December 2003 - cypherpunks-legacy

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{'cyber'} = '<alias(a)alias.cyberpass.net> alpha pgp'; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"jam"} = "<remailer(a)cypherpunks.ca> cpunk mix pgp hash middle latent cut ek"; $remailer{"winsock"} = "<winsock(a)rigel.cyberpass.net> cpunk pgp pgponly hash cut ksub reord ?"; $remailer{'nym'} = '<config(a)nym.alias.net> newnym pgp'; $remailer{"squirrel"} = "<mix(a)squirrel.owl.de> cpunk mix pgp pgponly hash latent cut ek"; $remailer{'weasel'} = '<config(a)weasel.owl.de> newnym pgp'; $remailer{"reno"} = "<middleman(a)cyberpass.net> cpunk mix pgp hash middle latent cut ek reord ?"; $remailer{"cracker"} = "<remailer(a)anon.efga.org> cpunk mix remix pgp hash ksub esub latent cut ek reord post"; $remailer{'redneck'} = '<config(a)anon.efga.org> newnym pgp'; $remailer{"bureau42"} = "<remailer(a)bureau42.ml.org> cpunk mix pgp ksub hash latent cut ek"; $remailer{"neva"} = "<remailer(a)neva.org> cpunk pgp pgponly hash cut ksub ?"; $remailer{"lcs"} = "<mix(a)anon.lcs.mit.edu> mix"; $remailer{"medusa"} = "<medusa(a)weasel.owl.de> mix middle" $remailer{"McCain"} = "<mccain(a)notatla.demon.co.uk> mix middle"; $remailer{"valdeez"} = "<valdeez(a)juno.com> cpunk pgp pgponly hash ek"; $remailer{"arrid"} = "<arrid(a)juno.com> cpunk pgp pgponly hash ek"; $remailer{"hera"} = "<goddesshera(a)juno.com> cpunk pgp pgponly hash ek"; $remailer{"htuttle"} = "<h_tuttle(a)rigel.cyberpass.net> cpunk pgp hash latent cut post ek"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. remailer(a)crynwr.com is _not_ a remailer. There is no remailer at relay.com. Groups of remailers sharing a machine or operator: (cyber mix reno winsock) (weasel squirrel medusa) (cracker redneck) (nym lcs) (valdeez arrid hera) This remailer list is somewhat phooey. Go check out http://www.publius.net/rlist.html for a good one. Last update: Thu 23 Oct 97 15:48:06 PDT remailer email address history latency uptime ----------------------------------------------------------------------- hera goddesshera(a)juno.com ------------ 5:03:45 99.86% nym config(a)nym.alias.net +*#**#**### :34 95.82% redneck config(a)anon.efga.org #*##*+#**** 2:00 95.44% mix mixmaster(a)remail.obscura.com +++ ++++++* 19:18 95.27% squirrel mix(a)squirrel.owl.de -- ---+--- 2:34:19 95.16% cyber alias(a)alias.cyberpass.net *++***+ ++ 11:26 95.11% replay remailer(a)replay.com **** *** 10:06 94.93% arrid arrid(a)juno.com ----.------ 8:50:34 94.41% bureau42 remailer(a)bureau42.ml.org --------- 3:38:29 93.53% cracker remailer(a)anon.efga.org + +*+*+*+ 16:32 92.80% jam remailer(a)cypherpunks.ca + +*-++++ 24:14 92.79% winsock winsock(a)rigel.cyberpass.net -..-..---- 9:59:18 92.22% neva remailer(a)neva.org ------****+ 1:03:02 90.39% valdeez valdeez(a)juno.com 4:58:22 -36.97% reno middleman(a)cyberpass.net 1:01:28 -2.65% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

Re: Technologies of Political Control
by John Young 17 Dec '03

17 Dec '03

A bit more on getting a copy of the report: An Appraisal of Technologies of Political Control It is Scientific and Technological Options Assessment (STOA) of the European Parliament offering the report, not British MEP Glyn Ford, who was its sponsor. For a copy to be sent by snail, fax a request to STOA in Luxembourg: 352-4300-22418 No electronic version is available from STOA. Draft reports remain in paper format until finalized by the European Parliament, which may take a while. STOA's publications web site was last updated in July 1996, and its rep apologized for the trailing-edge tech. http://www.europarl.eu.int/dg4/stoa/en/publi/publi.htm

1 0

cookies and spam
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

> 5. .reba.com (country music) cypherpunks cypherpunks > wafer RebaNet%5FPWD=cypherpunks > wafer RebaNet%5FUID=cypherpunks Yes, and thank you for signing up the list for their spam. cypherpunks/cypherpunks also works for dejanews, but at least I had the sense to send the replies to alt.anonymous.messages.

