- cypherpunks-legacy - lists.cpunks.org

mondex
by Ryan Lackey 17 Dec '03

17 Dec '03

So, it appears (at least to me and many others) that Mondex is the most likely to succeed of all the serious electronic cash systems currently publically announced. I think I like some parts of their architecture, but to a great extent they seem to be completely at odds with the "free money" goals I have for electronic cash -- they're totally owned by the banking industry, willing to give up a great deal of privacy and anonymity in the name of preventing money laundering, and they appear committed to supporting only current national currencies, rather than allowing corporate scrip from either existing large companies (I trust at&t more than most governments) or organizations which buy a bunch of gold, charge minimal overhead, and issue currency totally backed by their assets. I'd be somewhat annoyed if the big electronic cash system only moved current statist cash into the electronic realm. Does anyone know how open the Mondex architecture is? Is it in any way possible to set up a competing system with your own card manufacture and issuing bodies for currencies which can be used in deployed Mondex POS terminals without too much hassle? Would this be analagous to the problem of replacing InterNIC with other NICs -- you need to make the user servers know to look at the rival systems and understand their keys? It would be kind of impressive in a way if Mondex were lame about allowing other currencies to proliferate free of state influences, yet managed to get the basic technology employed around the world, then some cypherpunkish group came up with their own cards, a little bit of software, etc. and then issued currency with more behind it than Mondex franchisees, had higher profits than Mondex, and then were to be the only currencies anyone would trust after the collapse of a few state-backed currencies. Also, I'd trust the cypherpunkish crowd to do a better job of hardware and software design for the cards and system, so they're likely to be more secure in that fashion as well. Am I being utterly out of touch with reality, or only tangential to it? --- Ryan Lackey rdl(a)mit.edu http://mit.edu/rdl/www/

2 1

Re: Dealing with Spam, Part 2
by Bill Stewart 17 Dec '03

17 Dec '03

At 02:27 PM 2/18/98 +0000, T.G.Griffiths(a)exeter.ac.uk wrote: >Mark(a)unicorn.com makes a good point about MailGuard. >If A and B both run MailGuard, and neither is on the >other's allowed list, do you get an infinite bounce >when A mails B or does the prog. get around it? I can >think of a couple of ways, but what does MailGuard do? The classic implementations of systems like that do one of three things 0) Don't think, leading to infinite mailbounces (often caught in testing, since it's very bad.) 1) Prevent loops, but there's no way to communicate 2) Prevent loops, and recognize mail from other MailThingies, which makes it easy for Spammers to forge. If you get fancy, you can probably work something like Receive message Send and record Alice-cookie -> <-- Reply with Alice-cookie and new Bob-cookie verify Alice-cookie and accept message Reply to Bob-cookie --> Verify Bob-cookie for future use Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

CPunks in the news: St. Jude
by Jim Gillogly 17 Dec '03

17 Dec '03

Today's (1 Dec 95) LA Times has a writeup on female "hackers", and gives several sympathetic column-inches to St. Jude Milhon, a charter Cypherpunk. Evidently she has a new book coming out (Girls with Modems?). Jim Gillogly Sterday, 11 Foreyule S.R. 1995, 17:11

