December 2003 - cypherpunks-legacy

Re: SuperPing1.2
by nobody＠qwerty.org 17 Dec '03

17 Dec '03

If it wasn't obvious, SuperPing is the sort of utility that only needs to be run say once a day by ONE person out there. Since I did it today, and I haven't reported any down links, you can be rest assured the network is fully connected, at least the remailers listed in the code. -Xenon

1 0

Re: Remailer Tearline ConventiOns.
by nobody＠qwerty.org 17 Dec '03

17 Dec '03

Edgar wrote, "I recommend that you always use the wimsey (extropia) remailer as the first (or only) leg of a remailer chain." I'm not too familiar with extropia these days. Does it have a direct internet connection? What is its characteristics? I'm trying to make up a more useful list of remailers, with details, since different users do have different needs for remailers. Thanks. -Xenon

1 0

WWW Anonymous Remailer Software release
by nate＠VIS.ColoState.EDU 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have modified my WWW Anonymous remailer interface and put it up for ftp on vangogh.vis.colostate.edu in /pub/nate/remailer There is a README in there which should explain how to set it up, but if I missed anything, please tell me. The remailer no longer needs you to tell it that you're using the remailers, it just knows. Hope you like it, - -nate - -- +-----------------------------------------------------------------------+ | Nate Sammons <nate(a)VIS.ColoState.Edu> <nate(a)yuma.ANCS.ColoState.Edu> | | Colorado State University Computer Visualization Laboratory | | Data Visualization/Interrogation, Modeling, Animation, Rendering | +-----------------------------------------------------------------------+

1 0

New Remailer Up.
by nobody＠qwerty.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Greetings. New remailer: qwerty(a)netcom.com. No logs. Only a "counter" that works by appending the word "R" or "ER" to a text file so I can get an idea if anyone is using it. However, I'm sure the Netcom and other site's mail logs will be enough to track serious abusers of anonymity down, without my help. This remailer is dedicated to honest people who desire PRIVACY. (The extra "-" and "space" characters at the beginning of some lines are an artifact of my signing this with PGP). Accepts standard, :: Request-Remailing-To: address (space) message or standard, :: Encrypted:PGP (blank line) - -----BEGIN PGP MESSAGE----- Version: 2.3 Blah blah blah. - -----END PGP MESSAGE----- (blank line) Optional message here. in which the first two lines of the decrypted message contains, :: Request-Remailing-To: address (blank line) Spelling mistakes will land mail in my mail box where I will emotionlessly delete them. Leaving out the blank lines may cause messages to dissapear. Public key for Qwerty Remailer <qwerty(a)netcom.com>, - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3 mQCNAi1NtgAAAAEEALD07N5RllpklGhOQaiYtRupb+8Jm1M34ya8rxmcNUCVndcb JgH9EW1Z2VvkJ3vTcEOOBK9jM/HCIGDqBbQZR8VOLbLNOD7VQIzTpyTOmZJCMSZG bqZtRtP6KDtMcTx1SgHq9LiRNz5YUyB3WOV963y8W/x00QS4yGkgCDZkVQXZAAUR tCNRd2VydHkgUmVtYWlsZXIgPHF3ZXJ0eUBuZXRjb20uY29tPokAlQIFEC1OzEgE sxus60J9UQEB224D/jUcYRnXmIj9nt4Y7sjGYTmO+v7b9W+rsxYLn6+hCGmx5iQJ zPr3ggvm8ylBZnNp3WUxssDlb9GyiK801vzm6HDXWd/yCeGXHX7YB2DDFd5WrK70 /XGTMGv3gvNnExIM+UVv5tl8y/YXOfeLWWGttD6a60MkUNxAOGT9qBsUTqJNiQCV AgUQLU3TdWkgCDZkVQXZAQH1ygP/TCY7T0PdNVRUVbEpN9YsbxFKhFT/7+hZTySr Md0j2GrObjcRc7aa0c9lEZrtKpaDCJkgF+7k20z1eQpw7zD/dO+ZsSqni62TLGYa pdTsAiYbev90Nb+1S2ST36KvIgJSmQS6zvgpToTRpGwYhJhqTZhTo8Z2U5ufb+SF TsNMd0Q= =BXnK - -----END PGP PUBLIC KEY BLOCK----- See the PGP FAQ for how to use encrypted remailers. Send mail to na38138(a)anon.penet.fi with subject "Bomb me!" for Gary Edstrom's PGP FAQ and my "Here's How to MacPGP!" guide. That's NA (not AN), thirty-eight, one-thirty-eight. Thanks to Hal Finney for sending me updated perl scripts and a working copy of UNIX PGP2.3a. I am looking into ViaCrypt UNIX PGP 2.4 as well. Send mail regarding the remailer to qwerty(a)netcom.com. -Xenon -----BEGIN PGP SIGNATURE----- Version: 2.3 iQCVAgUBLU77FgSzG6zrQn1RAQHlvgQAj2S4bYB+5dEDubfzk8etdBOSbehxfF/o B8ycAHgbHjs0SI9HEb0Xm9RJP+ZLtFfD8J7KgOWe0cJlWdy8NKwJxh55Uqn6yiQn IHB2M9x51nXD3ySCIH8f2USXuHYj8qiInzvQwP6naNiC0vU9E+4ab02Th+IbC8zL n9Jthe+vTf8= =MEvY -----END PGP SIGNATURE-----

