December 2003 - cypherpunks-legacy

announce: WEAK S/MIME support for netscape messenger
by Anonymous Sender 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hello all, here's a new weaken patch, this time for netscape's mail client with S/MIME support. when you send an encrypted email, it is first encrypted with a secret key. the secret key is then encrypted with the recipient's public key. this patch will modify netscape's mail client so that whenever it generates a new key, it generates an all 0x72s key. i hope i'll find time to release an S/MIME encrypted message parser... so that anyone can verify the info. the magic sequence : look for : 51 6a 00 e8 86 27 00 00 83 c4 0c 8b f8 and change with 6a 72 51 e8 b5 98 94 77 83 c4 0c 33 ff by just changing 9 bytes, you can read all the encrypted emails ! like the previous sequence, this substitues a call to GenerateRandom to a memset of course it may be possible to do something more clever, like hashing a 16 bits random key to produce a 128 bit one ! my ex-boss is already doing that. here's how to know if the weaken sequence works on your browser: use the md5 in fortify distrib md5 -r 0x400-0x32ca00,0x384a00:0x58400 ...\program\netscape.exe that should produce aea2aba6f731468e34fd1141f603ea20 the md5 for the whole program (netscape.exe) is : 294dfe9a5e941d12b04e10adafb0c769 -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: cp850 iQCVAwUBNTKmWpVRLpSyKBl9AQGVAgP+Opot5VnJOouhwcS58JIdur1Q+xd2twWR /1q0SlpfsaTi99YIgFBrDpoVhqrW+wQWJmFmGppR5wZtyMNbSm3GPaRm0m9wAOiK vXsxS9VapEgjVh50caeTEh7e6GEwNBhNEENKbt1WvGWTrnh7K8dqiC3Pla7kmG3Q syimJN1toCs= =GIYU -----END PGP SIGNATURE----- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQCNAzUuVR4AAAEEALkjQwGKIsBT16nqJbZsWiPOH6gfRkzFav0RmWgjBu/bjDKe PmC2aGoQV2FXFYGGnX0bHyBz8Qjewdb7aDg/MQsAXjxsSZvqxNEkXGa6bH4U/Fe8 32WBddLrScc6vikaPv0o3D8bgzr+qQM0s9FSP4n5Jb+N/y2YjJVRLpSyKBl9AAUR tAVtYXJrb4kAlQMFEDUuVR6VUS6UsigZfQEBI9AD/RM6l/Gmw3+IPNQ1fRSFAME3 ZLoWUC6mAW5kUP0IaOFD/tXGXT+ekehcFojHpk9/QIO1mVpxr3bp97/ETZb1ZJiS EHTEjAP/85gja/YlRubfihUUb5/MoIz94a+MWsoDB0qLDJbQ48vyNsftNDrolUFf KUdCME7v3al/m6c0wufP =Bnx/ -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: GSM cellphones cloned
by John Young 17 Dec '03

17 Dec '03

>Congrats to Lucky, and Ian, and Dave. Yes, indeed, for a smart hack and PR, and to John Gilmore for smiling out of today's NYT report on the free software conference last week.

