December 2003 - cypherpunks-legacy

Re: Defeating untrustworthy remailers?
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"wlkngowl(a)unix.asb.com" "Deranged Mutant" 7-FEB-1996 00:44:18.29 >Here's another idea (don't laugh): to set up a system where mailing lists and newsgroups have public keys that you can encrypt directly to. Advantage for anonymous mail is that if a remailer is untrustowrthy, there's still some security in the final remailing of the document. ------------------ The newsgroups part of the idea has the problem that you've got to have either a centralized place from which the newsgroup is run that has the private key (a problem for controversial newsgroups, which are precisely the ones to which people will tend to use remailers to post to), or lots of places having the private key (an obvious problem from the cryptographic standpoint). -Allen

1 0

anti-CDA graphic
by David K. Merriman 17 Dec '03

17 Dec '03

I've put Gordon Campbell's anti-CDA graphic up on the CP ftp site, in the incoming directory. File name is nobabies.jpg Dave Merriman------------------------------------------------------------- "It is not the function of our Government to keep the citizen from falling into error; it is the function of the citizen to keep the Government from falling into error." Robert H. Jackson (1892-1954), U.S. Judge <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> My web page: http://www.geocities.com/CapitolHill/1148

1 0

Re: Reasons in support of crypto-anarchy WAS Re: Why am I wrong?
by lunaslide＠loop.com 17 Dec '03

17 Dec '03

>At 03:43 AM 2/7/96 -0800, lunaslide(a)loop.com wrote: >> Now, in respose to Mr. Bell. As I stated above, I found your proposal >> [assasination politics] absolutely facinating, to say the least. >> [...] >> However, I must point out, and I'm sure you realize this, that it would not >> be adopted by the public at large for some time to come, or more likely >> never. There are too many people who believe that it is wrong to take a >> life for any reason and that no action justifies death. > >This, of course, explains why war is impossible these days and why the public >is outraged whenever the government executes a murderer. > > :-) A good point, however, people do get the strange idea that killing someone in war is not murder. They also get the idea that when the govt. executes someone, that that is also not murder. I know that that is a personal opinion, but I know also that I am not alone in my belief and to overcome the number of people who agree with me to make a system such as Mr. Bells' feasable would not be possible (I hope!) If such system did succeed, the citizens who spoke out against it on an ethical basis would find themselves targets! I do hope that those who do agree with the death penalty are not so callous that they would execute their fellow citizens for disagreeing with them. We are, after all, fellow citizens of this country. We would be right back to where we started, an Orwellian society living in the face of fear for what we believe, and that is *not* freedom. Respectfully, Jeff Conn lunaslide On the meridian of time there is no injustice, only the poetry of motion creating the illusion of truth and drama. Henry Miller -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQBvAzD3EHEAAAEDAMVwZzXozPjX18mCenA5fJsdWZXcrhJCxPR+SoVCmR7d4ZVU mwITzPTHo/GyLvJrWyk5YdhheczyY2VSawaMrCN/nWA7K9lwAylbKyPxqBhRYJ3C 2wi2uD5LY2wypNOQyQARAQABtB5KZWZmIENvbm4gPGx1bmFzbGlkZUBsb29wLmNv bT6JAHUDBRAw+1bqS2NsMqTTkMkBAQkTAwCersFbCyk8O0MbGlNcZDAe24CLEWQ0 0C5EHni33W76UsG1bybcLsuMH6HVwLF7IqZivnzc7wkujYPQvCqn8HEYYTld8V9V Cou4dOvA8kV7rHvAn/LuLx7DRruLFrRoPSk= =OIT9 -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: Need a "warning" graphic of some kind for CDA
by tomservo＠access.digex.net 17 Dec '03

17 Dec '03

>At 01:48 PM 2/4/96 EST, Greg Broiles wrote: >How about the circle-slash "no" symbol superimposed on the Constitution? Hmm, I kind of went the other way. I have a gif of a baby carriage in the standard red circle and slash. Anyone who wants it, feel free to use it. Resize it, reshape it, share it with your friends. (I feel much better about buying all that clip art now.) It's at: http://www.access.digex.net/~tomservo/gif/no_kids.gif Other suggestions? Feel free to e-mail me. I'll dig up what I can. (Next up: the "PGP-friendly" logo. . .) Scott -- Scott Fabbri tomservo(a)access.digex.net Later. Later. I'm watching hockey. Finger for PGP key.