1 0

Re: Declan pro-cencorship (sorta) (fwd)
by Bill Stewart 17 Dec '03

17 Dec '03

Unlike the rest of this discussion, Jim is mostly right here, and in a way that neither censors anyone nor discourages them from providing filtering services for people who want it. However, Wabe is reinventing NoCeMs - which support multiple NoCeM issuers, and you can pick any one or more that you like to kill off spam for you before you read it. I'm not sure how widely available implementations of NoCeM mailreaders are; probably they're mostly Emacs macros. On the other hand, while the Cypherpunks list gets lots of noise, it doesn't get much spam (except when somebody's targeting it), Filters that pick out the most interesting 10% are much more useful than filters that discard the bottom 10%. Attacking the list, while less suicidal than spamming alt.2600, is still not very bright, given the potential risks :-) >> Date: Sun, 15 Feb 1998 12:40:39 +0000 >> From: wabe <wabe(a)smart.net> >> Any reason Cyperpunks couldn't set up a distributed "spam innoculator?" >> >> If I get spam, I'd send it to "spam(a)cypherpunks.com" and then spam would >> send a fingerprint to all of our modified netscape messengers, which have been >> programmed to erase any messages which match that fingerprint. >> >> Then, if one person sees a spam message and declares it spam, no one >> else has to see it. (If they get the message from spam@cypherpunks in time.) At 12:02 PM 2/15/98 -0600, Jim Choate wrote: >What makes you think you are suitable to decide what others want to see? >How is this any different than any other form of censorship? This exact >issue is why the CDR was setup with multiple nodes. Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

RE: financial incentives for hashcash?
by Bill Stewart 17 Dec '03

17 Dec '03

At 12:13 PM 2/17/98 -0500, Fisher Mark wrote: >I am curious -- does anyone have any statistics on how much spam (what >percentage) is done via SMTP relay? To me, using the SMTP service of >someone/something you don't know to send 1000's/10,000's/more of email >messages seems pretty unfriendly at best. Yes, it's one of the major techniques used by spammers; the other big one is disposable accounts. maps.vix.com has information about the Realtime Blackhole List system, which lets you configure your sendmail system to reject incoming mail from any system that permits relays, and provides lots of information about setting your system not to do relays. They're a bit inflexible, but if you're up to rolling your own sendmail.cf code, you can fix that. Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

