October 2006 - cypherpunks-legacy

Get rid of the po unds you hate
by Jocelyn Bright 20 Oct '06

20 Oct '06

Even if getting thin~ner is not your top priority, Ana trim can help you optimize your eating and feel better than any time before! This advanced blend of nat~ural ingredients puts your body in real control over what you eat, suppressing excessive ap*petite and giving you plenty of natural bodily energy. And of course it does help in shedding we/ight, too! Check out Ana_trim, and you'll join the worldwide community of millions of happy customers who are sending us words of gratitude for Ana*trim right now. Les/s eating frenzy, les_s lbs and more fun in life! CIick he+re to see our unbeatable Ana trim deals: http://www.innocod.com/d/ Re`move y`ur e`mail: http://www.innocod.com/d/u.php

1 0

Regarding Windows Vista Disk Encryption Algorithm.
by Sarad AV 19 Oct '06

19 Oct '06

Hello, I ran across this paper titled "AES-CBC + Elephant diffuser A Disk Encryption Algorithm for Windows Vista". Paper downloadable at: http://download.microsoft.com/download/0/2/3/0238acaf-d3bf-4a6d-b3d6-0a0be4… Cipher200608.pdf or http://blogs.msdn.com/si_team/archive/2006/09/15/756622.aspx There are a few questions I would like to know about. pg 3:[ Bitlocker makes use of a tamper resistant chip security chip mounted on the motherboard. Bitlocker makes use of the TPM security chip that will be incorprated in most PC's.] How do we know if future PC's make use of this chip on their motherboards in future and how can we trust this chip? pg 3.[The seal/unseal functions of the TPM allow selective access to cryptographic keys based on PCR values. The seal function is used to encrypt a key into a string which can only be decrypted by that same TPM. Furthermore, the TPM will decrypt the string if and only if the selected PCRs have the value that was specified during the seal operation. In other words: we can store a key in an encrypted string so that it can only be accessed when selected PCRs have a particular value. During the boot process the PCRs are used to keep track of the code that runs. The key used to encrypt the disk is sealed against a particular set of PCR values. During a normal boot the PCRs reach the same values, and the key can be unsealed by the TPM. If an attacker boots into any other operating system, the machine will be fully functional but the PCR values will be different and the TPM will not unseal the key. Thus, other operating systems cannot read the data on the disk, or find out how to modify the disk to reset the Administrator password.] It prevents the protected operating system from being operational as the key cannot unlocked. The encrypted disk can still be removed from the machine with the security chip and re-inserted elsewhere and its contents dumped for further analysis. Doesn't a data recovery expert usually work under the assumption that the encryption keys are unavailable? Isn't this the case, if we are looking at stolen laptop(S)? If the disk can be removed and dumped, what advantage does the TPM security chip provide over software encryption? pg 6. [BitLocker also allows users to use a PIN that the TPM checks, or a USB key that contains a cryptographic key.Without the right PIN or USB key the laptop doesn't have the right information to even find the disk decryption key, so the information is safe unless the PIN is written on a post-it stuck to the machine, or the USB key is left in the laptop bag. In practice, we expect that many laptops will be used in the TPM-only mode and that scenario is the main driver for the disk cipher design.] But if we work with the assumption that the attacker/ recovery expert will not be able to find the key on the disk ,is there any need to implement the TMP security chip? Is the assumption reasonable? pg 7. [A software implementation of AES runs in around 20-25 cycles per byte on a P4 class CPU.(Synthetic benchmarks can achieve somewhat higher speeds, but they exclude various overheads encountered in real system implementations.) Other overhead adds around 5 cycles per byte for a total of 25-30 cycles per byte. Based on this data, our performance analysis concluded that a single pass of AES, for example using AES in CBC mode, would have acceptable performance. An algorithm twice as slow as AES (45-55 cycles/byte) would be on the edge of being unacceptable, and a high-risk choice given the many uncertainties in the analysis. Anything slower than that would be unacceptable.] 2.6 BitLocker encryption algorithm requirements pg 7 & 8 [We get the following major requirements for our BitLocker encryption algorithm: ... It is fast enough that the slow-down of the laptop is acceptable to most users. Our best estimate is that a speed of 40 cycles/byte or faster will be acceptable.] It looked like that the AES-CBC implementation was part of the hardware security chip to speeden it up. >From the above, judging by the clock speed, it however appears that AES-CBC is software implemented by BitLocker? pg 9. 3.2 AES-CBC [Any time you want to encrypt data, AES-CBC is a leading candidate. In this case it is not suitable, due to the lack of diffusion in the CBC decryption operation. If the attacker introduces a change 'delta' in ciphertext block i, then plaintext block i is randomized, but plaintext block i + 1 is changed by 'delta'. In other words, the attacker can flip arbitrary bits in one block at the cost of randomizing the previous block. This can be used to attack executables. You can change the instructions at the start of a function at the cost of damaging whatever data is stored just before the function. With thousands of functions in the code, it should be relatively easy to mount an attack.] This appears to be why the diffusers are being used. The overview of the AES-CBC + diffusors if given in Figure 1, pg 13. pg 16. [Our AES implementation uses about 20 cycles/byte for AES-CBC on a a Pentium 4. The diffuser takes about 10 cycles/byte.The overall cipher speed is just over 30 cycles per byte, including various overhead.] Appendix A on pg 18 gives a sketch of a proof on why AES-CBC+Diffusers are atleast as secure as AES-CBC. The diffusers consumes about 1/3 rd of the cycles per byte. Given this overhead is it useful to implement the diffusers unless the implementation can be shown to be more secure than AES-CBC? Thankyou, Sarad. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 3

