- cypherpunks-legacy - lists.cpunks.org

Re: For the New Year: A Symbol for Information Freedom
by groundfog＠alpha.c2.org 17 Dec '03

17 Dec '03

In talk.politics.crypto, ptupper(a)direct.ca (Peter Tupper) wrote: > A Symbol for Information Freedom > by Peter Tupper <ptupper(a)direct.ca> > 1996 is off to a discouraging start when it comes to the >future of information freedom. The American Congress seems >determined to impose censorship on the Internet. The legal >status of strong dual-key cryptography is still in debate. >Telephone companies, cable TV services and publishing services >are all eagerly trying to seize control of the Internet and >eliminate the many-to-many nature of the medium. The accidental >wonder that is the Internet seems to be threatened on all sides, >in danger of being destroyed or denatured before reaching its >potential. > My proposal is only a small contribution to the solutions to >this problem. I believe a symbol is needed; a simple yet >recognizable item that will communicate to others that you are: > -for freedom of speech and expression in all realms, >particularly via computer mediated communications. > -against the imposition of arbitrary community standards by >centralized authority on communications. > -for making access to communications available to everyone. > -against the violation of individual privacy by wiretapping, >intercepting computer communications, compiling dossiers by >government or commercial organizations or other forms of >surveillance. > -for making strong, dual-key encryption programs without >back-doors available to the public. > -against building surveillance measures into communications >and financial infrastructures. > -for a future of communications that is by, for and of the >people, not the state or the market. > The symbol I have chosen is the paper clip. Why a paper >clip? > There are many reasons: > Pragmatic: Paper clips are readily available for >practically nothing, all over the world. They can be applied to >collars, lapels, scarves, pocket edges, suspenders and neck ties >without damaging them and without risk of the pin breaking the >skin. > Aesthetic: The paper clip is a simple, elegant design that >is easily recognized the world over. It can be rendered in many >colors or plated with precious metals. > Symbolic: The paper clip is a simple but effective piece of >technology. An individual uses it to bundle together documents >from disparate sources to create a unified document upon a given >subject, which may be dismantled and remade for another topic. >Furthermore, a paper clip may be bent out of its regular shape >and used as an improvised tool for any number of purposes. > Historic: During the German occupation of Norway in World >War II, Norwegians wore paper clips on their collars as a sign of >solidarity against the invaders. > Commercial: While anybody can obtain a plain paper clip >with little trouble, funds for Information Freedom can be raised >by marketing electroplated or designer paper clips. > The cause of awareness of and activism about AIDS had a >simple, readily recognized symbol, the folded red ribbon. Just >as every celebrity who wears a red ribbon, no matter how trite >and self-promoting it is, is a reminder to those watching that >AIDS is happening and that many people are concerned, >celebrities appearing at the Academy Awards or Grammies with a >designer, gold-plated paper clip on their outfit reminds the >world that information freedom is under fire and that people are >concerned. It will make the Internet community a visible reality >in the public sphere. It will bring these issues into the public >eyes, and give those involved a rallying symbol. It will make a >small difference, but it will contribute to the greater good. > Advertising couldn't hurt.

