October 2000 - cypherpunks-legacy

CDR: Detecting PGP encrypted messages
by Septic Remailer Admin 05 Oct '00

05 Oct '00

-----BEGIN PGP SIGNED MESSAGE----- More code... #!/usr/bin/perl # name: pgpcheck.pl # purpose: Prints STDIN to STDOUT if it is encrypted with PGP/GPG. # requires: /bin/tempfile from debianutils, /usr/bin/gpg # TODO: # Does it need to detect Mixmaster messages? # It should handle pings (i.e. plain text) to another remailer # by checking rlist or some arbitrary whitelist. # author: septic-admin(a)nym.alias.net # version: 0.0.1 # date: 4 OCT 2000 # license: GPL if (!-x "/bin/tempfile") { die "requires /bin/tempfile"; } if (!-x "/usr/bin/gpg") { die "requires /usr/bin/gpg"; } my $TMP = `tempfile` || die "cannot create temp file"; my $ENCRYPTED = 0; # Store the file. open(TEMPFILE, ">$TMP") || die "cannot open temp file"; while (<>) { print TEMPFILE; } close(TEMPFILE) || die "cannot close tempfile"; # Test the file. open(GPG, "gpg --batch 2>&1 <$TMP|") || die "cannot open GPG pipe"; while (<GPG>) { if ($_ =~ /^gpg: encrypted/) { $ENCRYPTED = 1; } } close(GPG); # Insert code here to test destination against whitelist (for pings). # Print the file to STDOUT if it is encrypted. if ($ENCRYPTED) { open(TEMPFILE, "<$TMP") || die "cannot reopen temp file"; while (<TEMPFILE>) { print; } close(TEMPFILE); } unlink $TMP || die "cannot unlink temp file"; -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: noconv iQCVAwUBOdzoJHT63FdzI1K1AQGPZwP5ARcY7EhDTNjXm5vQoYK2HFymN295ia3U RnqG8UJHfmjtXXooucmM0VOhsMfo5GS1M5uJIxH4b9YsrDTSNDjydwHEhe6ajcAw Ix78PIslzcXrFTLq/EowDtZ0MvuFWpnC/sgJAVYOAZyK3iYOf3yG85vHrOVVP9ot Ch+e7lDp/AE= =zC7G -----END PGP SIGNATURE-----

1 0

CDR: e-Privacy - your comments please...
by Robert Guerra 05 Oct '00

05 Oct '00

Folks: The Canadian Broadcasting corporation is running a segment on the 10pm news tomorrow on e-privacy. To the public's comments and suggestions on the issue they have created a discussion forum on thier web page. Seeing that the folks on this list are familiar with the topics, I ask that you visit the site and enter a few words of your wisdom. Regards Robert http://interact.cbc.ca/cgi-bin/WebX?50@7.nLRXaJbgbeb^0@.ee768e8 A study by Canada's privacy commissioner reports that almost half of Canadians are perfectly comfortable with retailers compiling personal data...if there's a reward paid to the consumer. (Such as a discount or free goodies). Tell us what you think about e-privacy and who should know what about you.

1 0

CDR: Carnivore sucks more than just email!!!!
by sunder 05 Oct '00

05 Oct '00

http://www.theregister.co.uk/content/1/13767.html Carnivore does more than previously thought By: Thomas C Greene in Washington Posted: 05/10/2000 at 14:49 GMT Heavily censored FBI documents obtained by US watchdog outfit the Electronic Privacy Information Centre (EPIC), under a Freedom of Information Act (FOIA) lawsuit, indicate that the FBI's electronic snoop known as Carnivore might be able to monitor a good deal more than just e-mail traffic. Among the capabilities that peek out from behind all the indelible black swaths in the documents is an ability to reconstruct an entire Web page as viewed by a subject. A planned, updated version may even be able to capture voice-over-Web communications. Presently the system can capture and record all packet traffic to and from a selected IP, while monitoring a subject's on-line movements. <SNIP> -- ----------------------Kaos-Keraunos-Kybernetos--------------------------- + ^ + :Surveillance cameras|Passwords are like underwear. You don't /|\ \|/ :aren't security. A |share them, you don't hang them on your/\|/\ <--*-->:camera won't stop a |monitor, or under your keyboard, you \/|\/ /|\ :masked killer, but |don't email them, or put them on a web \|/ + v + :will violate privacy|site, and you must change them very often. --------_sunder_(a)_sunder_._net_------- http://www.sunder.net ------------

