December 2003 - cypherpunks-legacy

No Subject
by Anonymous 17 Dec '03

17 Dec '03

In the grand tradition of RSA-in-3-lines-of-perl, we present Crash-A-Pentium-in-44-characters: main(){int i=0xc8c70ff0;void (*f)()=&i;f();} - f00fie

6 6

No Subject
by Mix 17 Dec '03

17 Dec '03

Monday, November 10, 1997 - 04:25:17 MET The following is from http://www.mobil.com/speedpass/ Note that I've only quoted the parts I think are relevent to a security discussion... ---begin quote--- How does Mobil Speedpass work? Speedpass uses an electronic system located in the pump to "talk" with a miniature radio-like device (a transponder). Together, these electronic devices provide "instant" access to gasoline by automatically charging fuel purchases to the credit card you've selected. The technology is similar to the state-of-the-art technology successfully used by many tollways. What happens if my Speedpass is lost, stolen or damaged? Treat it just like a credit card. Immediately notify our Service Center at 1-800-459-2266. Tell us your name or Speedpass number. And we'll cancel your old Speedpass and send you a new one right away. You should write down your Speedpass number (8 digits on tag) and keep it in a safe place. Is there a pin code with my Mobil Speedpass? No. Can other people intercept the transmission of my credit card number? No. The Speedpass system operates on a dedicated transponder identification code. Your credit card code remains outside the Speedpass signal system, maintaining the confidentiality of that information and protecting your account from unauthorized use. ---end quote--- I see several options, none seem too secure: 1) "dedicated transponder identification code" (dtic from now on) is sent in the clear. Anyone who can listen and re-transmit can get free gas. 2) Speedpass and the gas pump negotiate DH key exchange and use DES/RC5/IDEA/Whatever. Anyone who can impersonate a gas pump can gain access to dtics and get free gas. 2) Gas pumps have an RSA keypair, and all of the speedpasses know the public key. The dtic is encrypted to the gas pump's key along with some random data. Anyone who can compromise the gas pump's private key (including service station operators/employees?) can imitate a gas pump and get dtics, with which to get free gas. The third option seems pretty secure at first, until you realize that it's like putting all of your eggs in one basket and giving thousands of people physical access to the basket. Anybody know how they are actualy doing it? Is there some more secure way I haven't thought of? -Some anonymous guy with no 'nym

1 0

Gun Control brings on a new arms race
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tim May wrote: At the San Francisco Gun Show this past weekend, I watched with great amusement as the San Mateo County Sheriff's Office deputies and Brisbane Police stared in apparent horror as citizen-units loaded up on high-capacity mags, armor-piercing ammo, Class III body armor, and on and on. The cops are stationed at the door, ostensibly to spot gross violations of the law, such as carry of loaded weapons. The cops asked me if I was carrying guns into the show to sell...I just shrugged. Without a warrant, they were helpless to do more than just ask. It was a gas. Gee, sounds like Christmas. Christmas starts earlier every year. Sparticus

1 0

Australian banks using uncracakble IDEA!
by Anonymous 17 Dec '03

17 Dec '03

Conflicting agendas cloud accord on internet trading By John Davidson http://www.afr.com.au/content/971110/inform/inform3.html Banks will lose their shirts; retailers will go bust if the import tax threshold isn't lowered; retailers will go bust if the threshold isn't raised; individuals will be monitored by a person or persons unknown; the Tax Office will kill it first, or maybe it won't. These are just some of the often strange and always contradictory claims heard by the Joint Parliamentary Committee of Public Accounts during the Sydney leg of its inquiry into internet commerce last week. [...] One expert witness, who said he had been involved in the establishment of the internet more than 20 years ago, testified that internet commerce should be banned because the speed and security of the network had barely improved in the last decade. Modem speeds, said Richard Marschall from Marschall Acoustics, were still limited to 9600bps (contrary to the claims of ISPs and modem makers, which offer speeds of around 50kbps) and using the internet was still grossly inefficient compared to putting a disk in the post. Worse, 90 per cent of all internet bandwidth was used to (slowly, one presumes) download pornography. Claims that the internet could be used for serious business were also grossly inflated, he said. Dr Marschall said that any banks that chose to use the internet for commerce would "lose their shirts" because the security of the internet was so poor. The cryptography relied on by banks to scramble data on the public network could readily be cracked, he said, because law enforcement agencies refused to let people use strong versions of the software for fear of it falling into the hands of criminals. (Those Australian banks that offer Web banking sites do, in fact, use a strong form of cryptography known as IDEA, which is thought to be effectively uncrackable.) "The internet (is) an ideal media (sic) for fraud and other unethical practices," he said in his submission. "It is not clear if there is any fix for these problems -- short of pulling the plug and banning internet commerce. Commercial transactions were banned for the first 15 years of the internet's existence for precisely these reasons."

