- cypherpunks-legacy - lists.cpunks.org

RE: Recent Web site cracks
by Mullen Patrick 17 Dec '03

17 Dec '03

Which firewalls did they use, what are the holes, and how can you plug and/or exploit them? PM _______________________________________________________________________________ From: Dr.Dimitri Vulis KOTM on Wed, Oct 9, 1996 3:20 Subject: Re: Recent Web site cracks To: cypherpunks(a)toad.com stewarts(a)ix.netcom.com writes: > The DOJ and CIA sites were actually cracked; don't know the mechanisms. They used firewalls that are known to be easily crackable. ^^^^^^^^^^ ^^^^^^^^^^^^^^^^ --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps ------------------ RFC822 Header Follows ------------------ Received: by mail.ndhm.gtegsc.com with SMTP;9 Oct 1996 03:20:19 -0400 Received: from toad.com by delphi.ndhm.gtegsc.com with SMTP; Wed, 9 Oct 1996 7:17:16 GMT Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id QAA26393 for cypherpunks-outgoing; Tue, 8 Oct 1996 16:51:04 -0700 (PDT) Received: from uu.psi.com (uu.psi.com [136.161.128.3]) by toad.com (8.7.5/8.7.3) with SMTP id QAA26380 for <cypherpunks(a)toad.com>; Tue, 8 Oct 1996 16:50:40 -0700 (PDT) Received: by uu.psi.com (5.65b/4.0.061193-PSI/PSINet) via UUCP; id AA00949 for ; Tue, 8 Oct 96 19:43:02 -0400 Received: by bwalk.dm.com (1.65/waf) via UUCP; Tue, 08 Oct 96 16:54:14 EDT for cypherpunks(a)toad.com To: cypherpunks(a)toad.com Subject: Re: Recent Web site cracks From: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) Comments: Dole/Kemp '96! Message-Id: <9VZHVD1w165w(a)bwalk.dm.com> Date: Tue, 08 Oct 96 16:53:43 EDT In-Reply-To: <199610081636.MAA10912(a)attrh1.attrh.att.com> Organization: Brighton Beach Boardwalk BBS, Forest Hills, N.Y. Sender: owner-cypherpunks(a)toad.com Precedence: bulk

1 0

RE: crypto cd once more
by Alan Olsen 17 Dec '03

17 Dec '03

At 03:23 PM 10/8/96 +0100, JR(a)ROCK.CNB.UAM.ES wrote: >>1) is there a system that can handle unix, windows and mac filenames >> > Yes. Use Rock Ridge extensions. That will allow for long UNIX >names. If you couple it with ISO9660 youget both worlds. Windows 95 will read rockridge discs, but will not display the long filenames. (Why they have not added those extensions to MSCDEX on Win95 is a mystery. Maybe Bill Gates had a bad experience at a showing of "Blazing Saddles".) --- | "Remember: You can't have BSDM without BSD." - alan(a)ctrl-alt-del.com | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.teleport.com/~alano/ | alano(a)teleport.com |

1 0

Re: "European Union Bank"
by Duncan Frissell 17 Dec '03

17 Dec '03

At 07:06 PM 10/8/96 +0300, Jüri Kaljundi wrote: >According to one offshore magazine European Union Bank is a very bad >choice for Internet banking. What they did was they assigned they named >Lord Mancroft who sits in the UK's House of Lords as chairman of the bank. >Only thing Lord Mancroft himself did not know a thing about it, although >the bank marketing materials had a letter of welcome supposedly from that >prominent person. So he is thinking of taking legal action against the >bank. I have at hand a brochure from "Shorex 96 - The Premier Offshore Exhibition" to be held November 20-22 in London. Day One features a section on "Offshore and the Internet" including a panel "Will the Internet Increase the Market Share of the Offshore Industry?" Featuring "Lord Mancroft, Chairman, European Union Bank, Antigua." I wonder if he'll be there. If we are both there, I'll ask him. DCF "If control measures are so effective, why does everything seem to be more and more out of control?"

