December 2003 - cypherpunks-legacy

New type-I middleman!
by John Perry 17 Dec '03

17 Dec '03

The following message is a courtesy copy of an article that has been posted as well. -----BEGIN PGP SIGNED MESSAGE----- Hello Everyone! I just completed beta testing my Type-I (ghio-style) Middleman remailer and I'm ready for it to go online publically. Just like the Middleman type-II (mixmaster) remailer, the type-I Middleman randomly selects a remailer path to send messages based on Raph Levien's remailer list. Additionally, to foil traffic analysis, the Middleman type-I remailer also supports message reordering. This means that middleman(a)jpunix.com is now a fully functional type-I/type-II remailer that uses the middleman random remailer feature in additon to reordering. All of the available functionlity that you would find in either a Mixmaster remailer as well as a Cypherpunks remailer is available in the middleman(a)jpunix.com remailer. Below is the public PGP key for middleman(a)jpunix.com. - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzIXHroAAAEEAPLBq/n4a5ldzm8F51Lk63iHyOJfm+lmxW8PgjbKdAPAJBHk xUHXEeOX/gQ8RXV0W6vYwmiFcQBA7b4w3iJwptC8GN98t4o31SVHlouQozjMwaVH eu5dDUg/CJ9P2Wnwc0AtP4s9cBxQho3FK7mjeqhMXKhB2oqliX+quM/iBuHlAAUR sAGHtD5NaWRkbGVNYW4gVHlwZS1JIFJlbWFpbGVyIGF0IEpQVW5peC5Db20gPG1p ZGRsZW1hbkBqcHVuaXguY29tPrABA4kAlQMFEDIXMfh/qrjP4gbh5QEBc2kD/1hw oHPcTasnlSVzMxD68hoCI1GYNNM4JSU+rHS+3PVy++992PcyuhqdH8PhuDozeYkz C8Q5y4tmddg30ED+/W2QJwYS0iySG3yH4jrvOstws+Kn5LpD1JQJT1qGLVWHpTxG n5MZO014NGT+wVkySRCornpuaqevTum8ygp+lyPIsAHH =/xR/ - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMhdusVOTpEThrthvAQErOwQAqBZo5D7RaSAiymovj7Y/FU649scaYI+v JwP9Nm1T9ZQ1rX3mscN/a37PpohKKoLHf9gYvgkJm5kPdODd9HRNoSdBcp72xrxo JDnhYdAW6iw4c6xZOde7o54maIWuITiN8X1kQcZ591Ava7DaVSdjMypm9hGzq9tx PRqQEvVDb2I= =lN7a -----END PGP SIGNATURE-----

1 0

COMMUNITY CONNEXION ANNOUNCES STRONGHOLD VERSION 1.3
by sameer 17 Dec '03

17 Dec '03

For Immediate Release - August 19, 1996 Contact: Sameer Parekh 510-986-8770 COMMUNITY CONNEXION ANNOUNCES STRONGHOLD VERSION 1.3 Oakland, CA - Community ConneXion, Inc., the leader in uncompromising security for the Internet, today announced the version 1.3 release of Stronghold, the commercial version of Apache-SSL. Stronghold is based on the popular Apache server, the most popular webserver on the Internet, according to the Netcraft server survey at http://www.netcraft.com/survey/. Stronghold 1.3 is a significant improvement from the Stronghold 1.2 product. The latest version is based on Apache 1.1.1, which supports features such as Keep-Alive, server information modules, a proxy server, an easier to use API, more flexibility in authentication, and greater configurability. "We're happy to have a final release version of 1.3 available," said Sameer Parekh, President of Community ConneXion. "Because of our close involvement with the Apache Group, we can quickly track new Apache releases. We expect to have an Apache 1.2-based server available soon after the Apache 1.2 release." Stronghold 1.3 is the result of an extensive Internet-wide beta test, which started soon after the full release of Apache 1.1.1. Apache 1.1.1 includes features such as the status module, which gives the server administrator the ability to monitor in real time the server's activity. An information module is also available which gives administrators easy access to a list of which modules have been installed on their server, as well as their configuration directives. The latest version includes modules which support database access, including mSQL and Postgres95. Apache 1.1.1 has much more flexible configuration with regards to virtual hosts and multiple IP addresses. This feature allows such innovations as the ability within Stronghold 1.3 to serve both SSL and nonSSL documents from the same server instance. The latest version of Stronghold supports "Session ID Caching," which allows for dramatic performance improvements. Session caching allows servers to process connections much faster because the processor intensive calculations happen less often. Limited performance tests have shown speed improvements of eight hundred percent. "With Session ID Caching, the SSL protocol is not noticably slower than not using the encryption protocol. There is no excuse not to encrypt everything," said Parekh. Community ConneXion is now shipping binaries for Sparc Solaris 2.5, x86 Solaris 2.5, Sparc SunOS 4.1.3_U1, FreeBSD 2.1, BSDI 1.1, AIX 3.2.5, IRIX 5.3, HP/UX, OSF/1, Ultrix, BSDI 2.0, and Linux (ELF & a.out). More platforms will be available soon, and even more may be supported on request. Stronghold may be ordered and downloaded at http://www.us.apache-ssl.com/. Existing commercial licensees may download the latest version free of charge. Portions developed by the Apache Group, taken with permission from the Apache Server http://www.apache.org/. This product includes software developed by Ben Laurie for use in the Apache-SSL HTTP server project. This product includes software developed by Eric Young (eay(a)mincom.oz.au)

