NOTE: I am not cryptographer and very well could be speaking out of my ass. Also, I am collecting screenshots of playable DVDs on Linux. If you have any, please email me at castNOSPAMongj@wam.umd.edu a refrence to your image. My inbox won't be able to handle that many pictures. I will be posting them images at http://www.glue.umd.edu/~castongj
My Prediction on CSS:
I am betting that CSS is a modified (read: weakened) version of Triple DES (3DES).
I get these hints from the following:
1) DES is fast in hardware.
2) DES is exportable from the United States.
3) The original DVD for linux page, by Andrew Veliath says "First, it uses an asymmetric form of encryption to negotiate a secure channel for which it then transfers the necessary information (which is based on a modified DES algorithm, which is symmetric) to the DVD decoding device so it can decrypt the DVD."
So it is DES.
4) Derek Fawcus has said: > > The process is basically: > > d' = F1(d,P) > > T' = F2(T,d') > > S' = F3(S,T') > > Where F2 is similar to F1, and F3 is the stream decoding of the encryted > 2048 byte sector S. >
Looks like a triple implimentation using 3 keys.
5) Bruce Schneier has commented on how weak the encryption is.
Conclusion: A poor protocol or variant of 3DES may make cracking CSS encryption an easy thing to do.
I now need to research on methods of attacking 3DES. -- "New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
I thought there was still some issues with DNS and IPSEC. Is there stuff that still needs to be done? -- "New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
I really liked Idoru. The first chapter had some amazing images. I guess being a Kafka fan helped too. The ending was a bit weak, I agree, but its critisisms of popular culture were great. Also, how the buildings were created was one of the hoopiest things I have read in a while. -- "New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
0380973464 is cryptonomicon the first has 6 remaining numbers and the second has 7 0684864223 is between silk and cyanide w/ 11 remaining 0385495315 is the code book w/ 9 0471117099 is applied cryptography w/ 8
crypto is 6 letters, nomicon is 7 i don't know 11 or 9. schneier is 8 letters long.
-- "New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
This one of my favorite books I have ever read. Schneier explains everything in detail so well.
If you are looking for history of crypto and live near Washington DC, there is a national cryptography museum that the NSA runs. It doesn't have much to do with the current cryptographic techniques, but it does have a lot of WWII history pertaining to cryptography.
There are also good websites that i can't think of the name of right now. Finally, sci.crypt and one of the many cypherpunks lists sometimes carry good discussions. (If you decide to join a cypherpunks list, prepare to recieve a LOT of junk mail.) -- "New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
That sure beats selling all those keyboards, doesn't it.:) -- "New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
"Rain, an honest to god slashdot girl" is a liar and a poser. You claim to have the email address, rainfa1l@happypuppy.com. The person who has that address lives 4 floors above me, and it is not you. Why do you feel you have to use someone else's email address? It is very easy to get your own, or just not use one. But no, you don't do that, instead you decided to post anonymously but signing as someone.
Is this polite enough for you, or am I jumping down your throat? I guess you need to read more of/usr/doc/HOWTO/mini/Identity-Spoofing or try man -k loser and see what you come up with. -- "New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
LIAR! you are not rainfall and your email is not rainfa1l@happypuppy.com Try posting as yourself next time, or at least don't include an email that isn't yours. -- "New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
I've seen it. It was on a while ago on TNT, I guess they just didn't tell anyone. It's awfull. Especially the corny ending with Bill Gates on a giant screen saying to Steve Jobs "looks like we will working together..." and how many years it skips at the end. A little before it ends you see Steve and Bill arguing about Xerox, where they both just whine... blah blah blah..... It's target audience is luddites, I just MiSTified the whole thing while it was going on. -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
Current (and expected future) uses of Number Sieve factorization (currently, the General Number Sieve is most efficient) are composed of two parts: the sieving of factors, and then solving a matrix of all the possible factoring equations.
Ugh. I tried to follow how the General Number Field Sieve worked by reading some lecture notes by the guy who invented it. After the first page of the introduction, I just lost it. I wasn't that confused at the quantum computing lectures I went to.
What courses do I need to take in order to understand how it works? Some more linear algebra and a helluva lot more math in general? -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
It's good to see all of the discussion, now lets take the next step.
In my old high school there was a group of students, called SHOP, which provided alternative activites for high school kids to do instead of getting drunk with the jocks. They had open discussions once a month where people could talk about what ever was bothering them, and they had activites that benifited the society around them as well as just fun things to do. It was the only time I felt comfortable in high school, and while SHOP had its problems, it was a good experiance.
