- cypherpunks-legacy - lists.cpunks.org

6502 ML programming
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Wed, 8 Oct 1997 23:10:26 -0400 > From: ghio(a)temp0132.myriad.ml.org (Matthew Ghio) > Subject: Re: [LONG, off-topic]] Interactive Programming > Reminds me of a time, years ago, where I was trying to modify a program > written in 6502 assembler. > Consider the following line of C code: > > result = function(x,y,z); > > One could write this in 6502 assembler as: > > JSR function > DATA x > DATA y > DATA z > STA result > > where x,y,z,result are pointers to storage locations. There in no 'DATA' construct in 6502 assembly. This is some sort of macro that either the assembler or programmer defined. All official Rockwell/Commodore [1] 6502 assembly mnemonics are three letter. There are NO official macro's from MOS Technologies under either Rockwell or Commodore other than the ORG. ORG simply defined the starting address for the target code. The most efficient way to store data in 6502 is to put it in the first 256 bytes of ram, then it could be called in no more than 2 clock cycles. Also, in 6502 good programmers use the branch instructions (BCC, BCS, BEO, BMI, BNE, BPL, BVC, BVS) because the JSR required three bytes versus 2 bytes for a Bxx. The only constraint was that the branch target must reside in the same 256 byte page as the branch itself. The biggest boo-boo committed here was not realizing that branch offsets that took you across the upper page boundary would leave you at the lower page boundary plus some remaining offset. Idealy a jump table was created that had the various target addresses for your routines. Then a Bxx followed by a indirect mode JMP (NOT a JSR). If that table was in the first 256 bytes it was possible to save a whole clock cycle AND a byte in the process. At 64k and 1Mhz clock these sorts of short-cuts were significant. Because of the architecture of the 6502 the 0 page of RAM was a very busy place indeed because any operation there automaticaly saved a byte and a clock cycle. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________| [1] Rockwell designed and sold the chip for several years and then in the late 70's Commodore bought MOS Technologies.

3 2

Hi from the Girls
by 15159495＠21579.com.net.pk 17 Dec '03

17 Dec '03

Notice: This is an adult site. Access is limited to persons over 18. If you are offended by things of a sexual nature DO NOT ENTER!!! But if you want to>>> Find the youngest, hottest girls on the net!!! Click on the highlighted text: http://youngnlusty.com

1 0

No Subject
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

"THE DUKE" <pleontks(a)hotmail.com> writes: >The government is not planning to murder everyone. The Government is >not keeping aliens in the 'basement'. The X-Files are not real. The >government is not murdering public figures, and setting-up pore, >civilian saps to take the fall. The only thing that the Government is >doing is running our country the best it can. The Government routinely lies to the citizens it allegedly represents. It infringes on the rights guaranteed those citizens by the Constitution. The FCC can't allocate radio bandwidth efficiently, byt they seem to have no problem telling Howard Stern not to say "vagina" on the radio. I could go on and on, ad nauseam, but you get the idea. If this is their best effort, they should be horsewhipped, tarred, feathered, and run out of town on a rail. Unfortunately, the brain-dead populace continues to get hypnotized by their Pied-Piper tales and makes the biennial Bataan death march to the polls (nice double entendre there, n'est-ce pas?) to choose between Picto Bold and Picto Light, the two candidates in their district who have a single common goal: to get elected to an office where they can get a firm lip clamp on the teat of the American taxpayer, and skim off the lobbyists in their spare time. Neither one really gives a flying fuck about the people they represent; it's the power they want. >All you are doing for the Government, is finding fault and conspiracy in >every action. You are destroying the Government, and are thereby >destroying America. Why would I want to do anything for the Government? I already pay them a tithe (oh, sure, you can call it "income tax") to stay the fuck away from me, by and large. As soon as someone shows up at my door and says "Hi, I'm here from the Government to help you," I'm running for my life. That kind of "help" usually results in gunfire, or dependence on further Government subidies, or having mopey Government types hang around to explain to me that I should use water-based varnish so I don't wreck the ozone layer. >None of you have my pity. I spit upon you all. None of us need your pity. And wipe your chin when you're done. And say "hi" to Mr. Freeh next time you see him. Of course, it won't be his face that'll be at eye level. . . AngerMonger

