- cypherpunks-legacy - lists.cpunks.org

Anonymiser.com might reveal your IP (fwd)
by measl＠mfn.org 27 Nov '01

27 Nov '01

---------- Forwarded message ---------- Date: Tue, 27 Nov 2001 14:55:11 +0000 From: Klaxon <klaxon(a)netcabo.pt> To: Bugtraq <bugtraq(a)securityfocus.com> Cc: NUKE Borgas <nukeborgas(a)yahoogroups.com> Subject: Anonymiser.com might reveal your IP Hello, if this has been discussed in the past just tell me to sod off. While playing with proxy configurations for a machine at home I came across a questionable behaviour from www.anonymiser.com. I stuck netcat on port 80 of this machine and than surfed back to it through Anonymiser. I know there's a transparent proxy on my ISP and apparently it attaches a "Client-ip: x.x.x.x" field to all http requests. What's fun is that Anonymiser happily copies this field to its own http request. Actually it will pass along any field sent with your request, which makes sense for "Accept-..." stuff but is obviously a bad ideia for anything else. ------------------------------------- [~]# nc -l -p 80 GET / HTTP/1.0 Host: foo.bar.com Accept: text/xml, application/xml, application/xhtml+xml, text/html;q=0.9, image/png, image/jpeg, image/gif;q=0.2, text/plain;q=0.8, text/css, */*;q=0.1 Accept-Charset: iso-8859-1, utf-8;q=0.66, *;q=0.66 Accept-Encoding: identity User-Agent: Mozilla/4.78 (TuringOS; Turing Machine; 0.0) Client-ip: X.X.X.X <------------ BOOM! Via: HTTP/1.1 proxy-02[XXXXXXX] (Traffic-Server/3.5.7 [XXXXXXXX]) ------------------------------------- So beware if you trust this service and there's an unknown proxy somewhere along the wire. Please note this experience was with Anonymiser.com's free service. I would like to know if anyone paying for it can confirm this. To try it: launch netcat on your port 80 (nc -l -p 80), telnet to www.anonymiser.com on port 80 and request your address: [~]$ telnet www.anonymiser.com 80 Trying 168.143.112.10... Connected to www.anonymiser.com. Escape character is '^]'. GET http://your.ip.goes.here HTTP/1.0 Foo-bar: it hurts Netcat should spit this: [~]# nc -l -p 80 GET / HTTP/1.0 Host: your.ip.goes.here Foo-bar: it hurts Connection: Keep-Alive If Foo-bar is there so can a Client-ip be. -- EOF

1 0

Nov-L: Wanted - cases of prosecutorial misconduct (fwd)
by measl＠mfn.org 27 Nov '01

27 Nov '01

---------- Forwarded message ---------- Date: Tue, 27 Nov 2001 14:55:50 -0800 From: Nora Callahan <nora(a)november.org> To: november-l(a)november.org Subject: Nov-L: Wanted - cases of prosecutorial misconduct November Members: Please pass on the following notice to your imprisoned loved ones. The Center for Public Integrity and veteran investigative journalist Steve Weinberg are researching cases of prosecutorial misconduct that lead to wrongful convictions. We would like to hear from anybody - prisoners, their families and friends, journalists, lawyers, expert and lay witnesses, jurors, medical examiners, police officers, judges - with evidence of prosecutorial misconduct. Steve Weinberg, of Columbia, Missouri, an author, is a former newspaper reporter and magazine staff writer. Working with Steve Weinberg is Neil Gordon. Neil Gordon is a research associate at the Center for Public Integrity, who has worked as a lawyer. Funding for the project comes from several sources, most prominently the Open Society Institute in New York. The research will be disseminated by the Center for Public Integrity, possibly in the form of a book from a major publisher. Steve Weinberg and Neil Gordon plan to name names of prosecutors who cross the line, especially in jurisdictions where wrongful convictions have occurred repeatedly. Steve Weinberg can be contacted by: E-mail: weinbergs(a)missouri.edu Telephone: (573) 882-5468 Fax: (573) 882-5431 Regular mail: 807 West Blvd. South, Columbia, MO 65203 Read Weinberg's account of the Ellen Reasonover story, "Railroaded," which was published in The American Lawyer. Neil Gordon can be contacted at the Center for Public Integrity by: E-mail: ngordon(a)publicintegrity.org Telephone: (202) 466-1300 x-105 Fax: (202) 466-1101 Regular mail: 910 17th Street, NW, 7th Floor, Washington, DC 20006 -- The November Coalition, founded in 1997 is a 501 (c) (3) nonprofit organization, your gifts are tax deductible. You can send your donation to: The November Coalition 795 South Cedar Colville, WA 99114 -------- November-L is a voluntary mailing list of the November Coalition. To unsubscribe, visit http://www.november.org/lists/ or send a message to november-L-request(a)november.org containing the command "unsubscribe"

1 0

Why encrypt
by Major Variola (ret) 27 Nov '01

27 Nov '01

At 01:06 PM 11/27/01 -0500, Sunder wrote: >But one has to consider several factors in building a threat model >including: Why do I want to encrypt my hard drive? Why do I want to >encrypt my emails? How much attention am I attracting by starting to use >PGP now versus pre 911? Can I communicate securely by means other than >email? > >Of course the cypherpunk answer is you should always encrypt everything >all the time, but if you haven't do so up until this point, is it worth >getting probed by the Feds? Maybe it is if they have nothing on >you or you expect them to have little reason for fucking with you. I have had success with some populations by pointing out that folks have been busted for their pr0n collection by nosy computer-repairmen. And when the machine is down its too late to remove (wipe) or encrypt the naughty bits. Good argument for encrypted volumes.

2 1

History of Port Authority of New York and New Jersey
by Jim Choate 27 Nov '01

27 Nov '01

What do you know, they did go through Congress just like the Constitution requires... http://www.panynj.gov/hismain.HTM -- -- ____________________________________________________________________ Day by day the Penguins are making me lose my mind. Bumper Sticker The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1

Re: The Crypto Winter
by Thomas Lyon Gideon 27 Nov '01

27 Nov '01

On Tue, Nov 27, 2001 at 02:01:12PM -0500, Sunder wrote: > > While I'm not comparing humans to ants, nor to slime mold cells -- don't > even attempt to make that connection, the lesson here for you to learn is > that individual action performed in the self interest of the individual, > when integrated over a large population shows emergent behavior, and is > beneficial to most members of the group. > > You don't need socialism, communism, fascism or religion in order to help > others out. The drives to survival and self preservation allow us humans > to act together in common interests. As is does ants, most types of bees > (termite bees for example aren't social.), etc. The point about emergent behavior is excellently made. A corollary that occurs to me is that one of the prime motivators in the emergent quality of human society may well be the pursuit of non-zero sum games. This assumption is based on my reading of Robert Wright's _Non Zero_. I think Sunder hits this on the head as well when he goes off about how self interest does not necessarily harm others, that as humans we are not typically bound by win-lose scenarios. Rather some behavior may result in poor or no gains on a societal scale and others may result in increased benefits for all. In this light, seemingly altruistic behavior can be re-interpreted as banking favors against future need. One of Wright's better examples is the practice in certain tribal societies of giving away excess food. Usually the food wouldn't keep long, anyway, and by helping a neighbor out today help is usually secured against future need when a neighbor may be the one with the excess. Tom -- "I recommend..bread, meat, vegetables, and beer." -- Sophocles mailto:thomas@gideonfamily.org http://www.gideonfamily.org/tom/ jabber:Highlander@jabber.org

1 0