- cypherpunks-legacy - lists.cpunks.org

Mail Program is screwey, sorry
by David D.W. Downey 17 Dec '03

17 Dec '03

I apologize for the remail of the Eternity uncensorable post. I have recently switched Linux versions and the mail program is a little bit screwy. This one was mailed via Netscape for Linux. (Which itself is a little screwy.) It does not send the message in the same format that it displays on screen, as well as reposting the replied to message. I will fix it as soon as possible. For now there may be one or two thers that come through like this. Plese forgive them.

1 0

Re: SSL trouble
by Will French 17 Dec '03

17 Dec '03

Scott Brickner writes: > We've identified several forms of "real-world retaliation:" > 1) "Result hoarding" - failure to report a found key > 2) "Segment hoarding" - requesting more segments than one can hope to search > 3) Denial of service - preventing access to the server Perhaps I wasn't clear... by real-world retaliation, I'm referring to being sued, thrown in jail, belabored about the head with blunt objects, etc. The three basic defenses I have are: (a) not getting people angry, (b) not letting them know who to be angry at, or (c) the threat of counter-retaliation. The "random" method is of type (b). I think you are focusing a bit too much on theoretical efficiency and not enough on bottom-line practicality. A 37% waste factor is better than staying in bed and wasting it all. >> I _don't_ care about the procedures, as long as I can get >> the information I need to go my own way. > So what information wouldn't you be getting? To "go your own > way", you need exactly the same information that the client > workstations use to test one key. The difference in your code > and the clients exists solely in how they determine the next > key to try. Yes, this is currently true, but there was a suggestion of witholding part of the challenge in order to keep people honest, or something like that. I didn't quite understand it, but I didn't like it. Will French <wfrench(a)interport.net>

1 0

Re: Netscape's RNG
by skapp＠cix.compulink.co.uk 17 Dec '03

17 Dec '03

In-Reply-To: <199508300512.BAA23185(a)calum.csclub.uwaterloo.ca> > -----8<-----8<----- > struct RNG > { > unsigned char md5bytes[0x10]; > unsigned char randbytes[0x10]; > int size; > void *md5data; > }; > > RNG_GenerateRandomBytes(struct RNG *i0, char *i1, int i2) > { > char buf[0x20]; > int o1,o2; > > while (i2 > i0->size) > { > memcpy(i1, &(i0->randbytes)+0x10-i0->size, i0->size); > i1 += i0->size; > i2 -= io->size; > if (err = MD5_Begin(i0->md5data)) return err; > if (err = MD5_Update(i0->md5data, &(i0->md5bytes), 0x10)) return err; > if (err = MD5_End(i0->md5data, &(i0->randbytes), buf, 0x10)) return err; > i0->size = 0x10; > o2 = 0; > o1 = &(i0->md5bytes[0x0f]); > do > { > if ((*o1)++) break; > --o1; > } while (++o2 <= 0x0f); > } > > /* i2 <= i0->size */ > memcpy(i1, &(i0->randbytes)+0x10-i0->size, i2); > i0->size -= i2; > return 0; > } > -----8<-----8<----- > This looks very much like the RSAREF random number code, there are a few minor differences, but it still looks very similar. -------------------------------------------------------------------------- - E-mail: skapp(a)cix.compulink.co.uk, skapp(a)sourcery.demon.co.uk PGP fingerprint: 78 1C CD F4 A4 44 D2 CB DD A5 CF EF F1 DD D8 6A -------------------------------------------------------------------------- - RSAEURO: rsaeuro(a)sourcery.demon.co.uk

1 0

SSL brute/ng
by P.J. Ponder 17 Dec '03

17 Dec '03

If anyone is putting together a wish list of features for the next iteration of the distributed brute would they like to consider some sort of mirroring approach for the server (at least on stats or updates/ software ) so that some of that traffic could be reduced? I'm afraid I am one of the guilty trying to log on to check on the stats at least once and I probably contributed to choking it just by doing that. If a local server could have been updated, it would save bandwidth on the server doing real work. Could a trusted group of segemnt dolers be put together? I like the idea of running a benchmark type of program so that I could multiply keys/sec times the amount of time I had to donate, and only get a reasonable for me number of segments. I would hope that statistics be gathered on the number of keys tested, elapsed time, etc. so that we all got some more or less real world insight into key lengths and strengths, effort required to break, that we have all heard so many projections about... especially as the doling gets more sophisticated and the number of participants/cycle pool increases. Will there be Hal3? Just to ask a really dumb question, how do you know when you get the key? Is there some plaintext header string you're looking for? --pjp