Announcement of premail v. 0.20
by Raph Levien 17 Dec '03

17 Dec '03

Hi all, I am releasing premail, a remailer chaining and PGP encrypting mail client, to the Net. If you are interested in using the cypherpunks remailers, but are intimidated by them or simply find them too hard to use, then this software can help. Premail will also PGP-encrypt and optionally sign outgoing mail. The README file is attached. Please check it out and let me know how you like it. Raph Levien ----------------------------------------------------------------------- README file for premail v. 0.20 27 Aug 1994 -- Raph Levien <raph(a)cs.berkeley.edu> Premail is a mail client for Unix workstations, supporting PGP encryption and anonymous remailers. It can be used either stand-alone or as a layer under your favorite user mail client. Premail has been designed to be as simple and transparent as possible. Features include: * Chaining of messages for cypherpunk remailers. * Automatic selection of reliable remailers. * PGP encryption and signing. * Online and offline operation. Premail is designed to masquerade as sendmail. It accepts mail in the same way, and takes the the same options, and providing additional header fields for its privacy features. Thus, if you can get your mail client to pass the mail to premail rather than sendmail, then you gain the use of the privacy features without changing the way you send mail. In the interest of simplicity, premail only handles outgoing mail. It does not handle incoming mail, or PGP decryption. Installation ------------ This section explains how to set up premail for basic operation, without PGP encryption. Use of PGP encryption is highly encouraged, and is covered in a later section, as are configuration and advanced features. This section assumes that your machine is connected to the net when you run premail. It is capable of offline operation as well, as discussed in a later section. 1. Get the source. Given that you are reading this file, you may have already done this; if so, go to step 3. The latest version of premail is available at: ftp://kiwi.cs.berkeley.edu/pub/raph/premail-0.20.tar.gz 2. Unpack it. To do this, run: gzip -dc premail.tar.gz | tar xvf - 3. See if you can run it. First, do "cd premail", then "./premail" (without the "" marks in both cases). If it prints a usage summary, you are in luck. If you get "command not found," then the problem is most likely that your system's copy of perl does not live in /usr/bin. Type "which perl" to find out where it actually is, then edit the first line of the file "premail" to match that, and try again. 4. Copy premail into a directory in your path (this step is optional). For example, if ~/bin is in your path, then do: cp premail ~/bin After this step, you probably want to run "rehash" so your shell knows were to find premail. 5. Set up the premail configuration file by typing: cp .premailrc ~ 6. Test whether premail really works, by typing: premail your(a)own.email.addr Path: 1 Subject: Test Does this really work? . If everything goes well, you should get a response from an anonymous remailer in a few minutes. Then, premail is set up and ready to use. You probably want to set up PGP as well, but you don't have to. This and other configuration options are covered below. The configuration options are controlled by the ~/.premailrc file, so you might want to browse through it and tweak things to your taste. Setting up premail for PGP -------------------------- When properly set up, premail will automatically encrypt outgoing mail using PGP. This applies both to traffic routed through the remailers, and to email encrypted for the final recipient, who would use PGP to decrypt it. On the other hand, you can skip this section if you don't want that. First, you need to make sure that you have PGP set up on your machine. When you do, just type: premail -getkeys This will finger Matt Ghio's remailer list at remailer-list(a)chaos.bsu.edu . If this site is down, or if you are not connected to the net, you should get the list from somewhere else. You can specify either an email address to finger or a file. For example, if you save the keys into remailkeys.asc, then you can run: premail -getkeys remailerkeys The messages from PGP will tell you that it's adding about a dozen new keys to the keyring. You also need to tell premail that you've got PGP running, and have added the remailer keys to your keyring. To do so, add the following line to the ~/.premailrc file: $config{"encrypt"} = "yes"; Also, if you've got PGP in a non-standard place, so that typing "pgp" will not call it up, then you need to add this line to the ~/.premailrc file: $config{"pgp"} = "/wherever/you/put/pgp"; The vox remailer has a problem with MIT PGP 2.6. Thus, premail will by default not encrypt mail going through vox. If your PGP version is 2.3a or 2.6ui, then it should work fine, so add this line: $config{"oldpgp"} = "pgp"; or, if PGP is in a nonstandard place, $config{"oldpgp"} = "/wherever/you/put/pgp"; Integration with user mail clients ---------------------------------- Without premail, outgoing mail works as follows. After you compose your mail, your mail client hands it off to a program called sendmail, which forwards it to the Net. Sendmail (written by Eric Allman at UC Berkeley) knows a lot about email addresses, networking, and so on, but very little about privacy and security. That's the job of premail. It is possible to use premail in either mode: under your client, or by itself. Either way will give the same features, it's just that integrating it with your client will be more convenient to use (if a bit harder to set up). To use premail, type: premail