June 2002 - cypherpunks-legacy

[9fans] tls tunnelling (fwd)
by Jim Choate 19 Jun '02

19 Jun '02

---------- Forwarded message ---------- Date: Mon, 17 Jun 2002 21:47:49 -0700 From: Russ Cox <rsc(a)plan9.bell-labs.com> Reply-To: 9fans(a)cse.psu.edu To: 9fans(a)cse.psu.edu Subject: [9fans] tls tunnelling I was intrigued by the prospect of running a TLS-tunneled VNC over the internet (since right now I run plaintext VNCs over the internet), so I looked up stunnel. The interface seemed more reasonable than what I posted earlier today, so I built an equivalent one for Plan 9. Sources now has the following new (and documented) programs: aux/listen1 - simple network listener like inferno's listen(1) tlsclient - what i posted earlier, but no cmd tlssrvtunnel - server side tunneler tlssrvclient - client side tunneler I figured out how to generate new certificates with OpenSSL and documented that too. Enjoy. Russ TLSSRV(8) TLSSRV(8) NAME tlssrv, tlsclient, tlssrvtunnel, tlsclienttunnel - TLS server and client SYNOPSIS tlssrv [ -c cert.pem ] [ -l logfile ] [ -r remotesys ] cmd [ args ... ] tlsclient [ -t trustedkeys ] [ -x excludedkeys ] address tlssrvtunnel plain-addr crypt-addr cert.pem tlsclienttunnel crypt-addr plain-addr trustedkeys DESCRIPTION Tlssrv is a helper program, typically exec'd in a /bin/service file to establish an SSL or TLS connection before launching cmd args; a typical command might start the IMAP or HTTP server. Cert.pem is the server certificate; factotum(4) should hold the corresponding private key. The specified logfile is by convention the same as for the tar- get server. Remotesys is mainly used for logging. Tlsclient is the reverse of tlssrv: it dials address, starts TLS, and then relays between the network connection and standard input and output. If the -t flag (and, optionally, the -x flag) is given, the remote server must present a key whose SHA1 hash is listed in the file trustedkeys but not in the file excludedkeys. See thumbprint(6) for more informa- tion. Tlssrvtunnel and tlsclienttunnel use these tools and listen1 (see listen(8)) to provide TLS network tunnels, allowing legacy application to take advantage of TLS encryption. EXAMPLES Listen for TLS-encrypted IMAP by creating a server certifi- cate /sys/lib/tls/imap.pem and a listener script /bin/service.auth/tcp993 containing: #!/bin/rc exec tlssrv -c/sys/lib/tls/imap.pem -limap4d -r`{cat $3/remote} \ /bin/ip/imap4d -p -dyourdomain -r`{cat $3/remote} \ >[2]/sys/log/imap4d Interact with the server, putting the appropriate hash into /sys/lib/tls/mail and running: tlsclient -t /sys/lib/tls/mail tcp!server!imaps Create a TLS-encrypted VNC connection from a client on kremvax to a server on moscvax: mosc% vncs -d :3 mosc% tlssrvtunnel tcp!moscvax!5903 tcp!*!12345 \ /usr/you/lib/cert.pem krem% tlsclienttunnel tcp!moscvax!12345 tcp!*!5905 \ /usr/you/lib/cert.thumb krem% vncv kremvax:5 (The port numbers passed to the VNC tools are offset by 5900 from the actual TCP port numbers.) FILES /sys/lib/tls SOURCE /sys/src/cmd/tlssrv.c /sys/src/cmd/tlsclient.c /rc/bin/tlssrvtunnel /rc/bin/tlsclienttunnel SEE ALSO factotum(4), listen(8) Unix's stunnel BUGS There is not yet a Plan 9 tool to generate X.509 certifi- cates and public keys. Instead, use the Unix openssl toolkit: openssl req -x509 -nodes -newkey rsa:1024 -keyout key.pem -out cert.pem

