December 2003 - cypherpunks-legacy

kernal timezone options
by Matthew E. Patton 17 Dec '03

17 Dec '03

I'm not having much luck figuring out what values exist for the TIMEZONE and DST kernel options. The default is 0 and 0 which puts my machine off by about 4 hours. The installation routine put in the proper link to US/Eastern or on another box EST5EDT. This apparently is insufficient to get the date command to behave. Incorrect time obviously impacts the entire system. My bios clock is right on. So where are the integers defined that correspond to the various zoneinfo files? This is definately man page material. thanks for the continuing assistance. ps, I figure -1 or -4 is the correct value for DST

2 1

Checklist
by Daniel Colpi 17 Dec '03

17 Dec '03

Greetings and Salutations, A few days ago, I asked for help in making a step by step list on how to "copy" OpenBSD from one computer to another. Well I got a few answers, but many people wanted me to post this list when I was done. So this is it, a mindless checklist of everything I did to "convert a DEC 3100 to the Dark Side" If you can think of something I have missed, please throw me an e-mail. Thanks Daniel Colpi colpi(a)purdue.edu ====================================================================== So, you want another OpenBSD computer hu? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ (assuming same disk setup, target is disk #0, and source is disk #1) (also assuming rrz0a -> / ; rrz0c -> swap rrz0d -> /usr ; rrz0e ->/usr/target ) (Note: I am on a /bio backbone, this isn't going to be the same for you) (Note: /bio/scratch3 is a temp space that I can write to) ___Save Files ___dump root to scratch (just in case) -->% dump -0f /bio/scratch3/dump /dev/rrz0a ___/etc/passwd --> % mv /etc/passwd /bio/scratch3/passwd.target ___/etc/crontab ___any self created scripts you made to run with crontab ___/etc/fstab ___/usr/local/etc/mk-exports ___/etc/export.hosts ___/etc/export.fs.[n] (if you have a drive that is set up the way you want for target machine, you might want to save it to a file to save you some time) (Note: you might want to do this on a machine that is already converted) ___save your partition list -->% disklabel -r /dev/rrz1a >> temp_part % mv temp_part /bio/scratch3 ___Shut down target ___Connect source drive ___Make sure drives are jumpered not to conflict (target=>0 ; source=>1) ___Plug in and power up ___Make sure clock is right time (some old computers lose some time) ___Make sure you see both drives (ie drive 1 & drive 0) ___Run disklabel (I had drouble labeling the disk, but this worked) -->% disklabel -r /dev/rrz1a >> temp % disklabel -B -R /dev/rrz0a temp % disklabel -e /dev/rrz0a ___ / = _______________ ___ swap = ____________ ___ /usr = ____________ / ______________ (target / source) (remove src if desired) ___ /usr/target = _______________ (if you have a "cookie-cut" version you can just:) -->% disklabel -B -R /dev/rrz0a /bio/scratch3/temp_part ___Run newfs -->% newfs /dev/rrz0[ad] ___Transfer files --->% mount /dev/rz0a /mnt % cd /mnt % df -k . (make sure enough room) % df -k / % dump 0f - /dev/rrz1a | restore -rf - % rm restoresystable (if you don't do this you'll be sorry) % cd / % umount /mnt % mount /dev/rz0d /mnt ---+ % cd /mnt | % df -k . | Repeate this % dump 0f - /dev/rrz1d | restore -if - | section if restore > add [all dir's you want to keep] | needed restore > extract | on restore > set owner/mode for /./? [yn] n | other restore > quit | partitions (Note: it will say "DUMP not completed" if you | did not restore everything. This is not a bad | thing, ignore it) | % rm restoresystable (might not be there) | % cd / | % umount /mnt ---+ ___Configure (BE CAREFUL to configure /mnt/etc NOT /etc !!!!) ___mount /usr --->% mount /dev/rz0d /mnt ___remove /mnt/etc/npt.drift ___make dir /mnt/usr/preserve ___replace all scripts made to be run by crontab ___move /bio/scratch3/mk-exports /mnt/usr/local/etc/mk-exports ___umount /mnt ___mount / --->% mount /dev/rz0a /mnt ___replace rest of scripts to be used by crontab ___move /bio/scratch3/export.hosts /mnt/etc/export.hosts ___move /bio/scratch3/export.fs.[n] /mnt/etc/export.fs.[n] ___hostname ___/mnt/etc/hostname.le1 ___/mnt/etc/exports (or run /usr/local/etc/mk-exports) ___/mnt/etc/hosts (change IP number too) ___/mnt/etc/myname ___/mnt/etc/rc (maybe not if (flavor == vanilla)) ___/mnt/etc/mygate ___/mnt/etc/passwd ___/usr/local/bin/tcsh (OpenBSD doesn't come with tcsh) ___reconfigure passwd file (for correct format) __ % mv /bio/scratch3/passwd.target /mnt/etc/passwd.orig same / % nawk -F: ' { print $1 FS $2 FS $3 FS $4 "::0:0:" $5 FS \ line \__ $6 FS $7 } ' /mnt/etc/passwd.orig >> /mnt/etc/passwd % pwd_mkdb -c /mnt/etc/passwd % pwd_mkdb -d /mnt/etc/ /mnt/etc/passwd % pwd_mkdb -d /mnt/etc/ -p /mnt/etc/passwd % chmod 600 /mnt/passwd.orig ___do you want permissive /mnt/root/.rhosts (bilbo root ; gimli root) ___how about cooperative /mnt/etc/ttys (%s/network/network secure) ___if your source machine boots off disk 1 and target boots off disk 0, you need to make sure the correct kernal is at /mnt/bsd ___umount /mnt ___Power down ___Remove source drive ___Correct jumpers if nessary ___Power up ___Before starting OpenBSD at Boot Ram type: >> printenv >> setenv bootpath rz(0,0,0)/bsd ___Boot off of target disk ___restore user file system --->% cd /usr/target % rsh bilbo ls /usr/amanda/\* __ (now in order) same / % rsh bilbo cat /usr/amanda/target.date.[0->(n-1)] \ line \__ < /dev/null | resore -rf - (now when done with above loop (IN ORDER!!!!!)) % rm restoresystable ___recreate crontab --->% crontab -e ___Checks ___ping source machine (to make sure not same IP addresses) ___run ntpq -p ___finger @localhost ___finger @target ___cd into /bio/scratch3/ ___run date ___telnet to target from another machine ___ftp one file from another machine ___cd to /bio/target from another machine ___Go home early Nessary Tools: =============== Screwdrivers (if internal drives) Postit-notes (for keeping drives straight) One hell of a lot of coffee

