|
Home > Archive > Anonymous Servers > June 2007 > ATTN: ZAX, PANTA
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
| George Orwell 2007-06-07, 1:13 pm |
| What is the problem with your nym servers?
Zax, I have never been able to set up a nym with you, never get a
config request back.
Panta, my nyms no longer work and cannot get a config returned, what
is wrong?
| |
| Thomas J. Boschloo 2007-06-07, 7:14 pm |
| -----BEGIN PGP SIGNED MESSAGE-----
George Orwell wrote:
> What is the problem with your nym servers?
>
> Zax, I have never been able to set up a nym with you, never get a
> config request back.
>
> Panta, my nyms no longer work and cannot get a config returned, what
> is wrong?
What PGP version are you using?
As this is most probably a GnuPG vs PGP compatibility issue..
Thomas
- --
You crawl before you walk
You run before you leap
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iQB5AwUBRmhNPwEP2l8iXKAJAQGgsAMeP2VFoA/aJ2uxzPmQcxOPDYAb2Q3hHKil
hWbPylcmMWVyAiWQk5hLBSZuXq04GeH7W7zl42Wj
/04BLFrfmY8Gew9BCDrSxosa
rrXdpeohORh1/HvI57eXJlcw0H1t+ql+CVoEpg==
=yLkL
-----END PGP SIGNATURE-----
| |
|
| -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
["Followup-To:" header set to alt.privacy.anon-server.]
On Thu, 7 Jun 2007 20:10:09 +0200 (CEST), George Orwell wrote in
Message-Id: < de0f295b9d6d14e04a62a738a80a7611@mixmast
er.it>:
> What is the problem with your nym servers?
> Zax, I have never been able to set up a nym with you, never get
> a config request back.
There are plenty of people with nyms working so I'm afraid it's more
likely a problem at your end.
What OS are you running?
How are you generating your nym (hand-roll/qs/jbn)?
Are you using pgp or gnupg? What version?
I've been playing around with some script to auto-generate nyms but it's
not really ready for release into the wild yet. The idea is to let
users specify a few paramters, such as passphrases and nym name and then
the script will do the rest. I need to work out what actually makes a
good reply block first though. 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGaRPTlKZ6CY7Vd0MRCjN5AJ0fFHOCpMOh
9FlRcCxTYcNB/XTL4QCeMhjZ
YRv0DUf5bi9Bhb+UcgpQIAA=
=tfp7
-----END PGP SIGNATURE-----
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| George Orwell 2007-06-12, 7:14 pm |
| In article <46684d16$0$8649$e4fe514c@dreader18.news.xs4all.nl>
"Thomas J. Boschloo" <nospam@hccnet.nl> wrote:
>
> What PGP version are you using?
PGP 8.1 Enterprise Edition
> As this is most probably a GnuPG vs PGP compatibility issue..
>
> Thomas
> - --
> You crawl before you walk
> You run before you leap
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iQB5AwUBRmhNPwEP2l8iXKAJAQGgsAMeP2VFoA/aJ2uxzPmQcxOPDYAb2Q3hHKil
> hWbPylcmMWVyAiWQk5hLBSZuXq04GeH7W7zl42Wj
/04BLFrfmY8Gew9BCDrSxosa
> rrXdpeohORh1/HvI57eXJlcw0H1t+ql+CVoEpg==
> =yLkL
> -----END PGP SIGNATURE-----
| |
| Anonymous 2007-06-14, 7:13 pm |
| In article <f4b44j$uvm$1@bananasplit.info>
Zax <admin@bananasplit.info> wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> ["Followup-To:" header set to alt.privacy.anon-server.]
> On Thu, 7 Jun 2007 20:10:09 +0200 (CEST), George Orwell wrote in
> Message-Id: < de0f295b9d6d14e04a62a738a80a7611@mixmast
er.it>:
>
>
>
> There are plenty of people with nyms working so I'm afraid it's more
> likely a problem at your end.
>
> What OS are you running?
WINDOWS 2000
> How are you generating your nym (hand-roll/qs/jbn)?
qs
> Are you using pgp or gnupg? What version?
PGP 8.1 ENTERPRISE EDITION
>
> I've been playing around with some script to auto-generate nyms but
it's
> not really ready for release into the wild yet. The idea is to let
> users specify a few paramters, such as passphrases and nym name and
then
> the script will do the rest. I need to work out what actually
makes a
> good reply block first though.
