- cypherpunks-legacy@lists.ogf.org

remailer modification: mailing list demon
by covin＠cs.uchicago.edu 03 Feb '93

03 Feb '93

I have just joined this list, but I'm told that there was a recent discussion about the problem of mailing-list aliases making the names of all the list members publically available. I.e., if you've established a mailing list via a sendmail alias, certain sendmail commands will return the list of mailing addresses associated with the alias. I had been considering writing a mail-redistributing program, structurally similar to the user-account anonymous remailers, to get around this problem. I'm told that this was discussed on this list, and that the conclusion was that the sendmail hole could actually be plugged using regular sendmail features. Could someone send me either a copy or a pointer to a copy of that discussion, and/or the sendmail fix? Thanks much, -David

1 0

psEUDORAndom
by fnerd＠smds.com 03 Feb '93

03 Feb '93

While searching (in Eudora) for the word "eudora", I found instead the word "pseudorandom." One more property of "living at the P.O.?" -fnerd quote me fnerd(a)smds.com (FutureNerd Steve Witham)

1 0

No Subject
by maloned＠ul.ie 03 Feb '93

03 Feb '93

subscribe Declan Malone thanks you.

1 0

Remailer lists.
by Hal 03 Feb '93

03 Feb '93

I have been working on a document describing in some detail how to use the Cypherpunks anonymous remailers. It is pretty long, about 25K, but I'll post it here in a few days. Meanwhile, here is a list of the current remailers which I know about. If anyone else is running a remailer based on Eric Hughes' original design, please let me know and I'll add it to the list. All of the following remailers accept the basic "Request-Remailing-To" remailing request: hh(a)pmantis.berkeley.edu hh(a)cicada.berkeley.edu hh(a)soda.berkeley.edu The following remailers also accept the "Encrypted: PGP" function. The public keys for all of the remailers (plus the special one mentioned below) are in the keyring file below. They can all be used for anonymous addresses as described in the full document. phantom(a)mead.u.washington.edu hal(a)alumni.caltech.edu remailer(a)rebma.mn.org elee7h5(a)rosebud.ee.uh.edu hfinney(a)shell.portal.com The next remailer is a variant on the Cypherpunks remailers. It will work _only_ with encrypted messages, using its public key (in the keyring file below). But it allows a simpler syntax. It is not necessary to put "Encrypted: PGP" into the message header. In addition, the "::" pasting operator is assumed, so you can leave that off. Also, instead of "Request-Remailing-To:" you can say just "To:". So messages are much simpler in format for this remailer. This remailer runs at: remail(a)extropia.wimsey.com Here is a PGP keyring file containing keys for the encryption based remailers listed here: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.1 