1 0

Re: GSM cellphones cloned
by David Honig 17 Dec '03

17 Dec '03

At 02:30 PM 4/13/98 -0400, John Young wrote: >>Congrats to Lucky, and Ian, and Dave. JY is referring to: http://dailynews.yahoo.com/headlines/technology/wired/story.html?s=z/reuters /980413/wired/stories/security_4.html Monday April 13 3:11 PM EDT Experts crack digital cell-phone security system By Annaliza Savage SAN FRANCISCO (Wired) - A group of California-based computer experts claims to have cracked the cryptographic security behind the world's most popular digital cell-phone system, making it possible to clone any phone using the GSM standard. The Smartcard Developer Association (http://www.scard.org) says it found the algorithm used as the basis for the Group Special Mobile (GSM) -- a digital cellular phone system that is used in about 80 million cell phones, primarily in Europe and Asia. Many U.S. networks are starting to implement GSM standards, too, and this attack was launched against a card issued by Pacific Bell. If the group's claims are true, it could lead to a recall or reissue of the smart cards used in GSM-based phones. "GSM is likely to face fraud problems of the same magnitude as analog systems have had," said Marc Briceno, a member of the SDA who said that analog systems have lost billions of dollars because of cellular phone cloning. GSM-based cell phones work with a small card containing an electronic chip called a Subscriber Identity Module card. The SIM card inserts into the back of the cellular phone and contains information that is used to identify subscribers and their account information to the GSM network. The SIM card must be inserted into a GSM Mobile handset to obtain access to the network, and one of the primary benefits of the technology is that cell phones have access to GSM networks worldwide. However, to clone a SIM card, a would-be cracker would have to have physical possession of one. Unlike the cloning used in analog systems, the crack does not yet include being able to listen in on phone calls or obtain a SIM ID via the airwaves, although the SDA has stated that an "over-the-air attack should not be ruled out." The SIM uses encryption to keep the identity of the phone secret, and the encryption algorithm used on most of the GSM network is called COMP128. The SDA was able to obtain the secret ciphers used by the GSM network. After verifying authenticity, the group turned them over to U.C. Berkeley researchers David Wagner and Ian Goldberg, who were able to crack the COMP128 algorithm within a day. In 1995, Wagner and Goldberg succeeded in another high-profile hack when they compromised the crypto code used in Netscape's Navigator browser, which was supposed to secure credit-card transactions. "Within hours they discovered a fatal flaw," said Briceno. "The attack that we have done is based on sending a large number of challenges to the authorization module in the phone. The key can be deduced and recovered in about 10 hours." A group of hackers gathered with security and crypto experts Friday evening at a San Francisco hacker club called New Hack City, for a demonstration of the hack, but it never came off. Eric Hughes, a member of the SDA and founder of the Cypherpunks cryptography group, discussed the technical aspects of the hack, but had to give up the planned demonstration after threats of legal action from Pac Bell and other telephone company executives. It is illegal in the United States to possess cellular phone cloning equipment, although legitimate businesses are exempted. The telephone companies dispute SDA's claims to legitimacy. Wagner blames the ease of the crack on the secrecy with which the ciphers were kept. "There is no way that we would have been able to break the cryptography so quickly if the design had been subjected to public scrutiny," said Wagner. The GSM standard was developed and designed by the European Telecommunications Standard Institute, an organization that has about 500 members from 33 countries, representing administrations, network operators, manufacturers, service providers, and users. "There's going to be an orgy of finger pointing," said Hughes, referring to all the engineers and other people associated with the design of the GSM network. The SDA say that they were able to crack the GSM network algorithm due to weak encryption in the original design. When the system was being designed, several European government agencies were successful in their demands to weaken encryption standards for government surveillance purposes. The SDA also claimed that the GSM security cipher that keeps eavesdroppers from listening to a conversation called A5 was also made deliberately weaker. The A5 cipher uses a 64-bit key, but only 54 of the bits are actually in use -- 10 of the bits have been replaced with zeroes. The SDA's Briceno blames government interference. "The only party who has an interest in weakening voice privacy is the National Security Agency," he said. The SDA said that a proper demo will be taking place soon from somewhere outside the United States. The group has also released the source code for COMP128 and A5 for further testing (Reuters/Wired) ------------------------------------------------------------ David Honig Orbit Technology honig(a)otc.net Intaanetto Jigyoubu Why is the CIA so full of spies?

1 0

Pretty Lousy Privacy PasSword--'cyherpunks' / Norman encryption
by The Arthur 17 Dec '03

17 Dec '03

1 0

Yarnell does it again...
by yarnellsnewmlm＠bigfoot.com 17 Dec '03

17 Dec '03

Hi * MARK YARNELL * * Pre-Launches * * his next BIG deal * 21st Century Global Network, LLC ************************************** * Mark Yarnell former NuSkin distributor * Upline magazine named Mark "The Greatest Networker in the World" * Inducted into the "Hall of Fame" last year. * Earned hundreds of millions of $$$ over the last few years. JOINS with American Technology Group Inc, (ATG) with their patented proprietary IE(tm) Crystal technology once used in laundry cleaning products. The IE(tm) Crystals will be used in a various range of personal & home care products. 23 personal & home care products to start. and Integral Health Inc, a company comprised of 50 medical doctors and health care specialists. to create the next $10 billion company. Top Earners have already been on the first conference call, don't miss the next one. TUESDAY NIGHT April 14th. 9pm EST. * Please send your Phone & Fax number for Marks * 2 page Press Release and Conference Call schedule. For More Information; mailto:yarnellsnewmlm@technologist.com?subject=Mark_Yarnell ---------------------------------------------------------------- To be REMOVED mailto:yarnellsnewmlm@iname.com?subject=REMOVE