3 2

On return addresses
by hughes＠ah.com 17 Dec '03

17 Dec '03

I've been troubled for many months by an invariant in all forms of return address schemes: The outside world contains sufficient _persistent_ information to find a real adress. There are lots of clever schemes to split this information up so as to require reassembly between many parties, but the information is still out of one's control. (I use 'reassembly' rather than 'collusion' since the latter indicates an intent; see my rant of a few days ago.) The fundamental problem seems impenetrable. So how do we solve it? By abandoning return addresses and using mail spool facilities. Consider the following service. 1. I have a machine and I'll sell you an address on it, say "onyma(a)privacy.net". This address is _not_ an account, merely an address. Your mail is password or public key protected. 2. When mail come in for you, it sits in a spool. This service comes with a spool of a certain size and an allowance for checking your mail at a certain rate, with overages at extra cost for both. (This is to bound known promised capacity of the machine by a sufficient amount of money to pay for it.) 3. Your mail sits in the spool until you access it with, say, a POP client like Eudora. Just point the client at a different address to pick up mail. The server can further support a number of protocols for getting the mail, including a mail server command of "send me a mailbox file of my waiting mail". The main advantage is that the only _persistent_ information out in the world is the address itself and the authenticator (password or public key). The address is already public and the authenticator is arbitrary, so no identity information is persistent. A complete chain could still be forged between sender and receiving pseudonym, but we now have some amount of forward secrecy. If in fact an intermediate link does discard connection information, it is gone forever. With any kind of SASE, however, the information therein, however encrypted, still contains a full path back. Now consider two ways of getting your mail out of this service, supposing you don't trust the service with your identity. A IP redirector can be with POP service to conceal origin from the mail service. An IP redirector is a remailer for packets, with a bidirectional link set up when the service starts and removed when it goes away. Matt Blaze has a name for this--'packet laundry'--which is a wonderful but politically unfortunate term. The IP redirectors can be chained just like remailers. With a mail server, the command to 'send me my mailbox' can be sent to a remailer address with an encrypted remailing block prepended. In this case, however, the encrypted remailer block is provided with the mail command that requests the mailbox and it is not by design stored persistently. (By design. It could, of course, actually be stored.) The address on the other side of the first remailer hop could be another mail spooing service, in addition. The elimination of persistent identifying information for return paths is a worthwhile design objective. I propose that we start thinking about it more thoroughly. Eric

1 0

REMAIL: ping, script
by Karl Lui Barrus 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I've been catching up on past messages; I see there was some interest in scripts for pinging remailers, and some questions about how many there are, etc. Here is the data file and script I use to ping non-special remailers. Note: remailer #12 will only remail if you attach "digital cash", remailer #20 batches until midnight, remailer #21 requires encryption. Save this as "remailer.data" - ----------8< cut here >8---------- 01:n:remailer@chaos.bsu.edu 02:n:nowhere@bsu-cs.bsu.edu 03:n:hh@cicada.berkeley.edu 04:n:hh@pmantis.berkeley.edu 05:n:hh@soda.berkeley.edu 06:n:00x@uclink.berkeley.edu 07:y:hal@alumni.caltech.edu 08:y:ebrandt@jarthur.claremont.edu 09:y:catalyst@netcom.com 10:y:sameer@netcom.com 11:y:remailer@rebma.mn.org 12:y:elee6ue@rosebud.ee.uh.edu 13:y:elee7h5@rosebud.ee.uh.edu 14:y:hfinney@shell.portal.com 15:y:sameer@soda.berkeley.edu 16:y:remail@tamsun.tamu.edu 17:y:remail@tamaix.tamu.edu 18:y:remailer@utter.dis.org 19:y:remailer@entropy.linet.org 20:y:elee9sf@menudo.uh.edu 21:s:remail@extropia.wimsey.com - ----------8< cut here >8---------- and then the script - ----------8< cut here >8---------- #!/usr/local/bin/perl #ping the anonymous remailers #Karl L. Barrus <klbarrus(a)owlnet.rice.edu> open (IN, "remailer.data") || die "Can't open remailer.data\n"; while (<IN>) { ($num, $rest) = split(/:/, $_, 2); $remailers{$num} = $rest; } close (IN); #ping all remailers except special ones foreach $i (sort keys(%remailers)) { ($mode, $name) = split(/:/, $remailers{$i}); print "remail via $name" if $mode ne "s"; open (MAIL, "| /usr/lib/sendmail " . $name); print MAIL "To: " . $name; print MAIL "From: nobody\n"; print MAIL "Subject: test " . $i . "\n"; print MAIL "Request-Remailing-To: klbarrus(a)owlnet.rice.edu\n"; print MAIL "\ntesting :-)\n"; close (MAIL); sleep 5; } - ----------8< cut here >8---------- -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLU8EUIOA7OpLWtYzAQFbjAQAhMj765Rd7r4BgRkXnRKmSRuJRphyNz/6 3Q7N4v+rQME44ZtiufDkxEyxj/M7s+bMXRqP+2n+gXVSaAgXq/g2CFrVisyvL70P 6RS//XHaoThJHRPp9x0/p9fO2MMeqOct0YXtYWi2C9LlU8B9/smjm7/Qg6q65tgk D3FgR6YAlZI= =bl8B -----END PGP SIGNATURE-----