Just a suggestion.
Others I have heard on/.
-On-line resources (I was planing to start something this summer as a reaction to a different tragedy a while ago) -A general strike (A Good Thing) -Letter writting -Walk-out -confronting the oppresors as a group(An injury to one is an injury to all) -Joining the PTA (not really effective, plus it only fights for its own interests, not yours)
While these ideas vary in usefullness, some are not only for High School, but usefull throughout life and the fight for true liberty. Remember, only you can affect change, don't expect anyone else to do it for you.
There is an awful lot of you. Sometimes more then the oppressors. Be strong. Organize. Do something to stop what is happening to you, because no one else will.
Suggestions:
pettition, write to local media, start local newspapers, approach the principle (board of ed., PTA), start/join a club whose goal is to address these grivances, walkout, if there is enough of you confront the people abusing you, just something to help your situation. -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
This is called a general strike. Probably the most powerful non-violent form of expression there is. Try iww.org, they have been advocating the general strike for a long, long time. -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
Objects are only worth what they are used for.
on
Catching a breath...
·
· Score: 1
An inanimate object has no inherant value. It is only worth what it is used for. If its purpose is evil, "take it out." -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
I would have pleaded guilty a long time ago...
on
Kevin Mitnick Speaks
·
· Score: 1
if I had the chance. With a the bullshit going against me, there is no way I would stay that long in jail unless I had to. Wouldn't matter to me if I was innocent or not, I would have plead guilty as soon as I could just to get it all over with as fast as possible. Being locked away doesn't appeal to me.
I wonder what Kevin is going to do for his state case once this is over... State prisons are a worse place then federal ones. -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
I heard/. was good about having 04/01 day jokes, but I didn't think this good.... I love it... the articles, the cookies... best so far is the userfriendly/segfault/bedope -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
paraphasing/quoting from Applied Cryptography (pp 14-15)
(NOTE: this example is random Key XOR'd against ASCII text, this is different then the percentages for this contest. This also assumes that the key is small.)
1) Discover the length of the key using process known as counting coincidences. XOR the cyphertext against itself shifted various numbers of bytes and count those bytes that are equal.
If the displacement is a multiple of the Key length then > 6% of the bytes are equal.
If it is not a multiple then less then 0.4 % are equal.
This is called then index of coincidence. Take you smallest displacment (the one w/ greater then 6%), this is the number we want for step 2
2) Shift the ciphertext by that length and XOR it with itself. This removes the key and leaves you with plaintext XOR'd with the plaintext shifted the lenght of the key (the number we found).
3) The fun part. English has 1.3 bits of real information per byte, so there is plenty of redundancy in order to find the exact plaintext.
Remember we are only dealing with ASCII here. The percentages are different, but the concepts are the same. Thanks Mr. Schneier!!! -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
paraphasing/quoting from Applied Cryptography (pp 14-15) (NOTE: this example is random Key XOR'd against ASCII text, this is different then the percentages for this contest. This also assumes that the key is small.) 1) Discover the length of the key using process known as counting coincidences. XOR the cyphertext against itself shifted various numbers of bytes and count those bytes that are equal. If the displacement is a multiple of the Key length then > 6% of the bytes are equal. If it is not a multiple then less then 0.4 % are equal. This is called then index of coincidence. Take you smallest displacment (the one w/ greater then 6%), this is the number we want for step 2 2) Shift the ciphertext by that length and XOR it with itself. This removes the key and leaves you with plaintext XOR'd with the plaintext shifted the lenght of the key (the number we found). 3) The fun part. English has 1.3 bits of real information per byte, so there is plenty of redundancy in order to find the exact plaintext. Remember we are only dealing with ASCII here. The percentages are different, but the concepts are the same. Thanks Mr. Schneier!!! -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
Evolution through technology. I for one think this is great.
I hope the technology isn't hoarded and I hope it doesn't drive poor chicken farmers in to a worse state. But I do like the technology that allows this stuff to happen.
