- cypherpunks-legacy - lists.cpunks.org

CDR: NETCENTER uid=Bob276Bob key=KJE3P6J9DTen CONFIRM!
by netcenter-reg＠netscape.com 07 Oct '00

07 Oct '00

1 0

CDR: Re: stego for the censored
by Michael Motyka 07 Oct '00

07 Oct '00

> > I'm currently looking for a way to get encrypted data via stego to > people who live in countries where crypto is illegal, and who may be > watched. so just sending them a large graphic would likely arouse > suspicion. > > the 2 best solutions I've come up with so far are porn and spam. both > are readily believable, even in large quantities. > the problem with porn is that it may be illegal in itself in the same > countries. the problem with spam is that ascii text just doesn't offer > much to hide stego in (whitespacing, etc. is both easy to find and can > store very little data). > Since the amount of information you need to send and the channel/event capacity for stego'd information are unspecified maybe you're looking for a general solution. Part of a general solution might be a scatter-gather mechanism. XMIT The information you need to send is broken up into multiple pieces and an index. The simplest method would be a flat structure but a tree is acceptable. Redundancy via overlapping segments could be introduced. Redundancy/error correction might be useful if Mallet is inclined for example to mess with whitespace in your e-mail. Anyway, the pieces are stego'd into multiple carriers that are made available via any and all protocols. RCV Once a recipient has the top-level index they can gather the pieces and reconstruct the original. Notes Scattering the information over multiple sites and accessing it via valid sets of linked pages for example might help in disguising the act of retrieving any particular carrier. A typical browse sequence might include many unused files and only one carrier. A single carrier might serve various fragments from multiple original input documents intended for different recipients. If a single carrier is safe and acceptable a webcam might be a nice broadcast for a few channels of text. It does simplify the task of identifying the sender and making a list of possibly recipients. A shifting set of sources would probably be safer. Message fragments could be transmitted over any period of time with the top-level index being the final step. That would help the sender avoid detection of the actual transmission since it could be interleaved with other activities. Likewise reception could be over an arbitrary period of time and interleaved with other activities. *** There's a high bandwidth cost associated with the scatter-gather process but it does allow arbitrarily sized messages and I'm assuming the cost of getting caught is extremely high as is the desire of authorities to view content, locate the sender or other recipients and suppress the information if it is detected. Mike

4 3

CDR: stego for the censored
by Tom Vogt 07 Oct '00

07 Oct '00

I'm currently looking for a way to get encrypted data via stego to people who live in countries where crypto is illegal, and who may be watched. so just sending them a large graphic would likely arouse suspicion. the 2 best solutions I've come up with so far are porn and spam. both are readily believable, even in large quantities. the problem with porn is that it may be illegal in itself in the same countries. the problem with spam is that ascii text just doesn't offer much to hide stego in (whitespacing, etc. is both easy to find and can store very little data).

11 20

CDR: Re: Anonymous Remailers cpunk
by No User 07 Oct '00

07 Oct '00

>This subthread came along >because some people have noticed that anonymous remailers are used for >an awful lot of spam. They are? I don't think I have ever received spam sent through a remailer or seen remailed spam in a newsgroup. Where am I most likely to encounter remailed spam? Anonymous

1 0

CDR: E Street Journal Emerging stock alert
by announce＠estreetjournal.net 07 Oct '00

