December 2003 - cypherpunks-legacy

Anonymous Remailers
by Matt Thomlinson 17 Dec '03

17 Dec '03

Yes, those of us who run remailers sometimes run them from university accounts. Such was my case. The university of washington (without knowing it :) supported remailing at one time, through phantom(a)mead.u.washington.edu. I am not root here (and never will be!), and such access is not needed to set up a remailer. Instead, Hal Finney has written up a few remailer scripts which depend only on your ability to create a .forward file, and have perl available. (oh, also about.. ~1Mb for all of the scripts + PGP + keyring). There were no problems with my remailer and it was well-used. No scripts of incoming or outgoing mail were kept. The remailer lived for a few months last year, which actually isn't bad when you consider it was based on a student account with a nazi-like administration. :) The death-blow was a remailer target complaining to me about someone sending unsolicited mail to them through my remailer. Instead of replying to my account (phantom@mead), they saw that the header had "nobody@mead" on it, and when mail to that address bounced, they sent to postmaster. The mail to the postmaster was very polite and simply asked that the mail cease, either by taking away the remailing ability from the perpetrator or blocking the destination address. Of course, the postmaster didn't know anything about this, and when he looked into it, he was quite suprised. I was able to keep it limping for about another week. I got support from a few cypherpunks around here, people on the list like JDraper, TMay, etc., and from others including Whit Diffie, Neal Koblitz, etc. I might have been able to fight the shutdown, but I saw it as a losing battle. In any case, no, it takes no special abilities to run a remailer; everything is pretty much packaged for ease-of-use. Every administration is going to act differently if/when/how they find out about it. Make your own judgement, I suppose. mt Matt Thomlinson Say no to the Wiretap Chip! University of Washington, Seattle, Washington. Internet: phantom(a)u.washington.edu phone: (206) 548-9804 PGP 2.2 key available via email or finger phantom(a)hardy.u.washington.edu

3 3

Anonymous remailers
by nobody＠shell.portal.com 17 Dec '03

17 Dec '03

I have a question for all the 'punks who are running remailers. I've noticed that most of you run the remailers from your accounts at various colleges & universities. I want to know what kinds of reactions you got from the system administrators. Did they ask lots of questions, give you a hard time about it, or not care? (or do they not know?) Has anyone been forced to shut down their remailer? I know some guys got hit with a lot of flack over some pgp keyservers, has anything similiar happened with the remailer system? Also, if I was to try running a remailer, would I need my own machine, or is there some way I could get the school's computers to run the remailer for me? or does it vary by system?

2 1

Requiring Digital Signatures
by Mike Ingle 17 Dec '03

17 Dec '03

Some have suggested that a future network might require DSS signatures and make it illegal to send unsigned data. This would be a Bad Thing. I found this on comp.dcom.fax. It seems that a similar law is already in effect for fax machines. It is illegal to send a fax without an identification line on it! This is very similar to requiring a digital signature on a message, and sets a bad precedent. LO> The manual to my fax software quotes the following: LO> LO> FCC regulation part 68, Section 68.318 (c) (3) states that it is LO> illegal to send a fax in the U.S. which does not contain the LO> following sender information: LO> "...in a margin on the top or bottom of each transmitted page or LO> on the first page of the transmission, the date and time it is LO> sent and an identification of the business, other entity, or LO> individual sending the message and the telephone number of the LO> sending machine of such business, other entity or individual." LO> LO> (from the FaxWorks 3.0 manual, page 8, (c) SofNet, Inc.)

1 0

Humor?
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

Did you hear the one about about the remailers that had so much traffic the remailer scripts couldn't keep up? --- Seems it was a case of "Perl Jam." (Inspired by writing my last post about Matt Thomlinson's Seattle site and thinking about the Seattle sound. I'm not a fan, particularly. Eric Hughes let me tape a CD of either Pearl Jam or Nirvana--I can't tell which is which.) --Tim -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power:2**859433 | Public Key: PGP and MailSafe available.

