- cypherpunks-legacy - lists.cpunks.org

DEF_con
by jya＠pipeline.com 17 Dec '03

17 Dec '03

8-26-96. EeTi: "Unix gives hackers a crack at systems." Las Vegas: Many of the hacking elite were on the Internet long before the World Wide Web was a gleam in the eye of inventor Tim Berners Lee. And these folks know the best-kept secret of gaining access to-and control of-someone else's electronic property: Unix. An expert underground Web cracker who goes by the handle +ORC noted with apparent glee: "With each company that connects to the Net, new frontiers are created for crackers to explore." Indeed, even as many old-line hackers of the sort who gathered here recently for the DefCon convention go legit, some starting cyber-security companies of their own, Internet-security experts look with trepidation to the next, more threatening wave of cybercrime. Perhaps the legendary hacker group l0pht is the best example of the thin line between cybercriminal and corporate comer. Several members spoke at DefCon, notably Death Vegetable, administrator of the Cult of the Dead Cow; and Mudge, the brilliant encryption cracker who devised the S/Key Cracker's Toolkit and posted it on the Net, much to the chagrin of Bellcore, S/Key's owners. ----- http://jya.com/defcon.txt (9 kb) DEF_con

1 0

Re: a question please
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:40 PM 8/27/96, Charley Sparks wrote: >I have been lurking for some time, the occasional quip of a post, perhaps >a comment >on a "shrink wrap" - I still haven't figured out "Black Net" >Done searches, ( the usual ) and no luck... can I get a break ? Would >someone please >explain it to me ? Then perhaps you need new search tools! My own searches of one of the mysteries you mentioned, BlackNet, produce lots of informative results. But, then, I use Alta Vista, the One True Search Engine. (Actually, all similar search engines, e.g. Excite, Yahoo, Inktomi, etc., produce comparable results.) And since I have been seeing your messages--which I presume is roughly coterminous with you subscription to this list--there have been several mentions of my Cyphernomicon FAQ. I suggest you consult this for long explanations of many Cypherpunks topics. --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

AFDA Web Site
by AFDA2＠aol.com 17 Dec '03

17 Dec '03

MEMORANDUM SUBJECT: AFDA Web site, located at: http://www.afda.org In September, the Web site for the Association of Federal Defense Attorneys (AFDA) will become password-protected for members only. Those of you who have paid your membership dues for 1996 will be receiving an email message containing a User ID and Password, which will be good through December 31, 1997 -- almost a year and a half of unlimited usage for the small membership fee that allows the association to continue financing the cost of maintaining and upgrading the web site. Once the member password system goes into effect in September, the online Library will be stocked with research memos in many areas of federal criminal litigation (including topics in white collar / corporate criminal litigation), along with sample briefs and an expanded collection of court opinions and government agency documents, all of which can be downloaded to your hard drive. At present, the library has all criminal law-related Supreme Court opinions, key U.S. Sentencing Commission documents (including the 1995 guidelines), and over 60 operations memoranda of the Bureau of Prisons. In addition, the online Newsletter will be expanded to add a separate section for white collar / corporate criminal defense. Please note that upon installing the member-password system, the Message Board on the web site will provide members with a private resource for discussing strategies and issues with other colleagues, without feeling exposed to the general web population. We hope you will take advantage of this opportunity and put the message board to good use. Any of you who have not yet joined the association may do so easily by clicking the "Join AFDA" bar at the top of the home page and completing the membership form. Please feel free to complete the "Feedback" form on the web site so that we can continue to receive your comments and suggestions, a number of which have already been incorporated into the site. Please remember that this web site exists to serve the educational needs of the federal criminal defense bar, so the association counts on you to join and give us your views on how the site can continue to serve specific needs and interests of the defense bar. All email inquiries should be addressed to: AFDA2(a)AOL.com Best regards to all, and thanks again for your support. Marc S. Sanders (System Operator / Webmaster)

