July 2008 - cypherpunks-legacy

Cheap Price Degree/bacheelor/MasteerMBA/PhDD Certificate orfivs j9ni
by Merrill Salina 11 Jul '08

11 Jul '08

It cost you Nothing (Yes! $0) to give us a call, We Will contact you back Absolutely No Exams/tests/classes/books/interviews No Pre-School Qualification needed! ----------------------------- For USA: 1-718-989-5740 0utside USA: +1-718-989-5740 ----------------------------- Degree, bacheelor, MasteerMBA, PhDD available In the field of your choice that's Right, you can even become a Doctor & receive All the benefits that Comes with it! Please Leave Below 3 Info in Voicemail: 1) Your Name 2) Your COUNTRY 3) Your PHONE No. (with CountryCode) Call Now! 24 Hours a day, 7 days a week to recieve your call ----------------------------- For USA: 1-718-989-5740 0utside USA: +1-718-989-5740 ----------------------------- Our staff will Get back to you in 1-3 working days

1 0

All Your Breast Enlargement Info From Top Breast Enlargement Sites.
by Pasquale Mejia 10 Jul '08

10 Jul '08

"I couldn't believe that my Paul gained an incredible 3 inches in just 2 short months. Now that he's longer and also thicker, making love is so much more pleasurable, and I come a lot more easily" Lindsay, California, USA Be the stud in 2008, and achieve all your dreams of super size! http://galebeen.com/

1 0

Luxurious costume replica watches at ...
by Leonel Haley 10 Jul '08

10 Jul '08

Have you always dreamed of owning your own high dollar famous brand name watch? Looking for a watch? Visit Replica Classics Replica Rolex Swiss Watches http://viceszap.com/

1 0

Relax. Take a Deep Breath We have the answers you seek.
by Maxwell Herring 10 Jul '08

10 Jul '08

"Ever since I started on your herbal supplement, Sharon says sex is so much more pleasurable for her, and she comes much more easily". David, Florida, USA Get your free bottles today, and change your life - why wait? http://pillmake.com/

1 0

Xamax, Valiun, Phentermime, Ambiem from $1.20/pill wyhhj 5f
by Lillie T. Grimes 10 Jul '08

10 Jul '08

^WholeSale Price F-D-A Approved Pharmacy^ ^FREE EMS SHIPPING to All Countries^ ^ Same Day Delivery ^ Wholesale Price Meds: ValiumB XanaxB ViagraB PhenterminB AmbienB Cia|iisB AtivanB LevitraB /\ No Question asked (Unlike many other sites which need u to fill up long questions) /\ No Label on the parcel (Your privacy is protected! Nobody know what meds u ordered) Please Visit below link to order your pills now: http://dhbk.ftlogx.com

1 0

postel's anonsec is IETF draft now
by Eugen Leitl 10 Jul '08

10 Jul '08

Just got word from the cryptography list: http://www.ietf.org/internet-drafts/draft-ietf-btns-prob-and-applic-07.txt -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Proven Effective for 72 Hours Free Trial Sample Available Today
by Alba Chu 10 Jul '08

10 Jul '08

"Ever since I started on your herbal supplement, Sharon says sex is so much more pleasurable for her, and she comes much more easily". David, Florida, USA Get your free bottles today, and change your life - why wait? http://beenwhite.com/

