- cypherpunks-legacy - lists.cpunks.org

Encrypting Viruses.... good idea?
by IE63＠vaxb.acs.unt.edu 15 Aug '93

15 Aug '93

-----BEGIN PGP SIGNED MESSAGE----- >Speaking of cryptostacker and beneficial viruses that encrypt files for you >in the background, I just got a copy of one in the mail! I think this may >be of interest to the group, so I am posting. ......... >I can't seem to find mention of what the fast/casual encryption algorithm >is. Instead of source code, a hex listing is provided. According to >further notes, there is a hot-key for toggling floppy encrypt, and another >hot key to uninstall from the hard drive. > >All the same, if I get a chance this weekend I'll probably try it >out! Well, good luck with it. I'd personally like to see/do a disassembly of the _entire_ virus before I would install it - security systems are great for back doors, and a virus would be GREAT for such. There are a few things anyone using this program might want to watch for (I have yet to see it, though I'd be VERY interested in disassembling it.... anyone out there with a copy that wouldn't mind sending it _ENCRYPTED_ through E-mail? Full commented disassembly returned to sender ASAP!): 1.) Some anti-virus programs with heuristics are going to have a cow, most likely - CES, F-PROT, TBSCAN are a few that are likely (especially VIRSTOP from F-Prot - if I'm wrong, tell me...) and these are some of the best out there for personal protection (sorry SCAN & CPAV). 2.) I'd recommend NOT using it if you have a special master boot record, like Windows NT or some boot-based security systems or multiple boot choices. There are 9 sectors free at the beginning of most IBM hard drives, I assume this virus uses the first sector and 1/more of the others..... if another program wants to use these as well - I'd bet the virus doesn't notice until too late. 3.) Watch where the virus puts itself on floppies. If it is larger than 512 bytes (almost have to be for its functionality) then there are only three ways I know of to put additional code in: a.) Mark sectors bad, and place code there. Problem: DON'T "FIX" BAD SECTORS ON YOUR DISK WITH NORTON! b.) Use space after root directory entry and FAT to put virus in, just like the Stoned virus. Problem: Trashes data if there are more than 80 files in the root directory. Also sometimes causes other problems with High-Density disks.... And, if a new format of disk comes out - WATCH OUT! c.) Format extra tracks on the floppy - these tracks are rarely very reliable - you might loose information if these tracks give out, depending on the setup of the virus you might loose the disk. d.) This method I haven't seen, but I guess it could happen - create an actual file and allocate it from the FAT.... this might actually be safe, as long as the virus didn't let anyone delete it or write over it. 4.) Watch where it locates itself in memory: most likely it will lower the memory in BIOS before DOS gets loaded (CHKDSK will inform you that you have <640k low memory rather than the usual 65536 bytes....) which is generally relatively safe if the computer has a standard config. It may cause problems depending on where/how/when it allocates memory, though. 5.) What happens when you bypass Int 13h (which is presumably what it hooks) and use absolute disk I/O by directly using the driver? Careful with Norton and other diskfix programs that _might_ do this at times..... 6.) Don't press 'DISINFECT' from your favorite AV program without decrypting your disks first........... My bottome line is this: the virus may be cool, but why a virus? Viruses may work for attacking things, wiping stuff out, hacking stuff, whatever (although they always tend to hit more than the intended target, funny thing about that), but when the only user of a machine WANTS to do something with their machine, why a virus? I mean, honestly...... although I must admit, it solves the problem of distribution of software in the most interesting way - I want to see what happens if a commercial company writes one of these and COPYRIGHTS it...... "This program may only be used by the original purchaser. Any unauthorized copying, lending, or any other method of distribution is STRICTLY PROHIBITED! Violators will be prosecuted to the full extent of the law! You want I should infect this here hard drive? huh? huh? (Y/n)?" "BTW - if you're reading this message and did not buy this software, then we'll be sueing you in two weeks, your modem just dialed our mainframe." I suppose I may be being a bit judgemental, as I am speaking simply from the letter quoted above, but still...... it sounds very reminiscent of Fred Cohen's compression virus..... My Public Key: - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3a mQCNAixUuYYAAAEEAKNllAee26qGqxJck3Bftdkrz0MUQLABGMZqVem9UW9kjjS+ rMAafauqYTE5/Kdnx+4Asj0Wgfon0YBtRMT0crMcBYNqVp4//RUh7wrxQNvKFeeO ZGuQp2hyHQqh1FDfWsHG4ldGqIV1YuOXq6oeIDkmbwgf8BRgPcZkwUqsF4b1AAUR tCpNaWNoYWVsIEEuIEVsbGlzb24gPGllNjNAdmF4Yi5hY3MudW50LmVkdT4= =0rss - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLG2BMcZkwUqsF4b1AQGe+wP+OeEKZd71ObybB4RuWa6rg761g0sNIqza L733m6EJkuxTzy0c9TwVO+S1+QXiI44O85QOA7dc84YQ0Y65Y6yEzudSSlFAN6UB CpjOQkia18ruY1CXY6mXsCAiNotWHzm2hcXASWLXXXkJi37jnfAOp3N+xWSk2+g6 Zm+0zgWa6hg= =YSOp -----END PGP SIGNATURE-----

