- cypherpunks-legacy - lists.cpunks.org

Lame Gurus (fwd)
by Al Billings 03 Feb '93

03 Feb '93

Here is an interesting (or maybe not) current use for one of the anon remailers. ---------- Forwarded message ---------- Date: Tue, 2 Feb 93 22:44:09 EST From: aliquis <an1226(a)anon.penet.fi> To: future(a)nyx.cs.du.edu Subject: Lame Gurus Yawn. CYBERPUNK: Virtual sex, smart drugs and synthetic rock 'n' roll! --TIME cover 8 February 1993. Sure, but do they know how to set their umask values so that people can't peek? La-de-dah, let's check on one of the gurus... (BTW, if you enjoy this, & you can get on the WELL, try some of the other cyberpunk.gods from B. Sterling on. Not that they have anything much of interest....) [Actual session script, edited only to protect the guilty.] ============================================================== $ telnet well.sf.ca.us Trying... Connected to WELL.SF.CA.US, a SEQUENT-S27 running DYNIX. This is The WELL DYNIX(R) V3.1.0 (well) Type newuser to sign up. Type trouble if you are having trouble logging in. login: xxxxx Password: Last login: Tue Feb 2 XX:XX:XX from Xxxxxxx.xxx.xxxx DYNIX(R) V3.1.4 NFS #2 (): Tue Mar 31 12:38:27 PST 1992 ======================================================== You own your own words. This means that you are responsible for the words that you post on the WELL and that reproduction of those words without your permission in any medium outside of the WELL's conferencing system may be challenged by you, the author. Thanks for dropping into the WELL. If you haven't changed your password since October 15, 1992, please do so now. Type: change password at an OK prompt. **************************************************************** well 1: grep "Tim Leary" /etc/passwd timleary:xxxxxxxxxxxxxxx:9339:200:Tim Leary:/uh/39/timleary:/usr/shell/menu well 2: cd /uh/39/timleary well 3: ls -l total 54 -rw-r--r-- 1 timleary well 728 Jun 12 1992 1 -rw-r--r-- 1 timleary well 441 Jun 12 1992 240 -rw-r--r-- 1 timleary well 479 Jun 12 1992 29 -rw-r--r-- 1 timleary well 403 Jun 12 1992 359 -rw-r--r-- 1 timleary well 535 Jun 12 1992 42thnnks -rw-r--r-- 1 timleary well 1096 Jun 12 1992 60 -rw-r--r-- 1 timleary well 1096 Jun 12 1992 62 -rw-r--r-- 1 timleary well 2051 Jun 12 1992 animatemcs -rw-r--r-- 1 timleary well 11360 Jun 12 1992 animatemike -rw-r--r-- 1 timleary well 4141 Jun 12 1992 barlow -rw-r--r-- 1 timleary well 523 Jun 12 1992 barlow2 -rw-r--r-- 1 timleary well 0 Jun 12 1992 c -rw-r--r-- 1 timleary well 11 Jun 12 1992 cbf.002464 -rw-r--r-- 1 timleary well 0 Jun 12 1992 cbf.005371 -rw-r--r-- 1 timleary well 527 Jun 12 1992 cbf.022859 -rw------- 1 timleary well 4 Jun 12 1992 dead.letter -rw-r--r-- 1 timleary well 727 Jun 12 1992 hlr -rw-r--r-- 1 timleary well 403 Jun 12 1992 info -rw------- 1 timleary well 16663 Jan 9 23:43 mbox -rw------- 1 timleary well 452 Jan 9 23:36 q -rw-r--r-- 1 timleary well 341 Jun 12 1992 xmodem.log well 4: cat 29 >From rusirius Sun Jun 24 11:58:18 1990 Received: by well.sf.ca.us (4.12/4.7) id AA02393; Sun, 24 Jun 90 11:58:15 pdt Date: Sun, 24 Jun 90 11:58:15 pdt From: rusirius (Mondo 2000) Message-Id: <9006241858.AA02393(a)well.sf.ca.us> To: timleary Subject: Re: Masonicks Status: RO Yeah, great to have you virtually in the kitchen. Hope Steve might be helpful. He's advising us. Good business head! Ill further discuss the Burroughs thing with Mu & be back to you during the week. well 5: echo Heh He He He Heh He He He well 6: exit well 7: logout Connection closed by Foreign Host $ ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind system, any replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