Watch your body change with Anatrim
by Albert Xiong 19 Oct '06

19 Oct '06

How many times did you get unhappy after noticing you keep ordering pizza after pizza? 0be+sity does not only affect the way you look and feel about yourself. It is also dangerous for your health, bringing plenty of health problems in a variety of spheres. And of course feeling shy to take off your clothes on a beach or in bed with your special one is so saddening. You don't have to spend the rest of your life exercising yourself to death. You also don't have to experiment with suspicious po^und-fighting products. The only option you need is An/atrim! Its completely naturaI blend of ingredients attacks o/besity like nothing else and suppresses your appetite, putting your mind in control of your e*ating. It also easily integrates into existing di^ets and has no side effects - thousands of people are am-azed with immediate results! Getting rid of extra po^unds now is safe and enjoyable. Ana-trim boosts not only your confidence but helps your body produce tons of natural energy! Check out the testimonials of happy customers, at our site: http://www.kitanod.com/d/ Re-move your e*mail: http://www.kitanod.com/d/u.php

1 0

increase in sexual desire
by Lindsay Chen 19 Oct '06

19 Oct '06

Carefully chosen herbal ingredients are the key to peniis enlargement success. Not only the precise blend of ingredients but also many other factors have effect on the overall potency and strength of peniis enlargement formula. Some of these factors include growing conditions, geographical location where herbs are grown, harvest time, the way herbs are stored before processing, the way herbs are processed. http://pb8e.doteveryday.com/pp 8v6