recipient(a)email.addr and enter your mail as you normally would, ending with either Control-D or a line with just a . on it. Or, you can prepare an email message with your favorite editor, and send it with premail -t < your.file To add premail support to emacs, just add this line to your .emacs file: (setq sendmail-program "/your/premail/pathname/here") With other mail clients, you should be able to use a similar technique. Contact me if you need help with a particular client. If you are root on your machine, you can install premail in /usr/lib/sendmail, so that it will work for _all_ mail clients. This is a fairly bold move, so it would be wise to test this carefully before doing so. To do so, move the existing sendmail into, say, /usr/lib/real_sendmail . Then, add the line $config{"sendmail"} = "/usr/lib/real_sendmail"; to premail. Finally, copy premail to /usr/lib/sendmail. If you choose to do this, let me know how well it works out. Using the privacy features -------------------------- Premail has two important privacy features: chaining through remailers, and PGP encrypting the messages. To chain through the remailers, simply add a header line such as Path: 3 to your mail. The number 3 says how many remailers you want it to chain through. Three is a good compromise between privacy on the one hand and speed and reliablilty on the other. The remailers will automatically be selected for their reliablity and speed, using the remailer list I maintain (finger remailer-list(a)kiwi.cs.berkeley.edu to see it). If you want to specify a particular sequence of remailers, you can do that. For example, if you are very fond of the idea of your mail crossing national boundaries, you might want to send it through Canada, Austria, and Holland, in that order: Path: extropia;wien;usura When using the Path field, your identity will be completely obscured. If the recipient tries to reply to your mail, it will get nowhere. You can specify a reply address using the Anon-From field: Anon-From: an123456(a)vox.hacktic.nl The Anon-From field only shows up in mail which goes through the remailers. In ordinary mail, it will be ignored. So, you can put it in all of your mail without worrying about compromising your identity. In fact, you can make premail automatically use it in all anonymous mail by adding this line to your ~/.premailrc file: $config{"anon-from"} = "an123456(a)vox.hacktic.nl"; Similarly, if most of the mail you send will be through the remailers, then you can set premail to do that as the default. Add this line (or whatever path you want, if not 3) to ~/.premailrc: $config{"defaultpath"} = "3"; Then, whenever you want to send non-anonymous mail, add this header field: Path: ; The other important privacy feature is the ability to PGP encrypt outgoing mail. This works whether or not you use the remailers. The recipient's key must be in your public key ring before you can encrypt mail to them. Then, all you have to do is add this mail header field: Key: user_id The mail will be encrypted with this user_id. It will be formatted using the MIME content type of application/x-pgp. If the recipient has a MIME-capable mail reader, they can set it up to automatically call PGP when receiving encrypted mail. Otherwise, you don't need to worry about it. You can also have premail automatically sign your mail, as well. This feature is a potential security problem, so use it with caution. Add these lines to your ~/.premailrc: $config{"signuser"} = "your_user_id"; $config{"signpass"} = "your pass phrase"; Again, a warning: in doing so, you have just stored your pass phrase in a disk file, which is considered a security no-no. On the other hand, if you are using this for medium-security applications, or if you have good control over access to your machine, then it should be OK; certainly a _lot_ better than not using PGP at all. The ~/.premailrc file should always have -rw------- (600) permissions. Use with caution. How to use the cypherpunks remailers like anon.penet.fi ------------------------------------------------------- Even though the cypherpunks remailers do essentially the same things as anon.penet.fi (though faster and with better privacy), they work quite a bit differently, and can be somewhat intimidating. Premail can help. First, you will need to get an anonymous alias. At this time, the only cypherpunk remailer which will do this for you is "avox", or anon(a)vox.hacktic.nl. To get the alias, do: premail your(a)own.email.addr Subject: alias Path: avox Hopefully, this will assign me an alias. . In a few hours, you will get email back with an alias of the form an123456(a)vox.hacktic.nl . Then, when you send anonymous email, give your alias as the reply address. Here is an example: premail recipient(a)email.addr Anon-From: an123456(a)vox.hacktic.nl Path: 3 Hello, if you reply to this, mail will get to me. . Unfortunately, unlike penet, avox does _not_ make the person replying anonymous. The best way for them to be anonymous is to use the cypherpunks mailers as well (hopefully by using premail!). How to post to Usenet --------------------- The easiest way is to use a mail-to-Usenet gateway. For example, to post to alt.skydiving, just send mail to alt.skydiving(a)demon.co.uk . A full list is available by fingering remailer-list(a)chaos.bsu.edu, or from http://www.cs.berkeley.edu/~raph/ghio-remailer-list.html . Extra goodies ------------- Premail supports a few more features, for advanced users. These include: offline mail preparation, logging, a password for penet, and a debugging mode. The configuration options specifying these are described in the ~/.premailrc file, which is what you would need to edit. Have fun!

