- cypherpunks-legacy - lists.cpunks.org

Re: The Remailer Crisis
by david d `zoo' zuhn 17 Dec '03

17 Dec '03

// Are there options for several machines to share a connection? (I'm // sure there are....). Someone who already has a connection may be // willing to host additional machines, which could share some of the // charges. Around here (in the Twin Cities) one can get a dedicated connection for $100/month without any startup fees. And of course one can set up a local network and use the machine with the modem link as a router. Having one of these dedicated lines, I'd be happy to host remailer-boxes at my site. Ideally, they'll be small & only require a network cable and a power cord. I'm also willing to seriously consider initiating remailer-accounts on my machine. If you'd be interested in a remailer account, drop me a line. -- - david d `zoo' zuhn -| armadillo zoo software -- St. Paul, Minnesota -- zoo(a)armadillo.com --| unix generalist (and occasional specialist) ------------------------+ http://www.armadillo.com/ for more information pgp key upon request +----------------------------------------------------

1 0

Re:I have had ENOUGH of this government bullshit!!
by David Yaffe 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I'm Canadian, and I am really scared by what is going on in the States. If the US gooberment succeeds in banning/controlling crypto, how long will it be before it happens here. Does anyone know if the Canadi-humm gooberment is trying to do ban/control crypto? And to the person who wrote this I have one word: A-F*CKIN-Men! >Screw this. I have finally blown my stack over this bullshit governmental >crap. From this oint forward, I fully and completely make available, IN THE >U.S, the International version of PGP 2.63.ix. >If there are any cops, Feds, Spies, wops, spics, gigaboos, alternate >lifestyles, punks, crackers, crackheads, whatever other name calling terms, >I left out, want to stop me --- TRY!!!! This is bullshit people! We have >the inalieable right to full and total screcy, privacy, and personal >protection of whatever * W E * determine to be private information. The >government has gotten out of hand with this shit. If you are a member of the >F.B.I, C.I.A, S.S, N.S.A, X.Y.Z community and you don't like this action, >show up at my doorstep guns drawn. Cause you show up at MY door step, you'll >need them! That I promise! David. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBM9m01DoM1b3tdf0JAQGbTwP+O3SE9MjWYBGsSjhlk+9PhbNrKsstHgVH zG8kTfcAyAku5OEQt3bNGCbStsxiAGkYjhqT2G5i+cvdjSODMive5V2tquSjacz2 yn5GrEfGq4fUJbr1FuFN6xO+2xHSvjEVmMa5bHz8XOjDTP3NvGQUnhbcQC+YoLPi sa05zvnWd7Q= =axM8 -----END PGP SIGNATURE-----

