- cypherpunks-legacy - lists.cpunks.org

CFS for Linux
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- FYI: Forwarded message: > To: cypherpunks(a)toad.com > Subject: New version (1.2) of CFS now available > Date: Fri, 02 Dec 94 18:05:00 -0500 > From: Matt Blaze <mab(a)research.att.com> > > Source code for the latest version of CFS (release 1.2), the Cryptographic > File System, is now available upon request for research and experimental > use in the US and Canada. [...] > The software was developed under > SunOS and BSDI, and there are also unsupported user-contributed ports > available for AIX, HP/UX, Irix, Linux, Solaris and Ultrix. We really > can't promise to provide any technical support at all, beyond the > source code itself. We also maintain a mailing list for CFS users and > developers; subscription information is included with the source code. [...] > * Copyright (c) 1992, 1993, 1994 by AT&T. > * Permission to use, copy, and modify this software without fee > * is hereby granted, provided that this entire notice is included in > * all copies of any software which is or includes a copy or > * modification of this software and in all copies of the supporting > * documentation for such software. > * > * This software is subject to United States export controls. You may > * not export it, in whole or in part, or cause or allow such export, > * through act or omission, without prior authorization from the United > * States government and written permission from AT&T. In particular, > * you may not make any part of this software available for general or > * unrestricted distribution to others, nor may you disclose this software > * to persons other than citizens and permanent residents of the United > * States and Canada. > * > * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR IMPLIED > * WARRANTY. IN PARTICULAR, NEITHER THE AUTHORS NOR AT&T MAKE ANY > * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE MERCHANTABILITY > * OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR PURPOSE. > > If you would like a copy of the CFS source code, please send email to: > > cfs(a)research.att.com > > DO NOT REPLY DIRECTLY TO THE SENDER OF MESSAGE. You must include a > statement that you are in the US or Canada, are a citizen or legal > permanent resident of the US or Canada, and have read and understand > the license conditions stated above. Also include an email address in > a US or Canada-registered domain. The code will be sent to you via > email in a uuencoded compressed tarfile. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvfrsSoZzwIn1bdtAQHvcwGAn9qkYDbPDazGCM9Pg/8CDyTAgxm10Nj2 LB/Ek/NnzOTG8ywki0CEbF8B9ei2pxWH =bPdS -----END PGP SIGNATURE-----

