com>. The novelty in this patent is an algorithm that uses Fiat-Shamir to prove that the mixes operate correctly. The general idea of using non-interactive zero-knowledge proofs to verify that mixes follow the protocol was already published by Rackoff and Simon in 1991, although that is not acknowledged in the patent specification. Does anyone have details about Kilian's patent application on identity escrow, other than the paper at <http://www.princeton.edu/~erez/ident.ps>?

1 0

Re: WARNING: Serious Pentium Bug
by Anonymous 17 Dec '03

17 Dec '03

>Anonymous <anon(a)anon.efga.org> wrote: >>There is a SERIOUS bug in all pentium CPUs. The following >>code will crash any machine running on a pentium CPU, MMX or no >>MMX, any speed, regardless of OS (crash as in instant seize, hard >>reboot the only cure): >> >>char x [5] = { 0xf0, 0x0f, 0xc7, 0xc8 }; >> >>main () >>{ >> void (*f)() = x; >> f(); >>} >> >>This require no special permissions to run, it works fine with >>average-joe-userspace permissions. I have verified this, it works. >>Demand a new CPU from Intel. > >This didn't crash my Pentium. Hoax? Absolutely not. It crashed mine and is a major bug. It doesn't seem to affect the PPro, though, and not the P2 due to its relation to the PPro. It might be fixed in later Pentiums, which begs the question of why Intel didn't issue a recall back then. Supposidly they were informed about it months ago. Read comp.sys.intel.

3 2

No Subject
by Mix 17 Dec '03

17 Dec '03

Monday, November 10, 1997 - 04:25:17 MET The following is from http://www.mobil.com/speedpass/ Note that I've only quoted the parts I think are relevent to a security discussion... ---begin quote--- How does Mobil Speedpass work? Speedpass uses an electronic system located in the pump to "talk" with a miniature radio-like device (a transponder). Together, these electronic devices provide "instant" access to gasoline by automatically charging fuel purchases to the credit card you've selected. The technology is similar to the state-of-the-art technology successfully used by many tollways. What happens if my Speedpass is lost, stolen or damaged? Treat it just like a credit card. Immediately notify our Service Center at 1-800-459-2266. Tell us your name or Speedpass number. And we'll cancel your old Speedpass and send you a new one right away. You should write down your Speedpass number (8 digits on tag) and keep it in a safe place. Is there a pin code with my Mobil Speedpass? No. Can other people intercept the transmission of my credit card number? No. The Speedpass system operates on a dedicated transponder identification code. Your credit card code remains outside the Speedpass signal system, maintaining the confidentiality of that information and protecting your account from unauthorized use. ---end quote--- I see several options, none seem too secure: 1) "dedicated transponder identification code" (dtic from now on) is sent in the clear. Anyone who can listen and re-transmit can get free gas. 2) Speedpass and the gas pump negotiate DH key exchange and use DES/RC5/IDEA/Whatever. Anyone who can impersonate a gas pump can gain access to dtics and get free gas. 2) Gas pumps have an RSA keypair, and all of the speedpasses know the public key. The dtic is encrypted to the gas pump's key along with some random data. Anyone who can compromise the gas pump's private key (including service station operators/employees?) can imitate a gas pump and get dtics, with which to get free gas. The third option seems pretty secure at first, until you realize that it's like putting all of your eggs in one basket and giving thousands of people physical access to the basket. Anybody know how they are actualy doing it? Is there some more secure way I haven't thought of? -Some anonymous guy with no 'nym

1 0

Kill -9.9
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Eric Cordian wrote: > In the discussion of the Intel F00FC7C8 problem, it was alleged that > the instruction "unlk a7" will lock up a Motorola 68040 CPU even from > user mode. > Is anyone aware of non-privileged instructions which kill other popular > CPUs, like Alphas, SPARCS, and MIPS? In a world where government agencies using fear of the 'enemy' and bragging about their 'dirty tricks' to gain increasing funding, I am surprised that few seem to realize that many of the 'bugs' are actually 'features,' and that when one finds a true, non-designed bug in major hardware or software, there are certain government agencies which may pay handsomely for the information, depending on the potential and obscurity of the bug. In a world where the value of 'tracking chips' and 'kill switches' on personal automobiles is recognized, does anyone truly believe that government agencies with billions of dollars worth of funding have not recognized and instituted this technology surrupticiously in the same areas where they brag about introducing 'faulty parts' into weapons systems? The government is desperate to maintain their electronic snooping and warfare abilities as Year2000 approaches. Hardware & Software == Intel & MicroSoft == VX-Chip & GAK/GMR The government is using Anti-Trust actions to muscle both computer giants. A million dollar a day assault on MicroSoft, and release of compromising 'bug' information to put the squeeze on Intel. KillMonger

2 1

Gun Control brings on a new arms race
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tim May wrote: At the San Francisco Gun Show this past weekend, I watched with great amusement as the San Mateo County Sheriff's Office deputies and Brisbane Police stared in apparent horror as citizen-units loaded up on high-capacity mags, armor-piercing ammo, Class III body armor, and on and on. The cops are stationed at the door, ostensibly to spot gross violations of the law, such as carry of loaded weapons. The cops asked me if I was carrying guns into the show to sell...I just shrugged. Without a warrant, they were helpless to do more than just ask. It was a gas. Gee, sounds like Christmas. Christmas starts earlier every year. Sparticus

