December 2003 - cypherpunks-legacy

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

Hi all, I have written and installed a remailer pinging script which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, at http://http.cs.berkeley.edu/~raph/remailer-list.html Please let me know about any other remailers which I missed. I've only included remailers which can mail to arbitrary addresses, so I already know chop and twwells are missing. If you've got a Web page, please feel free to include a link to this page. If you think your Web page is relevant to the subject of remailers, let me know and I'll link it in. Comments and suggestions welcome! Note to remailer operators: this script generates hourly ping messages. If you don't want that, let me know and I will take your mailer off the list, or increase the interval between pings. Raph Levien

1 0

Re: Brands cash
by Rick H. Wesson 17 Dec '03

17 Dec '03

Hal, I liked your description of Brans Cash. I'd like to turn your description into psudo-code or Perl whichever comes first and you are more comfortable with reviewing. Anyone lese interested in developing a bit of perl as an example of Brands cash in action? -Rick

3 2

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

Hi all, I have written and installed a remailer pinging script which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, at http://www.cs.berkeley.edu/~raph/remailer-list.html Please let me know about any other remailers which I missed. I've only included remailers which can mail to arbitrary addresses, so I already know chop and twwells are missing. If you've got a Web page, please feel free to include a link to this page. If you think your Web page is relevant to the subject of remailers, let me know and I'll link it in. Comments and suggestions welcome! Note to remailer operators: this script generates hourly ping messages. If you don't want that, let me know and I will take your mailer off the list, or increase the interval between pings. Raph Levien

1 0

CEB 8 - I GUESS I'LL JUST HAVE TO DO IT MYSELF!
by Gary Jeffers 17 Dec '03

17 Dec '03

CYPHER_REBELS" ELECTRONIC BOOK (CEB) 8 - I GUESS I'LL JUST HAVE TO DO IT MYSELF! Fellow Cyphers - rebel/punks, I have decided to do the CEB myself. I am going to post it on Cypherpunks about once a month & on other lists as well. The CEB will exist as an often updated & posted file. I now need contributions of text. I need the WNSTROM steganography program internet source location & a concise write up of it. I also need the same for PG shell program. I also need a concise write up of how to use remailers, how to chain them, etc.. The CEB will be an up to date source to show locations of best privacy software, essential information, & electronic privacy concerns. PUSH EM BACK! PUSH EM BACK! WWWAAAYYY BBBAAACCCK! BBBEEEAAAATTTT STATE!

2 1

pgp -c,no initialization vector, possible bug, pgp 26ui
by 0x7CF5048D＠nowhere 17 Dec '03

17 Dec '03

Darn, the remailers keep truncating this! In pgp 2.6 UI When pgp is called with the -c switch, the routine idea_encryptfile in crypto.c is called from main in pgp.c. > status = idea_encryptfile( workfile, tempf, attempt_compression); >int idea_encryptfile(char *infile, char *outfile, > boolean attempt_compression) >{ > FILE *f; /* input file */ > FILE *g; /* output file */ > byte ideakey[16]; > struct hashedpw *hpw; Note that idea key is a 16 bytes. Now idea_encryptfile calls squish_and_idea_file in crypto.c with this 16 byte key. > /* Now compress the plaintext and encrypt it with IDEA... */ > squish_and_idea_file( ideakey, f, g, attempt_compression ); Now squish_and_idea_file calls idea_file in the module crypto.c with the same 16 byte key. >static int squish_and_idea_file(byte *ideakey, FILE *f, FILE *g, > boolean attempt_compression) >{

1 0

No Subject
by dfloyd＠runner.utsa.edu 17 Dec '03

17 Dec '03

I most likely will get toasted for this, but here goes: I notice tons of fear and loathing, and this feeling of 1984 is upon us, etc. I seriously wonder who is trying to create a repressive government. Clinton cannot pass a simple crime bill, much less become Big Brother. Congress has to do tons of head butting to vote for a pay raise, much less turn the US into a totaliarian society. I DO agree on one thing. If there is something st00pid proposed, like Clipper, etc., then people have all rights to toast the puppy, but I don't think we have an Outer Circle/Inner Circle just yet. (From a lowly prole,)