3 2

Be careful where you put up
by Donald Weightman 17 Dec '03

17 Dec '03

Apropos the thread about asset allocation and relocation to hedge political risk, today's FINANCIAL TIMES reports: >Offshore banking centres agree to greater scrutiny > > Tuesday October 8 1996 > > By George Graham, Banking Correspondent > > Banking supervisors from large offshore financial centres have agreed to > co-operate more with their counterparts in industrialised nations in > investigating irregular behaviour at banks under their control. <SNIP> > The drafting involved hard negotiations on issues such as when a > supervisor could ask for the identity of an individual depositor or investor. > A supervisor in Europe may, for example, want to know that a bank is not > dependent for all its deposits on one source, but the offshore centre does > not want that to serve as an excuse for trawling for tax evaders. > > In all 140 countries have endorsed the deal, which sets out procedures for > exchanging information between supervisors and also establishes a > checklist to ensure that banking operations in a particular country are > subject to effective supervision. > > The agreement says home supervisors should be able to inspect the books > of shell branches wherever they are kept. "In no case should access to > these books be protected by secrecy requirements in the country that > licenses the shell branch," it says. Don Weightman dweightman(a)radix.net

1 0

Re: Recent Web site cracks
by pjb＠ny.ubs.com 17 Dec '03

17 Dec '03

but even after you get through the firewall, you still need to crack the web host. i suppose that anyone that would leave their firewall open would not have very good security on their hosts either. -paul > From cypherpunks-errors(a)toad.com Wed Oct 9 07:02:07 1996 > To: cypherpunks(a)toad.com > Subject: Re: Recent Web site cracks > From: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) > Comments: Dole/Kemp '96! > Date: Tue, 08 Oct 96 16:53:43 EDT > Organization: Brighton Beach Boardwalk BBS, Forest Hills, N.Y. > Sender: owner-cypherpunks(a)toad.com > Content-Length: 307 > > stewarts(a)ix.netcom.com writes: > > The DOJ and CIA sites were actually cracked; don't know the mechanisms. > > They used firewalls that are known to be easily crackable. > > --- > > Dr.Dimitri Vulis KOTM > Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps >

1 0

Re: Microsoft CAPI
by Peter Trei 17 Dec '03

17 Dec '03

> Ravi Pandya wrote: > > ... You can't load an encryption engine into Windows 95 or > > Windows NT unless that engine has been specially signed by > > Microsoft's corporate key. > > And so what happens when the Microsoft key is compromised? It might > be hard to break by purely cryptographic means, but surely there are > some people at Microsoft who aren't millionaires. Much easier would be to patch the OS to disable the signature check by the CryptoAPI. A patching program, once written, would require no particular skill to run. Sort of like 'rechipping' a high-end sportscar. Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation http://www.process.com trei(a)process.com

1 0

Stanford patents
by rschlafly＠attmail.com 17 Dec '03

17 Dec '03

> Declan McCullagh <declan(a)eff.org> writes: > >You'll have trouble doing a successful boycott of RSA. What, you won't > >use Netscape Navigator or PGP? > > Actually RSA is not a hard target for people like us to threaten. The > Diffie-Hellman patent expires in 210 days. Cylink is prevented from taking > legal action against anyone for violating this patent while the current > lawsuit is being decided. When Diffie-Hellman expires ElGamal is available > for use for free. So the best threat one can make against RSA is to directly > challenge their revenue stream: start working on making ElGamal an available > option in all systems which use RSA. A couple of minor corrections. Diffie-Hellman doesn't expire until Sept. 6, 1997. Cylink can sue anyone at any time, for infringement up to 6 years in the past. It is not likely to do so while its case against RSADSI is pending, because most of the infringers are RSADSI customers who have been indemnified by RSADSI. ElGamal won't be free of patent claims until Hellman-Merkle expires, a month after Diffie- Hellman. ElGamal/DSA is an attractive alternative to RSA, and ought to be more widely used. More information about the patent lawsuit can be found at: http://bbs.cruzio.com/~schlafly#pkpsuit There are some hearings scheduled, but nothing of great significance has been decided so far. Roger

