- cypherpunks-legacy - lists.cpunks.org

Re: Is there a lawyer in the house? :)
by Glenn Johnson 17 Dec '03

17 Dec '03

On the lighter side (not to be taken seriously): Q: What if Alice and Bob are siamese twins? Could we imagine a constitutional test that turns on whether a majority of organs are shared? Could the dissent cite the fact that some of the shared organs are not vital? Q2: Better yet, what if Alice and Bob were only 2 of say 6 distinct personality manifestations exhibited by one physical person? Again, would we need to arrange for a consensus among at least 2 more personalities to form a majority, thus entitling the collective to shared privacy? The answers to these and other exciting questions on the next episode of "Exhaust that Thread." At 01:27 AM 12/10/95 -0500, you wrote: >On Fri, 8 Dec 1995, Black Unicorn wrote: > >> On Thu, 7 Dec 1995, Jeff Weinstein wrote: >> >> > Black Unicorn wrote: >> > > >> > > On Thu, 7 Dec 1995, sameer wrote: >> > > >> > How about if Bob had a contractual agreement with Alice to keep his >> > key secret? >> >> Then as a defense attorney, I would argue that Bob had an obvious >> expectation of privacy with Alice, and that the fact that he relayed this >> key to Alice only under those circumstances represents a definite >> expression of his intent to keep the key private, thus triggering 4th >> amendment protections. My view is that this would be a very strong argument. > >Bob's Fourth Amendment rights are not triggered by his contract with >Alice. Alice can be compelled to give up the key (by testimony or >production) and giving up that key does not tend to incriminate *Alice* >in a violation of law. Alice can't invoke Bob's rights against >self-incrimination for obvious reasons: Alice isn't Bob. >^^^^ >EBD > > >> >> Note that this is an academic opinion, not a legal one as I am not being >> paid. >> >> > >> > --Jeff >> > >> > -- >> > Jeff Weinstein - Electronic Munitions Specialist >> > Netscape Communication Corporation >> > jsw(a)netscape.com - http://home.netscape.com/people/jsw >> > Any opinions expressed above are mine. >> >> --- >> My prefered and soon to be permanent e-mail address: unicorn(a)schloss.li >> "In fact, had Bancroft not existed, potestas scientiae in usu est >> Franklin might have had to invent him." in nihilum nil posse reverti >> 00B9289C28DC0E55 E16D5378B81E1C96 - Finger for Current Key Information >> >> > >Not a lawyer on the Net, although I play one in real life. >********************************************************** >Flame away! I get treated worse in person every day!! > >

1 0

Re: Is it possible?
by Rich Salz 17 Dec '03

17 Dec '03

> How can I be >sure that the source has not been modified from the original distribution >before it is compiled? Impossible.

1 0

Re: Windows .PWL cracker implemented as a Word Basic virus
by dan＠milliways.org 17 Dec '03

17 Dec '03

On Fri, 8 Dec 1995 19:51:55 -0800 you wrote: > >Also, does NT use the same algorithm for saving network passwords? > No, but they're doing something that makes me very uncomfortable: As I read this, they're hashing the password and some other user information using MD4 then doing some proprietary permutations on that. Given their record with security, I'd rather they used straight MD4, rather than throwing in something that we can't analyze. Dan Bailey >From the Microsoft Knowledge Base article Q102716 Storage of the Passwords in the SAM Database -------------------------------------------- User records are stored in the security accounts manager (SAM) database. Each user has two passwords with which it is associated: the LAN Manager compatible password and the Windows NT password. Each password is stored doubly encrypted in the SAM database. The first encryption is a one-way function (OWF) version of the clear text generally considered to be non-decryptable. The second encryption is an encryption of the user's relative ID (RID). The second encryption is decryptable by anyone who has access to the double-encrypted password, the user's RID, and the algorithm. The second encryption is used for obfuscation purposes. [snip] The Windows NT password is based on the Unicode character set, is case sensitive, and can be up to 128 characters long. The OWF version (called the Windows NT OWF password) is computed using the RSA MD-4 encryption algorithm, which computes a 16-byte "digest" of a variable length string of clear text password bytes. *************************************************************** #define private public dan(a)milliways.org Worcester Polytechnic Institute and The Restaurant at the End of the Universe ***************************************************************

6 6

NSA flying disk follow-up [Extremely Frivolous]
by cman＠communities.com 17 Dec '03

17 Dec '03

I spoke with Dennis Cisco at the NSA today, and he is unwilling to sell or otherwise distribute the NSA flying disk promotional items "except at trade shows where we are promoting our technology transfer program." Since they are not planning on attending any such conferences in my area in the near future, it is unlikely I'll be able to help any of the (numerous) people who expressed an interest in obtaining one of these fine flying disks. (http://www.communities.com/foo/NSAfris.gif) If you'd care to discuss this matter with Mr. Cisco yourself, he can be reached at: (301) 688 0701. Note that this is in Maryland. Also, the (301) 688 0606 number listed on the frisbee seems to be either always busy or not answered -- I'm assuming it's the # for the NSA tech transfer office. Please let me know if any of you have better luck.