1 0

I've had many requests for this, so here it is.
by The Phantom 03 Feb '93

03 Feb '93

These are the instructions for the remailer set up on one of my accounts, dubbed the 'phantom remailer' by some. These instructions are available by fingering phantom(a)mead.u.washington.edu. Recently I had problems with the receiveing and decryption of encrypted PGP messages, but everything is functional now. Please note the syntax: if you don't include the '::'s, the message will end up in my mailbox! (this goes for all remailer systems). -----BEGIN PGP SIGNED MESSAGE----- If you wish to bounce anonymous mail (remail): - ---------------------------------------------- include the line "Request-Remailing-To: <user@host>" in the mail header, then the body of the message will be forwarded to the recipient. - -or- include the lines :: Request-Remailing-To: <user@host> in the body of the mail message, of which the rest of message will be forwarded to the recipient. If you wish to send encrypted mail to remail: - --------------------------------------------- include the line "Encrypted: PGP" in the mail header, then the body will be decrypted and searched for the above-mentioned convention for finding the recipient. - -or- include the lines :: Encrypted: PGP in the body of the mail message, of which the rest of the message will be decrypted and searched for the above-mentioned convention for finding the recipient. Recently, I was having problems with the encryption part of the remailer, but that has been fixed. The remailer phantom(a)mead.u.washington.edu is now fully functional. To encrypt the message for the remailer to decypher, you must use the remailer's public key, which follows. - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.1 mQCNAitcsHIAAAEEAPZ3Ex1rEwKLeANRoaRyTA72htDFGiGPmWkowByZyUtRkTRp Vs/WdhgoJ1VLz76Chyb63I+ejpekeJfOud98gMh2HtVoTjNGYAawpCKo15tFyzYn BFYVy0NjroyxwM6YnPCsYfYMpvyjEa5mfgrlyzvYBBeTDRD89vYoe7Eue0fDAAUR tDJBbm9ueW1vdXMgUmVtYWlsZXIgPHBoYW50b21AbWVhZC51Lndhc2hpbmd0b24u ZWR1PokAlQIFECtcqWpkhnxaNc7AOQEBZ+8EAIOOvsFf/niUrWw0BRvPhSEmtzrA kQJt3q7kPXutjj3IsJ1/oR8oGhv4iPQ5BmNvvd5dnsbbCqOurhaftVgzlSpyQcYi VryeNVvpdeX1+VTS7N+lAHVAlqnimoaEtUUIftDoDIjNNKRDi+nU4GbbL+1MqveC 1LKQMIi1WPjr6Wpw =1XNo - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.1 iQCVAgUBK29GmvYoe7Eue0fDAQHxYwP/UapN+FYiB1J3ek18QiaXCJ90rcwFOx79 Mz596NYL/NArGCDGd/RPbEqBG0lpGW4H71TSvPK/G26ImyxgEvmjeMqBhB6jWZZK Xh0zgd+cGN9DS4N5EOvvt0N2CaVGTPNO2uqyXuGM8j2GfV++2E0RHApeuDirooc1 sYyj1iiKYDk= =LZMq -----END PGP SIGNATURE----- Matt Thomlinson University of Washington, Seattle, Washington. Internet: phantom(a)u.washington.edu phone: (206) 528-5732 PGP 2.0 key availaible via email or finger phantom(a)hardy.u.washington.edu

1 0

Remailer abuse
by nobody＠soda.berkeley.edu 03 Feb '93

03 Feb '93

-----BEGIN PGP SIGNED MESSAGE----- From: Brad Huntting <huntting(a)glarp.com> > Custom headers in RFC822 messages must begin with "X-". Making up > new headers that dont begin with "X-" is unnessary and violates > the standard. What RFC 822 actually says is this: 4.7.4. EXTENSION-FIELD A limited number of common fields have been defined in this document. As network mail requirements dictate, additional fields may be standardized. To provide user-defined fields with a measure of safety, in name selection, such extension-fields will never have names that begin with the string "X-". Names of Extension-fields are registered with the Network Information Center, SRI International, Menlo Park, California. 4.7.5. USER-DEFINED-FIELD Individual users of network mail are free to define and use additional header fields. Such fields must have names which are not already used in the current specification or in any definitions of extension-fields, and the overall syntax of these user-defined-fields must conform to this specification's rules for delimiting and folding fields. Due to the extension-field publishing process, the name of a user-defined-field may be pre-empted. Note: The prefatory string "X-" will never be used in the names of Extension-fields. This provides user-defined fields with a protected set of names. I must say, this is a refreshingly non-facist RFC. There are few of the prohibitions which we are accustomed to seeing in these "laws of the net". In particular, users can use any header fields they want, as long as they aren't already used; they only risk being made obsolete if their chosen field names become used. That's why people use X-. Hal 74076.1041(a)compuserve.com -----BEGIN PGP SIGNATURE----- Version: 2.1 iQCVAgUBK23k7agTA69YIUw3AQFUTAP/UScvi9FOj4o31sjsqmz/xIJ90KB7WnK5 8m4yKX/p46IbH9+FhSvgBfURokh7+dSk91+GR6NPM/4rXEm+5aMbee6uuMsJaTF/ qPmmen1JnvtabTZi9s0HeQ2frqK7kolr0GIair7U8CiPhX1QVNx0IwzYB6g9YQmP Zv84fGUzGEw= =U54Y -----END PGP SIGNATURE-----

