December 2003 - cypherpunks-legacy

Re: "alt.cypherpunks" Newsgroup vs. Mailing List?
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

> Bad idea, it would simply mean that every kook on USEnet would add > alt.cypherpunks onto the crossposting line. We would have black helicopters, gun > loons, Waco Wako's, Loonytarians and turkish government propaganda spamming > forever. And cancel-messages from Co$ ... Hadmut

1 0

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail, which is available at: ftp://ftp.csua.berkeley.edu/pub/cypherpunks/premail/premail-0.33.tar.gz For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)extropia.wimsey.com> cpunk pgp special"; $remailer{"portal"} = "<hfinney(a)shell.portal.com> cpunk pgp hash"; $remailer{"alumni"} = "<hal(a)alumni.caltech.edu> cpunk pgp hash"; $remailer{"bsu-cs"} = "<nowhere(a)bsu-cs.bsu.edu> cpunk hash ksub"; $remailer{"c2"} = "<remail(a)c2.org> eric pgp hash reord"; $remailer{"ideath"} = "<remailer(a)ideath.goldenbear.com> cpunk hash ksub reord"; $remailer{"hacktic"} = "<remailer(a)utopia.hacktic.nl> cpunk mix pgp hash latent cut post ek"; $remailer{"flame"} = "<remailer(a)flame.alias.net> cpunk mix pgp. hash latent cut post ek reord"; $remailer{"rahul"} = "<homer(a)rahul.net> cpunk pgp hash filter"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord"; $remailer{"syrinx"} = "<syrinx(a)c2.org> cpunk pgp hash cut reord mix post"; $remailer{"ford"} = "<remailer(a)bi-node.zerberus.de> cpunk pgp hash ksub"; $remailer{"hroller"} = "<hroller(a)c2.org> cpunk pgp hash mix cut ek"; $remailer{"vishnu"} = "<mixmaster(a)vishnu.alias.net> cpunk mix pgp hash latent cut ek ksub reord"; $remailer{"crown"} = "<mixmaster(a)kether.alias.net> cpunk pgp hash latent cut mix ek reord"; $remailer{"robo"} = "<robo(a)c2.org> cpunk hash mix"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"spook"} = "<remailer(a)spook.alias.net> cpunk mix pgp hash latent cut ek reord"; $remailer{"gondolin"} = "<mixmaster(a)gondolin.org> cpunk mix hash latent cut ek ksub reord"; $remailer{"rmadillo"} = "<remailer(a)armadillo.com> mix cpunk pgp hash latent cut"; $remailer{"ncognito"} = "<ncognito(a)gate.net> cpunk"; $remailer{"precip"} = "<mixmaster(a)mix.precipice.com> cpunk mix pgp hash latent cut ek reord"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. Use "premail -getkeys pgpkeys(a)kiwi.cs.berkeley.edu" to get PGP keys for the remailers. Fingering this address works too. News: the remailer list has been rewritten, and the new version is live! It should be more accurate, reliable, and faster than before. Penet is back up! Enjoy. remailer email address history latency uptime ----------------------------------------------------------------------- ford remailer(a)bi-node.zerberus.de -**-**++*--* 1:29:00 100.00% crown mixmaster(a)kether.alias.net -----++--+++ 51:47 99.99% syrinx syrinx(a)c2.org +++-+++-++++ 41:46 99.99% hroller hroller(a)c2.org ******+##### 1:06 99.99% precip mixmaster(a)mix.precipice.com +-++-+.-- 6:12:30 99.98% bsu-cs nowhere(a)bsu-cs.bsu.edu ++*+--_**#+# 16:52 99.98% robo robo(a)c2.org ******+##*## 1:07 99.97% spook remailer(a)spook.alias.net ----------- 2:16:14 99.95% alumni hal(a)alumni.caltech.edu *** **+*+### 3:07 99.93% portal hfinney(a)shell.portal.com +* *** #+### 3:08 99.81% hacktic remailer(a)utopia.hacktic.nl ****** ++*** 10:42 99.68% rmadillo remailer(a)armadillo.com ++++++++++ + 39:26 99.57% replay remailer(a)replay.com ***** ++*** 7:28 99.55% flame remailer(a)flame.alias.net +*+++ ++*** 27:46 99.42% vishnu mixmaster(a)vishnu.alias.net --+*- +++-+ 1:36:19 99.29% mix mixmaster(a)remail.obscura.com ___.+--._. - 12:46:51 98.98% ideath remailer(a)ideath.goldenbear.com -----.----+ 5:04:07 98.43% extropia remail(a)extropia.wimsey.com -.---.----- 5:56:37 97.65% c2 remail(a)c2.org ++++** *+ * 27:40 96.11% penet * ++ 4:40:10 95.85% rahul homer(a)rahul.net ******+*#+## 2:18 99.99% ncognito ncognito(a)gate.net **+*+*-++ 6:59 68.25% gondolin mixmaster(a)gondolin.org ---.--*-- 3:11:17 67.07% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

