December 2003 - cypherpunks-legacy

Re: lotus notes id file
by Joel O'Connor 17 Dec '03

17 Dec '03

Sorry guy, no gettingout of dodge on this one. There are no utilities, no programs, no way out. The only way to do this is to copy the "mail file" which will be in the c:\notes\data directory and blow away the id and recreate it. Then after this, copy the mail file back into the data directory. This will recreate your desktop view with the original folders and messages that you had. Otherwise, you're screwed. ---John <needshelp(a)mindspring.net> wrote: > > Hello > I'm using lotus notes and I have a big problem. I have a id file with no > password. How can I get a password for it or reset it. Is there some type of > utility or something someone knows of?I have been told that I'm out of luck > unless I have the original. > > > John... > > > > == Ogre bounces like sonar. . .Peace. Ogre _________________________________________________________ DO YOU YAHOO!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

No Subject
by monitor＠millenium.com 17 Dec '03

17 Dec '03

10/28/98 Y2K Solution! 8 Pine Circle Dr., Silicon Valley, Calif. OTC Company "TCFG" 21 st. Century Frontier Group has through several members of their administrative research department leaked vital information about their companies efforts... Everyone was tight lipped and interviews were refused, and through un-named sources we have learned that the technology and software solution are in the process of being patented! In over 1640 trials, using various data systems the use of the new technology and software solved the Y2K problem 100% of the time. This small publicly traded company "TCFG" which is just 3 years old is through various sources now negotiating with the "Big Boys"! "TCFG" the letters to look for.....

1 0

No Subject
by advisor＠compuserve.com 17 Dec '03

17 Dec '03

10/28/98 Y2K Solution! 8 Pine Circle Dr., Silicon Valley, Calif. USA OTC Company "TCFG" 21 st. Century Frontier Group has through several members of their administrative research department leaked vital information about their companies efforts. Everyone was tight lipped and interviews were refused, and through un-named sources we have learned that the technology and software solution are in the process of being patented! In over 1640 trials, using various data systems the use of the new technology and software solved the Y2K problem 100% of the time. This small publicly traded company "TCFG" which is just 3 years old is through various sources now negotiating with the "Big Boys"! "TCFG" the letters to look for!

1 0

Manage your Assets, Simplify your Life---- Extensis Portfolio 4.0
by listmaster＠extensis.com 17 Dec '03

17 Dec '03

Introducing the Newest Version of our Asset Management Software-Extensis Portfolio 4.0 http://www.extensis.com/products/Portfolio/ - Organize your assets -images, text, photos, multimedia- for instant-access - NEW! Import information from other databases - NEW! Robust scripting now facilitates database and internet publishing - NEW! Slideshow feature provides full-screen display of images - NEW! Scalability with Portfolio Server 4.0 ensures lightening-fast access for workgroups Extensis Portfolio 4.0 and Portfolio Server 4.0 will help you manage and organize your digital assets. Digital assets include digital images, artwork, presentations, multimedia, photos, or other graphic documents that need to be organized and shared. Extensis Portfolio 4.0 offers you a place to catalog, view, manage, select, search and even share digital content among multiple users. Find the images you need, find them fast, share them with partners around the globe all through your network or the Web with NEW Portfolio 4.0 and Portfolio Server 4.0. Create database fields that match your business with Portfolio's unlimited custom fields. Then, import your assets from other databases for a centralized asset management system. With Portfolio's advanced searching features, you will never hunt-and-peck for your images again. And with Portfolio's built-in scripting you can automate regular tasks, such as Internet and database publishing-in no time. Portfolio 4.0 is the only scalable solution that allows you to start with as few as one user (using the stand-alone client software) and add more users (by adding additional clients; without requiring a server) as your needs grow. For larger workgroups, the NEW Portfolio Server 4.0 will enable dozens of users to access your assets without a loss of performance. Portfolio Server can be inserted into a workgroup at any time, without the need to replace the existing Portfolio 4.0 client (single-user) versions. Plus, the NEW Portfolio Server 4.0 arrives with 5 free copies of Portfolio 4.0- a value. Streamline your work, build your assets, and simplify your life-Extensis Portfolio 4.0 To download a FREE demo, get information, or to buy on-line, visit http://www.extensis.com/products/Portfolio/ Or call Extensis at 1(800) 796-9798 Ext. 404 or (503) 274-2020 Ext. 404. Portfolio 4.0 System Requirements: Macintosh Mac OS 7.5.3 - 8.5 PowerPC, 32 MB of RAM Windows Windows 95, 98 or NT 4.0 Pentium, 32 MB of RAM Portfolio Server 4.0 System Requirements Windows Win NT 4.0, Pentium, 32 MB RAM Macintosh Macintosh version available late 1998 PS. We have made every effort to ensure this message is being sent only to people who have expressed interest in Extensis products. If we have sent this to you in error, please accept our apologies and reply with "REMOVE" in the subject line for automatic exclusion from future communications. If you know someone who would like to be on our mailing list have them send an email to listmaster(a)extensis.com with "ADD" in the subject line and their email address in the body. P.P.S. This message is intended for North American customers. If you are located outside of North America and have received this message, please visit www.extensis.com/purchase/ to find the nearest local distributor in your country.