2 1

Remailer changes.
by Anonymous＠cs.Buffalo.EDU 03 Feb '93

03 Feb '93

Hal Finney's remailer writes: >Remailed-By: Hal Finney <hal(a)alumni.caltech.edu> >Remail-Notice: This message is NOT from the person listed in the From > line. It is from an automated software remailing service operating at > that address. Please report problem mail to <hal(a)alumni.caltech.edu>. I have taken similar precautions with my remailer... as you can tell from the header lines. I'm still having trouble convincing my system adminstrator to install PGP v2.1 (or even v2.0). For some reason, he seems to be ignoring my messages. Since I only have a limited knowledge of C, I really don't know how to fiddle around with the PGP *.C source files too much, otherwise, I would install it myself. The error that I keep getting running under SunOS version 4.1.3 is: > make sun4gcc make all CC=gcc LD=gcc OBJS_EXT=sparc.o \ CFLAGS="-O -fpcc-struct-return -DUNIX -DHIGHFIRST -DIDEA32" gcc -O -fpcc-struct-return -DUNIX -DHIGHFIRST -DIDEA32 -target sun4 -c pgp.c In file included from pgp.c:109: /usr/include/stdlib.h:18: conflicting types for `abort' <built-in>:0: previous declaration of `abort' /usr/include/stdlib.h:26: conflicting types for `exit' <built-in>:0: previous declaration of `exit' *** Error code 1 make: Fatal error: Command failed for target `pgp.o' Current working directory /tmp/pgp21/src *** Error code 1 make: Fatal error: Command failed for target `sun4gcc' If anyone can help me out, please e-mail me *DIRECTLY* and not to the list. -- +==== Internet: babani(a)cs.buffalo.edu ===+======== Amateur-Radio: N2LYC ======+ ! Bitnet: V078LNGT(a)ubvms.BITNET | UUCP: rutgers!ub!babani ! ! Alternate: an173(a)cleveland.freenet.edu | Plsure dpnds on the othrs prmison. ! +== PGP key available. (If you don't know what a PGP key is... find out!) ==+

1 0

Re: NEWS! Steve Jackson case
by fnordbox!loydb＠cs.utexas.edu 02 Feb '93

02 Feb '93

:"How long would it have taken you, Mr. Foley, to find out what Steve :Jackson Games did, what it was?" asked Sparks. "An hour? : :"Was there any reason why, on March 2, you could not return to Steve :Jackson Games a copy, in floppy disk form, of everything taken? : :"Did you read the article in Business Week magazine where it had a :picture of Steve Jackson -- a law-abiding, tax-paying citizen -- :saying he was a computer crime suspect? : :"Did it ever occur to you, Mr. Foley, that seizing this material could :harm Steve Jackson economically?" : :Foley replied, "No, sir," but the judge offered his own answer. : :"You actually did, you just had no idea anybody would actually go out :and hire a lawyer and sue you." This particular exchange makes me warm & tingly inside... :-) :"Agent Foley, it's been almost three years. Has Chris Goggans been :indicted? Has Loyd Blankenship been indicted? Has Loyd Blankenship's :computer been returned to him?" No, it hasn't. <sigh> Hopefully this will motivate them to return it. While I can't get too excited about the then state-of-the-art 286 system, I'd *really* like the laser printer back, and Whitney wants her papers returned. Loyd *************************************************************************** * loydb(a)fnordbox.UUCP Call the Fnordbox BBS * Loyd Blankenship * * GEnie: SJGAMES 2 v32bis lines, 24 hrs * PO Box 18957 * * Compu$erve: [73407,515] 512/444-2323 * Austin, TX 78760 * * cs.utexas.edu!dogface!fnordbox!loydb * 512/447-7866 * ***************************************************************************