I have had many nyms eg, paranoia, panta, hod, etc. But can now
only get hod to work, panta and yours do not work for me, panta did,
now not.
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFGaRPTlKZ6CY7Vd0MRCjN5AJ0fFHOCpMOh
9FlRcCxTYcNB/XTL4QCeMhjZ
> YRv0DUf5bi9Bhb+UcgpQIAA=
> =tfp7
> -----END PGP SIGNATURE-----
>
> --
> pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
> Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09
8ED5 7743
> uid Admin <admin.bananasplit.info>
| |
|
| On Fri, 15 Jun 2007 00:37:13 +0200, Anonymous wrote in
Message-Id: <870be964d42d689453158ebaeb164984@awxcnx.de>:
> I have had many nyms eg, paranoia, panta, hod, etc. But can now
> only get hod to work, panta and yours do not work for me, panta did,
> now not.
Can you let me know a name for one of your nyms that you haven't
received a response from? Do it by email if you prefer.
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| Nomen Nescio 2007-06-17, 1:14 am |
| Zax <admin@bananasplit.info> writes:
> I need to work out what actually makes a good reply block first
> though.
What would be the recommended structure of a reply block that directly
posts replies to a.a.m with no latency and no random hop? For folks
who take a full feed of a.a.m at all times anyway, this would appear
to be the most reliable and efficient reply block, with no obvious
down-side.
Over at nym.alias.net, this used to be possible with Anon-To:
mail2news@anon.lcs.mit.edu, but apparently no longer. (Why?)
What if Encrypt-Subject is added to the requirement stated above?
(Here, nym.alias.net is apparently no good at all, because as far as I
know, they have never supported esub.)
| |
|
| -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Sun, 17 Jun 2007 04:30:11 +0200 (CEST), Nomen Nescio wrote in
Message-Id: <012e17c078be3181165f1aa870973afc@dizum.com>:
> Zax <admin@bananasplit.info> writes:
>
> What would be the recommended structure of a reply block that directly
> posts replies to a.a.m with no latency and no random hop? For folks
> who take a full feed of a.a.m at all times anyway, this would appear
> to be the most reliable and efficient reply block, with no obvious
> down-side.
You could do this with:-
Reply-Block:
::
Anon-Post-To: alt.anonymous.messages
> What if Encrypt-Subject is added to the requirement stated above?
> (Here, nym.alias.net is apparently no good at all, because as far as I
> know, they have never supported esub.)
This would become:-
Reply-Block:
::
Encrypt-Subject: foobar
Anon-Post-To: alt.anonymous.messages
##
Subject: My Subject
You really also want some conventional encryption so that the Asymmetric
key used to perform the encryption is not visible:-
Reply-Block:
::
Encrypt-3DES: passphrase
Encrypt-Subject: foobar
Anon-Post-To: alt.anonymous.messages
##
Subject: My Subject
All of these are only meant as examples because you really do want a
single remailer hop in the delivery. Without this the Nym-Server has
unencrypted access to the entire reply-block and that's not a good
thing.
My interest is in understanding which of the multitude of Type-I
directives are actually good for pseudonymous identities. Some are
plain bad, others are bad because they make traffic look different. So
is the best reply block one that doesn't do anything clever?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGdP4FlKZ6CY7Vd0MRCldFAKDGJcnt2uDg
d+ZDAWPrG0D+vcJlgwCePtMU
VtZupcJE9hogMMrZF+FUUQQ=
=7P95
-----END PGP SIGNATURE-----
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| Anonymous Sender 2007-06-19, 7:13 am |
| > Can you let me know a name for one of your nyms that you haven't
> received a response from? Do it by email if you prefer.
Cerios
| |
|
| -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Tue, 19 Jun 2007 09:37:19 +0000 (UTC), Anonymous Sender wrote in
Message-Id: < 50482f42325293d5b8cbbba14ff5853c@remaile
r.metacolo.com>:
> Cerios
I suspect it's broken because of the Encrypt-Subject directive. Esub is
done at the last remailer in the reply-block, but you don't have any
remailers in yours.