1 0

FARC pwned by MITM
by Eugen Leitl 10 Jul '08

10 Jul '08

http://www.wired.com/politics/security/commentary/securitymatters/2008/07/s… How a Classic Man-in-the-Middle Attack Saved Colombian Hostages Commentary by Bruce Schneier Email 13 hours ago Last week's dramatic rescue of 15 hostages held by the guerrilla organization FARC was the result of months of intricate deception on the part of the Colombian government. At the center was a classic man-in-the-middle attack. In a man-in-the-middle attack, the attacker inserts himself between two communicating parties. Both believe they're talking to each other, and the attacker can delete or modify the communications at will. The Wall Street Journal reported how this gambit played out in Colombia. The plan had a chance of working because, for months, in an operation one army officer likened to a "broken telephone," military intelligence had been able to convince Ms. Betancourt's captor, Gerardo Aguilar, a guerrilla known as "Cesar," that he was communicating with his top bosses in the guerrillas' seven-man secretariat. Army intelligence convinced top guerrilla leaders that they were talking to Cesar. In reality, both were talking to army intelligence. This ploy worked because Cesar and his guerrilla bosses didn't know each other well. They didn't recognize each others' voices, and didn't have a friendship or shared history that could have tipped them off about the ruse. Man-in-the-middle is defeated by context, and the FARC guerillas didn't have any. And that's why man-in-the-middle, abbreviated MITM in the computer security community, is such a problem online: Internet communication is often stripped of any context. There's no way to recognize someone's face. There's no way to recognize someone's voice. When you receive an e-mail purporting to come from a person or organization, you have no idea who actually sent it. When you visit a website, you have no idea if you're really visiting that website. We all like to pretend that we know who we're communicating with -- and for the most part, of course, there isn't any attacker inserting himself into our communications -- but in reality, we don't. And there are lots of hacker tools that exploit this unjustified trust, and implement MITM attacks. Even with context, it's still possible for MITM to fool both sides -- because electronic communications are often intermittent. Imagine that one of the FARC guerillas became suspicious about who he was talking to. So he asks a question about their shared history as a test: "What did we have for dinner that time last year?" or something like that. On the telephone, the attacker wouldn't be able to answer quickly, so his ruse would be discovered. But e-mail conversation isn't synchronous. The attacker could simply pass that question through to the other end of the communications, and when he got the answer back, he would be able to reply. This is the way MITM attacks work against web-based financial systems. A bank demands authentication from the user: a password, a one-time code from a token or whatever. The attacker sitting in the middle receives the request from the bank and passes it to the user. The user responds to the attacker, who passes that response to the bank. Now the bank assumes it is talking to the legitimate user, and the attacker is free to send transactions directly to the bank. This kind of attack completely bypasses any two-factor authentication mechanisms, and is becoming a more popular identity theft tactic. There are cryptographic solutions to MITM attacks, and there are secure web protocols that implement them. Many of them require shared secrets, though, making them only useful in situations where people already know and trust each other. The NSA-designed STU-III and STE secure telephones solve the MITM problem by embedding the identity of each phone together with its key. (The NSA creates all keys and is trusted by everyone, so this works.) When two phones talk to each other securely, they exchange keys and display the other phone's identity on a screen. Because the phone is in a secure location, the user now knows who he is talking to, and if the phone displays another organization -- as it would if there were a MITM attack in progress -- he should hang up. Zfone, a secure VoIP system, protects against MITM attacks with a short authentication string. After two Zfone terminals exchange keys, both computers display a four-character string. The users are supposed to manually verify that both strings are the same -- "my screen says 5C19; what does yours say?" -- to ensure that the phones are communicating directly with each other and not with an MITM. The AT&T TSD-3600 worked similarly. This sort of protection is embedded in SSL, although no one uses it. As it is normally used, SSL provides an encrypted communications link to whoever is at the other end: bank and phishing site, alike. And the better phishing sites create valid SSL connections, so as to more effectively fool users. But if the user wanted to, he could manually check the SSL certificate to see if it was issued to "National Bank of Trustworthiness" or "Two Guys With a Computer in Nigeria." No one does, though, because you both have to remember and be willing to do the work. (The browsers could make this easier if they wanted to, but they donbt seem to want to.) In the real world, you can easily tell a branch of your bank from a money changer on a streetcorner. But on the internet, a phishing site can be easily made to look like your bank's legitimate website. Any method of telling the two apart takes work. And that's the first step to fooling you with a MITM attack. Man-in-the-middle isn't new, and it doesn't have to be technological. But the internet makes the attacks easier and more powerful, and that's not going to change anytime soon. --- Bruce Schneier is chief security technology officer of BT, and author of Beyond Fear: Thinking Sensibly About Security in an Uncertain World.

1 0

[gsc] Hawalla UK
by R.A. Hettinga 10 Jul '08

10 Jul '08

Begin forwarded message: > From: "Darren Rhodes" <darren.rhodes(a)gmail.com> > Date: July 10, 2008 7:03:15 AM GMT-04:00 > To: gold-silver-crypto(a)rayservers.com > Subject: [gsc] Hawalla UK > > Ali & Anor v Revenue & Customs Prosecutions Office [2008] EWCA Crim > 146 > > Link here, http://www.bailii.org/ew/cases/EWCA/Crim/2008/146.html > > Darren. > -- > Key ID:- 0xB76FE0B9 http://pgpkeys.mit.edu:11371/ > http://en.scientificcommons.org/

1 0

Free ViagraCializ pills for Any purchase, Buy more FREE more! xor mx2
by Kaylee Phuong 10 Jul '08

10 Jul '08

== A-Z Medications to choose from == We give You FreeViagraPills (Free you 4-12 pills with any order) == ViagraPill === == Cialix Pills == == Phentrimine == == Levitr == == PenisGrowth Pack == == SQMA == == Tramadol == == FemaleViagra == & 400 more meds to choose from Claim Your Free 4-12 ViagraPills here with us http://khu.fumany.com

1 0