1 0

Please Help!
by C.J. Parker 17 Dec '03

17 Dec '03

Poor little C.J. Parker will go to bed 'legal' tonight, unless some kind soul has spare Canadian WebSpace that they can bum him, in order to violate portions of the Canada Criminal Code by indulging in a pathetic, whining diatribe of self-hate and victimization. Surely there is some kind multiple-felon who is willing to give up a small portion of their own future court time in order to help a less fortunate individual with only a meager supply of pending criminal charges to sleep soundly tonight, knowing that he will not have to face the pain and humiliation that comes from being a decent, law- abiding Canadian CypherPunk. THE OFFICIAL C.J. PARKER HATE PAGE ------------------------------------------------ "His bad self-image and low self-esteem, and the knowledge that he had come by them honestly..." ~Excert from 'Space Aliens Hide My Drugs' KUDOS OF THE WEEK go to Revenue Canada Customs and Excise Thug, Bill Mitschill, who legally stole the tools of freedom used by C.J. Parker to Author chapters of a manuscript designed to kick down the doors of perception and lead to the violent overthrow of Perceived MeatSpace Reality (TM). Parker, unknown as the Author of socially deviant UCE/SPAMs such as "How To Make BIG $$$ Sitting At Home, Licking Your Own Dick!," was given a stiff dose of reality by Offal Sir MitSchill and his partner, who put on a blatant show of government disregard for the Legal and Charter Rights of its PawnIzens by not even bothering to tell Good Lies (TM) while widening Parker's asshole in preparation for the beginning of the RCMP Special Greco-Olympic Games. Congrats, Bill. A hundred points for stealing Parker's computer, and five hundred points for gathering photocopied evidence linking Parker to the biological warfare terrorists who rebelled against the King's Revenue agents by dumping terroroist tea into Boston Harbor, and then assaulted and murdered members of the King's LEAs during the lawful performance of their duties, while following proper Royalist procedure. This is a good time to remind Parker Haters (TM) across North America that, despite our long history of applying strong negative labels to him for deviating from the Norm (TM) (and even stronger electroshocks to his brain), that current social and legal trends give us plenty of leeway to ignore his Legal and Charter Rights when sticking a cold, hard one up his butt to hammer him into line with the other NailIzens. The RCMP officers of the Wild, Wild Nor'West continue to lead the way in keeping social deviants constantly on the run, no matter how far from MeatSpace they run to try to escape. You will undoubtedly remember last year's article about members of the Yorkton RCMP who planted drugs in a sting operation designed to set a transient felon visiting C.J. Parker, and then decided that Parker's unconventional lifestyle made him a perfect dupe for prosecution, when it turned out that duuhhh Mountie's ignorance of the laws they are paid to enforce precluded prosecuting the original target of their illegal sting operation. Well, Parker Haters (TM) can rest assured that C.J. Parker (aka - Toto, TruthMonger #0, #1, #709) is currently having his ass kicked back, from his mind's hiding space deep within the bowels of InterNet Free Terra, to the boundaries of MeatSpace, within which his imprisoned ass and mind can only gaze wistfully at those still living freely on the far side of the ElectroMagnetic Curtain which was slammed down around his Illegal Mind (TM) by the confiscation of his computer and the Digital Murder of his Sympatico WebSite. The Regina (can I *say* that on the InterNet?) RCMP are to be applauded for their arrogant, oppressive reminder to Parker that their willingness to lie on the witness stand, threated defense witnesses and run them out of town, as well as pile mountains of bogus charges on his head, mean that Parker's sorry ass is grass, unless he defers to the wishes of the Mounties defending the home of the AssMan, and sits his mind down in society's chair, straightens up his mind, and quits mentally fidgetting. Today's Humor: "First He came for Adam and Eve, but there were not yet any other humans on the earth, so there was nobody to speak up. "Then They came for Jane and Joe Sheeple, but they were too busy focusing on the meager piles of hay used to lure them into the feeding pen to notice the SlaughterHaus next door, so nobody bleated. "Then They came for the TruthMongers, and I was a TruthMonger, so I began eating an *enormous* amount of beans..." ~Constable TruthMonger (BigLoser Inside) (c) 1998, C.J. PARKER ("Hating myself since 1949")

