Anonymous Servers - Help with handrolling

Author

Help with handrolling

Fritz Wuehler

2007-07-10, 1:13 am

How can I use QS to produce an encrypted message and handroll it through some random computer?

The idea is to use QS to produce the encrypted output, catch it through my own SMTP server, then open some free mail account and post it to the remailers from there. I guess the free mail account should not mangle the encrypted text, so I wonder whether h
otmail or yahoo would do.

Nomen Nescio

2007-07-10, 1:13 am

In article
<557656951aa2ab1361ceb629cfb47088@msgid.frell.theremailer.net>
Fritz Wuehler <fritz@spamexpire-200707.rodent.frell.theremailer.net>
wrote:
>
> How can I use QS to produce an encrypted message and handroll it through some random computer?
>
> The idea is to use QS to produce the encrypted output, catch it through my own SMTP server, then open some free mail account and post it to the remailers from there. I guess the free mail account should not mangle the encrypted text, so I wonder whether
hotmail or yahoo would do.

I don't think you are asking this but...you can have QS put the
encrypted message in a hard disk directory then get it from there.
Just put the directory name in the Host: header like:

Host: c:\whatever

The directory must exist. QS will name the file itself.

BTW QS can be used with free email accounts if they support SMTP
access.

Thomas J. Boschloo

2007-07-10, 7:14 pm

-----BEGIN PGP SIGNED MESSAGE-----

Fritz Wuehler schreef:
> How can I use QS to produce an encrypted message and handroll it through some random computer?
>
> The idea is to use QS to produce the encrypted output, catch it through my own SMTP server, then open some free mail account and post it to the remailers from there. I guess the free mail account should not mangle the encrypted text, so I wonder whether
hotmail or yahoo would do.

About HTML mail, that won't work with remailers. There is no remailer
that understands 'rich' html messages. Nor do they understand
attachments in the transport format (it is possible, but hard, to attach
a file and get it delivered)

What you can do is download mixmaster 2.0.4b46 for ms-dos from
http://mixmaster.sourceforge.net/

Then update all your stats and stuff into the installation directory
http://www.bananasplit.info/stats.html (note, rename type2.list to
TYPE2.LIS , mlist.html to MIXMASTE.HTM and you will need PUBRING.MIX
too. Just overwriting these files with my browser when I used 'Save
As..' worked fine for me)

And then you can run mixmaster from the command prompt to generate an
outfile.0 (remember to type [Ctrl]-[z] to end your message)

You can transport this outfile.0 to the computer of your choice or an
internet cafe and send it to address on the first line of the text file.
You must remove everything up to but not including '::'

This should do the trick I hope :-) Remember that your message might not
make it, but at least you should stay completely anonymous..

Here are some hashes for the zip I have on my harddisk. I downloaded it
about a year ago.

gpg --print-mds mix204b46.zip
mix204b46.zip: MD5 = 7D B5 62 6C 01 94 2B 34 78 7A C4 58 08 7D B5 9C
mix204b46.zip: SHA1 = 1AA9 F8F4 3096 0B8B F767 CB72 5A3F BFDE BB5D 36DC
mix204b46.zip: RMD160 = 61C3 AFC0 C931 3B0F 055D 3DC4 928C 21C9 6BC7 B502

Thomas
- --
I am the M-1
I kill for fun
I kill
for Thrill
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQB5AwUBRpPargEP2l8iXKAJAQFGHAMbBo6smwc9
astFf1pBGuObLAMkXqxdRnbv
ST613KUWy+7OPkmNO+3EwJ7jOq0glj19drSnpS1U
dwFHna68sx+PfOLI9pNk2eKy
kQ7Fp5kAq5qiTmWekACv2SEeMISfNn9eEYBZNw==

=+AU0
-----END PGP SIGNATURE-----

Borked Pseudo Mailed

2007-07-11, 1:14 am

In article <557656951aa2ab1361ceb629cfb47088@msgid.frell.theremailer.net>, Fritz Wuehler <fritz@spamexpire-200707.rodent.frell.theremailer.net> wrote:

> How can I use QS to produce an encrypted message and handroll it through some
> random computer?
>
> The idea is to use QS to produce the encrypted output, catch it through my
> own SMTP server, then open some free mail account and post it to the
> remailers from there. I guess the free mail account should not mangle the
> encrypted text, so I wonder whether hotmail or yahoo would do.
>

i hand roll using a text editor & gpg, i can confirm that using yahoo & gmail works fine - be sure to select the "plain text" option when sending mail.