1 0

Re: lookin' for a slogan for Tshirts
by Leevi Marttila 14 Aug '93

14 Aug '93

-----BEGIN PGP SIGNED MESSAGE----- >Message-Id: <199308021828.AA12198(a)flubber.cc.utexas.edu> >Subject: Re: lookin' for a slogan for Tshirts >Date: Mon, 2 Aug 1993 13:28:36 -0500 (CDT) >From: Jim McCoy <mccoy(a)ccwf.cc.utexas.edu> >A nice thought, but it is not quite true now, is it? Cryptography has been >a tool for specialists, scholars, and governments for those 4000 years, but >to claim that "the masses" have had access to it is clearly untrue. In >fact, it seems that the current friction between groups such as this one >and the U.S. governement is caused mostly because private citizens are >beginning to get access to this strong cryptography and this is something >"those who watch" do not like... > >jim *The masses* have easy access to cryptography *and* the goverment has easy access to messages of *the masses*. Leevi Marttila leemartt(a)polaris.utu.fi "leevi.marttila/o=elisa-turku/"@elisa.fi -----BEGIN PGP SIGNATURE----- Version: 2.2 iQCVAgUBLG097TUMRj48GHK9AQH8fQP/ZmHmwEYejsXvFGRHkeSymTB8kuRfjQRy vPCaFs6NSqC4Sl65ezx4ujEztGBcNHy7h4XwErYXj+KBD4HB6pMJr/jYtLnwHUhi L6rHDgF9JY4rawIRO7xVyCYl23Wa3aYNM1beFj7S8tw0QUYR4JOK8zslIQtv9vm5 7AOQurPKYXE= =JTmd -----END PGP SIGNATURE-----

1 0

few bits of info on Mycotronx
by L. Detweiler 14 Aug '93

14 Aug '93

here are a few bits of info on Mycotronx. IBM's `supplier of the year' and heavy into `satellite encryption systems'. p.s. rumor has it a reporter out there picked up on the Mycotronx `dumpster' postings here and the pointer in alt.whistleblowing to it for a mainstream news article to appear ~Sep.-Oct. ltr. ------- Forwarded Message [...] I pulled this from the Business Wire, it's not copyrighted was was distributed on BW for inclusion in Business Editor's files... it's the "approved" company profile of the folks making the Cliper Chip. =-=-=-=-=-=-= CORPORATE PROFILE FOR MYKOTRONX INC., DATED FRIDAY, AUG. 13 Published date: Friday, Aug. 13 Company name: Mykotronx Inc. Address: 357 Van Ness Way, Suite 200 Torrance, Calif., 90501 Telephone No.: 310/533-8100 Chairman of the Board: Leonard J. Baker Secretary/ Treasurer: Kikuo Ogawa President: Theodore S. Bettwy Public Relations Contact: Sheila R. Coon Business number: 310/533-8100 ext. 13 Home number: 310/548-7061 Company description: Mykotronx Inc., a small Torrance, Calif. business (42 employees) is fast becoming recognized as a leader in the Information Security (INFOSEC) field. The company has received numerous commendations for its quality program. Mykotronx was named "supplier of the year" by IBM's Federal Systems Co. of Boulder, Colo., for both 1992 and 1993. The Mykotronx staff is composed of experienced authorities in cryptology, telecommunications and the digital design of electronic equipment and microcircuits (chips). It also has excellent facilities for performing R & D engineering, prototype, production and testing. The small company atmosphere provides for personalized service and quick-react capability. Low overhead and operating expenses contribute to Mykotronx's price competitive capability. Since 1987 Mykotronx has gained a steadily increasing market share of the Space Communications Security (COMSEC) business through its COMSEC equipment design and production. Bookings through June 1993 have exceeded $7.5 million. Mykotronx is a major supplier of satellite-to-ground encryption equipment and the developer of the U.S. Government's proposed new standard ("Clipper") for encryption of electronic communications such as voice and computer transmissions via telephone, fax machine, modem, etc. Whether for high-volume or one-of-a-kind custom units, Mykotronx has the technology and capability to meet customer's INFOSEC needs. CONTACT: Mykotronx Inc., Torrance Sheila R. Coon, 310/533-8100 (phone) 310/533-0527 (fax) ------- End of Forwarded Message

