December 2003 - cypherpunks-legacy

Finger/Remailer Ping server
by rjc＠gnu.ai.mit.edu 17 Dec '03

17 Dec '03

Someone asked about having a "list of remailers" ping server available via finger. I took some code I wrote over a year ago and hacked together such a system. I need volunteers to run it. The server does the following: 1)forks off a "cron" to automatically ping remailers every X hours 2)ping's the remailers (by requesting a remail to itself) 3)any remailers which respond will have their timestamps updated 4)any change in the status of remailers (a ping received) recreates your .plan file as so copy .realplan to .plan tackon a banner for the list of remailers tackon a list of remailers and the last time a response was received (e.g. remailer(a)remail.com last heard from 2.3 days ago) Anyone running this perl script from their .forward file will have a list of remailers automatically embedded in their finger information. Optimum use would be for remailer operators to add a line to their maildelivery slocal configuration which catches "Subject: --PING!--" (which is one of the ways pings are detected, the body of the message is most important) and pipe it to the script. Then you could just finger any remailer for a list of remailers (assuming the remailer doesn't run from its own alias) Note: the software may or may not work. I have only superficially tested it by piping in fake pings. I have no idea whether or not it will be stable so I need someone to run it for a few nights to see if it works correctly (and if not, I can fix any fatal bugs) -Ray "Perl is the Ultimate Language" -- Ray Cromwell | Engineering is the implementation of science; -- -- rjc(a)gnu.ai.mit.edu | politics is the implementation of faith. --

1 0

Well...shit
by Jeff Davis 17 Dec '03

17 Dec '03

If whatzits(a)netcom.com is Detweiler, at least he's paying $20/mo to pop in here. I have Sternlight attacking me on eff.talk- that's good. He sure perceives me as a threat for a Wyoming ranch hand. That's good advice y'all have there about not feeding the animals. I've been looking at this remailer business. Well, hell. I want to go the other way. I'm Jeff Leroy Davis AKA Eagle, and lots of people know that. Ram Dass has this thing of his public self and his private self as one. In other words, he is himself, whether in public or private. I'm open about myself, and have projected my true persona into cyberspace. At least the truth about myself as I see it here now. I have no reason to create an anonymous persona, or construct some sort of personality. Now if I have to go underground in the net at some future date, that's a different story. For now, I'm quite secure in who and what I am, and endevor to let the truth of my heart shine in cyberspace. -- PGP PUBLIC KEY via finger! JAFEFFM Speaking & Thinking For Myself! * eagle(a)deeptht.armory.com email info(a)eff.org * *** O U T L A W S On The E L E C T R O N I C F R O N T I E R **** ***** Committed to Free Public Internet Access for World Peace *****

1 0

Re: your mail
by Jim Sewell - KD4CKQ 17 Dec '03

17 Dec '03

<My computer told me that nobody(a)shell.portal.com said:> > > Since people are talking about new remailer features, can I suggest > another one - how about single-use (or limited use) anonymous return > addressess (ARAs) ? There are quite a few situations I can envisage where > I might want to give an anonymous return address to someone that could > only be used a limited number of times, or for a limited period of > time ... digi cash example and comments deleted. Another good use of this would be to maintain anonymity. If you used the same aa382043 address over and over again people will attach an identity to that and they will remember, "Oh yes, that's the guy that said he works for a computer company and hates spinach and likes Amy and ...." and soon (assuming a long term use of the account) you will have an identity and people will be biased one way or another toward you, even though they do not know who you are in real life. A one shot id will allow people to remain truly anon and not have to go to the trouble of switching accts and putting a burden on the remailers with 1000's of accounts.