2 1

Re: Fighting the cybercensor
by jim bell 17 Dec '03

17 Dec '03

At 09:40 PM 1/27/97 -0500, Phillip M. Hallam-Baker wrote: > > >jim bell <jimbell(a)pacifier.com> wrote in article <5ch9f2$cuu(a)life.ai.mit.edu>... > >> Look, I've proposed what I consider to be a remarkably consistent method to >> prevent the kind of political tyranny that you criticize, and I don't see >> any recognition of this fact. > >Thats because its a whacko solution that has no credibility >or consistency. I'm still waiting for you to explain what you believe to be the "problem" for which we are searching a solution. Is the problem that there is slavery? Or do you think the only problem is that the slaves are unhappy? Jim Bell jimbell(a)pacifier.com

1 0

Re: question about reputation
by Bill Stewart 17 Dec '03

17 Dec '03

At 09:53 AM 9/11/95 -0700, Tim wrote: >(Humorous Sidenote: an informal variant of the Chess Grandmaster approach >is to use the best arguments found on one list on _another_ list. Another >variant, widely used, is to adopt the best arguments of others and use them >one's self (oneself?). This is how memes spread, and is central to the >advancement of knowledge.) John Young uses this approach, quite effectively; his source lists are the New Yawk Times and Wall Street Journal, and the reputation he's built by forwarding the material has been quite good, in spite of the dubious sources of his information :-) #--- # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #---

1 0

Media coverage of NIST Export meetings?
by Pat Farrell 17 Dec '03

17 Dec '03

Has anyone seen any media coverage of last week's meetings? I haven't seen anything in either the Washington Post or the Wall Street Journal. Nothing on radio or local TV either. I don't expect much coverage, as Joe Sixpack has no knowledge of why he should be interested. But I expected at least a paragraph hidden somewhere inside. Perhaps I missed it. Anyone else seen any??? Pat Pat Farrell Grad Student http://www.isse.gmu.edu/students/pfarrell Info. Systems & Software Engineering, George Mason University, Fairfax, VA PGP key available on homepage #include <standard.disclaimer>