1 0

Re: $10K offer if you can break the code
by Michael T. Babcock 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: mpd(a)netcom.com, cypherpunks(a)toad.com Date: Tue Aug 27 17:17:57 1996 Date: 23 Aug 96 13:59:38 EDT From: "JOHN E. HOLT" <76473.1732(a)CompuServe.COM> Subject: secret message To: <mbabcock(a)tyenet.com> Date: 01-Aug-96 14:50 EDT From: JOHN E. HOLT [76473,1732] Subj: puzzle ^%}{{ ZZ VVPAGMIGJEKMCCHIAKKPEHJDDDLOABGAMMJOCDFNOLNOKKKNIADPBGPPOEPIDCEMPGWW VVFCMOPKLKPJOHCNCJBDGOOJKFANCJJBDBMDIFIEKEDPLKDDGMPLHMIIPIJFMKOLENWW VVCAKJGJCKPAEOOMLJPNFJEKEINIHFKHNOLPCAHLEKHHLMHJFCOEKAFAGPHJBCPBHBWW VVOKLAENICAFDHEOEODMHMFGIONMAACAOHEOHDAJDNENGAHABNHGOCCPJNFDMAMKADWW VVMGDHKGPKBEIDBNLOCMLFMEIOKBFBFKJIMIIIFKJDFENCBPAPFBAOFMHEDODBFFPDWW VVOMFFJBNGEJPLGHJLFOBLFOGCBKAACEICLBIKHGILKCLMHPFIAHPDEOOODPPMLGDNWW VVGLDNEBDINMILDJDOJOJNKCLIBBKBCBEJPBJCFHGKMFLLEPGLGOOIIGAKJEGNPFHDWW VVIJBMFLALHPEHHGEGPCLGILBDBMEGMOGOIFBPPONGEDJPNFNMPCJFJPAEMIDOEMBLWW ZZ ZZ Distribution: To: ME > [76473,1732] Message Copyright 1996, Michael T. Babcock http://www.cyberbeach.net/~mbabcock Send a message with the subject "Send public key" to receive an automatic reply with my public key. -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: ascii Comment: http://www.cyberbeach.net/~mbabcock/PGP/ iQC1AgUBMiNmCttTCwP6TF2xAQG65AT9GW2JbpaAo26USWptnLhhdaHWXbvDEi2i 35KWFHPWnlfJmj7NiUz+YKAV1aoHJssbGGUKIGoU1R0AV9NepGcODRwamrpZMXZ2 2TWIjgc0NbI+G9PNJrtc9h0XhsWV+w9upF0Yr1uCdCMtsdQtMKGguPzfd3+CfOkq X5kSv4WIhi22WYwHHlyEyEMPrxMo60ey1EFUUctBYLqgl91omsR+qg== =wEv6 -----END PGP SIGNATURE-----

2 1

Re: Pronto making a comment
by Michael T. Babcock 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: liberty(a)gate.net, cypherpunks(a)toad.com Date: Wed Aug 28 00:17:58 1996 > >-----BEGIN PGP SIGNATURE----- > >Version: 2.6.3i > >Charset: ascii > >Comment: http://www.cyberbeach.net/~mbabcock/PGP/ > > How did you get Pronto to do a comment? > JMR I added a "comment=" in my config.txt ;) ... the old fashionned way. Message Copyright 1996, Michael T. Babcock http://www.cyberbeach.net/~mbabcock Send a message with the subject "Send public key" to receive an automatic reply with my public key. -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: ascii Comment: http://www.cyberbeach.net/~mbabcock/PGP/ iQC1AgUBMiPIe9tTCwP6TF2xAQFk4wT/Z4gZo5FW3QbiMKEjcXylL0Q449x2ZvaC pJ+3i/ExfxoDgxgsRTo7b2/Rz0JWn5x8K1TnAABfoRrnDe/wtoBEGekzxh9U69MQ RT0m0leok3ep91QKE2WFdWPXw1WHmOduXD+rCPB4cjQ0yENYdHGMnPzTaLG/Y5t3 8q/sq0G4DA7xGbOqJkwa+ALmhaNMt+VTQIfX02RZC0lIJYhcdLs+mQ== =zMc7 -----END PGP SIGNATURE-----

1 0

WORD Mail: A Part of Our Lives...
by wiechman＠iconnet.com 17 Dec '03

17 Dec '03

Dear Friends of Word [http://www.word.com] Two things: 1. Word has been nominated for 3 (three) of the 1996 Cool Site of the Year Awards (Cool Site of the Year, Cool Design of the Year, and Cool Web Designer of the Year). Please vote for us. We're literally begging you. Does this seem desperate? Cool Site of the Year is located at http://cool.infi.net/vote.html 2. Please check out Word [http://www.word.com] Right now you can experience our special feature "Guyana," a super-deluxe documentary about three NYC artists' (Bob Braine, Mark Dion, and Alexis Rockman) six-week trek through the Amazon jungle. It's got art, animation, text, and an original score. Sort of like a movie. But not. Anyway, it's real good. Mmmmm! Truly Yours, WORD 3. I know we said there would only be two things, but we just thought we should mention that if you've requested to be removed from our mailing list, it *will* happen very soon. We've had a bit of trouble keeping everything up to date. Word swears to remove you from the list.

1 0

[Fwd: Re: Code Review Guidelines (draft)]
by Wendell Lee 17 Dec '03

17 Dec '03

unsubcribe wendell(a)singnet.com.sg To: hag(a)ai.mit.edu Subject: Re: Code Review Guidelines (draft) From: lists(a)lina.inka.de (Bernd Eckenfels) Date: Wed, 28 Aug 1996 03:30:49 +0200 (MET DST) Cc: ichudov(a)algebra.com, adam(a)homeport.org, firewalls(a)greatcircle.com, cypherpunks(a)toad.com, coderpunks(a)toad.com In-Reply-To: <199608272111.RAA23997(a)galapas.ai.mit.edu> from "Daniel Hagerty" at Aug 27, 96 05:11:39 pm Sender: owner-cypherpunks(a)toad.com Hi, > Much better, look at rfc822. (I wouldn't consider *anything* that > has the word "sendmail" in it a good reference). its much better if you dont rely on the content of the string at all. Dont use sh -c or system and you will be save. Simply asume that all characters are valid in user suplied strings and treat them exactly that way... If they need to be exporeted then unfortunately they need to be 'untainted' and this should be done by positive not negative lists as mentioned in the guidelines. Greetings Bernd PS: I have collected the references on http://www.inka.de/sites/lina/freefire-l/ -- (OO) -- Bernd_Eckenfels(a)Wittumstrasse13.76646Bruchsal.de -- ( .. ) ecki(a){lina.inka.de,linux.de} http://home.pages.de/~eckes/ o--o *plush* 2048/A2C51749 eckes@irc +4972573817 *plush* (O____O) If privacy is outlawed only Outlaws have privacy

