December 2003 - cypherpunks-legacy

Re: Nym Servers & cyberpromo
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Clever Computers (http://www.clever.net) is worth a look. More expensive than what's been mentioned so far, but not extraordinarily so. They're pretty flexible and I suspect that the sysadmins would be discreetly sympathetic to the cause.

1 0

1996 Wiretap Report
by Eric Blossom 17 Dec '03

17 Dec '03

I've been enjoying the 1996 Wiretap report. A couple of my favorite observations are: (1) Of the 1149 intercept applications authorized for 1996, 821 were for "Narcotics" and 114 were for "Gambling". I.e., 81% of the authorized intercepts were targeted at good old fashioned entrepreneurs. (2) In the past 11 years (1986 - 1996) a total of 9,912 intercept applications were approved. Of that number 5 (five!) were for "Arson, explosives, and weapons." Unless they've classified wiretaps against "suspected terrorists" in the "Other" category, it looks as if the LEOs don't think (targeted) wiretaps are useful for stopping small groups of modestly skilled people bent on blowing things up. No Shit.

1 0

[NTSEC] Plaintext passwords exist in registry (fwd)
by Ray Arachelian 17 Dec '03

17 Dec '03

=====================================Kaos=Keraunos=Kybernetos============== .+.^.+.| Ray Arachelian | "Boy meets beer. Boy drinks Beer, |./|\. ..\|/..|sunder(a)sundernet.com| Boy gets another beer!" |/\|/\ <--*-->| ------------------ | |\/|\/ ../|\..| "A toast to Odin, | For with those which eternal lie, with |.\|/. .+.v.+.|God of screwdrivers"| strange aeons, even death may die. |..... ======================== http://www.sundernet.com ========================= ---------- Forwarded message ---------- Date: Wed, 28 May 1997 09:17:53 -0700 From: Bill Stout <stoutb(a)pios.com> To: PHILIPB(a)Omnicell.com, chris(a)auditek.com, ntsecurity(a)iss.net Subject: [NTSEC] Plaintext passwords exist in registry Most facinating what you find if you look. The registry does store some passwords in plain text. The importance of the passwords you do find depends on your installation. I found 'password' and 'username' entries at the below locations, but not much software was installed on these NT boxes. Searching the NT registry for my password string did not did not display anything, searching the W95 registry for my specific password string found it in many places: password locations: hkey_local_machine\system\controlset001\services\gophersvc\parameters ...\controlset002\" ...\curentcontrolset\" ...\msftpsvc\parameters ...\w3svc\parameters\ username locations: \hkey+local_machine\software\microsoft\windowsnt\currentversion\winlogon\ ...\system\controlset001\services\bh\parameters ...\controlset002\" ...\curentcontrolset\" ...\services\gophersvc\parameters\anonymouseusername ...\logsqlusername ...\msftpsvc\parameters\anonymoususername ...\logsqlusername ...\w3svc\parameters\anonymoususername ...\logsqlusername _____________________________________________________________________________ Bill Stout (Systems Engineer/Consultant) stoutb(a)pios.com Pioneer Standard (Computer Systems & Components) http://www.pios.com/ San Jose, CA (Location of 1 of 52 U.S. offices) (408) 954-9100 *My opinions do not reflect that of the company, and visa-versa, thankfully.*

2 1

Time Magazine: "No Privacy on the Web" (6/2/97)
by Declan McCullagh 17 Dec '03

17 Dec '03

******** >Date: Wed, 28 May 1997 16:17:17 -0400 >To: fight-censorship-announce(a)vorlon.mit.edu >From: Declan McCullagh <declan(a)well.com> >Subject: FC: Time Magazine: "No Privacy on the Web" (6/2/97) >Sender: owner-fight-censorship-announce(a)vorlon.mit.edu >Reply-To: declan(a)well.com >X-FC-URL: Fight-Censorship is at http://www.eff.org/~declan/fc/ > >In this week's Time Magazine (p64-65), you'll find a privacy story that >Noah and I worked on: > >http://www.pathfinder.com/time/magazine/1997/dom/970602/technology.no_priva… >n >.html > >Then there's the sidebar with our report on how much info we were able to >dig up on Sen. Dianne Feinstein (D-CA), who has introduced legislation that >would slow the spread of Social Security Numbers. Yes, we found her SSN, >unlisted phone number, and home address, but we had to pay for some of it: > >http://www.pathfinder.com/time/magazine/1997/dom/970602/technology.my_wek.h… > >-Declan > > > >-------------------------------------------------------------------------- >This list is public. To join fight-censorship-announce, send >"subscribe fight-censorship-announce" to majordomo(a)vorlon.mit.edu. >More information is at http://www.eff.org/~declan/fc/ >