1 0

Amusing takeoff of Zimmermann Telegram
by Philip Zimmermann 17 Dec '03

17 Dec '03

I thought this was a pretty funny takeoff of the famous Zimmermann Telegram. Apparently this was already sent to the cypherpunks list, but I just thought that since it made me laugh out loud, maybe I could laugh out loud on the list. :-D --prz >Date: Mon, 13 Apr 1998 15:03:22 -0600 >From: The Arthur <ta(a)dev.null> >Reply-To: ta(a)dev.null >MIME-Version: 1.0 >To: cypherpunks(a)toad.com >CC: Alexander Szek <as(a)dev.null>, Nigel de Gray <ndg(a)dev.null>, > Reverend William Mongomery <rwm(a)dev.null> >Subject: Pretty Lousy Privacy PasSword--'cyherpunks' / Norman encryption > >*** >*** PGP Signature Status: not verified (signing key missing) >*** Signer: 0x53F2F291 >*** Signed: N/A at N/A >*** Verified: 4/13/98 at 21:20 >*** > >Bienfait to Toad: > > Most private for PRZ's personal information and to be handed to the > > Eternal Iminister in (?) England with...by a pretty private route. > > > > We propose to begin on the 19 April an unrestricted subliminal > > InfoWar fair. > > We shall endeavour, in spite of this, to keep MeatSpace neutral. > > In the event of this not succeeding we shall make Austin a proposal > > of alliance on the following basis; make InfoWar together, smoke the > > peace piple together, generous bandwidth support, and an understanding > > that Austin is to reconquer their lost territory in Freedom, Liberty > > and Privacy. The settlement in detail is left to you. > > > > You will inform the Webmaster, that is Webmaster Choate of Austin, > > of the above most privately as soon as the outbreak of war with > > MeatSpace is certain, and add the suggestion that he should on his > > own initiative invite 2600 to immediate adherence and at the same > > time mediate between 2600 and ourselves. > > Please call the WebMaster's attention to the fact that the ruthless > > employment of our sublimarines offers the prospect of compelling > > BeaverSpace to peace. > > > > Acknowledge receipt with two-word reply... > > > > The Arthur > > >

1 0

$ THIS REALLY WORKS !!! -AFOI
by john.sabiz1＠JEDI.juno.com 17 Dec '03

17 Dec '03

1 0

Netcenter News - April Special Edition
by netcenter-news＠netscape.com 17 Dec '03

17 Dec '03

Title: Netscape Netcenter News - New Service Announcement WE NEED YOUR MIND Professional Connections is a new Netcenter online community that allows professionals and industry insiders to come together to discuss trends in online business, debate issues in digital culture, and mix and network with one another. Coupled with Member Directory, your Netcenter membership is your ticket to network directly with the best minds of the interactive world. Sign up now, and join us in Professional Connections. GET CONNECTED WITH NETCENTER MEMBER DIRECTORY Trying to find a business colleague's email address? Looking for a way to share your home page URL with your friends? Look no further than Netcenter's new Member Directory. An online directory of Netcenter members, Member Directory lets you Search for colleagues and friends Network with other Netcenter members You can also use Member Directory to learn more about the participants in Netcenter Professional Connections discussion forums. Or, post your home page URL or online résumé for potential employers to see. With Member Directory, you can build your own World Wide Network. To access Member Directory, simply fill out a member profile. You can edit your profile at any time. And you control what information is made available for other members to see. Coming Soon - Shortly you will be able to search for other members based on occupation or interest areas. So, whether you're looking for career leads or for other entrepreneurs with whom to discuss small-business issues, take advantage of Member Directory today. Netscape respects your online time and Internet privacy. If you would prefer not to receive future issues, click here to to send an unsubscribe email or reply to this message with the word unsubscribe in the subject line. Copyright © 1998. Netscape Communications Corporation. All rights reserved.