2 1

Appellee's Brief filed; Government granted extension
by Cindy Cohn 17 Dec '03

17 Dec '03

Hi all, The Brief for the Appellee Bernstein was filed today in the 9th Circuit Court of Appeals. It should be posted at the Electronic Frontier Foundation site (www.eff.org) soon. In addition to the Appellee's Brief, five amicus briefs were filed today in support of the Appellee. Cindy ************************ Cindy A. Cohn McGlashan & Sarrail, P. C. 177 Bovet Road, 6th Floor San Mateo, CA 94402 (415) 341-2585 (tel) (415)341-1395 (fax) Cindy(a)McGlashan.com http://www.McGlashan.com

1 0

Crypto smartcard demo at the monthly meeting
by Lucky Green 17 Dec '03

17 Dec '03

It seems that everybody had fun watching my smartcard demo at this month's Cypherpunks meeting. It certainly generated a lot of interest in this, to many US programmers still novel, technology. I sincerely hope that the attendees walked away with more than the realization, as you saw in my demonstration, that a 16 bit keyspace is not cryptographically secure. :-) On behalf of the Cypherpunks Smartcard Developer Association, I would like to again issue a call for smartcards and smartcard Programmer Reference Manuals. Without both, it will be difficult to move our research forward in a timely fashion. If you have access to either, especially to those made by Siemens or Bull, please contact me. Anonymous donations are encouraged. We also need inverse readers and serial port sniffers that do not affect the traffic on the serial port. Pointers to commercial sources are welcome. Schematics or better yet donations are preferred. Furthermore, I would like everybody interested in obtaining one of the universal smartcard readers used in the demo to contact me. Given enough interest, I volunteer to coordinate another production run. Thanks, -- Lucky Green <shamrock(a)cypherpunks.to> PGP v5 encrypted email preferred. "Tonga? Where the hell is Tonga? They have Cypherpunks there?"

1 0

Interested in Health, Wealth, & Early Retirement?!
by pageu＠MCI.Com 17 Dec '03

17 Dec '03

This is a one time mailing and you will not need to respond to be REMOVED! *************************************************************************************** AOL Mon300K-Set50 Hello, This is NOT what you think. You are not left alone to promote this business. I made money my first month and have built a strong supportive downline organization. You can take advantage of this and begin your way to a more secure financial future. Invest in this and improve your way of life drastically - FOR REAL!!!! NETWORK MARKETING MAGAZINE names Company of the MONTH!!!! HOTTEST NEW MLM ON THE NET! This is simply the most explosive company in MLM history. Simple facts are: 1. No products to sell 2. No personal sponsoring required 3. No Meetings 4. No distributor kits to buy 5. No sign up fees We have designed a system that enables 97% of Mlmers who have never earned more than a few hundred dollars to finally be successful. This allows most families to no longer have to rely on the income of one job and one boss! Our powerful recruiting system offers you these benefits: 1. Distributors placed in your downline at no cost to you 2. Completely AUTOMATED SPONSORING SYSTEM 3. Only one customer needed - yourself 4. A 100% committed downline 5. Commission check increases every month 6. Most lucrative pay plan in the industry 7. Earn thousands in the first few months 8. Active upline support 9. National toll free sponsoring line 10. Free Self-replicating Webpage and autoresponders This is without a doubt the most aggressive MLM company on or off the Internet. Last week, a famous TV Infomercial self made millionaire joined our company. The sooner you join, the sooner you benefit from the spillover being generated. To get complete info RIGHT NOW our Autoresponder will send back info to you within minutes. Please put SEND INFO in subject area. Autoresponder address is >>> Peck1(a)worldserenity.com visit my webpage with the Information Provided in the Autoresponder Information ********************************************************************* IF YOU WANT TO KNOW HOW TO GET FREE GOLD JUST GO TO MY WEB SITE AND REGISTER FOR IT AT NO COST OR OBLIGATION!

1 0

Re: To: Amad3us Re: Your keys
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Bill Stewart wrote: > I tried adding Amad3us's key to my PGP5.0 keyring, > and got a dialog box saying > PGP failed to add the key(s) to your keyring > > Is this really you correct key? What are your > KeyID, fingerprint, and a keyserver that has your key? Bill, Try this one: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzRbd7MAAAEEAONwsEpUgiezyfP6lxBzM5SfHJS6MK12JyR09KBZp2rrW680 4vbKAO/oteftRRM1jYYaQM6pUd2Tbb9z+cSuQGr2GH9kQ0Y7bllh89E1PItj7frG ARSCbt1gbbXDXEICY8Ne1zZB7FfMt2qGVBdrKG/i2vfdZa5+n/KMuKFNFivhAAUR tCNBbWFkM3VzIDxjeXBoZXJwdW5rc0BjeWJlcnBhc3MubmV0PokAVQMFEDRm9noK WjOVYcdHsQEBQAUB+QGswIJE3x2VPRwM6e7RdJdIvXeHa7pgZpDVEIetctxpTi2F nj45S0V4oHqUNJvmYYeApxC2hkEjn9Ia/EFglF4= =ossQ -----END PGP PUBLIC KEY BLOCK----- Signing Key: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQBNAzRmZWoAAAECAMnJrqd/TERCLeFscdgNvwVxrVG4tRm0VThMEXXkctCGMaUD jcETxcV0ZseRUcyUKfqlLd3CRsIwClozlWHHR7EABRG0FU5lY2Vzc2FyaWx5IEtu b3R0LCBNRQ== =eg16 -----END PGP PUBLIC KEY BLOCK-----

1 0

Words To Live By...
by Crypto Czar International 17 Dec '03

17 Dec '03

========================================================= Q. What's the motto of the "Man-Will-Never-Fly Society"? A. "Birds Fly, Men Drink." ========================================================= LMBoyd Web Site / U. S. Newspapers / Start Email / Stop Email http://www.LMBoyd.com/postscript.htm

1 0

Crypto Statements
by John Young 17 Dec '03

17 Dec '03

In November 8 Congressional Record: Rep. DeLay calls for a new encryption policy: http://jya.com/delay-crypto.txt (12K) Sen. Murray supports US encryption exports: http://jya.com/murray-crypto.txt (6K) Sen. Abraham asks that high technology and encryption be freed from Washington interference: http://jya.com/abra-crypto.txt (13K)

1 0