3 2

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail, which is available at: ftp://ftp.csua.berkeley.edu/pub/cypherpunks/premail/premail-0.30.tar.gz For the PGP public keys of the remailers, as well as some help on how to use them, finger remailer.help.all(a)chaos.bsu.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"vox"} = "<remail(a)vox.xs4all.nl> cpunk pgp. post"; $remailer{"avox"} = "<anon(a)vox.hacktic.nl> cpunk pgp post"; $remailer{"extropia"} = "<remail(a)extropia.wimsey.com> cpunk pgp special"; $remailer{"portal"} = "<hfinney(a)shell.portal.com> cpunk pgp hash"; $remailer{"alumni"} = "<hal(a)alumni.caltech.edu> cpunk pgp hash"; $remailer{"bsu-cs"} = "<nowhere(a)bsu-cs.bsu.edu> cpunk hash ksub"; $remailer{"rebma"} = "<remailer(a)rebma.mn.org> cpunk pgp hash"; $remailer{"jpunix"} = "<remailer(a)jpunix.com> cpunk pgp hash latent cut post ek"; $remailer{"c2"} = "<remail(a)c2.org> eric pgp hash"; $remailer{"soda"} = "<remailer(a)csua.berkeley.edu> eric post"; $remailer{"penet"} = "<anon(a)anon.penet.fi> penet post"; $remailer{"ideath"} = "<remailer(a)ideath.goldenbear.com> cpunk hash ksub"; $remailer{"usura"} = "<usura(a)replay.com> cpunk pgp. hash latent cut post"; $remailer{"desert"} = "<remail(a)desert.xs4all.nl> cpunk pgp. post"; $remailer{"nately"} = "<remailer(a)nately.ucsd.edu> cpunk pgp hash latent cut"; $remailer{"xs4all"} = "<remailer(a)xs4all.nl> cpunk pgp hash latent cut post ek"; $remailer{"flame"} = "<tomaz(a)flame.sinet.org> cpunk pgp hash latent cut post ek"; $remailer{"rahul"} = "<homer(a)rahul.net> cpunk"; $remailer{"mix"} = "<mixmaster(a)nately.ucsd.edu> cpunk hash latent cut ek"; $remailer{"q"} = "<q(a)c2.org> cpunk hash latent cut ek"; catalyst(a)netcom.com is _not_ a remailer. Last ping: Mon 19 Dec 94 6:00:03 PST remailer email address history latency uptime ----------------------------------------------------------------------- usura usura(a)replay.com +***++*+**** 7:47 99.99% alumni hal(a)alumni.caltech.edu *+*****+**** 4:24 99.99% c2 remail(a)c2.org +++-+++++-++ 41:24 99.99% penet anon(a)anon.penet.fi *****+*+**** 29:39 99.99% nately remailer(a)nately.ucsd.edu ++++++.+++++ 1:29:04 99.99% portal hfinney(a)shell.portal.com ************ 2:19 99.99% flame tomaz(a)flame.sinet.org ***+-++**+* 8:57 99.99% ideath remailer(a)ideath.goldenbear.com *-*++**+**** 11:44 99.97% bsu-cs nowhere(a)bsu-cs.bsu.edu -**++******* 5:59 99.96% mix mixmaster(a)nately.ucsd.edu **+++*.+++++ 1:26:32 99.96% desert remail(a)desert.xs4all.nl .--------.-- 14:21:48 99.99% jpunix remailer(a)jpunix.com ** +-++**+* 8:35 99.78% q q(a)c2.org *-+--++ 49:41 99.79% vox remail(a)vox.xs4all.nl --..-----. 17:07:50 99.99% rahul homer(a)rahul.net ****** ****+ 10:59 99.50% soda remailer(a)csua.berkeley.edu ._........ 10:05:18 99.41% xs4all remailer(a)xs4all.nl ****+ +**** 8:09 99.10% rebma remailer(a)rebma.mn.org *---___..-.- 30:10:54 82.77% extropia remail(a)extropia.wimsey.com -.-+ 5:00:06 27.26% For more info: http://www.cs.berkeley.edu/~raph/remailer-list.html History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). Options and features cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. oldpgp Remailer does not like messages encoded with MIT PGP 2.6. Other versions of PGP, including 2.3a and 2.6ui, work fine. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. special Accepts only pgp encrypted messages. ek Encrypt responses in relpy blocks using Encrypt-Key: header. Comments and suggestions welcome! Raph Levien

1 0

(Fwd) Internet Euro-Clipper
by Peter Trei 17 Dec '03

17 Dec '03

------- Forwarded Message Follows ------- >From Risks Digest, via www-buyinfo ============================================ F Y I from the RISKS DIGEST----------- Date: 20 Sep 1995 12:24:10 GMT From: rja14(a)cl.cam.ac.uk (Ross Anderson) Subject: European Governments Agree to Ban Strong Crypto According to an article in `Communications Week International', the 34-nation Council of Europe has agreed to outlaw strong encryption products which do not make keys available to governments. The article, `Euro-Clipper chip scheme proposed', is on the front page of the magazine's issue 151, dated 18th September, which arrived in my mail this morning. It relates that the policy was approved on the 8th September at Strasbourg by the Council, and coincides with an attempt by the European Commission to propose a pan-European encryption standard. The Council - unlike the Commission - has no statutory powers to enforce its recommendations. However, Peter Csonka, the chairman of the committee that drafted the document (and an administrative officer at the Council's division of crime problems) says that `it is rare for countries to reject Council of Europe recommendations'. The proposal would make telecomms operators responsible for decrypting traffic and supplying it to governments when asked. It would also `change national laws to enable judicial authorities to chase hackers across borders'. Opposition to this measure was expressed by Mike Strezbek, VP responsible for European telecomms at JP Morgan, who said that his organisation `will challenge any attempt to limit the power of our network encryption technologies very strongly'. Czonka said that the Council had given consideration to business interests but had tried to strike a balance between privacy and justice. However, `it remains possible that cryptography is available to the public which cannot be deciphered,' his document says. `This might lead to the conclusion to put restrictions on the possession, distribution, or use of cryptography.' Apparently another international organisation, the OECD, has called a conference of its members in December to devise a strategy on encryption. I for one will be making clear to my MP that his stand on this issue will determine how I cast my ballot at the next election. I note that John Major stated in a 1994 parliamentary written reply to David Shaw MP that the government did not intend to legislate on data encryption. I am disappointed that government policy has changed to the point of supporting the Council of Europe, and that this change has sneaked through during the parliamentary recess. Ross Anderson Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation http://www.process.com trei(a)process.com