1 0

� Pase unas vacaciones de ensue�o !
by Infomail 19 Jun '02

19 Jun '02

1 0

Auto Reply to your message ...
by cs＠incest.com 19 Jun '02

19 Jun '02

----- The following text is an automated response to your message ----- ******No one will see any message you send.******* If you require assistance with any of the following Please direct your Email to the specified department. Individual departments may send you further instructions. 1. How do I cancel my membership? If you still wish to cancel your membership you must go to the Incest home page and click on the Customer Service button. Choose the Cancel option and be sure to consider the offers available before confirming your disconnection. Remember you will need the following: ***Username: ***Password: This information is required in order for us to properly process the cancellation. Once you have provided this information we will cancel your membership. 2. I forgot my Password?: Please go to the link http://www.incest.com/forgotincest.htm We will then verify your membership and Email you your password utilizing the email address you supplied when you joined. If your Email address has changed - please include both your new and old Email address for further verification. 3. How do I Join? Over the Internet Just go to http://www.incest.com/prejoin.htm 4. I'm having problems accessing real video/audio? First and foremost, we do not provide tech support for real audio. You must read their documentation or contact them. What we can do is suggest that you download the newest version of real player and install that - Real Player 8 - Basic URL: www.real.com 5. Can I Email to an actual customer service representative? OF COURSE, we always welcome direct contact with our customers. However, keep in mind that our staff have a variety hours and tasks. Our first obligation is to keep our Web services running at optimal performance. We will get back to you as soon as time and work schedules permit. If the Automatic Reponse System does not address your specific your question, then please feel free to contact us. Customer Service and Tech Services- pat(a)incest.com - Pat Hays 6. How do I submit a story? Send your stories (in the body of your email, not as an attachment) to the following address: mystory(a)incest.com

1 0

� Pase unas vacaciones de ensue�o !
by Infomail 19 Jun '02

19 Jun '02

1 0

DOJ proposes US data-rentention law.
by Trei, Peter 19 Jun '02

19 Jun '02

- start quote - Cyber Security Plan Contemplates U.S. Data Retention Law http://online.securityfocus.com/news/486 Internet service providers may be forced into wholesale spying on their customers as part of the White House's strategy for securing cyberspace. By Kevin Poulsen, Jun 18 2002 3:46PM An early draft of the White House's National Strategy to Secure Cyberspace envisions the same kind of mandatory customer data collection and retention by U.S. Internet service providers as was recently enacted in Europe, according to sources who have reviewed portions of the plan. In recent weeks, the administration has begun doling out bits and pieces of a draft of the strategy to technology industry members and advocacy groups. A federal data retention law is suggested briefly in a section drafted in part by the U.S. Justice Department. [...] - end quote -

1 0

FWD:RE:Increase your business sales 4737DeDi7-810eXBb0725WrcF1-077-28
by Sandyparker0546h24＠mailerstobulkit.com.co.uk.co 19 Jun '02