3 2

CyberPatrol bans Computer underground Digest
by Declan McCullagh 17 Dec '03

17 Dec '03

********* >Date: Wed, 28 May 1997 17:14:43 -0400 >To: fight-censorship-announce(a)vorlon.mit.edu >From: Declan McCullagh <declan(a)well.com> >Subject: FC: CyberPatrol bans Computer underground Digest >Sender: owner-fight-censorship-announce(a)vorlon.mit.edu >Reply-To: declan(a)well.com >X-FC-URL: Fight-Censorship is at http://www.eff.org/~declan/fc/ > >For as long as I can remember, Northern Illinois University criminal >justice prof. Jim Thomas has been editing an online newsletter called >Computer underground Digest. In it, he's chronicled the hacker wars, the >crypto battles, and the fight over the CDA. It's been an invaluable >resource to the Net-community. In fact, you'll see a lot of >fight-censorship posts and articles end up in CuD. > >Now it's been blocked by censorware. Jim's offense? According to >CyberPatrol, he's a "Militant Extremist." > >-Declan > >********** > >Date: Mon, 26 May 1997 22:45:26 -0500 (CDT) >From: Jim Thomas <jthomas3(a)sun.soci.niu.edu> >To: fight-censorship(a)vorlon.mit.edu >Subject: CyberPatrol bans CuD & Crypt Newsletter > >On Mon, 26 May 1997, Declan McCullagh wrote: > >(quoting from George Smith): > >> Huh! Thanks to your page I've just found out Crypt Newsletter is >> banned by the fine folk at Cyber Patrol for being "militant extremists." > >George also forwarded the following to me: > > Jim: > > I suppose you already know this but I just found out Crypt Newsletter > and CuD were blocked by CyberPatrol and NetNanny. > > Crypt Newsletter for being Militant/Extreme > CuD for being Militant/Extreme/violence/Profanity > >Whatever else CuD might be, I'm at a loss to even guess how >"militant," "extreme," and "violent" characterize it. But, some >profanity does slip in, especially in legal documents and similar >resources. > >jt > > >-------------------------------------------------------------------------- >This list is public. To join fight-censorship-announce, send >"subscribe fight-censorship-announce" to majordomo(a)vorlon.mit.edu. >More information is at http://www.eff.org/~declan/fc/ >

1 0

Re: Re: CRACKIT.DAT increased to 50,000 bytes.
by DataETRsch＠aol.com 17 Dec '03

17 Dec '03

Hi, In a message dated 97-05-28 04:39:24 EDT, you write: << Actions such as yours inspire trust in the cryptographic software that you write, if it passes the review. >> Thank-you very much. By the way, I realize that increasing the size of the encrypted file used for the contest is unnecessary and actually makes decryption easier in most cases. I'll let everyone @ toad.com know that the original encrypted message was "cut" and "pasted" over and over again to increase the final message to 50,000 bytes. So, there's is *decrypted* data repetition. (I know, it's was a stupid thing to do, but I believe in VSA2048's security, obviously.) However, as you probably have discovered, none of the *encrypted* data repeats or show any congruent/linear pattern. (In fact, there is no pattern whatsoever.) Also, along with the simple decryption tool, a simple flowchart of VSA2048 will be released that will show that VSA2048 is NOT is as simple as many seem to think. (No, it's not just a random XOR-er. Take a look at the VSACMProcessOperation and VSACMInternal functions. If it were simply a random XOR-er, the data could probably be decrypted in a few days, if even that long.) I truly hope that all of the cypherpunks out there are working on cracking the CRACKIT.DAT file used for the decryption contest or have worked on decrypting it but just gave up. (Contest details will be posted every now and then to cypherpunks(a)toad.com and other crypto-related mailing lists.) I realize that many of you out there live to take snake-oil crypto off the face of the planet. Not that it is snake-oil, but take a shot at hacking VSA2048. (Use your Crays, Delta, UNIXs, sync-ed Pentiums, mainframes, whatever. We don't care.) Regards, DataET Research

1 0

Re: Re: CRACKIT.DAT increased to 50,000 bytes.
by DataETRsch＠aol.com 17 Dec '03

17 Dec '03

Hi, In a message dated 97-05-28 04:39:24 EDT, you write: << Actions such as yours inspire trust in the cryptographic software that you write, if it passes the review. >> Thank-you very much. By the way, I realize that increasing the size of the encrypted file used for the contest is unnecessary and actually makes decryption easier in most cases. I'll let everyone @ toad.com know that the original encrypted message was "cut" and "pasted" over and over again to increase the final message to 50,000 bytes. So, there's is *decrypted* data repetition. (I know, it's was a stupid thing to do, but I believe in VSA2048's security, obviously.) However, as you probably have discovered, none of the *encrypted* data repeats or show any congruent/linear pattern. (In fact, there is no pattern whatsoever.) Also, along with the simple decryption tool, a simple flowchart of VSA2048 will be released that will show that VSA2048 is NOT is as simple as many seem to think. (No, it's not just a random XOR-er. Take a look at the VSACMProcessOperation and VSACMInternal functions. If it were simply a random XOR-er, the data could probably be decrypted in a few days, if even that long.) I truly hope that all of the cypherpunks out there are working on cracking the CRACKIT.DAT file used for the decryption contest or have worked on decrypting it but just gave up. (Contest details will be posted every now and then to cypherpunks(a)toad.com and other crypto-related mailing lists.) I realize that many of you out there live to take snake-oil crypto off the face of the planet. Not that it is snake-oil, but take a shot at hacking VSA2048. (Use your Crays, Delta, UNIXs, sync-ed Pentiums, mainframes, whatever. We don't care.) Regards, Jeremy Yu-Ramos DataET Research

1 0

(no subject)
by mbm 17 Dec '03

17 Dec '03

1 0

Pleeease help!
by Rui Guedes 17 Dec '03

17 Dec '03

I am living in Portugal and use a PowerMacintosh. Is there any way of using the wonderful Mixmaster mail system or any other safe method? Thanks in advance, Rui Guedes

1 0

SSZ status
by Jim Choate 17 Dec '03

17 Dec '03

Hi, SSZ seems to be stable since the power was restored where my ISP was located. There should be no further service interruptions expected. Jim Choate CyberTects ravage(a)ssz.com

3 2