1 0

Appellee's Brief filed; Government granted extension
by Cindy Cohn 17 Dec '03

17 Dec '03

Hi all, The Brief for the Appellee Bernstein was filed today in the 9th Circuit Court of Appeals. It should be posted at the Electronic Frontier Foundation site (www.eff.org) soon. In addition to the Appellee's Brief, five amicus briefs were filed today in support of the Appellee. Cindy ************************ Cindy A. Cohn McGlashan & Sarrail, P. C. 177 Bovet Road, 6th Floor San Mateo, CA 94402 (415) 341-2585 (tel) (415)341-1395 (fax) Cindy(a)McGlashan.com http://www.McGlashan.com

1 0

Crypto smartcard demo at the monthly meeting
by Lucky Green 17 Dec '03

17 Dec '03

It seems that everybody had fun watching my smartcard demo at this month's Cypherpunks meeting. It certainly generated a lot of interest in this, to many US programmers still novel, technology. I sincerely hope that the attendees walked away with more than the realization, as you saw in my demonstration, that a 16 bit keyspace is not cryptographically secure. :-) On behalf of the Cypherpunks Smartcard Developer Association, I would like to again issue a call for smartcards and smartcard Programmer Reference Manuals. Without both, it will be difficult to move our research forward in a timely fashion. If you have access to either, especially to those made by Siemens or Bull, please contact me. Anonymous donations are encouraged. We also need inverse readers and serial port sniffers that do not affect the traffic on the serial port. Pointers to commercial sources are welcome. Schematics or better yet donations are preferred. Furthermore, I would like everybody interested in obtaining one of the universal smartcard readers used in the demo to contact me. Given enough interest, I volunteer to coordinate another production run. Thanks, -- Lucky Green <shamrock(a)cypherpunks.to> PGP v5 encrypted email preferred. "Tonga? Where the hell is Tonga? They have Cypherpunks there?"

1 0

Interested in Health, Wealth, & Early Retirement?!
by pageu＠MCI.Com 17 Dec '03

17 Dec '03

This is a one time mailing and you will not need to respond to be REMOVED! *************************************************************************************** AOL Mon300K-Set50 Hello, This is NOT what you think. You are not left alone to promote this business. I made money my first month and have built a strong supportive downline organization. You can take advantage of this and begin your way to a more secure financial future. Invest in this and improve your way of life drastically - FOR REAL!!!! NETWORK MARKETING MAGAZINE names Company of the MONTH!!!! HOTTEST NEW MLM ON THE NET! This is simply the most explosive company in MLM history. Simple facts are: 1. No products to sell 2. No personal sponsoring required 3. No Meetings 4. No distributor kits to buy 5. No sign up fees We have designed a system that enables 97% of Mlmers who have never earned more than a few hundred dollars to finally be successful. This allows most families to no longer have to rely on the income of one job and one boss! Our powerful recruiting system offers you these benefits: 1. Distributors placed in your downline at no cost to you 2. Completely AUTOMATED SPONSORING SYSTEM 3. Only one customer needed - yourself 4. A 100% committed downline 5. Commission check increases every month 6. Most lucrative pay plan in the industry 7. Earn thousands in the first few months 8. Active upline support 9. National toll free sponsoring line 10. Free Self-replicating Webpage and autoresponders This is without a doubt the most aggressive MLM company on or off the Internet. Last week, a famous TV Infomercial self made millionaire joined our company. The sooner you join, the sooner you benefit from the spillover being generated. To get complete info RIGHT NOW our Autoresponder will send back info to you within minutes. Please put SEND INFO in subject area. Autoresponder address is >>> Peck1(a)worldserenity.com visit my webpage with the Information Provided in the Autoresponder Information ********************************************************************* IF YOU WANT TO KNOW HOW TO GET FREE GOLD JUST GO TO MY WEB SITE AND REGISTER FOR IT AT NO COST OR OBLIGATION!

1 0

Re: To: Amad3us Re: Your keys
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Bill Stewart wrote: > I tried adding Amad3us's key to my PGP5.0 keyring, > and got a dialog box saying > PGP failed to add the key(s) to your keyring > > Is this really you correct key? What are your > KeyID, fingerprint, and a keyserver that has your key? Bill, Try this one: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzRbd7MAAAEEAONwsEpUgiezyfP6lxBzM5SfHJS6MK12JyR09KBZp2rrW680 4vbKAO/oteftRRM1jYYaQM6pUd2Tbb9z+cSuQGr2GH9kQ0Y7bllh89E1PItj7frG ARSCbt1gbbXDXEICY8Ne1zZB7FfMt2qGVBdrKG/i2vfdZa5+n/KMuKFNFivhAAUR tCNBbWFkM3VzIDxjeXBoZXJwdW5rc0BjeWJlcnBhc3MubmV0PokAVQMFEDRm9noK WjOVYcdHsQEBQAUB+QGswIJE3x2VPRwM6e7RdJdIvXeHa7pgZpDVEIetctxpTi2F nj45S0V4oHqUNJvmYYeApxC2hkEjn9Ia/EFglF4= =ossQ -----END PGP PUBLIC KEY BLOCK----- Signing Key: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQBNAzRmZWoAAAECAMnJrqd/TERCLeFscdgNvwVxrVG4tRm0VThMEXXkctCGMaUD jcETxcV0ZseRUcyUKfqlLd3CRsIwClozlWHHR7EABRG0FU5lY2Vzc2FyaWx5IEtu b3R0LCBNRQ== =eg16 -----END PGP PUBLIC KEY BLOCK-----

1 0