1 0

Re: Encyrption Program
by semprini＠theschool.com 17 Dec '03

17 Dec '03

This is in response to the several posts regarding the assumed weakness in the program I wrote: While it is true that PRNG's are not very good, because of the inherent lattice structure, I believe I found a way around that problem. To work around the lattice problem, I used a systm of cubic arrays. The program first creates sixteen cubic arrays, and fills them one space at a time with random characters. When the stream of characters to be XORed with the plaintext is generated, it picks a random cube and a random location with that cube. The resulting "random" character is then XORed with the appropriate character of the plaintext. If someone can prove to me that this method is stupid or easily breakable, I would actually be happy. So, those of you bent on proving that I'm wrong, I heartily encourage you to do so. As I mentioned before, you can download both the compiled version *and* the source at "http://www.brigadoon.com/~semprini/3dmx". If you are having trouble reaching that site, e-mail me and I will send you a copy via e-mail. Thank you for your interest and criticisms. They have been helpful. --Dylan

4 3

Re: Documentation
by Charlie Root 17 Dec '03

17 Dec '03

> >In the coming weekend, I'll be updating the newuser FAQ > >(for things like PPP and 2.2). I'm sure a post-install checklist would be > >a welcome addition. > > > >B U T . . . . > > > >Not everyone runs things like Kerberos or DNS. Keep in mind that many > >people use OpenBSD for many things and in many environs. The OpenBSD setup > >on my firewall at the office is much different than the Sparc, Alpha, and > >P5/133 I run it on at home. The setup on my router machine at home is also > >much different than the other machines in my house. There are ways people > >have setup OpenBSD on embeded systems to do things like manage the > >fuel/air mix ratio on their Corvettes (OK, one person I know of planned > >that, but couldn't get the financing for the car...) I hope that draws the > >picture. > > > >As for the verification after install, that is sort of "auto-manditory"-- > >if a filesystem isn't mounted right, /etc/fstab has to be checked out. If > >the network doesn't work, the network files must be examined to "make it > >go." As oopposed to attacking this as a checklist, how about it is > >attacked as "If networking doesn't work, check hostname.(interface)"-- but > >there is more to that then just files in /etc (boot -c in order to > >reconfigure hardware addresses) > > As a user of OpenBSD, and having tried to manage projects with it for > implementation of added features for customers...I could not agree with > the above position. > > You see, if you are ALREADY familiar with OpenBSD then you will most likely > know exactly what to do when installing and seting up a system. New User's > Notes / Installation Checklist's will most likely be ignored by you. > > However, if you are brand new to the system, then an Installation / Setup > Checklist (a good one) will prove to be essential. Wouldn't it be great if > just about every post to these groups from a new user was one like "..hey! > This OpenBSD thingy works great! The installation was a snap!.." or something > like that. We all know that hardly happens now...but, it could..... > > I, for one, believe strongly that a good 'Overview', 'Setup Notes' and 'Installation > Checklist' must somehow find it's way into the distribution. It is also clear > that the machine / arch specific differences will require unique versions > for each. I completly agree with you. Just anoze topic that i can add is installation procedure,especially disk partitoning. It's a very dungerous/important procedure but it's description ins INSTALL.i386 is a bit too short and need examples(espcially). Something like - "Imagine we have disk with such and such patitions and now we want to install OpenBSD here & there so we should... It would'be _very_ helpfull. BTW, does anybody work on installation software ? Something like in FreeBSD/RedHat ? Alexey Pialkin