1 0

Re: Remailer-on-a-CD
by jalicqui＠prairienet.org 17 Dec '03

17 Dec '03

>>The "Linux mavens" followed by the "black box" stuff sparked an idea... > >>package. To make it as easy as possible, I'd use the UMSDOS filesystem so >>that Linux could be installed on a DOS machine without any reformatting >>repartitioning, or similar headaches. > >>distribution already has) and some boot options, you'd have an "instant >>remailer" software package, able to transform any 386SX/4MB RAM DOS macine >>or better into a Linux-based remailer site, complete with aliases, loggng > >>So, am I dreaming, or does this sound viable to y'all? > >OK, let's ponder the minimum hardware necessary, >possible minimal configuration (Intel/clone based): > >(1) Case. >(2) Power supply. >(3) Motherboard/CPU and 4mb RAM. >(4) Hard drive w/ controller. >(5) modem card. Add "standard serial port" here, for reasons I'll get into in a moment... >(5) No monitor, keyboard, floppy, or video card. > (a) would require some "umbilical cord" connection to initially > set up from another PC. > (b) need to operate on "umbilical", direct and uucp modes. The "umbilical cord" here could be a standard serial port; this could be used in several ways. In addition, Linux has the ability to do TCP/IP through the parallel ports (using a LapLink-style protocol), so that could possibly work as well. There are a few options here: Reuse the monitor, keyboard, etc. for each installation. Go ahead and throw in the floppy, and set up the Linux kernel on the floppy to use the serial port as the console instead of the monitor/keyboard. Connect your second PC using the PLIP (that's the parallel port IP stuff) protocol. On the second PC, one would run a program that wouls telnet to the first PC and run the install program, which would run via NFS on the PLIP line. >I am just thinking out loud here, but the hardware could be damn >cheap (sub $500). You can find old 386 boards with 4mb right on >the board (no SIMMs) for next to nothing (the decreasing popularity >of 30-pin SIMMs makes this a surplus store reality, as nobody >wants to bother to strip out the RAM chips anymore). As far as price, I've seen 386SX motherboards run for $99. At a going rate of $50 per MB of RAM, buying a used MFM disk and controller for, say, $40 (I had the option of buying a junk box full of stuff, including two 20MB drives and a 10MB, for $100), some cheap $10 everything-board, a $70 14.4 modem, and a power supply at $50 (here I may be way off), that adds up to... $470. Not a bad guess! And this assumes you pay new prices for the motherboard, RAM, multiport, modem, and power supply... Also, if you wanted to splurge, you could opt for a few more MB of RAM and a CD-ROM drive. With our recently pressed "Cypherpunk Toolkit" CD-ROMs :-) and a boot floppy, you wouldn't necessarily need to install anything at all; the Linux kernel could store site-specific info (entered the first time you booted up via a cute user-friendly interface) on the floppy and load it to a RAMdisk, mounting the CD-ROM for all the rest of the interesting stuff. On multipurpose systems (you only use the computer a few hours per day and run the remailer using some store-and-forward system the rest of the time), this wouldn't take up any hard disk space, and your remailer could conveniently disappear with a simple Ctrl-Alt-Del and the slam of a safe door. ("But officer, all I have on my hard drive is DOS and Windows. See for yourself! I don't even have PGP here...") You know, the more I think about this, the more ideas pop into my head. I'd better quit before I get dizzy... What if the site-specific stuff on the floppy were encrypted... or the kernel... ? Could we use Matt Blaze's CFS...? Store the site-specifics on a data haven for backup... with auto-download on bootup... notebook remailers in car trunks using RadioMail or POP3 that have no single physical location... dynamic remailer configuration (download your IP address and alias info, etc. from the Remailer Server)...? STOP THE WORLD, I WANT TO GET OFF!!! There; that's better. Maybe I'll play around this weekend and try building a minimal Linux distribution (on what hard disk space :-). Then again, maybe I won't, so don't be bashful to play around on your own!

1 0

Re: The Remailer Crisis
by Jaeson.M.Engle＠josaiah.sewanee.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Just out of curiousity on this subject, is there any remailer software for Macs? I think I have enough leverage and power on my campus to be able to run a remailer here during the school months *which is when I have net access*. If there isn't, how hard would it be to do? Could it be done with something like MailShare indirectly? -----BEGIN PGP SIGNATURE----- Version: 2.6ui iQCVAgUBLx8CQkiLvmPjc4XdAQFS4wP/aufMYK054Ed5fZn84xLDSsXqF3+hv4jw uQKSUl6Kv46Ek+IypX0DwI31SqasS96vosC0W/p9uPO/MFoAyp9/EdcAkH65yWSO Gv3iQmm/j0Lx81dxTB4mjYZUdY3wJQFd4O/vY+mT9I6OmtE6lNDzYRyn9VCl7zfw t5G67Z6+Pas= =TosY -----END PGP SIGNATURE----- aka: (-: Jaeson M. Engle || jme(a)josaiah.sewanee.edu :-) (-: www server: http://josaiah.sewanee.edu/ :-) (-: It's January 29th! IT'S TIME!!! Ask me for details!:-) (-: Finger 'jme(a)josaiah.sewanee.edu' for my Public :-) PGP block.

1 0

Re: The Remailer Crisis
by jrochkin＠cs.oberlin.edu 17 Dec '03

17 Dec '03

At 4:49 PM 01/19/95, Jeff Licquia wrote: >persuade someone offsite with control over a domain name (for example, >"remailer.net" :-) to give you a mail alias on their domain, this would take >a bit more effort to track than your typical "remailer.uiuc.edu" type >domain. This would make it less likely that the university would hear >complaints, also, since most complainers would be more likely to complain to >"postmaster(a)remailer.net" than "postmaster(a)uiuc.edu" if your machine was >called "anon(a)anarchy.remailer.net" instead of "anon%anarchy.uucp(a)uiuc.edu" >or "anon(a)anarchy.uiuc.edu". I was thinking of this same thing. I'm hopefully going to have a unix box on the net in my college dorm room soon, but I'm a bit hesitant to run a remailer on it. I'm a bit scared to ask whether it would be allowed, on the "it's better to get forgiveness then permission" line of thought. But I'd rather avoid the potential of having to get forgiveness either. If my site had a "machine.remailer.net" address, there would be many benefits. For one, I don't have to worry about some administrator coming accross a list of anon remailers (in a Time magazine scare-tactic article, eek!), and noticing that one of them appears to be operating from some student's dorm room, and secondly, as Jeff says, people who complain are just going to complain to admin(a)remailer.net. They aren't going to take the time to try to figure out that my IP address is really in oberlin.edu, and complain to postmaster(a)oberlin.edu. So administration@oberlin would never even realize I was running a remailer, and since they haven't yet made any indication that that would be against the rules, I would be in a good position. Maybe it's time for Eric to figure out what he's going to do with remailer.net.

