- cypherpunks-legacy - lists.cpunks.org

CONF/ORG: EXTRO-3 date
by Alexander 'Sasha' Chislenko 17 Dec '03

17 Dec '03

We are trying to plan the time for the EXTRO-3 - the Third in the infinite series of Extropian conferences. The tentative dates for EXTRO-3 are now weekends of August 2-3 and August 9-10 of 1997, with a backup plan of July 26-27 weekend. We would like to select the date so that it would not interfere with other conferences, and be convenient for everybody. If you know of any other events of extropian/transhumanist/libertarian/ life-extension/cypherpunk interest planned for one of those weekends, or if you would like to attend and have have personal preferences for one of these days, please send me _private_ mail at sasha1(a)netcom.com (You can find general info on Extropianism at http://www.primenet.com/~maxmore/extropy.htm ) On behalf of the of Extropian Action Team, ------------------------------------------------------------------------- Alexander Chislenko <sasha1(a)netcom.com> www.lucifer.com/~sasha/home.html Firefly Network, Inc.: <alexc(a)firefly.net> www.ffly.com -------------------------------------------------------------------------

1 0

How to break Netscape's server key encryption - Followup
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

There has been a successful hostile attack on a Netscape server key using the code I posted yesterday. I was contacted earlier today by someone who told me he had in the past obtained Netscape server keys and PGP private keys from Windows NT machines running Microsofts insecure FTP server which allows access to the entire drive (he found some of the PGP keys using archie searches - ouch!). He lives somewhere with nasty anti-hacking laws and definitely doesn't want his identity known, but after some pleading said I could reveal the following: - He used the cracklib dictionary to get the password - The password was found "very quickly" - The password was a female name - He deleted the server key after he'd found the password - He did it merely out of idle curiosity and has no intention of misusing the information. - He definitely doesn't want to be contacted Peter.

1 0

FLA_wed
by jya＠pipeline.com 17 Dec '03

17 Dec '03

9-26-96. NYP: "Potential Flaw In Cash Card Security Seen. Counterfeiting a Risk, Say Bellcore Scientists." Markoff. A potential security flaw has been discovered that might make it possible to counterfeit many types of the electronic-cash "smart cards" that are now widely used in Europe and are being tested in this country, reports a paper set to be released today. The Bellcore researchers said that a smart card's security could be breached by forcing the microchip in the card to make a calculation error, whether through sophisticated means like bombarding the card with radiation or perhaps cruder methods like placing it in a microwave oven. A mathematical formula they derived could use this error to extrapolate the secret data that authenticates the card when it is used. ----- http://jya.com/flawed.txt (6 kb) FLA_wed

1 0

FW: Internet Scam TRUE?
by brianh＠u041.oh.vp.com 17 Dec '03

17 Dec '03

This lexis-nexus is running around again, is this a true statement? Or another hoax going around? I had not seen any comments on this list yet. The person who forward this to me had not provided where this originated from. Thank You b > > > > > > Subject: FW: Internet Scam > > > Date: Thursday, September 26, 1996 > > > > > > FYI > > > > > > More on the Lexis-Nexis connection: > > > > > > Subj: Internet Scam > > > > > > Many of you have probably received a message lately regarding a > > > company called Lexis which is distributing names, social security > > > numbers, etc. to people over the internet for illegal use (i.e. to obtain > > > credit in > > > your name). The message advises you to call a number, give your name and > > > social > > > security number, and they will take you off the list. > > > > > > DON'T DO THIS!! > > > > > > The scam is to have you call and give the info to them. The social > > > security office is advised of this and is investigating the company.

1 0

RE: How to break Netscape's server key encryption - Followup
by Mullen Patrick 17 Dec '03