Eventually it means the cures for all sorts of genetic disorders, from alcholism to obeseity. And yes, it does mean that people will be able to pick which color skin/eyes/etc their kids will have. I don't care. Physical appearence does not matter. Discrimination about appearence is the problem. Hopefully racisim will end when people realize that it genetically doesn't matter. (but by that logic it would have already ended.... hmm, if physical appearence was based on a die role and not on your parents...soon it could be...) Anyway I believe that saving lives is worth it. (i wish there was a spell check) -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
Please correct me if I am wrong, but a glance at this code seems to look like a simple Xor. P ^ Key = C; C ^ Key = P; So all one has to do is figure out the length of the key. There is a method to do that called counting coincidences (breifly explained in Applied Cryptography, a wonderfull book). Then shift the ciphertext, C, by the length of the Key and you effectivly have P ^ (P shifted the length of Key). With this infomation (ASCII ^ ASCII), we should significantly reduce the possible choices and be able to pick the correct plaintext, P.
Or not. Maybe I'm just tired....or missing something. I'll look in to it tomorrow after class if no one has figured it out by then. -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
Our records have stickers with a warning from tipper 'coz they're no good for kids If we'd get her we'd strip her --KMFDM
If Gore is the future: Clipper, CDA, and mass censorship will only be the tip of the iceberg.
He is the father^H^H^H^H^H^Hkiller of the vast network of free speach known as the Internet. -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
Not only did it get moderated, I plugged in my threshold to -133 and -666 and I didn't see any of them.
I knew it was there, because I read the comments when this article only had one comment on it. Then I went back to coding for a class of mine. Later, I wanted to read your original post, and sure enough they were gone. Had to search for them. (hint: first)
I am wondering if this is worse then the negative scores on posts critical of linux.com -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
This charade limits the quality of work (no peer review) and the benifits for workers (no jobs). A more interesting model based on the bounty system is instead of the bounty going personally to you, the money is donated to a preset charity. With this model there is peer review (no incentive to hide code). This might incourage more people to work for free software, thinking that they are helping two things at once. -- Four years in jail No Trial, No Bail *** FREE KEVIN ***
Slashdot Mirror
NOTE: I am not cryptographer and very well could be speaking out of my ass. Also, I am collecting screenshots of playable DVDs on Linux. If you have any, please email me at castNOSPAMongj@wam.umd.edu a refrence to your image. My inbox won't be able to handle that many pictures. I will be posting them images at http://www.glue.umd.edu/~castongj
My Prediction on CSS:
I am betting that CSS is a modified (read: weakened) version of Triple DES (3DES).
I get these hints from the following:
1) DES is fast in hardware.
2) DES is exportable from the United States.
3) The original DVD for linux page, by Andrew Veliath says
"First, it uses an asymmetric form of encryption to negotiate a secure
channel for which it then transfers the necessary information (which is
based on a modified DES algorithm, which is symmetric) to the DVD decoding
device so it can decrypt the DVD."
So it is DES.
4) Derek Fawcus has said:
>
> The process is basically:
>
> d' = F1(d,P)
>
> T' = F2(T,d')
>
> S' = F3(S,T')
>
> Where F2 is similar to F1, and F3 is the stream decoding of the encryted
> 2048 byte sector S.
>
Looks like a triple implimentation using 3 keys.
5) Bruce Schneier has commented on how weak the encryption is.
Conclusion: A poor protocol or variant of 3DES may make cracking CSS encryption an easy thing to do.
I now need to research on methods of attacking 3DES.
--
"New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
I thought there was still some issues with DNS and IPSEC. Is there stuff that still needs to be done?
--
"New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
I really liked Idoru. The first chapter had some amazing images. I guess being a Kafka fan helped too. The ending was a bit weak, I agree, but its critisisms of popular culture were great. Also, how the buildings were created was one of the hoopiest things I have read in a while.
--
"New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
0380973464 is cryptonomicon the first has 6 remaining numbers and the second has 7
0684864223 is between silk and cyanide w/ 11 remaining
0385495315 is the code book w/ 9
0471117099 is applied cryptography w/ 8
crypto is 6 letters, nomicon is 7
i don't know 11 or 9.
schneier is 8 letters long.
--
"New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
This one of my favorite books I have ever read. Schneier explains everything in detail so well.
If you are looking for history of crypto and live near Washington DC, there is a national cryptography museum that the NSA runs. It doesn't have much to do with the current cryptographic techniques, but it does have a lot of WWII history pertaining to cryptography.
There are also good websites that i can't think of the name of right now. Finally, sci.crypt and one of the many cypherpunks lists sometimes carry good discussions. (If you decide to join a cypherpunks list, prepare to recieve a LOT of junk mail.)