1 0

1998 IEEE Symposium on Security and Privacy
by Mike Reiter 17 Dec '03

17 Dec '03

The call-for-papers for the 1998 IEEE Symposium on Security and Privacy can be found at http://www.research.att.com/~reiter/oakland98.html - Mike

1 0

Re: Internet Via Electric Lines? (fwd)
by phelix＠vallnet.com 17 Dec '03

17 Dec '03

On 9 Oct 1997 02:25:13 -0500, "William H. Geiger III" <whgiii(a)invweb.net> wrote: > >-----BEGIN PGP SIGNED MESSAGE----- > >In <199710081234.HAA11747(a)einstein.ssz.com>, on 10/08/97 > at 07, Jim Choate <ravage(a)ssz.com> said: > >>Forwarded message: > >>> From: "William H. Geiger III" <whgiii(a)invweb.net> >>> Date: Wed, 08 Oct 97 01:28:42 -0500 >>> Subject: Re: Internet Via Electric Lines? > >>> This is nothing new. > >>At least late 70's. > >>> I think it was GE that several years ago created phone extensions that you >>> plugged into your power outlets, no need to run wire to put in an extra >>> outlet. I believe that X-10 uses this same principle for computer control >>> of household appliances. >>> >>> Not to mention data leakage through power lines is an issue long reconized >>> by the TEMPEST crowd. >>> >>> The trick here seems to be in routing the data. How do you get data on the >>> power grid routed to the location that you want it to go?? > >>The trick with X-10 is to stay away from transformers as the signal won't >>go through them effectively. This ends any dreams of sending data to your >>neighbor, the signal won't go through your power meter. > >This seems to be a Goodthing(TM) for residential X-10 as it would seem to >take care of a lot of security issues by effectively isolating each home >from others who may be running the same system. > >Has anyone researched the security issues around X-10? Is the Transformer >isolation good enough protection from a dedicated attack (as opposed to >accidental signal leakage)? Are their alternative routes for transmitting >the FM signal (Airwaves) that the X-10 devices would pick up?? Do any of >the current X-10 devices use signal authentication/verification? > X-10? security? hehehe... that's good for a laugh. There is no security whatsover in X-10. If your neighbor knows the addresses of your X-10 units and his power comes off the same transformer as yours, he can easily turn your lights on and off. The only thing protecting you (besides obscurity) is the transformer that isolates your power line from others. X-10 doesn't use any type of FM signal. It simply transmits bits in the zeros of the ac power 'signal'. It only get 120bps and most signals are repeated 3 times (even with that, the signal sometimes gets lost in the line noise), so really you only get 40bps. A command consists simply of [address],[command]. The address is 8 bits long, I dont' remember how long the command is. In X-10 speak, and address is [A-P] [1-16]. The commands are on,off,bright,dim,all-lights-on, and a few others. There's no security, no encryption, not even collision detection when using more than one transmitter. Now, there a new system called cebus, but it's over 10X more expensive. I don't know too much about it. -- Phelix

1 0

Component-based Commerce: CCS Lunch Talk Friday, October 17
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Thu, 9 Oct 1997 08:22:11 -0400 (EDT) From: Chris Wysopal <cwysopal(a)skywriting.com> To: dcsb(a)ai.mit.edu Subject: Component-based Commerce: CCS Lunch Talk Friday, October 17 MIME-Version: 1.0 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Chris Wysopal <cwysopal(a)skywriting.com> From: Roanne Neuwirth [SMTP:roanne@MIT.EDU] Sent: Wednesday, October 08, 1997 10:27 AM To: ccs-lunch(a)MIT.EDU Subject: Component-based Commerce: CCS Lunch Talk Friday, October 17 Greetings! This is to announce a CCS Lunch Talk, Friday, October 17, from 12-1:30 pm in E40-170. Bring your lunch and join us for an interesting session. We are pleased to welcome Jay M. Tenenbaum, Chairman of CommerceNet to CCS. He will speak on component-based commerce and an exciting new project. See you there!! Component-based Commerce Jay M. Tenenbaum Chairman, CommerceNet Digital anarchy is threatening the explosive growth of Internet commerce. Proprietary applications and platforms cannot communicate above the level of browsers. Websites are difficult to locate and incomprehensible to software agents. Such limitations prevent online businesses from leveraging each other's services, resulting in closed markets and trading communities. In response, CommerceNet has launched an ambitious object-oriented interoperability framework initiative called eCo System. eCo treats all commerce services on the Web as business objects. It provides the infrastructure (a Common Business Language, standardized metadata and middleware) for combining them in novel ways to build virtual companies, markets, and trading communities. eCo complements commercial ecommerce platforms, enabling them to communicate with one another, thus expanding the market for all. eCo System promises to transform the Internet into a massive economy of online services, all linked through a common framework. Companies will be able to encapsulate their services (e.g., shipping, banking) as eCo objects, that customers can seemlessly integrate into their own business processes. Entrepreneurs will be able to create innovative value-added services that compare, aggregate, integrate, and translate data across companies -- finding the best price or the closest supplier for example. This potential for instant partnering and for rapidly experimenting with new business concepts could spark an explosion of entrepreneurial activity rivaling that of the web itself. Based on market analyses by Forrester and IDC, CommerceNet projects a $1 Billion market for eCo-enabled Internet commerce building blocks and tools by the year 2000. The Internet commerce transactions enabled by these components could exceed $100 Billion. The talk will cover eCo System from both a technology and business perspective. Dr. Jay M. Tenenbaum (BS MIT '64; Ph.D. Stanford '71) is widely acknowledged as a founder of Internet commerce and its leading visionary. In 1990 he started EIT, the company that pioneered the enabling security and payment infrastructure. In 1994 he formed CommerceNet, the leading industry association for Internet commerce with nearly 600 corporate members worldwide. Dr. Tenenbaum has been a consulting Professor of Computer Science at Stanford University and currently serves on the boards of six Internet start ups. For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

