Re: SSL CHALLENGE: ALERT! probable misallocation of keys?

I've been looking at the allocated list of keys, and I notice a possible 
problem:  One user has allocated 50,000 segements:

0c2b-cf7a NOACK 0c2b 50000 Joe Thomas <jthomas@ogi.com>

Now, it's possible this fellow has some vast farm of high-speed 
workstations, but I doubt it.  Finger suggests that this is a linux
box.  My suspicion - and let me apologize in advance if I'm wrong - is
that Mr. Thomas thinks he's allocated himself
50,000 keys, whereas he's actually got  838,860,800,000.

Mr Thomas, if you're listening, PLEASE tell us what's going on.
You've reserved 3/4 of the keyspace, and you're going to screw up the 
search unless you have an NSA-sized data center.

I suggest we assume this is an error, and remove the block from the
reserved list so that it can be re-allocated.


Peter Trei
Senior Software Engineer
Purveyor Development Team                                
Process Software Corporation
trei@process.com

| I've been looking at the allocated list of keys, and I notice a possible 
| problem:  One user has allocated 50,000 segements:

Where can one observe the progress of the computations? What is 
allocated etc?

/Christian

>>>>> "Christian" == Christian Wettergren <cwe@Csli.Stanford.EDU> writes:

    > Where can one observe the progress of the computations? What is
    > allocated etc?

try http://www.brute.cl.cam.ac.uk/cgi-bin/brute?op=stats

How often is this updated?  I've allocated (and ACKed) more keyspace
than it shows I have, and I wonder if my requests might have gotten
munged.  So far, the only thing it shows I've acked is the keyspace I
manually ACKed over the WWW interface (actually, I ACKed it a bunch of
times -- the forms weren't producing responses, so I resent them a
couple times..)

-sq

> How often is this updated?

whenever I type "make" -- I have disabled auto-updating while the server is
over congested ...

> So far, the only thing it shows I've acked is the keyspace I
> manually ACKed over the WWW interface (actually, I ACKed it a bunch of
> times -- the forms weren't producing responses, so I resent them a
> couple times..)

I fear that some ACKs may be lost :-((

1) use brloop 0.04 and brclient 0.13 might help
2) send stdout and stderr to a log file and scan it :-(

> Where can one observe the progress of the computations? What is 
> allocated etc?

See "inspect the current status of the search" on
http://www.brute.cl.cam.ac.uk/brute/

Note that I have disabled auto-generation of the stats file to help
reduce the congestion ...

I have a small linux box doing 1000 keys per second.  I had to 
re-download the brloop and brclient, cuse when I viewed them on the WWW 
page and attempted ot save them I forgo that Lynx will truncate soem 
lines, leaving me with some errors.  I got complete correct versions an 
the box is chugging away.

Nesta Stubbs		     "Betsy, can you find the Pentagon for me? 
Cynico Network Consulting   It has five sides and a big parking lot" 
nesta@cynico.com			-Fred McMurray-

>>>>> "Peter" == Peter Trei <trei@process.com> writes:

    > I've been looking at the allocated list of keys, and I notice a
    > possible problem: One user has allocated 50,000 segements:

    > 0c2b-cf7a NOACK 0c2b 50000 Joe Thomas <jthomas@ogi.com>

    > Now, it's possible this fellow has some vast farm of high-speed
    > workstations, but I doubt it.  Finger suggests that this is a
    > linux box. [...]

Finger reports that it is indeed a linux (1.2.9) box with a low load
average (0.00, 0.00, 0.00 right now), but that Mr. Thomas is on from
nemesis.ogi.com.

nemesis refuses finger, telnet, and ftp connections, but, on WWW
connect, asks for a userid and password for the "Marcam Development
WWW site at nemesis.ogi.com."

Marcam (http://www.marcam.com) makes something to do with computers,
so Mr. Thomas could well have a bunch of computers at his
disposal... (Even so, 50000 is a big number)

I can't actually figure out what, specifically, Marcam makes.  They
produce applications which reduce costs, increase flexibility, and the
whole shebang... but nowhere does it say what the programs *do*...

Smells like an NSA front.

-sq :)