December 2003 - cypherpunks-legacy

Re: Remailer Operator Liability?
by David Rosoff 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 12.58 PM 6/15/96 -0700, Hal wrote: >I am pretty sure it is illegal, CDA or not, at least if the material >is obscene rather than merely indecent. As Declan says, the issue is >accountability. If the remailer operator ends up being considered the >person who sent the mail, he could be in deep trouble. This is the problem I have with the whole issue. Obviously, since nyms use reply blocks, the remailer operators that are inside the reply block have no control over what is sent (PGP-encrypted) through their remailer. If I was to go out into the city, and tack up some porno on a building, maybe something where kids walk by, then someone would take it down, most likely, but there would be no tracing it to me, because I would be already long gone from the building. We should make the best efforts we can to make remailers fully anonymous. My ideas are more that accept PGP, and (has this already been suggested and/or rejected?) automatic chaining. That is, remailer #1 could automatically encrypt and send to #2, #3, ... #n before going on to its destination. The number of added remailers and which were used could be made random. (ie, have a list of remailers and pick from it each time...) Would this work? =============================================================================== David Rosoff (nihongo o chiisaku dekimasu) -------------> drosoff(a)arc.unm.edu For PGP key 0xD37692F9, finger drosoff(a)acoma.arc.unm.edu or get from keyservers pub 1024/D37692F9 1995/07/01 David Rosoff <drosoff(a)arc.unm.edu> Key fingerprint = 25 7D AA 01 85 41 43 89 50 5A 33 76 F1 F1 99 67 I accept anonymous mail. If I didn't sign it, you don't know I wrote it. === "Made weak by time and fate, but strong in will / To strive, to seek, to find-- and not to yield." <---- "Ulysses", by Alfred, Lord Tennyson -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMcRVXhguzHDTdpL5AQFc1wP9GiJ6mXeAOY1x/7g1GrCPsWYEZlS5iq84 wfKwgs1W8L+PBQcbrgdhyK2RKDJ7sFrCbz0eSa3OLbDiw5NeKD0LSDAvxuF3Redu aUpv4yWdYMz71sHz8MF7TxzdOo5a6dg3XtIaRA3Sbt4i2p9dozm/Xg5h4vhgKwWu /nG1BhTlNGs= =O4wy -----END PGP SIGNATURE-----

1 0

Re: Snake Oil on the Water...
by Rich Burroughs 17 Dec '03

17 Dec '03

At 11:19 AM 6/16/96 -0700, Alan Olsen wrote: >I recieved this on another list. Me too :) >The snake oil is starting to flow pretty heavy. I expect it to get worse... Here's the reply I sent to that list. I cc'd the person who sent the original message... =========== At 01:00 PM 6/16/96 -0400, Joe Horn <6mysmesa(a)1eagle1.com> wrote: [snip] >At the following two sites, you may download the FREEWARE Pegasus Mail >program version 2.3.3 16 bit for windows 3.x or a version for WIN95. I like Pmail. Had I not been an experienced Eudora user before I tried it (and pretty stuck on the Eudora interface) I would have probably stuck with it. Kudos to the Pegasus team for releasing a freeware program with such excellent filtering capabilites. It is much more of a full-fledged program than Eudora Lite, IMHO. > The >unique thing about it, besides its simplicity and that it's a great mail >program better than Eudora, it has a built in encryption program that is as >effective as PGP and lots simpler. All you do is agree on a password with >your correspondent. That simple. This would seem to eliminate the immense benefit of public key encryption -- that you can send encrypted email to someone you haven't met, without any prior communication. If you have security concerns, they will probably apply to whatever communication media that you would use to agree on the password. If I have a secure method to agree on a password with someone, what the heck do I need crypto for? ;) Also, I'm assuming that you can only send encrypted mail to other Pmail users. PGP is above those kinds of limitations -- it can be used on many platforms and with many different types of email packages. > The encryption program and the mail program >were developed in New Zealand, and were legally imported, so the encryption >program is better than PGP, which is regulated by Federal Cypher Laws. This is misleading, IMHO. While the export of the US version is "regulated by Federal Cypher Laws," PGP is not like some products which export a weaker version to accomodate ITAR. The version of PGP for people outside of the US is developed outside of the US, and is just as strong as the domestic version, AFAIK. Some people's lives, business, etc. depend on what type of crypto they use. I don't think it's really appropriate to make misleading claims like the one above when the stakes are that high. Please drop this claim for your promotional efforts, or back it up with specific evidence showing how ITAR has weakened PGP. >Honest.Plus, it's free. The sites are: [snip] For those people who want to use PGP with Pegasus, there's a nice little plug-in for Pegasus called PGP JN, by John Navas, which allows you to choose to encrypt with PGP (you need to have a copy) instead of the Pmail crypto. It has a few small drawbacks, IMHO, but I found it much easier to use than PGP shell interfaces that require cutting text to the clipboard first. John's program is available at: http://www.aimnet.com/~jnavas/winpmail.html I really think the Pegasus team would do better to mention that John's program is available, rather than try to steer people away from PGP. PGP JN makes using the basic email features of PGP more streamlined than most other mail packages I've used (except Private Idaho, which is not a full-fledged email package). I think it would be better to mention that both options exist, rather than seeking to convert the masses away from PGP, which is unlikely to succeed anyway, IMHO. PC users who use PGP should try Pegasus and PGP JN. Private Idaho is available from Joel McNamara's page, at: http://www.eskimo.com/~joelm/ Rich ______________________________________________________________________ Rich Burroughs richieb(a)teleport.com http://www.teleport.com/~richieb See my Blue Ribbon Page at http://www.teleport.com/~richieb/blueribbon U.S. State Censorship Page at - http://www.teleport.com/~richieb/state New EF zine "cause for alarm" - http://www.teleport.com/~richieb/cause