1 0

Re: lotus notes id file
by Diederik Smets 17 Dec '03

17 Dec '03

IF the owner of the id also entered an internet password AND it is the same as the one for the id file, then you can use brute force (dictionairies) to try and crack it. Get the encrypted value in the properties>fields>HTTPPassword of the persons document in the PNAB and compare it to the results of the @password() function. Alternatively, do a search for old id files which might still be accessible with the 'default' password (if you know which one that is), but you won't be able to access servers that have the 'check password' option enabled. If you need to access a local DB that has 'enforce a consistant ACL across all replicas' enabled, just use another id and add that person's name with the necessary roles to the ACL via LotusScript. Diederik Hello I'm using lotus notes and I have a big problem. I have a id file with no password. How can I get a password for it or reset it. Is there some type of utility or something someone knows of?I have been told that I'm out of luck unless I have the original. John...

1 0

No Subject
by concerned＠aol.com 17 Dec '03

17 Dec '03

10/28/98 Y2K Solution! 8 Pine Circle Dr., Silicon Valley, Calif. USA OTC Company "TCFG" 21 st. Century Frontier Group has through several members of their administrative research department leaked vital information about their companies efforts. Everyone was tight lipped and interviews were refused, and through un-named sources we have learned that the technology and software solution are in the process of being patented! In over 1640 trials, using various data systems the use of the new technology and software solved the Y2K problem 100% of the time. This small publicly traded company "TCFG" which is just 3 years old is through various sources now negotiating with the "Big Boys"! "TCFG" the letters to look for.......

1 0

Speed records, and brute force state of the art.
by Harvey Rook (Exchange) 17 Dec '03

17 Dec '03

>From the New York Times... WASHINGTON-The Energy Department will take delivery on Wednesday of what the Government says is the world's fastest computer, capable of a peak performance of 3.88 trillion calculations, or teraflops, a second. Just to simplify things, let's assume that 1 flop == 1 decryption. I know that's not true, but it's very close, and it's certainly less than one order of magnitude off. So, with this assumption how long does it take to break various key sizes? 56 bits -- 2^56 / 3.88E12 = 5.2 hours 64 bits -- 2^64 / 3.88E12 = 55 days 80 bits -- 2^80 / 3.88E12 = 9873 years 128 bits -- 2^128 / 3.88E12 = 2.8E18 years. And now you know. Harv.

1 0

Re: MIB Subponeas (fwd)
by Anonymous 17 Dec '03

17 Dec '03

1. You have the option of telling them to leave your property at once (if you can pull this at work, e.g., if you're the boss). 2. You do not have to identify yourself when asked, unless you're driving a car in public. You do not have to accept a subpeona. Uncertified postal mail is datagrams and its surprising how many e.g., jury notices are dropped. I remember my dad sending me to tell the man who drove up to the house (to serve my dad, a lawyer) to get lost. Pretty cool thing for an 8 year old to do. If you have the presence of mind to remember these things, you can at least get advance notice, and send your blue dress to the cleaners. At 04:56 PM 10/27/98 -0600, Jim Choate wrote: >The only issue that took me by >surprise was two officers showing up at work unannounced. It took me till >the next day to burn off the heeby-jeebies from that.