mQCNAitcsHIAAAEEAPZ3Ex1rEwKLeANRoaRyTA72htDFGiGPmWkowByZyUtRkTRp Vs/WdhgoJ1VLz76Chyb63I+ejpekeJfOud98gMh2HtVoTjNGYAawpCKo15tFyzYn BFYVy0NjroyxwM6YnPCsYfYMpvyjEa5mfgrlyzvYBBeTDRD89vYoe7Eue0fDAAUR sAEAtDJBbm9ueW1vdXMgUmVtYWlsZXIgPHBoYW50b21AbWVhZC51Lndhc2hpbmd0 b24uZWR1PrABAIkAlQIFECtcqWpkhnxaNc7AOQEBZ+8EAIOOvsFf/niUrWw0BRvP hSEmtzrAkQJt3q7kPXutjj3IsJ1/oR8oGhv4iPQ5BmNvvd5dnsbbCqOurhaftVgz lSpyQcYiVryeNVvpdeX1+VTS7N+lAHVAlqnimoaEtUUIftDoDIjNNKRDi+nU4Gbb L+1MqveC1LKQMIi1WPjr6WpwsAEAmQBNAisCtU0AAAEB/jNOYzN1B2YzOxlK/Zb6 axoOaGlPq5I7DV9GH3hcGRN5N6FiT4sRLhi53Sc5rUdYDa8mFQd4tqvFG6rHcT8L tDcABRGwAQC0KlJlbWFpbGluZyBTZXJ2aWNlIDxoYWxAYWx1bW5pLmNhbHRlY2gu ZWR1PrABAIkAlQIFECsGk/aoEwOvWCFMNwEB24gEAJlpxL88gdKUxdgXCTCeFZ45 bTbyiS0Mfy86iGthyuLRYjAEjJB5yerRaKDiJNOgCTvnO+I9YyFdXnPEpvBjqVfp qHF2WCc4f7BgzBbOKg79EyiOp2/eYIQT1FkkcvisjRGlmHncfGgoq+OhVUw81ime SUPbv8vZyqskUU7djZKbsAEAmQCNAisUI2QAAAEEAKgm07Hsje5KpmXYd5azk0R6 AES+qK7LcofnVGojUs7GBghDWbwrmW8oOEOhRorlShRALKeYspV4xYIw4WDkJcJx uf1B254scz1urF/Eem3zPW9byPAx7W/cGwvs6SouZvFcSDq4v1zApvGE9hP4szPz HeGmVr0NVNeaDK0guoCpAAURsAEAtCBSZW1haWxlciAocmVtYWlsZXJAcmVibWEu bW4ub3JnKbABAJkAjQIrHCjmAAABA/45q2W4ebeR4BBwxhNs8xWcd7CKZRIyBURb C6QnyWAXzd+kZrk/FRiMgnFEpgk6hDieRyWRefAlAjrMtwdteabTr22XRoowt0LO xW7RhyhgOPatL4AYFSHI48qaUSPWI36pSNoFCgyz3Hgk8NtDgwAO1EymCGtyAUt9 s43Kxav7swAFEbABALQmcmVtYWlsZXIwMyA8ZWxlZTdoNUByb3NlYnVkLmVlLnVo LmVkdT6wAQCJAJUCBRArZJVHg4Ds6kta1jMBAVHQBACKLGjpv/pE7ECOdxgKj169 PL+QAH8LqeZQ4lGwlqdewrnmB2az+M6JQKkO5Mlq5CHh4CR5F98gemB/40NDHg2R EV0uvZKtkhlUEh+opxqBfd1nq3xkaXTjWufeyVXEaZJczFM+m5l54bIhJvytRT/a TTmWMkuof94LPdopHs6t17ABAIkAVQIFECscKO/SN178mdtX6QEBtuwCAJO6/KZZ I6R9V/bkHLKhao3YybVxphwngHS1e7Yr4h5ZYw3tkajipI3xbELc2VfsowjV6/Do VtE4hNCeVqgcBAiwAQCZAE0CKwZ/4gAAAQH+J5Lq2HyEjVAGMamZy1W+wjFkG2an KRVdzemyHRdV8fiwQJK6Ci6TbOb88m23n0DYTlI7fGOkON4qWRDvjlYg1QAFEbAB ALQsUmVtYWlsaW5nIFNlcnZpY2UgPGhmaW5uZXlAc2hlbGwucG9ydGFsLmNvbT6w AQCJAJUCBRArBpKvqBMDr1ghTDcBASTlBACfTqODpVub15MK5A4i6eiqU8MDQGW0 P0wUovPkNjscH22l0AfRteXEUM+nB+Xwk16RG/GdrG8r9PbWzSCx6nBYb7Fj0nPn RPtS/u69THNTF2gU2BD0j2vZF81lEHOYy6Ixao2b6Hxmab2mRta2eTg7CV6XP3eR FDPisVqgooAWg7ABAJkAjQIqryddAAABA/41357aprEYyUWKMWE8Szu6G8zH84FD bUgxGsG90ro+FDtcargEXNuTyTQB0ISGvN2MX/c/0f9wI8JmK2asbwdkZCz0405s 0HdOH8qbGU6Ikf05TOReNyQrgjO+/ZgIq/SHctQkM10Nm5/PXlGWlYTlCczYJ3Zf sC6Tcb7wN+jjQwAFEbQsSW1tb3J0YWwgRnJlZWRvbSA8bWlyb25AZXh0cm9waWEu d2ltc2V5LmNvbT6JAJUCBRArUIGRqBMDr1ghTDcBAeHnA/sHamiBoSYH4ZWPsqUM JoDd8rYFIvzI4JlHUwdqn40Y9Loclzj3oEkPp9GReMBxKNWtqLHQKN/O4mBzXm6g Dr9ft8TNdG3iP0TU9XWcFHJvy18LgkQAgKpS+ZQeXEDcuGWxv0L4qAFmKqquoPX7 YiOmdZ5L2epiG/UGb1gQsrCI/IkAlQIFECsXPLSTcb7wN+jjQwEBv20D/jIKu8z9 DP+wTLLWYZZax9wnJJzRkD9//kFAC0is6LMNMSSX0yGwOPmqEI710BSovuTAlNBm qBrMrl0Bp5bsxpCN8Fw3Mc0ex5fe1efockVjXNLMP0G4plr0AFMA4KXNE+MfwLFM d+Gcdxufro0yKoBygsHwQ+om+rutRPIy89/PiQBFAgUQKwxwHUutImLEeA/3AQGQ nQF8D0Zdrrz+kMAguOANBhbnxm5tzak4TWg37hp/iU2CEfIbW/IUVIPEjNhvM6cj Z1jQ =UbNP -----END PGP PUBLIC KEY BLOCK----- Hal Finney 74076.1041(a)compuserve.com

