- cypherpunks-legacy@lists.ogf.org

posting and posting and posting.
by DrZaphod 23 Feb '93

23 Feb '93

In Message Tue, 23 Feb 93 12:16:29 GMT, Tony Kidson <morgan.demon.co.uk!tony(a)netcomsv.netcom.com> writes: >One reason the list has been so busy is that DEADBEAT's messages >seem to be being posted both through penet and through a cypherpunks >remailer. I was just going to ask about that.. I've gotten the same message from DEADBEAT about 4 times.. DrZaphod [AC/DC] / [DnA][HP] [drzaphod(a)ncselxsi.uucp] Technicolorized

1 0

No subject
by an5877＠anon.penet.fi 23 Feb '93

23 Feb '93

In-reply-to: Johan Helsingius' message of Tue, 23 Feb 1993 10:52:16 +0200. <9302231011.aa20353(a)penet.penet.FI> -----BEGIN PGP SIGNED MESSAGE----- > > Well, I don't agree that doubleblind is a great idea. > > Neither do I. But many of the users of anon.penet.fi are > not very computer-and-email-literate, and they have been using other > services, providing double-blind. Unfortunate, but too late to change now... Can you elaborate on those other services? The Finnish remailer is the only one I'm aware of. Also, I'm confused about these "not very computer-and-email-literate" users -- aren't they forced to use an X-Anon-Password header? I'm surprised there hasn't been more ruckus about the default behavior. There must be many folks whose identities have been inadvertantly exposed. > What we can do is to provide better ways for those who *are* computer > literate enough to use extra headers etc. I don't think this will help. With my mail environment, I have to go to lengths to send an anonymous message, concocting X-Anon-To and X-Anon-Password headers. It's worth the effort, since this helps to preserve the secrecy of my pseudonymous identity. But the first time I mess up, and send an unfettered message to an anon.penet.fi client, I am unmasked. What I'm saying is that I'm hip to headers; it's the simple stuff that trips me up. And I still don't understand how the unfettered message gets past the X-Anon-Password filter. > > I think it's imperative that the sender use X-Anon-To to be > > pseudonymous. This is consistent with the principle of least > > astonishment. > > But in this case I feel the principle of least astonishment is overruled > by the principle of least risk of accidental exposure. I think the risk of accidental exposure is heightened by the default behavior of the Finnish remailer. Maybe we're using the same words to describe different things. > I think that hornet's nest needed to be kicked. But I am also > disappointed that not enough people defend the need for anonymity in > places like news.admin.policy. Some of us gave up on USENET policy long, long ago. Personally, I stick to the alt.* groups. > I think pseudonyms *should* be prominent - as you have noticed, anon.penet.fi > adds an explicit warning at the end of every message. In time, I hope such warnings will be unnecessary, as people grow accustomed to the use of pseudonyms. DEADBEAT -----BEGIN PGP SIGNATURE----- Version: 2.1 iQBFAgUBK4o0+PFZTpBW/B35AQGlcAF/UC0HNtSoIQe2arEoK5uzkjX+7fCwPUqC l/2o0wifS7SLGLfoshQpd3vaczDktaBV =TPtY -----END PGP SIGNATURE----- ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind system, any replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi. *IMPORTANT server security update*, mail to update(a)anon.penet.fi for details.

1 0

REQUEST
by mvario＠inode.com 23 Feb '93

23 Feb '93

Subj: Request To: cypherpunks-request(a)toad.com I would like to request to be placed on the cypherpunks mailing list. Thank you, Michael Vario mvario(a)inode.com ___ Blue Wave/QWK v2.12

1 0

RE: Advertising on the net
by Duncan Frissell 23 Feb '93

23 Feb '93

Nothing like jumping into the middle with one's first posting... Denizens of the nets have to realize that there are some extreme social deviates out here who go beyond sodomy, go beyond working for the FDA, go beyond rape as an instrumentality of war, go beyond voting and actually believe that adverting is an ennobling human activity. Think about it. Poor Michael in the last few episodes of "Thirtysomething" suffering existential angst because he was great at advertising but considered it an unworthy occupation for a man. If he'd only known that advertising=mass markets=low prices=wealth beyond the dreams of ancient Kings. Lack of advertising=Moscow before 1990. If we have to accept your deviations (voting for the short fascist with the bad haircut and the funny ears par example) you have to accept ours. We can live with each other without too much trouble. Duncan Frissell **************************************************************************** * * * * * YOUR AD HERE * * * * * **************************************************************************** PS - If you post a message about the existence and availability of PGP, you are *ADVERTISING*. Naughty, naughty, naughty.

