December 2003 - cypherpunks-legacy

Re:
by Anonymous 17 Dec '03

17 Dec '03

On 27 Sep 1998, Anonymous wrote: > > Paul is coming from AOL using Netscape as a mailer and using the > open relay at cesvxa.ces.edu. He's admitted this at least once in a sidebar on a message, as I seem to recall, so it's nothing new. It does go to show conflict of interest, and it could be claimed that he's trying to make himself feel better, I suppose. Looking back, he's used AOL for most of his postings, except for one I came across which apparently came from an admin machine at ces.edu, so he isn't exploiting some random open relay somewhere. Generally they all route through ces.edu. I can't speak for Paul, but I figure that he's probably doing what he once said that he is, and using a modem link to AOL, using AOL for a routing service, then routing mail through the relay at CES. I don't know why someone would want to do that if they're sitting on a university network, but it doesn't matter much. I just checked: the relay does appear to be an open relay. I just hope spammers don't wind up finding out which, of course, they probably will after that post. Can we have some signal somewhere, please?

2 1

Why do we need remailers, anyway?
by Anonymous 17 Dec '03

17 Dec '03

At 23 Sep 1998 04:27:46 Reeza! wrote: > anonymouse, 32 bit aohell to boot. you must feel very safe. Yours is hardly > the type of post that might necessitate the use of a remailer, so it should > be safe to assume you haven't the courage to stand behind your words, even > as mild as they are. > > Fuck you too. I suggest you discuss your lack of a spine with the maker. > See the above for instructions to meet the maker. > > Reeza! Hello? This is an old topic, but what the heck... There is a concept cypherpunks have called "Blacknet", which is an organisation that sells profiles of prospective employees based on their public comments on the Internet. This allows employers to filter out undesirables who might or might not have outgrown their rebellious youth. (You can never be too safe!) Now, there are laws making discrimination illegal. But it's hard to *prove* that an employer based its decision on BlackNet files, isn't it.... The cypherpunk philosophy is to rely on technology to solve the problem, rather than rely on the government (or anyone else). Cypherpunks write code. -- an anonymous aol32 user.

2 1

No Subject
by Anonymous 17 Dec '03

17 Dec '03

Sunday, September 27, 1998 - 23:06:35 MET First of all I want to say that the last posting I did to cypherpunks(a)cyberpass.net did not reach the intended recipients. And two, > Subject: Remailers, PGP, and a Project Suggestion > Date: Sun, 27 Sep 1998 20:50:36 +0200 > From: Anonymous <nobody(a)replay.com> > To: cypherpunks(a)cyberpass.net > Unfortunately, much to the delight of the > government, the people who would code such > a thing are probably in the U.S. like I am. I would be more than glad to do the coding. I am not in the US. However, the only thing that stops me is the fact that I just don't know enough programming.

1 0

please help
by Anonymous 17 Dec '03

17 Dec '03

http://www.angelfire.com/ok/ProveIt/

1 0

Meriweather v. Gates
by Tim May 17 Dec '03

17 Dec '03

It's an ironic indication of where we are that Bill Gates is being hounded by the Justice Department, Sun Microsystems, Netscape, Novell, and Ralph Nader while no one is hounding John Meriweather. In fact, the Federal Reserve System, nominally nongovernmental (wink wink) just helped to bailed out his firm, Long-Term Capital Management. Gates, you see, has a non-leveraged investment of $50 billion in Microsoft. No borrowing, no margin debt, just plain old-fashioned ownership. Meriweather, on the other hand, started in 1991 and took in money from speculators. He took the $2.2 billion and borrowed with it, hitting the $125 B in borrowed assets point. Then he and his rocket scientists essentially borrowed still more, using this $125 B to leverage $1.25 T. (T for "trillion.") Not bad, going from $2.2 B to $1.25 T, a mere 500-fold increase. (Like taking the money one planned to spend on a new PC, a couple of thousand or so, and instead controlling a million dollars worth of financial instruments.) Had the folks at LTCM made the right bet on the roulette wheel, by guessing the direction of interest rates, the tens of billions of profits would have been theirs to keep, with little work on their part. (Some of the principals are now disclaiming responsibility, saying LTCM was only a sideline interest.) Ah, but they guessed wrong, and now they and their lenders are being bailed out. In America, profits are private but losses are public. Meanwhile, Gates sticks to building up his company, selling actual products. No margin debt, no loans for the American taxpayer to cover, no overextended lines of credit. Oh, the horror of it! Gates must be attacked by the U.S. government and all of his incompetent competitors! He must be driven out of business! We need to make the world safer for folks like Meriweather. (Think of what Meriweather could be doing with the $50 B that Gates has! Instead of being worth a piddling $50 billion, Meriweather and Scholes and that bunch could double down, double down again, and again, and turn it into $25 trillion! All with just some computer commands. American capitalism at its best.) We bail out Meriweather. We try to bust Gates. I'm going to be sick. The reformatting of this country is overdue. --Tim May (This space left blank pending determ. of acceptability to the gov't.) ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 831-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments.