1 0

Bernstein case update: Government appeal brief filed
by John Gilmore 17 Dec '03

17 Dec '03

The government has filed its 81-page "brief" with the Ninth Circuit Court of Appeals in the Bernstein case. They argue that the export controls are "constitutionally permissible", that they are not a facially unconstitutional prior restraint on publication, and that the District Court gave Prof. Bernstein "too broad" relief by declaring the law and regulations unconstitutional and partially enjoining their enforcement. The brief has been scanned in as page images, and is at: http://www.eff.org/pub/Legal/Cases/Bernstein_v_DoS/Legal/970116_appeal_brie… Prof. Bernstein's legal team will file its reply by November 10, the government will reply by November 17, the Court will hold a formal hearing sometime during the week of December 8, then the Court will issue its decision. John Gilmore Electronic Frontier Foundation

1 0

Free Internet Seminar
by Jeremy Rusnock 17 Dec '03

17 Dec '03

Dear MIS Subscriber, MicroServe will be holding a basic Internet seminar on Tuesday, October 21st at teh Woodlands Inn and Resort in Wilkes-Barre, PA. There will be two sessions from which to choose, 1:00pm to 4:00pm or 6:00pm to 9:00pm. We will be covering basic services such as email, ftp, world wide web, and usenet news. We will also provide information about the internet itself - how it started, where it's going, etc. Everyone is welcome (whether an MIS customer or not), so tell your friends and family. Again, this is a basic seminar. We will not be covering advanced topics such as web page creation or cgi programming. So if you are an advanced user already, this might not be the seminar for you. We are considering advanced seminars in the not too distant future. If you would like to register or if you have any questions, please call Mike Siconolfi at 821-5964 x21. Thank You, Jeremy Rusnock ~----------------------------------------------------------------------- Jeremy Rusnock MicroServe Information Systems, Inc. Commercial Sales/CSM/Security 100 North Wilkes-Barre Boulevard jeremy(a)admin.microserve.net Wilkes-Barre, Pennsylvania 18702 http://www.microserve.net/~jeremy (800)380-INET x23 (717)821-5964 x23 ------------------------------------------------------------------------ Free on Saturday? Play Ultimate. See http://www.microserve.net/~frisbee.

1 0

Re: Security flaws introduced by "other readers" in CMR
by Greg Broiles 17 Dec '03

17 Dec '03

Tim May <tcmay(a)got.net> wrote: >Truly sensitive stuff--stuff about takeovers, foreign production plans, new >products, etc.--will be encrypted with channels having no nosy security >guards or Corporate Crypto Compliance Police silently listening in. > >Which means we're back to square one. So why does PGP, Inc. bother? Because they've got customers who will pay for CAKware. Why will customers pay for it? Same reason the FBI wants GAK, even though motivated/well-informed crypto users will superencrypt or otherwise bypass the enforcement mechanisms. If you're the C in CAK or the G in GAK, access to some data is better than access to no data - and the possibility of enforcement radically alters the risk/benefit calculus of even intelligent actors who see their interests as contrary to those of the [C,G]. As Jon Callas confirmed at the recent Cpunks physical meeting, the current CAK/CAM/whatever system has very weak code re policy enforcement - for example, it'll allow otherwise forbidden messages to pass through its filters if even the "--- BEGIN PGP MESSAGE ---" lines are altered or removed. It won't disassemble tar or zip or uuencode packages, or otherwise attempt to discover simple attempts to bypass the enforcement mechanisms. They're not trying to stop determined covert communicators - that's not their threat model. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | Export jobs, not crypto. http://www.io.com/~gbroiles | http://www.parrhesia.com

