December 2003 - cypherpunks-legacy

Re: What is the EFF doing exactly?
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:52 AM 9/4/96, Jon Lebkowsky wrote: >At 07:44 AM 9/3/96 -0700, James A. Donald wrote: >>At 03:17 PM 9/3/96 -0700, Jon Lebkowsky wrote: >>> Not necessarily. The character of the anonymous speech is decisive. If you >>> use anonymity to cloak harassment, for instance, the anonymity (which >>> removes accountability) is a problem. The accountability issue is real and >>> should be addressed, not evaded. >> >>No: The harassment is the problem, not the anonymity that makes it >>possible. > >The harassment is one problem, the lack of accountability another. Which is >not to say that 'lack of accountability' should be 'fixed' by some sort of >blanket restriction...but it should be acknowledged as a problem. It has been. In many hundreds of articles addressing aspects of the issue. The fact that Esther Dyson and others think advocates of the right to be anonymous claim that these issues are not being considered just shows that Esther and others are not aware of these many articles. Nor can every brief post--such as the one James Donald made above--include a fully-nuanced, fully-balanced discussion of all issues. Saying that an advocate for a position has not considered the alternate positions is usually incorrect. --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: 2^1,257,787-1
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 4:54 PM 9/4/96, John F. Fricker wrote: >Ok so maybe here in Organ we are a little behind the times but I just heard >about this 378,632 digit prime. Grab your HP11C's and crank out >2^1,257,787-1 courtesy of David Slowinski at Cray. The news sites on the Web I looked at had the announcement, but not the number. Thanks. I've already modified my .sig. --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