On a side-note, you have 10 separate reply-blocks for that Nym, all
terminating in a.a.m. It would be very easy for an observer to send a
message to your nym and watch 10 messages appear in a.a.m. All nyms are
vulnerable to this type of attack to some extent, but yours would really
stand out.
Instead of having separate reply-blocks for each mail2news gateway,
consider putting multiple gateways on a single Anon-To: directive. Only
one copy will show up this way because the Message-ID will be the same
for all recipients.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGd8GulKZ6CY7Vd0MRCkuFAKDhnosn3FSF
wOB6rrzRT3Ogqc8VGQCgmGnv
ggRloyUjfa/x4nvTRSg3Eq0=
=bXYI
-----END PGP SIGNATURE-----
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| Anonymous 2007-06-19, 1:14 pm |
| > Can you let me know a name for one of your nyms that you haven't
> received a response from? Do it by email if you prefer.
Cerios
| |
| Nomen Nescio 2007-06-20, 1:14 am |
| Zax <admin@bananasplit.info> writes:
[vbcol=seagreen]
> You could do this with:-
> Reply-Block:
> ::
> Anon-Post-To: alt.anonymous.messages
No Subject:?
Do all Type I remailers support Anon-Post-To: now? How can it be
determined which ones do?
So, through chains of mixmasters ending with banana, I mailed messages
as follows to banana@mixmaster.mixmin.net. The first has no Subject:,
as in your recommendation. To the second, I added a Subject:.
Nothing showed up on a.a.m. Why? (Of course, they could have gotten
lost in the remailer chains.)
First mail:
::
Anon-Post-To: alt.anonymous.messages
**
-----BEGIN PGP MESSAGE-----
Version: GnuPG v1.4.6 (GNU/Linux)
jA0EAwMCXtEIXAVZ3ZdgyUeEop6/qv4ow6TVw2xc2IYUa+F6VgW6nNtmSIPLualP
Kk0tnOEa2YSJh1KycBMbKFz+/fNHiLG7vX8gHRahSxvsN+VzJdEY1w==
=edpP
-----END PGP MESSAGE-----
Second mail:
::
Anon-Post-To: alt.anonymous.messages
##
Subject: This time with a Subject:
**
-----BEGIN PGP MESSAGE-----
Version: GnuPG v1.4.6 (GNU/Linux)
jA0EAwMCXtEIXAVZ3ZdgyUeEop6/qv4ow6TVw2xc2IYUa+F6VgW6nNtmSIPLualP
Kk0tnOEa2YSJh1KycBMbKFz+/fNHiLG7vX8gHRahSxvsN+VzJdEY1w==
=edpP
-----END PGP MESSAGE-----
> All of these are only meant as examples because you really do want a
> single remailer hop in the delivery. Without this the Nym-Server has
> unencrypted access to the entire reply-block and that's not a good
> thing.
Why? So the Nym-Server sees that the reply goes straight to a.a.m and
can establish the correspondence between reply and a.a.m message. So
what? So any observer can establish that correspondence, just by
temporal coincidence. So what? (Assume conventional encryption is
used as you suggest so that the Asymmetric key id doesn't show.)
| |
|
| -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Wed, 20 Jun 2007 03:10:12 +0200 (CEST), Nomen Nescio wrote in
Message-Id: <610f5d97900a2219b107713a48ab23e8@dizum.com>:
> Zax <admin@bananasplit.info> writes:
>
>
>
>
> No Subject:?
Sure, you can add a Subject header if you want one. I just showed the
simplest possible reply-block to demonstrate the structure.
> Do all Type I remailers support Anon-Post-To: now? How can it be
> determined which ones do?
Not all of them support it. You can find out (in theory) from the
cap-strings which ones do, but I'd suggest testing it before creating a
nym/reply-block.
> So, through chains of mixmasters ending with banana, I mailed messages
> as follows to banana@mixmaster.mixmin.net. The first has no Subject:,
> as in your recommendation. To the second, I added a Subject:.
> Nothing showed up on a.a.m. Why? (Of course, they could have gotten
> lost in the remailer chains.)
Banana isn't a Type-I remailer, it's Mixmaster only.
> Why? So the Nym-Server sees that the reply goes straight to a.a.m and
> can establish the correspondence between reply and a.a.m message. So
> what? So any observer can establish that correspondence, just by
> temporal coincidence. So what? (Assume conventional encryption is
> used as you suggest so that the Asymmetric key id doesn't show.)
