Fwd: Waste/PGP based Messenger released:
>>
RetroMessenger, the small tiny Instant messenger for pc machines & mobile
phones, has been released - for Linux. It provides secure and serverless Instant
Messenger.
RetroMessenger has a Wxwidgets gui, is open source and is portable to all
operating systems. The Link Cloud feature has been build it, to send friends
your most liked urls. RetroMessenger is compatible to the serverless
RetroShare.sf.net messenger.
Homepage:
http://retromessenger.sf.net
Download:
http://sourceforge.net/project/showfiles.php?group_id=233927&package_id=299091
Direct-Download:
http://mesh.dl.sourceforge.net/sourceforge/retromessenger/RetroMessenger_V0.02-l\
inux.tar.bz2
Please test and reports issues at:
retromessenger-team # lists.sourceforge.net
>>>
http://linux.softpedia.com/screenshots/RetroMessenger_1.pnghttp://linux.softpedia.com/screenshots/RetroMessenger_2.png
RetroMessenger is an open source, secure and serverless instant messenger
client.
You need an open source application to keep in touch with your friends?
RetroMessenger is a easy to use and simple Instant Messenger to keep all your
friends listed in a friendlist and to message them.
You want to secure chat based on PGP-keys? All messages to your friends are
secure and encrypted, so no third party is listening. You just need to swap with
your friend a PGP-Key and you are done. RetroMessenger is encrypted out of the
box, that means no difficult installation or extra-downloads for the encryption
part is needed.
You do not want to send your chats over a server or a registered central server
account? RetroMessenger does not need a central server. So the network never
will be down or monitored by one central authority sending you adds or "weather
notices". With RetroMessenger you are not on anyones "needle", you are only
connected to your community.
You want to use a messenger designed for a linux/win mobile phone? More and more
you have Instant Messaging on you mobile phone, especially windows or open
source linux phones like the openmoko or maemo. RetroMessenger is designed with
a small tiny gui to fit these needs on mobile phones.
You are IT-admin in a company wanting to use a simple server & maintenance free
instant messaging solution? RetroMessenger is an easy to admin tool. So as well
small/medium companies choose this messenger for the employees to have an real
time communication tool without the need to admin or maintain a server.
You want to share URL-Links with your friends? Like services like digg or MrWong
you can share with your friends Urls and Links in the exciting Messenger
Feature: Link Cloud. All Links you enter are shared with your friends - and you
and them can even rate them.
--
Sensationsangebot nur bis 30.11: GMX FreeDSL - Telefonanschluss + DSL
für nur 16,37 Euro/mtl.!* http://dsl.gmx.de/?ac=OM.AD.PD003K11308T4569a
This is a snapshot of waste connecting on the LAN here to 4 machines on three networks. One of these networks is being accessed by an ssh tunnel on another machine through an Internet connection by using IP address 127.0.0.1 (aka 'loopback') on the local waste client: http://img231.imageshack.us/my.php?image=sshlanwastema4.png
The 127.0.0.1 connection waste was making was through a Putty connection to another machine running an ssh server. That machine was running a waste client on it, that was connected to another waste client on its LAN on another machine on that LAN.
The 10.x & 172.x IP addresses waste was connecting to here are LAN IP addresses of machines here that were running waste & connecting via LAN connection.
The waste connection to the ssh machine over the Internet went through the ssh encrypted tunnel, was made to port 22222 on the remote ssh machine.
Waste port 1337 was closed on both my Internet gateway machine & the remote ssh server machine. So scans of both the Internet gateway machines making the waste-ssh tunnel connection would have shown no waste ports in use at all, much less making an Internet connection through the ssh tunnel connection.
See that's what I'm talking about :-)
I snapped this shot after I posted the previous post, meant to add it later, kept forgetting, too busy, etc. Finally got some free time to remember to post it. Have fun.
Anybody got an ssh shell account (on a server) they could put waste behind?
Do it like this, set up the ssh server on a machine with port 1337 closed, then create an account to tunnel in on the ssh port.
If you run a waste client on the ssh server that is set to do network routing (by default waste is set to do this, in Prefs/Network the option 'Route Traffic' is enabled by default), then any incoming ssh connections that have port 1337 forwarded to the ssh server will be connected & routed by the waste client running on the server.
The trick on the system connecting to the ssh/waste server is to close waste before connecting to the remote ssh/waste server, & establish the ssh connection first (in Putty this requires forwarding port 1337 to the internal IP address on the remote server). Once the ssh connection is established, start the waste client locally & connect it to remote address 127.0.0.1 (more about the process here: http://pigtail.net/LRP/printsrv/tunnel-how.html)
As long as the remote ssh/waste server has the key for the connecting client in advance (& versa-vice), the connecting client will then tunnel in to the remote server through the Putty ssh tunnel.