1 0

Re: log files (was: Re: dbts: Cryptographic Dog Stocks, The Dirigible Biplane, and Sending the Wizards Back to Menlo Park )
by Steve Bellovin 17 Dec '03

17 Dec '03

In message <3.0.1.32.19981028093825.00a3f2d0(a)pop.bos.platinum.com>, Hal Lockhar > > I hear you saying, "but what if the guy is trying to break into my system." > I would argue, that if you are using strong cryptographic authentication > (whether his identity can be mapped to a human being or not) then either 1) > he will fail, in which case you don't care or 2) he will succeed, in which > case he must have used some technique like stealing a key which cannot be > detected by monitoring. Why do you assume that the flaw that lets the bad guy in is cryptographic? I recently analyzed every CERT advisory ever issued. 85% of them described problems that crypto couldn't fix. Buffer overflow is the culprit du jour, but it's hardly the only one. (This year, the prize for second place -- admittedly a distant second -- went to crypto modules.) > > I raise this point, because I see it as part of a current trend to resist > stong security measures in preference to weak ones. The current industry > facination with weak measures, like firewalls and intrusion detection > systems has caused some people to resist the introduction of strong > measures, such as cryptographic authentication and data protection. The > most popular example of this is the foolish practice of putting an SSL > server, with its vital server private key, outside the firewall in a DMZ. That's only a flaw if you assume that there are other weak points on the Web server that a firewall can protect. If you lock down the host so that only port 80 is exposed (and maybe a cryptographically protected administrative port), what good does the firewall do? The weakest point is probably the CGI scripts, and those have to be exposed in any event. > > But I have also heard system administrators protest the introduction of > cryptographic solutions because some current half measure will no longer > work. There are even misguided individuals who have proposed putting > master decryption keys at vulnerable locations like border routers, so that > messages can be inspected in the fly. There are no panaceas, there is no single technology (and that emphatically includes crypto) that will solve this problem. Defense in depth is our best hope, which means firewalls plus crypto plus IDS plus better operating systems and programming languages. Most of all, it means engineering a solution -- making the right set of tradeoffs, even if unobvious. Let me give an analogy. On most electrical equipment, the ground pin is useless -- *unless* there has been another insulation or air gap failure within the device, a failure that would render the frame "hot". But because of the ground pin, such a failure will instead short the hot lead to ground, tripping the breaker. It thus takes two failures to electrocute someone. *But* -- toasters and other devices with exposed heating elements don't use this technique. Why not? Well, with an exposed electrode, the probability of direct contact with a live wire is much greater. And if you ground the frame of the toaster, there's now a direct, high-quality path to ground that in turn is in contact with the other hand of the poor fool who is poking at a piece of bread with a fork. In other words, what's a safety mechanism in your refrigerator is a danger in your toaster -- and sometimes, that can be true of crypto as well. For another analogy, think of insecurity as entropy. You can't destroy it, but you can move it around. Using crypto moves the problem from the (in)security of the links to the (in)security of the keys. If you can't protect your keys -- and that generally takes much more than crypto -- using cryptography hasn't bought you anything.

3 2

Re: MIB Subponeas (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Wed, 28 Oct 1998 18:33:59 +0100 > From: Anonymous <nobody(a)replay.com> > Subject: Re: MIB Subponeas (fwd) [various pieces of good advice in dealing with LEA's deleted] It wasn't so much that they were IRS or whatever, it was they showed up in the middle of my crit-sit patch regression and completely distracted my attention from working on the patch for the customer. It was something *else* to deal with in the priority 1 bin. ____________________________________________________________________ To know what is right and not to do it is the worst cowardice. Confucius The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0