1 0

Re: Remailer list needed
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- > Does anyone have a current listing of all the remailers? If so could you > please send it to me as I would like to put it up on the auto-responder. This seems to be the most popular question on c'punks lately. Raph posts his list periodically (weekly ?), but perhaps he should move it to every other day or daily. I think it would be worth posting more frequently here. I never tire of answering this one, though.... :) Anyway, the standard ways of accessing the latest list are: finger remailer-list(a)kiwi.cs.berkeley.edu http://www.cs.berkeley.edu/~raph/remailer-list.html I don't know of a way to get it automatically via mail. Since, short of Web access, Internet mail access is a necessary condition for using a remailer, I've been meaning to hack something together for Raph to handle this lowest- common-denominator means of access. So I think it would be great to see you set it up for autoreply, Sam, if you can hook it in to the source for regular updates. The list (from finger) as of just after I typed this follows: $remailer{"vox"} = "<remail(a)vox.xs4all.nl> cpunk pgp. post"; $remailer{"avox"} = "<anon(a)vox.hacktic.nl> cpunk pgp post"; $remailer{"extropia"} = "<remail(a)extropia.wimsey.com> cpunk pgp special"; $remailer{"portal"} = "<hfinney(a)shell.portal.com> cpunk pgp hash"; $remailer{"alumni"} = "<hal(a)alumni.caltech.edu> cpunk pgp hash"; $remailer{"bsu-cs"} = "<nowhere(a)bsu-cs.bsu.edu> cpunk hash ksub"; $remailer{"rebma"} = "<remailer(a)rebma.mn.org> cpunk pgp hash"; $remailer{"jpunix"} = "<remailer(a)jpunix.com> cpunk pgp hash latent cut post ek"; $remailer{"c2"} = "<remail(a)c2.org> eric pgp hash"; $remailer{"soda"} = "<remailer(a)csua.berkeley.edu> eric post"; $remailer{"penet"} = "<anon(a)anon.penet.fi> penet post"; $remailer{"ideath"} = "<remailer(a)ideath.goldenbear.com> cpunk hash ksub"; $remailer{"usura"} = "<usura(a)replay.com> cpunk pgp. hash latent cut post"; $remailer{"desert"} = "<remail(a)desert.xs4all.nl> cpunk pgp. post"; $remailer{"nately"} = "<remailer(a)nately.ucsd.edu> cpunk pgp hash latent cut"; $remailer{"xs4all"} = "<remailer(a)xs4all.nl> cpunk pgp hash latent cut post ek"; $remailer{"flame"} = "<tomaz(a)flame.sinet.org> cpunk pgp hash latent cut post ek" ; $remailer{"rahul"} = "<homer(a)rahul.net> cpunk"; $remailer{"mix"} = "<mixmaster(a)nately.ucsd.edu> cpunk hash latent cut ek"; $remailer{"q"} = "<q(a)c2.org> cpunk hash latent cut ek"; catalyst(a)netcom.com is _not_ a remailer. Last ping: Wed 21 Dec 94 2:00:01 PST remailer email address history latency uptime - - ----------------------------------------------------------------------- usura usura(a)replay.com **++*+*****# 6:59 99.99% alumni hal(a)alumni.caltech.edu *****+*****# 4:05 99.99% nately remailer(a)nately.ucsd.edu ++++.+++++++ 1:08:49 99.99% penet anon(a)anon.penet.fi ***+*+****** 32:46 99.99% portal hfinney(a)shell.portal.com ***********# 2:13 99.99% c2 remail(a)c2.org +-+++++-++ + 39:26 99.99% ideath remailer(a)ideath.goldenbear.com *++**+****** 9:35 99.98% bsu-cs nowhere(a)bsu-cs.bsu.edu *++********# 4:43 99.97% mix mixmaster(a)nately.ucsd.edu +++*.++++++- 1:17:13 99.97% vox remail(a)vox.xs4all.nl ..-----...-+ 15:20:51 99.99% q q(a)c2.org *-+--++- 3:46:16 99.88% rahul homer(a)rahul.net **** ****--# 27:49 99.67% soda remailer(a)csua.berkeley.edu .......... 9:50:58 99.61% desert remail(a)desert.xs4all.nl -------.-. 16:26:44 99.99% xs4all remailer(a)xs4all.nl **+ +**** # 7:14 99.41% flame tomaz(a)flame.sinet.org *+-++**+* +* 8:51 98.09% jpunix remailer(a)jpunix.com +-++**+* +# 8:25 97.96% rebma remailer(a)rebma.mn.org --___..-.--+ 21:50:14 90.15% extropia remail(a)extropia.wimsey.com -+ 5:00:06 17.69% -L. Futplex McCarthy; PGP key by finger or server "The objective is for us to get those conversations whether they're by an alligator clip or ones and zeroes. Wherever they are, whatever they are, I need them." -FBI Dir. Freeh - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLvf9+Gf7YYibNzjpAQF+FwQAiqHC78uctkIG5vX+YF+H/EN8RodOLt6s EZjJW3BGbFitC20++3MfPJ2wUVFXLcNxUpXY1gEcbxMttNPaMayK4VrKNWFzZ7BT p1iKeb82Im+GYyL0EHvhtS8eDiyuPAyBSibQYjPppY/wfl5qW70FpxJ6hWc/4Avf twIJ5XYXFcU= =MO7e - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvf/oSoZzwIn1bdtAQE+jwF/RcW6oTb23KEqrgDUfVeB0p6KMPGaL6hF 5/I3/BqjqvAY0FrsHkdPTTvI9LDNjyOc =YjJG -----END PGP SIGNATURE-----

