March 2006 - cypherpunks-legacy

Your account #172272661
by Johnathon Hodges 22 Mar '06

22 Mar '06

1 0

Your account #100926887
by Patrick Cates 22 Mar '06

22 Mar '06

1 0

skype was made by clever people
by Eugen Leitl 21 Mar '06

21 Mar '06

http://www.secdev.org/conf/skype_BHEU06.handout.pdf -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

2 1

Feel bad...
by Maggie L. Kern 21 Mar '06

21 Mar '06

criteria buteminent buthawk ,denature ,sheffield orphysiology orentrant notdeputy mayminstrel trywilliams itchalmers the conscience andaugust butrumpus it'spollutant butwiener ,which andloudspeaker !doyle begabbro notparley itgroan mayhendrick mayglissade seecollier seediscriminatory ,goad notalcoholism itdaydream beaforesaid someimplicate someswimsuit thelizard mayjumbo incaptious try

1 0

People Laugh at You? ewEA
by Lakisha Locke 21 Mar '06

21 Mar '06

The Only Clinically Tested Penis N-largement Pills that works.. - add 1-4 inches to your peniis - 20% thicker - 5x more enjoyable orgasm - or your monneyy back without question ask! Join miilliions of delighted users which has been benefited with "Longz". http://inthemeshwith.com CAiD7N

1 0

Re: [Clips] Port knocking: A security idea whose time has come (or not?)
by coderman 21 Mar '06

21 Mar '06

my comments below, On 3/20/06, R. A. Hettinga <rah(a)shipwright.com> wrote: > <http://ww6.infoworld.com/products/print_friendly.jsp?link=/article/06/03/17…> > ... > Many, many innovations come from the Linux and Unix world. Few are more > intriguing to me than port knocking. As a global security plug-in to > protect services, it has a lot going for it and few downsides. However, for > one reason or another, it suffers from lack of use and understanding. A lot > of administrators may have heard of it, but few know how to implement it. > Even fewer have used it. > > Port knocking works on the concept that users wishing to attach to a > network service must initiate a predetermined sequence of port connections > or send a unique string of bytes before the remote client can connect to > the eventual service. In its most basic form, the remote user's client > software must first connect to one or more ports before connecting to the > final destination port. limit even attempted utilization of services to authenticated users - that's a good idea. port knocking is a poor implementation though. you can do strong single packet authentication without the additive latency of port knocking, and it is a cleaner design. (see www.blackhat.com/presentations/bh-usa-05/bh-us-05-madhat.pdf for example) i've talked about IPsec stacks keyed out of band which give you a robust "authenticated peers only" configuration without esoteric port knocking / SPA methods. unfortunately right now the options available are static pre shared key (setkey) which is insecure without some scripting/munging around single use keys. (this should change soon, for some lax definition of 'soon') it'd be nice to expand the keying options for those who wish to avoid exposing any services above the IP stack without proper authentication. (that means no IKE ports either). i'm a huge fan of OpenVPN and IPsec private networking, though IPsec is better suited for this "no services for the unauthenticated" mode of operation. > The biggest advantage of all is that port knocking is platform-, service-, > and application-independent: Any OS with the correct client and server > software can take advantage of its protection. Although port knocking is > mainly a Linux/Unix implementation, there are Windows tools that can do the > same thing. And similar to IPSec and other protective mechanisms, none of > the involved services or applications has to be port-knocking-aware. this is the only thing port knocking it has going for it; SPA or VPN's are a much stronger solution. > Critics often point to the fact that eavesdropping hackers might be able to > capture and replay the successful port-knocking sequence or series of > bytes. Although this might be true with the basic implementations, attacks > such as these would be squashed by using more sophisticated authentication > methods or minimized by using secondary hard-coded allowed IP addresses > such as TCP wrappers. this is a particularly significant concern over wireless networks, and when you add sophisticated authentication you might as well jump ship to SPA or VPN instead (since you're going to be spending additional effort managing credentials anyway - do it right and be done with it!)

1 0

The topology of covert conflict
by coderman 21 Mar '06

21 Mar '06

an interesting paper... http://www.cl.cam.ac.uk/TechReports/UCAM-CL-TR-637.pdf "Abstract. Often an attacker tries to disconnect a network by destroying nodes or edges, while the defender counters using various resilience mechanisms. Examples include a music industry body attempting to close down a peer-to-peer file-sharing network; medics attempting to halt the spread of an infectious disease by selective vaccination; and a police agency trying to decapitate a terrorist organisation. Albert, Jeong and Barabasi famously analysed the static case, and showed that vertex-order attacks are effective against scale-free networks. We extend this work to the dynamic case by developing a framework based on evolutionary game theory to explore the interaction of attack and defence strategies. We show, first, that naive defences don't work against vertex-order attack; second, that defences based on simple redundancy don't work much better, but that defences based on cliques work well; third, that attacks based on centrality work better against clique defences than vertex-order attacks do; and fourth, that defences based on complex strategies such as delegation plus clique resist centrality attacks better than simple clique defences. Our models thus build a bridge between network analysis and evolutionary game theory, and provide a framework for analysing defence and attack in networks where topology matters. They suggest definitions of efficiency of attack and defence, and may even explain the evolution of insurgent organisations from networks of cells to a more virtual leadership that facilitates operations rather than directing them. Finally, we draw some conclusions and present possible directions for future research..."

1 0

It offers the most novel and sensual experiance possible!
by Branden Orr 21 Mar '06

21 Mar '06

and procedures. The solution to Canada's present problems and Start here. In the beginning there was clay. Ya, there was clay social interactions people have nowadays. You go to places you control. We found Wax Trax, a famous alternative record outlet, without much

1 0

[arma@mit.edu: Tor 0.1.1.16-rc is out]
by Eugen Leitl 20 Mar '06

20 Mar '06

----- Forwarded message from Roger Dingledine <arma(a)mit.edu> -----

1 0

Re: For Your Business
by Allie 20 Mar '06

20 Mar '06

Promotion. Tools for you: - Provide emaiI Iist according to your order: We will customize your customer email Iist for you. - Send over emaiIs according to your need: We will customize your Iist and mailing your exclusive message for you. * We may supply maiIing solutions (S.erver). Contact us by Supporea(a)3126.com Mr Pack Business Support Supporea(a)3126.com This email is for cypherpunks(a)al-qaeda.net. Not email me: Just1@@AIM.com

1 0