1 0

Electronic Democracy
by wcs＠anchor.ho.att.com 14 Aug '93

14 Aug '93

An anonymous personage writes > More succinctly, "Democracy is four wolves and a sheep voting on lunch." > Up the republic! Yeah, though representative government is four wolves voting on _which_ sheep to have for lunch. Any time power is available, it can be abused; it's nice to be working on systems that allow people to do transactions without providing additional information which can be abused.

1 0

Media Wars
by geoffw＠nexsys.net 14 Aug '93

14 Aug '93

> > What we need is a national talk show host/comedian belittling the > governments plan. > Good Idea, someone like george carlin, maybe we can get frank zappa to speak out on it, It would reach a section of the population that would normally not be reached, he has challenged Big Government before on free speack issues (in the music industry), he's not a comedian but he would be effective. A real good person to get would be Lilly Tomlin!! She could definately get exposure with her Ernestine the Operator charecter. I think her political orientation would support our cause. Although, if you really want to be effective, you should win over Bob Hope; a few wise cracks from him on some tv special and the Clipper would be dead before morning :)

1 0

No Subject
by anonymous＠extropia.wimsey.com 14 Aug '93

14 Aug '93

> *pragmatic* descriptions of Electronic Democracy ... Uu> Uu> You're walking down the street, and a gang of thugs jumps out Uu> from behind some bushes. Their leader approaches you and says: Uu> Uu> "Don't be alarmed, we're your very local community - we believe Uu> in the noble principle of Democracy, majority rule, and you Uu> have an equal vote with each of us." Et cetera, und so weiter... More succinctly, "Democracy is four wolves and a sheep voting on lunch." Up the republic!

1 0

birth of Software Patent Institute
by L. Detweiler 14 Aug '93

14 Aug '93

Don't know anything about this, but it's a definite Cypherpunk cause... the first question to ask would be whether they're in touch with LPF at all. ------- Forwarded Message

2 1

User suggestion on MacPGP
by bwp＠mindvox.phantom.com 14 Aug '93

14 Aug '93

One of the best improvements implemented in MacPGP 2.3 was the ability for the user to enable an option that let PGP keep the key passphrase in memory so you don't have to re-type it each message. However, I have ran up against two problems with its implementation. 1). if you mis-type the passphrase, the incorrect phrase goes into memory and MacPGP takes it instead of putting back up a dialog box for you to re-try. The result of any mis-typed passphrase is therfore a bad passphrase error that you cannot recover from except by quitting and re-starting MacPGP. 2). if you try to generate another key pair after typing (or mis-typing) a passphrase, MacPGP takes the passphrase from memory and automatically applies it to the new secret key. This is inconvenient especially if the mis-typed phrase is so badly munged that the user cannot remember what she typed ;-). -bwp

1 0

Pine
by Warren Keith Russell 14 Aug '93

14 Aug '93

R. Tait wrote the following: >Does anyone have elisp to integrate PGP into Emacs? I'm fed up of >having to use VI to send/receive all my encrypted mail, and there's no >point in me writing any code if someone already has. Which prompts me to ask: Is anyone out there using the Pine email software? If so, do you know of any way to integrate PGP into Pine? If not, any other ideas? I see a lot of signed messages out there, but the only way for me to send one is to shell out to AIX, use vi to create a message, run pgp to create the signed message, then run Pine and read the message in, at which point I can finally send it. Notice that this message isn't signed. It's just too much hassle! Thanks for any advice anyone can give me. Keith ------------------------------------------------------------------------- Keith Russell Dynix Library Systems, Provo, Utah, U.S.A. keru(a)cpu.us.dynix.com or keru(a)devg.us.dynix.com -------------------------------------------------------------------------

2 1

Get Rush Limbaugh to mock Clipper phonez
by plmoses＠unix.cc.emory.edu 14 Aug '93

14 Aug '93

David Koontz sez, get some national figure to belittle the government. Well, Limbaugh does it for a living.....

1 0