1 0

CyberSitter to the rescue.
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Resent-Date: Tue, 20 Jan 1998 17:19:45 -0500 X-Authentication-Warning: qnx.com: localhost [127.0.0.1] didn't use HELO protocol To: 0xdeadbeef(a)substance.abuse.blackdown.org Cc: bostic(a)bsdi.com Subject: CyberSitter to the rescue. Date: Tue, 20 Jan 1998 16:08:19 -0500 From: glen mccready <glen(a)qnx.com> Resent-From: 0xdeadbeef(a)substance.abuse.blackdown.org X-Mailing-List: <0xdeadbeef(a)substance.abuse.blackdown.org> archive/latest/2639 X-Loop: 0xdeadbeef(a)substance.abuse.blackdown.org Precedence: list Resent-Sender: 0xdeadbeef-request(a)substance.abuse.blackdown.org Status: U Forwarded-by: Faried Nawaz <fn(a)LISP-READER.Hungry.COM> Forwarded-by: acb(a)zikzak.net (Andrew C. Bulhak) Forwarded-by: Matt Curtis <mattc(a)beam.com.au> This is from the PerForce mailing list, PerForce is a source code control system that doesn't use mounted drives, but instead uses TCP/IP socket communications to check code in and out. ----- Well, I just spent several hours tracking something down that I think is SO braindead that it must be called evil. I hope this will save someone else some hassle. There's an NT box on my desk that someone else uses every now and then. This machine is otherwise used as my programming box and backup server. All of a sudden, my programming files were being corrupted in odd places. I thought "hmm, my copy must be corrupt". So I refreshed the files. No change. "hmm, the code depot copy must be corrupt".. Checked from other machines. No problem there. Viewed the file from a web based change browser in Internet Explorer. Same corruption in the file. Telnet'd to the server machine and just cat'd the file to the terminal. Same problem. What's going on? The lines that were corrupted were of the form #define one 1 /* foo menu */ #define two 2 /* bar baz */ What I always saw ON THIS MACHINE ONLY was: #define one 1 /* foo */ # fine two 2 /* bar baz */ Can you guess what was happening? Turns out, someone had inadvertly installed this piece of garbage called CyberSitter, which purports to protect you from nasty internet content. Turns out that it does this by patching the TCP drivers and watching the data flow over EVERY TCP STREAM. Can you spot the offense word in my example? It's "NUDE". Seems that cybersitter doesn't care if there are other characters in between. So it blanks out "nu */ #de" without blanking out the punctuation and line breaks. Very strange and stupid. It also didn't like the method name "RefreshItems" in another file, since there is obviously a swear word embedded in there. Sheesh. It's so bad it's almost funny. Hope this brightens your day as much as it brighted mine :-). ---- +----------------------+---+ | Ross Johnson | | E-Mail: rpj(a)ise.canberra.edu.au | Info Sciences and Eng|___| | University of Canberra | FAX: +61 6 2015227 | PO Box 1 | | Belconnen ACT 2616 | WWW: http://willow.canberra.edu.au/~rpj/ | AUSTRALIA | +--------------------------+ --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Spies Like Us.
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Resent-Date: Wed, 21 Jan 1998 12:33:35 -0500 X-Authentication-Warning: qnx.com: localhost [127.0.0.1] didn't use HELO protocol To: 0xdeadbeef(a)substance.abuse.blackdown.org Subject: Spies Like Us. Date: Wed, 21 Jan 1998 11:21:56 -0500 From: glen mccready <glen(a)qnx.com> Resent-From: 0xdeadbeef(a)substance.abuse.blackdown.org X-Mailing-List: <0xdeadbeef(a)substance.abuse.blackdown.org> archive/latest/2642 X-Loop: 0xdeadbeef(a)substance.abuse.blackdown.org Precedence: list Resent-Sender: 0xdeadbeef-request(a)substance.abuse.blackdown.org Forwarded-by: Nev Dull <nev(a)bostic.com> Forwarded-by: chuck <Chuck(a)Yerkes.com> Forwarded-by: David HM Spector <spector(a)zeitgeist.com> Forwarded-by: Declan McCullagh <declan(a)well.com> Date: Tue, 20 Jan 1998 13:42:26 -0800 (PST) From: Dan Tsang <dtsang(a)sun1.lib.uci.edu> To: Declan McCullagh <declan(a)well.com> Subject: CIA changes Web FAQ: concedes spying on Americans Last month, the CIA had to change its Web FAQ page because of my case, Tsang v. CIA, which was settled when the CIA promised not to spy on me again. But it refused to make the same promise to cover other Americans. The original FAQ page had said "No" to a question whether or not it spies on Americans. Now it concedes it spies on Americans. The new CIA FAQ is at: http://www.odci.gov/cia/public_affairs/faq.html See my account in Sunday's (Jan. 18) Los Angeles Times Opinion page: A CIA Target at Home in America. It can be found at: http://www.latimes.com/sbin/my_iarecord.pl?NS-doc-path=/httpd/docs/HOME/NEW… OPINION/t000005584.html&NS-doc-offset=1&NS-collection=DailyNews&NS-search-set=/ var/tmp/34c3e/aaaa001wBc3eacf& Daniel C. Tsang Bibliographer for Asian American Studies & Social Sciences (Economics, Politics) Machine-Readable Data Files Librarian Lecturer, School of Social Sciences 380 Main Library University of California PO Box 19557 Irvine CA 92623-9557 USA dtsang(a)uci.edu (714) 824-4978 (714) 824-5740 fax homepage: http://sun3.lib.uci.edu/~dtsang add suffix for news: /netnews1.htm politics: /pol.htm economics: /econ.htm asian american studies: /aas.htm soc sci data archives: /ssda.htm public opinion: /pod.htm AWARE: awarefs/htm host, "Subversity" on KUCI, 88.9 FM in Orange County each Tuesday from 5-6 p.m.; selected shows w/ audio online: http://www.kuci.uci.edu/~dtsang/subversity N.B.: This is NOT official University of California correspondence. --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Video & cryptography...
by Jim Choate 17 Dec '03

