December 2003 - cypherpunks-legacy

Today's OUTLAND cartoon
by Phil Karn 17 Dec '03

17 Dec '03

Be sure to see it. The "Information Highway Patrol" has arrived... Phil

1 0

Re: "bomb me" traffic
by nobody＠soda.berkeley.edu 17 Dec '03

17 Dec '03

Greg Broiles offered, "I'm sure that the good intentions are appreciated, but I don't see how traffic which is predictable, both in terms of size (~ 45K) and timing (every morning at X:00 AM) is going to make the task of traffic analysis more difficult." What I wrote was a bit misleading. I meant to say the 6-12 rounds in the morning (these days down to ~6) were the MAXIMUM traffic load I expected to send out at once. Given my sleep cycle, this is NOT predictably X:00 AM. I have a convenient internet link on a PowerBook on my desk for which I am logged in most of the day, at least in the background of the Mac Finder. So throughout the day I will get more requests and send off the five mails. The sizes vary from 18K to 46K and are being sent chained between 2 remailers selected at random, including the possibility of those two being the same remailer. I am also sending out a short (but I could make it longer or even of random length if I learn some more Unix/perl) "Ping" through all the mailers on my list a few times a day. I even made a "SuperPing" commands script which sends the short message through all the possible sets of two chained remailers to check the links BETWEEN remailers. I do not do this in both directions; only Me->A->B->Me, not Me->B->A->Me also. Last night the pmantis->hfinney link was not pinging but pmantis and hfinney themselves pinged fine. I need to play more, and recheck my "script" before I comment on the reliability of those remailer-remailer links though. So throughout the day, as especially when I (and thus others) have free time, I will be sending quite a few messages with sizes 18-46K through two random remailers each. It seems to WORK, which is what matters to me. It seems this, in whatever small amount, WILL make traffic analysis more difficult. "Further, the characteristics which have led some remailers to be considered unsuitable for the current project make them stronger, in terms of resistance to traffic analysis - e.g., erratic (or slow) throughput, and loss of "Subject:" lines." I understand this and agree with you completeley. I am considering using those remailers too, as I have already included a header telling people that the pieces are EXPECTED to arrive erraticallly over a day's time. However, I think added delays should eventually involve a few SECONDS, not a few hours. This isn't the fucking postal service I'm trying to use. I like the speed of internet e-mail. Stripping subject headers should be left up to the user of the remailer and is trivial to leave out. Such delays make it impossible to say, cooperate in a timeley manner on this or other mailing lists, or on Usenet. Such is anon.penet.fi's delays, and those of the slow remailers. When ONE e-mail takes upwards of a DAY to arrive, or even a few hours, I just can't carry out my plans for world domination with my co-conspirators ;-). Adding multi-hour delays to my e-mail is just too primative. E-mail is replacing the telephone for many uses so if the remailers ever expect to gain a large base of users, they need to be FUN, and delays are not. Gaining a large number of daily users is the long term solution to traffic analysis worries, but adding hours of delays COMPARED with other fast remailers will make people avoid those remailers. -Xenon