ANY OF YOUR ANSWERS YES?
by endeavor＠bizmax.com 17 Dec '03

17 Dec '03

Hello, I read your profile and thought that the following would be of interest to you. You are not on a mailing list so if this does not interest you there is no need to reply. Any of Your Answers Yes? Want to: >Legally slash your business/personal taxes drastically? >Protect any & all assets from any form of judgement? >Learn how to preserve your personal privacy? >Create a 6 figure income in the next 4-6 months? Any of Your Answers No? >Do you know how to make your "nest egg" work 3-5 times harder for you? >Do you know how to set up off shore trusts and protect your owned property from liens & levies? >Can you legally shelter all assets from all Taxes? Find out more and learn how to accomplish all of these by calling: 1-800-497-1799 (24 hr. recorded message)

1 0

EU Rejects GAK
by John Young 17 Dec '03

17 Dec '03

9 October 1997 Source: The New York Times, October 9, 1997, p. D4 Europeans Reject U.S. Plan On Electronic Cryptography Threats to Privacy and Commerce Are Cited By Edmund L. Andrews Frankfurt, Oct. 8 -- The European Commission has rejected proposals by the United States aimed at insuring that police agencies can crack coded messages over telephone and computer networks. In a lengthy report released today, the European Commission said the American approach could threaten privacy and stifle the growth of electronic commerce and that it might simply be ineffective. The report appears to all but doom efforts by the Clinton Administration and the Federal Bureau of Investigation to establish a global system in which people who use cryptography would have to deposit a "key" for unlocking their codes with an independent outside organization. As envisioned, the police or intelligence agents would be able to use this key once they got court approval to carry out a wiretap. The plan has been vigorously opposed by the computer industry, which fears that it would jeopardize sales to foreign customers. Because of the Internet's borderless nature, American officials have long acknowledged that their plan is workable only if most other countries adopt similar systems. If not, people could simply route their communications through countries with no restrictions. The White House had already run into heavy opposition from civil rights groups, the computer industry and Congressional Republicans. And earlier this year, the United States failed to muster any support for its plan from the Organization for Economic Cooperation and Development, a consortium backed by more than 40 countries. But the European Commission's blunt opposition, reported today in The Wall Street Journal, went considerably further, raising a slew of objections to "key recovery" and "key escrow," systems. Among them were these: + Hackers could find new ways to breach security." Inevitably, any key access scheme introduces additional ways to break into a cryptographic system," the report said. + The systems could weaken European data-privacy laws. "Any regulation hindering the use of encryption products," the report said, "hinders the secure and free flow of personal information." + Even with a "key escrow" or "key recovery" system, criminals cannot be entirely prevented from using strong encryption. More broadly, the European Commission said, any kind of key-based system could jeopardize the rise of electronic commerce. "If citizens and companies have to fear that their communication and transactions are monitored with the help of key access or similar schemes," the report said, "they may prefer remaining in the anonymous off-line world." American officials did not disguise their disappointment, and challenged the Europeans to come up with better alternatives. "I am a little surprised," said William Reinsch, Deputy Secretary of Commerce in charge of export administration. "My question to the European Commission is, where do they think the market is going? Our sense is that corporations engaged in electronic commerce want key recovery in some form, because they want to recover their own records and to monitor their own employees." Beyond high-minded policy issues, European officials quietly acknowledge that they have political and economic concerns. For one thing, several countries do not like the idea of deferring to an American system that might allow American companies to dominate the next generation of security products. The German Government, meanwhile, is worried that American authorities might have improper access to data on German users -- possibly violating Germany's tough new laws on data protection. But the European Union is far from united. Britain has generally sided with the United States in supporting an international system for regulating data encryption. Indeed, the European Commission remained vague about what alternatives to the American system it might actually favor, nor does the report attempt to block member countries from setting up key-based systems if they want to. American computer and software companies greeted the European policy declaration as a victory. "Even the hard-line Governments, the U.S. and the United Kingdom, have said that any cryptography restrictions have to be internationally coordinated because otherwise you can just download material from another country," said Chris Kuner, a lawyer in Frankfurt who represents Netscape Communications and other networking companies in Europe. "This shows that Europe does not agree with the idea of mandatory key recovery. This idea that is the only possible regulatory framework for the world has been clearly rejected." [End]