Re: "Hackers"-- brief review and anecdote...
by Peter Trei 17 Dec '03

17 Dec '03

> >I saw "Hackers" yesterday. It's not bad and its political sensibility is > >very cyberpunk. The ad campaign even uses the tag line, "Their only crime > >is curiosity." > It may not be a crime, but it's not nice to steal a title. You mean, like you stole it from Dale Luck's (duck@mit oz) stage play of the same name? I saw this (in an Off-Off-Broadway production), years before your book came out. Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation http://www.process.com trei(a)process.com

1 0

Re: Linking = Showing = Transferring?
by Duncan Frissell 17 Dec '03

17 Dec '03

At 08:33 AM 9/15/95 -0700, Charles Lewton wrote: >Not quite squashed, Duncan. Bullet placement (poor by some standards) >is all that prevented Mr. Weaver from croaking like his unfortunate wife. >She is said to have "pissed off" the feds but was not charged with a >single actionable item yet she remains quite dead. > >Unless I have missed something somewhere, no TLA is concerned in the slightest >with individual liberty. That notion should keep a rational person awake >nights. > >Chuck > In response to Chuck and Lucky, I can only say that the Weavers suffered 57% casualties (4/7) and 28% KIA (2/7). The Feds suffered .25% KIA (1/400). I don't think any Feds were merely wounded. They brought murder charges against two members of the group and lost. They settled wrongful death suits for $3.1 million. They also lost the publicity war. They had to change their procedures because of Ruby Ridge and Waco. They energized the opposition. The casualties were unfortunate but when facing force ratios of 57/1 or better, the outcome has to be considered a major victory for Randy Weaver. The case is a demonstration of modern conflicts in which litigation and publicity count as much as guns. On that field, the Feds don't hold all the cards. DCF "The libertarian and conservative coalition of the 'Right' is a low-maintenance coalition because its members mostly want to be left alone while the special interest group coalition of the 'Left' is a high-maintenance coalition because all of its members need to be given a vast dose of government cash daily."

2 1

Re: Anonymous WWW proxy Alpha release available
by Duncan Frissell 17 Dec '03

17 Dec '03

Thanks. What we now need is a proxy located in the US with good connections for performance. Does anyone know a good test page that reads back the info your browser is putting out so you can test proxies? DCF

2 1

Re: "Hackers"-- brief review and anecdote...
by Duncan Frissell 17 Dec '03

17 Dec '03

At 10:16 AM 9/18/95 -6, Peter Trei wrote: >> It may not be a crime, but it's not nice to steal a title. > >You mean, like you stole it from Dale Luck's (duck@mit oz) stage play of the same name? >I saw this (in an Off-Off-Broadway production), years before your book came >out. Steven knows titles can't be copyrighted. He was just expressing the wish that they had come up with their own title. I'm pissed because the sequel to Jurassic Park is stealing the title of Sir Arthur Conan Doyle's dinosaur novel "Lost World." Unfortunately, title-space is more limited than book-space. DCF