1 0

Police would never exagerate ? Guess what...
by Jean-Francois Avon 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >Date: Mon, 28 Sep 1998 09:57:46 +0930 >From: SSAA <Sporting.Shooters.Association(a)adelaide.on.net> >Subject: NEWS - Toy Pistol case dismissed >Reply-to: Sporting.Shooters.Association(a)adelaide.on.net THE SUNDAY TELEGRAPH, Sydney. Sept 27.by Wayne Jones. A MAGISTRATE has dismissed charges against a 165 year old boy who faced jail for possessin a toy cap gun. The magistrate, Hal Halenstean, made the decision after hearing what he described as a "silly case" on Friday. "We all have better things to do", Mr Halenstein said, The boy, who cannot be identified bought the toy cap gun from a toy stall at Victoria's Dandednong Market on May 12. Minutes later, police looking for drug dealers found the cap gun in the boy's jacket. They charged boy with several firearm offences which carry a jail sentence. In court, Mr Halenstein twice gave prosecutors on opportunity to withdraw the charges against the boy, but police indicated they would continue to contest the case. Using special provisions of the Sentencing Act, Mr Halenstein then dissmissed the charges. The boy's barrister, Arend Slink, said the court case had set a precedent under the new gun laws. Toy cap guns could no longer be classed as prohibited weapons, he said. "If there is any sinister intent there are a range of serious charges that a person could be charged with. "Mr Slink" said"But in the case of a child possessing a toy cap gun a precedent has now been clearly set". The Sunday Telegraph reported on May 24 the boy could face jail if found guilty of the swrioud gun charges, which included: # Being a non-prohibited person did possess/carry a handgun which was not registered. # Being a non-prohibited person did possess/ carry a handgun which ge did not have a licecnce for under part two of the Firearms Act 1996. # Did own a handgun whilst not authorissed by a licence under the Firearms Act 1996 to possess a firearm. Police had alleged the toy gun was consedered an imitation firearm inder strict new gun laws and therefore deemed to be a prohibited weapon. The toy gun bought by the boy is one of thousands soldacross the state. The boy said he had bought the toy cap gun with pocket money. THE END. ------------------------------------------------------------------------ View Democrat Firearm Policy www.ssaa.org.au/dempolicy.html Print, copy and distribute. ===================END FORWARDED MESSAGE=================== Jean-Francois Avon, B.Sc. Physics, Montreal, Canada DePompadour, Société d'Importation Ltée Limoges fine porcelain and french crystal JFA Technologies, R&D physicists & engineers Instrumentation & control, LabView programming PGP keys: http://bs.mit.edu:8001/pks-toplev.html PGP ID:C58ADD0D:529645E8205A8A5E F87CC86FAEFEF891 PGP ID:5B51964D:152ACCBCD4A481B0 254011193237822C