How to use procmail
by Martin Janzen 17 Dec '03

17 Dec '03

"Damaged Justice" writes: > Would some kind soul out there be willing to instruct a novice in the > mysteries of procmail? I've finally decided to start killfiling my mail > as well as my news. A fine idea. Procmail makes the Cypherpunks list infinitely more readable. 1) First, here's how to get it: ---------------------- A recent version can be picked up at various comp.sources.misc archives. The latest version can be obtained directly from the ftp-archive at: amaru.informatik.rwth-aachen.de (137.226.112.31) as compressed tar file: pub/unix/procmail.tar.Z <100KB or in compressed shar format: pub/unix/procmail.0?.Z ---------------------- 2) Build the procmail program and install it in a suitable location. I have no idea what your familiarity with UNIX and C is; you may want to have your sysadmin help you with this. Alternatively, you could use Alta Vista or equivalent to search for binaries for your system. 3) Create a file of procmail "recipes", which tell it how to process your mail. This file is called "$HOME/.procmailrc". Mine begins like this; fix up directory names as needed for your system: ----------------------- # # $HOME/.procmailrc - procmail recipe file # PATH=/usr/local/bin:/usr/ucb:/bin:/usr/bin:$HOME/bin/700o:$HOME/bin ME= janzen HOME= /Home/$ME LOGFILE= $HOME/.procmaillog MAILDIR= $HOME/Mail ORGMAIL= /usr/mail/$ME DEFAULT= $ORGMAIL TMP= $HOME/tmp SENDMAIL= /usr/lib/sendmail TMPFILE= $TMP/procmail.$$ LOCKFILE= $HOME/Mail/.procmail # toss out junk mail :1 ^Subject:.*unsubscribe /dev/null # sort mail from mailing lists into the proper folders :1 cypherpunks Cypherpunks ----------------------- The last part sorts all mail whose header contains the word "cypherpunks" into the folder $MAILDIR/Cypherpunks. Now the fun part -- writing your "recipes"! You can get as specific as you want: ----------------------- # kill a particular thread :2 ^To:.*cypherpunks@toad.com ^Subject:.*Workers of the /dev/null # ignore a particular user :2 cypherpunks patrickbc(a)juno.com /dev/null # I haven't tried this one, but any subject with too many consecutive # capitals is probably spam or worse. Separate it out, but don't toss # it just yet. :2 cypherpunks ^Subject:.*[A-Z][A-Z][A-Z][A-Z][A-Z][A-Z] ProbableSpam # search the whole message body, not just the headers, for probable spam :1HB ^dear friend ProbableSpam # put everything else in the incoming Cypherpunks mail folder :1 ^To:.*cypherpunks@toad.com NewCypherpunksMail ----------------------- Rules are evaluated in top-to-bottom order; first matching rule wins. Anything not matched ends up in your usual $ORGMAIL folder. 4) Run your incoming mail through procmail. To do this, most Unix systems let you create a file called "$HOME/.forward" with the following contents (including the quotes): "| IFS=' '; /usr/local/bin/procmail -p" (Replace "/usr/local/bin" with the directory in which you installed procmail.) 5) One thing to watch out for: procmail is executed on the machine which handles your mail. If this machine has a different architecture than your own machine, you must build procmail for the mail handling machine, not your own. Also, the permissions on your $HOME/.forward and $HOME/.procmailrc files must be set so that they are readable on the mail handling machine. If your home directory is NFS-mounted, this should happen automatically; otherwise, you may need to copy them to the mail handling machine manually. Finally, the procmail process may not have your userid, so you must make these files world-readable: chmod 644 $HOME/.forward $HOME/.procmailrc For the first day or two, check your $HOME/.procmaillog file frequently to see whether there are any problems. Check with your sysadmin to make sure that your mail isn't ending up "all over the floor". Send yourself mail to test "recipes". 6) Once it's running smoothly, you can get fancy and run the following shell script, which reads the $HOME/.procmaillog file and produces a nice summary, sorted by mail folder: ------------------------------------------------------------------------------- #!/bin/sh # Summarize the ~/.procmaillog file LOGFILE=${LOGFILE:=$HOME/.procmaillog} echo "Subject: Procmail Summary" echo " " sort ${LOGFILE} | /usr/bin/awk ' /^ Folder:/ { folder = $2; nbytes = $3; msgcount[folder] += 1; totalbytes[folder] += nbytes; } END { for (folder in msgcount) printf "Folder %s:\tsaved %d messages (%d bytes)\n", \ folder, msgcount[folder], totalbytes[folder]; } ' if [ "$1" = "-clear" ]; then rm -f $LOGFILE; fi ------------------------------------------------------------------------------- To arrange to have it run daily, I use the following crontab entry: 0 7 * * * /Home/janzen/bin/pmsumm.sh -clear | elm -s "Procmail Summary" janzen which means, "At 7:00AM every morning, run the pmsumm.sh script, use the Elm mailer to mail the output to me, and then clear $HOME/.procmaillog". See the "cron" man page for your system, and/or talk to your sysadmin, since this varies among different flavors of Unix. Hope this helps... -- Martin Janzen janzen(a)idacom.hp.com

1 0

Protecting Web servers (was: Moscowchannel.com hack)
by smith＠sctc.com 17 Dec '03

17 Dec '03

> Could you illuminate me on this subject please? I am working with a >potential client who may need a fairly secure web server. Years ago, the government published some criteria for highly secure systems, notably the TCSEC or "Orange Book," which described requirements for protecting classified information on a timesharing system with uncleared users. Several vendors managed to build such systems, though very few were judged secure enough to really protect classified data from uncleared users. However, the underlying mechanisms of "mandatory access control" do manage to block a range of sophisticated attacks against the host computer. These are the systems given the various B and A ratings: B1, B2, B3, A1 (in ascending order of security). Also-ran systems that can keep honest people from tripping over one another were given "C" ratings, though "C2" is all you see any more. A few vendors are putting Web servers and such on systems with mandatory protection. I've heard talk of it from SecureWare, HP, Harris, and AT&T using B1 or B1-like systems. Pardon the plug, but our Sidewinder also hosts a protected Web server and uses mandatory protection to prevent Internet attacks from damaging it. In practice, I've found that most customers just want to demonstrate "due diligence" regarding security. They pick up whatever's popular in the marketplace that has some pretention of strong security ("We're C2 rated by the government!!"). It's a rare customer that actually takes the time to look at the security issues and consider whether they might need what mandatory protection provides. Rick. smith(a)sctc.com secure computing corporation

