From proff Tue Jul 16 01:33:46 1996 Received: (proff@localhost) by suburbia.net (8.7.4/Proff-950810) id BAA07485 for best-of-security; Tue, 16 Jul 1996 01:33:46 +1000 Received: from toad.com (toad.com [140.174.2.1]) by suburbia.net (8.7.4/Proff-950810) with ESMTP id XAA17871 for ; Sun, 14 Jul 1996 23:35:10 +1000 Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id FAA21189 for cypherpunks-outgoing; Sun, 14 Jul 1996 05:01:11 -0700 (PDT) Received: from oznet16.ozemail.com.au (oznet16.ozemail.com.au [203.2.192.109]) by toad.com (8.7.5/8.7.3) with ESMTP id FAA21177 for ; Sun, 14 Jul 1996 05:01:03 -0700 (PDT) Received: from oznet02.ozemail.com.au (oznet02.ozemail.com.au [203.2.192.124]) by oznet16.ozemail.com.au (8.7.4/8.6.12) with ESMTP id VAA03464; Sun, 14 Jul 1996 21:59:43 +1000 (EST) Received: from slsyd11p11.ozemail.com.au (slsyd11p11.ozemail.com.au [203.108.4.99]) by oznet02.ozemail.com.au (8.7.4/8.6.12) with SMTP id WAA15334; Sun, 14 Jul 1996 22:00:51 +1000 (EST) Message-ID: <31E9DCF8.43EA@ozemail.com.au> Date: Sun, 14 Jul 1996 22:54:00 -0700 From: Lyal Collins X-Mailer: Mozilla 2.02 (Win16; I) MIME-Version: 1.0 To: Robert Hettinga CC: cypherpunks@toad.com Subject: Re: Cybank breaks new ground; rejects public-key encryption References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: proff Precedence: bulk Actually, it doesn't take too much effort to discover them yourself. Get a visual basic discomplier (VB version 4 compatible need, I think), and go for It. I cracked version 1.5 of the Cybank software - I could load up an ".INI file" with as much "value" as I wanted. Basically, they seem to convert ASCII characters to the decimal value of the hex code, then add, subtract etc on that value, along with some XOR'ing of the resulting string and an embedded table of data. Oh, and it's all "locked" by the serial number, generated from the install date and time. Yeah I trust it - not. I hesitate to distribute the discomplied source code I used, asince it may get used by the unscrupulous to do trusting Cybank customers out of their hard earned money. Maybe, enough resquests will convince me otherwise. Or, take a challenge, - it took me 6 hours to achieve this, including learing enough VB3 (ther version I cracked, 1.5 was in VB3). Lyal -- All mistakes in this message belong to me - you should not use them!