3 2

Electronic Postcards
by Ben Goren 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Dear Editor, Most everybody I know puts almost all mail in an envelope before dropping it in the mailbox. The only time we do otherwise is when sending a postcard that says, "I'm here, wish you were fine." So why does everybody send all email in a way that's just as easy to read as a postcard? Why, then, all the fuss over ASU officials reading electronic postcards? If you don't trust the various system operators through whose computer your message might pass, put your email in an envelope--by encrypting it. If you use the most popular email encryption software on the Internet, PGP--Pretty Good Privacy, written by Philip Zimmerman and now maintained and distributed by MIT--then even the National Security Agency, the super-secret government agency entrusted with electronic surveillance, would resort to a beating with a rubber hose before expending the computer power necessary to decrypt your messages. And that's making the rather doubtful assumption that such power even exists. In other words, only my friend John could tell you that - -----BEGIN PGP MESSAGE----- Version: 2.6 hIwCHxG346w4ZyEBBACo5V85syKa2oJ+TpgR5/NFqiSlFLXxSTFQghLb0owAHHqN 9cAmaJB7kvMWq3vKIP/p9s+DCFtuPLe2FF3UFYc9iOibd4LrxWPZpHzHN0DvqiCm 1M8HxJ+DgUpWHZ2jwTTZL/2XR3sfbqw6NyGgDrMspNLXsPu4WN9jctumUfyS/KYA AADRbSMnDQQZFC040LykyL783+ezN8EnLlBRZeXxqSs1fjULqybj0t9x9Sb4EGKG S3KvFUuGfvSBmrx/IKsDyAZ/5LZuFk0KhdGI/a3zP8/Bt4umQQOtIlwh3Kl/qV7I 42sh8Cx1tgXnDrfDav3pXOjlCwcjp8ChvHy79YUcUMuCGnm80fs+I7YjMKeHHlm0 qPcYE3AZRkfu8dRqisD+raXn8bpgzvyvEaFs5IMJjIhb9n3i5UaU3C3HmsvNrAps 3MTgfhDTN+XkrsaJygTvva67/5Q= =FQw9 - -----END PGP MESSAGE----- Really means, "Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the government for a redress of grievances." Since I've deleted the original, even I couldn't tell you what it says except from my own fading memory. Because of an obscure code of laws known as the International Trafficking in Arms Regulations, strong cryptography, including PGP, is classified right up there with anti-tank missiles. Never mind that any program that is readily available in the States is also readily available abroad, there are stiff fines and prison sentences for those who export cryptography from the US or Canada. Thus, if you wish to get a copy of PGP for yourself--absolutely free--you must get it directly from MIT. Use anonymous FTP--which you can do from any computing site on campus--to connect to net-dist.mit.edu, and get the file /pub/PGP/README. It contains instructions on how to get the software. While a technical description of how PGP works is beyond a letter to the Editor, I would be more than happy to provide such via email to those who ask. Just write to me at Ben.Goren(a)asu.edu And, of course, PGP-encrypted messages are most welcome. Yours truly, Ben Goren Faculty Associate School of Music 5-0429 -----BEGIN PGP SIGNATURE----- Version: 2.6 Comment: My key is not 'escrowed' with any government agency. iQCVAgUBLlrPMkNl71nP8jvVAQGyVAP9HyYZcmhssvvtFMrZ6kISvs4jXsgvx5ZT UHJYzcmtMXoQOP+xYZeLh31ILiX8glJXUeq1n49HNIRh10YPxAeAj3zVQCWlBIbX SjMEQpYDdNpE8sTULL0nmKlGq5P9q89KEfHlT8C8CZyS0+0ZaY2dFs4uYGaFdDq4 zyCVVTrEyUk= =lbBs -----END PGP SIGNATURE----- Note to those receiving this message as a Cc: This letter is in response to a front-page article and an editorial in Arizona State University's student newspaper, the _State Press._ The one described and the other decried a draft resolution which would formalize the current policy of allowing administrators to examine any account on any university computer for no cause other than "reasonable suspicion." b& -- Ben.Goren(a)asu.edu, Arizona State University School of Music net.proselytizing (write for info): The battle is over; Clipper is dead. But the war against Government Access to Keys (GAK) goes on. Finger ben(a)tux.music.asu.edu for PGP 2.6 public key ID 0xCFF23BD5.

2 1

Re: THE H.E.A.T. IS ON
by Peter Murphy 17 Dec '03

17 Dec '03

Since I don't get Acapulco H.E.A.T where I am, I wonder if you could answer me this question - Is the show another Aaron Spelling production? Peter Murphy.