1 0

SOFTWARE: Filtering ads out of popular web sites
by lethin＠ai.mit.edu 17 Dec '03

17 Dec '03

On the subject of HTTP proxies, [SEVERAL FWD'S DELETED, ENTERTAINING SUBJECTS RETAINED] - - - Begin forwarded message - - - Subject: The agents/advertising arms race heats up Subject: OH YEAH BABY, FILTER ME HARDER >From: Axel Boldt <boldt(a)math.ucsb.edu> >Newsgroups: comp.infosystems.www.announce >Subject: SOFTWARE: Filtering ads out of popular web sites >Organization: Univ of California at Santa Barbara, Dept of Mathematics >Approved: www-announce(a)boutell.com >Message-ID: <44ercn$nhl(a)holly.aa.net> Several popular web sites have recently turned to putting advertising gifs on their pages. NoShit is a tool that filters these out so that you don't see them - in fact, you don't even download them in the first place, thus saving time, money and brain capacity. NoShit is implemented as a set of patches against Cern httpd to turn it into a "filtering proxy server". This means that the proxy maintains a list of URL templates together with corresponding filter scripts. When a document is requested form the proxy that matches one of the templates, then the page is piped through the corresponding script before being presented to the client. This works together with caching, if desired. The idea is to run your own personalized NoShit proxy server and point your browser to it. The proxy does the filtering; the browser doesn't even know about it. This scheme works with every browser. I have written a ready-to-use library of filter scripts for a couple of well known, ad-infected sites, including Yahoo, Lycos, Netscape, HotWired, CNN, Infoseek and NandO Times. You can change these or add your own very easily. Locations: <URL:http://math-www.uni-paderborn.de/~axel/NoShit/> (Germany) <URL:http://emile.math.ucsb.edu:8000/~boldt/NoShit/> (California) Enjoy, Axel - - - End forwarded message - - -

1 0

Re: An Attempt to Hobble SAFE Crypto Bill (fwd)
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 25 Jul 1997 18:22:48 -0400 From: Alan Davidson <abd(a)cdt.org> To: "--Todd Lappin-->" <telstar(a)wired.com>, fight-censorship(a)vorlon.mit.edu Subject: Re: An Attempt to Hobble SAFE Crypto Bill At 11:03 AM -0800 7/25/97, --Todd Lappin--> wrote: > >An Attempt to Hobble House Crypto Bill > > by Rebecca Vesely ... > The amendment, by Representative Benjamin Gilman > (R-New York), who chairs the International Relations > Committee, would make it unlawful to "manufacture, > distribute, sell, or import any product within the United > States that can be used to encrypt communications or > information if the product does not permit the real-time > decryption of such encrypted communications or > information." The full text of this very frightening amendment is now available on CDT's Web site at: http://www.cdt.org/crypto/legis_105/SAFE/index.shtml#970725 It's a chilling glimpse at the Administration's view of a mandatory-domestic-key-recovery world. This is the first time I've seen anyone put such a provision through the House Legislative Counsel process. -- Alan Alan Davidson, Staff Counsel 202.637.9800 (v) Center for Democracy and Technology 202.637.0968 (f) 1634 Eye St. NW, Suite 1100 <abd(a)cdt.org> Washington, DC 20006 PGP key via finger

1 0

[LOCAL] Next cpx physical meeting in SF Bay area?
by Johnathan Corgan 17 Dec '03

17 Dec '03

It's been about a year since I've been to a cpx physical meeting in the SF area (other than T.C. May's house meeting--thanks again, Tim. The AetherWire folks gave a fascinating talk). I haven't seen much talk here on the list, either. Is this still a regular thing? Back then, we were having marathon meetings at SGI's IRIS cafe on the first Sat. of the month. What goes on these days?