According to Len Sassaman on a posting to the Mixminion list this
week[1], all Reply-Block technology (including Type-III SURB's) should
be considered broken. I trust Len's judgement completely, but until the
Pychon Gate is a reality, reply-blocks are the only psudonymous delivery
mechanism available.
To avoid intersection attacks, delivery to a.a.m seems like a good idea.
Whilst I agree with you that going straight from nym server to a.a.m shouldn't
impact the anonymity of the nym holder, I would personally always put a
remailer in the chain. This provides additional functionality, such as
ESub and also masks which nymserver is sending the messages.
[1] http://archives.seul.org/mixminion/...7/msg00001.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGePWelKZ6CY7Vd0MRCnj1AKC3yUQxd4av
u6cG3afBv9j2kwiU/QCeLXqC
dhddbLUcO4Xat8AZz6AlNo4=
=oWAi
-----END PGP SIGNATURE-----
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| Anonymous 2007-06-20, 1:17 pm |
| On Wed, 20 Jun 2007 03:10:12 +0200 (CEST)
Nomen Nescio <nobody@dizum.com> wrote:
> Do all Type I remailers support Anon-Post-To: now? How can it be
> determined which ones do?
>
> So, through chains of mixmasters ending with banana,
You can't use mixmaster remailers for a reply block.
Cyberpunk only.
| |
| Nomen Nescio 2007-06-20, 7:15 pm |
| Zax <admin@bananasplit.info> writes:
> Sure, you can add a Subject header if you want one. I just showed the
> simplest possible reply-block to demonstrate the structure.
I was mindful of the sample Subject: header given in "Instructions for
nym.alias.net" Revision: 1.77:
Subject: some sort of subject line is required
Is the assertion suggested here incorrect then?
> Banana isn't a Type-I remailer, it's Mixmaster only.
Where then to send it, to test reply blocks for use with the banana
nymserver?
> According to Len Sassaman on a posting to the Mixminion list this
> week[1], all Reply-Block technology (including Type-III SURB's) should
> be considered broken.
Thanks for the reference. I'll be looking at this.
> I would personally always put a remailer in the chain. This
> provides additional functionality, such as ESub...
Wouldn't ESub be available anyway, assuming the nymserver's Type I
remailer supports it? Does that of the banana nymserver?
| |
|
| -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Thu, 21 Jun 2007 01:50:04 +0200 (CEST), Nomen Nescio wrote in
Message-Id: <0d8150bf01e421083e01b2e5920d43a2@dizum.com>:
> I was mindful of the sample Subject: header given in "Instructions for
> nym.alias.net" Revision: 1.77:
>
> Subject: some sort of subject line is required
>
> Is the assertion suggested here incorrect then?
It is for my nymserver. I've used a number of test nyms without a
Subject header. That being said, for a production nym, I would
recommend always having one.
> Where then to send it, to test reply blocks for use with the banana
> nymserver?
You can send messages to any recipient or Type-I nymserver, but you
cannot use the Banana remailer in a reply-block because it's Type-II
only.
> Wouldn't ESub be available anyway, assuming the nymserver's Type I
> remailer supports it? Does that of the banana nymserver?
ESub relies on the patented IDEA encryption algorythm that banana
doesn't support. This only matters if you're trying to do Esub
encryption at the nymserver, with no remailers in the reply-block.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGejWNlKZ6CY7Vd0MRChNcAKCaCHQALAiJ
5jNBCEvjRyNEy+sAoACfdBxa
4gRIpco1xSUutYMbvW8egTQ=
=ozId
-----END PGP SIGNATURE-----
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| Nomen Nescio 2007-06-21, 1:14 pm |
| Zax <admin@bananasplit.info> writes:
[vbcol=seagreen]
[vbcol=seagreen]
[vbcol=seagreen]
> It is for my nymserver.
So your nymserver departs from the available documentation.
[vbcol=seagreen]
> You can send messages to any recipient or Type-I nymserver, but you
> cannot use the Banana remailer in a reply-block because it's Type-II
> only.
The Jack B. Nymble v2 User's Manual: Part I as Revised: 24 Jan 2000
[JBN 2.1.4] http://www.skuz.net/potatoware/jbn2/JBNH-en.htm has this
statement:
Note: The first remailer in a reply-block chain is always
'Nym-Server'. This is the Cypherpunk remailer located at the
nym-server which first receives your message.