07 Oct '00

1 0

CDR: Re: Disposable remailers
by despot 07 Oct '00

07 Oct '00

On Thu, 5 Oct 2000, Bill O'Hanlon wrote: > It might not be able to have crypto. I'm not sure if > something PGPish can be ported to it and still leave room > for the incoming message. It comes with less than 300K of > useable RAM. However, the TINI does have a socket on it > for an Ibutton, so one of Dallas' Crypto or Java buttons > might be able to take on the crypto load. That's more > money per unit, however. Perhaps this idea would work on low volume remailers. An iButton could be loaded with an applet to perform public key crypto, and thus, a sort of mixmaster remailer could be constructed. But, the memory constraints on iButtons (I believe 134K is the max currently available) and their slow speed may even rule this out for a low-volume remailer. And, as Bill mentioned, latency and reordering would not be feasible. Without those features, the amount of anonymity is reduced. > I'm envisioning that the code would announce itself to some set of > web servers so that people can know where to find a few of these > transient remailers when they wanted to send some messages. Problems occur if the locations of these tini remailers are spread through such means. If the addresses are posted to a web site, tracking down such remailers would be simple, quick, and as thorough as the list of the remailers. > Also, due to the small memory footprint, it doesn't look > like a lot of messages can be stored locally, so there's > not a lot of room for latency and message re-ordering. Use of these tini remailers should really only be done in a remailer-chained message. Of course, the chain would need to include one or more non-tini remailers. This way, even if all tini remailers are monitored, you still have a remailer that provides some level of obfuscation through latency and reordering. But, this disposable remailer idea is solid. As a quick example scheme, if there were some sort of remailer protocol that functioned like routing protocols, as disposable remailers came online, they could announce themselves to other remailers. Pseudorandom hopping from one disposable remailer to another could occur in a remailer-chained message, instead of manually encrypting a message for a chain of remailers. The sender could encrypt the message for the gateway and final non-disposable remailers and then specify a hop count. The first non-disposable remailer would decrypt one layer of encryption, decrement the hop count, pick pseudorandomly a disposable remailer to pass this message to, encrypt this message and pass it on. When the hop count hits one, the message is just forwarded to the final non-disposable remailer in the chain, which would then decrypt the final layer of encryption and passes it on to the recipient. Of course, this example is just something I pulled out of my ass...read up on more advance schemes if interested. The dynamic property of such a scheme would be ideal for disposable remailers. As they are discovered and removed, the system would compensate. With cheap cost, simple set up, and ease of hiding, disposable remailers could be brought online faster than they are taken down. And, if placed anonymously, there will no one to be held responsible for the devices. So, are small devices like tini's the ideal form of the future remailer? Is some sort of distributed, dynamic remailer scheme based on small devices the way to go? The stable remailer running on a box is subject to all sorts of legal issues, isp problems, etc. These covert, anonymous remailers have a great deal more freedom. On a side note, what other throw-away internet-ready devices would be of interest? Motion detectors? Access control devices? Door locks? -andrew

3 2

CDR: encryption obsoleted
by Anonymous Remailer 07 Oct '00

07 Oct '00

Well, they are original. I do not recall any other instance when a government said "we will not snoop." --- "Former Yugoslav President Slobodan Milosevic has no longer any influence on the police and army force in the country, and all phone taps, both fixed and mobile in Serbia have stopped, stated Zoran Djindjic, one of the leaders of the Democratic Opposition of Serbia (DOS), in an interview for B2-92." "Djindjic also said that the first step toward change is that all telephone tapping has been stopped in Serbia."

1 0

CDR: encryption obsoleted
by Anonymous Remailer 07 Oct '00

07 Oct '00

Well, they are original. I do not recall any other instance when a government said "we will not snoop." --- "Former Yugoslav President Slobodan Milosevic has no longer any influence on the police and army force in the country, and all phone taps, both fixed and mobile in Serbia have stopped, stated Zoran Djindjic, one of the leaders of the Democratic Opposition of Serbia (DOS), in an interview for B2-92." "Djindjic also said that the first step toward change is that all telephone tapping has been stopped in Serbia."

1 0

CDR: Read Only If Serious About Retiring In 2-4 Years
by retire＠websu.com 07 Oct '00

07 Oct '00

If you are someone who is driven, motivated, and serious about earning a Multiple Six Figure Income, we would like to speak with you. If you have reached the point in your life where you are ready for Financial Freedom and a Real Opportunity to Retire in 2-4 years, calling the number below is your first step. This� is a serious business looking ONLY for those that want to make a MINIMUM of $10,000 per month and to truly be in a position to help others at the same time. **24 Hour Recorded Message:� 1-800-320-9895 Ext. 6579** Not MLM or Franchise Your background, age and debt level are not important. Just a strong desire for financial independence. "Whatever You Vividly Imagine, Ardently Desire, Sincerely Believe, And Enthusiastically Act Upon Must Inevitably Come To Pass." Napoleon Hill To be removed respond at� later1000(a)yahoo.com

1 0

CDR: Government again enters Somalia
by James A.. Donald 07 Oct '00

07 Oct '00

Some time ago, the president of Somalia returned from his exile to Mogadishu, the former capital of Somalia, which was going to be the new capital of Somalia. Lots of people gave lots of speeches about how popular and successful the new government was, and CNN gave a glowing account of how pleased the Somalis were to have a government again. Approximately twenty four hours later, the new government did a moonlight flit out of Somalia back into exile. Recently the new government announced it was returning from its exile to Baidoa, which is to be the new government of Somalia. Lots of notables gave lots of speeches about how popular and successful the new government was, and CNN gave a glowing account of how pleased the Somalis were to have a government again. Unfortunately neither the president or any senior members of the new government were able to make it Baidoa in time for the press conference.

1 0