1 0

CDR: mail list
by Gabby Nicole 05 Oct '00

05 Oct '00

put me on your mailing list, please Thanks Gabby Nicole

1 0

CDR: UK Companies free to snoop on staff
by R. A. Hettinga 05 Oct '00

05 Oct '00

Obviously, if someone who uses company assets for personal business deserves all the snooping he gets, at least theoretically, though certainly not in actual practice. The tweak in the British RIP vs. Eurocrat case here is that, same as it ever was, the nation-state is again quite literally expropriating the resources of employers by making them subject to a human "right". ;-). "The 'Poor'?? Are there no prisons?" Cheers, RAH (Who believes we'll *all* be proprietors some day, and none of this garbage will matter anymore...) --- begin forwarded text

1 0

CDR: Fwd: Re: anarchism = socialism
by Sean Roach 05 Oct '00

05 Oct '00

At 12:30 AM 10/5/2000, Tim May wrote: > That you would say "beautiful sentiment" to the overall article you quoted is...scary. Perhaps I misspoke. What I meant to get across was that the article was compelling, but I didn't believe it was practicle. 26 megabytes is a bit much, I should have pared the original down to the parts I was actually attacking. Anyway, this was one of those yes, but... responses.

2 3

CDR: Important Membership Information
by announce＠inbox.nytimes.com 05 Oct '00

05 Oct '00

Dear sciferpunk, Welcome to NYTimes.com! We are delighted that you have decided to become a member of our community. As a member you now have complete access to the Web's premier source for news and information -- free of charge. NYTimes.com not only provides you with in-depth coverage of events happening around the world but also with a wealth of additional features and services. The site is updated regularly throughout the day by New York Times reporters and editors to give you greater insight into events unfolding throughout the day. No matter what the hour, you can look to NYTimes.com for the most trustworthy coverage available and unique perspective you won't find anywhere else. Please feel free to explore the other areas of NYTimes.com. Here are some starting points you may find useful: ** Get NYTimes.com headlines e-mailed directly to you. Choose from the day's top stories, breaking news alerts and your favorite sections: http://email.nytimes.com/email/email.jsp?welcome ** Search and retrieve articles from The New York Times Archives back to 1996. Searches and summaries of articles are free, but there is a small fee for full text. http://archives.nytimes.com/archives?welcome ** Explore the Help Wanted and other classified listings on the Web: http://classifieds.nytimes.com/hw?welcome ** Get a free photo screensaver from The New York Times Photo Archives Choose from Vintage New York, Classic Sports, Americana and more: http://www.nytimes.com/partners/screensaver/index.html?welcome ** Search our archive of 50,000 book reviews, listen to author interviews or sign-up for an exclusive weekly newsletter from our Books Editor: http://www.nytimes.com/books/home?welcome Thank you again for becoming a member. We hope that you will make a point of visiting the site often. Sincerely, Rich Meislin, Editor in Chief New York Times Digital P.S. Your opinions are important to us. Share your thoughts about the site with us by sending an e-mail to feedback(a)nytimes.com ************************************************************* Your account information is listed below for future reference: Your Member ID is sciferpunk You selected your password at registration. Your e-mail address is cypherpunks(a)toad.com If you did not authorize this registration, someone has mistakenly registered using your e-mail address. We regret the inconvenience; please see http://www.nytimes.com/subscribe/help/cancel.html for instructions.