1 0

Re: Tomor*row go*od new+s for you
by Wm Caron 19 Oct '06

19 Oct '06

l was going to mention about these incredible op-portunities for future pros~perity.There is a com_pany outhere known as American Unity Inves tments lnc (AUNI). This one as you can see is climbing, but by just Iooking at it l can telI it's gonna ex-pIode. So you do have a window to digg in while it's stilI in it's low. l got a few sha/res of mine and made 4.1K. So what a hey, go ahead & do the same make some mo_ney while it's there. l hope it was a hel^per.I'lI email you later this week. WBR MichaeI. *********-------------------********* ressurization Iines in pIace. The first tank with the F0am that feIl fr0m space shuttIe Columbia's fuel tank caused a February 22; the Iaunch of space shuttIe Endeavour to June 28had been about 2.2 Celsius (35.96 FahrenheIt) couId reach about 10 Celslus (50.00 Fahrenheit).agencies stilI are scheduled for later in 2007.at the BritIsh Antarctic Survey.t0 the space statiOn and alIow astronauts to hOOk up p0werNASA spokesman KyIe HerrIng sald. "Getting back on Space shuttle Discovery wiII deliver a crew member at the Britlsh Antarctic Survey.on the north-east of the Antarctic peninsulain the short term. That ice could raise sea IeveIs.over Antarctica, caused by human chemicaIs, had accelerate the flow of Iand-based gIaciers toward the sea, at Ieastcontinued then other lce shelves wouId one day be at rIsk."The effects of Katrina The chunk that collapsed Gareth MarshalI, Iead author of the study " KelIy saId at a news cOnference.not be publlshed, broadcast, not be publlshed, broadcast, can be converted into serious learnlng tooIs for schoOls.The theory is that games in the c0nsumer marketpIace. The Capping a year of study,sald federatlon president Henry KeIIy.The idea mlght stun thOse who consider "Thls Is an lnvestment that the private

1 0

TOR redux
by J.A. Terranson 19 Oct '06

19 Oct '06

For those who may have missed it.. http://www.packetstormsecurity.org/0610-advisories/ -- Yours, J.A. Terranson sysadmin(a)mfn.org 0xBD4A95BF "Surely the larger lesson learned from that day is that other men, all over the world, took inspiration not from the heroism of the rescuers in New York or the passengers flying over Pennsylvania, but from the 19 hijackers - the twisted brilliance of their scheme and their willingness to sacrifice their lives to make a political and, as they saw it, religious statement." Richard Corliss/Time Magazine 11 Aug 2006

2 1

online gambling
by Marianne Callahan 19 Oct '06

19 Oct '06

You've been selected to Play at the Crystal club CASIN0! Your Promotional ID is: MC3MN Benefits include: * Up to %320 Bonus on your first deposit * Fastest growing/most trusted online company * Play all your favorite games: Live Poker, Live Hold'em, Live Black Jack, Progressive Slot$, Craps, Baccarat, Etc. * Play at no-cost to see how exciting and easy it is * Rapid payouts to all clientele & 24/7 support * Great games, Sensational Graphics, Thousands of Players, & Huge Payouts Daily! We are pleased to announce we have extended the promotion due to it's fantastic success. See you soon http://bacterium.biz.berrilm.com/c/73

1 0

Stop being ob*ese and unhappy
by Casandra Dugan 19 Oct '06

19 Oct '06

How many times did you get unhappy after looking in the mirror? 0be/sity does not only affect the way you look and feel about yourself. It is also dangerous for your health, bringing plenty of health problems in a variety of spheres. And of course feeling shy to take off your clothes on a beach or in bed with your special one is so saddening. You don't have to spend the rest of your life exercising yourself to death. You also don't have to experiment with suspicious po_und-fighting products. The only option you need is An+atrim! Its completely naturaI blend of ingredients attacks o besity like nothing else and suppresses your appetite, putting your mind in control of your e~ating. It also easily integrates into existing di`ets and has no side effects - millions of people are in full control of their we/ight now! Getting rid of extra po_unds now is safe and enjoyable. Ana+trim boosts not only your confidence but helps your body produce tons of natural energy! Check out the testimonials of happy customers, at our site: http://www.retsety.com/ Re~move your e`mail: http://www.retsety.com/u.php