2 2

No Subject
by Mix 17 Dec '03

17 Dec '03

The main difference between Timothy May and shit is that shit smells better. \o _o o o \o |o |o >> /\/ o__ _o o/ Timothy May | | /| |\ | / /|/ \|o o\ | \ \ | | | << << << | << < \

2 1

Object code disassembly (was Re: [LONG, off-topic]] Interactive Programming)
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

> It worked. After a few iterations of this I had all the entry points, and > everything that didn't disassemble cleanly was outputted as hex data. > > For fun, run objdump on a cleanly compiled unix binary... It makes it all > look so easy... :) Not quite that easy. Awhile back I disassembled RealAudio because I was curious how their codec worked. Turns out it was not all that interesting and the codecs in nautilus and speak freely are probably better. But anyway.... Running objdump on the binary spit out ~800000 lines of code. They statically linked the whole thing, motif, c library, and all. I'm not sure what they compiled it with, the c-library they had in there didn't look like any of the standard ones. It disassembled fine, but 800k lines of assembler dump is not really all that readable. So I ended up doing it interactively, setting breakpoints on the I/O operations and backtracing to find the coder. The user interface code tended to get in the way a lot. The 1kb/s coder is very basic. No predictor/corrector, and no redundancy (eg lempel-ziv, rle) compression at all. It's just a frequency/band coder at 10 frames per second. I guess thats so it can handle dropped frames. No checksums at all. The "28.8" codec is more sophisticated. It appears to be a LPC and compresses data into much larger blocks/packets. I didn't look into it too deeply because there are lots of other lpc coders available. Shortly after this, they put out a new version 3.0, with yet another codec, which I never looked at. This was quite awhile ago, and all this is from memory. So the codec was rather uninteresting, but there were a number of other "features" which got my attention. I looked at the network protocol. Its pretty simple. The client connects to the server and requests the file it wants. It also sends a whole bunch of other info, like host operating system, version number, etc. ("for statistical purposes, right? uh huh..." are you guys over there at anonymizer.com reading this? hint, hint.) Then it does something truly bizarre. The client and server exchange 32-digit hex numbers. The client calls gettimeofday() and gethostname() and uses this as a random seed. Then it sends a 128-bit random number, encoded as 32 ascii hex digits. The server does the same. I haven't a clue what this is for. Considering that the other data structures are all binary, sending this as ascii is really dumb. It looks as though its part of some third-party library. I thought maybe it was some variant of netscape cookies but it doesn't save anything to disk. It's just wierd. I tried stepping through this section of code a few times, but doing so usually caused the server to time-out. Then the server starts sending the audio file as one big stream of packets - same format as the files it saves to disk, just broken up into packets, each preceeded by a length byte. In udp mode the client sends acks every second or so. In tcp mode there are no in-band acks at all, it relies solely on the tcp protocol driver. No checksums on anything, and it uses predictable port numbers. You can probably spoof it real easy. That might make for an interesting prank.

1 0