--
"New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
That sure beats selling all those keyboards, doesn't it. :)
--
"New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
"Rain, an honest to god slashdot girl" is a liar and a poser. You claim to have the email address, rainfa1l@happypuppy.com. The person who has that address lives 4 floors above me, and it is not you. Why do you feel you have to use someone else's email address? It is very easy to get your own, or just not use one. But no, you don't do that, instead you decided to post anonymously but signing as someone.
/usr/doc/HOWTO/mini/Identity-Spoofing
Is this polite enough for you, or am I jumping down your throat? I guess you need to read more of
or try man -k loser
and see what you come up with.
--
"New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
LIAR! you are not rainfall and your email is not rainfa1l@happypuppy.com Try posting as yourself next time, or at least don't include an email that isn't yours.
--
"New worlds are not born in the vacuum of abstract ideas, but in the fight for daily bread..."
I've seen it. It was on a while ago on TNT, I guess they just didn't tell anyone. It's awfull. Especially the corny ending with Bill Gates on a giant screen saying to Steve Jobs "looks like we will working together..." and how many years it skips at the end. A little before it ends you see Steve and Bill arguing about Xerox, where they both just whine... blah blah blah..... It's target audience is luddites, I just MiSTified the whole thing while it was going on.
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
Current (and expected future) uses of Number Sieve factorization (currently, the General Number Sieve is most efficient) are composed of two parts: the sieving of factors, and then solving a matrix of all the possible factoring equations.
Ugh. I tried to follow how the General Number Field Sieve worked by reading some lecture notes by the guy who invented it. After the first page of the introduction, I just lost it. I wasn't that confused at the quantum computing lectures I went to.
What courses do I need to take in order to understand how it works? Some more linear algebra and a helluva lot more math in general?
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
It's good to see all of the discussion, now lets take the next step.
/.
In my old high school there was a group of students, called SHOP, which provided alternative activites for high school kids to do instead of getting drunk with the jocks. They had open discussions once a month where people could talk about what ever was bothering them, and they had activites that benifited the society around them as well as just fun things to do. It was the only time I felt comfortable in high school, and while SHOP had its problems, it was a good experiance.
Just a suggestion.
Others I have heard on
-On-line resources (I was planing to start something this summer as a reaction to a different tragedy a while ago)
-A general strike (A Good Thing)
-Letter writting
-Walk-out
-confronting the oppresors as a group(An injury to one is an injury to all)
-Joining the PTA (not really effective, plus it only fights for its own interests, not yours)
While these ideas vary in usefullness, some are not only for High School, but usefull throughout life and the fight for true liberty. Remember, only you can affect change, don't expect anyone else to do it for you.
oh, and you forgot www.infoshop.org
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
>America is run by the freaks, not the middlemen.
bzzt, America is run by capitalist pigs.
>Is Bill Clinton normal? Was Newt?
As normal as the football quarterback whose lawyer father makes sure his son never gets in to trouble
>How about out pop-music stars?
So you think pop-music stars run America? Ok, I sort of see that. Look at what they do for the people living in America... nothing.
>Bill Gates?
Bill Gates is a fucking looser, imo. Stealing and hoarding will make you rich. If he is your hero, go be a thief.
>We need the middle men to get all that work done.
It is the worker that supports this country the most. They do the labor and the capitalist bosses benifit.
>Everything left for us is part of the spicy sauce of life.
while we live off of others hard work. No thanks.
Fight against 'a good days pay for a good days work' and for a world without bosses.
You'll see me out on the streets of DC on May 1st.
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
There is an awful lot of you. Sometimes more then the oppressors. Be strong. Organize. Do something to stop what is happening to you, because no one else will.
Suggestions:
pettition, write to local media, start local newspapers, approach the principle (board of ed., PTA), start/join a club whose goal is to address these grivances, walkout, if there is enough of you confront the people abusing you, just something to help your situation.
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
If the thumbtacks are being used to hurt people, they must be destroyed. My old high school rule book has it in there somewhere.... :)
Same with duct tape, if it is being used for evil, it is evil and must be destroyed
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
This is called a general strike. Probably the most powerful non-violent form of expression there is. Try iww.org, they have been advocating the general strike for a long, long time.
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
An inanimate object has no inherant value. It is only worth what it is used for. If its purpose is evil, "take it out."
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
if I had the chance. With a the bullshit going against me, there is no way I would stay that long in jail unless I had to. Wouldn't matter to me if I was innocent or not, I would have plead guilty as soon as I could just to get it all over with as fast as possible. Being locked away doesn't appeal to me.
I wonder what Kevin is going to do for his state case once this is over... State prisons are a worse place then federal ones.