1 0

Re: What is the EFF doing exactly?
by James A. Donald 17 Dec '03

17 Dec '03

At 03:17 PM 9/3/96 -0700, Jon Lebkowsky wrote: >>> Not necessarily. The character of the anonymous speech is decisive. If you >>> use anonymity to cloak harassment, for instance, the anonymity (which >>> removes accountability) is a problem. The accountability issue is real and >>> should be addressed, not evaded. At 07:44 AM 9/3/96 -0700, James A. Donald wrote: >>No: The harassment is the problem, not the anonymity that makes it >>possible. At 06:52 AM 9/4/96 -0500, Jon Lebkowsky wrote: >The harassment is one problem, the lack of accountability another. So: Lucky Green and Dark Unicorn are not accountable. This is a problem? Because it is a problem "We" need to do something about it, --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

2 1

No Subject
by Squirrel Remailer 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Subject: How to send bogus mail to mislead traffic analysis? Hi How can I send messages to remailer so that they will get lost? I want to generate a more or less steady flow of remailer-processed, encrypted mail. Can I send to nobody(a)some_remailer.net? What are the guidelines for that? What are the best remailers to send to? Cheers Bugged - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2i mQCNAjItXH4AAAEEAL7znlceWxOboMgS5TJykI0LvxZ+nRwaUle05LyGdbQK8Tbv cnFb945OgUMxlWb+xpwYKpZIaZRJME86aO5OvMAI8IN5AQv1zx/e1v+l/6G8QyWN kRqtIxA++WlPO0co9DbckmED7IhtMabIto9S5vH7m6UzH/ASLE/d3JIQvo5FAAUR tAZCdWdnZWSJAJUCBRAyLVzhT93ckhC+jkUBAYnsA/9WGCWZvZXRibOs6Be9roWX fgTGhDl0rZhH13D5n7O77uQfAMCYf9ALbfn9UkbnMnAGtDyecPTp9TC3Ha65TkWv ald2LoLvMD01d6iS8SkvedcgHqojfh/Q55NkJ0wtO/Ne0jOtFVQzDEtF7awwypAx HZgIoEMsSLDrTT0EwTlTjg== =mlIT - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.2i iQCVAgUBMi1g10/d3JIQvo5FAQE70wQAsVZzVT9MrP5TuKcilJaehufve5O56B4y 0y5vaeax5fAAElZz9SxRV+meAgUNvRNTUu1afZIHYzoFUdJWoSAroLxMjSqbv1uT O95Qur+jJRLwgDoo+Kgse8DESDqlGdI2kab6KxDrSz2erkARYn9A5/JQTTI/L3I5 z1eW2fBec9c= =kDXU -----END PGP SIGNATURE-----