19 Jun '02

There is NO stumbling on to it! The greatest way of marketing this century is undoubtedly direct e-mail. It's similar to the postman delivering a letter to your mailbox. The ability to promote your product, service, website, or MLM/network marketing opportunity to millions instantly is what advertisers have been dreaming of for over 100 years. We e-mail your one page promotion to a list of our general addresses. The greatest part is, it's completely affordable. E-MAIL MARKETING IS THE ANSWER! How do we know? We know because that's exactly what we do. It's a proven fact that you can attract new business through Direct E-mail Marketing. The profits that E-mail advertising generate are amazing! We are living proof. We are a direct E-mail internet advertising company and our clients pay us thousands of dollars a week to E-mail their products and services. We Don't want any one spending thousands on a direct email marketing campane with out testing the market to see how it works. STANDARD PRICING AND PROCEDURES ----------------------------------------------------------------------- EXTRACTING: Our list of general Internet addreses are actually extracted from the most popular web sites on the Internet. The addresses are verified and run through our purification process. The process includes addresses run against our custom remove filter of 2,492 keywords, as well as through our 192MB remove /flamer list. The EDU, ORG, GOV, MIL, and US domains are removed, as well as other domains that asked not to receive e-mail. ----------------------------------------------------------------------- EVALUATION: $350.00 (optional) One of our marketing specialists will evaluate your sales letter, and offer his/her expertise on how to make it the most successful. ----------------------------------------------------------------------- STANDARD PRICING: (Emails Delivered) Million- $700.00 per 2 Million- $600.00 per 3 Million & up- $500.00 per ----------------------------------------------------------------------- SPECIAL OFFER! This introductory offer of $300.00 includes: 1. Set-Up Fee 2. Evaluation of Sales Letter 3. 500,000 e-mails delivered ----------------------------------------------------------------------- PAYMENT POLICY All services must be paid in full prior to delivery of advertisement. ----------------------------------------------------------------------- NOTICE: Absolutely no pornography, chain letters or any threatening or questionable materials. If you are serious about Direct Email Marketing--Fax the following form to (602) 392-8288 ---------------------------------------------------------------------- PLEASE FILL THIS FORM OUT COMPLETELY! Contact Name: _____________________________________________ Business Name: ______________________________________ Business Type: ______________________________________ # Years in Business: _________________________ Address: _________________________________________________ City: ____________________ State: ______ Zip: ______________ Country: _______________ Email Address: _______________________________________________ Phone: __________________________Fax: ____________________________ ----------------------------------------------------------------------- To get out from our email database send an email to publicservice1(a)btamail.net.cn 1114NOyv9-833adNm2933LhHf6-371emwM2004CkwR6-523flSu1179xvzI9-784Wirw9831iLCV6-873gMl78

1 0

Re: Move our monthly meetings
by Curt Smith 19 Jun '02

19 Jun '02

I am not that comfortable with this idea: 1. The meeting location is not generally known. 2. I prefer the "open-air" arrangement (public place with good view of the environment). 3. I also prefer the "open-seating" arrangement (precise location determined on the fly). After all, cypherpunks are supposed to be paranoid... Curt --- Jim Choate <ravage(a)ssz.com> wrote: > > I've been thinking of moving the monthly meeting to the > Monkey Wrench bookstore on 53rd about Avenue G. They focus on > anarchist, socialist, and other non-traditionsl political > views. When I went in to tal to them I noticed they had > Crypto and Puzzle Palace, as well as a good collection > of Chomsky, on the shelves. I've still got to talk to the > right person for permission but I thought a heads up would be > in order. > > They have a small sitting area that will seat about 5, that > should be sufficient since we usualy only get 2-3 folks total. > > ravage(a)ssz.com > www.ssz.com > jchoate(a)open-forge.org > www.open-forge.org > ===== end eof . Yahoo! - Official partner of 2002 FIFA World Cup http://fifaworldcup.yahoo.com

1 0

ADV: Extend your car's warranty! ::k|ynfvryqlyEzu1ewp...
by mort239o＠meg4.kewq.com 19 Jun '02

19 Jun '02

Car repairs ALWAYS come at a bad time -- extend your car's warranty today and don't be left with huge bills! (Even older cars qualify!) Buy direct and save 40 to 60%! Fill out our FREE, no obligation form and receive a quote! http://211.78.96.25/yourcar/ --------------------------------------- To unsubscribe, go to: http://211.78.96.25/removal/remove.htm Please allow 48-72 hours for removal.

1 0

65.204.155.132
by aw-confirm＠ebay.com 19 Jun '02

19 Jun '02

1 0

ADV: Extend your car's warranty! ::k|ynfvryqlyElkvvvmlw4tw|2fps...
by fast91gi＠meg5.kewq.com 19 Jun '02

19 Jun '02

Car repairs ALWAYS come at a bad time -- extend your car's warranty today and don't be left with huge bills! (Even older cars qualify!) Buy direct and save 40 to 60%! Fill out our FREE, no obligation form and receive a quote! http://211.78.96.25/yourcar/ --------------------------------------- To unsubscribe, go to: http://211.78.96.25/removal/remove.htm Please allow 48-72 hours for removal.

1 0