December 2003 - cypherpunks-legacy

Re: Penet spoofing
by Tommy the Tourist 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- From: Ezekial Palmer <an60011(a)anon.penet.fi> Date: Sat May 14 12:30:09 EDT 1994 To: cypherpunks(a)toad.com From: Jim Gillogly <jim(a)rand.org> I don't know if there's an error msg if you try to send mail with the wrong password. Yes, there is. Zeke -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLdT8shVg/9j67wWxAQHKzwP7BLKiwMrC4LUWTmLFjW70DqzEMSG2+OTQ XDLjkqiGJv240MSLoBI2UqgXNBO5icVeQXSz2xaa5FAaudwY4lOnGjqPSeB4Z3ya uGYgyXdsSuJlIviQpXgD0UDjtrFSxeTKHSDVsnBDuDbMLewLY5T+go1bh9/bhzgh NSUwaL1T84Q= =4Xxm -----END PGP SIGNATURE----- ------------ To respond to the sender of this message, send mail to remailer(a)soda.berkeley.edu, starting your message with the following 7 lines: :: Response-Key: ideaclipper ====Encrypted-Sender-Begin==== MI@```%1S^P;+]AB?X9TW6\8WR:&P&2'K1RX_1#HLFQ.-\Y2SL(FRFTXZ`$L` LIC)?Y"CM!W4+'V9W#Y247Y^%FN@\0V"E9K"J##7W@HPFU>1[-WCO@!I5QS\` ====Encrypted-Sender-End====

1 0

Re: ADMIN: on penet and on paranoia
by Black Unicorn 17 Dec '03

17 Dec '03

-> THE TRUTH COMES OUT! T.C. May is really LD! ____ Robert A. Hayden <=> hayden(a)krypton.mankato.msus.edu \ /__ -=-=-=-=- <=> -=-=-=-=- \/ / Finger for Geek Code Info <=> Political Correctness is \/ Finger for PGP 2.3a Public Key <=> P.C. for "Thought Police" -=-=-=-=-=-=-=- (GEEK CODE 1.0.1) GAT d- -p+(---) c++(++++) l++ u++ e+/* m++(*)@ s-/++ n-(---) h+(*) f+ g+ w++ t++ r++ y+(*) <- Great, Now I'll have to ammend my complaint.... :) -uni- (Dark)

1 0

Re: Penet Spoofing
by Karl Lui Barrus 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I would like to add that I have evidently been a victim of "penet spoofing" as well, since I too received the following message from penet: >You have sent a message using the anonymous contact service. >You have been allocated the code name anXXXXX >You can be reached anonymously using the address >anXXXXX(a)anon.penet.fi. Somebody is trying to be clever and forging mail to figure out my penet id (surprise, I don't have one, but now I do). When I got this message, I immediately sent off in an attempt to set my password. I haven't heard back yet, so I don't know if it was successful or not. If the password set fails, then somebody has taken over anXXXXX and I'll be mailing Julf in order to get it removed. Whoever wants to know my penet id... I'll save you some trouble: an4609 - my old (now expired) account elee9sf(a)menudo.uh.edu an5022 - my old (now expired/locked) account barrus(a)tree.egr.uh.edu Now, of course, I have a new one, which somebody has thoughtfully started up for me. Karl Barrus klbarrus(a)owlnet.rice.edu -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLdUVG4OA7OpLWtYzAQFZuwP/aEHakMABw1IZhpgvW+VxPgzfJMxNsSD7 MflnwJr70NjZmk22QXgRhNGBMaiZQJHK+pYZZWS+yZihcLZyHKM722ya0FV3SXoe vlJoKxJPBAjkmq98Z7Yqo6Z2k2ZU+ODQ79l4xtL2tSpt0vheVLOVYSJkv7pSbehp mo5EaSNCHZE= =m3Ai -----END PGP SIGNATURE-----

3 2

Re: Penet spoofing
by Karl Lui Barrus 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Heh, I forgot the mention my new ID at penet, which was created by somebody trying to figure out mine: >You have sent a message using the anonymous contact service. >You have been allocated the code name an97875. >You can be reached anonymously using the address >an97875(a)anon.penet.fi. Since whoever forged the post creating this id knows that an97875 corresponds to klbarrus(a)owlnet.rice.edu, I have no desire to actually use this account for posting messages. Karl Barrus klbarrus(a)owlnet.rice.edu -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLdUW54OA7OpLWtYzAQG75wP/QqXIk9Dtj5LcUmTn9pMy71QPuzpkQlxa +7ZqaAStCQ0qhljxDDLokxROpAsQTU60A9sJ+urb/hsvGreu5trvOr4wA6f3HxJ0 3kMxaqjh1WbyNTtec0/xfRw6FPp+D2OeACSDwcfn5IMWNyxmYjXiN/MOOh6x1ryK UTwzCbknBWs= =mRu7 -----END PGP SIGNATURE-----

1 0

email server problem
by nate＠VIS.ColoState.EDU 17 Dec '03

17 Dec '03

Three people named "Duncan" "Matt" and "Michael" were not able to get filelists from my server because the script was not looking for their address like it was supposed to. This problem has now been fixed, and if you could try again, I would be thankful. -nate -- +-----------------------------------------------------------------------+ | Nate Sammons <nate(a)VIS.ColoState.Edu> <nate(a)yuma.ANCS.ColoState.Edu> | | Colorado State University Computer Visualization Laboratory | | Data Visualization/Interrogation, Modeling, Animation, Rendering | +-----------------------------------------------------------------------+

1 0

Re: Message Havens
by Hal 17 Dec '03

17 Dec '03

Would it have to be public knowledge which message havens a given pseudonym monitors? Suppose I want to get mail to Pr0duct Cypher; don't I have to know which haven(s) to use? If we have only a (few?) hundred people on each haven then this narrows down the pool of possible real user who are behind that pseudonym considerably. Hal

