- cypherpunks-legacy - lists.cpunks.org

SHATEST (was: Re: DOS - MD5 - Thanks)
by wlkngowl＠unix.asb.com 17 Dec '03

17 Dec '03

On Fri, 29 Dec 1995 15:22:46 -0700 (MST), you wrote: I've got a little goodie called SHATEST which I'm going to include with the next release of the NOISE.SYS driver.. it's the Secure Hash equivalent of MD5SUM... (Originally written to test the optimized SHA code-- much thanks to Colin Plumb, BTW--- for the /dev/random driver...) --Rob >A freestanding implementation of MD5SUM (compiled from that in the PGP >distribution) for DOS is at >ftp://ftp.csn.net/mpj/public/md5sum.zip and on the Colorado Catacombs BBS >at 303-772-1062. >I suggested to Phil Zimmermann that he should put this in the next PGP >release along with the compiled DOS version of PGP, but there hasn't been >a new release of PGP since then. >Happy New Year! Ditto... >Mike Johnson >mpj(a)exabyte.com >#include <std_disclaimer.h>

1 0

Re: Australian "calculatorcard"
by amp 17 Dec '03

17 Dec '03

-- [ From: amp * EMC.Ver #2.3 ] -- From: David Lesher \ Internet: (wb8foz(a)nrk.com) To: amp \ Internet: (alan.pugh(a)internetmci.com) cc: Cees de Groot \ Internet: (c.degroot(a)inter.nl.net) cc: cypherpunks \ Internet: (cypherpunks(a)toad.com) Subject: Re: Australian "calculatorcard" > sounds like the card i use for remote dialup to certain non-public > systems i use at work. it has a six digit number on the front that > changes every 60 seconds. DS> Do these card systems use a window to handle clock-slip? i'm not sure. i would image so. DS> I'd think you could have the server safely accept # N, N-60 sec, and DS> N+60 seconds; and adjust the server's idea of your card's clock speed DS> from that. DS> What new risk would that create? i would figure the server would give a minute or so for slippage. basically the risk is that it would give someone 3 minutes to do a brute force attack rather than one. if you have decent security on the server side, i.e., disallow the card for 5 minutes or more after 3 or so failed attempts, brute attacks would be minimized. however, if the actual window for a single code is 3 minutes, that increases your chance of hitting it as 3 separate numbers would be valid for a given card at any given time. amp <0003701548(a)mcimail.com> (since 10/31/88) <alan.pugh(a)internetmci.com> PGP Key = 57957C9D PGP FP = FA 02 84 7D 82 57 78 E4 E2 1C 7B 88 62 A6 F9 F7 December 31, 1995 21:59

2 1

Re: Australian "calculatorcard"
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: vin(a)shore.net (Vin McLellan) > Could be one of seven or 8 vendors of so-called "challenge/response" tokens or calculators. Most of those sold in the US and Australia use straight DES (and a token-specific key) to encrypt the "random" challenge number in the token -- but it could be any secret-key algorithm. ----------- This is actually something cryptographic which I know a bit about, so I'll tell you what I know. I had a suitemate a bit back who was working for a local high-tech company as a computer programmer. He used a system somewhat like this, but with some interesting permutations. The main difference was that it didn't use one algorithm. It used quite a few, determined by a hashing of the challenge code. There were a considerable number of challenge codes with distinct hash results that were never used. If the card got too many of those (or too many wrong PINs), it switched to an entirely different set of hashings and encryptions, all of which would warn the server (thanks to their turning out something different in a hash function on the server) that the card had been compromised. I suspect it would also wipe a EEPROM that was storing the valid hash function and algorithms, but he wasn't sure about that. It was all sealed in a plastic block to make sure it was physically hard to reverse-engineer, anyway. -Allen

1 0

Ah, the future...
by James M. Cobb 17 Dec '03

17 Dec '03

Friend, 12 31 95 Associated Press reports: Ah, the future ... At least part of what will happen in the coming year seems clear. Cyberspace will be regulated -- kicking and screaming -- and the court battles over free speech will begin. "It's going to throw the Internet into a state of uncertainty for several years," said [Bob] Smith [of Interactive Services Association]. You may recall the question I asked in an earlier message: And when the State DECIDES...? But that's all right... Despite that, business growth on the net will begin to catch up with the phenomenal increase in accounts. Cordially, Jim NOTE. The newsstory's headline? YEAR OF THE INTERNET: What a tangled web we weave. Its dateline? (Dec 31, 1995 - 00:23 EST). Accessed at? Nando News (www.nando.net) Online filename? info306_3.html That message? Date: Wed, 22 Nov 1995 04:16:50 -0500 (EST) From: "James M. Cobb" <jcobb(a)ahcbsd1.ovnet.com> To: cypherpunks(a)toad.com Subject: Secrets of the Internet This critical essay, "Ah, the future..." was composed 12 31 95.