2 1

Re: Superping Script
by nobody＠cicada.berkeley.edu 17 Dec '03

17 Dec '03

Anon asked for a copy the "SuperPing script". I don't know much Unix and no perl so this is may NOT be the "correct" way to do this, but it WORKS for ME. I am in the csh shell by the way. This got word-wrapped; the original has the first three lines as ONE long line (happy editing! I just make it on the Mac then use 'ed', 'a', paste it in, '.', 'w SuperPing', 'q', then 'chmod u+x SuperPing'). I might get flamed for this silly script ;-). .PingFile is a small text file. -Xenon (echo "::" ; echo "Request-Remailing-To: hh(a)cicada.berkeley.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P1: catalyst" catalyst(a)netcom.com echo "P1: catalyst -> cicada" (echo "::" ; echo "Request-Remailing-To: ebrandt(a)jarthur.claremont.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P2: catalyst" catalyst(a)netcom.com echo "P2: catalyst -> jarthur" (echo "::" ; echo "Request-Remailing-To: hfinney(a)shell.portal.com" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P3: catalyst" catalyst(a)netcom.com echo "P3: catalyst -> shell" (echo "::" ; echo "Request-Remailing-To: hh(a)pmantis.berkeley.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P4: catalyst" catalyst(a)netcom.com echo "P4: catalyst -> pmantis" (echo "::" ; echo "Request-Remailing-To: elee7h5(a)rosebud.ee.uh.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P5: catalyst" catalyst(a)netcom.com echo "P5: catalyst -> rosebud" (echo "::" ; echo "Request-Remailing-To: hh(a)soda.berkeley.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P6: catalyst" catalyst(a)netcom.com echo "P6: catalyst -> soda" (echo "::" ; echo "Request-Remailing-To: ebrandt(a)jarthur.claremont.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P7: cicada" hh(a)cicada.berkeley.edu echo "P7: cicada -> jarthur" (echo "::" ; echo "Request-Remailing-To: hfinney(a)shell.portal.com" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P8: cicada" hh(a)cicada.berkeley.edu echo "P8: cicada -> shell" (echo "::" ; echo "Request-Remailing-To: hh(a)pmantis.berkeley.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P9: cicada" hh(a)cicada.berkeley.edu echo "P9: cicada -> pmantis" (echo "::" ; echo "Request-Remailing-To: elee7h5(a)rosebud.ee.uh.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P10: cicada" hh(a)cicada.berkeley.edu echo "P10: cicada -> rosebud" (echo "::" ; echo "Request-Remailing-To: hh(a)soda.berkeley.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P11: cicada" hh(a)cicada.berkeley.edu echo "P11: cicada -> soda" (echo "::" ; echo "Request-Remailing-To: hfinney(a)shell.portal.com" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P12: jarthur" ebrandt(a)jarthur.claremont.edu echo "P12: jarthur -> shell" (echo "::" ; echo "Request-Remailing-To: hh(a)pmantis.berkeley.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P13: jarthur" ebrandt(a)jarthur.claremont.edu echo "P13: jarthur -> pmantis" (echo "::" ; echo "Request-Remailing-To: elee7h5(a)rosebud.ee.uh.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P14: jarthur" ebrandt(a)jarthur.claremont.edu echo "P14: jarthur -> rosebud" (echo "::" ; echo "Request-Remailing-To: hh(a)soda.berkeley.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P15: jarthur" ebrandt(a)jarthur.claremont.edu echo "P15: jarthur -> soda" (echo "::" ; echo "Request-Remailing-To: hh(a)pmantis.berkeley.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P16: shell" hfinney(a)shell.portal.com echo "P16: shell -> pmantis" (echo "::" ; echo "Request-Remailing-To: elee7h5(a)rosebud.ee.uh.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P17: shell" hfinney(a)shell.portal.com echo "P17: shell -> rosebud" (echo "::" ; echo "Request-Remailing-To: hh(a)soda.berkeley.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P18: shell" hfinney(a)shell.portal.com echo "P18: shell -> soda" (echo "::" ; echo "Request-Remailing-To: elee7h5(a)rosebud.ee.uh.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P19: pmantis" hh(a)pmantis.berkeley.edu echo "P19: pmantis -> rosebud" (echo "::" ; echo "Request-Remailing-To: hh(a)soda.berkeley.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P20: pmantis" hh(a)pmantis.berkeley.edu echo "P20: pmantis -> soda" (echo "::" ; echo "Request-Remailing-To: hh(a)soda.berkeley.edu" ; echo "" ; echo "::" ; echo "Request-Remailing-To: me@mysite" ; echo "" ; cat .PingFile) | mail -s "P21: rosebud" elee7h5(a)rosebud.ee.uh.edu echo "P21: rosebud -> soda" P.S. I almost forgot to edit out my real address. Anonymity is NOT a thing to rely on, if you don't keep changing names or use encrypted remailers. Already over seven "Mr. Remailer Operator"s probably know who I am. This was why I didn't use these remailers till I HAD to. At least I still wont get 5AM phone calls from people asking me to send them PGP on a floppy, after they finger me.