The advantage to doing it this way is the ssh tunnel is encrypted, as is the waste traffic. However to systems that do port scanning or packet traffic captures, they now have two layers of encryption to crack, & the only port they will see open on the server side is port 22 (the ssh port). This is good because they then have no idea that there is a waste connection tunneling in through the ssh connection. The encrypted ssh tunnel shields the waste connection going through it as well as the port that waste is connecting in by.
I have done this setup a few times myself on my servers. I don't recommend using port 22 because it requires leaving the port open on a firewall/router & port 22 is a notorious hacker magnet port. The few times I ran 22 open I got hundreds of connection attempts incoming to port 22 (as in, hundreds.. per.. day..!)
If you are going to try this, I would recommend doing a port reassignment for port 22; move the service port to something else, some unused port number (we use high port numbers like 22222). This prevents bonehead hack attempts by scanners trying to connect after scanning open ports on an IP address & finding an open ssh port.
Anyway, I don't have any servers here anymore that I can open directly to the Internet to allow ssh accounts (we're using VPNs here & only allowing company traffic on this network). But this does work, I have set it up & run it from servers with direct connections to the Internet, or from collocation servers, proxy servers, shell servers, etc.
I wish the nullnet guys would do this, grr.
Somebody please do this, I want to try it by routing a connection in this way to the nullnet ;-)
ive seen a nullnet floating around
--- c4ll7 <j1o2n3a4s5@...> wrote:
> if you are in the nullnet throw a lifeline.
>
>
When you were born, you cried and the world rejoiced. Live your life
so that when you die, the world cries and you rejoice.
--Cherokee Wisdom
Waste again is on its way, I am currently working on something in
terms of easier node additions I hope it works out :), some one help
me get back in the network please?
It's an interesting idea - tokenize the keys. Don't some WAP clients
do that now? I know my router has a button on it & if I click the
button on my router and my PC at the same time, they auto-find each other.
The problem that I see is that WASTE is built on Trust and Privacy. If
all you needed to connect to a mesh was a token, it would reduce both
considerably.
The easiest way to get newbies on a mesh is to give them a
"boostrapped" WASTE client. By Bootstrapped, I mean it has all the
public keys needed to connect to the mesh pre-loaded. They still have
to give their public key to someone on the inside, but this is the
trust step in action - external confirmation that the person you're
connecting to is who they say they are before you accept their key.
Then all they need is the address to connect to.
1. Get boostrapped client.
2. Generate public key / give public key to "server" node.
3. Be accepted to the mesh, connect.
I believe there's an out of date bootstrapped client here in the Yahoo
group - I can update it with the latest key list.
--- In waste-discuss@yahoogroups.com, Michael Rogers <m.rogers@...> wrote:
>
> gratemyl wrote:
> > I think, the way WASTE is currently made, it can be difficult to get
> > more users - all the key stuff is too difficult for some users.
>
> Agreed - it should be possible to exchange just the key fingerprint
> instead of the whole key. When you connect to the peer you can download
> the key and check it matches the fingerprint before proceeding.
>
> > Maybe we could have an alternate waste without keys, or with
default keys?
>
> Not sure I agree with this - default keys would harm security, but it's
> possible to be secure without intimidating new users.
>
> It would be useful if the software displayed a short string containing
> the IP address, port and key fingerprint - something like
> 123.45.67.8:1234/jdhfg3q247ogk43ugi3qgb984h - that would contain
> everything your friends needed to connect to your peer.
>
> Cheers,
> Michael
>
jerrya_sj wrote:
> You should try some of this stuff with your tor client before debating
> why it is a 'waste' of time (pun intended). I've done all this stuff,
> it is doable, it does work, it's fun, impossible to shut down or stop
> or for average Internet users to even find or take advantage of.
That is fucking insane. I love that the tor-ified waste nodes aren't
even visible to the naked eye.
Still, the best security isn't based on cryptography, it's based on
controlling the membership. If the group is small enough that everybody
knows everybody else, and the stakes are relatively modest, it would
take a lot to breach the security even with no encryption at all. A
mailing list with five people who know each in the real world would be
as secure as a waste cluster.
twofish1344 wrote:
>
>
> im pertaining to the original author of this thread not in general.
> that's why i post not to anyone's thread replies but to the
> originating thread. nevertheless, thanks for the concern whatever it
> maybe.
Fair enough. That satisfies my curiosity anyway. :)
im pertaining to the original author of this thread not in general.
that's why i post not to anyone's thread replies but to the
originating thread. nevertheless, thanks for the concern whatever it
maybe.