3 2

Re: The Remailer Crisis
by Johnathan Corgan 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >Well, let's do the math. Since the remailer has to be connected at all >times, of course, this implies $162 a month in connect charges, over >and above the other charges. Or $187 a month including the line >charge. Or $2244 a year. > >This makes a "cheap Linux box" almost a moot point. This is a lot more >than I'm willing to pay to run a remailer. > >(I can imagine workarounds that involve connecting at regular >intervals to pick up mail....assuming it "accumulates" somewhere (?), >but the goal of a remailer "on the Net" is what I'm after.) Well, yes, this is true. My point was that reliable, fast, easy to use bandwidth on the order of 128 Kbps is available now in some areas for relatively cheap rates. _With the condition_ that continuous access is not necessary to run a remailer (as I had outlined), this could prove to be a good jumping off ground for some remailer operators. Sheesh, I could start my own on my home ethernet if I were so inclined. The solution to the access fee problem is, of course, sharing that fee with other payees. Your example of putting boxes directly on TLG's network is a good example of this. >I agree that it's something to look at. We don't disagree here; we are solving two different problems it appears. == Johnathan Corgan "Violence is the last refuge of the incompetent." jcorgan(a)scruznet.com -Isaac Asimov -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLx8uG01Diok8GKihAQHClwP/fVWl/GWM9lWArj4qP4orDV9ZGJWqaCEj LJYVSekzetdxIn2iBfTcCLCSwYKqTsJgCKha8tqxM9H5Zq2hVUYat9TlGKBZwpfr b/Vy+N3K1o/+E3NnWxcsJPLaeJfkom1sIJZiZkXKrqUM2v7v2l8MERub7uYG/EIl 5LhaDwdg9ig= =Acce -----END PGP SIGNATURE-----

1 0

cpla mailing list revived
by jpp＠markv.com 17 Dec '03

17 Dec '03

The quietness of the cpla list was brought to my attention recently. I have improved the list software, changed the list address into a real internet style mailing list. You should now be able to be join and depart the cpla mailing list automatically. Who knows, this might even prompt a physical get-together. I will be adding the members of the old list to the new list, so expect to get another copy of the welcome message if you were on the cpla list a while ago. Here is a copy of the welcome message, FYI. Welcome to the Cypherpunks LA <cpla(a)markv.com> mailing list. Like every moderator of every new list, I hope this will be mostly signal and very little noise. I don't envision this as a general discussion list -- that's what the main list is for. This list is for: Coordinating physical meetings of Cypherpunks in the Los Angeles area: Location, time, equipment, arranging rides, etc. Suggesting topics to cover at the meetings. Coordinating other local group activities. Announcements of relevant talks, seminars and other such goodies in the Los Angeles area and environs. *Concise* pointers to other local groups, mailing lists, and sources of information that might be of interest to local Cypherpunks. Whatever everyone seems to use it for. This list is NOT for: Reposting the "important" messages from the main list or any other mailing list or newsgroup. (If someone wants to run a "distilled" Cypherpunks list, fine. This isn't it!) Preaching to the converted. No ranting! (If you want to rant, do it on the main list. Everyone else seems to...) Rehashing the same topics that are going on the main list. This list is now managed by a simple minded program. Send a message with a blank body and the subject 'subscribe' to be added to the list. The subject 'unsubscribe' will remove you from the list. Any suggestions for how to improve this intro are welcome. Any suggestions for a *local* FAQ are also welcome. Direct your sugestions to me at jpp(a)markv.com. PGP/ViaCrypt mail gladly accepted. This information is also available at ftp://ftp.markv.com/pub/jpp/cp-la-hi.txt j' <jpp(a)markv.com>