1 0

Type I capabilities added to mix@zifi.genetics.utah.edu
by zinc 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- howdy folks, the purpose of this message is to announce the addition of Type I capabilities to the remailer at mix(a)zifi.genetics.utah.edu. mix(a)zifi.genetics.utah.edu now supports the standard cpunk commands. here's the section of the help file that pertains to the Type I remailer, the whole help file available by sending a message to mix(a)zifi.genetics.utah.edu with Subject: remailer-help. the Type I remailer is Matt Ghio's code. all commands are supported EXCEPT usenet posting which would probably just get me in trouble. the pgp key for the remailer is included in the message below. in addition, you can obtain the key by fingering remailer(a)zifi.genetics.utah.edu. the whole help file is also available by fingering mixmaster(a)zifi.genetics.utah.edu. thanks, - -patrick finerty Part II - Type I remailer features I have an automated mail handling program installed here which will take any message with the proper headers and automatically re-send it anonymously. You can use this by sending a message to mix(a)zifi.genetics.utah.edu, with the header Anon-To: containing the address that you want to send anonymously to. (Only one recipient address is permitted.) If you can't add headers to your mail, you can place two colons on the first line of your message, followed by the Anon-To line. Follow that with a blank line, and then begin your message. For Example: > From: joe(a)site.com > To: mix(a)zifi.genetics.utah.edu > Subject: Anonymous Mail > > :: > Anon-To: beth(a)univ.edu > > This is some anonymous mail. The above would be delivered to beth(a)univ.edu anonymously. All headers in the original message are removed, with the exception of the Subject (and Content-Type, if present). She would not know that it came from Joe, nor would she be able to reply to the message. However, if Beth suspected that Joe had sent the message, she could compare the time that the message was received with the times that Joe was logged in. However, this problem can be avoided by instructing the remailer to delay the message, by using the Latent-Time header: > From: joe(a)site.com > To: mix(a)zifi.genetics.utah.edu > Subject: Anonymous Mail > > :: > Anon-To: beth(a)univ.edu > Latent-Time: +1:00 > > This is some anonymous mail. The above message would be delayed one hour from when it is sent. It is also possible to create a random delay by adding an r to the time (ie +1:00r), which would have the message be delivered at a random time, but not more than an hour. Another problem is that some mailers automatically insert a signature file. Of course, this usually contains the senders email address, and so would reveal their identity. The remailer software can be instructed to remove a signature file with the header "Cutmarks". Any line beginning with the same text at in the cutmarks header, and any lines following it will be removed. > From: sender(a)origin.com > To: mix(a)zifi.genetics.utah.edu > Subject: Anonymous Mail > > :: > Anon-To: recipient(a)destination.com > Cutmarks: -- > > This line of text will be in the anonymous message. > -- > This line of text will not be in the anonymous message. You can add additional headers to the output message by preceeding them with ## > From: chris(a)nifty.org > To: mix(a)zifi.genetics.utah.edu > Subject: Nifty Anon Msg > > :: > Anon-To: andrew(a)hell.edu > > ## > Reply-To: acs-314159(a)chop.ucsd.edu > > A Message with a reply address. By seperating messages with cutmarks, you can send more than one message at once: > From: me@mysite > To: mix(a)zifi.genetics.utah.edu > Subject: message 1 > > :: > Anon-To: recipient1(a)site1.org > Cutmarks: -- > > Message one. > -- > :: > Anon-To: recipient2(a)site2.org > > ## > Subject: message 2 > > Message