1 0

Re: Anon remailer on new ISP ?
by L. McCarthy 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- Dave Merriman writes: > Does anyone know if any of the 'standard' CP tools (remailers, etc) would > run on a Windows NT machine (server edition 3.5)? A couple friends and I are > under serious contemplation of setting up an ISP in a town of 100K+, and if > it's possible, I'd like to put an anon remailer on it. Great ! Two quick reactions: [] Would it be possible to run an anon-http server on it ? [] If you start a remailer-friendly site, I'd be very surprised if no-one here wanted to get an account there and establish a Windows NT remailer, written from scratch if necessary.... -L. Futplex McCarthy; PGP key by finger or server "The objective is for us to get those conversations whether they're by an alligator clip or ones and zeroes. Wherever they are, whatever they are, I need them." -FBI Dir. Freeh - -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLvd8tmf7YYibNzjpAQEJGgP+NmDO/UKwXGPC2XcuEJLUQ78T4auvna+l ia5RNXEUVpXVlRrXgARxwN+gnh7AMxBLNNGBZUbawrlwcef8/olb5D7+y5tGp2ja RSbWhwmrOzl2dc/dCJ7fxlsvDc0r0z3/5v0TvYEU+ju3HOP2NoJ5pEl7uVttndqY eyPzdoZTfL8= =KrKW - -----END PGP SIGNATURE----- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLvd92CoZzwIn1bdtAQF3mgGAmf8CJP9LyBVJZnWjCq/PFDtEdneMM6kn 4u8pR09jRndd7g/LWf6NaJFnMJCTzsA4 =BKMk -----END PGP SIGNATURE-----

1 0

Mac PGPTools
by lcottrell＠popmail.ucsd.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have a Magic Money client for the Mac, so PGPTools MUST have been ported to the Mac. Does anyone know where I might find the source for Mac PGPTools? I am starting to think about porting the Mixmaster front end to the Mac. Thanks. -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAwUBLvaQflVkk3dax7hlAQHwcQP+IQrZMS05Vtw/hNJKoR9hv61joYlv2CtP pyOzWMFW5gHopc29UR1lI311MJnnj3/vDRLhVtN3hDNGl4LsS6s6xNIRPpKdeoaT 0ESSGaWq7ddmVmFmhcta9b1sX8GsoHrJbjjDXTcOEKICo+0qZlHzgtGvLfArl0or /MI7guanhH0= =FqTm -----END PGP SIGNATURE----- -------------------------------------------------- Lance Cottrell who does not speak for CASS/UCSD loki(a)nately.ucsd.edu PGP 2.6 key available by finger or server. Encrypted mail welcome. Home page http://nately.ucsd.edu/~loki/ Home of "chain" the remailer chaining script. For anon remailer info, mail remailer(a)nately.ucsd.edu Subject: remailer-help "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche

1 0

Re: PGP-MIME spec (No Flames Allowed!)
by Nathaniel Borenstein 17 Dec '03

17 Dec '03

Excerpts from radiomail-dups: 19-Dec-94 PGP-MIME spec (No Flames Al.. "JEFF LICQUIA @mhc.uiuc. (1794*) > I've noticed Mr. Borenstein's presence here in cypherpunks; I invite him > to clarify or update as needed. I think you stated it pretty well. I think we now have someone who has stepped forward to write the new MIME-PGP draft, in consultation with Phil Zimmerman and myself. (I won't name him in public, since he may prefer to keep a low profile for now.) I'm sure that when the draft is ready, its existence will be announced on cypherpunks. -- Nathaniel

2 1

Re: HTTP redirectors
by Andrew Lowenstern 17 Dec '03

17 Dec '03

> However, running this kind of local proxy or a general chaining > proxy does require root access. Most systems will not let you > create a low-numbered socket unless you are root. So this is not > something which people will be able to do from their user > accounts. Normally a URL can specify an alternate port as well (of course). A common one is http://site.org:8080/dir/file.html... This gets around setting up the proxy without a privileged account. The only web browser I'm familiar with (OmniWeb for NeXTSTEP) also allows you to specify the port number for the proxy. I was under the impression that all browsers supported alternate port numbers for proxies since they are commonly used for URLs... Do Mosiac and Netscape allow specifying the port for proxy servers? andrew

2 1