December 2003 - cypherpunks-legacy

New remailer (vegas) now operational.
by Alan B. Clegg 17 Dec '03

17 Dec '03

Greetings, all. remailer(a)vegas.gateway.com is now on-line. It is a type 1 cpunk remailer running standard ghio code. The following is vegas's PGP key: --SNIP-- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzD9XEQAAAEEALrf7ZZV9ECB6jT0C7uVXByVa5332+yl1QIbx72FI+xWoyWF 5+MQkm803NaLyBabTrDyqJ6xkMLDu8acbH8OaATrAfUBM2qTZIVzlsgpynLkvCRv OOJfV6fHkaNzbHnYKF3JuLPiyPpXTgJDESIEyqEh9bm34YT711XZZ6mRHzrtAAUR tCtWZWdhcyBSZW1haWxlciA8cmVtYWlsZXJAdmVnYXMuZ2F0ZXdheS5jb20+iQB1 AwUQMP1xfZBA6uEVwDr9AQGibwL/adSqV5/12G+cH5cd5VDupuN570qS7dZdr6BI W9msl+TV7Y9KQUVcKqJ2AAZ6Ng0164WD4JgmYqeDqni0oYyk+Rm9IBmddJ/b0g9Z 7XbWH9w7/J8Zbbdx3mi4IpmwPAZe =9SYZ -----END PGP PUBLIC KEY BLOCK----- --SNIP-- which can be verified against ftp://ftp.gateway.com/pgpkeys/remailer.pgp Enjoy, & watch for the anouncement of a new nym server soon..... -abc \ Alan B. Clegg Just because I can \ Internet Staff does not mean I will. \ gateway.com, inc. \ <http://www.gateway.com/>

1 0

JavaScript to grab email
by Jyri Kaljundi 17 Dec '03

17 Dec '03

Another annoying feature in JavaScript and Netscape. Have a look at <http://www.popco.com/grabtest.html> The page uses JavaScript to steal your e-mail address and sends a test e-mail message to the address it grabbed. It works with Netscape, which is probably only browser supporting JavaScript. Probably there will soon be thousands of pages which include this code, and people using Netscape 2.0 will be spammed with commercial messages. So just put some false e-mail address in your Netscape browser to disable this feature. The script was developed and announced by Glenn Fleishman, moderator of the Internet Marketing mailing list. Thanks for letting people know. Jüri Kaljundi jk(a)digit.ee Digiturg http://www.digit.ee/

5 6

Re: Chaotic physical systems as random number sources (fwd)
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 4:24 PM 2/20/96 -0600, Jim Choate wrote: >I have used magnetic pendulums for this as well as chaotic dripping (both >with an old C64). On problem I can think of with pendulums would be a low bit rate. What kind or rate do you get from your setup. (Of course with nano-technology pendulums ...) ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

1 0

Re: JavaScript to grab email
by Sean A. Walberg 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- If you don't have a mail server set up, it won't send (PC version at least). Fine by me, cuz I just copy the address into Pegasus to send mail. YMMV. Sean > Another annoying feature in JavaScript and Netscape. Have a look at > <http://www.popco.com/grabtest.html> > > The page uses JavaScript to steal your e-mail address and sends a test > e-mail message to the address it grabbed. It works with Netscape, which > is probably only browser supporting JavaScript. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMSqKGd82JgvRKzQZAQGyTwQAiKo1XUGZHPCgrwJU2ZWM/aREb/LHAebi kGDWNyC4qFrDkB//A2jN6ZWckdEuuCvX+OKLyYZHWTZ/sTjvi7WDsTprrXt96mZV ho1TB3nzemzRVZVO9aWUW/Zhpa+fi0MoSAlZC5ZFsdvnrEZUJSEbd5S1aubPA/gc 2/Zf6v1rbNw= =W/Fp -----END PGP SIGNATURE----- =================] Will work for RAM [================== | Sean A. Walberg | PGP key | C programmers | | Computer Engineering ][ | on | do it in | | umwalber(a)cc.umanitoba.ca | servers | libraries! | =============] http://www.escape.ca/~sean [=============