two. The two messages will be delivered seperately. For added security, you can encrypt your messages to the remailer with PGP. The remailer software will decrypt the message and send it on. Here is the remailer's public key: - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzEY6mQAAAEEAMqdj6BCAb95C7KDM7UWTieGdCWVNmI8sKcDdX5JIyBWGo7Y hKnxF3OgO+sTxjeeabCG8xWHNe9w8CzXPbOBE3soEedvY+FqaRBYdO8a3Eex4nSp WomnKtcKcBet7G93PErGf4srEwR1OqMRsi+1CbDayNSu6IDU2P69KCmvu47hAAUR tCpsZWFkIHJlbWFpbGVyIDxtaXhAemlmaS5nZW5ldGljcy51dGFoLmVkdT6JAJUD BRAxGOraTdCj+UbQAfkBAVu9A/4kPaTN84+giuDkeiqbwTRMGAUQZ3N65hSR6snt cQp3cvpY30d4i8r3PiBR+5LUAsO/vrrGGyW106X/PHKQpb2lJ5SbcoJ+fMhMcBFc /UPxkwJGbcc7ftBkrIUNVetPik8PoRTlzgbBSypv97HiApYdZc6fKr2NuLv8OhmG fdWcEYkAlQMFEDEY6oX+vSgpr7uO4QEBoUMD+wfpS5YhYHfVp37iklOSYhQdzpcl pefg/RxgroWMWMzLYCeMvcoqlCIEznfYA8fSEPsmVDH22lQvZaLSbXM5WQ1gpZsE 6qR5SicFI9oX5ciVa2M+KgH3sxwS9TDFqcWBSgSnWPHzDT1oUBI/PLI2k/FGN5Hq rbYH2gPobLez9N9z =ms21 - -----END PGP PUBLIC KEY BLOCK----- To utilize this feature, create a message with two colons on the first line, then the Anon-To line, then any other headers, such as cutmarks or latency, then a blank line, and then the message. Encrypt this with the remailer's public key. Then send it to the remailer, adding the header "Encrypted: PGP". If you forget this, the remailer won't know that it needs to be decrypted. Also be sure to use the -t option with PGP, or the linefeeds might not be handled properly. > To: mix(a)zifi.genetics.utah.edu > From: me(a)mysite.org > > :: > Encrypted: PGP > > -----BEGIN PGP MESSAGE----- > Version: 2.3a > > hIkCuMeAjnwmCTUBA+dfWcFk/fLRpm4ZM7A23iONxkOGDL6D0FyRi/r0P8+pH2gf > Hai4+1BHUhXDCW2LfLfay5JwHBNMtcdbgXiQVXIm0cHM0zgf9hBroIM9W+B2Z07i > 6UN3BDhiTSJBCTZUGQ7DrkltbgoyRhNTgrzQRR8FSQQXSo/cf4po0vCezKYAAABP > smG6rgPhdtWlynKSZR6Gd2W3S/5pa+Qd+OD2nN1TWepINgjXVHrCt0kLOY6nVFNQ > U7lPLDihXw/+PPJclxwvUeCSygmP+peB1lPrhSiAVA== > =da+F > -----END PGP MESSAGE----- Any unencrypted text after the PGP message is also remailed. This is to allow sending to someone who is anonymous. If you create a PGP-encrypted message to yourself via my remailer, and then you give it to someone, they can send you a message by sending the encrypted message to the remailer. The remailer will then decrypt it and send it to you. The message gets anonymized in the process, so the sender will need to include a return address if he wants a reply. Messages sent this way can be encrypted using the Encrypt-Key: feature. Any text following a line beginning with ** will be encrypted with this key. For example, if you put in your PGP message: > :: > Anon-To: you(a)yourhost.org > Encrypt-Key: your_password > > ** The appended message after the ** will be encrypted with the key "your_password", using PGP's conventional encryption option. Part III - Common Features Can mix(a)zifi.genetics.utah.edu post to News? No. News posting is not supported at this time. Abuse Policy: I consider the following to be inappropriate use of this anonymous remailer, and will take steps to prevent anyone from doing any of the following: - - Sending messages intended primarilly to be harassing or annoying. - - Use of the remailer for any illegal purpose. If you don't want to receive anonymous mail, send me a message, and I will add your email address to the block list. "Those that give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." -- Benjamin Franklin (1773) finger for PGP key zifi runs LINUX 1.3.57 -=-=-=WEB=-=-=-> http://zifi.genetics.utah.edu -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Processed by mkpgp1.6, a Pine/PGP interface. iQCVAwUBMRkfF03Qo/lG0AH5AQFJ9gQAly+8Jko2cikOh254fcl/j2/ts7S/hgeR IpLNGHbJlT4BQtFZT6JT/e6cuijVt5x2u6pBVphRpAp/om033mwgIcMwYnIvDMEo ijnxb6dskrdQf6zV9lRV7HJ4izIX85btI41e9VNDrIT/VVgsJ/MVPYYfB6xNdM9h UbzGt/x9I58= =AG+5 -----END PGP SIGNATURE-----

