December 2003 - cypherpunks-legacy

Another Free Email Site with remailer possibilities
by Bill Stewart 17 Dec '03

17 Dec '03

Www.Iname.com is yet another free email site. Its business model is to offer free email forwarding from basic accounts (paid for by advertising attached to the bottom of the mail), with fancier-looking accounts and POP mailboxes for extra money. They have very explicit anti-spam policies, but I'm not sure if they really hunt down spammers, or if they just respond to complaints by shutting off accounts and keeping the $0 or $15. The policies would be no problem for a subscription-only exit remailer, presumably no problem for a entry-only or middleman remailer, and appear to ban non-subscription-based exit remailers. They may or may not have a problem with the type of remailer that sends a non-registered user a note saying "You've got anonymous mail; send this cookie if you want to receive it"; my guess is they probably drop free accounts after one complaint. The free accounts look like username(a)iname.com, or a few other lame domain names like cyberdude.com; one of them is "earthling.net", and I suspect the spammer who sent me mail from one of those accounts was trying to pretend to be from earthlink.net ; I've probably blocked both of them by now. You can only have one free account per destination address. The advertising attached to the bottom of the mail messages shouldn't be a problem for PGP-only remailers, assuming they use some tolerable format and don't try to package your mail in some MIME or HTML wrappers. I can't tell, because they say they won't start attaching ads until the extra-price-option ad-remover software is available RSN. The non-free accounts cost $15/year (first 60 days free) for wider collection of domain names (including mail.com, which is usable, and some pure spam-bait names including seductive.com and credit4u.com.) POP3 mailboxes cost $24/year. Their security is really spotty - they use SSL for things related to your bill, but not for passwords, at least for free accounts.... It's easy to set up an account that forwards mail to some third party; if you want to control the thing, you have to point it to yourself first, have it send you the password and confirmation, then go log in to the member page and change your mail forwarding destination. So it's unfortunately easy to spam the innocent with an account at innocent.com (they don't have guilty.com, though :-) I've set up remailer1(a)disposable.com to point to winsock(a)rigel.cyberpass.net , which is a PGP-only remailer. It'll expire in 60 days, unless someone wants to spend money, but that's why it's remailer1(a)disposable.com.... It's got one of the usual passwords. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list or news, please Cc: me on replies. Thanks.)

2 1

AGAIN???DISINFO IN THE NY TIMES??? RESPOND!!!
by info＠pgmedia.net 17 Dec '03

17 Dec '03

Again the NY Times is blatantly misleading the public! The following letter was sent to Jeri Clausing, a NY Times reporter bringing the disinformative article to her attention. Please read her article and then send her a "reminder" of her accountability to the public. Journalism requires thourough research and not just reliance on the press releases from NSI's IAHC's, of DoC's pr agencies. Wheather it's just pure laziness or wheather Ms. Clausing is following an agenda of some sort, it still adds up to dishonest and disinformative reporting. You can email to Jeri Clausing at jeri(a)nytimes.com. While you're at it, please cc it to her boss: cybertim(a)nytimes.com, rofixm(a)nytimes.com ----------full text of message follows--------- To: jeri(a)nytimes.com From: pgp(a)pgmedia.net (pgMedia) Subject: Disinfo In the NY Times---again? Cc: cybertim(a)nytimes.com, rofixm(a)nytimes.com Message-ID: <1340460904-6466563(a)MediaFilter.org> X-UIDL: 2ad5cdbc00a0fb68ba0a56b3fd2d9ae5 Dear Jeri Clausing, In your August 15 article in Cybertimes entitled "Public Jumps into the Domain Name Dispute" you failed to mention some key facts which are factors in the current Domain Name issue. First, the petition being widely endorsed in support of pgMedia, Inc.'s NAME.SPACE service, was not mentioned in your article, although it represents a significant percentage of the number of total replies received to date by the US Department of Commerce. The petition is located at http://petition.name.space.xs2.net Second, you failed to report the fact that pgMedia, Inc. is currently engaged in litigation against Network Solutions, Inc., a significant and influencing factor in this whole discussion. (http://name.space.xs2.net/law) These blatant omissions are patently misleading to the public and fail to give a fair overview of the entire situation. Wheather you are underinformed on this issue, or wheather you consciously choose to abridge the facts to suit your personal agenda or that of your employer, the New York Times, you are doing a disservice to the public by exercising such journalistic irresponsibility. I had higher expectations for those who write for the NY Times, and this opportunity to see how news is shaped and manufactured has been highly enlightening. Had I not been involved deeply and first-hand in this issue and had there not been so much reported about my comapny in the media, including the NY Times, concerning pgMedia/Name.Space's role in the changing domain name space, the Anti Trust Litigation against Network Solutions, and the US Department of Justice's involvement, I would have also been disinformed by your reporting. If you have any interest in informing yourself fully on the details absent in your reporting, please feel free to contact me at 212.677.4080. I will be happy to meet with you and demonstrate the name.space service and answer any qusetions you may have...and I'll forgive you if you really were unaware! Best regards, Paul Garrin president pgMedia, Inc./NAME.SPACE http://name.space http://name.space.xs2.net