1 0

Find Out Anything About Anyone On The Net !!!!
by anto＠commnet.it 17 Dec '03

17 Dec '03

YOU can easily learn how to investigate and learn EVERYTHING about your employees, neighbors, friends, enemies, and or anyone else !!! It is absolutely amazing !!! YOU Must Get This Extraordinary Package today......... + YOU can track down an old friend or a lost love, and, just for fun, investigate your family history. + YOU can screen prospective employees criminal records, look at their driving, or credit history. + YOU can verify test results from drug testing and even look into your children's friends history for any type of record. + YOU can TRACK down and locate an old debtor who is hiding from you and see if he/she is hiding any assets. + YOU can look up "unlisted telephone numbers." Locate social security, birth, adoption or death records. Check Army, Navy, Marine Corps, or Air Force service file records. YOU will simply be amazed to learn what sensitive and important information other people and enemies can discover about YOU !!!!! YOU Can Find Out Anything About Anyone On The Net !!! Do background checks on people and charge for it, as you start your own investigative services. Stop guessing about the LAW !!! Look up laws and do much more, direct from famous law libraries. Get this easy to use KIT right away, and then, YOU can become a private investigator. ORDER TODAY !!!!! Send $18.00 cash (wrapped in two pieces of paper), money order, or check to: INFORMATION, Ltd. P. O. Box 515019 St. Louis, MO 63151-5019 USA The Complete Package Will Be Immediately Shipped Prepaid Directly to You With Everything You Will Need In Your Kit to Get Started Right Away !! THANK YOU for your kind attention, and have a nice day !!!! +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ YOUR AD IN 333 NEWSPAPERS !!!!!!!!!! *********************************************** Seven years ago, I learned how to place my Classified Ad in several hundred newspapers, with just one telephone call. And, my cost was $0.51 per newspaper. The total circulation was well over 1.5 Million. I could reach just about any market, anywhere in this country. Since then, my small mail-order company has exploded. And, I use this same time tested and true method week after week. I would like to share this powerful information and show you how to save hundreds, even thousands of dollars on advertising that works. The average cost of a classified ad in a newspaper is about $15.00 to $20.00 dollars. Multiply that by 333 and your total cost is well over $6,000.00 Dollars. By using our amazing method, your total cost is only $170.00. Not to mention the time and money you save by placing one call, instead of 333 long distance calls. You can limit your promotion to a Single State or place your ad in Several States around the country, all with just one phone call. You can reach One Million Readers on the East-Cost today and a Million on the West-Coast tomorrow. It's that simple !!!! Your cost for this priceless information, is only $19.00 !!! You will make that back on your first promotion. WE are so confident that this type of advertising will boost your profits, we will guarantee your satisfaction with our Money Back Guarantee !! So, you have nothing to lose. Now, order our amazing classified ad method today !!!!!! PRINT ORDER FORM Ship To: ************************** ********* NAME____________________________________________ ADDRESS________________________________________ CITY______________________________________________ STATE__________________ ZIP_____________________ E-MAIL__________________________________ Don't Delay, ORDER YOUR COMPLETE MEDIA KIT TODAY !!!!!!! ********************************************************************** Mail Payment $19.00 CASH, money order, or check TO: ******************** INFORMATION, Ltd. P. O. Box 515019 St. Louis, MO 63151-5019 U.S.A. WE will ship your complete KIT directly to you !!!! ************************************************************** OPTIONAL / OVERNIGHT SHIPPING - ADD $15.00 ************************************************************** Thank you for your kind attention, and have a nice day !!! YOU MAY ORDER BOTH PACKAGE KITS FOR ONLY $33.00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Admin Internet Services This message is not intended for residents in the State of Washington, screening of addresses has been done to the best of our technical ability. If you are a Washington resident or otherwise wish to be removed from this list, go to global remove site if you want your address removed from future mailing. http://209.84.246.162/remove.htm This Global Communication has been sent to you by: PAVILION ADVERTISING SERVICES Offices: London, Paris, Berlin, Hong Kong