1 0

Lame Gurus (fwd)
by Al Billings 03 Feb '93

03 Feb '93

Here is an interesting (or maybe not) current use for one of the anon remailers. ---------- Forwarded message ---------- Date: Tue, 2 Feb 93 22:44:09 EST From: aliquis <an1226(a)anon.penet.fi> To: future(a)nyx.cs.du.edu Subject: Lame Gurus Yawn. CYBERPUNK: Virtual sex, smart drugs and synthetic rock 'n' roll! --TIME cover 8 February 1993. Sure, but do they know how to set their umask values so that people can't peek? La-de-dah, let's check on one of the gurus... (BTW, if you enjoy this, & you can get on the WELL, try some of the other cyberpunk.gods from B. Sterling on. Not that they have anything much of interest....) [Actual session script, edited only to protect the guilty.] ============================================================== $ telnet well.sf.ca.us Trying... Connected to WELL.SF.CA.US, a SEQUENT-S27 running DYNIX. This is The WELL DYNIX(R) V3.1.0 (well) Type newuser to sign up. Type trouble if you are having trouble logging in. login: xxxxx Password: Last login: Tue Feb 2 XX:XX:XX from Xxxxxxx.xxx.xxxx DYNIX(R) V3.1.4 NFS #2 (): Tue Mar 31 12:38:27 PST 1992 ======================================================== You own your own words. This means that you are responsible for the words that you post on the WELL and that reproduction of those words without your permission in any medium outside of the WELL's conferencing system may be challenged by you, the author. Thanks for dropping into the WELL. If you haven't changed your password since October 15, 1992, please do so now. Type: change password at an OK prompt. **************************************************************** well 1: grep "Tim Leary" /etc/passwd timleary:xxxxxxxxxxxxxxx:9339:200:Tim Leary:/uh/39/timleary:/usr/shell/menu well 2: cd /uh/39/timleary well 3: ls -l total 54 -rw-r--r-- 1 timleary well 728 Jun 12 1992 1 -rw-r--r-- 1 timleary well 441 Jun 12 1992 240 -rw-r--r-- 1 timleary well 479 Jun 12 1992 29 -rw-r--r-- 1 timleary well 403 Jun 12 1992 359 -rw-r--r-- 1 timleary well 535 Jun 12 1992 42thnnks -rw-r--r-- 1 timleary well 1096 Jun 12 1992 60 -rw-r--r-- 1 timleary well 1096 Jun 12 1992 62 -rw-r--r-- 1 timleary well 2051 Jun 12 1992 animatemcs -rw-r--r-- 1 timleary well 11360 Jun 12 1992 animatemike -rw-r--r-- 1 timleary well 4141 Jun 12 1992 barlow -rw-r--r-- 1 timleary well 523 Jun 12 1992 barlow2 -rw-r--r-- 1 timleary well 0 Jun 12 1992 c -rw-r--r-- 1 timleary well 11 Jun 12 1992 cbf.002464 -rw-r--r-- 1 timleary well 0 Jun 12 1992 cbf.005371 -rw-r--r-- 1 timleary well 527 Jun 12 1992 cbf.022859 -rw------- 1 timleary well 4 Jun 12 1992 dead.letter -rw-r--r-- 1 timleary well 727 Jun 12 1992 hlr -rw-r--r-- 1 timleary well 403 Jun 12 1992 info -rw------- 1 timleary well 16663 Jan 9 23:43 mbox -rw------- 1 timleary well 452 Jan 9 23:36 q -rw-r--r-- 1 timleary well 341 Jun 12 1992 xmodem.log well 4: cat 29 >From rusirius Sun Jun 24 11:58:18 1990 Received: by well.sf.ca.us (4.12/4.7) id AA02393; Sun, 24 Jun 90 11:58:15 pdt Date: Sun, 24 Jun 90 11:58:15 pdt From: rusirius (Mondo 2000) Message-Id: <9006241858.AA02393(a)well.sf.ca.us> To: timleary Subject: Re: Masonicks Status: RO Yeah, great to have you virtually in the kitchen. Hope Steve might be helpful. He's advising us. Good business head! Ill further discuss the Burroughs thing with Mu & be back to you during the week. well 5: echo Heh He He He Heh He He He well 6: exit well 7: logout Connection closed by Foreign Host $ ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind system, any replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