3 2

Auto moderation
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

ecarp(a)netcom.com (Ed Carp): > [ auto moderators ] > > Sounds like a very easy scheme to break. Say I suddenly decide that I > > don't like your posts or Tim Mays posts. I can get you kicked off by > > using anonymous accounts to say that you're a nuisance. It seems to me > > It's not as easy as you might think. How many anonymous accounts can you get? > There are only so many anon servers, and for each anon account you have to have > a different real account, all it buys you is your vote registers twice Do you know how easy it is to fake an address? I occasionally telnet to port 25 and talk SMTP directly, to avoid spooling, but I have to type in the address I want the mail to appear from. There's no way of ensuring that I type in my real address, or _any_ real address at all for that matter. Digitally signed voting? Only works if you restrict yourself to 'known' voters. Net identities are very easy to fake or create. > Ed Carp, N7EKG/VE3 ecarp(a)netcom.com 519/824-3307 > Finger ecarp(a)netcom.com for PGP 2.3a public key an88744(a)anon.penet.fi That's an _anonymous_ address, right !? -----------------^^^^^^^^^^^^^^^^^^^^^^ ------------------------------------------------------------------------------- Rishab Aiyer Ghosh rishab(a)dxm.ernet.in Voicemail +91 11 3760335; Vox/Fax/Data 6853410 H-34C Saket New Delhi 110017 INDIA The National Short-Sleeved Shirt Association says: Support your right to bare arms! -------------------------------------------------------------------------------

2 2

Moderators, graders and reputations
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

ph(a)netcom.com (Peter Hendrickson): > Moderation doesn't have to be based in censorship. It can be based > on advice. > > Instead of picking random list receivers to moderate, readers should > choose their own moderators. > > As a moderator reads the latest messages on the list, he or she can > mark each one as junk or not junk. This causes advice messages to be > sent to their subscribers. The subscribers can use mail programs which This is getting closer to a possible working reputation system: Anyone can post their opinion of a particular message, using some standardized grading system, onto the list. These 'grading' posts refer to the 'graded' posts _without_ including the body of the messages. This reference could be to the message id, for instance. The reader's mail software understands 'grading' posts and extracts the grade for any actual post to the same list. The 'grading' posts are not shown to the reader; their votes are attached to the other posts, allowing the reader to decide whether or not to read a particular post based on the attached grades of others. Readers can create their own weightages for the opinions of graders. As anyone can be a grader, a reader has the option of receiving a weighted grade from a large sample of the list. Every grader doesn't then have to look at every post in detail - presumably each post will be read carefully by at least _one_ of them. Grades can, over time, transform into reputations of the posters themselves, at least as far as legible writing is concerned ;) Bugs: the time lag between graders and readers. This might get averaged out over a number of posts; the "bulk" priority causes delays in any case. Besides, I've noticed that posts tend to get answered or thought about within 2-3 days, rather than instantly. Comments? ------------------------------------------------------------------------------- Rishab Aiyer Ghosh rishab(a)dxm.ernet.in Voicemail +91 11 3760335; Vox/Fax/Data 6853410 H-34C Saket New Delhi 110017 INDIA The National Short-Sleeved Shirt Association says: Support your right to bare arms! -------------------------------------------------------------------------------

1 0

Re: BOYCOTT AT&T
by koontzd＠lrcs.loral.com 17 Dec '03

17 Dec '03

>From: John K Clark <johnkc(a)well.sf.ca.us> > >It seems that the Government of the USA has been interfering >with the free market to reward AT&T , I don't know how much >AT&T's support of the Clipper Chip had to do with it but I'm >sure it didn't hurt. In the May 13 New York Times: > > >The AT&T Corporation's winning bid for a $4 billion contract to > >modernize Saudi Arabia's phone system ,WHICH HAD BEEN SUPPORTED > >BY HEAVY CLINTON ADMINISTRATION LOBBYING , was hundreds of > >millions of dollars higher than other bids [...] The huge-scale > >deal, which was announced on Monday is the biggest > >telecommunications contract in history. > >I think it's important for company's to realize there is also a >downside for supporting Clipper. As a start ,I don't see how any >self respecting Cypherpunk or Extropian could use AT&T as their >personal long distance carrier . AT&T 's not the only company in >bed with the government over Clipper (INTEL) but it is the most >visible and the easiest to boycott, MCI and Sprint do a fine >job. If 5% of the Internet users quit AT&T it would make other >companies think twice before they endorse Clipper. I still have AT&T as a long distance carrier. I have contacted the marketing guys for the clipper phone repeatedly, it doesn't seem to be doing to well, they are desparate for sales leads. This is a subsidiary called AT&T Surety Communications, base in North Carolina. One has to wonder how much damage you can do to them by boycotting AT&T long distance. It would be much more interesting to provide more cost effective competition. One of the TSD-3600c costs $1050, plush the phone interface module. This is more than the $947 for a videophone! There may be a niche market in modifying clipper phones to cure the LEAF information leak as well. The single oddest thing about the announcement, was that they were talking about spending the equivalent of $25K for each new phone subscriber in Saudi Arabia, and still only doubling the number of phone subscribers. Where the heck does all that money go?

1 0

Re: ADMIN: on penet and on paranoia
by Hal 17 Dec '03

17 Dec '03

Paranoia certainly got a boost here, though, by the recent and still unexplained emptying of the subscriber list. Was this actually, as many have speculated, a malicious action by someone taking advantage of the majordomo software, or was there a more prosaic explanation? Or is there no way for even the list managers to know? Clear information is one of the best ways to dispell paranoia. Hal

2 1