1 0

Re: Sendmail Bugs
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

> > There is a document on alt.security which describes exploitable sendmail > > bugs. The reference is <809544856snz(a)hacknet.demon.co.uk> > > I saved a copy in case anyone would like one. > > Would you please email me a copy of that doc-file? > > I would find it very interesting... :-^) > 8lgm has released a lot more of their exploit information to the public as well including a lot of sendmail stuff...I wouldn't be surprised if that was the source of this. Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

1 0

Non-US SSL128 site
by Donald M. Kitchen 17 Dec '03

17 Dec '03

Saw this on usenet. Figured someone might want to give it a spin... From: John Hemming - Chief Executive MarketNet <johnhemming(a)mkn.co.uk> Newsgroups: sci.crypt Subject: Announce>128 bit RC4 SSL available outside US Date: 30 Aug 1995 10:16:39 GMT Message-ID: <421dq7$rk4(a)marble.Britain.EU.net> NNTP-Posting-Host: 193.119.26.63 We have now updated our servers to a) Use 128 bit SSL if the client allows it. b) Tell users which cipher is being used on a secure session. To experiment point your secure client at one of the following: https://193.118.187.101/ https://193.118.187.102/ https://193.118.187.105/ https://193.118.187.111/ (the main server does not run SSL to minimise PK calculations) If you do not have a client that can use 128 bit RC4 then ftp://193.119.26.70/mktnet/pub/horse.zip does to the job, but is quite flaky otherwise.

2 1

Re: SSL brute/ng
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

> > > would they like to consider some sort of mirroring approach for the server > > (at least on stats or updates/software) > > Not sure what you mean .... I think he wants to http to one of several machines to get the stats, each of which contain a mirrored copy of the stats. The cgi-bin script could do a redirect to make this happen if you wanted. Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

1 0

Re: Toilet plungers and sodomy: Why we should trust police blindly
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Mike Duvos wrote: > The "alleged victim" describes officers beating him and then shoving a > toilet plunger up his rectum and down his throat while yelling "Take that, > Nigger!" He has a broken jaw, a punctured rectum, and a torn bladder, a > colostomy, and will require multiple surgeries to repair all the damage. > In other news, a Texas jury refused to indict a marine who shot an 18 year > old goatherder tending his flock near the Mexican border. > An interesting newsday, as Tim McVeigh is sentenced to death, and quotes > from Justice Brandeis about the government teaching its citizen-units by > example. I expect to receive an email from "News of the Weird" any day now, announcing that they are going out of business because they can no longer compete with the "normal" weird news that is becoming standard fare in the main press. What bothers me is that there seems to be an amazing number of people who have developed the ability to watch the unceasing parade of freedom-fucking, fascist insanity that marches across their field of vision each day, and manage to block it from their consciousness by telling themself that everything is going to be OK, as soon as we get a few more laws to rid the planet of drug-dealing pedophiles. I would like to see Janet Reno and Louis Freeh announce a press conference and tell the citizens, "...and the minute we have all of the drug-dealing pedophiles in prison, we're going to see if we can't do something about those cops that are shoving toilet plungers up the citizen's assholes." Priorities. We have to have priorities. PriorityMonger