1 0

I've had many requests for this, so here it is.
by The Phantom 03 Feb '93

03 Feb '93

These are the instructions for the remailer set up on one of my accounts, dubbed the 'phantom remailer' by some. These instructions are available by fingering phantom(a)mead.u.washington.edu. Recently I had problems with the receiveing and decryption of encrypted PGP messages, but everything is functional now. Please note the syntax: if you don't include the '::'s, the message will end up in my mailbox! (this goes for all remailer systems). -----BEGIN PGP SIGNED MESSAGE----- If you wish to bounce anonymous mail (remail): - ---------------------------------------------- include the line "Request-Remailing-To: <user@host>" in the mail header, then the body of the message will be forwarded to the recipient. - -or- include the lines :: Request-Remailing-To: <user@host> in the body of the mail message, of which the rest of message will be forwarded to the recipient. If you wish to send encrypted mail to remail: - --------------------------------------------- include the line "Encrypted: PGP" in the mail header, then the body will be decrypted and searched for the above-mentioned convention for finding the recipient. - -or- include the lines :: Encrypted: PGP in the body of the mail message, of which the rest of the message will be decrypted and searched for the above-mentioned convention for finding the recipient. Recently, I was having problems with the encryption part of the remailer, but that has been fixed. The remailer phantom(a)mead.u.washington.edu is now fully functional. To encrypt the message for the remailer to decypher, you must use the remailer's public key, which follows. - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.1 mQCNAitcsHIAAAEEAPZ3Ex1rEwKLeANRoaRyTA72htDFGiGPmWkowByZyUtRkTRp Vs/WdhgoJ1VLz76Chyb63I+ejpekeJfOud98gMh2HtVoTjNGYAawpCKo15tFyzYn BFYVy0NjroyxwM6YnPCsYfYMpvyjEa5mfgrlyzvYBBeTDRD89vYoe7Eue0fDAAUR tDJBbm9ueW1vdXMgUmVtYWlsZXIgPHBoYW50b21AbWVhZC51Lndhc2hpbmd0b24u ZWR1PokAlQIFECtcqWpkhnxaNc7AOQEBZ+8EAIOOvsFf/niUrWw0BRvPhSEmtzrA kQJt3q7kPXutjj3IsJ1/oR8oGhv4iPQ5BmNvvd5dnsbbCqOurhaftVgzlSpyQcYi VryeNVvpdeX1+VTS7N+lAHVAlqnimoaEtUUIftDoDIjNNKRDi+nU4GbbL+1MqveC 1LKQMIi1WPjr6Wpw =1XNo - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.1 iQCVAgUBK29GmvYoe7Eue0fDAQHxYwP/UapN+FYiB1J3ek18QiaXCJ90rcwFOx79 Mz596NYL/NArGCDGd/RPbEqBG0lpGW4H71TSvPK/G26ImyxgEvmjeMqBhB6jWZZK Xh0zgd+cGN9DS4N5EOvvt0N2CaVGTPNO2uqyXuGM8j2GfV++2E0RHApeuDirooc1 sYyj1iiKYDk= =LZMq -----END PGP SIGNATURE----- Matt Thomlinson University of Washington, Seattle, Washington. Internet: phantom(a)u.washington.edu phone: (206) 528-5732 PGP 2.0 key availaible via email or finger phantom(a)hardy.u.washington.edu