2 1

Archiving on Inet
by Jim choate 17 Dec '03

17 Dec '03

I would like to ask all subscribers who are not addressing the issues of this question to please move their responces to private mail. I have no interest in exploring your personalities or views of others personalities. If a global network is to survive there must be a commen understanding of what is public domain and what is private or commercial. At the present time this is completely new ground. The fact is that the copyright laws of the US are of little interest to a net user in Moscow, Russia or Pretoria, S. Africa. If as a cpunk you don't feel that a anonymous regulatory agency can protect your privacy why do you feel they can protect your intellectual property? The issue has direct bearing on both intellectual property and the wide spread use of cryptographic techniques. As a active cpunk it seems to me that your first motivation after producing the actual code is to creat a atmosphere where it can be used for the betterment of all. To create a useable global community (what I am striving for) it seems to me that entries on that network must be public domain by default. Otherwise every country who joins, and by reduction every potential user, will have to agree on how to recompense each and every user who desires to be paid for their submissions. This, to me, leads incontrovertibly to the conclusion of a beurocratic nightmare that will not significanly assist anyone other than the regulatory agencies. The only other answer that seems even close to working (and I consider this a stretch of the imagination) is one where everyone is given access for free and the governments regulate the traffic completely and pat for it with tax dollars. As to the issue as it applies to community bbs'es. I run such a system and am in the process of getting it on the net. As part of this project I have 2 other systems that I will be providing feeds for. These systems are all run by individuals who have these boxes sitting in their den. By insisting on a priori copyright of all material it is my opinion that you are creating a situation which will prevent the growth of such systems. Now if we don't have regulatory agencies and the sites are indipendant (and I assume self supporting) how can we expect some Joe or Jill to put up a system to help the people in their neighborhood if they have to keep looking over thier shoulders for the copyright police? The answer is they won't put up such systems and we all loose. By providing strong crypto tools for business and individuals to protect their intellectual and commercial property we are creating an open door atmosphere which motivates people to join the network for their own enjoyment and edification. This to me is more important than keeping the present view (as applied to non-networked environments) of copyright. It is time that we as uses of Internet set a precedence before the legislators set one for us that will in the long run only assist those already in power by strangthening the need for regulatory agencies. I strongly suggest that you all consider this idea from the global and long term view. I think you will find that the view "information wants to be free' is the way to go. To this end I propose that organizations such as EFF and cpunks take the position of a priori public domain status of network submissions. Also that all individuals who wish to retain intellectual or commercial rights either use strong crypto w/ e-mail distribution of keys or a change be implimented in message headers such that sites who don't wish to carry such material can filter it, along with this should be a requirement that any such non- crptographicly secure material must contain a fair use policy at the beginning of each and every document. It is time we quite letting big brother tell us what we can do with our ideas and how to distribute them.

1 0

remailers
by werner＠mc.ab.com 17 Dec '03

17 Dec '03

Hi, Can a remailer be used to post to an arbitrary Usenet group? Is the above a stupid question?

1 0

Re: remailers
by nobody＠qwerty.org 17 Dec '03

17 Dec '03

werner asked, "Can a remailer be used to post to an arbitrary Usenet group?" newsgroup(a)news.cs.indiana.edu posts things quickly via e-mail. When I use anon.penet.fi for Usenet, I often use this, since it is quite a bit faster than using anon.penet.fi's posting feature. "Is the above a stupid question?" Is this a stupid answer? Both are in various FAQs. -Xenon

1 0

system logging
by pgpkeys＠wasabi.io.com 17 Dec '03

17 Dec '03

> Greetings. > > New remailer: qwerty(a)netcom.com. > > No logs. Only a "counter" that works by appending the word "R" or "ER" to a > text file so I can get an idea if anyone is using it. However, I'm sure the > Netcom and other site's mail logs will be enough to track serious abusers > of anonymity down, without my help. This remailer is dedicated to honest > people who desire PRIVACY. People should be aware that whether Niko makes personal logs on his qwerty account or not, the public logs on netcom show more than enough info to trivially track people down. By the way it's very bad practice to forge From: lines, especially with completely non-existant site names like qwerty.org...perhaps you should ask netcom to register it for you. Or if they charge real money for it, your postmaster at columbia.edu might do it for free if you asked him nicely.

1 0