- cypherpunks-legacy - lists.cpunks.org

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

The original message was received at Wed, 21 Feb 1996 03:37:32 -0500 (EST) from ncrgw1@localhost ----- The following addresses have delivery notifications ----- sandiegoca.ncr.com!chris.claborne (unrecoverable error) ----- Transcript of session follows ----- 451 sandiegoca.ncr.com!chris.claborne... reply: read error from ncr-sd.sandiegoca.attgis.com. 550 sandiegoca.ncr.com!chris.claborne... Host unknown (Name server: ncr-sd.sdca.attgis.com.: host not found) ----- Message header follows ----- Return-Path: cypherpunks(a)toad.com Received: from ncrgw1.UUCP (ncrgw1@localhost) by ncrhub5.attgis.com (8.7.3/8.7.3) with UUCP id DAA22660 for sandiegoca.ncr.com!chris.claborne; Wed, 21 Feb 1996 03:37:32 -0500 (EST) Received: by ncrgw1.ATTGIS.COM; 21 Feb 96 03:37:17 EST Received: from toad.com by relay3.UU.NET with SMTP id QQadvt15500; Wed, 21 Feb 1996 03:22:15 -0500 (EST) Received: by toad.com id AA18685; Tue, 20 Feb 96 19:22:49 PST Received: from cs.umass.edu (freya.cs.umass.edu) by toad.com id AA18672; Tue, 20 Feb 96 19:22:36 PST Received: from thor.cs.umass.edu by cs.umass.edu (5.65/Ultrix3.0-C) id AA26087; Tue, 20 Feb 1996 22:22:16 -0500 Received: (from lmccarth@localhost) by thor.cs.umass.edu (8.6.12/8.6.9) id WAA12154 for cypherpunks(a)toad.com; Tue, 20 Feb 1996 22:22:15 -0500 From: lmccarth(a)cs.umass.edu Message-Id: <199602210322.WAA12154(a)thor.cs.umass.edu> Subject: Re: Secure Split To: cypherpunks(a)toad.com (Cypherpunks Mailing List) Date: Tue, 20 Feb 1996 22:22:15 -0500 (EST) Reply-To: cypherpunks(a)toad.com (Cypherpunks Mailing List) In-Reply-To: <9602210251.AA16675(a)cti02.citenet.net> from "Jean-Francois Avon (JFA Technologies, QC, Canada)" at Feb 20, 96 09:47:39 pm X-Mailer: ELM [version 2.4 PL25] Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-cypherpunks(a)toad.com Precedence: bulk ----- Message body suppressed -----

1 0

Re: Bravo, mostly (Re: Banned Zambian newspaper now on the Web)
by Frank Stuart 17 Dec '03

17 Dec '03

>[Please forward along to fight-censorship if non-redundant] > >I applaud your quick response. However, you should read more and consult >people with area expertise. At least do the five-minute AltaVista and >DejaNews search I did; don't just trust the information that gets sent to >you, or you're likely to be used. [...] Good advice. In this case, the copy of the banned issue of _The Post_ came from a confidential source, but I have reason to believe it is a true copy. I know very little about Zambia and had nothing to do with the additional commentary. | (Douglas) Hofstadter's Law: | It always takes longer than you expect, even Frank Stuart | when you take into account Hofstadter's Law.

1 0

Telephone card tech. howto needed
by Kristian Sagi 17 Dec '03

17 Dec '03

Hello guys ! Here is used such telephone cards like this one here ... Sorry , not very good picture here ;-) ... In the middle of this plastic card /------------\ is a chip ... See this picture here : | | | | | | [1] [2] [3] [4] | | | | | | | | | | | | | ___ | | | | | | | | | | | | | | | | | [ Chip ] | ----- | | \ | | | \ \------------/ | | | | [5] [6] [7] [8] As you see this chip has 6 legs ... and telephone card has 8 connectors ... Only 6 are connected ... Has anyone ideas, how this card works ... i mean something like telephone card hardware tutorials or something ... I have some ideas ... There is a something : when disconnect connector number [8] then The machine can't decrement the money value in card ... maybe he reads the value.. then he decrement the value in card , then reads "the new value" and if comparing between the old and the new value are the same , then machine disconnects he's telephone line ... Ok ... this is only one point ... But i want to know how this tech. works ... Anything is welcome ... please ... BTW Don't put answers to here , please mail-to me : sagi(a)physic.ut.ee Kristian