2 1

Re: Superping Script
by nobody＠rosebud.ee.uh.edu 17 Dec '03

17 Dec '03

Anon asked for my "Superping Script". I was so embarassed by what I was calling a script that I wrote a real one. The magic perl command turned out to be 'system'. Duh? I am using the csh shell, if that matters. -Xenon <na38138(a)anon.penet.fi> #!/usr/bin/perl # SuperPing: Ping Cyperpunk remailer connections. # Brought to you by Xenon <na38138(a)anon.penet.fi>. # Thanks to Alan Barrett for teaching me some perl. # Replace $Rm[$First] below with YOUR address to test this! # Warning: outputs ~40 e-mails at a time. May give "too # many processes" error towards the end if you haven't killed # all of your stopped jobs. Increase the sleep(sec) time if needed. # Will also function as a convenient method to shut down all # remailers at once by making .PingFile 500K instead of 1K. # Not recommended if you value your life ;-). # List of remailers (not complete). # Make any line a comment to remove that line's remailer. @Rm = ( "catalyst(a)netcom.com", "hh(a)cicada.berkeley.edu", "remailer(a)dis.org", "ebrandt(a)jarthur.claremont.edu", "remailer(a)merde.dis.org", "hh(a)pmantis.berkeley.edu", "elee7h5(a)rosebud.ee.uh.edu", "hfinney(a)shell.portal.com", "hh(a)soda.berkeley.edu", ); #Nicknames for output and subject lines. @Nick = ( "catalyst", "cicada", "dis.org", "jarthur", "merde", "pmantis", "rosebud", "shell", "soda", ); #Strings, since lines got too long below. $A = "(echo \"::\" ; echo \"Request-Remailing-To: "; $B = "; echo \"\" ; echo \"::\" ; echo \"Request-Remailing-To: "; $C = "ndw1(a)columbia.edu\" ; echo \"\""; $D = " ; echo \"\" ; cat .PingFile) | mail -s \"P"; foreach $Sec (0..$#Rm) { foreach $First ($Sec+1..$#Rm) { $Num++; system "$A$Rm[$Sec]\"$B$C$D$Num < $Nick[$First]\" $Rm[$First]"; print "P$Num $Nick[$First] > $Nick[$Sec]\n"; sleep(1) } } # .PingFile contains this: #:: #Request-Remailing-To: myadress # #Ping! #-----Begin Test----- #Test #-----End Test----- #Output (first few lines) looks like this: #P1 cicada > catalyst #P2 dis.org > catalyst #P3 jarthur > catalyst #P4 merde > catalyst #P5 pmantis > catalyst #P6 rosebud > catalyst #P7 shell > catalyst #P9 dis.org > cicada #P10 jarthur > cicada # Sample pings as received later: # 1 catalyst-remailer(a)netcom.com Mon Jan 31 08:10 20/757 P7 < shell # 2 catalyst-remailer(a)netcom.com Mon Jan 31 08:22 20/759 P6 < rosebud # grep Subject: /usr/spool/mail/n/name | sort -tP +1 -n # will give you a list of received mail, in order of Ping numbers, # where /n/name is your system's mail folder.