2 1

San Diego CPunk Physical meeting this Thursday
by Christian Claborne 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- <<<<< NOTE! I have a new address!!! >>>>>> This Thursday!!! San Diego Area CPUNKS symposium Thursday, Sep. 5, 1996. Invitation to all Cypherpunks to join the San Diego crowd at "The Mission Cafe & Coffee Shop". We discuss cryptography and other related subjects, have the special cypherpunk dinner, and unwind after a long day at the grind stone. Don't forget to bring your public key fingerprint. If you can figure out how to get it on the back of a business card, that would be cool. If you want the suspicious crowd there to sign your key, bring two forms of ID. Hopefully Lance Cottrell will give us an update on Mixmaster and what's going on at San Diego's best ISP. You can also get the scoop on why I resigned from NCR. It wouldn't of course be because someone freaked out when I forwarded the cypherpunk e-mail titled "How to become in international Arms trafficker"... Place: The Mission Cafe & Coffee Shop 3795 Mission Bl in Mission Beach. 488-9060 Time:1800 Their Directions: 8 west to Mission Beach Ingram Exit Take west mission bay drive Go right on Mission Blvd. On the corner of San Jose and mission blvd. It is located between roller coaster and garnett. It's kind of 40s looking building... funky looking (their description, not mine) They serve stuff to eat, coffee stuff, and beer. See you there! New guy, bring your fingerprint. Drop me a note if you plan to attend... NOTE: My primary e-mail address has changed to use my own domain. You can reach me at "claborne(a)cyberthought.com". Permanently replace any other address that you may have for me. I am currently not subscribed to the CP list since my current internet connection is slow (I can't afford anything right now :) 2 -- C -- -----BEGIN PGP SIGNATURE----- Version: 4.0 Personal Edition iQEVAgUBMi3ezYP1MBWQ+9udAQE/QAf/W/tdXCFx57p17tlXT0WbtZHPK2riMC2j 5golSBxmP5t0X6SbM0DYz9b8kq6FWrqTJ9hVKQhGHiiZVqRo6AcbYM9SlFM54x6E TFMKB6WzBp7h2DPqAeFZKuP2yGIhZaMns8fDS4EZIYHeH63DjEuhmwtM//iGe9KI txHFiQUKi0cQWGNfqeowpESfbO0HppFbsmgj9z9KTg2gFRpPpXQLP3vXJ9Dg0/IK gd5AiT+BTE2OOORS3OCmIUTC3vDI1acu/d2MNVOFuIBOkwH5y/mGf1pMndIW0++v eC+3j27wJyUbSumxM6+iVn+gu0mE7QB6YPllB9FbihkYNNfzWejyuA== =obLu -----END PGP SIGNATURE----- ... __o .. -\<, Claborne(a)CYBERTHOUGHT.com ...(*)/(*)._ Providing thoughts on your computing problems. http://www.CYBERTHOUGHT.com/cyberthought/ PGP Pub Key fingerprint = 7E BF 38 3F 24 A7 D1 B0 54 44 96 AA 10 D0 5D 51 Avail on Pub Key server. PGP-encrypted e-mail welcome! Dreams. They are just a "screen saver" for the brain.

1 0

SG Spy Ring
by jya＠pipeline.com 17 Dec '03

17 Dec '03

Financial Times, September 4, 1996, p. 4. Singapore looks to superhighway By James Kynge in Kuala Lumpur Singapore took another step toward its vision of becoming an "intelligent island" yesterday, announcing an initiative to link the city-state's main on-line networks. Mr Goh Chee Wee, Singapore's minister of state for communications, said the "internetwork hub" would link service providers of the Internet, government on-line networks, commercial networks and some others. Singapore's move follows an ambitious scheme announced by neighbour Malaysia last month to launch an "information superhighway" designed to attract the world's leading information technology companies to Kuala Lumpur. The perceived advantage in Singapore's initiative is that users will be able to access all networks using a single leased line, rather than the separate lines currently necessary. The hub will use a single set of national standards, meaning inter-operability between networks becomes easier. Mr Goh said the hub should be up and running by the end of the year. A mechanism to identify users electronically would be incorporated into the hub network next year, paving the way for secure operations such as payments, banking and confidential correspondence. The move is part of the Information Technology 2000 masterplan, a scheme which aims to accomplish the sometimes conflicting aims of exploiting the information superhighway to its full potential while continuing to insulate Singaporeans from undesired influences. From September 15, the city-state will implement its first big attempt to police cyberspace. From then all Internet providers must channel more than 120,000 subscribers on the island through "proxy servers" before they reach the net. These servers will check every Internet site a subscriber requests and block access to a about a dozen banned sites known to display pornography. The government has warned against material deemed politically subversive or inciting religious disharmony. [End]