1 0

Re: Fuck Islam and the Apologists Cluttering Up this List with Defenses of It
by tallpaul＠pipeline.com 17 Dec '03

17 Dec '03

On Feb 19, 1996 18:52:04, 'tcmay(a)got.net (Timothy C. May)' wrote: > >Please don't send me separate copies (in addition to what is sent to the >IslamPunks mailing list) of this Muslim crap....it's bad enough seeing the >pro-Muslim apologists explaining why the Word of Allah (hollow be his name) >is more liberating than any decadent, Western system can be, about how >women are more free under Islam because they have the freedom to be >obedient to the will of her husband and Allah (hollow be his name), the >freedom to be beaten with sticks if they show their face in public, and the >freedom to have their devil organs removed. > I must have missed these e-messages when they were oriignally posted. Could you send me pointers to the messages to which you refer? Thanks. --tallpaul "I'm voting for Forbes. He's only wrong about one thing."

2 1

Re: PRNG in VB
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:05 PM 2/20/96 -0800, you wrote: >I am answering the courteous inquiry from Thomas Womack about my request for >help with a Visual Basic-only PRNG. The premise is that those who will not or >can not afford hardware-based RNG's need something relatively secure in the >face of nothing at all or at best a lesser implementation. ... >the getcurrenttime() Win API a lot. Said to have 50 millicent increments. The ViaCrypt PGP has a nice feature that pops up a window for you to wave your mouse around in or type random characters if you'd rather. It's _much_ nicer, and generally faster, to wave the mouse. If you need a few bits of randomness when you're putting up the splash screen, you could also watch the mouse any time it's in your window on the way to the "ok" button, though of course that doesn't help if your users are using the Enter or Esc key instead of the mouse. Of course, if you're trying to do crypto processing, you probably also feed the data into MD5 before using any of it. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com / billstewart(a)attmail.com +1-415-442-2215 # http://www.idiom.com/~wcs Pager +1-408-787-1281 ! Frank Zappa for President !

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

> -----BEGIN PGP SIGNED MESSAGE----- > > A Kerberos V4 session key is chosen by calling random() repeatedly. > THe PRNG is seeded with srandom(time.tv_usec ^ time.tv_sec ^ p ^ n++), > where p is a static integer set to getpid() ^ gethostid() on the first > call and n is a static counter. > > Is there any entropy here??? Most, if not all, Kerberos servers run one > time synchronization protocol or another, which reduces the entropy to a > few bits at most. > > DEADBEAT <na5877(a)anon.penet.fi> usec grainlessness typically doesn't approach anything like a usec on most OS implimentations either. -- +----------------------------------+-----------------------------------------+ |Julian Assange | "if you think the United States has | |FAX: +61-3-9819-9066 | stood still, who built the largest | |EMAIL: proff(a)suburbia.net | shopping centre in the world?" - Nixon | +----------------------------------+-----------------------------------------+

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I just wanted to remind y'all that this Saturday is the second quasi-monthly Portland (OR) cypherpunks MST3K fest, key-signing, and general social event. E-mail for further information. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEQAwUBMSwOAn3AXR8sjiylAQHoHAfRAZ0NJpB/pzmKwwRtJJygkQfE4vLQxrO3 f51RlzysBE3u7OFGnNYmy8QLXzsaclppN0ssfbFkxs13vwgiztudl9D3LkGrdw44 HgRAAV+FTuuR+nzehOc3DHQDDnPLoXh7NrS+bYfYGHv2GB8OZYpFXD5VEirJFmEj uq7dEV4wy8+ml7BsMXxxZNwhP1ISRXvH9ODKLZnWx/6ngkFbzJBw1cvyHiuqjwRg 5HM31+HKSe5qi+Xx9ZlEfLY5d3U6HiN9cgKL+Jo301VGsZmEvIPyK0Yjyt4EUzgN 6vawqU6Kvzj76tOMe1lnUs3eSR4rUmNlaYXNRZuxy7FObqc= =uaR5 -----END PGP SIGNATURE----- -- Bruce Baugh bruce(a)aracnet.com http://www.aracnet.com/~bruce