1 0

Secure Split
by jf_avon＠citenet.net 17 Dec '03

17 Dec '03

Hi! this is the second time I post this to CP. Where can I get Secure Split? Apparently, it is a program to split a key in m parts, where n (<m) parts could rebuild the key. I saw that name in Nautilus manual (a pgpphone lookalike for dos). I looked through Alta Vista and the only thing I found was a post on CP by somebody else looking for it, in 1994 (?) Does such a program exists? If yes, where can I get it? Regards JFA **** NEW PGP 2.6.2 KEY ********* This key is actually suspended, as of Feb, 16 1996, was never distributed, and might be subject to deletion. Sorry for the trouble my mis-management might have caused. 2048 bits Key ID:24201BA1 1996/02/13 Jean-Francois Avon <jf_avon(a)citenet.net> Key fingerprint = 23 B6 24 31 86 67 FB 35 C7 A7 AF 12 A1 61 E9 3D **** OLD KEY: DO NOT USE ANYMORE UNLESS FOR VERIFYING SIGNATURES **** 1024 bits Key ID:57214AED 1995/10/04 Jean-Francois Avon <jf_avon(a)citenet.net> Key fingerprint = 84 96 76 AE EB 7C AB 15 88 47 87 B0 18 31 74 9F

2 1

Public Access Obsolete. Capitalism offers free email
by Duncan Frissell 17 Dec '03

17 Dec '03

The NYT's Cybertimes reports (http://www.nytimes.com/library/cyber/week/0219email.html) that two companies are preparing to offer free email to customers who agree to be barraged by ads. Juno and Freemark will soon offer free email to all (Americans). http://www.freemark.com/freemark.html http://www.juno.com/ And since you can do (almost) anything with email that you can do with the rest of the net (just more slowly and less conviniently) I guess we don't have to worry about government-provided public access any more. DCF

5 4

Re: JavaScript to grab email
by Mike Rose 17 Dec '03

17 Dec '03

>>>>> On Tue, 20 Feb 96 14:40:30 EST, Mike Rose <mrose(a)stsci.edu> said: >Changing the email address known to netscape doesn't help. Your email >address is in the message sent, regardless of what netscape thinks >your identity is. Sorry for the imprecision here. I was referring to Netscape 2.0 on unix here. Changing the email address known to netscape is insufficient for non-root users on unix systems, because sendmail will put your real address into the headers. The auto-responder used by the posted example page apparently isn't sophisticated enough to extract the real address, but the address is still in the headers for someone to extract. For those who haven't read the script, the technique used is as follows. A java script sends a mail message to the author of the script. The identity of the sender is in the mail headers. The script does not look at netscape variables or otherwise get the information from netscape or the environment. The major point is that setting a bogus email address in netscape will not necessarily prevent your email address from being captured in this manner. Mike

5 4

ViaCryptPGP 4.0?! (was Re: PGP integrated into Z-Mail)
by Mutant 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- David A Wagner wrote: [..] > A full review of Z-Mail for Windows and other Z-Mail products is > available over NCD Software's site on the World Wide Web at > http://www.ncd.com/Z-Code/zcode.html, or via e-mail at info(a)z-code.com. > ViaCrypt information is available over the Web at http://www.viacrypt.com ViaCrypt's page talks about a beta version of PGP 4.0 available at some sites. Hmmm. The Windows version is tantalizing. A PGP.DLL would be a wonderful thing. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMSqspioZzwIn1bdtAQHUYgGApl4OV143Q/LL2/mPC1m0PDHiGYbVB4xm sB66fpLRrpjHBYxqYg/fGTL1rN6Z4Ydu =OmqS -----END PGP SIGNATURE-----