1 0

WOW-COM News Update
by owner-wow-com-news-update＠nmpinc.com 17 Dec '03

17 Dec '03

==================================================== This update is sponsored by Hughes Network Systems http://www.hns.com ==================================================== CTIA's WOW-COM named a "TOP WEB SITE" by Mobile Computing & Communications Magazine (2/98) Dear WOW-COM Reader: WOW-COM(TM) is the wireless industry's online information source, a FREE service of CTIA. The world of wireless is in constant motion. Stay on top of industry news and benefit from CTIA's analysis by reading http://www.wow-com.com everyday. If you wish to remove yourself from this mailing list, please send an email to <majordomo(a)nmpinc.com> with the following command in the body of your email message: unsubscribe wow-com-news-update If you wish to get in contact with the owner of the list, (i.e., if you have difficulty unsubscribing, or have questions about the list itself) please send email to <owner-wow-com-news-update(a)nmpinc.com>. Thank you. INDEX: ====== 1) FLAW FOUND IN DIGITAL WIRELESS PHONE SYSTEM 2) FROST & SULLIVAN STUDY -- LOCAL VOICE SERVICES THROWN OPEN BY TELECOM ACT OF 1996 3) WINSTAR LAUNCHES FIXED WIRELESS MULTIPOINT METROPOLITAN AREA NETWORK IN WASHINGTON, D.C. 4) LOOKING FOR A JOB IN THE WIRELESS INDUSTRY? *******WIRELESS JOB OPPORTUNITY OF THE WEEK******* http://www.wow-com.com/wworkplace/ Company: Hughes Network Systems Job Title: Senior Digital Design Engineer - Hardware Location: Germantown, MD - US Job Description: Lead digital design engineer for satellite baseband communications hardware. Position requires experience in design of digital communications subsystems such as modulators, demodulators, digital filters, NCOs and FEC encoders/decoders. Requires BSEE (MSEE preferred) and 7-10 years of digital design experience with emphasis on communication circuit design. *************************************************** =================================================== FLAW FOUND IN DIGITAL WIRELESS PHONE SYSTEM http://www.wow-com.com/professional/news Computer security engineers say they have discovered a weakness in GSM, the most widely used digital cellular phone technology in the world. Some are worried that the flaw could eventually be exploited to enable hackers to get free service by pretending to be legitimate subscribers. A software developer and two graduate students say they can obtain important security information from GSM cellular phones. Click above link for the Cellular Telecommunications Industry Association's reaction to this announcement. =================================================== FROST & SULLIVAN STUDY -- LOCAL VOICE SERVICES THROWN OPEN BY TELECOM ACT OF 1996 http://www.wow-com.com/results/professional/ Designed to create a competitive environment, the Telecommunications Act of 1996 was an invitation to companies from different market segments to vie for the same market share in the public local wireline and wireless voice services market. The question now is, how well has it worked? According to new strategic research from Frost & Sullivan U.S. Markets for Public Local Wireline and Wireless Voice Services, the Telecommunications Act of 1996 has created the most significant business opportunity since the long distance market was opened for true competition 13 years ago. Many companies are entering the local wireline services market such as interexchange carriers (IXCs), competitive access providers (CAPs), cable TV service providers (CATV) and utility companies, as well as wireless voice service providers such as cellular carriers, Personal Communications Service (PCS) providers and wireless local loop voice service providers. =================================================== WINSTAR LAUNCHES FIXED WIRELESS MULTIPOINT METROPOLITAN AREA NETWORK IN WASHINGTON, D.C. http://www.wow-com.com/professional/news WinStar Communications, Inc. announced today that it has activated a full-duplex ATM-based, point-to-multipoint (PMP) broadband, fixed wireless network carrying voice, data, and video services in Washington, D.C. The network incorporates two hub sites, expanding to three shortly, and is providing high-speed telecommunications network services over multiple sectors to four end-user buildings. According to the company, WinStar's D.C. network is demonstrating all the features of a fully networked PMP infrastructure, including bi-directional communications on a bandwidth-on-demand basis. =================================================== LOOKING FOR A JOB IN THE WIRELESS INDUSTRY? http://www.wow-com.com/wworkplace/ Join thousands of other wireless professionals searching for the perfect wireless job opportunity by logging on to CTIA's Career Center. This free online career service offers wireless industry employment opportunities and information on leading wireless employment and professional placement services. The Career Center is global, offering international job listing and direct access to the global wireless workplace. Click above to find your next wireless job opportunity! ============================= MORE WOW-COM(TM) FEATURES ============================= WOW-COM(TM) is current: Routine Updates throughout the business day WOW-COM(TM) is insightful: CTIA's unbiased analysis WOW-COM(TM) is beneficial: Find products and services in WOW-COM(TM)'s Virtual Trade Show. List open positions in the WOW-COM(TM) Career Center, receive resumes via email and hire qualified individuals. =================================================== This update sponsored by: HUGHES NETWORK SYSTEMS http://www.hns.com/ Hughes Network Systems is one of the fastest-growing digital communications companies in the world, providing world-class wireless, satellite and broadcast products to customers in over 60 countries. Today, HNS employs over 500 software engineers and 200 hardware engineers dedicated to developing our products, services and systems from our Germantown, Maryland headquarters and San Diego, California facility. Click above to learn more. http://www.joinhns.com HNS HOT JOBS CAREER INVITATIONAL. On Saturday, April 25, Hughes Network Systems (HNS) is hosting a Hot Jobs Career Invitational at our facility in Gaithersburg, Maryland (metro Washington, DC). For this 1-day event, we're bringing in the best the industry has to offer to meet with our Hiring Managers. Interview expenses will be paid for qualified candidates.

1 0