1 0

Remailers, PGP, and a Project Suggestion
by Anonymous 17 Dec '03

17 Dec '03

On Sun, 27 Sep 1998, Anonymous wrote: > At 23 Sep 1998 04:27:46 Reeza! wrote: > > anonymouse, 32 bit aohell to boot. you must feel very safe. Yours is hardly > > the type of post that might necessitate the use of a remailer, so it should > > be safe to assume you haven't the courage to stand behind your words, even > > as mild as they are. > > > > Fuck you too. I suggest you discuss your lack of a spine with the maker. > > See the above for instructions to meet the maker. > > > > Reeza! > > Hello? This is an old topic, but what the heck... > > There is a concept cypherpunks have called "Blacknet", which is an > organisation that sells profiles of prospective employees based on > their public comments on the Internet. > > This allows employers to filter out undesirables who might or might > not have outgrown their rebellious youth. (You can never be too safe!) Even this is a secondary issue. Many people are using remailers these days because of the advent of the WWW. Virtually anything written, retrieved, or transfered on the Internet is vulnerable to monitoring, logging, and future use against you. Even if you trust the guy you're sending mail to, you can't necessarily trust his computer security or the security of the network. Systems like Dejanews and the web search engines illustrate just how much of a log is out there. That isn't counting the information available solely from mail headers and IP addresses. When somebody wants to perform a "great purge," they just go off to a search engine or database, type in some parameters, and get a list of people to shoot, jail, or harass. The natural solution to this is to disguise your identity whenever possible. I estimate that we have several dozen people who actively post to Cypherpunks through remailers judging by the way some things are stated in the postings. I can't tell for sure, and that's the point. If you want to generate reputation capital, use a nym server. Nym servers make it obvious that you're using a nym, but it allows you to generate as many reputations as you want and keep them separate. They're hard to use without a tool, even for the best of us. Premail leaves a lot to be desired in that it's slow, has some bugs, and lacks some good features, but most of the people who want to create a new version seem to live in the U.S.. The real advantage of the nym servers is that they allow people to see the origin of the message at a glance. You can do the same thing with regular anonymous remailers, but you have to verify the signature rather than glancing at the headers. You should still verify the signature in either case. This was less of a problem than it once was because premail was out there, until PGP 5 came out. PGP 5.x is incompatable with previous versions since it changed both the protocols and the command line interface. Unfortunately, they changed the command line interface in a rather stupid way. They also wound up releasing the Windows version before the UNIX version (by something like three months). They seem to check argv[0] to determine what kind of operation you want to do. 'pgp -seat' won't work anymore. Instead, it's a variant under 'pgpe'. One PGP binary is created, and several links are set up. The result is that you can't change the name of the binaries and links if you want. If there's an advantage to this, I sure don't see it. When they released the Windows version, Windows users understandably snatched it up and started using it. The result was a bunch of incompatabilities between two platforms which could have easily been solved had PGP, Inc. exercised a little more discression. That's a moot point now, though. The problem which still remains is the command line interface. It breaks any script which references PGP, and that's the main problem. What UNIX really needs is some kind of mailer which integrates an updated premail, PGP 2.x support, and PGP 5.x support. Unfortunately, much to the delight of the government, the people who would code such a thing are probably in the U.S. like I am.

2 1

TODAY'S NEWS AND PICS PACKED STUFFED! - READ IT NOW!
by STUFFED NEWS DAILY 17 Dec '03

17 Dec '03

+ 30 FREE HOT JPEG PHOTOS + 5 SUPER SEXY STORIES + NOTES ON MARRIAGE + SUCKING AND FLOPPING + MADONNA GOES ALL GIRL + THE BEST OF EUREKA + KEEP IT COMING MONICA + TOP 9 SIGNS GRAMPS IS ON VIAGRA + NO PLACE TO HIDE AT THE NAKED LUNCH + I LOVE PAPAYA ----> http://stuffed.net/98/9/28/ <---- Welcome to today's issue of Stuffed. To read it you should click on the URL above. If it is not made clickable by your email program you will need to use your mouse to highlight the URL, copy it and then paste it into your browser (then press Return). This email is never sent unsolicited. Stuffed is the supplement for the Eureka newsletter you subscribed to. Full instructions on unsubscribing are in every issue of Eureka! ----> http://stuffed.net/98/9/28/ <----