1 0

Remailer abuse
by nobody＠soda.berkeley.edu 03 Feb '93

03 Feb '93

-----BEGIN PGP SIGNED MESSAGE----- From: Brad Huntting <huntting(a)glarp.com> > Custom headers in RFC822 messages must begin with "X-". Making up > new headers that dont begin with "X-" is unnessary and violates > the standard. What RFC 822 actually says is this: 4.7.4. EXTENSION-FIELD A limited number of common fields have been defined in this document. As network mail requirements dictate, additional fields may be standardized. To provide user-defined fields with a measure of safety, in name selection, such extension-fields will never have names that begin with the string "X-". Names of Extension-fields are registered with the Network Information Center, SRI International, Menlo Park, California. 4.7.5. USER-DEFINED-FIELD Individual users of network mail are free to define and use additional header fields. Such fields must have names which are not already used in the current specification or in any definitions of extension-fields, and the overall syntax of these user-defined-fields must conform to this specification's rules for delimiting and folding fields. Due to the extension-field publishing process, the name of a user-defined-field may be pre-empted. Note: The prefatory string "X-" will never be used in the names of Extension-fields. This provides user-defined fields with a protected set of names. I must say, this is a refreshingly non-facist RFC. There are few of the prohibitions which we are accustomed to seeing in these "laws of the net". In particular, users can use any header fields they want, as long as they aren't already used; they only risk being made obsolete if their chosen field names become used. That's why people use X-. Hal 74076.1041(a)compuserve.com -----BEGIN PGP SIGNATURE----- Version: 2.1 iQCVAgUBK23k7agTA69YIUw3AQFUTAP/UScvi9FOj4o31sjsqmz/xIJ90KB7WnK5 8m4yKX/p46IbH9+FhSvgBfURokh7+dSk91+GR6NPM/4rXEm+5aMbee6uuMsJaTF/ qPmmen1JnvtabTZi9s0HeQ2frqK7kolr0GIair7U8CiPhX1QVNx0IwzYB6g9YQmP Zv84fGUzGEw= =U54Y -----END PGP SIGNATURE-----