17 Dec '03

Could someone please repost the code referred to in this posting? I seem to have missed it, and I'm curious to see how it works. Thanks! Patrick _______________________________________________________________________________ From: pgut001(a)cs.auckland.ac.nz on Thu, Sep 26, 1996 9:47 Subject: How to break Netscape's server key encryption - Followup To: cypherpunks(a)toad.com There has been a successful hostile attack on a Netscape server key using the code I posted yesterday. I was contacted earlier today by someone who told me he had in the past obtained Netscape server keys and PGP private keys from Windows NT machines running Microsofts insecure FTP server which allows access to the entire drive (he found some of the PGP keys using archie searches - ouch!). He lives somewhere with nasty anti-hacking laws and definitely doesn't want his identity known, but after some pleading said I could reveal the following: - He used the cracklib dictionary to get the password - The password was found "very quickly" - The password was a female name - He deleted the server key after he'd found the password - He did it merely out of idle curiosity and has no intention of misusing the information. - He definitely doesn't want to be contacted Peter. ------------------ RFC822 Header Follows ------------------ Received: by mail.ndhm.gtegsc.com with SMTP;26 Sep 1996 09:47:35 -0400 Received: from toad.com by delphi.ndhm.gtegsc.com with SMTP; Thu, 26 Sep 1996 13:44:58 GMT Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id CAA12813 for cypherpunks-outgoing; Thu, 26 Sep 1996 02:53:13 -0700 (PDT) Received: from cs20.cs.auckland.ac.nz (root(a)cs20.cs.auckland.ac.nz [130.216.34.10]) by toad.com (8.7.5/8.7.3) with ESMTP id CAA12807 for <cypherpunks(a)toad.com>; Thu, 26 Sep 1996 02:53:09 -0700 (PDT) From: pgut001(a)cs.auckland.ac.nz Received: from cs26.cs.auckland.ac.nz by cs20.cs.auckland.ac.nz (8.7/4.7) id VAA14298; Thu, 26 Sep 1996 21:54:11 +1200 (NZST) Received: by cs26.cs.auckland.ac.nz (relaymail v0.9) id <84373168812186>; Thu, 26 Sep 1996 21:54:48 (NZST) To: cypherpunks(a)toad.com Subject: How to break Netscape's server key encryption - Followup Reply-To: pgut001(a)cs.auckland.ac.nz X-Charge-To: pgut001 X-Authenticated: relaymail v0.9 on cs26.cs.auckland.ac.nz Date: Thu, 26 Sep 1996 21:54:48 (NZST) Message-ID: <84373168812186(a)cs26.cs.auckland.ac.nz> Sender: owner-cypherpunks(a)toad.com Precedence: bulk

1 0

Re: Taking crypto out of the U.S.
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:55 AM 9/26/96, Adamsc wrote: >On Wed, 25 Sep 1996 06:26:31 -0500 (EST), Adam Shostack wrote: > >>| >Theres a personal use exemption. Michael Froomkin's web page has a >>| >pointer to it. > >>| What if your laptop gets "stolen"? Or you sell it for a plane ticket home >>| after your wallet gets pinched? > >>You're required to report it to the Feds. RTFU. > >Yeah, but you can't be persecuted. So what happens if Joe-Cryptographer >writes a *great* NSA-stumping crypto program - not for export - and it just >happens to get pinched (The police might even recover it!)? Outside >distribution w/o penalties... This is what judges and juries are for. Interpreting the "spirit of the law." (I feel strange defending the legal system, but in plain English: it ain't this stupid. A defense of "I didn't give secrets to the Koreans, I was just reading these documents outside their embassy, and they blew off the bench and onto their property." won't cut it. Or, at least, I think there's a fair chance a jury would find one guilty of espionage, treason, whatever.) Now I don't think there's any real chance of being prosecuted for having a laptop lost or stolen, regardless of what it contains (unless it was true DOD secret stuff, and then the discipline would be handled internally to one's agency), but don't think for a second that this is a new "loophole" in the export laws! --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Hallam-Baker demands more repudiations or he'll write!
by jim bell 17 Dec '03

17 Dec '03

At 10:49 AM 9/26/96 -0400, Brian Davis wrote: >On Wed, 25 Sep 1996, Jean-Francois Avon wrote: > >> On 25 Sep 96 at 5:59, Brian Davis wrote: >> >> > I disagree that that will be the response, but you should be willing >> > to allow one group of people to fight fire with fire. >> >> But generally, it has been found a much better solution to fight fire >> with water, and this is why I am not convinced of the ideological >> effectiveness of AP, although I don't doubt it's operationnal >> effectiveness at all. > > >If by "operation effectiveness" you mean some people will be killed, I >agree. I also agree with the fire/water comment (maybe in more ways than >one!); my comment related to my belief that AP-supporters shouldn't >complain about especially draconian measures taken against them by >governments, given their modus operandi. I think you totally missed Jean-Francois' point: Turn your last statement around, and that's how _I_ look at the operation of governments: "Government supporters shouldn't complain about especially draconian measures taken against them by AP, given their modus operandi." I for one would welcome a debate on just such an issue. Remember, to justify the status quo you need to defend not only the comparatively-free governments of a handful of western nations, but in fact each and every government on the face of the earth. Don't think you can just say, "This government is sorta okay," because what I am proposing fixes all the other governments on earth. You can't support the maintenance of an oppressive system most everywhere else, simply because (arguendo) they "sorta" got it right, here. (And I'd argue against that last claim!) Besides, I've long ago given up the idea that the leadership of the US will really, truly attempt to promote freedom around the world. No, they won't. They will continue to support the thugs. The problem they have with overthrowing the thugs is that "what goes around comes around," and they're well aware that they're gonna get kicked off their throne once the precedent is set with a few dozen foreign governments getting replaced. Jim Bell jimbell(a)pacifier.com