2 1

New PA law (????)
by Tom Edwards 17 Dec '03

17 Dec '03

[Can anyone provide more information on this? I am still looking for the original source to confirm/deny this. Please pay special attention to anti-anon-mailer deals] ---------- Forwarded message ---------- This law was just passed and signed by the governor in PA. If you look at it, you'll notice that it makes it illegal to post instructions for making certain things (like phreaking boxes) and it also makes it illegal to use an anonymous remailer (conceal or assist another to conceal from any service provider). Amending Title 18 (Crimes and Offenses) of the Pennsylvania Consolidated Statutes, further providing for manufacture, distribution or possession of devices for theft of telecommunications services. The General Assembly of the Commonwealth of Pennsylvania hereby enacts as follows: Section 1. Sections 910 and 3926 of Title 18 of the Pennsylvania Consolidated Statutes are amended to read: § 910. Manufacture, distribution or possession of devices for theft of telecommunications services. (a) Offense defined.Any person commits an offense if he: (1) [makes or possesses any instrument, apparatus, equipment or] makes, distributes, possesses, uses or assembles an unlawful telecommunication device or modifies, alters, programs or reprograms a telecommunication device designed, adapted or which can be used: (i) for commission of a theft of [telecommunications]telecommunication service or to acquire or facilitate the acquisition of telecommunication service without the consent of the telecommunication service provider; or (ii) to conceal or to assist another to conceal from any [supplier of telecommunications] telecommunicationservice provider or from any lawful authority the existence or place of origin or of destination of any telecommunication; or (2) sells, possesses, distributes, gives or otherwise transfers to another[,] or offers, promotes or advertises for sale [any instrument, apparatus, equipment or device described in paragraph (1) of this subsection,] any: (i) unlawful telecommunication device, or plans or instructions for making or assembling the same, under circumstances evidencing an intent to use or employ such [instrument, apparatus, equipment or] unlawful telecommunication device, or to allow the same to be used or employed for a purpose described in paragraph (1) [of this subsection], or knowing or having reason to believe that the same is intended to be so used, or that the aforesaid plans or instructions are intended to be used for making or assembling such [instrument, apparatus, equipment or device.] unlawful telecommunication device; or (ii) material, including hardware, cables, tools, data, computer software or other information or equipment, knowing that the purchaser or a third person intends to use the material in the manufacture of an unlawful telecommunication device. (b) Grading.An offense under this section is a [misdemeanor of the first] felony of the third degree if the person convicted of such offense has been previously convicted of any similar crime in this or any other state or Federal jurisdiction. Otherwise it is a misdemeanor of the [second] first degree. (c) Restitution.The court may, in addition to any other sentence authorized by law, sentence a person convicted of violating this section to make restitution under section 1106 (relating to restitution for injuries to person or property) or 42 Pa.C.S. § 9721(c) (relating to sentencing generally). (d) Civil action.A telecommunication service provider aggrieved by a violation of this section may, in a civil action in any court of competent jurisdiction, obtain appropriate relief, including preliminary and other equitable or declaratory relief, compensatory and punitive damages, reasonable investigation expenses, costs of suit and attorney fees. (e) Definitions.As used in this section, the following words and phrases shall have the meanings given to them in this subsection: "Manufacture of an unlawful telecommunication device." To produce or assemble an unlawful telecommunication device or to modify, alter, program or reprogram a telecommunication device to be capable of acquiring or facilitating the acquisition of telecommunication service without the consent of the telecommunication service provider. "Telecommunication device." Any type of instrument, device, machine or equipment which is capable of transmitting or receiving telephonic, electronic or radio communications, or any part of such instrument, device, machine or equipment, or any computer circuit, computer chip, electronic mechanism or other component which is capable of facilitating the transmission or reception of telephonic, electronic or radio communications. "Telecommunication service." The meaning given to it in section 3926 (relating to theft of services). "Telecommunication service provider." The meanings given to it in section 3926 (relating to theft of service). "Unlawful telecommunication device." The meaning given to it in section 3926 (relating to theft of service). § 3926. Theft of services. (a) Acquisition of services. (1) A person is guilty of theft if he intentionally obtains services for himself or for another which he knows are available only for compensation, by deception or threat, by altering or tampering with the public utility meter or measuring device by which such services are delivered or by causing or permitting such altering or tampering, by making or maintaining any unauthorized connection, whether physically, electrically or inductively, to a distribution or transmission line, by attaching or maintaining the attachment of any unauthorized device to any cable, wire or other component of an electric, telephone or cable television system or to a television receiving set connected to a cable television system, by making or maintaining any unauthorized modification or alteration to any device installed by a cable television system, or by false token or other trick or artifice to avoid payment for the service. (1.1) A person is guilty of theft if he intentionally obtains or attempts to obtain telecommunication service by the use of an unlawful telecommunication device or without the consent of the telecommunication service provider. [(2) As used in this section, the word "service" includes, but is not limited to, labor, professional service, transportation service, the supplying of hotel accommodations, restaurant services, entertainment, cable television service, the supplying of equipment for use, and the supplying of commodities of a public utility nature such as gas, electricity, steam and water, and telephone service. The term "unauthorized" means that payment of full compensation for service has been avoided, or has been sought to be avoided, without the consent of the supplier of the service.] (3) A person is not guilty of theft of cable television service under this section who subscribes to and receives service through an authorized connection of a From owner-cypherpunks Fri Oct 13 15:22:25 1995 Return-Path: <owner-cypherpunks> Received: by toad.com id AA13987; Fri, 13 Oct 95 15:22:25 PDT Received: from ix9.ix.netcom.com by toad.com id AA13971; Fri, 13 Oct 95 15:22:11 PDT Received: from ix-pl4-18.ix.netcom.com by ix9.ix.netcom.com (8.6.12/SMI-4.1/Netcom) id PAA06683; Fri, 13 Oct 1995 15:21:53 -0700 Message-Id: <199510132221.PAA06683(a)ix9.ix.netcom.com> X-Sender: stewarts(a)popd.ix.netcom.com X-Mailer: Windows Eudora Light Version 1.5.2 Mime-Version: 1.0 Content-Type: text/plain; charset.s-ascii" Date: Fri, 13 Oct 1995 15:21:00 -0700 To: zoetrope(a)infinet.com (cYberpUnc) From: Bill Stewart <stewarts(a)ix.netcom.com> Subject: Re: applications Cc: cypherpunks(a)toad.com Sender: owner-cypherpunks(a)toad.com Precedence: bulk At 05:50 PM 10/13/95 -0400, you wrote: > I know this isnt what you guys generally talk about but I was curious. >Off the top of your head do you know of any sites where I can get kracking >apps for macs? Any information would be greatly appreciated. There are several fine tool companies on the Web who can sell you large hammers. Check with Yahoo for locations. #--- # Thanks; Bill # Bill Stewart, Freelance Information Architect, stewarts(a)ix.netcom.com # Phone +1-510-247-0664 Pager/Voicemail 1-408-787-1281 #--- the same person or several persons, may be aggregated in determining the grade of the offense. (d) Inferences. (1) Any person having possession of or access to the location of a public utility meter or service measuring device which has been avoided or tampered with so as to inhibit or prevent the accurate measurement of utility service and who enjoys the use of or receives the benefit from the public utility service intended to be metered or measured by the public utility meter or measuring device so avoided or tampered with may be reasonably inferred to have acted to avoid or tamper with the public utility meter or measuring device with the intent to obtain the public utility service without making full compensation therefor. (2) Any person having possession of or access to the location of the distribution or transmission lines or other facilities of a cable television system which have been tapped, altered or tampered with or to which any unauthorized connection has been made or to which any unauthorized device has been attached or any person having possession of or access to any device installed by a cable television system to which an unauthorized modification or alteration has been made, the result of which tapping, altering, tampering, connection, attachment or modification is to avoid payment for all or any part of the cable television service for which payment is normally required, and who enjoys the use of or receives the benefit from the cable television service, may be reasonably inferred to have acted to have tapped, altered, tampered with, connected or attached to or modified cable television facilities with the intent to obtain cable television service without making full compensation therefor. This inference shall not apply to the act of a subscriber to cable television service, who receives service through an authorized connection of a television receiving set at his dwelling, in making, within his dwelling, an unauthorized connection of an additional television receiving set or sets or audio system which receives only basic cable television service obtained through such authorized connection. (e) Sale or transfer of device or plan intended for acquisition or diversion.A person is guilty of a misdemeanor of the third degree if he sells, gives or otherwise transfers to others or offers, advertises or exposes for sale to others, any device, kit, plan or other instructional procedure for the making of such device or a printed circuit, under circumstances indicating his having knowledge or reason to believe that such device, kit, plan or instructional procedure is intended for use by such others for the acquisition or diversion of services as set forth in subsections (a) and (b). (f) Restitution.The court may, in addition to any other sentence authorized by law, sentence a person convicted of violating this section to make restitution under section 1106 (relating to restitution for injuries to person or property) or 42 Pa.C.S. § 9721(c) (relating to sentencing generally). (g) Civil action.A telecommunication service provider aggrieved by a violation of this section may, in a civil action in any court of competent jurisdiction, obtain appropriate relief, including preliminary and other equitable or declaratory relief, compensatory and punitive damages, reasonable investigation expenses, costs of suit and attorney fees. (h) Definitions.As used in this section, the following words and phrases shall have the meanings given to them in this subsection: "Service." Includes, but is not limited to, labor, professional service, transportation service, the supplying of hotel accommodations, restaurant services, entertainment, cable television service, the supplying of equipment for use, and the supplying of commodities of a public utility nature such as gas, electricity, steam and water, and telephone or telecommunication service. The term "unauthorized" means that payment of full compensation for service has been avoided, or has been sought to be avoided, without the consent of the supplier of the service. "Telephone service" or "telecommunication service." Includes, but is not limited to, any service provided for a charge or compensation to facilitate the origination, transmission, emission or reception of signs, signals, data, writings, images and sounds or intelligence of any nature by telephone, including cellular telephones, wire, radio, electromagnetic, photoelectronic or photooptical system. "Telecommunication service provider." A person or entity providing telecommunication service, including, but not limited to, a cellular, paging or other wireless communications company or other person or entity which, for a fee, supplies the facility, cell site, mobile telephone switching office or other equipment or telecommunication service. "Unlawful telecommunication device." Any electronic serial number, mobile identification number, personal identification number or any telecommunication device that is capable, or has been altered, modified, programmed or reprogrammed alone or in conjunction with another access device or other equipment so as to be capable, of acquiring or facilitating the acquisition of a telecommunication service without the consent of the telecommunication service provider. The term includes, but is not limited to, phones altered to obtain service without the consent of the telecommunication service provider, tumbler phones, counterfeit or clone phones, tumbler microchips, counterfeit or clone microchips, scanning receivers of wireless telecommunication service of a telecommunication service provider and other instruments capable of disguising their identity or location or of gaining access to a communications system operated by a telecommunication service provider. Section 2. This act shall take effect in 60 days.