1 0

Superping Script
by nobody＠VIS.ColoState.EDU 17 Dec '03

17 Dec '03

This message is from an experimental anonymous remailer. For information, send mail to nate(a)vis.colostate.edu ----------------------------------------- Is it possible to get a copy of the SuperPing Script??? anon -----------------------------------------

2 1

Re: MacPGP BAD on soda.berkeley!!!
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

> Re: encrypted valium Just wait until Chemical CAD/CAM becomes available - shipping valium will be protected by the First Amendment, the data police will be competing with the drug police to confiscate your computers, and LD wibe ranting that drug dealers are using crypto remailers for both payments and product delivery :-)

2 1

Anonymous Remailers
by Matt Thomlinson 17 Dec '03

17 Dec '03

Yes, those of us who run remailers sometimes run them from university accounts. Such was my case. The university of washington (without knowing it :) supported remailing at one time, through phantom(a)mead.u.washington.edu. I am not root here (and never will be!), and such access is not needed to set up a remailer. Instead, Hal Finney has written up a few remailer scripts which depend only on your ability to create a .forward file, and have perl available. (oh, also about.. ~1Mb for all of the scripts + PGP + keyring). There were no problems with my remailer and it was well-used. No scripts of incoming or outgoing mail were kept. The remailer lived for a few months last year, which actually isn't bad when you consider it was based on a student account with a nazi-like administration. :) The death-blow was a remailer target complaining to me about someone sending unsolicited mail to them through my remailer. Instead of replying to my account (phantom@mead), they saw that the header had "nobody@mead" on it, and when mail to that address bounced, they sent to postmaster. The mail to the postmaster was very polite and simply asked that the mail cease, either by taking away the remailing ability from the perpetrator or blocking the destination address. Of course, the postmaster didn't know anything about this, and when he looked into it, he was quite suprised. I was able to keep it limping for about another week. I got support from a few cypherpunks around here, people on the list like JDraper, TMay, etc., and from others including Whit Diffie, Neal Koblitz, etc. I might have been able to fight the shutdown, but I saw it as a losing battle. In any case, no, it takes no special abilities to run a remailer; everything is pretty much packaged for ease-of-use. Every administration is going to act differently if/when/how they find out about it. Make your own judgement, I suppose. mt Matt Thomlinson Say no to the Wiretap Chip! University of Washington, Seattle, Washington. Internet: phantom(a)u.washington.edu phone: (206) 548-9804 PGP 2.2 key available via email or finger phantom(a)hardy.u.washington.edu

3 3

Anonymous remailers
by nobody＠shell.portal.com 17 Dec '03

17 Dec '03

I have a question for all the 'punks who are running remailers. I've noticed that most of you run the remailers from your accounts at various colleges & universities. I want to know what kinds of reactions you got from the system administrators. Did they ask lots of questions, give you a hard time about it, or not care? (or do they not know?) Has anyone been forced to shut down their remailer? I know some guys got hit with a lot of flack over some pgp keyservers, has anything similiar happened with the remailer system? Also, if I was to try running a remailer, would I need my own machine, or is there some way I could get the school's computers to run the remailer for me? or does it vary by system?

2 1

Requiring Digital Signatures
by Mike Ingle 17 Dec '03

17 Dec '03

Some have suggested that a future network might require DSS signatures and make it illegal to send unsigned data. This would be a Bad Thing. I found this on comp.dcom.fax. It seems that a similar law is already in effect for fax machines. It is illegal to send a fax without an identification line on it! This is very similar to requiring a digital signature on a message, and sets a bad precedent. LO> The manual to my fax software quotes the following: LO> LO> FCC regulation part 68, Section 68.318 (c) (3) states that it is LO> illegal to send a fax in the U.S. which does not contain the LO> following sender information: LO> "...in a margin on the top or bottom of each transmitted page or LO> on the first page of the transmission, the date and time it is LO> sent and an identification of the business, other entity, or LO> individual sending the message and the telephone number of the LO> sending machine of such business, other entity or individual." LO> LO> (from the FaxWorks 3.0 manual, page 8, (c) SofNet, Inc.)