2 1

New ID technique: warning of things to come
by lstanton＠lehman.com 17 Dec '03

17 Dec '03

This is a little off-topic, but it does apply to authentication... I have been abroad for the past few weeks. In the course of my travels, I was given some data about a new program that the US Dept. of State/Customs and Immigration people are moving into limited testing at JFK and LAX. They want to implement a "fast, positive identification system to speed processing of entrants to the United States by use of biometric data." The system works by use of a handprint scanner, and a smart card. Participants would go through an initial hand scan, and then be issued a smartcard. Upon subsequent entries to the US, instead of going through the normal passport check, you would place your hand on a scanner and insert your card in the slot. The system would then positively identify you, and clear you for entry. I have no details about the format/security of the card data, and the INS guy I spoke to made no statements about privacy, security or other uses of their ID database. If this takes off, the risks of it spreading to a national ID card, or to the 'healthcare card' are obvious. Linn H. Stanton <stanton(a)acm.org> The above opinions are exclusively my own. If anyone else wants them, they can buy them from me. Easy terms can be arranged. -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.2 mQBNAitK8+EAAAECALzK83DH79m7DLKBmZA2h9U33fBE80EwT4xRY05K7WRfxpO3 BmhPVBmes9h97odVZ0RxAFvinOl4wZGOb8pDclMABRG0IUxpbm4gSC4gU3RhbnRv biA8c3RhbnRvbkBhY20ub3JnPrQnTGlubiBILiBTdGFudG9uIDxsc3RhbnRvbkBz aGVhcnNvbi5jb20+ =oCru -----END PGP PUBLIC KEY BLOCK-----

1 0

Remailers
by Matthew J Ghio 17 Dec '03

17 Dec '03

For all the newbies who keep asking for info on the remailers, the address is: mg5n+remailers(a)andrew.cmu.edu You can get an anonymous address from mg5n+getid(a)andrew.cmu.edu Each time you request an anon address, you get a different one. You can get as many as you like. The addresses don't expire, however, so maybe it's not the ideal 'one-shot' system, but it allows replies without connecting you to your 'real name/address' or to any of your other posts/nyms.

1 0

RE: Pseudonyms and Reputations
by Blanc Weber 17 Dec '03

17 Dec '03

From: hfinney "One possibility is a digital reputation system. Presently people and nyms develop informal reputations in the minds of their readers. This could be formalized by allowing readers to create endorsements of various types for those who have worthwhile things to say. " Could I really allow myself to be so prejudiced by what a number of others have determined is (or is not) a worthwhile contributor to a list? My interest in reading a message has first to do with the subject of attention, then second the one who has something to say. There are many types of commentary which someone could introduce at any time; sometimes in humor or sarcasm, sometimes with great insight, more or less successfully. I think whoever attends to messages on a list should consider their motives - whether they just want company, a sounding board, or whether they want to read about a particular subject of interest. The opportunity to interact with others in abstract conversation is also the opportunity to develop and refine the ability to communicate, to improve upon the formulation of a thought and express it with greater ability. I might not like the style or manner of what someone has said in the past, yet accept what they have to say some other time. But this would be my own judgement at work, not a conclusion derived from the aggregate opinion of others. I myself wouldn't pay excessive attention to a reputation system, outside of its entertainment value. Blanc

1 0

Re: Pseudonyms and Reputations
by Blanc Weber 17 Dec '03

17 Dec '03

>From tmp: "what do you think, cpunks, should you have the right to ignore people regardless of the pseudonyms they use?" How could a person prevent someone from ignoring another? on the net? "i ask if it is possible to construct a system that protects anonymity but at the same time allows someone to filter all pseudonyms associated with another person." Code it, and they will come. " ideally we can develop moral codes where our algorithms fail us. " Ideally, you would be able to enforce these moral codes. Ideally, they would reflect not only what is possible in reality, but what is truly desireable. Blanc

1 0

Survey
by Adam Lake 17 Dec '03

17 Dec '03

I am thinking of composing an essay for my WC203 course. I was wondering if anyone who has a second could send me a message with their cumulative GPA. If you have already graduated, what was your GPA? If you have never attended school, lucky you. Please send it with the subject: GPA. Thanks. lake(a)uenics.evansville.edu ---------------------------------------------------------------------------- Remember the last time you called her, she forgets Pray to her, she will remember that she will remember that ----------------------------------------------------------------------------