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

Well, folks, I told you so. Sorry to be nasty about it. > Date: Sun, 18 Feb 1996 23:57:02 -0500 > From: Drew Dean <ddean(a)CS.Princeton.EDU> > Subject: Java security problems > > We have discovered a serious security problem with Netscape Navigator's 2.0 > Java implementation. (The problem is also present in the 1.0 release of the > Java Development Kit from Sun.) An applet is normally allowed to connect > only to the host from which it was loaded. However, this restriction is not > properly enforced. A malicious applet can open a connection to an arbitrary > host on the Internet. At this point, bugs in any TCP/IP-based network > service can be exploited. We have implemented (as a proof of concept) an > exploitation of an old sendmail bug. [...] > A second, also serious, bug exists in javap, the bytecode > disassembler. An overly long method name can overflow a stack > allocated buffer, potentially causing arbitrary native code to be > executed. The problem is an unchecked sprintf() call, just like the > syslog(3) problem last year. [...]

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In list.cypherpunks, ipgsales(a)cyberstation.net writes: > Who said that we are expanding OTP's - I believe you did, when you stated that your "OTP" (and I am only using "OTP" in this case to point up your misusage of the term, and not to claim that what you are doing is any such thing) is used to seed your "RNG" (another misnomer). > we are using them to drive RNG's > please read my mail back and forth with Derek and Roy Silvernail, Do remember that the majority of my mail has not been copied to the list. > I belive that both of then recognize that an extremely large key, 2 > to some large number, let us say for the time being 2 to 12288 bits > can be derived from a OTP when generated- Not a chance, slick. A One-Time Pad is well defined within the art, and your PRNG system is no such thing. I will thank you to not postulate what I may or may not recognize. - -- Roy M. Silvernail -- roy(a)cybrspc.mn.org will do just fine, thanks. "Does that not fit in with your plans?" -- Mr Wiggen, of Ironside and Malone (Monty Python) PGP public key available upon request (send yours) -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMSwTVhvikii9febJAQEtpgP+MqcESnrisA8tYT+GulGamEhMIa9gTKAn Dc1ylyG4pgMRW+osZnnBJcWeZq8Yx7aTzteTmkNYmpXZP9liVaySSOVce36ORG4X BnRO2OGLI3JD8ssgMbifxbZay/00bDdCuMthGnXA+xKAW27p9i9tHLrPIyJhdjZa Jd3rHWCqwCc= =Cx0p -----END PGP SIGNATURE-----

1 0

Re: Internet Privacy Guaranteed ad (POTP Jr.)
by olbon＠dynetics.com 17 Dec '03

17 Dec '03

At 10:08 PM 2/20/96, IPG Sales wrote: >Unlike Mr. Silvernail, we have a much simplier definition of what we mean >by a one time pad - given a message/file of length N, where N is a finite >practical number say less than 10 to the 1000th power, that the encrypted >ciphertext can be any of the N to the 256th power possibile clear/plain >text messages/files. To prove that the IPG system does not work, all you >have to do is to prove that is not the case - that our system, without >artifically imposed boundary conditions will generate a subset of those >possibilities - that is simple and strsight forward - not >hyperbole but action - everyone stated how simple it was to break the system, >now everyone is back paddling aa fast as they can, like Mr. Metzger and >some of the other big bad cyphermouths. PROOF: Given that N is the length of the message in bits. The number of possible combinations of bits is 2^N. For any message length N > 1, 2^N < N^256. Simple example. Message length is 3 bits. The maximum number of possible combinations of these bits is 8. This is far less than 3^256 (which is more than 10^100, i.e. it overflows the calculator on my Mac). Sorry guys. Try learning some simple math before you try and sell crypto. Clay --------------------------------------------------------------------------- Clay Olbon II | olbon(a)dynetics.com Systems Engineer | ph: (810) 589-9930 fax 9934 Dynetics, Inc., Ste 302 | http://www.msen.com/~olbon/olbon.html 550 Stephenson Hwy | PGP262 public key: finger olbon(a)mgr.dynetics.com Troy, MI 48083-1109 | pgp print: B97397AD50233C77523FD058BD1BB7C0 "To escape the evil curse, you must quote a bible verse; thou shalt not ... Doooh" - Homer (Simpson, not the other one) ---------------------------------------------------------------------------

4 3