2 1

new type2.list/pubring.mix
by John A. Perry 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hello everyone, A new type2.list/pubring.mix combination that reflects the retirement of the experimental remailer, middleman, has been posted. You can get it by web from www.jpunix.com. or by FTP from ftp.jpunix.com. John Perry - perry(a)alpha.jpunix.com - PGP-encrypted e-mail welcome! WWW - http://www.jpunix.com PGP 2.62 key for perry(a)jpunix.com is on the keyservers. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMcR58lOTpEThrthvAQGocgP/V3UuU11iwo6Yme295YygWqXekKKxkXXH 4u94vrwkYF3qTT+9W3vrgRuUueOf/xF6FP0FZj14wc0sZ51wAnHvPxpHNxzoXuFH Z7IAOv7MsSfm8Cn2/kFqK+KAGlaKRFpHzJUZS61Oo2u7HrLvejjNd4ZOfAhZ83m7 opBUlcYqCPA= =0LW8 -----END PGP SIGNATURE-----

1 0

Re: Does information want to be free?
by Joseph M. Reagle Jr. 17 Dec '03

17 Dec '03

At 10:41 PM 6/14/96 -0400, Declan B. McCullagh wrote: >I confess I was amused by how he described >those Internet anarchists who delighted in publicizing books that should >in fact be restricted. I am amused (though I am not taking sides) by the general lack of attention or rhetoric that "crypto-anarchists"/"crypherpunks"/whatever, otherwise privacy respecting people, usually espouse. If someone found out all the medical information of cypherpunks list members and distributed about the Net, how would people feel? (This is a rhetorical question, and I am familiar and agree with some of the arguments regarding public interest, public figures, copyright isn't a privacy protecting mechanism, yada yada yada. Just something to think about, what if large corporations, public interest groups, lobbeys, or governments can use this as a precedent against "us".) _______________________ Regards, Democracy is where you can say what you think even if you don't think. -? Joseph Reagle http://rpcp.mit.edu/~reagle/home.html reagle(a)mit.edu E0 D5 B2 05 B6 12 DA 65 BE 4D E3 C1 6A 66 25 4E

1 0

The Molson Great Web Anonymizer
by Damien Lucifer 17 Dec '03

17 Dec '03

Actually, they call it the Molson Web Canadianizer, but it looks like an anonymizer to me. You give it a URL and the Canadianizer grabs the URL and adds some funny canadian modifications to the page, and sends it back to you. It changes all the links to link through the canadianizer, also, which is convenient. This page originally allowed you to specify a url, but now it seems they only allow you to click and grab a random page. Specifying the address to connect to in your browser will solve this though.. Heres the URL: http://www.molson.com/cgi-bin/cize?url=http://www.your.site.com/the/url

2 1

Java
by AwakenToMe＠aol.com 17 Dec '03

17 Dec '03

Since I am new here, and its probably been asked one billion times... .. I've only heard a tiny bit about a problem that existed with security and Java about 6 months ago.... What was it?

1 0

whitehouse queries files on political enemies
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