1 0

Re: Microsoft Explorer security hole (fwd) MSoft's reply...
by bf578＠scn.org 17 Dec '03

17 Dec '03

Actually I think its thier lack of foreseeing how a produbt can and will be used. Problems throughout thier line of products show this off. Most of thier products are a creation of Microsoft anyway, they've stolen, borrowed, purchased or purchased the company to obtain their products, then added features upon features so they can market the hell out of it to become #1 in market share. Many cases they've taken a reliable product and made it less than reliable. I don't understand why people continue to support Microsoft they way they do! Ponder the thought of Microsoft buying up every web server/broswer company in the first year or two of the WEB? Would it have made it where it is today? Ponder the thought of Micorosft having ultimate control over the IETF >In my experience, one of Microsoft's main problems when it comes to security >has been its developers and program/product managers don't think like "bad >guys" when it comes to design and subsequent exploits and holes. >Unfortunately, the user is the ultimate loser. > >Joel > >BTW - The paranoid side of me wouldn't be surprised to see PC >"espionage-enabled" viruses and trojans within the next few years. Their >main purpose would be to either disable or patch various security features >for later attacks, or directly snatch information off of hard drives and >send it out over the Net. I know of a few lab projects of a similar nature, >that were very easy to implement. > BTW: When is this list/listserver going to convert the reply-to fields to point to cypherpunks(a)toad.com? -- ------------------------------------------ There are no facts, only interpretations. I always wanted to be somebody,

3 2

Other nations' bad laws and crypto/GAK ...
by Ernest Hua 17 Dec '03

17 Dec '03

A legal concern about GAK ... What would be the basis for each and every request for GAK keys from other nations? What sort of process would decide which purposes are okay for which to grant access to GAK keys? What if it is to enforce this new Malaysian law against Karaoke (say, because someone was importing karaoke equipment to Malaysia)? It seems like we should not be supporting other nations' repressive laws. Is each and every GAK key to be granted to be carefully reviewed for concerns on national security/foreign policy/repressive law/stupid law? If so, then it seems like a huge government beaurocracy will have to be created just to handle proper review of GAK requests. Ern -------- From Nando Times ... CONCERNED MALAYSIAN STATE RULES AGAINST KARAOKE Copyright © 1996 Nando.net Copyright © 1996 Reuter Information Service KUALA LUMPUR (Aug 28, 1996 10:35 a.m. EDT) - Citing concerns about moral decay, the central Malaysian state of Selangor will close all illegal video games outlets and karaoke lounges from September 1, the national Bernama news agency reported on Wednesday. Licensed video games arcades will also be closed on expiry of their licences while the licensing conditions for karaoke lounges have been tightened, Bernama quoted Selangor's Chief Minister Muhammad Muhamad Taib as saying. As in many Asian countries, karaoke has become a popular recreation, resulting the mushrooming of lounges in many of Malaysia's cities. Officially Moslem Malaysia is vigilant for any erosion of moral standards among its youth. ... [ SNIP ] ...

1 0

Re: File System Encryption
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Tue, 27 Aug 1996 09:01:03 -0500 (CDT), Douglas R. Floyd wrote: >> I'm aware of the three main disk encryption programs SFS, SECDRV, and >> SECDEV, but I need to find a solution that works with Windows 95 32bit >> or Windows NT 4.0. >> >> I'm currently using SFS 1.17 and Secure Drive under Win-95, but am >> unable to continue to work in dos compatability mode due to severe >> performance hits. I am open to commercial products that have passed >> peer review, but know of none. >> >> If anyone could suggest a solution (outside of switching OS's), I >> would be *most* gratefull. >> >> Please respond to the list, as I am a subscriber under another >> account. > >If you have another 386 or 486 lying around, you could install Linux and >Ian's encrypted loopback code on a remote box, then NFS or Samba the >filesystem over. For protection, you could modify the vlock command to >lock the console (and not unlock it), and disable inetd. Then, unless Better yet, patch some stuff onto a spare power supply cable so that a small siren would go off on a reboot and then use those security bolts to hold the case on. That would probably discourage someone from rebooting off a floppy. >someone has the permissions to access the files through the network, the >files are inaccessable ;-). Neat idea, and a great use for all the linux security patches we've heard about. / If you think education is expensive, try ignorance. / Home: Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp / Autoresponder: send email w/subject of "send resume" or "send PGPKEY" / Work: cadams(a)acucobol.com | V.M. (619)515-4894 | (619)689-6579 / Member in good standing of the GNU whirled hors d'oeuvre

2 1