FV Demonstrates Fatal Flaw in Software Encryption of Credit

Dr. Dimitri Vulis dlv at bwalk.dm.com
Thu Feb 1 10:16:15 PST 1996


Rich Salz <rsalz at osf.org> writes:
> >There are many ways to spread it besides a virus.  Zillions of 'em.  And
>
> There are zillions (what, more than one thousand?) ways to get someone
> to run a random piece of software that will capture their keystrokes?
>
> I don't believe you.  Name six.

I think I'll go on a tangent:

Many, many, many years ago, when I was a little kid, I wrote several "cool"
games that I uploaded to various BBS's. The games kept track of high scores
and saved them in a file. At that time there were a few popular BBS programs
for PC DOS (Fido, PC Board, RBBS, et al) which stored their passwords in
fairly standard locations. When the games saved the high scores, they also
looked in these standard locations. Invariably, when I downloaded the same
games a few days later, I would discover that the BBS's sysops played the
game, and made the archive with their high scores available for downloading.

ObCrypto: the high scores were encrypted together with the shell passwords.

---

Dr. Dimitri Vulis
Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps






More information about the cypherpunks-legacy mailing list