1 0

Humor?
by tcmay＠netcom.com 17 Dec '03

17 Dec '03

Did you hear the one about about the remailers that had so much traffic the remailer scripts couldn't keep up? --- Seems it was a case of "Perl Jam." (Inspired by writing my last post about Matt Thomlinson's Seattle site and thinking about the Seattle sound. I'm not a fan, particularly. Eric Hughes let me tape a CD of either Pearl Jam or Nirvana--I can't tell which is which.) --Tim -- .......................................................................... Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power:2**859433 | Public Key: PGP and MailSafe available.

2 1

Re: Superping Script
by nobody＠rosebud.ee.uh.edu 17 Dec '03

17 Dec '03

Anon asked for my "Superping Script". I was so embarassed by what I was calling a script that I wrote a real one. The magic perl command turned out to be 'system'. Duh? I am using the csh shell, if that matters. -Xenon <na38138(a)anon.penet.fi> #!/usr/bin/perl # SuperPing: Ping Cyperpunk remailer connections. # Brought to you by Xenon <na38138(a)anon.penet.fi>. # Thanks to Alan Barrett for teaching me some perl. # Replace $Rm[$First] below with YOUR address to test this! # Warning: outputs ~40 e-mails at a time. May give "too # many processes" error towards the end if you haven't killed # all of your stopped jobs. Increase the sleep(sec) time if needed. # Will also function as a convenient method to shut down all # remailers at once by making .PingFile 500K instead of 1K. # Not recommended if you value your life ;-). # List of remailers (not complete). # Make any line a comment to remove that line's remailer. @Rm = ( "catalyst(a)netcom.com", "hh(a)cicada.berkeley.edu", "remailer(a)dis.org", "ebrandt(a)jarthur.claremont.edu", "remailer(a)merde.dis.org", "hh(a)pmantis.berkeley.edu", "elee7h5(a)rosebud.ee.uh.edu", "hfinney(a)shell.portal.com", "hh(a)soda.berkeley.edu", ); #Nicknames for output and subject lines. @Nick = ( "catalyst", "cicada", "dis.org", "jarthur", "merde", "pmantis", "rosebud", "shell", "soda", ); #Strings, since lines got too long below. $A = "(echo \"::\" ; echo \"Request-Remailing-To: "; $B = "; echo \"\" ; echo \"::\" ; echo \"Request-Remailing-To: "; $C = "ndw1(a)columbia.edu\" ; echo \"\""; $D = " ; echo \"\" ; cat .PingFile) | mail -s \"P"; foreach $Sec (0..$#Rm) { foreach $First ($Sec+1..$#Rm) { $Num++; system "$A$Rm[$Sec]\"$B$C$D$Num < $Nick[$First]\" $Rm[$First]"; print "P$Num $Nick[$First] > $Nick[$Sec]\n"; sleep(1) } } # .PingFile contains this: #:: #Request-Remailing-To: myadress # #Ping! #-----Begin Test----- #Test #-----End Test----- #Output (first few lines) looks like this: #P1 cicada > catalyst #P2 dis.org > catalyst #P3 jarthur > catalyst #P4 merde > catalyst #P5 pmantis > catalyst #P6 rosebud > catalyst #P7 shell > catalyst #P9 dis.org > cicada #P10 jarthur > cicada # Sample pings as received later: # 1 catalyst-remailer(a)netcom.com Mon Jan 31 08:10 20/757 P7 < shell # 2 catalyst-remailer(a)netcom.com Mon Jan 31 08:22 20/759 P6 < rosebud # grep Subject: /usr/spool/mail/n/name | sort -tP +1 -n # will give you a list of received mail, in order of Ping numbers, # where /n/name is your system's mail folder.

1 0