1 0

ftp distribution of strong crypto in the USA.
by exabyte!smtplink!mikej＠uunet.UU.NET 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Here is how to set up an ITAR compliant (I think) ftp site that you can place crypto files up for distribution within the USA and Canada. The exact details will vary depending on your Internet service provider. I think the method is sound, because it is pretty much what rsa.com does, and they have lots of lawyers to figure this stuff out. You should take a look at their site and make sure that the README file you put up is close to what they have. 1. Send a message to support(a)netcom.com to ask them to set up an ftp area for you (read the faq on it, first). 2. Create an alias in your home directory to point to the ftp directory (something like ln -s ~ftp/name ftp) 3. Create a directory in your ftp directory called (exactly) I_will_not_export. Set its permissions with chmod 711 I_will_not_export. 4. Create a directory under I_will_not_export called crypto_xxxxxxx, and set its permissions to 755 (chmod 755 crypto_xxxxxxx). Under that directory, place files and/or directories for USA consumption only. 5. Set the base ftp directory permissions to 755 cd cd ftp chmod 755 . 6. Get the files gate and newdir from my ftp directory and copy them to your base ftp directory. 7. Set the permissions on the above files to allow execution chmod 700 gate newdir 8. Copy crypto_dir from my ftp directory to your home directory and set its permissions to allow execution. cd cp ~ftp/mpj/crypto_dir . chmod 700 crypto_dir 9. Add the command crypto_dir to your .login script with an editor tool. 10. Copy my README file to your base ftp directory, and edit to taste, but make sure the line with the crypto directory name is unedited. Set the README file permissions to allow reading by the world (chmod 644 README). Make sure the legal requirements to ftp are clear to the average jury. 11. Set up .message files with appropriate messages for your directories. The crypto directory name should be changed and README updated every time you log in. Any questions? ___________________________________________________________ |\ /| | | | | \/ |o| | Michael Paul Johnson Colorado Catacombs BBS 303-938-9654 | | | | / _ | mpj(a)csn.org ftp csn.org \mpj\README.MPJ for access info.| | |||/ /_\ | aka mpjohnso(a)nyx.cs.du.edu mikej(a)exabyte.com | | |||\ ( | m.p.johnson(a)ieee.org CIS 71331,2332 VPGP key by finger | | ||| \ \_/ |___________________________________________________________| -----BEGIN PGP SIGNATURE----- Version: 2.4 iQCVAgUBLaQveT9nBjyFM+vFAQHU8QP+M2VGQmw5Vj6zF9i7pc+15wiwDsmdKqZj LNXOiOQFKP51LYd+WxilU01lcLAKjqFhuCcG4iB4GCXM/4Lz3tdBRG5SB7k3BrBz BpsOi8kjlQKsTlbR8aI8S9TbeGABB5DKvVwtxr8767Wrt6LjoQnWowSeV0q9B+Kr +aM96+RaBEE= =bTs8 -----END PGP SIGNATURE-----

1 0

1984 NSA T-Shirt Available!
by jdblair＠nextsrv.cas.muohio.EDU 17 Dec '03

17 Dec '03

I've come up with a design for the 1984 NSA t-shirt idea which I am finally happy with. To check it out, fire up Mosaic and jump to: http://phoenix.aps.muohio.edu/users/jdblair/t-shirt.html The design is approximately: 1984 +---+ |eye| +---+ "We're Behind Schedule" National Security Agency The text is EuroStyle, a very imposing, modern looking sans serif font. The eye will be printed in a coarse grained half-tone, which should silk-screen pretty well. The back is the Cyber Rights Now! Logo from Wired Magazine. I think it will look best in white ink on a dark color shirt, like black, dark blue, maroon, or dark green. I like black best, but that's just me. I will check with the t-shirt printers about flexibility with colors. I figure I'll be asking $15 for the shirt, same as the Cypherpunk Criminal shirt. I welcome comments, criticisms, suggestions. If anybody knows the name, and preferably, address, of the guy from the NSA who inspired the design at CFP, could you pass it my way? I've forgotten his name. I would like to thank him, and send him one free of charge. If you don't have access to a mosaic client, e-mail me and I'll mail you a uuencoded gif. later, -john. -------------------------------------------------------------------------- John Blair: <jdblair(a)nextsrv.cas.muohio.edu> voice: (513) 529-4877 PGP public key available upon request. KILL YOUR Privacy in the information age is a right, not a privilage. TELEVISION Information = Power = Control. Fight the centralization of information.

1 0