2 1

Banned Zambian newspaper now on the Web
by Declan McCullagh 17 Dec '03

17 Dec '03

We now have the banned February 6 issue of _The Post_ online! Frank Stuart kindly provided a copy of the text. I've HTMLized it, added background documents and information about other international censorship efforts, and put it online at: http://www.cs.cmu.edu/~declan/zambia/ Zambia's president-cum-tyrant Frederick Chiluba has plenty of practice censoring local dissidents, broadcasters, and newspapermen. Now, if he likes, he can take on the Net. I've copied this message to the state news service, Zambia Today. Please redistribute as appropriate. -Declan ------------------------------------------------------------------------ http://www.cs.cmu.edu/~declan/zambia/ ------------------------------------------------------------------------ NET CENSORSHIP AND ZAMBIAN DICTATORS By Declan McCullagh declan(a)well.com Zambian President and Dictator-for-Life Frederick Chiluba has made a career of intimidating, harassing, arresting, and censoring those who disagree with him. Now his attempts to muzzle his critics have reached the Net -- specificially, Zamnet, the only Internet service provider in this impoverished African country. Chiluba has plenty of experience intimidating traditional media. At Chiluba's bidding, in December 1994 an armed paramilitary unit raided the Lusaka offices of The Post newspaper and its printer Printpak in Ndola looking for "seditious and defamatory material" -- just as the presses were starting to roll. Germany's ambassador to Zambia, Peter Schmidt, who witnessed the raid, told InterPress Service that "the raid amounted to an attempt to intimidate the free press." A few days later, police arrested the top editors of the weekly Crime News and held them without bail and without filing charges. The journalists' offense? The newsweekly had revealed that Chiluba's wife was involved in drug trafficking. The year before, Chiluba sued The Weekly Post for libel after the paper reported on his shady financial dealings with South Africa. Chiluba also fired the head of the Zambia National Broadcasting Corporation for not broadcasting appropriately pro-government programming. In 1994, the ever-vigilant Chiluba introduced legislation to make the Zambian media answerable to a government-appointed secret tribunal with broad, undefined powers of censure and punishment. Chiluba's latest state-sponsored terrorism came in early February 1996, after The Post published a report revealing the government's plans to hold a referendum on the adoption of a new constitution -- plans Chilbua hoped to keep secret to the disadvantage of his political opponents. True to form, the hypersensitive Chiluba ordered his forces to invade the newspaper's office, ransack the paper's files, arrest the editors, and stop the presses. Security forces then sealed the offices of The Post. Chiluba's despotic behavior is reprehensible. Foreign governments immediately should yank the $1.8 billion in foreign aid Zambia receives each year and demand Chiluba's ouster. That failing, it's high time for the Zambian people to kick their thin-skinned tyrant out of office. February 16, 1996: Zamnet Communication Systems, which hosts the the web version of The Post, removes the online copy of the February 5 issue after police threaten a raid. David Lush of the Media Institute of Southern Africa publishes an advisory. February 18, 1996: After reading Lush's advisory, I send an appeal requesting the text to several mailing lists. February 19, 1996: Frank Stuart contacts me when I'm logged into the WELL, saying he has a copy of the banned issue of the newspaper. February 20, 1996: This archive goes online after I translate Frank's text into HTML. ###

2 3

Re: Internet Privacy Guaranteed ad (POTP Jr.)
by tbyfield＠panix.com 17 Dec '03

17 Dec '03

At 6:46 PM 2/20/96, IPG Sales wrote: >Hedging, hedging, hedging - why? I did not noitice this <...> IPG, why don't you sit down and draw up the terms of a challenge? Specify: * what information and/or materials IPG will release * to whom it will release them and when * who is or isn't elligible * what you will and won't accept as "breaking your system" * the arbitrating body * a starting time and a deadline * the award You'd do well to be _very_ thorough in these terms, since any perception that IPG was trying to throw the game would draw that much more fire. You'd also do well to make terms terms conform to real-world circumstances: for example, if someone hacking the office machines on which which you generate, store, and/or disseminate RNs is a practical threat to your product, then admit that as an acceptable part of a "break." Ted

5 7