From kmartinez@cmu.edu Sun Mar 12 20:46:41 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!cmu!kmartinez From: kmartinez@cmu.edu (Kirsty Martínez) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar12.204641.9560@cmu.edu> Date: Sun, 12 Mar 1995 20:46:41 GMT Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Kirsty Martínez Opinions expressed are solely my own and not those of Carnegie Mellon University School of CS. ------------------------------------------------------------ From tstewart@ox.ac.uk Tue Mar 14 00:51:41 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!ox!tstewart From: tstewart@ox.ac.uk (Tyler Stewart) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar14.005141.6421@ox.ac.uk> Date: Tue, 14 Mar 1995 00:51:41 GMT References: <1995Mar12.204641.9560@cmu.edu> Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: Netscape 1.1N Lines: 8 In article <1995Mar12.204641.9560@cmu.edu>, kmartinez@cmu.edu (Kirsty Martínez) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Tyler Stewart Tape trading list upon request. SASE required for international mail. From nlaurent@earthlink.net Tue Mar 14 19:35:41 1995 Path: ashpoly!cascade!mxgate!coyoacan!earthlink!nlaurent From: nlaurent@earthlink.net (Nadine Laurent) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar14.193541.9425@earthlink.net> Date: Tue, 14 Mar 1995 19:35:41 GMT References: <1995Mar12.204641.9560@cmu.edu> Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: Netscape 1.1N Lines: 12 In article <1995Mar12.204641.9560@cmu.edu>, kmartinez@cmu.edu (Kirsty Martínez) writes: > Hardware disassembly report for Motorola hardware hackers. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. PGP Public key available via finger or upon request. -- Nadine Laurent Opinions expressed are solely my own and not those of EarthLink Network. ------------------------------------------------------------ From ycampbell@ox.ac.uk Tue Mar 14 23:43:41 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!ox!ycampbell From: ycampbell@ox.ac.uk (Yuki Campbell) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar14.234341.3535@ox.ac.uk> Date: Tue, 14 Mar 1995 23:43:41 GMT References: <1995Mar12.204641.9560@cmu.edu> <1995Mar14.005141.6421@ox.ac.uk> Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Mar14.005141.6421@ox.ac.uk>, tstewart@ox.ac.uk (Tyler Stewart) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Yuki Campbell "Measuring a record you own is listening, not piracy." Amiga 3000T / NEXTSTEP 3.3