1 0

Information about the Anonymous
by Anonymous 17 Dec '03

17 Dec '03

This message is being sent to you automatically in reply to the message you sent to remailer(a)replay.com with the subject "remailer-help". There is an automated mail handling program installed on this account which will take any message with the proper headers and automatically re-send it anonymously. It is capable of providing a very high level of security if you use the Mixmaster software to produce the messages. You can get the Mixmaster client software from <http://www.thur.de/ulf/mix/> (Germany). Please read its manual page and README file for usage instructions. More information about anonymous remailers is available at <http://www.stack.nl/~galactus/remailers/>. For an up-to-date listing of anonymous remailers with statistics, see <http://anon.efga.org/anon/rlist.html>. You can also get the list by fingering rlist(a)anon.efga.org or rlist(a)anon.lcs.mit.edu. You can use the remailer by sending mail to remailer(a)replay.com, with the header "Anon-To: address", the address that you want to send anonymously to. If you can't add headers to your mail, you can place two colons on the first line of your message, followed by the "Anon-To:" line. Follow that with a blank line, and then begin your message. For example: ================================================================ From: joe(a)site.com To: remailer(a)replay.com Subject: Anonymous Mail :: Anon-To: beth(a)univ.edu This is some anonymous mail. ================================================================ The above would be delivered to beth(a)univ.edu anonymously. All headers in the original message are removed. She would not know that it came from Joe, nor would she be able to reply to the message. However, there are a few ways that the true identity of the sender could be found. First, if many anonymous messages were sent, someone could compare the times that the messages were sent with the times that 'joe' was logged in. However, this can be prevented by instructing the remailer to delay the message, by using the "Latent-Time:" header: ================================================================ From: joe(a)site.com To: remailer(a)replay.com Subject: Anonymous Mail :: Anon-To: beth(a)univ.edu Latent-Time: +1:00 This is some anonymous mail. ================================================================ The message would be delayed one hour from when it is sent. It is also possible to create a random delay by adding an 'r' to the time (+1:00r), which would have the message be delivered at a random time, but not more than an hour. You can also delay the message until a specific time. For example, "Latent-Time: 0:00" without the '+' would delay the message until midnight (at the remailer site). Times must be in 24-hour format. NOTE: This remailer automatically reorders messages in a large pool, which produces a similar effect. Another problem is that some mailers automatically insert a signature file. Of course, this usually contains the sender's e-mail address, and so would reveal their identity. The remailer software can be instructed to remove a signature file with the header "Cutmarks:". Any line containing only the cutmark characters, and any lines following it will be removed. ================================================================ From: sender(a)origin.com To: remailer(a)replay.com :: Anon-To: recipient(a)destination.com Cutmarks: -- This line of text will be in the anonymous message. -- This line of text will not be in the anonymous message. ================================================================ NOTE: The cutmark characters in the example are "-- ", the usual e-mail signature separator. If you forget the trailing blank after the "--" in the "Cutmarks:" directive, your signature won't be cut off. Sometimes you want a subject line or other headers in your anonymous message. Additional headers can be written to the output message by preceding them with a "##" line. Multi-line headers with indented continuation lines are allowed. ================================================================ From: chris(a)nifty.org To: remailer(a)replay.com :: Anon-To: andrew(a)where-ever.org ## Reply-To: chris(a)nifty.org Subject: A message with user-supplied headers: the subject extends over two lines Hi there! ================================================================ The remailer can also be used to make anonymous posts to Usenet. To do this, send a message with the header "Anon-Post-To: newsgroups", the newsgroups that you want to post anonymously to. Please note that the group names must be separated by commas (but NO spaces). ================================================================ From: poster(a)origin.com To: remailer(a)replay.com :: Anon-Post-To: alt.test,misc.test ## Subject: Anonymous Post This is an