what goes around comes around.. this reminds me of the old stories of Nixon and the various NSA domestic programs mentioned by Bamford ("Puzzle Palace") - ------- Forwarded Message Date: Fri, 7 Jun 1996 22:23:03 -0700 (MST) To: fsnw-l(a)freespeechnews.com From: Free Speech <ron(a)grapevinenews.com> Subject: [FreeSpeech-NewsWire] Files White House Got >From POLITICSnow I just picked up the following Associated Press story, dated June 7, 1996: "The Clinton White House acknowledged Friday it sought and received more than 300 FBI files, including those of House Speaker Newt Gingrich's press secretary, former Bush chief of staff James A. Baker III and other prominent Republicans." - - -- Associated Press=20 Also, in POLITICSnow is another press story which states, "Blankley, Baker, Fitzwater Among 330 FBI Files White House Got". The following is from that story: Friday, June 7, 1996=20 =A9 The Associated Press=20 "WASHINGTON (AP) - The Clinton White House acknowledged Friday it sought and received more than 300 FBI files, including those of House Speaker Newt Gingrich's press secretary, former Bush chief of staff James A. Baker III and other prominent Republicans.=20 Republicans immediately denounced the White House, saying President Clinton's aides misused the FBI to get information on political enemies. A top GOP leader suggested hearings were in order.=20 White House spokesman Mark Fabiani called it "an innocent bureaucratic mistake" and said there was no indication anyone reviewed the FBI background material.=20 But among the unanswered questions were who at the White House knew the files had been gathered and why they were kept at the White House rather than returned to the FBI after the error was discovered by a low-level White House employee sometime early in 1994.=20 The files - some 330 in all, almost all of them former employees of Republican administrations - were stored in the White House security office's vault in late 1993 and early 1994, the White House said." My comments: I have heard posters say, "So what, I'm alive. I have a job. Why should I care about this Whitwater stuff?" I, myself, have defended President Clinton in POLITICSnow when they were known as PoliticsUSA. I have held firm that there is no evidence against the Clinton's. This still holds true, in my opinion, with Ron Brown, Vince Foster, etc. I stated that Travelgate, Whitewatergate, Troopergate, etc. were much to do about nothing. Maybe they are in themselves. Although, I am on the verge of making a public apology in POLITICSnow based upon the evidence that is beginning to come forth. For anyone who counts himself a liberal, a basic premise is to have the government out of our personal business unless there is an absolute need for it. What apparently has happened is that the Whitehouse, for purely political reasons, obtained 330 FBI files almost all of them former employees of Republican administrators. This violates, in my opinion, the basic principles of liberalism. I will answer any posts in this news forum by anyone who terms himself a liberal and at the same time defends, what I consider, Nazi behavior. I want to add that I have the highest respect for the FBI and all the other Intelligence Services of the United States. The buck stops somewhere, and it is not with the FBI. Best regards, Bob Drake snoball(a)mail.idt.net - ------- End of Forwarded Message ------- End of Forwarded Message

2 1

Re: Snake Oil on the Water...
by Deranged Mutant 17 Dec '03

17 Dec '03

On 16 Jun 96 at 11:19, Alan Olsen wrote: > I recieved this on another list. The snake oil is starting to flow pretty > heavy. I expect it to get worse... > >Subject: Windows 3.x or Win95 FREEWARE Mail/Encryption Program > >X-UIDL: 788ef8d7083cb4f8e94b2c20183773b5 [..] > >At the following two sites, you may download the FREEWARE Pegasus Mail > >program version 2.3.3 16 bit for windows 3.x or a version for WIN95. The > >unique thing about it, besides its simplicity and that it's a great mail > >program better than Eudora, it has a built in encryption program that is as Actually, it is much better than Eudora and has plug-ins for encryption. The native encryption sucks, and the author warns against it (it's there as a demo of the crypto API!). There *is* a PGP-plugin (w/source) that uses PGP to encrypt or decrypt mail and add keys. The last version I saw had shitty key management... if you're emailing somebody at an address different from the key-id, it didn't prompt you for another key (and Pegasus 2.2 sent it out in cleartext!). I don't like the add on much, but many others do, aware of that flaw and some others. Seems like the person who wrote that message doesn't know what he's talking about. There's a difference between snake oil and a user who doesn't understand a product. Rob. --- No-frills sig. Befriend my mail filter by sending a message with the subject "send help" Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) AB1F4831 1993/05/10 Deranged Mutant <wlkngowl(a)unix.asb.com> Send a message with the subject "send pgp-key" for a copy of my key.

1 0

[noise] Re: SM3 ?'s (fwd)
by Damien Lucifer 17 Dec '03

17 Dec '03

On Sun, 16 Jun 1996 19:09:45 -0400, eron(a)in-sync.com (Eron Cohen) wrote: Don C. Jenkins wrote: > 3) Now that I am almost convinced that SM3 is the software I wish to > purchase - I was wondering if there is a way to make it automaticley edit > out irritating clients from my schedule? Or insert an extra million in my > bank account? > Yes. We are planning to ship this effect with 3.5 version of Razor next month. Not only does it remove the clients from your schedule but from your entire life using an advanced form of pattern recognition. We need to get this approved by the bureau of tobacco and firearms before we are allowed to start shipping it though, because in some places its considered a munition. Once approved we hope we can open our market to annoyed people in other fields too.

1 0

Re: Snake Oil on the Water...
by Rich Burroughs 17 Dec '03

17 Dec '03

At 07:03 PM 6/16/96 -0700, Rich Graves wrote: >On Sun, 16 Jun 1996, Rich Burroughs wrote: > >AFAIK, "The Pegasus Team" is still one person, and he's not an idiot. The >person who sent the message was some random idiot, not a member of "The >Pegasus Team." Just thought that should be straightened out lest any >unwarranted ill will be left floating around... Yes, you're absolutely right, and I owe the Pegasus author a big apology for assuming that this guy who thinks there's a 40 bit domestic version of PGP had anything to do with Pegasus. I really misspoke, and I apologize. BTW, I've heard that Pmail is progressing quite well. Rich ______________________________________________________________________ Rich Burroughs richieb(a)teleport.com http://www.teleport.com/~richieb See my Blue Ribbon Page at http://www.teleport.com/~richieb/blueribbon U.S. State Censorship Page at - http://www.teleport.com/~richieb/state New EF zine "cause for alarm" - http://www.teleport.com/~richieb/cause

1 0