1 0

Re: Remailer abuse
by eric＠synopsys.com 02 Feb '93

02 Feb '93

Nobody (well, actually Hal) writes: >> What I could do, if more "problem" messages come through, is create a >> list of people _not_ to forward mail to. >> >> Hal >> 74076.1041(a)compuserve.com Another suggestion is to invert this: create a list of addresses that the remailer WILL send mail to. But, that's STUPID, you say. Well, maybe, but I don't think so. It is, however, sneaky. If you run a remailer, you should be registered with other remailers so they can use you to forward stuff. This places you on thier list of OK places to remail stuff to. Remailers should exchange these lists to keep them up to date. This, of course, encourages people to run remailers, which is what we want. It also silences any objections from people concerning anonymous abuse, since you have to explicitly ask for anonymous mail by running a remailer. One problem this doesn't solve is how to send anonymous mail to someone who hasn't registered, since that's exactly what we're trying to avoid. Someone could offer a human remailing service which moderated the messages it sent through. Using such a service, you could request someone to run a remailer. A cheaper service could just send a standard message to an address that you send to it. In all these cases, the service provider is responsible for the content of the messages sent out, and consequently would want to be very conservative. -eric messick P.S. Note the change in my address. I've just changed jobs and am now eric(a)synopsys.com. All my old addresses (eric(a)parallax.com, eric(a)toad.com) forward.