17 Dec '03

Hi, I was in a discussion with several people regarding the rate if improvement of current video production equipment and how it would effect the veracity of video images of all sorts in future legal cases. Is anyone aware of anybody working on a mechanism to digitaly sign video and photographs (a cool app of stego I suspect)? This would alleviate a great deal of mistrust for security video cams and such. What I had in mind was the manufacturer puts a unique key in each machines rom's and when each image comes in a signature of the image and the key is stored in the interframe retraces that are normaly not shown (ala videotext). I asked a couple of people in the biz that I know and it seemed a new concept to them. Just a thought... ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Cylink and Organized Crime?
by John Young 17 Dec '03

17 Dec '03

Mr. Gene Carozza Security Public Relations Cylink Corporation Dear Mr. Carozza, We have received two recent e-mail messages concerning Cylink's alleged links to organized crime. The messages may be seen on the Web at: http://jya.com/cylinked.htm This is a serious charge. Could you provide information to answer it? Sincerely, John Young

2 1

Re: Cylink and Organized Crime?
by Gene Carozza 17 Dec '03

17 Dec '03

Dear John, Thanks for your inquiry. These "serious charges" are completely inaccurate. Regards, Gene C. At 12:42 PM 1/26/98 -0500, John Young wrote: >Mr. Gene Carozza >Security Public Relations >Cylink Corporation > >Dear Mr. Carozza, > >We have received two recent e-mail messages concerning >Cylink's alleged links to organized crime. The messages >may be seen on the Web at: > > http://jya.com/cylinked.htm > >This is a serious charge. Could you provide information to >answer it? > >Sincerely, > >John Young > > > Gene Carozza Phone: 408-328-5175 Sr. Public Relations Manager Fax: 408-774-2522 Cylink Corp. Pager: 1-800-716-6434 910 Hermosa Ct. Cell: 408-529-8402 Sunnyvale, CA 94086 email: carozza(a)cylink.com www.cylink.com

1 0

Burning Papers - Plastics - Cyanides - Reference
by Jim Choate 17 Dec '03

17 Dec '03

Hi, It took a few minutes to find one, but below is just one of the many standards that are implimented for plastic uses in the home that make reference to minimal levels of HCN in particular. Despite what some folks would like you to believe, plastics in conflagration are *NOT* safe to inhale even in small quantitites because of these gases. Note that I edited a bunch of lines out for brevity. Forwarded message: > X-within-URL: http://www.cern.ch/CERN/Divisions/TIS/safdoc/IS/is41/table1.html > > IS 41 : TABLE 1 > > Test Standards and Specifications > for the Selection of Plastics > > TEST > Standards (1) > Requirements > _________________________________________________________________ > [text deleted] > > Duration of flame application 60 s unless > otherwise stated according to Clause 5. > Time to extinction: 30 s * > Damaged length (mm) must be measured* > > FV0 or FV1 > 94 V0, 94V1 > > FT >260!C. Length burnt > _________________________________________________________________ > [text deleted] > _________________________________________________________________ > > > Toxicity > Toxicity of fire gases > > ABD 0031 > > HF HC1 HCN SO2 + H2S CO NO + NO2 > _________________________________________________________________ > [remainder deleted] ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Latest Clinton dodge?
by Declan McCullagh 17 Dec '03

17 Dec '03

Clinton said this morning: >>>> I want you to listen to me. I'm going to say this again. I did not have sexual relations with that woman, Miss Lewinsky. I never told anybody to lie, not a single time -- never. These allegations are false. <<<< The question then becomes, of course, what does "sexual relations" mean? Is it oral sex? -Declan

8 13