Thomas J. Boschloo

2007-07-11, 1:13 pm

-----BEGIN PGP SIGNED MESSAGE-----

Borked Pseudo Mailed schreef:
[snip]
> i hand roll using a text editor & gpg, i can confirm that using yahoo & gmail works fine - be sure to select the "plain text" option when sending mail.

However, cypherpunk will always be a lot less secure than mixmaster. No
matter how much garbage, inflate and cutmarks you use! And then there is
the history of in inoperability between GnuPG and official PGP versions
(I think mixmaster, present in a lot of remailers, uses its own
'openpgp' standard which is bound to differ from both GnuPG and PGP)

If the goal of using webmail is to be less tracable, mixmaster is the
way to go. If alone for the fact that mixmaster protects so much better
against replay attacks.

hth,
Thomas
- --
I am the M-1
I kill for fun
I kill
for Thrill
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQB5AwUBRpTxngEP2l8iXKAJAQE0jAMcC1Ju0Qdz
zDf33iq5rig/IqLkOn+mkGl6
K9iTS6vWCPsZ0t2AoKRtc67zqrJ6yIlfj+Z05dRc
kWuKHHlutB8/WhLJpcb7+HjT
iNZGdNSX7CkeJ194sfEM8qq3zFB6n6fMlrM65A==

=kUlh
-----END PGP SIGNATURE-----

Borked Pseudo Mailed

2007-07-11, 7:14 pm

In article <4694f21b$0$9612$e4fe514c@dreader31.news.xs4all.nl>, Thomas J. Boschloo <nospam@hccnet.nl> wrote:

> Borked Pseudo Mailed schreef:
> [snip]
>
> However, cypherpunk will always be a lot less secure than mixmaster. No
> matter how much garbage, inflate and cutmarks you use!

using Remix-To: uses mixmaster + cyberpunk for the intermeidate chain.

> And then there is the history of in inoperability between GnuPG and
> official PGP versions

GPG works fine for me, it is more openPGP compliant than most versions of PGP.

> (I think mixmaster, present in a lot of remailers, uses its own
> 'openpgp' standard which is bound to differ from both GnuPG and PGP)

That is a ridiculous statement.

mixmaster is either openPGP (RFC 2440) compliant or it isn't. mixmaster can't create its own 'openpgp' standard.

> If the goal of using webmail is to be less tracable, mixmaster is the
> way to go. If alone for the fact that mixmaster protects so much better
> against replay attacks.

considering the weakness of small RSA keys used by mixmaster i'm more comfortable using both cyberpunk & mixmaster.

Thomas J. Boschloo

2007-07-12, 7:13 am

-----BEGIN PGP SIGNED MESSAGE-----

Borked Pseudo Mailed schreef:
> In article <4694f21b$0$9612$e4fe514c@dreader31.news.xs4all.nl>, Thomas J. Boschloo <nospam@hccnet.nl> wrote:
>
>
>
> using Remix-To: uses mixmaster + cyberpunk for the intermeidate chain.

Yes it does. But who has access to the plaintext of your remix message?

>
> GPG works fine for me, it is more openPGP compliant than most versions of PGP.

The worst differences are the differences in packet format that you
don't notice. RFC 2440 is complex enough for this to matter.

>
> That is a ridiculous statement.
>
> mixmaster is either openPGP (RFC 2440) compliant or it isn't. mixmaster can't create its own 'openpgp' standard.

So why do you call GnuPG 'more openPGP compliant'? Does it handle
encrypted data differently than the official PGP?? Notice that I didn't
even get into the mess of cypherpunk directives that can either be used
in one hop or not! /With/ different capitalizations to add!

>
> considering the weakness of small RSA keys used by mixmaster i'm more comfortable using both cyberpunk & mixmaster.

If you are not comfortable with 'small' RSA keys, you should consider
winning $100.000 http://www.rsa.com/rsalabs/node.asp?id=2093

hth,
Thomas
- --
I am the M-1
I kill for fun
I kill
for Thrill
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQB5AwUBRpX+TgEP2l8iXKAJAQHOWAMgivzelBiF
fMAxAUu1QrtT2+a9H8NRJUsg
DfjMu5TCCuIMGpOv3fjH3HvJ+3t+qzZTCWwqJVFH
+EB/XDItz9AaFhmt0GTsNZAk
OKj7Kv5htwPZvjUcIKTBRvwb1suPC8z3lhPBxA==

=RqfO
-----END PGP SIGNATURE-----