3 2

Re: More FUD from First Virtual [NOISE]
by Bill Stewart 17 Dec '03

17 Dec '03

At 09:19 PM 12/11/95 -0800, sameer wrote: >> Maybe Sameer will create a Hack FV page :-) > > FV isn't worth it. > Actually, Hack FV seems pretty pointless. Someone hacks FV, >and a chargeback is issued on the credit card. Big deal. Same old >outdated credit-card based payment systems. > No more secure than credit cards. Besides, if you hack FV you've got the money :-) #-- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0663 Pager/Voicemail 1-408-787-1281

3 2

Anohter angle on timing (TEMPEST)
by Dave Emery 17 Dec '03

17 Dec '03

Reading of Mr Kochers clever attack brings to mind another way of obtaining the timings it uses, particularly on smartcards and other tamper resistant hardware based crypto devices - but also perhaps on locally accessible (and poorly sheilded) servers. Observing small changes in current drain, radiated rf pulses, ground noise, noise on other pins of the device (eg a smartcard) and other kinds of transient electrical noise generated by an internal processor performing a cyrpto algorithm noise might very well allow one to quite precisely identify when certain sections or loops in the internal code of the device was running. Using this information with Kochar's statistical approach to determining bit values from time variances might make such a tempest attack on protected keys held by such a devices practical even for those of us not privy to the tricks used by the spooks to process tempest data. And it certainly could make available much more timing information per run than just the gross time to complete the crypto operation, in fact it is entirely possible that an accurate timing for each step of the algorithm could be derived from such noise measurements. Dave Emery die(a)die.com

1 0

Roger's case against RSA?
by ecarp＠netcom.com 17 Dec '03

17 Dec '03

I know that a week or so ago, there was a hearing in San Jose regarding Roger Schafly's (sp.) case against RSA. How did the hearing come out? I never saw a post... :( -- Ed Carp, N7EKG Ed.Carp(a)linux.org, ecarp(a)netcom.com 214/993-3935 voicemail/digital pager 800/558-3408 SkyPager Finger ecarp(a)netcom.com for PGP 2.5 public key an88744(a)anon.penet.fi "Past the wounds of childhood, past the fallen dreams and the broken families, through the hurt and the loss and the agony only the night ever hears, is a waiting soul. Patient, permanent, abundant, it opens its infinite heart and asks only one thing of you ... 'Remember who it is you really are.'" -- "Losing Your Mind", Karen Alexander and Rick Boyes

1 0

No Subject
by David Klur 17 Dec '03

17 Dec '03

Is the Cafe e-cash system different than Mondex? If so, how? Also, does anyone know when the Mondex trial will start in Delaware? -----BEGIN PBP SIGNATURE----- Version: 1.0.0, Copyright 1995, Pretty Bad Privacy David Klur dklur(a)dttus.com I am who I am because I say so. So there. -----END PBP SIGNATURE-------

1 0

Pornographic stories
by A&SUser 17 Dec '03

17 Dec '03

Hey, I'm Molly, and I know I sent you a bit of mail a couple of days ago. I'm not sure how you do your Pornographic server, so I'll just ask again. I know I would be VERY gratful if you could send me any XXX stories, I love to read them. I could reward you over the net somehow I'm sure. my adress is mphillips(a)cctr.umkc.edu Thanks....I'll be waiting.

1 0

Re: Pornographic stories
by Daniel Miskell 17 Dec '03

17 Dec '03

A&SUser writes: >Hey, I'm Molly, and I know I sent you a bit of mail a couple of days ago. > I'm not sure how you do your Pornographic server, so I'll just ask >again. I know I would be VERY gratful if you could send me any XXX >stories, I love to read them. I could reward you over the net somehow >I'm sure. >my adress is mphillips(a)cctr.umkc.edu > >Thanks....I'll be waiting. > What the hell are you talking about?? This is the cypherpunks mailing list!! Jeses, try alt.sex.stories. :P Munster --- _________________________________ *!Cheese Doctrine:!* Though cultured over time, and aged to perfection, one must not yield to produce mold. One must also not belittle themselves by conforming to the "whiz", but melt over the unprocessed ideas of Ghuda. _________________________________

2 1