1 0

CIA & Espionage
by John Young 17 Dec '03

17 Dec '03

Responding to msg by danisch(a)ira.uka.de (Hadmut Danisch) on Wed, 30 Aug 2:46 PM >It was said that Pres. Clinton had given a speech while >visiting the CIA HQ in Langley/Virginia. He allegedly >said in this speech that obtaining industrial >informations has the highest priority and this were the >new task for the spies. > >Can anyone confirm the quotation? Hadmut, This is excerpted from: http://www.awpi.com/IntelWeb/IWR/Updates/2/181.html ---------- IWR Daily Update Vol. 2, No. 181 JULY 24, 1995 _________________________________________________________________ UNITED STATES - CENTRAL INTELLIGENCE AGENCY (CIA) President Clinton has ordered the CIA to make economic espionage against our trade rivals a top priority. [sources: Los Angeles Times- Washington, by James Risen, 7/23/95; Kyodo - Los Angeles, 7/23/95]

2 1

Re: CIA & Espionage
by dsc＠swcp.com 17 Dec '03

17 Dec '03

In responding to Hadmut John Young seems to have quoted IWR Daily Update in writing, > UNITED STATES - CENTRAL INTELLIGENCE AGENCY (CIA) > > President Clinton has ordered the CIA to make economic >espionage > against our trade rivals a top priority. [sources: Los >Angeles Times- > Washington, by James Risen, 7/23/95; Kyodo - Los Angeles, >7/23/95] Are we to assume both black and white? Will the CIA have access to escrowed keys in exported software? ---Dar (list newbie) =========================================================== Dar Scott Home phone: +1 505 299 9497 Dar Scott Consulting Voice: +1 505 299 5790 <--- 8637 Horacio Place NE Email: darscott(a)aol.com Albuquerque, NM 87111 dsc(a)swcp.com Fax: +1 505 898 6525 http://www.swcp.com/~correspo/DSC/DarScott.html My preference for attached files are in this order: AOL, Mime, Binhex4, PGP, UUencode ===========================================================

2 1

Re: SSL search attacks
by ab411＠detroit.freenet.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Scott Brickner <sjb(a)austin.ibm.com> writes: >don(a)cs.byu.edu writes >>A random (instead >>of sequential) allocation _by the keyserver_ (out of unallocated >>piecemeal segments) would also take some work to implement. > >The problem is that it's irrelevant to the problem. Random allocation >at the server is equivalent to simply "shuffling" the segments before >assignment, which doesn't affect the rate at which the space is searched. The point is that if J. Random Badguy knows that the key lies in segment 0x1bad and wants to get this segment and send a false NAK for it, he can watch as key segments are doled out (perhaps with clients running on a number of machines) and when 0x1bad gets close, say, when 0x1b0b comes out, he can instruct all his clients to start hammering the server for all they're worth in an attempt to get the key segment assigned to one of his clients. If the segments are shuffled before they are handed out then this attack becomes impossible, since the attacker has no way of knowing when segment 0x1bad will be handed out. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMERDPxEcrOJethBVAQG60gP9HsuCd+jID0nyESfXDCNtSwwRuRZ39rkg SIEpltxzwMfHMQ/RD8CD5UmAHIm1EdvsztjbB5M5KnqjPKCMfw42leKhhcBBxUma FCKN3vm4MBs+5vgM8SDeHLbn84rYxn5xijbktRdi+G/MzfAJdjmo5nUPQiWWhLn/ JyWa9rpNHxQ= =9tcN -----END PGP SIGNATURE----- -- David R. Conrad, ab411(a)detroit.freenet.org, http://www.grfn.org/~conrad Finger conrad(a)grfn.org for PGP 2.6 public key; it's also on my home page Key fingerprint = 33 12 BC 77 48 81 99 A5 D8 9C 43 16 3C 37 0B 50 Jerry Garcia, August 1, 1942 - August 9, 1995. Requiescat in pace.