2 1

Remailer changes.
by Anonymous＠cs.Buffalo.EDU 03 Feb '93

03 Feb '93

Hal Finney's remailer writes: >Remailed-By: Hal Finney <hal(a)alumni.caltech.edu> >Remail-Notice: This message is NOT from the person listed in the From > line. It is from an automated software remailing service operating at > that address. Please report problem mail to <hal(a)alumni.caltech.edu>. I have taken similar precautions with my remailer... as you can tell from the header lines. I'm still having trouble convincing my system adminstrator to install PGP v2.1 (or even v2.0). For some reason, he seems to be ignoring my messages. Since I only have a limited knowledge of C, I really don't know how to fiddle around with the PGP *.C source files too much, otherwise, I would install it myself. The error that I keep getting running under SunOS version 4.1.3 is: > make sun4gcc make all CC=gcc LD=gcc OBJS_EXT=sparc.o \ CFLAGS="-O -fpcc-struct-return -DUNIX -DHIGHFIRST -DIDEA32" gcc -O -fpcc-struct-return -DUNIX -DHIGHFIRST -DIDEA32 -target sun4 -c pgp.c In file included from pgp.c:109: /usr/include/stdlib.h:18: conflicting types for `abort' <built-in>:0: previous declaration of `abort' /usr/include/stdlib.h:26: conflicting types for `exit' <built-in>:0: previous declaration of `exit' *** Error code 1 make: Fatal error: Command failed for target `pgp.o' Current working directory /tmp/pgp21/src *** Error code 1 make: Fatal error: Command failed for target `sun4gcc' If anyone can help me out, please e-mail me *DIRECTLY* and not to the list. -- +==== Internet: babani(a)cs.buffalo.edu ===+======== Amateur-Radio: N2LYC ======+ ! Bitnet: V078LNGT(a)ubvms.BITNET | UUCP: rutgers!ub!babani ! ! Alternate: an173(a)cleveland.freenet.edu | Plsure dpnds on the othrs prmison. ! +== PGP key available. (If you don't know what a PGP key is... find out!) ==+

1 0

Re: NEWS! Steve Jackson case
by fnordbox!loydb＠cs.utexas.edu 02 Feb '93

02 Feb '93

:"How long would it have taken you, Mr. Foley, to find out what Steve :Jackson Games did, what it was?" asked Sparks. "An hour? : :"Was there any reason why, on March 2, you could not return to Steve :Jackson Games a copy, in floppy disk form, of everything taken? : :"Did you read the article in Business Week magazine where it had a :picture of Steve Jackson -- a law-abiding, tax-paying citizen -- :saying he was a computer crime suspect? : :"Did it ever occur to you, Mr. Foley, that seizing this material could :harm Steve Jackson economically?" : :Foley replied, "No, sir," but the judge offered his own answer. : :"You actually did, you just had no idea anybody would actually go out :and hire a lawyer and sue you." This particular exchange makes me warm & tingly inside... :-) :"Agent Foley, it's been almost three years. Has Chris Goggans been :indicted? Has Loyd Blankenship been indicted? Has Loyd Blankenship's :computer been returned to him?" No, it hasn't. <sigh> Hopefully this will motivate them to return it. While I can't get too excited about the then state-of-the-art 286 system, I'd *really* like the laser printer back, and Whitney wants her papers returned. Loyd *************************************************************************** * loydb(a)fnordbox.UUCP Call the Fnordbox BBS * Loyd Blankenship * * GEnie: SJGAMES 2 v32bis lines, 24 hrs * PO Box 18957 * * Compu$erve: [73407,515] 512/444-2323 * Austin, TX 78760 * * cs.utexas.edu!dogface!fnordbox!loydb * 512/447-7866 * ***************************************************************************

1 0

Re: Remailer abuse
by eric＠synopsys.com 02 Feb '93

02 Feb '93

Nobody (well, actually Hal) writes: >> What I could do, if more "problem" messages come through, is create a >> list of people _not_ to forward mail to. >> >> Hal >> 74076.1041(a)compuserve.com Another suggestion is to invert this: create a list of addresses that the remailer WILL send mail to. But, that's STUPID, you say. Well, maybe, but I don't think so. It is, however, sneaky. If you run a remailer, you should be registered with other remailers so they can use you to forward stuff. This places you on thier list of OK places to remail stuff to. Remailers should exchange these lists to keep them up to date. This, of course, encourages people to run remailers, which is what we want. It also silences any objections from people concerning anonymous abuse, since you have to explicitly ask for anonymous mail by running a remailer. One problem this doesn't solve is how to send anonymous mail to someone who hasn't registered, since that's exactly what we're trying to avoid. Someone could offer a human remailing service which moderated the messages it sent through. Using such a service, you could request someone to run a remailer. A cheaper service could just send a standard message to an address that you send to it. In all these cases, the service provider is responsible for the content of the messages sent out, and consequently would want to be very conservative. -eric messick P.S. Note the change in my address. I've just changed jobs and am now eric(a)synopsys.com. All my old addresses (eric(a)parallax.com, eric(a)toad.com) forward.

1 0