1 0

CDR: Supreme Court denies reporter's kiddie porn appeal
by Declan McCullagh 05 Oct '00

05 Oct '00

http://www.cluebot.com/article.pl?sid=00/10/05/1654245&mode=thread High Court Denies Reporter's Kiddie-Porn Appeal posted by cicero on Thursday October 05, @11:52AM from the so-much-for-a-fair-trial dept. The Supreme Court this week declined to hear an appeal from a journalist convicted of trafficking in child porn, which means veteran reporter Larry Matthews will be spending some 18 months in prison. Brill's Content has an in-depth article on the case, including how the judge barred Matthews from using the First Amendment as a defense when arguing before the jury. That seems wrongheaded. No matter whether Matthews downloaded nude images for a story or not -- he had deleted them by the time the FBI raided his home -- he should have the right to tell a jury his story. Also see an amicus brief filed by a journalists' group, and a writeup in the Washington City Paper.

2 1

CDR: Newsletter from Bacalao.Net - new offerings
by Bacalao.net 05 Oct '00

05 Oct '00

The traffic at http://bacalao.net have increased a lot over the last few days. Yesterday about 25 companies signed up an account. Thank you all. By supporting this site you might help yourself as well. Also a lot of new postings was done night at http://bacalao.net -------------- Offers of: -DRIED SALTED SAITHE -TURKISH PIKE- PERCH FILLETS -W/R NOTOTENIA -FRESH SALMON -YELLOW FINE SOLE -COD H+G SMALL SIZE H+G -And some equipment... Check it out, there might be something you are looking for!! For new users, register your company and be allowed to use your company logo and up to 5 product pictures while posting at http://bacalao.net Whitin some time you can also get offers by e-mail of the products you sign up for from the tradeboard. The easiest, fastest and cheapest (up to now - totally free of charge) tradeboard for seafood on the Internett. Please do not reply to this e-mail address. If you need to contact bacalao.net, please respond to office(a)bacalao.net Sincerely, b a c a l a o.net Office

1 0

CDR: Disposable remailers
by Bill O'Hanlon 05 Oct '00

05 Oct '00

I've started a small project, and I'm curious to know if others think there's any long-term value to it. Dallas Semiconductor makes a small Java-based computer called the TINI. (Check out http://www.ibutton.com/TINI for details.) The unit itself is the size of a memory SIMM and costs $35. The card isn't too useful until you add their socket board which costs $30 or so and provides an Ethernet port, a serial port, and a connector for power. The OS for the TINI has a complete TCP/IP stack, and has a nice Java implementation. My idea was to make a throwaway remailer. For $80 worth of materials, you can have a unit that can remail messages in the Cyperpunks tradition. It could be easily hidden. Here's the pros and cons as I see them: Pros: small (easily hidden in a large corporate or university environment -- the TINI can even pick up its IP address via DHCP) doesn't have a disk drive so there's no room for logs. Inexpensive, so it can be sacrificed if discovered. Cons: It might not be able to have crypto. I'm not sure if something PGPish can be ported to it and still leave room for the incoming message. It comes with less than 300K of useable RAM. However, the TINI does have a socket on it for an Ibutton, so one of Dallas' Crypto or Java buttons might be able to take on the crypto load. That's more money per unit, however. Also, due to the small memory footprint, it doesn't look like a lot of messages can be stored locally, so there's not a lot of room for latency and message re-ordering. It would also be tough to harden these things against any kind of denial of service attack. Bombing it with mail or strange packets will probably lock it up. Currently, the TINI also requires that SOME email server take email from it, since the code that comes with it really isn't a complete mail service, but I think it could probably do it's own delivery eventually. I'm envisioning that the code would announce itself to some set of web servers so that people can know where to find a few of these transient remailers when they wanted to send some messages. I've already got a small chunk of code that can do some crude remailing, so the basic idea works. Does this seem useful to anyone? The TINI is fun to tinker with, so I'm not out anything if someone points out a hugely glaring hole in the idea, here. One hole that I've already noticed is that the code that runs on a TINI could just as easily run on a Windows machine and do the same job, and there's been very little interest in having a widespread network of little remailers for workstations. -Bill -- Bill O'Hanlon wmo(a)pro-ns.net Professional Network Services, Inc. 612-379-3958

1 0