3 2

finger
by Harry Hansen 17 Dec '03

17 Dec '03

______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

1 0

InfoWar Epilogue 3 (Part III of 'The True Story of the InterNet')
by I Am Not A Crook Remailer 17 Dec '03

17 Dec '03

1 0

InfoWar Epilogue 3 / TEXT
by I Am Not A Crook Remailer 17 Dec '03

17 Dec '03

---------------------------------------------------------------------------- ---------------------------------------------------------------------------- The True Story of the InterNet Part III InfoWar Final Frontier of the Digital Revolution Behind the ElectroMagnetic Curtain by TruthMonger <tm(a)dev.null> Copyright 1997 Pearl Publishing ---------------------------------------------------------------------------- ---------------------------------------------------------------------------- InfoWar Table of Contents * Epilogue * Gomez ---------------------------------------------------------------------------- Epilogue ---------------------------------------------------------------------------- Subject: Nun Other From: John Young <jya(a)pipeline.com> To: cypherpunks(a)toad.com On terrorists, one of the Four Horsemen. IS THE ASSAULT ON NATIVE INTELLIGENCE & GOOD WILL WE CALL THE EVENING NEWS ANYTHING OTHER THAN AN ACT OF TERRIORISM? What was the Gulf War but terrorism wearing the death mask of order?-- One big car bomb it was the guys who drove it are dying now one by one--ignored! Is acid rain a form of terrorism? (Think for yourself.) Is GATT or NAFTA anything but a pact among brigands--the World Bank, the IMP their backup men? How long before they fight over the spoils? Who'll do the fighting for them?" ---------------------------------------------------------------------------- ---------------------------------------------------------------------------- Gomez Damn! Will these contemptuous, plebeian subalterns never learn? I will allow them to fight over the spoils! They will do the fighting for ME! It is I who am at the right hand of the Evil One. It is I who will bring the earth to submission under HIS dominion, with the Dark Allies by my side. The future is written! It is written! These foolish ants continue to struggle in vain, though the battle they persist in fighting was lost centuries ago. They can do no more than postpone the inevitable, at best ---------------------------------------------------------------------------- The stage is set. My minions have their exits and their entrances, and I have, in my time, played many parts. The book-learners rail against sheep in wolves clothing, while I weave them all into patterns of my own design, like a weaver spinning her wool and intertwining it according to an already foreseen pattern. Like the Big Bad Wolf in Grandmother's bed, I sit at the head of the table from which they sup, laughing at the ragamuffin progeny of the human race as they tell me, "My, Big Brother, what big eyes you have." And what big teeth I havebut this Big Bad Wolf has already taken the axes out of the hands of most of the woodcutters, and the rest of their weapons shall be in my hands by the end of 1999. The mortal fools who live in the InfoWar weald of my Grand Scheme cannot see the forest for the trees as they fight their 'winning' battles one retreat at a time. I have turned their words on their head with NewSpeak, DoubleSpeak and SpinSpeak-I have turned their minds upside down by making all forms of disagreement with my Puppet Masters CrimeThink and CrimeSpeak. I have turned their world and their reality on its head, yet the simpletons are not capable of turning 1999 on its head and realizing that at the end of the millennial forest stands the Subtle Serpent which convinced Eve and Adam to eat the fruit from the Tree of the Knowledge of Good and Evil-the serpentine, autarchic Evil-1and Armageddon. ---------------------------------------------------------------------------- "Please allow me to introduce myself" "I am An Evil FUD Disseminator To Be Named Later. "I will be your host for the rest of this chapter of 'InfoWar,' because I have the brass balls needed to tell you blatant lies about your future, and the future of humanity, because I know that it is now too late for human kind to save themselves, and that you desperately desire to hear, and believe, the lies I am about to tell you. "Nowback to our 'story.'" It is becoming increasingly obvious, to even the deaf, dumb and blind, that the Y2K (Year 2000) programming 'problem' has the potential to become a worldwide disaster. Is this an 'accident?' Is it the result of the laws of inertia, vis a vis human nature? Yesnow turn on the TV and go back to sleep. That's rightthe Y2K 'problem' has been known about for years, yet the finest minds in the arena of computer finance have not understood the true import of the problem until just recently. The major players of huge financial empires have been sitting on their butts, completely unaware of the possible scope of disaster that