--- In waste-discuss@yahoogroups.com, Lucas Gonze <lgonze@...> wrote:
>
> twofish1344 wrote:
> > i got an email from you though im not that much into emails.
>
> You got the email because you joined a mailing list. Using email.
Do
> you remember doing that? This is a sincere question.
>
> Which brings me to the general issue of being into email or not,
because
> it makes me think about the relationship between private networks
like
> WASTE and public networks like email. A WASTE network is a lot
like a
> private group on some social network or another, except that the
> connectivity layer is provided by group members rather than a third
> party host like Myspace. In both cases the circle is closed off to
the
> rest of the world. To even send messages into the space, much less
read
> messages already in the space, you have to be added.
>
> It's a profoundly weird idea. The history of the internet is about
> connecting, not disconnecting. So why the rush to disconnect?
What's
> the value?
>
> > please check your IM gmail and don't forget to add me in your
contact
> > list.
>
> Um, no. This is a public group joined together with internet
standards,
> e.g. SMTP. The thing you have in mind is the walled garden at
gmail.
>
Sockscap? Sweet
Waste over tor does file transfers fine, just the same as it does
without tunneling it through tor.
The advantages of running waste over tor are:
1) Tor 'hidden service' fully qualified domain names (FQDN) are not
resolvable to normal Internet 'root' based DNS servers (that means a
waste user connecting in tor space to a tor-space hypothetical waste
address like '5cyzkrgktetk5o7z.onion' outside of a socksified waste
client would get a 'time-out' from a normal Internet resolved DNS
server, iow the waste users not using a socksified tor-space waste
client will be unable to connect to the tor-space 'hidden' waste node)
2) File sharing & chats work just the same running waste through tor
as running waste directly through tcp/ip Internet.
The advantage of running waste through tor is another level of
anonymity & security. Tor is built of SSL & encrypted channels,
multiple nodes & exit points. When connecting to a socksified waste
node through tor, it is possible to completely lock the waste node
from 'regular' Internet users & normal waste access. The advantage is
now the file transfers & chats are going through the tor network,
where the exit node for one waste client may be coming out of the
other side of the planet. The packets destined back for the waste node
on the other side of the tor network may be coming out of another part
of the planet. Since the waste channel is encrypted & relies on
security keys exchanged between users, it doesn't matter where the tor
exits & entry points are between the two clients, the result is now it
is virtually impossible to track the origination & destination points
of the waste file transfers & chats. Since tor nodes randomly scramble
packet traffic to different 'middlemen' & exit nodes, the result is
another level of added anonymity & security.
Btw, tor works fine for file transfers: http://tinyurl.com/2fk4ma this
is how it looks when connecting a socksified waste client to another
socksified tor-space waste node:
http://img75.imageshack.us/my.php?image=wasteconnectingtoraddrejn0.jpg
Believe it or not, just about anything you can do on the normal 'open'
Internet can be done over tor. I've even run tor-space socksified
shoutcast audio servers through tor, created a bogus-domain-name tor
.onion address for the shoutcast audio server, then streamed &
listened to the audio stream over a socksified tor-space using Winamp
client. It worked fine, not good for extremely high quality, high
bitrate mp3s, but it streamed 12K/second mp3s through the tor network
without too much trouble. The advantage was, no one outside of tor
users could access the shoutcast audio stream. To the rest of the
Internet, it was impossible to get at the tor-space audio stream
through any kind of audio player.
You should try some of this stuff with your tor client before debating
why it is a 'waste' of time (pun intended). I've done all this stuff,
it is doable, it does work, it's fun, impossible to shut down or stop
or for average Internet users to even find or take advantage of.
Those are the reasons to do it. Sometimes it is best to do something
because it can be done... like invade iraq, right? ;-) lol
have fun :-)
--- In waste-discuss@yahoogroups.com, "twofish1344" <newswiki@...> wrote:
>
> the easiest way is to use sockscap for WASTE to use Tor.
> but then again, why should use Tor while basically one major reason
> of WASTE existence is its file sharing. Tor is not design for file
> transfer.
>
>
> --- In waste-discuss@yahoogroups.com, "jerrya_sj" <amdfan@> wrote:
> >
> > I sent this to your gmail acct but figure there may be others in
> the
> > group who might want to try it as well (well this is really only
> for
> > those of you who are hosting tor servers right now & may want to
> try
> > it because it requires access to a local tor node running on the
> > machine to make it work), sorry, its in German:
> > http://board.planetpeer.de/index.php/topic,941.msg3546.html run it
> > through babelfish, but you can get the gist of it by the snapshots.