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
I heard /. was good about having 04/01 day jokes, but I didn't think this good.... I love it... the articles, the cookies... best so far is the userfriendly/segfault/bedope
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
paraphasing/quoting from Applied Cryptography (pp 14-15)
(NOTE: this example is random Key XOR'd against ASCII text, this is different then the percentages for this contest. This also assumes that the key is small.)
1) Discover the length of the key using process known as counting coincidences.
XOR the cyphertext against itself shifted various numbers of bytes and count those bytes that are equal.
If the displacement is a multiple of the Key length then > 6% of the bytes are equal.
If it is not a multiple then less then 0.4 % are equal.
This is called then index of coincidence. Take you smallest displacment (the one w/ greater then 6%), this is the number we want for step 2
2) Shift the ciphertext by that length and XOR it with itself. This removes the key and leaves you with plaintext XOR'd with the plaintext shifted the lenght of the key (the number we found).
3) The fun part.
English has 1.3 bits of real information per byte, so there is plenty of redundancy in order to find the exact plaintext.
Remember we are only dealing with ASCII here. The percentages are different, but the concepts are the same. Thanks Mr. Schneier!!!
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
paraphasing/quoting from Applied Cryptography (pp 14-15) (NOTE: this example is random Key XOR'd against ASCII text, this is different then the percentages for this contest. This also assumes that the key is small.) 1) Discover the length of the key using process known as counting coincidences. XOR the cyphertext against itself shifted various numbers of bytes and count those bytes that are equal. If the displacement is a multiple of the Key length then > 6% of the bytes are equal. If it is not a multiple then less then 0.4 % are equal. This is called then index of coincidence. Take you smallest displacment (the one w/ greater then 6%), this is the number we want for step 2 2) Shift the ciphertext by that length and XOR it with itself. This removes the key and leaves you with plaintext XOR'd with the plaintext shifted the lenght of the key (the number we found). 3) The fun part. English has 1.3 bits of real information per byte, so there is plenty of redundancy in order to find the exact plaintext. Remember we are only dealing with ASCII here. The percentages are different, but the concepts are the same. Thanks Mr. Schneier!!!
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
Evolution through technology.
I for one think this is great.
I hope the technology isn't hoarded and I hope it doesn't drive poor chicken farmers in to a worse state. But I do like the technology that allows this stuff to happen.
Eventually it means the cures for all sorts of genetic disorders, from alcholism to obeseity. And yes, it does mean that people will be able to pick which color skin/eyes/etc their kids will have. I don't care. Physical appearence does not matter. Discrimination about appearence is the problem. Hopefully racisim will end when people realize that it genetically doesn't matter. (but by that logic it would have already ended.... hmm, if physical appearence was based on a die role and not on your parents...soon it could be...) Anyway I believe that saving lives is worth it.
(i wish there was a spell check)
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
Please correct me if I am wrong, but a glance at this code seems to look like a simple Xor.
P ^ Key = C;
C ^ Key = P;
So all one has to do is figure out the length of the key. There is a method to do that called counting coincidences (breifly explained in Applied Cryptography, a wonderfull book). Then shift the ciphertext, C, by the length of the Key and you effectivly have P ^ (P shifted the length of Key). With this infomation (ASCII ^ ASCII), we should significantly reduce the possible choices and be able to pick the correct plaintext, P.
Or not. Maybe I'm just tired....or missing something. I'll look in to it tomorrow after class if no one has figured it out by then.
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
Our records have stickers with a warning from tipper
'coz they're no good for kids
If we'd get her we'd strip her
--KMFDM
If Gore is the future: Clipper, CDA, and mass censorship will only be the tip of the iceberg.
He is the father^H^H^H^H^H^Hkiller of the vast network of free speach known as the Internet.
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
Not only did it get moderated, I plugged in my threshold to -133 and -666 and I didn't see any of them.
I knew it was there, because I read the comments when this article only had one comment on it. Then I went back to coding for a class of mine. Later, I wanted to read your original post, and sure enough they were gone. Had to search for them. (hint: first)
I am wondering if this is worse then the negative scores on posts critical of linux.com
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***
This charade limits the quality of work (no peer review) and the benifits for workers (no jobs). A more interesting model based on the bounty system is instead of the bounty going personally to you, the money is donated to a preset charity. With this model there is peer review (no incentive to hide code). This might incourage more people to work for free software, thinking that they are helping two things at once.
--
Four years in jail
No Trial, No Bail
*** FREE KEVIN ***