2 1

Re: GUI: PGP vs novices
by bshantz＠spry.com 17 Dec '03

17 Dec '03

Thomas Grant Edwards writes: >On the issue of signing, there is another question. Do I really want >to sign every message? I don't like signing my written name anywhere I >don't have to. And whenever I do, I am careful to look at all the >potential consequences. Signatures imply I am agreeing to some kind of >contract. Perhaps I prefer my email unsigned, to give me a level of >disputability. If my email was a business contract, then I'd be >enthusiastic about signing it. But for a post to a political newsgroup, >for instance, perhaps I don't want to make sure everybody can >cryptographically assure themselves it comes from me. This leaves me >open to potential forgery, but email forgery is well known and understood. Good point. However, the digital signature issue is still outside of what my topic was. I agree with you wholeheartedly. That's one of the reasons I don't sign everything. That particular "argument" about digisigs has been pounded into the ground by the Cypherpunks for the last year and probably longer. I just think (boy I feel repetitive) that there should be something inside the software so the user has the option to sign, or sign on the fly. If I type up a message and think, "hey, I really want people to know this is from me", It would be really cool to just hit a button on the toolbar, or grab a menu option to sign automatically before sending. You don't have to sign everything. But, you don't have to go out to another application (of any sort) in order to sign. It's right there in front of you. That was my point. >Finally is physical security of keys. If I am going to sign anything, I >want that key to be under control of only me. On a personal machine, say at home, that's not really a problem. On a computer at the office where everything is password protected, isn't really a problem either. Since the situations I work with deal mainly with the home user, key management isn't as much a worry as if you're using workstations. >It is difficult for someone like me who uses workstations to keep a key >only on floppy, especially as I find myself on different workstations, >many diskless, all the time. This issue has also been pounded into the ground. Carrying a disk around with you is really the only way to guarantee security. (Or memorizing your private key and typing it in every time. EEEEERRRGGHHHH) But, you are right. It is a pain in the ass. -- Brad

1 0

Re: c'punks top 5
by Rich Salz 17 Dec '03

17 Dec '03

> I was reading about socks last night, and it does seem to be very close > to what is needed for this. Somebody, I forget who, had a hospitality suite at a Usenix LISA conference. They have a commercial version of socks. I don't remember if it was bundled or an option. At any rate, kinda neat that someone is providing privacy tools rather then the other way round. /r$

1 0

Re: GUI: PGP vs novices
by bshantz＠spry.com 17 Dec '03

17 Dec '03

Thomas Grant Edwards Writes: >PGP has made me more crypto aware, but at this point neither I nor most of >the crypto aware people I personally know feel there is a need to either >encrypt or sign messages on a regular basis. It is my own personal opinion that in order for crypto to truly become mainframe, the software manufacturers of internet connectivity packages must integrate crypto into the applications. Look at the past threads here on Cypherpunks..."How do I write a script to put PGP into ELM?" "PGP DLL modularity" etc. In order to bring crypto to the masses, we have got to convince people that it is necessary. We also must make it "second nature". It sure is nice to have a menu option or a toolbar button that will encrypt plaintext automatically. Key management and some of the "high tech" (I know, for us it's nothing, but for my dad who just bought a computer and doesn't understand the difference between click, double click, and drag, crypto is a really high tech thing just in itself.) things of crypto should not be directly handled by the user. (Optional of course. On a privacy level, the user should have full control. But give the user a break...if the software is secure..as such...so is the user's privacy.) You will notice that this message is not signed. That's because in order to sign it, I would need to save my message, hop out to a DOS box, PGP encrypt it, hop back to my mail program and insert the encrypted mail as a text file. That's enough to discourage the average user. This is pretty much what Tim May was talking about when he discussed why he doesn't sign his messages. It's not that he couldn't... it's just not practical for him. It's not really practical for me either, but I do it when I feel it's necessary. The only way to make crypto practical is to basicalloy hide the technical side from the user and make it easy. That's my two cents. >>>>>>>>>>>>>>>>>>>>>INTERNETWORKING THE DESKTOP<<<<<<<<<<<<<<<<<<<<<<< Brad Shantz bshantz(a)spry.com Senior Software Engineer SPRY Inc. Direct #: (206)-442-8251 316 Occidental Ave. S. Main #: (206)-447-0300 Suite 316 Fax #: (206)-447-9008 Seattle, WA 98104 WWW URL: http://WWW.SPRY.COM ---------------------------------------------------------------------- PGP Public Key at: http://www-swiss.ai.mit.edu/~bal/pks-toplev.html Or email: pgp-public-keys(a)pgp.ai.mit.edu Subj: GET bshantz >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>><<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