1 1

Re: Dealing with Credit Reporting Agencies...
by btmoore＠iquest.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 09:31 AM 2/5/96 -0600, Karl Ike wrote: >Attila: I'm not in the business of running or hiding. I'm just an average, >everyday working guy that doesn't like credit reporting agencies, what they >stand for or what they do for money. I didn't say that I was going to do >this. I just had the idea! I don't have the knowledge or the money to spend. >That doesn't mean that there is someone out there that would jump at the idea. > >I just don't like the idea that these assholes know more about me than my >mother and sell my private and personal information to anyone for big bucks. >My credit is fine, just ask my banker or better yet, my mom. > >I am assumming that you know far more people on the internet since I have >only been on for a month and have done three e-mail. I'm just suggesting to >get the idea out and someone will take the ball and run. Yes, they will be a >hunted man, but not a US citizen. Someone out there with a laptop and a >cellular, living on a cruise ship, just may enjoy the idea. > >Just me, Karl Well Karl, It seems I missed your idea/solution in this post, however, some of us figured this out some years ago... I begin a campaign almost 10 years ago of feeding the computers false information about myself. I never use the Social Insecurity Number assigned to me... I don't even give it to the Bank. This makes for some rather dicey situations. I rarely use my real name or give out my real phone number. At this point in my life... I have *NO* credit history. I currently have *NO* bank account. My goal is to be completely invisible to the system. Yes I have had a few glitches in this plan from time to time... but I continue to work on it. I just have never felt warm and fuzzy knowing that any government agency, business, or whoever can get my personal information off a computer could come knock on my door some dark night. If you're interested in fortifying your privacy, I can give you a few pointers. 1.) Go to your local DMV and inform them you've had a change of address. I selected a high rise apartment building with 15 floors and selected an address on a non-existant 23rd floor. Getting your Driver's License address changed should cost less than $10.00. 2.) Go find a company like "Mail Boxes Etc." and rent a mailbox. The cost is nominal compared to the added privacy and security. The distinction between a mailbox and a Post Office Box is with a mailbox you have an actual street address. You can receive deliveries from UPS and Federal Express at a mailbox. You can't at a P.O. Box. 3.) This part requires some skill... befriending a graphic artist is a good idea for this one. But what you need is a phony work identification. Pick a name! A couple of "Pass Port Photos" and some lamination and you're good to go. 4.) Take your new persona down to your local utility companies and get the serv- ice switched to the name of your new persona. Even get your phone switched and have the number non-published. You'll be pleasantly surprised from now on, everytime your phone rings, it will be someone you really want to talk to. 5.) Go down to your local Post Office and file a change of address form. Use the address of your mailbox. Remember, most companies that provide Mailbox service, will need to see your drivers license... which of course now has a non-existant address on it. You can take this as far as you want... Just doing these 5 things will give you a sense of comfort and security you've probably not had in a long time. How does this fit into cyperpunks and encryption? The philosophy is the same! What good is it encrypting your messages to ensure your privacy when everything else is exposed! It's a lot like an Ostrich burying his head in the sand to hide, but leaving all his good parts exposed! Benjamin T. Moore, Jr. btmoore(a)iquest.net (Jian #AJF IRChat) -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMRlexoSAJOVFNaChAQFBCQf8Drm04x2YT5gZb8cklwep1eBVKxOMyVzn /ZN3Tk+lKT05CAT0TCmHm+8oztqxWhgjMklYT228C5u4zvaF8ZrYvLxMp7RQPHvK D2fSKdMGMs+pPvJxPUC5UXssoIsBS0W+i4dO5jDIj/MkXM4JFHsDHvFqr9Q7FqwE Xr75lHjiNP4Gcv06WkVpJewJMaflP5zcrSam577/fbbCkYM6e4nhQPGdqdi83txM hzvCs8cHalPa9UJGuSbIZObe1fAUkQMsVqEomXe5HuBzukJigwdqj4IK9SJixTVx m0Fxf/W74j4lS1TXpqjCQoSD4EPRAleCYR6SFbqV/p0/cMYqv6kErA== =4HYS -----END PGP SIGNATURE-----