1 0

Whereis is the shell scsh?
by qut＠netcom.com 17 Dec '03

17 Dec '03

Yes, I printed and skimmed through the Secure Shell FAQ. Is there a version for csh instead of sh? -- OBC

1 0

Re: BlackNet as a Distributed, Untraceable, Robust Data Haven
by jim bell 17 Dec '03

17 Dec '03

At 10:40 PM 8/17/96 -0700, Vladimir Z. Nuri wrote: > >>I have to speak up here and say that there is an actual working exemplar of >>a distributed, untraceable data haven. While it lacks a robust _payment_ >>mechanism, that is also untraceable, so does the "Visit Port Watson" >>example (which has never actually existed). > >agree with Jim Bell that blacknet by any stretch of the imagination >is not a "data haven". I've not yet commented on this thread! Sounds like you're confusing me with somebody else. Jim Bell jimbell(a)pacifier.com

2 1

Private Idaho
by Blake Wehlage 17 Dec '03

17 Dec '03

Could anyone tell me the URL of the latest version of Private Idaho..... Thank You! ========================================== Blake Wehlage <jwilk(a)iglou.com> ±» RëVðLû¡ØÑ Bø+ ©ÖmP@ñ¥ «± Goto: http://members.iglou.com/jwilk

1 0

Re: National Socio-Economic Security Need for Encryption Technology
by Bart Croughs 17 Dec '03

17 Dec '03

Mike McNally wrote: >Bart Croughs wrote: >> ... better arguments (after reading the books I suggested) >Like what is it with you and these books? Is "Austrian" a code word >for "Divine omniscient extraterrestrial super-being"? No, but a number of posters claimed they were Austrians, and among them was Timothy May. So if I can show that Timothy's statements contradict the economic theories he says he supports on the most fundamental level (the level of methodology), then I have a pretty solid case that he is a bit confused and that he should do his homework better before he continues arguing. Unless of course he can show the Austrians (or me) to be wrong; but he hasn't done this yet. >Through all this sophist gibberish I've completely lost track of >what exactly it is you're trying to say. I don't blame you when you get the impression that Austrian methodology, compressed in a couple of sentences, is sophist gibberish. Without the proper background knowledge, this is probably unavoidable; methodology is a rather difficult subject. But if you are really interested and want to know more about it, you now know where to look... Bart Croughs

2 1

Re: Imprisoned Capital
by Bart Croughs 17 Dec '03

17 Dec '03

James A. Donald wrote: >[In response the argument that attempts to imprison capital will cause >capital flight] >At 10:50 PM 8/16/96 +-200, Bart Croughs wrote: >> This is a good point when you talk about governments that will >> prevent *all* capital from flowing out. But a government could >> prevent the outflow of capital of it's own citizens, and still >> allow capital of foreigners to leave the country. As long as >> foreign capital isn't imprisoned, foreign capital could be >> attracted. >Been tried. Does not work. >1. If foreign capital is allowed to freely enter and leave, internal >players find ways to sneak their capital out. This forces the >government to start regulating and supervising foreign businessmen >in ways that at best terrify them (such controls look very much >like creeping confiscation), and at worst cause them huge harm >with no real benefits to anyone. I think you are probably right that *in practice* it will not work when the government tries to prevent domestic capital from flowing out and at the same time will allow capital of foreigners to freely flow in and out. After all, government doesn't work. But this doesn't prove the theoretical case that an outflow of capital wouldn't hurt the standard of living of workers in a country. As long as this isn't proven, governments have an excuse to try again and impose controls on capital (and this time of course, they will do it better...) Bart Croughs