2 1

Re: Cartel Leaders Set Snipers To Work In Border War
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tim May wrote: > > According to this article, the home addresses of government agents are > being solicited by Mexican drug dealers, for disposal of agents > interfering in their business. A major thrust of the article deals with the government promotion of the idea that the "bad guys" have actively declared war upon agents of the U.S. government, on U.S. soil. Strange that this claim should come from a variety of sources at the same time the government is facing the embarassment of having to whitwash the actions of heavily armed, camouflaged Marines who felt so threatened by a goat-herder with a .22 rifle that they slaughtered him with their M-16's, despite the fact that the child was an American citizen, doing what he had every right to do, on American soil. The drug cartels are having such little trouble getting drugs into the U.S. that cocaine and heroine are cheaper than a bottle of good Scotch, yet, according to the government, they have decided that it is necessary to perform actions which will "force" the government to 'crack down' on border terrorism with increasing use of armed force. Right... I bet the child pornography cartels are arming themselves, even as we speak, preparing to join the drug cartels in their war against the U.S. governement. We'd better send some Marines to Denver, New York City, and Fargo. Then everybody but the high-school goat herders will feel much safer, I'm sure. GiveMeAFuckingBreakMonger "There is something wrong when U.S. armed forces murder American schoolchildren on American soil, under an increasing number of unconstitutional laws." > > Date: Thu, 14 Aug 1997 22:42:08 -0700 (PDT) > > Message-ID: <199708150542.WAA25283(a)sirius.infonex.com> > > From: Mix <mixmaster(a)remail.obscura.com> > > Comments: This message did not originate from the address above. It was > remailed by an anonymous remailing service. If you have questions or > complaints, please direct them to <complaints(a)remail.obscura.com> > > Subject: Cartel Leaders Set Snipers To Work In Border War > > Newsgroups: > talk.politics.guns,misc.legal,misc.survivalism,alt.news-media,alt.politics.usa.misc,alt.politics.media,alt.politics.clinton > > Mail-To-News-Contact: postmaster(a)nym.alias.net > > Organization: mail2news(a)nym.alias.net > > Lines: 58 > ... > > Cartel leaders set snipers to work in border 'war' > > By John Hiscock Electronic Telegraph, London > > > > August 11, 1997 > > > > AMERICAN Border Patrol agents have become targets of snipers working > > for drug smugglers trying to take control of the border with Mexico. A > > five-mile strip of frontier near San Diego in California has become so > > dangerous that a specially-trained squad of border patrol sentries > > armed with assault rifles has been drafted in to combat the snipers, > > who have fired at agents seven times in the past two months. > > > > The agents believe that Mexican drug cartel leaders have issued > > instructions to kill any law enforcement officers impeding drug > > smuggling operations. Their fears have been heightened by a bulletin > > from the Immigration and Naturalisation Service that said two drug > > cartel leaders in the Mexican border city of Tijuana had "reportedly > > contracted with local gangs on both sides of the border to kill > > federal law enforcement personnel", preferably on American soil. In > > addition, officers recently received reports that cartel henchmen have > > put a price on their heads by offering to pay £7,000 for the > > home address of any United States federal agent. > > > > Dianne Feinstein, a Californian senator, says that border patrol > > agents, whose job until recently was to arrest mainly frightened and > > unarmed Mexicans trying to cross the frontier at night, are now in the > > front line of a vicious drug war. "This is a border on alert, a border > > where anything could happen," she said. "These cartels are moving > > drugs across the border and are operating with impunity and that adds > > an increased risk to the lives of border patrol agents. This is a > > different border than it was two years ago." > > > > In addition to being the most popular spot for illegal aliens > > attempting to cross, the border around San Diego is now the main > > gateway for cocaine and heroin bound for the US. Since the > > introduction of Operation Gatekeeper, President Clinton's 1994 > > anti-illegal alien initiative that poured more money and agents into > > the San Diego area, the drug smugglers have found themselves > > increasingly caught up in the patrols' swoops on illegal > > border-crossers. > > > > "We've made it increasingly difficult for drug traffic," said John > > Williams, the chief of San Diego's 2,000-strong border patrol sector. > > "We're making it tough on crime and that certainly has some bearing on > > their reaction. The escalation of violence is of grave concern to me > > and my agents." > > > > Members of the elite special protection unit carry M-16 assault > > rifles, with a range of more than a mile, while all agents are now > > being issued with semi-automatic pistols and shotguns. > > -- > There's something wrong when I'm a felon under an increasing number of laws. > ---------:---------:---------:---------:---------:---------:---------:---- > Timothy C. May | Crypto Anarchy: encryption, digital money, > tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero > W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, > Higher Power: 2^1398269 | black markets, collapse of governments. > "National borders aren't even speed bumps on the information superhighway."

1 0