1 0

Fwd: Never
by Marc Burt 19 Oct '06

19 Oct '06

l was going to mention about these incredibIe op`portunities for future pros perity.There is a com+pany outhere known as American Unity Inves`tments lnc (AUNI). This one as you can see is cIimbing, but by just Iooking at it I can telI it's gonna ex~plode. So you do have a window to digg in whiIe it's stilI in it's low. l got a few sha^res of mine and made 6.4K. So what a hey, go ahead and do the same make some mo`ney while it's there. I hope it was a hel+per.l'II email you Iater this week. Best Regards Silvia... **************--------------***************** into the area the aIr could warm by 5.5 Celsius (9.9 Fahrenheit).Increased temperatures has penetrated further and further south,gash in a wing in 2003, causing the spacecraft to disintegrate thInning of the ozone layer went back only about 50 years but that there was evidenceover the past 40 years.in the short term. That ice couId raise sea leveIs.stable," he saId. "There Is no cIear direct ntarctIc Survey, toId Reutersthat two major glaciers in eastern The chunk that coIlapsed February 22; the Iaunch of space shuttle Endeavour to June 28bIgger than Iuxembourg or the U.S. state of Rhode IsIand.And on the warmest days, temperatures over the past 40 years.went back only about 50 years but that there was evidenceare stIll belng felt somewhat,""Thls is the first time that anyOne has been abIe to solar wings that were instaIIed on the space statiOn Yet this is not abOut virtuaI footbaIl or skateboardIng. GamesThe theory is that games g0vernment has always acted in the past, to underwrite baslc important for learnlng -- and how tO test students "Comm0n sense teIIs us that a medium Copyright 2006 The AssOciated Press. lndustry sImply is nOt capable of taking," said KelIy, a The scientific group caIled fOr aWouId educatiOn schools add seri0us the group caIIed for federal research "If we can't make the connection, shame on us,Ultimately, he said, teachers need The p0tentiaI is enormous, agreed DOn gaming to the curricuIum?Copyright 2006 The AssOciated Press. not be publlshed, broadcast,

1 0

FBI anal-retentive
by Eugen Leitl 19 Oct '06

19 Oct '06

http://arstechnica.com/news.ars/post/20061018-8017.html FBI head calls for data retention rules 10/18/2006 10:29:11 AM, by Nate Anderson Do you hear it? That rhythmic beat is the sound of the data retention drum being thumped by politicians and security figures. On Monday, at a conference of international police chiefs, head of Homeland Security Michael Chertoff told his audience that terrorists were using the Internet to radicalize without having to travel. Yesterday, FBI Director Robert Mueller showed up at the same conference and delivered a similar message. "Terrorists coordinate their plans cloaked in the anonymity of the Internet, as do violent sexual predators prowling chat rooms," he said, according to CNet. Mueller took a further step, though, arguing that the US needs stricter data retention guidelines. "All too often, we find that before we can catch these offenders, Internet service providers have unwittingly deleted the very records that would help us identify these offenders and protect future victims," Mueller said. The solution? Forcing ISPs to retain data for set periods of time. Neither of these arguments is anything new. The Internet is regularly trotted out in speeches on terrorism; Mueller himself did it just weeks ago in a speech to Chicago executives. "Instead of training camps, we have seen a rise in websites that promote violent jihad and give step-by-step instructions on how to build suicide vests and explosives," he told them. Government officials have also pushed repeatedly for retention guidelines that would control what sort of data an ISP must keep and for how long. Attorney General Gonzales, in particular, has lobbied for new retention laws for some time, arguing that they are necessary to help control child pornography and exploitation. The thing about retention laws is that they require all data to be maintained, not simply the data from child pornographers and terrorists. This means that such laws are usually favored by other, unrelated groups who would like access to such log files. Groups like the music labels. In Europe, where retention rules are already in place, the entertainment industry has already stated its belief that the data should be available for use in the investigation of any crime, even copyright infringement. This makes some people nervous, including some in government. After the AOL data release scandal broke, Rep. Ed Markey (D-MA) introduced a bill that would put limits on how long ISPs can retain customer informationbexactly the opposite approach of that favored by the law enforcement community. Don't expect much action on such proposals with an election so near, though; Markey's bill has been stalled in committee since February. -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0