So here is a second departure of your nymserver from the available
documentation.
So maybe what I need are instructions or source code for your nym
server. Are these available somewhere?
Thanks for your patience in this somewhat lengthy and tedious thread.
| |
|
| On Thu, 21 Jun 2007 15:30:03 +0200 (CEST), Nomen Nescio wrote in
Message-Id: <034ab3133bd82d32b81d4161923a41f0@dizum.com>:
>
> So your nymserver departs from the available documentation.
Yes, I suspect the documentation is incorrect. Whilst a Subject header is
certainly desirable, it's not a 'must have'.
> Note: The first remailer in a reply-block chain is always
> 'Nym-Server'. This is the Cypherpunk remailer located at the
> nym-server which first receives your message.
>
> So here is a second departure of your nymserver from the available
> documentation.
No, the documentation is correct and my configuration is consistent with
it. The first link is the cypherpunk remailer located at the nymserver,
it's just not banana. The binaries have to be there for the
nymserver to function, but it doesn't have to be a publically advertised
Type-I remailer.
> So maybe what I need are instructions or source code for your nym
> server. Are these available somewhere?
The source code is on sourceforge.net and my implementation hasn't
deviated from it. The instructions for any nymserver should work
correctly on mine. I would suggest not using the JBN/Reliable manuals
as these are specific (in some instances) to those pieces of software
rather than generic instructions. A good starting point is "Nym
Creation for Mere Mortals". There's a copy of it on my website at:
http://www.bananasplit.info/nym_hand_roll.html
> Thanks for your patience in this somewhat lengthy and tedious thread.
No worries.
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| Echeloff 2007-06-21, 7:13 pm |
| Zax,
>ESub relies on the patented IDEA encryption algorythm that banana
>doesn't support.
I welcome your decision. Are you thinking about a substitute?
Echeloff
| |
|
| -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Thu, 21 Jun 2007 13:26:45 -0600 (MDT), Echeloff wrote in
Message-Id: <42ebbb2b27c659f8208af756d99943d2@pseudo.borked.net>:
> I welcome your decision. Are you thinking about a substitute?
Have a look at:
<20070205022016.344E863958@remailer-debian.panta-rhei.eu.org>
where StealthMonger provides a Blowfish based alternative version of
ESub. I was tempted to include this into my nymserver build but I
suspect it may cause confusion without a seperate capstring to identify
the capability.
It would also need at least one client to support the decryption of
Blowfish ESub, otherwise the encryption capability is wasted.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGeuaqlKZ6CY7Vd0MRCpUcAJ9PoiHhpm07
lGCnBtz23tpIqmVE7ACg9yvF
2lmSsVVFo9b+g80FQEfwyCM=
=oriZ
-----END PGP SIGNATURE-----
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| Christian Danner 2007-06-22, 7:13 am |
| Hello Steve!
Zax <admin@bananasplit.info> wrote:
>Have a look at:
><20070205022016.344E863958@remailer-debian.panta-rhei.eu.org>
>where StealthMonger provides a Blowfish based alternative version of
>ESub. I was tempted to include this into my nymserver build but I
>suspect it may cause confusion without a seperate capstring to identify
>the capability.
Your Esub considerations are good news.
>It would also need at least one client to support the decryption of
>Blowfish ESub, otherwise the encryption capability is wasted.
I just added Blowfish validation to OM, took a few minutes. For
testing purposes it would be nice if you could only post or send me a
valid passphrase / subject / esub combination.
Is the IDEA problem the only reason for not running a publicly
available cp remailer?
As long as the capstring doesn't include 'esub' your (future) Type 1
remailer shouldn't be chosen as an esub exit. For tests this may
suffice. In case of a missing 'esub' entry OmniMix only indicates that
there's a capability deficit but nevertheless allows to select such a
remailer as an exit and adds an 'Encrypt-Subject:' line to the
innermost reply block.
Only later on it had to be discussed how to announce that feature
('bsub', 'esubb' ...) and how to select it at remailers that allow
both ('Encrypt-Subject-Blowfish:'?).
Kind regards
Christian
--
OmniMix .. protect your privacy
http://www.danner-net.de/om.htm
|
|
|
|
|