lies in wait at the turn of the century. And all because they are so terribly, terribly stupid. Yes, they are just now beginning to wake up and realize that their whole world may come crashing down around them if the Y2K problem is not properly dealt with. Bill Gates has been sitting back, thinking, "Damn. I may be out a hundred billion dollars before the fallout from this problem stops. Oh well, easy come, easy go." Financial institutions holding billions of dollars in hard assets have not even remotely considered the possibility that, if computers worldwide lose the ability to easily prove whom those assets truly belong to, well"We'll have this all sorted out soon, sir. If you will just take a place at the back of the line, behind the other one hundred million people, our company directors will be taking a look at everyone's claims just as soon as they get back from their extended vacation on the French Riviera." "After an intensive inquiry, we have come to the conclusion that we are an honest, reputable financial institution which would never take advantage of the Holocaust by profiting outrageously from the slaughter of millions of our valued customers. "There is just no way we can possibly trace who these assets should properly belong to as a result of being slaughtered by some of our other valued customers. "On your way out, would you mind throwing these bookkeeping records in the trash for me?" The truth of the matter is, human nature is such that the operators of funeral parlors in Asia have been found to be paying hospital employees to surreptitiously murder patients whose family members are likely to use the operators services when their relatives die. However, people who can rule empires, perhaps even the world, by virtue of being a Sumo Dog in a world of kittens, would never dream of using their money, power and position to do so. The three-letter agencies that regularly violate all manner of their own country's laws, as well as the laws of other countries, and international law-the secret agents who trade in weapons and drugs to support their objectives, while imprisoning others who do so-the spooks who openly admit that they use their secret access to worldwide financial systems to manipulate and steal the Bad Guys money and bring them to ruin Well, lets just say that they are people with high moral values, and would never consider secretly preparing to take full advantage of the Y2K issue, while assuring those outside the loop that it is bit of a 'problem' that 'someone' will get around to taking care of, sooner or later. You can turn on the TV and see major financial institutions actively seeking the business of deadbeats or fools with hard assets. You can see a smiling man explaining that the company he represents loves you so gosh-darned much that their standard contract contains two 'gimmes'-that they will give you coupons which allow you to 'miss' two payments at your own convenience. "Yes folks, we are trying to help people who are likely to default on their loans because they believe the problems resulting from their bad financial habits will be solved by planning ahead for getting in above their heads." You can see ads telling you that Company B loves you so gosh-darned much that they will loan you up to 125% of your equity in your home. "We will even kiss you on the lips, to show our sincerity. " When we call in your loan, you will be advised of where you can kiss us." Trust methese people are not involved in a mad scramble to gain possession of as many hard assets as possible because they know something that you don't know The IRS, the Rockerfellers, the shadowy world figures who own and operate munitions factories in both, or all, countries involved in armed conflict, the patriots who sell ball-bearings to keep the war machines that are shooting at their sons and daughters operating Well, if there is great upheaval and disaster in the financial community, as well as in society itself, then these people will probably come to ruin, while your life just keeps getting better and better. In conclusion, I would like to assure you that if worldwide disaster suddenly looms as a result of a crisis caused by the Y2K 'problem,' that it will undoubtedly be a result of the evil conspiracies of drug dealers, pedophiles, terrorists, Saddam Hussein, and a Horseman to be named later. The 'good' news is that our saviors are waiting in the wings to rush to our rescue and save us from the Great Evilas long as your name is not on 'The List,' of course. {Hang on a second, I'll check} Gee pal, I'm afraid I have some rather bad news for you ---------------------------------------------------------------------------- "The Xenix Chainsaw Massacre" "WebWorld & the Mythical Circle of Eunuchs" "InfoWar (Part III of 'The True Story of the InterNet') Soviet Union Sickle of Eunuchs Secret WebSite ----------------------------------------------------------------------------

1 0