1 0

Webmasters Only!
by ellenora＠hotmail.com 17 Dec '03

17 Dec '03

This is an advertisement for a BRAND NEW remarkable document that webmasters all over the world are raving about. If you would like to be removed from our mailing list just send an e-mail to ellenora(a)hotmail.com and type "remove" in the subject box. You will be taken off of our list immediately. Unlike many internet scams, we are in fact a legitimate and respectable company so PLEASE don't send us flames or e-mail bombs. Thanks. ************************************ How would you like your site to be the FIRST one listed (or at least in the top 10 or 20) when someone goes to a search engine to do a search? I'm sure you'll agree with us that most people will NOT spend a lot of time going through the many layers to get to YOUR listing. Would you like to know the secrets the pro's use to get PRIME PLACEMENT for their listings? Would you like to know how to PULL in traffic to your Web site like a magnet? We have the answers! (http://www.webpost.net/secrets) This BRAND NEW revealing report will show you: 1. How to get people to go to your site FIRST even if your competition is using the same, identical 'keywords' as you! (This secret is PRICELESS!) 2. What Web site marketing pro's do to get superior positioning for their site. (It won't cost you a penny!) 3. Techniques for selecting the most lively (and proven) key words and how to arrange them for top most exposure. 4. How to get your listing seen by potential clientele even when they aren't looking for you. 5. A little-used way to get MULTIPLE LISTINGS for your site in the SAME search engine! AND MORE! Come visit with us at http://www.webpost.net/secrets and we will show you how to obtain a copy of the secret document that will make your website one of the most well-known sites in its category! Hurry before your competition gets in on the Magical Search Engine Secrets before you!!

1 0

VOO_doo
by John Young 17 Dec '03

17 Dec '03

9-12-95. NYPaper: "Bulletin Board Is Virtual; Hacker Arrests Are Real." It was a classic sting operation, the kind of undercover gambit that has nabbed bad guys for decades. But the meeting place for this subterfuge was not some grimy storefront. It was a computer bulletin board that the United States Secret Service had rigged together to troll for people who are illegally trafficking in the codes that program cellular phones. " 'Innocent' Files Can Carry a Virus." A new kind of computer virus has descended upon the world. How easy is it to create one? Fifteen minutes after opening a Microsoft Word reference manual, I had cranked out a one-line program that could eliminate crucial system files from a hard drive. By bedtime I had figured out how to get this file to transmogrify Word itself so it would embed my trick program in any document it opened. In an evening, I had created a virus of my very own. This is scary stuff. Scarier still is that if I can do it, millions of others can too. Henceforth virtually every document on the information highway must be considered suspect. 2: VOO_doo

1 0