1 0

Re: Voluntary Governments?
by jdd＠aiki.demon.co.uk 17 Dec '03

17 Dec '03

In message <m0qd0At-000I8SC(a)crynwr.com> Russell Nelson writes: > Date: Tue, 23 Aug 94 18:15:12 GMT > From: jdd(a)aiki.demon.co.uk (Jim Dixon) > > I grew up in a small town of 5,000. It had a city government. The > [etc] > So drop the word 'exclusive'. > > The government still excludes non-governmental authorities from using > violence. > > In our high school we had a student government. We had no prisons > and no guns. > > Then you were a club. Or, you were a government whose rules were > enforced by other governments. The discussion here is about the use of common words in the English language. You are decreeing that Jason and I and most of the rest of the English-speaking world follow one restricted usage, yours. This is a form of linguistic imperialism. Sorry, I will keep on using the word in the ways permitted by most dictionaries. There is also an odd form of cultural imperialism here. The USA has a form of government that is unique to it. Like the people of most large continental nations, Americans think that the rest of the world is just their own country with a few changes in details. It isn't. There are many cultures where individuals are expected to use violence. In the Afghan countryside (at least in the Pathan area), all males over the age of 13 or so are expected to carry guns and to use them. When I was there there was no central government in the American sense. Government was local. There was nothing resembling a constitution, in fact there was no written law, as far as I know. The elders met and came to decisions. Those decisions, which were of course informed by Islamic tradition, had the effect of law. There was a competitive government in Kabul, but its influence was limited to the roads. In remote areas, the Kabul government could frighten people with the jet fighters donated to it by the Russians, but it had little day-to-day control. At least theoretically all Kshatriya caste Hindus and all Sikhs are warriors. I have never been in the Arab countries, but I believe that in many of them people are expected to use violence under certain circumstances. This is sanctioned by their reading of the Koran. Women are really stoned to death by their neighbors for adultery. No intervention by "the government" is necessary. What you are saying is that, effectively, these are not 'real' countries and their peculiar forms of government are not real, because they do not follow the American model. Turn the clock back 100 years and America was not so different. It is true that in the West people carried guns and were expected to use them under certain circumstances. Jason's point is that if you turn the clock forward 50 years, you are likely to find entities exercising governmental powers in cyberspace. They will use sanctions to coerce uncooperative people to follow norms. These sanctions need not be backed by the use of physical weapons. They will also collect something like taxes. It may be that the terms used will not be 'government' and 'taxes', but that is what they will be. -- Jim Dixon

1 0

Re: Voluntary Governments?
by dance＠cicero.spc.uchicago.edu 17 Dec '03

17 Dec '03

Jim Choate says: >Can't speak for MIT but I can speak for UT Austin, they do have cells to hold >prisoners. The security forces at that school attend the Tx Dept. of Public >Safety training school and hold state law enforcement positions. The last >thing you want to do is really piss one of these guys, you would end up >in one of the state prisons for several years, Huntsville probably. > >Schools can use physical force against their students. I have personaly seen >assaults on the presidents office when a group of students took it over in >the late 80's because of UT Austin holdings in S. Africa. I have seen them >knock the holy shit out of students for nothing more than simply refusing to >move fast enough. The officers stormed the office in full riot gear with >M16 automatic rifles and smoke grenades. > >I suspect that MIT's security forces, even though it is a private school, >hold 'peace officer' ratings and this implies that they can carry weapons >at any time (though they don't usually). This holds for the small community >college that I work at now as well. The officers don't carry guns as a regular >part of their uniform except during registration when there are large amounts >of cash on campus or when important officials visit the campus(es). The University of Chicago's Security officers are sworn Chicago police; they are given full police powers, if only limited jurisdiction. Lucky for everyone here they choose not to exercise *any* authority. Trying to neither be foolish nor a lightweight.... _/_/_/ _/_/_/ _/_/_/ _/ _/ It's dangerous to be right _/ _/ _/ _/ _/_/ _/ when the government is wrong. _/_/_/ _/ _/ _/_/_/ _/ _/ _/ _/ _/ _/ _/ _/_/_/_/ _/ --Voltaire _/_/_/ _/_/_/ _/_/_/ _/ _/ _/_/_/ _/

2 1