1 0

NEWS! Steve Jackson case
by hkhenson＠cup.portal.com 02 Feb '93

02 Feb '93

I pulled this off comp.org.eff.news. I imagine many of you on both the extropian and cypherpunk list have been following this, but since there was no mention . . . . It is related to extropians because Steve is an Alcor member and Alcor once had similar problems (we sued the county using the same statute because our BBS was taken without a proper warrant and got $30k in an out of court settlement.) This is a report of day three of the trial which ended last week. There is more on the other two days posted in comp.org.eff.talk. Enjoy. Thanks to wixer!pacoid(a)cs.utexas.edu (Paco Xander Nathan) for posting, Joe Abernathy for excellent reporting, *many* thanks to EFF and especially John Gilmore (EFF founder and owner of toad.com--home of the cypherpunks list) and congratulations to Steve Jackson! Keith Henson ------- Steve Jackson Games/Secret Service wrapup By JOE ABERNATHY Copyright 1993, Houston Chronicle AUSTIN -- An electronic civil rights case against the Secret Service closed Thursday with a clear statement by federal District Judge Sam Sparks that the Service failed to conduct a proper investigation in a notorious computer crime crackdown, and went too far in retaining custody of seized equipment. The judge's formal findings in the complex case, which will likely set new legal precedents, won't be returned until later. A packed courtroom sat on the edge of the seat Thursday morning as Sparks subjected the Secret Service agent in charge of the investigation to a grueling dressing-down. The judge's rebuke apparently convinced the Department of Justice to close its defense after calling only that one of the several government witnesses on hand. Attorney Mark Battan entered subdued testimony seeking to limit the award of monetary damages. Secret Service Special Agent Timothy Foley of Chicago, who was in charge of three Austin computer search-and-seizures on March 1, 1990, that led to the lawsuit, stoically endured Spark's rebuke over the Service's poor investigation and abusive computer seizure policies. While the Service has seized dozens of computers since the crackdown began in 1990, this is the first case to challenge the practice. "The Secret Service didn't do a good job in this case. We know no investigation took place. Nobody ever gave any concern as to whether (legal) statutes were involved. We know there was damage," Sparks said in weighing damages. The lawsuit, brought by Steve Jackson Games of Austin, said that the seizure of three computers violated the Privacy Protection Act, which provides First Amendment protections against seizing a publisher's works in progress. The lawsuit further said that since one of the computers was being used to run a bulletin board system containing private electronic mail, the seizure violated the Electronic Communications Privacy Act in regards to the 388 callers of the Illuminati BBS. Sparks grew visibly angry when it was established that the Austin science fiction magazine and game book publisher was never suspected of a crime, and that agents did not do even marginal research to establish a criminal connection between the firm and the suspected illegal activities of an employee, or to determine that the company was a publisher. Indeed, agents testified that they were not even trained in the Privacy Protection Act at the special Secret Service school on computer crime. "How long would it have taken you, Mr. Foley, to find out what Steve Jackson Games did, what it was?" asked Sparks. "An hour? "Was there any reason why, on March 2, you could not return to Steve Jackson Games a copy, in floppy disk form, of everything taken? "Did you read the article in Business Week magazine where it had a picture of Steve Jackson -- a law-abiding, tax-paying citizen -- saying he was a computer crime suspect? "Did it ever occur to you, Mr. Foley, that seizing this material could harm Steve Jackson economically?" Foley replied, "No, sir," but the judge offered his own answer. "You actually did, you just had no idea anybody would actually go out and hire a lawyer and sue you." More than $200,000 has been spent by the Electronic Frontier Foundation in bringing the case to trial. The EFF was founded by Mitchell Kapor amid a civil liberties movement sparked in large part by the Secret Service computer crime crackdown. "The dressing-down of the Secret Service for their behavior is a major vindication of what we've been saying all along, which is that there were outrageous actions taken against Steve Jackson that hurt his business and sent a chilling effect to everyone using bulletin boards, and that there were larger principles at stake," said Kapor, contacted at his Cambridge, Mass., office. "We're very happy with the way the case came out," said Shari Steele, who attended the case as counsel for the EFF. "That session with the judge and Tim Foley is what a lawyer dreams about." That session seemed triggered by a riveting cross-examination of Foley by Pete Kennedy, Jackson's attorney. Kennedy forced Foley to admit that the search warrant did not meet even the Service's own standards for a search-and-seizure, and did not establish that Jackson Games was suspected of being involved in any illegal activity. "Agent Foley, it's been almost three years. Has Chris Goggans been indicted? Has Loyd Blankenship been indicted? Has Loyd Blankenship's computer been returned to him?" The purported membership of Jackson Games employee Blankenship in the Legion of Doom hacker's group triggered the raids that day on Jackson Games, Blankenship's home, and that of Goggans, a Houstonian who at the time was a University of Texas student. No charges have been filed, although the computer seized from Blankenship's home -- containing his wife's dissertation -- never has been returned. After the cross-examination, Sparks questioned Foley on a number of key details before and after the raid, focusing on the holes in the search warrant, why Jackson was not allowed to copy his work in progress after it was seized, and why his computers were not returned after the Secret Service analyzed them, a process completed before the end of March. "The examination took seven days, but you didn't give Steve Jackson's computers back for three months. Why?" asked an incredulous Sparks. "So here you are, with three computers, 300 floppy disks, an owner who was asking for it back, his attorney calling you, and what I want to know is why copies of everything couldn't be given back in days. Not months. Days. "That's what makes you mad about this case." The Justice Department contended that Jackson Games is a manufacturer, and that only journalistic organizations can call upon the Privacy Protection Act. It contended that the ECPA was not violated because electronic mail is not "intercepted" when a BBS is seized. This argument rests on a narrow definition of interception.

1 0

Is this real?
by Don Henson 02 Feb '93

02 Feb '93

--> Is this real? -kuech- <-- Is what real? Don Henson PGP key available on request

1 0

Re: Remailer abuse?
by ghabrech＠ultrix.ramapo.edu 02 Feb '93

02 Feb '93

just got a ton of mail regarding the Remailer abuse. This wouldn't have anything to do with the loophole in the telnet sendmail port (25) would it. Thanx, Ghabrech(a)ultrix.ramapo.edu P.S. I heard that PGP version 2.1 was out. I used gopher but could not find it. Which sites would have it? Thanx again, L8R

1 0

Remailer abuse?
by hal＠alumni.cco.caltech.edu 02 Feb '93

02 Feb '93

When the Pax remailer was shut down, I stopped keeping any logs of my remailer operation. I felt that I did not want to provide information that would be helpful to those forces which oppose information privacy. So, I don't know the history of it, but today I received this message: To: hal(a)alumni.cco.caltech.edu Subject: Re: what you said you wanted I am shocked that you would send such trash to innocent young girls, whom you don't even know (Not that it is better if you know them) Well, I am appalled!!! Why me?? Is someone using my remailer to send trash to innocent young girls? I am uncomfortable to be facilitating this kind of activity. Can anyone offer suggestions for the ethical thing to do in this situation? Hal 74076.1041(a)compuserve.com

7 7