anonymous message. ================================================================ When posting test messages, please use the appropriate groups (alt.test, misc.test). The remailer support newsgroup alt.privacy.anon-server is not a test group. A subject is needed for Usenet postings. The remailer writes a "Subject: none" header to the output message if you don't add your own subject. In order to post an anonymous follow-up article and have it appear in a thread, you must set the "Subject:" and "References:" headers of your message correctly. The explanation below has been adapted from the nym.alias.net help file (mailto:help@nym.alias.net). The subject of your message should be the same as the article to which you are replying, unless you are replying to the first message in a thread, in which case you should prepend "Re: " to the original subject. To build a references header, copy the references header of the article to which you are replying, and append that article's Message-ID. If you are replying to the first article of a thread, it won't have a references header. In that case just use the article's Message-ID as your references header. Be sure to leave a space between Message-IDs in your references heder. For example, if replying to a message which includes these headers: ================================================================ Newsgroups: alt.privacy.anon-server Subject: Re: anonymous remailers References: <5dfqlm$m50(a)basement.replay.com> Message-ID: <5dko56$1lv$1(a)news02.deltanet.com> ================================================================ your anonymous follow-up message should begin with these lines: ================================================================ :: Anon-Post-To: alt.privacy.anon-server ## Subject: Re: anonymous remailers References: <5dfqlm$m50(a)basement.replay.com> <5dko56$1lv$1(a)news02.deltanet.com> ================================================================ [Note that an indented line in a message header indicates a continuation of the previous line.] If replying to the first message in a thread, with these headers: ================================================================ Newsgroups: alt.privacy.anon-server Subject: Help with PGP Message-ID: <5e96gi$opv(a)job.acay.com.au> ================================================================ your reply should begin with these lines: ================================================================ :: Anon-Post-To: alt.privacy.anon-server ## Subject: Re: Help with PGP References: <5e96gi$opv(a)job.acay.com.au> ================================================================ The "References:" header can be trimmed to include only IDs from messages that you have quoted from or are replying to. By separating messages with cutmarks, you can send more than one message at once: ================================================================ From: me(a)mysite.org To: remailer(a)replay.com Subject: whatever :: Anon-To: recipient1(a)site1.org Cutmarks: -- ## Subject: message 1 Message one. -- :: Anon-To: recipient2(a)site2.org Cutmarks: -- ## Subject: message 2 Message two. -- me(a)mysite.org ================================================================ The two messages will be delivered separately, and the signature will be removed. Only one cutmark is used in the example, but you may use different cutmarks in each part of your message if necessary. For added security, you can encrypt your messages to the remailer with PGP. The remailer software will decrypt the message and send it on. Here is the remailer's public key: Type Bits/KeyID Date User ID pub 1000/E7AEC1E5 1995/05/23 Replay Remailer Service <remailer(a)replay.com> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQCKAy/Bo9QAAAED6NMBE5oNGLqUmZvUZTWBfL41B67EVtDHu5VmqrPLX6w0gk8U lPUNlW/1wACNQAFs/hxKKd0B15d8R7Qk1X7H1KPsdF9AAp8DIBe3MN59Z8iO1dYB GW8YhPg2EXnNAZyVQb/CGhDZhm8naq3wsQynZZu4J7DmVD0VsrLnrsHlAAURtC1S ZXBsYXkgUmVtYWlsZXIgU2VydmljZSA8cmVtYWlsZXJAcmVwbGF5LmNvbT6JAJID BRAvzinRPRWysueuweUBAVpyA+dmx166/op40+nr9OQjahqWHdvLYkKipanaLNM4 u0/U8RrkySEj5n/R0zaJSG4mutZ28DqUEhz7rBHrFRYleENRtiI9TxZZrJVWInE9 No7VwSW9jWlpta2rCfu97EWLdPVPLXmXpd90TONHMk8a7sf/Lz5JFWIIK5PSqI/Z xQ== =5+RC -----END PGP PUBLIC KEY BLOCK----- To utilize this feature, create a message with two colons on the first line, then the "Anon-To:" or "Anon-Post-To:" header, then any other commands such as "Cutmarks:" or "Latent-Time:", then a blank line, then the optional "##" line and your additional headers, then a blank line, and then the body of your message. Encrypt this with the remailer's public key. Then send it to the remailer, adding the header "Encrypted: PGP". If you forget this, the remailer won't know that it needs to be decrypted. Also be sure to use the "-t" option with PGP, or the linefeeds might not be handled