1 0

Re: What is the EFF doing exactly?
by azur＠netcom.com 17 Dec '03

17 Dec '03

>Vladimir Z. Nuri wrote: >so in a very real sense, anonymity in >the phone system was considered a "problem" by some that has been >"solved" or "modified" by some recent advancements. (yes, most people >agree caller ID is an advancement). Yes, and that is why some companies (e.g., Private Lines) offer anonymous out-bound calling services. > >I think cpunks should hold the view that communication is a matter >of mutual consent between sender and receiver. if a receiver says, >"I don't want any anonymous messages", then should be able to block them. >this is essentially what is happening with the remailers *right*now*, >if you ask any remailer operator. people ask not to receive anonymous >mail, and are put on the blocking lists. imho only the extremists are arguing, >and have always argued, that they should have some ability to put >an anonymous message in front of someone else against their will. > >this basic rule becomes more murky when you look at public forums, >because you can't really say whether given individuals reading them want to >hear something anonymous or not. by designing the forum beforehand >to force the situation, you solve this problem. > I find most unwanted communications objectionable, anonymous or not. How about billboards. Should the fact that I choose to be outside or on a roadway make my eye a target for ads? (If so, then why not consider having an e-mail account in a similar vein?) The fact that I can immediately, or later, identify the responsible party doesn't keep me from initially seeing the ad and taking my time. If I object, what are my alternatives? The last thing I want is monetary compensation. I want my time back. Failing this, I want the abusers time (sorta' like in Zardoz). >I do believe that in the future there will be all types of forums: those in >which identity is required, those in which it is optional, and those in >which it is always cloaked. this is eminently reasonable imho. >those who argue against one of the >above's existence (such as saying it involves a ghettoization >of anonymity, that there should always be an ability to be anonymous >in any communication setting) are extremists imho. "The reasonable man adapts himself to the world: the unreasonable one persists in trying to adapt the world to himself. Therefore all progress depends on the unreasonable man." --George Bernard Shaw PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Steve Schear, N7ZEZ | Internet: azur(a)netcom.com Grinder | Voice: 1-702-655-2877 Sacred Cow Meat Co. | Fax: 1-702-658-2673 7075 W. Gowan Road, #2148 | Las Vegas, NV 89129 | ---------------------------------------------------------------------

1 0

Re: flimflamery on anonymity
by azur＠netcom.com 17 Dec '03

17 Dec '03

>Vladimir Z. Nuri wrote: >(last line is sarcasm for the sarcasm impaired) >a cpunk position I have seen repeated often. it goes along a very >simplistic line of reasoning that I have seen TCM evoke repeatedly. >it rather annoys me. it goes like this: > >cyberspace is merely discussion between people. anonymity should >be allowed anywhere there are discussions (its a free speech issue). >therefore it should be possible everywhere in cyberspace. > >this idea lacks a lot of subtlety in thought and to my mind is >tremendously simplistic. [snip] > >cpunks will also argue that anonymity can suffice for any >business transaction. that may be so, but what about a business >that simply says, "we choose to require identity among our >customers, and you can go elsewhere if you disagree". These attitudes create business opportunities for others who would seek to serve those who prefer anonymity. [snip] > >cyberspace as a whole is *not* going to lead to a totlal motion >away from physical identity. in some ways physical identity will >be more strictly enforced in cyberspace, in "some regions". >there will be other regions of cyberspace in which "anything goes". > As long as attractive, anonymous, alternatives sufficient for those (of a 'cyherpunk' mind) seeking to communicate, transact commerce, etc. exist it won't matter to whether others choose to enforce stricter identity adherence. [snip] >of course in the cpunk mailing list, who cares if there are >anonymous/pseudonymous participants? [snip]... but far more is at stake >in the "real world" and the risks posed by anonymity will be >adequately diluted because of this. and it won't be by people >who are all "f***ing statists"-- it will be by reasonable people >such as those who head EFF, who are interested in a civilized >society. > As always the market and the street will decide. PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Steve Schear, N7ZEZ | Internet: azur(a)netcom.com Grinder | Voice: 1-702-655-2877 Sacred Cow Meat Co. | Fax: 1-702-658-2673 7075 W. Gowan Road, #2148 | Las Vegas, NV 89129 | ---------------------------------------------------------------------

1 0