2 1

Re: GUI: PGP vs novices
by bshantz＠spry.com 17 Dec '03

17 Dec '03

Jeff Licquia writes: >>You will notice that this message is not signed. That's because in order to >>sign it, I would need to save my message, hop out to a DOS box, PGP encrypt >>it, hop back to my mail program and insert the encrypted mail as a text file. >>That's enough to discourage the average user. This is pretty much what Tim >>May was talking about when he discussed why he doesn't sign his messages. >>It's not that he couldn't... it's just not practical for him. It's not really >>practical for me either, but I do it when I feel it's necessary. >Just a small nit, but it appears that you're running something >Windows-compatible on your desk (the DOS box and all that). Are you aware >of the good Windows tools for PGP? The particular one I use (PGPClip by >Mike Meyer) uses the clipboard, and is very nice and simple. Exactly my point Jeff. Thank you for justifying what I said....**WINK**, **GRIN**. In order to even use PGPClip, it involves something OUTSIDE the mail application. (Although, it does sound intriguing to me.) Anyway, this is yet another example of the user needing to be fully conscious that they are signing or encrypting. It should be second nature. In order for it to become second nature, it MUST be included in the design of the mail package. (Or News reader, or FTP software, whatever.) Third party utilities make a piece of software harder to use. That's a given. Now, don't get me wrong, there are some nice thrid party vendor products out there. But, I have yet to see a crypto product that merges (cross platform) into a mail package smoothly. >Not a flame, or even a spark. Just wanting to make life easier for crypto >enthusiasts. Didn't see any sparks at all, Jeff. I am interested in PGPClip (at least to look at) does anyone have an FTP site pointer where I could find it? -- Brad >>>>>>>>>>>>>>>>>>>>>INTERNETWORKING THE DESKTOP<<<<<<<<<<<<<<<<<<<<<<< Brad Shantz bshantz(a)spry.com Senior Software Engineer SPRY Inc. Direct #: (206)-442-8251 316 Occidental Ave. S. Main #: (206)-447-0300 Suite 316 Fax #: (206)-447-9008 Seattle, WA 98104 WWW URL: http://WWW.SPRY.COM ---------------------------------------------------------------------- PGP Public Key at: http://www-swiss.ai.mit.edu/~bal/pks-toplev.html Or email: pgp-public-keys(a)pgp.ai.mit.edu Subj: GET bshantz >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>><<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

1 0

Kiwi cypherpunks
by Tony.Gurnick＠nzdairy.co.nz 17 Dec '03

17 Dec '03

Lads (and lasses), I seem to be having a bit of troub communicating we the kiwis on this list directly, but no probs if I send to the list. Has there been and communication on this topic in the last 3 or so days??? We cant organise anything if we cant talk to each other! T

3 2

Re: NYT Potpurri and Econo-cash
by Bass Wastelan 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- ECO_do - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvi2uSoZzwIn1bdtAQHOiQGAmRUcHy1wI/BkqpRQYj+ocztm4Go6YBBw pKzj1nY6PhcWz1pGYHNvolPFhF4hcN1L =nxS9 -----END PGP SIGNATURE-----

1 0

Re: Remailer list needed
by Anonymous User 17 Dec '03

17 Dec '03

"L. McCarthy" <lmccarth(a)ducie.cs.umass.edu> wrote: > Anyway, the standard ways of accessing the latest list are: > finger remailer-list(a)kiwi.cs.berkeley.edu > http://www.cs.berkeley.edu/~raph/remailer-list.html > > I don't know of a way to get it automatically via mail. I think the address to get finger via email is mg5n+finger(a)andrew.cmu.edu

1 0

alpha.c2.org software upgrade
by admin＠alpha.c2.org 17 Dec '03

17 Dec '03

It is now possible to send outgoing mail via the alias remailer at alpha.c2.org. To send a message, create a message of the following format: From: me(a)alpha.c2.org (My Nym) Password: mypass Subject: test To: alt.test(a)demon.co.uk This is my message. Encrypt this with the public key for the remailer and send it to alias(a)alpha.c2.org. It will decrypt it and send your message (after verifying and removing the password line.)

2 1