1 0

Re: Anonymous E-mail
by Bill Stewart 17 Dec '03

17 Dec '03

At 12:26 PM 10/8/96 -0700, Eric Murray <ericm(a)lne.com> wrote: >someone with slightly less scruples than I, and a little more time, and >their own domain name & server, might consider writing a small >program to create a few thousand accounts. Then sign them up with PINmail. >Every email address that's registered to PINmail gets you $5, right? Netscape didn't find www.PINmail.com for me, but I assume that it probably costs money to sign up for pinmail. If it's even $6, you won't win by creating a few thousand accounts for the $5 commission :-) > [privacy risks] Of course, anywhere you have a concentration of email, especially where there's bait like a promise of privacy, you have to wonder about security risks. Besides PINmail, there's www.mailmasher.com (which has a strong privacy policy), www.hotmail.com (which wants more information and may do advertising or something), and there are the big services like AOL, Compu$erve, and Prodigy. What would happen if Sameer and Lance gave in to the Dark Side? What would happen if ATTMail were taken over by TPC? Risks happen - deal with it. Darth .... (OK, so nobody but AT&T ever really used ATTMail :-) We still own the Death Star. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk Imagine if three million people voted for somebody they _knew_, and the politicians had to count them all.

1 0

Re: Government Denial of Service Attacks
by Duncan Frissell 17 Dec '03

17 Dec '03

At 09:33 AM 10/9/96 +1000, Julian Assange wrote: >I will not coment on the correctness of the U.S government's funding >allocations, however the above statement is clearly designed to be >deceptive. Given the GDP of the U.S as a whole during fiscal 1996 was >greater than that of any other country at any other time, including the >U.S in previous years (the U.S like most other countries has postive >growth), of course the absolute value of taxes collected will be larger. I make the point only because this very important fact never occurs to anyone. Our rulers like to say that they can't make do with a cent less of the vast sums they collect from us and, in fact, all of them say that they will need more. Just pointing out that with all they have, they can probably stand to cut back a little. The Fortune 500 did. DCF

1 0

RE: legality of wiretapping: a "key" distinction
by blanc 17 Dec '03

17 Dec '03

From: Black Unicorn [in reply to Vlad the Conqueror] I understand that it's difficult for you to grasp how firmly entrenched the concept of wiretapping is in law enforcement, courts and the legislature, and that your novel new approach has been tried before. .................................................................. This should help him understand it. I won't say who this quote is from, but he was a very respected French author: "Both the English and the Americans have kept the law of precedents; that is to say, they still derive their opinions in legal matters and the judgements they should pronounce from the opinions and legal judgements of their fathers. [...] The English or American lawyer who thus, in a sense, denies his own reasoning powers in order to return to those of his fathers, maintaining his thought in a kind of servitude, must contract more timid habits and conservative inclinations than his opposite number in France. Our written laws are often hard to understand, but everyone can read them, whereas nothing could be more obscure, and out of reach of the common man, than a law founded on precedent. Where lawyers are absolutely needed, as in England and the United States, and their professional knowledge is held in high esteem, they become increasingly separated from the people, forming a class apart. A French lawyer is just a man of learning, but an English or an American one is somewhat like the Egyptian priests, being, as they were, the only interpreter of an occult science. [...] Thus it is England, above all that supplies the most striking portrait of the type of lawyer I am trying to depict; the English lawyer values laws not because they are good but because they are old; and if he is reduced to modifying them in some respect, to adapt them to the changes which time brings to any society, he has recourse to the most incredible subtleties in order to persuade himself that in adding something to the work of his fathers he has only developed their thought and completed their work. Do not hope to make him recognize that he is an innovator; he will be prepared to go to absurd lengths rather than to admit himself guilty of so great a crime. It is in England that this legal spirit was born, which seems indifferent to the substance of things, paying attention only to the letter, and which would rather part company with reason and humanity than with the law." .. Blanc

1 0