From proff  Tue Jul 16 01:33:46 1996
Received: (proff@localhost) by suburbia.net (8.7.4/Proff-950810) id BAA07485 for best-of-security; Tue, 16 Jul 1996 01:33:46 +1000
Received: from toad.com (toad.com [140.174.2.1]) by suburbia.net (8.7.4/Proff-950810) with ESMTP id XAA17871 for <proff@suburbia.net>; Sun, 14 Jul 1996 23:35:10 +1000
Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id FAA21189 for cypherpunks-outgoing; Sun, 14 Jul 1996 05:01:11 -0700 (PDT)
Received: from oznet16.ozemail.com.au (oznet16.ozemail.com.au [203.2.192.109]) by toad.com (8.7.5/8.7.3) with ESMTP id FAA21177 for <cypherpunks@toad.com>; Sun, 14 Jul 1996 05:01:03 -0700 (PDT)
Received: from oznet02.ozemail.com.au (oznet02.ozemail.com.au [203.2.192.124]) by oznet16.ozemail.com.au (8.7.4/8.6.12) with ESMTP id VAA03464; Sun, 14 Jul 1996 21:59:43 +1000 (EST)
Received: from slsyd11p11.ozemail.com.au (slsyd11p11.ozemail.com.au [203.108.4.99]) by oznet02.ozemail.com.au (8.7.4/8.6.12) with SMTP id WAA15334; Sun, 14 Jul 1996 22:00:51 +1000 (EST)
Message-ID: <31E9DCF8.43EA@ozemail.com.au>
Date: Sun, 14 Jul 1996 22:54:00 -0700
From: Lyal Collins <lyalc@ozemail.com.au>
X-Mailer: Mozilla 2.02 (Win16; I)
MIME-Version: 1.0
To: Robert Hettinga <rah@shipwright.com>
CC: cypherpunks@toad.com
Subject: Re: Cybank breaks new ground; rejects public-key encryption
References: <v03007606ae0dd5274a4e@[199.0.65.105]>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: proff
Precedence: bulk

Actually, it doesn't take too much effort to discover them yourself.
Get a visual basic discomplier (VB version 4 compatible need, I think), 
and go for It.
I cracked version 1.5 of the Cybank software - I could load up an ".INI 
file" with as much "value" as I wanted.

Basically, they seem to convert ASCII characters to the decimal value of 
the hex code, then add, subtract etc on that value, along with some 
XOR'ing of the resulting string and an embedded table of data.
Oh, and it's all "locked" by the serial number, generated from the 
install date and time.
Yeah I trust it - not.

I hesitate to distribute the discomplied source code I used, asince it 
may get used by the unscrupulous to do trusting Cybank customers out of 
their hard earned money. Maybe, enough resquests will convince me 
otherwise.

Or, take a challenge, - it took me 6 hours to achieve this, including 
learing enough VB3 (ther version I cracked, 1.5 was in VB3).

Lyal 

-- 
All mistakes in this message belong to me - you should not use them!