1 0

Re: Hackers invade DOJ web site
by Joel McNamara 17 Dec '03

17 Dec '03

At 04:42 AM 8/18/96 -0500, you wrote: >>CNN online (http://www.cnn.com) is reporting a "breakin" by "hackers" >>to the DOJ web site. They don't elaborate exactly how thy did it. Well the DOJ site still is down, but here's some details I pulled out of a USENET newsgroup this morning (hopefully L.G. Shirley won't mind the forward). All in all, it sounds like a fairly childish stunt... From: "L. G. Shirley" <lgshirley(a)mail.worldnet.att.net> Newsgroups: rec.radio.scanner Subject: DOJ homepage hacked!!! Date: 17 Aug 1996 22:47:59 GMT Organization: AT&T WorldNet Services Lines: 49 Message-ID: <4v5i6v$hm8(a)mtinsc01-mgt.ops.worldnet.att.net> About 10PM last night I clicked on my bookmark for the Federal Gov't and then selected, by random, the Dept of Justice. http://justice2.usdoj.gov/ SURPRISE!!!!!!!!!! Someone had made a few changes, For one it is now called the Department of Injustice. You are immediately greeted by the Nazi swastika all over your screen's background. A flag w/the symbol is apparent. George Washington's picture is captioned with his words, "Move my grave to a free country! This rolling is making me an insomniac". Janet Reno's portrait has been replaced by Hitler's. And a flag now bears the Nazi symbol. She is now called Attorney General Furher. There is plenty of nudity and the many links will take you to places you may never have been before. I don't think we're in Kansas anymore Toto! I have no clues how it was done or when. My guess is someone changed all the links to the DOJ page to another one, the one you see when you click on the DOJ's homepage. I worked today and when I came home and tried to get back to the DOJ's page, no luck. Must be a major overload <grin> of people trying to get to the link of women clad in, well, next to nothing and tied with rope! I don't think the author will make any brownie points w/women. He hacked the homepage they have w/the DOJ on violence against women. I'm not condoning such action and violence is a very serious issue but whoever did the hack was also very serious. He changed a Clinton speech on affirmative action and insulted blacks with his choice of words. There is a lot of rambling about the internet and the Gov't taking away our rights on it. The author has a interesting slant on things. This should be enough of a warning if you're easily offended by racism, hate, foul language, porn on the net, and general crudeness. Don't go there. I would like to know just how this was done, any ideas? Is it that easy to hack someones homepage? I wonder how long it'll be before this homepage link is removed and can they find who did the evil deed? Two months on the Net and just when I think I'd seen it all, wow.

1 0

CS First Boston lawsuit
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

In a lawsuit files in federal court in New York City, CS First Bostom has charged an unknown party with libel, slander and violation of the Federal Telecommunications Act, as well as with impoerly obtaining confidential financial information and sending it out in e-mail messages. The lawsuit seeks damages of at least $1M against "FBCbuster" and "FBCbuster2", the aliases of an America Online AOL) subscriber or subscribers. AOL was not named as a defendant in the lawsuit, which concerns two separate e-mail messages sent to First Boston employees. The suit sais the firsy e-mail message, which was sent on March 3, included a "macabre poem" about the destruction of the firm. In a second message, sent a week later, the lswsuit states that the writer included confidential salary information about current and former officers of the firm. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

3 2

Re: US Taxes on X-Pats
by Stephen Cobb 17 Dec '03

17 Dec '03

Pardon me for jumping in...but a year ago I won a case in tax court brought aainst me by the IRA for not paying taxes on income earned while living overseas...apart from the verdict, the whole thing was a complete farce! My advice is to research the subject in detail before leaving the country and file IRS returns faithfully every year regardless of where you live even if you owe no tax (I owed no tax so filed no returns, penalty for not filing = % of tax owed, so no penalty for not filing, but only IF the IRS agrees you don't owe). Yes, there has been talk in the Clinton administration of dropping the overseas earning provision. You might want to email either Sen. Byron Dorgan or Sen. Kent Conrad of N.D. since both these guys were State Tax Commssioners before going to Washington and seem to be clued in on federal tax issues. The report I read in the Orlando Sentinel suggested that Clinton felt the exclusion was a money loser desined to help US corporations get employees to work overseas. However, it seems to me that it is also part of the complex web of international tax treaties designed to prevent double taxation. If you are a US citizen earning in a country that has an income tax they are likely going to expect you to pay tax, just as we tax foreign nationals living here. My impression is that many IRS staff lack in-depth knowledge of this very complex area (for example, I paid tax on my overseas income to the government of the country in which I was living when I earned it and that country has a tax treaty with the US...after about 6 very scary phone calls the agent assigned to the case agreed that I did not owe income tax...but then he tried to hit me up for thousands fo dollars in self-employed soc sec contribution -- when I told him that was also covered under a reciprocal treaty it was complete news to him...he asked me, and I wish I had taped the call, to send him the IRS document in which I had read this!) The result is often months of very stressful waiting, staring huge penalties in the face, while they learn up on the subject and say "I guess you're right, you don't owe that $60,000 in unpaid tax and penalties we asked the judge to award us." I still have a state tax lien triggered by this bogus action against me lying around on one of my credit reports. Respectfully...Stephen ps The recent US legislation denying soc sec benefits to legal aliens seems to be a breach of the referred to above. pps The relation to cypto is :-)?

2 1