1 0

Code of Law
by anonymous＠robo.remailer 17 Dec '03

17 Dec '03

Financial Times, Sept 18, 1995. Code to deny the money launderer The International Bar Association will this week call for the establishment of a code of practice for lawyers worldwide to deny criminals access to legal services which facilitate money laundering. At the IBA's business law conference in Paris, which opens today, Professor Ross Harper, IBA president, will ask representatives from 167 bar associations to pass a motion supporting efforts to counter money laundering and for the creation of common professional standards on the issue. "We are anxious that there be no safe havens for the ill-gotten proceeds of criminal activities throughout the world," he said yesterday. Estimates put the amount of money laundered worldwide each year at more than 500 billion pounds. On such a scale it is possible for economies, world trade and global banking to be subverted by organised crime, the IBA says. The motion urges member bar associations to press their national governments to adopt the principal recommendations of the Financial Action Task Force on money laundering set up in 1989 by the Group of Seven industrialised countries and the European Commission. Robert Rice, London ----- Newsweek, Sept 25, 1995. A Law of Their Own: Extremists create do-it-yourself courts. One day last month Wichita District Attorney Nola Foulston looked at her copy of the Daily Record, a trade newspaper, and was stunned to read that she had been subpoenaed. She was ordered to appear in District Court and produce her license to practice law. If she failed to appear, the sheriff would be directed to arrest her. Her alleged crime: holding public office. The subpoena was an unofficial document drafted and filed by a local man who had been charged with a misdemeanor for burning trash without a permit. Angered by the government interference, he joined a growing number of disgruntled Americans who think they've found a better arbiter ofjustice. He went to a "Common Law court, " one of the latest incarnations of the extremist right. Foulston ignored the subpoena. "I don't practice in false courts," she says. But they're growing. Common Law courts have sprung up in at least 11 states in the farm belt and the West over the last year, organized by a cross section of people bent on directly challenging government. In living rooms, bingo halls and convention centers, dozens gather weekly to form juries, present evidence and issue kangaroo-court indictments, liens, arrest warrants -- and even death sentences. None of this has the force of law. The movement is based on a mixture of crackpot conspiracy theories and bizarre interpretations of the U. S. Constitution, the Bible and the Magna Charta. In brief, its leaders preach that Franklin Delano Roosevelt's "bank holiday" edict of 1933, which temporarily shut down the nation's banks, stripped the country of its safeguards against tyranny. "When you get to digging into what's going on today, you have a government operating outside the Constitution," says David Schechter, a court organizer. Court members keep in touch on the Internet, swapping information, posting meetings and organizing court sessions . They also vent their views in a Texas magazine called the AntiShyster. Mostly white men form Common Law courts; many come from the militia movement. Some are closely aligned with white-supremacy and anti-Jewish groups. "The basic idea behind the movement," says University of Oregon history professor Richard Brown, "is 'popular sovereignty,' that people are above the law. These people are alienated from the legal system. To some extent it sounds like they're also trying to settle personal scores." Nuisance filings: At times, the movement spills out of its bogus courts and into real ones. Followers have tied up courts and IRS offices with thousands of pages of nuisance filings. Common Law court "marshals" have even burst into federal courtrooms wearing official-looking badges and uniforms to serve their papers. Last year in Garfield County, Mont., 36 men and women formed a Common Law court and briefly occupied a courthouse. Another court offered $1 million bounties for the arrest of local officials and threatened to hang them. Garfield County Attorney Nick Murnion charged some members of the Common Law court with "criminal syndicalism," alleging that the group had advocated acts of violence for political purposes. One court member was sentenced to 10 years in prison. Others received smaller sentences. Some members try to use the rump courts to reverse real ones. Favorite targets are divorce decrees and foreclosure notices. "People who don't want to or can't pay their bills are turning to something that tells them they don't have to." says Kansas City attorney Berry F. Laws III, who has been targeted by Common Law courts because he forecloses on farm mortgages for the Farmers Home Administration. This is a serious business, but it has elements of unintended burlesque. William Ellwood of Columbus. Ohio, joined up after his small business collapsed and he found that he still owed the Internal Revenue Service $5,100. Frustrated and annoyed, he took to researching the Constitution and concluded that he was living in a land that infringed on his personal liberty. One thing led to another until he found himself ticketed by a police officer for weaving on a highway. His reading of the Constitution made the ticket null and void. "What we're saying," he patiently explains, "is the motor-vehicle laws are laws of commerce. I don't use the laws for private gain, so why do I have to be stopped?" Ellwood eventually paid the ticket, but not before he and a small group of like-minded citizens reached out to organizer Schechter. Now they meet every Tuesday to have their day in a court of their own making. Thomas Heath in Denver and Connie Leslie -----

4 3

Re: Netscape SSL implementation is broken!
by norm＠netcom.com 17 Dec '03

17 Dec '03

At 9:29 PM 9/17/95, Perry E. Metzger wrote: >Christian Wettergren writes: >> I guess we should send them the draft-ietf-security-randomness-00.txt >> asap. > >I thought that was an RFC by now. > >Perry It is! RFC 1750.

2 1

Good random seeds
by Adam Shostack 17 Dec '03

17 Dec '03

Since we can all see how badly time works, I'd like to point out that Will Price, author of the excellent Cryptdisk utility for the Mac, uses mouse movements to seed his PRNG. His code is available for a small fee, and I'd strongly suggest that people who need good, easy PRNs take a look at it, and also take a long look at RFC1750, randomness reccomendations for security (or something like that.) Adam -- "It is seldom that liberty of any kind is lost all at once." -Hume "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Netscape's random numbers
by Rich Salz 17 Dec '03

17 Dec '03

Congrats, nice job! The Netscape license explicitly prohibits decompiling (except where such prohibition is illegal). When this hits the media it will be important to avoid being tarred with the "hacker breaks rules and breaks in" brush. More subtly, it's probably a bad idea to call into question the overall business model of client binaries on the net. Instead, emphasize importance of open code, public reviews, ability to link in your own code that meets public specs, etc. All of these things the Internet was designed to do, and U.S. ITAR regulations are designed to prohibit (globally, anyway). And also that the bad guys will never play by the rules. And re-emphasize that solutions are possible, just that the U.S. government prevents them from being deployed in a global economy. Perhaps draw parallels to the recent Microsoft Word virus. /r$

2 1