Browse > Home / Archive: May 2003

| Subcribe via RSS

Another cool program

May 31st, 2003 | Comments | Posted in Technology
1315 people have read this post.

Nullsoft has a program called “Safesex” which is an encrypted notetaker.

http://www.nullsoft.com/free/safesex/.

In 1998 Nullsoft brought you Sex, a little virtual notepad for “scribbling” things down. Then we made the UI a little different, but never released it. Fast forward to 2002, and we added encryption and better profile support to Sex, and called it SafeSex.

SafeSex allows you to have some notes that are easily accessible, but relatively secure. It sits on your screen, waiting for a click, and on a click it will activate and give you access to your notes. That is, of course, if you enter the passphrase that your notes are encrypted with. For ease, the passphrase will be cached in memory, and expire after a user-configurable time.

The notes themselves are stored in RTF, and encrypted when stored to disk. When the SafeSex window is not open, the notes are not stored in memory. They are encrypted and decrypted on demand.

The encryption used is Blowfish, using the 20 byte SHA-1 of the passphrase as the key. It uses Blowfish in CBC mode, with the initialization vector being incremented every time.

SafeSex keeps running in the background, using very little memory and resources, and automatically keeps itself running across reboots (i.e. if you reboot with SafeSex running, it will come back on startup).

Cool shit!

WASTE

May 31st, 2003 | Comments | Posted in Technology
824 people have read this post.

So, our old friends at Nullsoft (original developers of Gnutella) have done it again. They created an encrypting file-sharing utility that allows you to set up private networks amongst your friends (and only your friends) that are truly private.

Of course, AOL Time Warner is their parent company and when they got wind that they had posted this as a free program on the web, it got yanked in less than a day. Luckily, that was enough time for people to grab it and they had made source available…

I’m not using it at the moment but I do have it installed and am saving the source.

There is an article at http://www.infoanarchy.org/story/2003/5/29/162732/294 on InfoAnarchy, my new favorite site.

There is another site at http://www.dhorrocks2003.pwp.blueyonder.co.uk/.

WASTE is a software product and protocol that enables secure distributed communication for small (on the order of 10-50 nodes) trusted groups of users. WASTE is designed to enable small companies and small teams within larger companies to easily communicate and collaborate in a secure and efficient fashion, independent of physical network topology.

Some bits of information about WASTE:

  • WASTE is currently available for 32-bit Windows operating systems, and as a limited functionality server for FreeBSD and MacOS X. Porting to other operating systems should be a breeze, as the source is provided (and the network code itself is pretty portable).
  • WASTE is licensed under the GPL.
  • WASTE currently provides the following services:
    • Instant Messaging (with presence)
    • Group Chat
    • File browsing/searching
    • File transfer (upload and download)
  • Network architecture: WASTE uses a distributed architecture that allows for nodes to connect in a partial mesh type network. Nodes on the network can broadcast and route traffic. Nodes that are not publicly accessible or on slow links can choose not to route traffic. This network is built such that all services utilize the network, so firewall issues become moot.
  • Security: WASTE uses link-level encryption to secure links, and public keys for authentication. RSA is used for session key exchange and authentication, and the links are encrypted using Blowfish in PCBC mode. The automatic key distribution security model is very primitive at the moment, and may not lend itself well to some social situations.

Client is available at http://www.str8dog.com/?f=32&m=253. It will prompt you for the wrong file name but if you rename it as “waste-setup.exe”, it works fine.

Source is at http://www.str8dog.com/?f=32&m=301 or at http://cyber.law.harvard.edu/blogs/gems/home/waste.zip.

Some people have all of the fun!

May 30th, 2003 | Comments | Posted in Technology
902 people have read this post.

I saw this today. I can’t help but take a perverse delight after so many hours playing Asheron’s Call in years past.

Hackers Put ‘Bane’ in Shadowbane
By Michelle Delio
Story location: http://www.wired.com/news/games/0,2101,59034,00.html

The horror, as horror so often does, began slowly almost imperceptibly.

Late Tuesday evening, little things suddenly started to go very wrong in the virtual world of Shadowbane, a popular online multiplayer game.

Some players noticed that their money and weapons had suddenly vanished. A few whispered that tonight the monsters somehow seemed slightly bigger and meaner.

And then all hell broke loose.

Shadowbane had been hacked by several of its players. But unlike standard game hacks, where players gift themselves with super strength, health or wealth, these hackers managed to completely alter the rules of Shadowbane — turning a suddenly wrathful game loose on its players.

“At first, players started speculating that there was a really bad bug in the game code,” player Tim Wheating said. “Then we realized that somehow an insane god had taken control of our world and was out to kill us all.”

In a statement posted on the Shadowbane website shortly after the hack, Wolfpack Studios and Ubi Soft Entertainment (the developers of Shadowbane) acknowledged that a “serious attack” had occurred and assured players the companies were “working with law enforcement and we promise all of you that these individuals will be prosecuted to the full extent of the law.”

The population of an entire Shadowbane town was forcibly moved to the bottom of the sea, where they drowned. City guards turned feral and attacked town residents. Mobs of never-before-seen superpowerful creatures, seemingly spontaneously spawned from the ether, began to prowl the streets unchecked, killing characters in the most painful way possible.

Not that the game was ever intended to be a happy, cuddly experience. Whacking other players around in one of Shadowbane’s many free-for-all zones is one of the main attractions of the game.

But it has a “Newbie Island,” where inexperienced players can hone their gaming skills in a protected atmosphere. After making their way off the island, players join guilds, and battle the members of other guilds.

The members of guilds build cities that serve as their personal strongholds. Neutral cities exist also, virtual Switzerlands, where no one is supposed to attack anyone.

But on Tuesday there were no neutral zones — nowhere to run — and newbies became the prime targets.

Experienced players looked on in horror as new players were slowly and gleefully dismembered by ax-wielding ogres. Others just laughed and looted the characters’ bodies after the ogres were done.

“If you go to what is left of the town of Khar, you will see my grave,” one Shadowbane survivor wrote in an e-mail. “I never knew dying could be so hilarious — I had a great time.”

Mike Gontelli, a late arrival to the game that evening, said that when he arrived in Shadowbane “there were hundreds of tombstones. New players were being beaten and tortured. Newbie blood was flowing like a river. I knew it wasn’t real, but it was oddly terrifying.”

He added, “I’ve been playing online games for a few years. There are always some hackers hanging around who have figured out how to give themselves special powers. But I have never, ever seen or heard of a game going this deeply berserk.”

Clint Hayashi of Ubi Soft Entertainment said on Thursday that “we quickly and easily identified the individuals who disrupted the game” and also said that users’ personal information was not accessed.

The game was “rolled back” — everything and every player reverted to their status shortly before the attacks.

“Hallelujah, I was dead and now I’m not,” said player Brian Buttoloer. “This is way better than real life. Let the games begin again.”