1 0

Re: digital cash &c.
by Jordan Hayes 17 Dec '03

17 Dec '03

> it _is_ anonymous ... And then: > can be refilled at ATMs You make a deposit or something? How does the transaction clear? When they finally look in the envelope, they credit the card? Or do you mean just 'anonymous' between the user and the merchant? /jordan

2 1

Re: POTP gets good press
by John Young 17 Dec '03

17 Dec '03

Robert "Bob" Harvey once hung out at BBN. Maybe he is the one who seeks slick-kill ripoff with aptly snake-oily-named Internet Security Corp., which may be telephoned at 617-863-6400. POTP was pummeled last fall on c'punks. For the latest lubrications see: URL: http://www.elementrix.co.il/home.html Audacious marketing, these NatSec privatizing firms, and the log-rollers for USMA and SAIC, preaching dire threats, promising if-you-knew-what-we-knew security, info-warrioring fundamentalism.

3 2

personal web proxy?
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Does anyone know whether there's a freely available web proxy available anywhere? Even a "personal" one somewhere on my ISP's UNIX box would be a simple way to beat superficial logging/resolution of my static IP. Something like the Nutscapify or Canadianizer proxies, minus all the blinking and "hoser, eh?" stuff. Thanks.

2 1

Re: Need a "warning" graphic of some kind for CDA
by Greg Broiles 17 Dec '03

17 Dec '03

At 01:48 PM 2/4/96 EST, you wrote: >"David K. Merriman" <merriman(a)arn.net> writes: >> >Now that we all have web pages that are naughty and might be seen by >> >little children, I'd like to hve some kind of a graphic that can >> >universally be seen as a "Warning: The following material is unsuitable >> >for children and close-minded twits". (or words to that effect). >> >> Hmmmmm. Maybe a doll with an international 'no' sign superimposed? > >Either the 'no' sign (red crossed circle) or a wide red cross over one of: > rattle > baby bottle / pacifier > disposable diapers (with contents visible) > safety pin? How about the circle-slash "no" symbol superimposed on the Constitution? -- "The anchored mind screwed into me by the psycho- | Greg Broiles lubricious thrust of heaven is the one that thinks | gbroiles(a)netbox.com every temptation, every desire, every inhibition." | -- Antonin Artaud |

2 1