> > That looks really similar to how I'm doing it on my systems.
> >
> > When you get it working on your system, send me your .onion address
> &
> > waste key, I'll send you mine & we'll hook up in tor-space :-)
> >
> > Any of you needing any help or suggestions on tuning tcp/ip & tor
> > along with freecap to get it working, drop me a message, I'll do
> what
> > I can to help you make it work (windows users only though, sorry, I
> > don't do *nix)
> >
> > Jay
> >
> > --- In waste-discuss@yahoogroups.com, Daven <davensjournal@> wrote:
> > >
> > > I'd love to use it, but I can't for the life of me figure out how.
> > >
> > > Please send me the information and if I can figure it all out,
> I'll
> > > gladdly use that node.
> > >
> > > Eric
> > >
> > > On 10/26/07, jerrya_sj <amdfan@> wrote:
> > > > Hi I run a tor accessible waste node. Anyone here using tor to
> run
> > > > waste, or running socksified waste?
> > > > -'jasj'
> > > >
> > > >
> > > >
> > > >
> > > > Yahoo! Groups Links
> > > >
> > > >
> > > >
> > > >
> > >
> > >
> > > --
> > > Tarot readings by Daven!
> > > http://davensjournal.com/Tarot.xhtml
> > >
> >
>
Lucas Gonze wrote:
> It's a profoundly weird idea. The history of the internet is about
> connecting, not disconnecting. So why the rush to disconnect? What's
> the value?
Perhaps it's not so much "to disconnect" as "to connect selectively".
Internet users 10 or 15 years ago were a relatively small, self-selected
group, and because of social clustering, if you were online the chances
were that many of your friends were online too. Unrestricted
connectivity made sense in that community. But the internet's no longer
a single community, so it's developing internal barriers to help people
divide their time and attention and information among the people and
groups that interest them, while excluding the ones that distract or
threaten or bore them.
Cheers,
Michael
because of the encryption and the ability to do things behind closed
doors that are illegal.
--- In waste-discuss@yahoogroups.com, Lucas Gonze <lgonze@...> wrote:
>
> twofish1344 wrote:
> > i got an email from you though im not that much into emails.
>
> You got the email because you joined a mailing list. Using email. Do
> you remember doing that? This is a sincere question.
>
> Which brings me to the general issue of being into email or not,
because
> it makes me think about the relationship between private networks like
> WASTE and public networks like email. A WASTE network is a lot like a
> private group on some social network or another, except that the
> connectivity layer is provided by group members rather than a third
> party host like Myspace. In both cases the circle is closed off to the
> rest of the world. To even send messages into the space, much less
read
> messages already in the space, you have to be added.
>
> It's a profoundly weird idea. The history of the internet is about
> connecting, not disconnecting. So why the rush to disconnect? What's
> the value?
>
> > please check your IM gmail and don't forget to add me in your contact
> > list.
>
> Um, no. This is a public group joined together with internet
standards,
> e.g. SMTP. The thing you have in mind is the walled garden at gmail.
>
Onslaught wrote:
> If you are interested in topics such as ... then contact me with a
> PGP key and some of your interests for an invite into our group.
So you use a private network for your group's collaborative work? What
kind of private network? What kind of features do you need? How well
is your toolset doing the job?
Have you tried Allmydata-Tahoe for private networking? Has anybody?
twofish1344 wrote:
> i got an email from you though im not that much into emails.
You got the email because you joined a mailing list. Using email. Do
you remember doing that? This is a sincere question.
Which brings me to the general issue of being into email or not, because
it makes me think about the relationship between private networks like
WASTE and public networks like email. A WASTE network is a lot like a
private group on some social network or another, except that the
connectivity layer is provided by group members rather than a third
party host like Myspace. In both cases the circle is closed off to the
rest of the world. To even send messages into the space, much less read
messages already in the space, you have to be added.
It's a profoundly weird idea. The history of the internet is about
connecting, not disconnecting. So why the rush to disconnect? What's
the value?
> please check your IM gmail and don't forget to add me in your contact
> list.
Um, no. This is a public group joined together with internet standards,
e.g. SMTP. The thing you have in mind is the walled garden at gmail.
hey there.. :)
i got an email from you though im not that much into emails.
please check your IM gmail and don't forget to add me in your contact
list.
--- In waste-discuss@yahoogroups.com, "Onslaught" <onslaught@...> wrote:
>
> If you wandered in here, you are on the right path!
>
> If you are interested in topics such as WASTE, Private P2P Networks,
> encryption, and all around technological abuse then contact me with a
> PGP key and some of your interests for an invite into our group. We
> have been into abusing technology and getting into anything that seems
> to want to "TRY" and keep us out since 1982.