1 0

SEY_use
by John Young 17 Dec '03

17 Dec '03

12-31-95. WashP: Emulating US founding outlaws, the Seychelles government has enacted an investment law described by transatlantic neo-imperialists as a "Welcome, Criminals" act. The law offers anyone who invests $10 million or more in Seychelles -- no questions asked as to the source -- protection from extradition, from seizure of assets and to other "concessions and incentives commensurate with the investment." Neo-imps say this is "an open invitation to money launderers and other international criminals to set up shop with impunity." Under the statute the Seychelles government could grant diplomatic passports and other protections as a shield from thermonuclear pornography. SEY_use

3 2

Fred Cohen, PhD
by an5877＠anon.penet.fi 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Regarding Fred Cohen, PhD: Cohen's haughty and bombastic style do nothing good for his reputation. I assume he advertises his PhD to highlight his early accomplishments; he has done little since. Let's also consider the granting institution, a second-rank school. Cohen's thesis broke new ground, but how many people have read it, or any of his writings, or know anything about his ideas beyond a single word? How far did he carry this work? Where are the conference and journal papers? Cohen's reputation faded into obscurity long ago. Now he is building a new reputation as a pig-headed loudmouth, threatening his "defamers." Shades of Sternlight. DEADBEAT <na5877(a)anon.penet.fi> -----BEGIN PGP SIGNATURE----- Version: 2.4 iQBFAgUBMOa9TPFZTpBW/B35AQFLQQGAmzB8o+g5k3mYmzMmk3JiDTBf+P8dSFZY 25IwVISjSV7o95vgbmNWAy/3zVY50AKn =SfU6 -----END PGP SIGNATURE----- --****ATTENTION****--****ATTENTION****--****ATTENTION****--***ATTENTION*** Your e-mail reply to this message WILL be *automatically* ANONYMIZED. Please, report inappropriate use to abuse(a)anon.penet.fi For information (incl. non-anon reply) write to help(a)anon.penet.fi If you have any problems, address them to admin(a)anon.penet.fi

4 3

Another Internet Provider Censors Access (fwd)
by Brad Dolan 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Another shoe drops? ---------- Forwarded message ---------- Date: Mon, 1 Jan 1996 19:44:30 -0600 From: x To: y Y - Coming off CompuServe's announcement last week that it was cutting off all access to "alt.binaries" newsgroups under pressure from the German government, I'm passing along another apparent development from another Internet access provider, Netcom. Under the guise of a minor software upgrade, Netcom has changed its newsgroups access list to totally exclude "alt" groups altogether. Since there is no way to sign up for a newsgroup other than via the selection menu that Netcom provides, it appears that Netcom has managed to censor access to all those discussion groups. We are witnessing the not-so-gradual erosion of freedom of the Net. I not often find myself allied with John Perry Barlow, but on this one we are four-square: what with stupid attempts of government to pass unconstitutional restrictions, and acquiescence of the private sector to intimidation and pressure, freedoms of the many are being dictated by reactionary elements in places like Memphis, Tennessee. The next opportunity, I expect, will be to help underwrite the defense of the first criminal action brought under the new law. In the meantime, we can unsubscribe to services that curtail our liberties. "X" Speaking solely for myself, this time.

7 7

Re: Guerilla Internet Service Providers (fwd)
by jim bell 17 Dec '03

17 Dec '03

At 08:27 PM 1/1/96 -0800, you wrote: >Jim Choate: >> If you live in the Austin, TX area I will setup a dedicated slip for you at >> only $100/mo. > >in the Portland Oregon area, the price ranges from $234/year to >$1750/year for unlimited ppp access. (I have no idea how long the >$234/year is going to stay in business. that won't even cover the >cost of a phone line.) It seems to me that phone line costs are turning into a floor price for Internet access, when they shouldn't really be. The main asset telephone companies have, right now, is in RIGHTS OF WAY. Put an ISP in a business park that allows you to run your own dedicated copper pairs, and you've bypassed $25/month/line business phone line charges. At some point, individual urban and suburban blocks could easily be "guerilla re-wired" for ISP access without serious trenching, etc. The phoneco would still be involved, but in a far lower-profit mode, as the supplier of a single T1 to a multi-block area.

3 2

Re: Guerilla Internet Service Providers
by Duncan Frissell 17 Dec '03

17 Dec '03

At 09:07 PM 1/1/96 -0500, David Mandl wrote: >I agree. It's not a good idea to assume that there's going to be some kind >of widespread opposition movement when the big Net Crackdown comes. Most >people will either obey the law, be unaffected by it, or violate it in very >insignificant ways ("net jaywalking"). There's strength in numbers, but I >just don't think the numbers will be there. > > --Dave. During Prohibition, consumption of illegal booze increased steadily during the whole period. Hard liquor consumption was actually higher at the end of Prohibition than it had been before Prohibition. DCF

3 2

Who sent me this message?
by Steve14571＠aol.com 17 Dec '03

17 Dec '03

Someone from this list sent me a message encrypted with the international version of PGP 2.6.2. Unfortunately, my system crashed and lost the email address... Plaintext of the message follows: Hi Stephen, >Me too 8^) This is a 2047 bit key (I think big) :-) As I can see. How did you generate this key? Are you using a special version of PGP? Maybe something about myself to start with: I'm from Belgium (that small spot between France, Germany and the Netherlands). I work in a bank (no, this does not mean that I'm swimming in money!) as a system engineer. We work mainly with A-Series mainframes from UNISYS. At home I spent some time on the internet, my PC, reading a good book and last but not least having a beer with my friends. That's it for now, looking forward to hear from you again. Happy New Year! Luc Whoever sent me this message please write back, and send a public key so that I can respond.

1 0