1 0

PGPdisk for win95/98?
by jkthomson 17 Dec '03

17 Dec '03

Great, so I finally get around to checking PGP's betaweb, and to my amazement, they finally have a beta version of PGPdisk for 95. Too bad it claims that I need to contact a sales rep, and when I follow their link, I get nothing that would really point me in the right direction. Any of you manage to get your hands on a copy? Currently, I am using bestcrypt NP with blowfish. I am a little concerned with this however, As I have never seen a crypto-review of the software, and their website is not too forthcoming with technical details, or known attacks. Does anyone have information (or horror stories) from using bestcrypt? --------------------------------------------------------------- james 'keith' thomson <jkthomson(a)bigfoot.com> ICQ:746241 jkthomson: C181 991A 405C EAFB 2C46 79B5 B1DC DB78 8196 122D http://www.bigfoot.com/~ceildh <keys> at pgp.mit.edu --------------------------------------------------------------- You can lead a man to slaughter, but you can't make him think. ================================================================

2 1

Registering Euphoria
by Alan Tu 17 Dec '03

17 Dec '03

Terry, Good points. But... 1. Registration brings money, doesn't mean Bob should just blindly make changes. I'm sure that's not what you meant, but I had to say that. 2. However, on the other token, if a nonregistered user makes suggestions nicely, his suggestion should be debated (as we are doing here) and considered by Bob. --Alan

1 0

Biztravel.com $25 Welcome Gift
by reservations＠biztravel.com 17 Dec '03

17 Dec '03

Dear Mr. Cypherpunk, Thank you for joining Biztravel.com. Please note that your member name is CYPHERPUNKS. *********** FREE WELCOME GIFT *********** I`d like to offer you a gift for new members -- we`ll give you a $25 American Express(R) Gift Cheque FREE with your first flight purchase. Here`s how it works: - purchase an airline ticket through Biztravel.com by 8/31/98 - your travel must commence no later than 10/15/98 - we`ll mail you your gift after you take your flight ********** BIZTRAVEL.COM FEATURES *********** Here`s just some of what Biztravel.com offers to make your travel planning easier to manage: + We present you with travel options based on the preferences you indicate in your Travel Profile. This lets you plan your travel according to what`s most important to you, whether its getting the lowest fares, departing at the most convenient time, or insuring you`re maximizing frequent flyer points for the trip. + Our trained travel agents are available 24-hours-a-day via email or telephone. + We don`t stop at airline flights - we offer rental car and hotel reservations too, to provide you with one-stop online travel booking. + Our free bizMiles service gives you a quick and convenient way to check your growing balances of miles and points in the leading airline and hotel frequency programs. + We also have weather reports, driving directions, destination city information, and bizTraveler online magazine which is filled with travel news and tips, fare deals, and more. Thank you again for joining us. And remember - get a $25 American Express Gift Cheque FREE with your first qualifying flight purchase at http://www.biztravel.com Sincerely, John I. Williams, Jr. President & CEO Biztravel.com(R) *********************************************************************** Full details regarding this new member offer are available at http://www.biztravel.com/welcome25b ***********************************************************************

1 0

REAL JOBS You Can Do From HOME - Over 700 Companies Need YOU
by webmaster＠home-employment.com 17 Dec '03

17 Dec '03

******************************************* DO YOU WANT TO WORK FROM HOME? ---No MLM's - No Scams - No Franchises--- No Work From Home Gimmicks http://www.home-employment.com/index.html <A HREF="http://www.home-employment.com/index.html"> Click Here</A> ******************************************* Over 700 Companies Interested in FT/PT Employees and Independent Contractors to work From Their Home. Visit our web page at: http://www.home-employment.com/index.html Right Now MILLIONS Of People Are Working Normal Jobs From The Comfort Of Their Own Homes. **YOU CAN BE ONE OF THEM!** This company was started by WORK AT HOME Moms & ladies who have been telecommuting for several years. We decided to start this company because we were tired of going through the same Work-At-Home scams and MLM runarounds that YOU've been through. For over a year now we've been helping people just like you to find LEGITIMATE Work-At-Home Employment. SOME OF THE JOBS AVAILABLE ARE - Typing - Billing - Clerical - Data Entry - Data Processing - Word Processing - Technical Writing - Computer Programming - Internet Research - Artists - Sales - Telemarketing - Marketing - Transcription - Language Translation - Graphics Design - Web Page Design & MANY MANY more... Wouldn't it be GREAT if you could actually locate a REAL home job without having to deal with the runarounds and scams. Visit Our Web Site For More Information... http://www.home-employment.com/index.html ______________________________________________________ ______________________________________________________ This is a one time mailing only! Our intention is not to send you mail that you do not wish to receive. To be removed from our list please visit http://www.leadgenerator.net/remove.html We will promptly remove you from our list. Information Net Source Corp. 3475 4th Street N. St. Petersburg, FL 33704 (813)525-1643

1 0