1 0

Re: Debugged Superping Script!
by nobody＠soda.berkeley.edu 17 Dec '03

17 Dec '03

Sorry to post this again. This one works. -Xenon #!/usr/bin/perl # SuperPing: Ping Cyperpunk remailer connections. # Brought to you by Xenon <na38138(a)anon.penet.fi>. # Thanks to Alan Barrett for teaching me some perl. # Replace $Rm[$First] below with YOUR address to test this! # Warning: outputs ~40 e-mails at a time. May give "too # many processes" error towards the end if you haven't killed # all of your stopped jobs. Increase the sleep(sec) time if needed. # Will also function as a convenient method to shut down all # remailers at once by making .PingFile 500K instead of 1K. # Not recommended if you value your life ;-). # List of remailers (not complete). # Make any line a comment to remove that line's remailer. @Rm = ( "catalyst(a)netcom.com", "hh(a)cicada.berkeley.edu", "remailer(a)dis.org", "ebrandt(a)jarthur.claremont.edu", "remailer(a)merde.dis.org", "hh(a)pmantis.berkeley.edu", "elee7h5(a)rosebud.ee.uh.edu", "hfinney(a)shell.portal.com", "hh(a)soda.berkeley.edu", ); #Nicknames for output and subject lines. @Nick = ( "catalyst", "cicada", "dis.org", "jarthur", "merde", "pmantis", "rosebud", "shell", "soda", ); # Strings, since lines got too long below. # Add your address as name(a)site.domain $A = "(echo \"::\" ; echo \"Request-Remailing-To: "; $B = "; echo \"\" ; echo \"::\" ; echo \"Request-Remailing-To: "; $C = "name(a)site.domain\" ; echo \"\""; $D = " ; echo \"\" ; cat .PingFile) | mail -s \"P"; foreach $Sec (0..$#Rm) { foreach $First ($Sec+1..$#Rm) { $Num++; system "$A$Rm[$Sec]\"$B$C$D$Num < $Nick[$First]\" $Rm[$First]"; print "P$Num $Nick[$First] > $Nick[$Sec]\n"; sleep(1) } } # .PingFile contains this: #:: #Request-Remailing-To: myadress # #Ping! #-----Begin Test----- #Test #-----End Test----- #Output (first few lines) looks like this: #P1 cicada > catalyst #P2 dis.org > catalyst #P3 jarthur > catalyst #P4 merde > catalyst #P5 pmantis > catalyst #P6 rosebud > catalyst #P7 shell > catalyst #P9 dis.org > cicada #P10 jarthur > cicada # Sample pings as received later: # 1 catalyst-remailer(a)netcom.com Mon Jan 31 08:10 20/757 P7 < shell # 2 catalyst-remailer(a)netcom.com Mon Jan 31 08:22 20/759 P6 < rosebud # grep Subject: /usr/spool/mail/n/name | sort -tP +1 -n # will give you a list of received mail, in order of Ping numbers, # where /n/name is your system's mail folder.

1 0

I will be a remailer.
by qwerty＠netcom.com 17 Dec '03

17 Dec '03

I am willing to dedicate this Netcom account to be a remailer. Please send me the needed script, information, and personal comments. I want a fast and sturdy remailer routine. At least tell me where to ftp the best and latest script, and exactly how to install it and how to maintain it. Oh, I also want it to handle encrypted remailing! I'll need PGP too. I've seen PGP for Unix and it looked intimidating to install. INFO NEEDED. -Xenon

1 0

Re: NSA/FOIA foo bar
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

[Sorry to send this to the list, but the originator used a remailer.] I assume that, if the person whose dossier the NSA sent you by mistake is identified well enough to send them mail, you're giving them a copy? (The U.S. Postal Service still supports anonymous mail :-)

1 0

Applicability of ITAR
by an52436＠anon.penet.fi 17 Dec '03

17 Dec '03

Hi, A quick, and quite possibly stupid, question: As an American living overseas, how applicable is ITAR to me? Since I'm already in a foreign country, does this also mean that I shouldn't be able to receive any cryptographic software/books? Does this, in a strict interpretation, mean that if I show my books on cryptography to my friends here that I am breaking the law -- even though these books are publicly available in the states? I imagine that the answer is that the law applies to me just as much here as it would were I living in the US still, but I'm curious.... Mephisto ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

1 0

I will be a remailer.
by qwerty＠netcom.com 17 Dec '03

17 Dec '03

Could someone e-mail me intructions on exactly how to compile the damn pgp23A.tar.Z in my Netcom account? I get, make: Fatal error: Don't know how to make target `suncc' and such when I follow the instructions. I did get the unproto utility as it said, but what do I do with it? I tried following the directions, but they are, as PGP, cryptic. Thanks. -Xenon

1 0