properly. ================================================================ From: me(a)mysite.org To: remailer(a)replay.com :: Encrypted: PGP -----BEGIN PGP MESSAGE----- Version: 2.6.3in hIwCJD7BWgsRsnUBA/9kVuVlhFczhjI5cYFLGEAQiv4fUUlZ+hgPp6SQysToVLTM d0OvWqEb4TJgMREf6pHv4022yRLV6Pb9xaE/Gb82SUZYNE6TvfpxyKbWtRSthPXx OlsLD+IudqvBQus6DoY/9ClbbXyibP6mOCy7gwFZWOy6OMv2O2ZI3ufc/iCpgKYA AAAoLD7rvsI+c/Bod/GKAffpHqN2fimsoXrdcEMhIfN+rSC7PnMmaX1c4w== =afKM -----END PGP MESSAGE----- ================================================================ To confuse possible attackers even more, you can generate some cover traffic by sending encrypted messages with the special "Null:" header rather than the usual "Anon-To:" or "Anon-Post-To:" headers. The remailer will drop these messages in the bit bucket. Any text after your encrypted remailer message is also remailed. This allows sending messages to someone who is anonymous. If you create a PGP-encrypted message to yourself via this remailer, and then give it to someone, they can send you a message by sending the encrypted message to the remailer. The remailer will then decrypt it and send it to you. The message gets anonymized in the process, so the sender will need to include a return address if he wants a reply. Messages sent this way can be encrypted using the "Encrypt-Key:" feature. Any text following a line beginning with "**" will be encrypted with this key. For example, if you put in the plaintext of your PGP message: ================================================================ :: Anon-To: you(a)yourhost.org Encrypt-Key: your_password ** ================================================================ The appended message after the "**" will be encrypted with the key "your_password", using PGP's conventional encryption option. It is much simpler to manage these "reply blocks" -- both from the sender's and recipient's perspective -- by using a nymserver. Please read <http://www.publius.net/n.a.n.html> for more information (the homepage for nym.alias.net, the home of the nymserver software). For greatest untraceability, your reply block can be directed to post to alt.anonymous.messages on Usenet. Since you must use a subject line when posting to Usenet, messages sent using the same reply block will have the same subject. To avoid this, you can encrypt a message digest of the subject using the "Encrypt-Subject:" feature. For example, if you put inside your reply block: ================================================================ :: Anon-Post-To: alt.anonymous.messages Encrypt-Key: your_password Encrypt-Subject: your_other_password ## Subject: This subject is MD5 hashed and IDEA encrypted ** ================================================================ The subject will be converted to a 128-bit number and encrypted with IDEA using CFB mode with the key "your_other_password", and printed in hexadecimal format (48 characters); and the message will be posted to alt.anonymous.messages. The original subject cannot be recovered, only the MD5 hash of it, and then only if you have the password. The resulting subject will be different each time due to the use of CFB mode, so this helps prevent traffic analysis based on the subject header. Decoding the subject (to verify that the message is directed to you) requires special software. A small C program which can do this is part of the remailer distribution, but a more robust application would be appreciated. You can get the remailer source code as ASCII-armored Unix TGZ archive by sending mail to remailer-source(a)squirrel.owl.de. Abuse Policy: I consider the following to be inappropriate use of this anonymous remailer, and will take steps to prevent anyone from doing any of the following: - Sending messages intended primarily to be harassing or annoying. - Use of the remailer for any illegal purpose. Due to the global nature of the Internet, it is the sole responsibility of the orginal sender to determine what is legal. - Unsolicited commercial messages (SPAM). - Complaints to spammers. - Posting lists of addresses to Usenet groups for purposes of soliciting commercial e-mail (spam-baiting). Spammers will be exposed, publicly humiliated, and billed whenever possible. If you don't want to receive anonymous mail, send a message to the operator, and your address will be added to the block list. For more information on filtering out unwanted e-mail, see <http://www.abuse.net/>. You can get a list of statistics on remailer usage by sending mail to the remailer with Subject: remailer-stats To get the remailer's public keys, send mail with Subject: remailer-key or finger rlist-keys(a)anon.efga.org or remailer-keys(a)anon.lcs.mit.edu to get the public PGP keys of all active Cypherpunk remailers. For a copy of these instructions, send mail with Subject: remailer-help To reach the operator, direct your mail to abuse(a)replay.com.

1 0