1 0

A Special Invitation to TV1 Users:
by TV1 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The best things in life are still free-and some of them get even better! Once upon a time, you registered to use TV1, the only personalizable TV listings site on the Internet. If you've been back to the site during the past week, you would have noticed gargantuan, earth-shattering additions to our humble old listings Web site. TV1 has been incorporated into The GIST, a full service home entertainment guide providing in-depth coverage of what's worth watching on TV and the Internet, as well as original features on everything from today's hottest television shows (with audio clips of stars) to reviews of the latest home entertainment hardware. If you've been to TV1/TheGIST lately, we hope you've been enjoying our service, and hope that you don't mind the fact that our graphic improvements now require at least a Netscape 2.0 or Explorer 3.0 browser. Stick with us, and you'll be seeing even more great enhancements during the next month. If you're one of those deprived Web surfers who hasn't seen the site in a few weeks, c'mon back--and see what you've been missing. Our new URL is www.theGist.com or you can still reach us at www.TV1.com. Thanks. We look forward to helping you with your home entertainment choices tonight, and every night. Your wannabee hosts, - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMkrm7SoZzwIn1bdtAQGILAF8DsqSWOeABIYPgOcXwyk6FLores03wa15 LGDwf//VqW+dwIj4XyNvPqGD/CpdE27L =2Ss2 -----END PGP SIGNATURE-----

1 0

NIST conference
by P. J. Ponder 17 Dec '03

17 Dec '03

Following is an announcement about a NIST conference on leveraging the distributed nature of the Internet to accomplish tasks that might be otherwise not feasible. The abstract notes that this type of activity has 'important economic, social, and political consequences'. This may already be old news, I was off the list for the past few days. Date: Thu, 26 Sep 1996 15:18:08 -0400 From: Liz Lennon <elizabeth.lennon(a)NIST.GOV> Subject: Cyber Conference Announcement To: csl-bulletin(a)NIST.GOV >Return-Path: <moline(a)sst.ncsl.nist.gov> >Date: Thu, 26 Sep 1996 15:00:46 -0400 (EDT) >From: Judi Moline <moline(a)sst.ncsl.nist.gov> >Subject: Cyber Conference Announcement >To: elizabeth.lennon(a)NIST.GOV >Cc: moline(a)sst.ncsl.nist.gov > > >Event: Conference on Leveraging Cyberspace > >Date: October 8-9, 1996 > >Purpose: People with shared interests are using the Internet to >solve problems, accomplish tasks, and create resources that would be well >beyond the reach of any one person or organization. The ability to leverage >the efforts of large numbers of networked users has important economic, >social, and political consequences. This conference is designed to explore >this phenomenon from both a technical and social science perspective. >Additionally, the closing session of the conference will cap off several >weeks of virtual discussions on the conference's web site. > >Location: Xerox Palo Alto Research Center (PARC) > Palo Alto, Calif. > >Keynote by: John Seely Brown, Vice President and Chief Scientist, > Xerox > >Program: Web: http://nii.nist.gov/cyber/cyber_conf.html > >Registration: $200 > >Sponsors: White House National Economic Council > Commerce's National Institute of Standards and > Technology > Xerox Palo Alto Research Center > >Technical contact: Judi Moline, NIST > (301) 975-4601 > email: jmoline(a)nist.gov > >Information: Web: http://nii.nist.gov/cyber/cyber_conf.html > >To register: Print registration form from web site and return with > payment to: > Office of the Comptroller > NIST > A807 Administration Building > Gaithersburg, Md. 20899-0001 USA > > Or fax to: > Lori Phillips, NIST > fax: (301) 948-2067 > > Or: > Lori.Phillips(a)nist.gov > > >

1 0

Re: Cuba, Iraq, AP...
by James A. Donald 17 Dec '03

17 Dec '03

At 09:08 AM 9/26/96 -0500, Phil Fraering wrote: > Shortly after the Gulf War elements in the Iraqi military tried to > overthrow Hussein; they apparently tried to co-ordinate with the U.S., who > tried to co-ordinate with Saudi Arabia, who warned Saddam that there was > going to be a coup attempt; gotta stop that Ol' power vaccuum... > > The fact that the people who performed the Bay of Pigs were enticed into > it by promised but withdrawn U.S. military support is a matter of public > record; would Castro still be in power had the United States not > (intentionally? I don't know) destroyed the core resistance against him > in that fashion? Two rulers, one of whom is a communist, have more in common than two communists, one of whom is a ruler. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0