2 1

Mac Perl info
by robichau＠lambda.msfc.nasa.gov 23 Feb '93

23 Feb '93

As {promised | threatened} in my message to the list last night, here's the info file for Mac Perl, available at fine FTP sites like nic.switch.ch (the original site and holder of this file.) I don't use Perl myself, but you can contact either Matthias or Tim (see below); they have both been helpful with other stuff in the past. Regards, -Paul, posting from work for once WELCOME TO MPW PERL This is Perl for the Mac, ported to MPW C by Matthias Neeracher <neeri(a)iis.ethz.ch> and Tim Endres <time(a)ice.com>. It runs every program in the test suite that you could it reasonably expect to, and some you probably didn't expect. Feel free to give this program away according to the terms stated in the README file. System Requirements Perl really likes MPW. The standalone version is not much use yet. Some of the really cool features require ToolServer, System 7, and enough RAM (Notably stuff like `CFront MacApp.cp`, while (<Å.c>) or open(XXX, "Catenate Å.c |")) Some of the files barely compile with 5 megabytes of RAM. Bugs, Suggestions, Damnations Please send your bug reports and/or fixes to <neeri(a)iis.ethz.ch> (It is rather unlikely that any of the bugs are relevant to the UNIX version). Mailing list There is now a mailing list for announcing new releases, sharing scripts, and discussions about how to make MPW Perl change your life. To subscribe, send a mail to <mpw-perl-request(a)iis.ethz.ch> Revision History 24Jan93 4.0.6 - choose() for files no longer includes the terminating null character. - rename() and TCP sockets work better (thanks to Brad Pickering for reporting these bugs). - standalone version can read scripts from its data fork and accepts more startup files. - (hopefully) improved the documentation a little. Added ObiWan support. 20Dec92 4.0.5 - Supports sockets and symbolic links. - "ask", "answer" and "pick" are now builtins with a slightly changed syntax (sorry). - A few mac scripts are now provided in :t:mac and :macscripts: - The application now always searches for a #! line first. If none is found, the script is executed anyway, but the file has to be read twice. 27Sep92 4.0.4 This release upgrades the Mac version to UNIX patchlevel 35. 08Jun92 4.0.3 This release supports opendir (In fact, I thought the last one'd already support it. Thanks to Mike Meckler <meckler(a)egg.gg.caltech.edu> for reporting this bug). dbmopen & friends are now supported. 20Jan92 4.0.2 First public release. -- Paul Robichaux, KD4JZG | May explode if disposed of improperly. Mission Software Development Div. | Printed on recycled phosphors. New Technology, Inc. | ** PGP 2.0 key available on request **

1 0

Some questions
by Nickey MacDonald 23 Feb '93

23 Feb '93

{I have been reading the list for about a week now... This is my first post... I hope this is not a FAQ...} I am looking for solutions to a situation that people may find familiar... Say you have a text file that contains sensitive configuration data (in a particular case, the cross-index of anonymous ids and real mail addresses) taht you want a program to be able to read, but you want it stored in encrypted format. (Which means you will decrypt it each time you read it, and rewrite it in encrypted form when needed. It will only exist in decrypted in the computers RAM.) Is there some sort of scheme that will allow this, without having to have a user present to enter the password at startup (a pain if its supposed to be an unattended program, such as a remailer) or having the password compiled into the program... Also, I have seen a number of references to DC nets... I must confess I have never heard of the term before... can someone enlighten me? --- Nick MacDonald i6t4(a)jupiter.sun.csd.unb.ca

1 0

Re: anonymous mail
by paul＠fairgate.com 23 Feb '93

23 Feb '93

>Eli> You might want to work in perl, which would make the scripts work under >Eli> Unix and DOS, at least. Is there a Mac perl? > >... As for a Mac Perl, a quick scan of my >Camel book doesn't turn up a mention of one. I could have missed it. There is indeed a Mac perl; it exists as a standalone app and an MPW tool. I'll post the location tomorrow if I remember to look it up; the Internet-abled can try archie. -Paul -- Paul Robichaux, KD4JZG | Fairgate Technologies: Macintosh support, paul(a)fairgate.com | training, and development. ..uunet!xavax!fairgate!paul | 'ripem' PEM key available.

1 0

Re: anon.penet.fi hacking
by Tony Kidson 23 Feb '93

23 Feb '93

1 0

Beware of anon.penet.fi message!
by nobody＠rosebud.ee.uh.edu 23 Feb '93

23 Feb '93

Beware of the message about the security bug in the anon.penet.fi software! If you do as requested, and send your true email address to an5877(a)anon.penet.fi then he will see both your true email address and your anonymous address (if you have one - if you don't, you will be assigned one and he will see that). Any future use you make of this anonymous server (say, to post anonymously) will appear under that same anonymous address - and this person will know your true email address that goes with it. an5877's message appears to be a trick, designed to collect anonymous/real address pairs. Johan Helsingius should take action against this trickster. Since he is learning other people's real addresses, perhaps it would be appropriate for his own real address to be revealed. But, this does point out that these systems which automatically assign anonymous addrsses have several security flaws. Johan has already had to introduce a "password" feature to make it more difficult to send fakemail that appears to be from a particular email address through the server, thus revealing the corresponding anonymous address when it is delivered. an5877's trick is a variant on one discussed in news.admin.policy where it is pointed out that you can mail to someone via anon.penet.fi and ask for information; when the return mail comes back it will be from that person's anonymous address. So again you can pair up real and anonymous addresses. These are serious problems. We need some discussion of how to avoid these simple tricks for defeating the anonymity while still having an easy-to-use system. ::Xavier::

3 2

Dead(beat) give-away
by deltorto＠aol.com 23 Feb '93

23 Feb '93

"an5877(a)anon.penet.fi" (aka "deadbeat") sez: >> I believe I have uncovered a serious bug in the Finnish anonymous >> remailer, one that allows me to piece together anonymous id's and >> actual email addresses. >> >> I'm reluctant to publish the details here, but I'll explain how it >> works if you send me your email address. I smell something, and it's not my FPU overheating! Anyone who's "reluctant" to discuss a flaw in an anon remailer HERE... is definitely NOT on the up-and-up. Somebody "out" this weasel, PRONTO! (please!) d2t

1 0