1 0

"Smart Roads" for toll collection and traffic logging
by northrop＠netcom.com 17 Dec '03

17 Dec '03

Here in Seattle there is a proposal to turn a couple of traffic chokepoints into toll roads. Because a toll plaza would back things up even worse, I'm guessing they'll look to an automated system that will let you pay without leaving your car. This is established tech -- a nifty article about it showed up in _Electronic Design_ last month. The downside is that it'll not be designed with privacy in mind at all, and will eventually have this pesky database of who went by the toll booth and when. We all know that old databases never die, they just get put on tape and stuffed in a box, to wait for someone with a curious streak to come by. This is a well-established problem with naiive designs of automated toll plazas, and I am looking for examples of things that could be done with this database by someone with ill intent, or could be done with the toll system itself if it got to be more widespread. - Obviously, if your car is talking to the road all the time, speeding tickets are a gimme. - You might be targeted for "further investigation" if you happen to drive by the wrong part of town. Gotta step up the heat on that war on drugs, ya know. I can come up with all sorts of ways to detect people from committing crimes (and don't really need those examples -- folks might think I *want* a Big Brother Highway!), but I'm curious what peoples' fears are about what this could mean to innocent folks, Joe Sixpack and his pals. There is a meeting in a few days where public comment on the toll road idea is being solicited, and I want to have some really compelling horror stories with which to capture peoples' imaginations about what a Big Brother Highway could mean. I want to scare people, but I want to scare 'em with something believable. If there's an archive that mentions anything like this, please point it out in private mail. I'll summarize what I get to the list, and also make that document available on the web, if anything interesting comes up. Thanks! Scott -- Scott Northrop (206)559-9878 northrop(a)netcom.com, northrop(a)mccaw.com Those who use arms well cultivate the Way and keep the rules. Thus they can govern in such a way as to prevail over the corrupt. -- Sun Tzu, The Art of War, Book IV

2 1

Netscape, RC4, key exchange?
by aba＠dcs.exeter.ac.uk 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- grendel(a)netaxs.com wrote: > aba(a)atlas.ex.ac.uk wrote: > > I have code to generate the RSA key pairs and modulus, what I am > > looking for is code to factorise a number using one of the better > > algorithms (quadratic sieve, etc.). > > It's been established that the encryption in Netscape is 40 bit >RC4, not 40 bit RSA, [...] Ok, so Netscape (the exported version only?) uses 40bit RC4 for encryption, but what about key exchange? RC4 is a stream cypher so both the receiver and sender need to know the key. Does anybody know what method Netscape uses to exchange keys DH, RSA, other? and what key sizes? Adam -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUALx+TkSnIuJ1VakpnAQEuBQP/TAiX81goT8r3KnvFh3WCm6TvzjUNAaEl G8NI5ELom8CWgIYp1uli+V+s0nRgZCKfZAvfeQrG97p2blSK0tOsZyV3E6cYKgXo yGcGUJZ8UdvBL0A93LJcU4LZEUITcC9/3HS09QD2oZBGzSettHk3nwKMmEer65OU QLsrRildnuw= =3vQF -----END PGP SIGNATURE-----

1 0

Crypto Anarchy/Libertarians in WSJ
by frissell＠panix.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Today's WSJ Front Page Left Column Less Is More Libertarian Impulses Show Growing Appeal Among the Disaffected When the Government Fails Many Voters are Asking: Who Needs it Anyway? Mixed Blessing to the GOP "Mr. Frezza...doesn't just want to cut government: He questions the very need for most of it. He figures that in a world in which computer wizards are close to creating their own private, encrypted digital cash system for making transactions without any government involvement, the need for centralized authority is shrivling." DCF -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLx/FiIVO4r4sgSPhAQEhmgP/dxCXAPS6iu/Zb9P7AuC6D8aDg94vZABs VjlXXXXWjkHedveIjQ9qdU8xELblzZiMlu35SKKygLvsD2a8bNXiC2FxBnA/H716 Dj4UHksctV3wJSZuwq6z8/fZds0Dg5GJLYbAUrbdInp/tM7TMrAhUVLFVkVpzhzk 25aXzmIiv5U= =4FOR -----END PGP SIGNATURE----- ************************************************************************* ATMs, Contracting Out, Digital Switching, Downsizing, EDI, Fax, Fedex, Home Workers, Internet, Just In Time, Leasing, Mail Receiving, Phone Cards, Quants, Securitization, Temping, Voice Mail.

1 0