>
> Script kiddies and kRAD elite d00d's need not apply.
>
> Look forward to hearing from you,
>
> Onslaught
>
the easiest way is to use sockscap for WASTE to use Tor.
but then again, why should use Tor while basically one major reason
of WASTE existence is its file sharing. Tor is not design for file
transfer.
--- In waste-discuss@yahoogroups.com, "jerrya_sj" <amdfan@...> wrote:
>
> I sent this to your gmail acct but figure there may be others in
the
> group who might want to try it as well (well this is really only
for
> those of you who are hosting tor servers right now & may want to
try
> it because it requires access to a local tor node running on the
> machine to make it work), sorry, its in German:
> http://board.planetpeer.de/index.php/topic,941.msg3546.html run it
> through babelfish, but you can get the gist of it by the snapshots.
> That looks really similar to how I'm doing it on my systems.
>
> When you get it working on your system, send me your .onion address
&
> waste key, I'll send you mine & we'll hook up in tor-space :-)
>
> Any of you needing any help or suggestions on tuning tcp/ip & tor
> along with freecap to get it working, drop me a message, I'll do
what
> I can to help you make it work (windows users only though, sorry, I
> don't do *nix)
>
> Jay
>
> --- In waste-discuss@yahoogroups.com, Daven <davensjournal@> wrote:
> >
> > I'd love to use it, but I can't for the life of me figure out how.
> >
> > Please send me the information and if I can figure it all out,
I'll
> > gladdly use that node.
> >
> > Eric
> >
> > On 10/26/07, jerrya_sj <amdfan@> wrote:
> > > Hi I run a tor accessible waste node. Anyone here using tor to
run
> > > waste, or running socksified waste?
> > > -'jasj'
> > >
> > >
> > >
> > >
> > > Yahoo! Groups Links
> > >
> > >
> > >
> > >
> >
> >
> > --
> > Tarot readings by Daven!
> > http://davensjournal.com/Tarot.xhtml
> >
>
I sent this to your gmail acct but figure there may be others in the
group who might want to try it as well (well this is really only for
those of you who are hosting tor servers right now & may want to try
it because it requires access to a local tor node running on the
machine to make it work), sorry, its in German:
http://board.planetpeer.de/index.php/topic,941.msg3546.html run it
through babelfish, but you can get the gist of it by the snapshots.
That looks really similar to how I'm doing it on my systems.
When you get it working on your system, send me your .onion address &
waste key, I'll send you mine & we'll hook up in tor-space :-)
Any of you needing any help or suggestions on tuning tcp/ip & tor
along with freecap to get it working, drop me a message, I'll do what
I can to help you make it work (windows users only though, sorry, I
don't do *nix)
Jay
--- In waste-discuss@yahoogroups.com, Daven <davensjournal@...> wrote:
>
> I'd love to use it, but I can't for the life of me figure out how.
>
> Please send me the information and if I can figure it all out, I'll
> gladdly use that node.
>
> Eric
>
> On 10/26/07, jerrya_sj <amdfan@...> wrote:
> > Hi I run a tor accessible waste node. Anyone here using tor to run
> > waste, or running socksified waste?
> > -'jasj'
> >
> >
> >
> >
> > Yahoo! Groups Links
> >
> >
> >
> >
>
>
> --
> Tarot readings by Daven!
> http://davensjournal.com/Tarot.xhtml
>
I'd love to use it, but I can't for the life of me figure out how.
Please send me the information and if I can figure it all out, I'll
gladdly use that node.
Eric
On 10/26/07, jerrya_sj <amdfan@...> wrote:
> Hi I run a tor accessible waste node. Anyone here using tor to run
> waste, or running socksified waste?
> -'jasj'
>
>
>
>
> Yahoo! Groups Links
>
>
>
>
--
Tarot readings by Daven!
http://davensjournal.com/Tarot.xhtml
Check us out http://www.iirg.net/
We published one of the most famous t-file zines back in the day with Phantasy
magazine
and our Tech Journals were some of the most sought after files in the late 90's.
We have been laying low for the past few years and are starting to become
active. Our
WASTE network, IIRGnet is back up and running as of Sunday and we are all
working on
building up our archives and re-introducing some projects we have been working
on over
the past few years.
Check out the site and please get in touch in private with a PGP key if you have
interest in
the group.
Onslaught/IIRG <onslaught@...>
--- In waste-discuss@yahoogroups.com, Lucas Gonze <lgonze@...> wrote:
>
>
> Onslaught says:
> > We
> > have been into abusing technology and getting into anything that seems
> > to want to "TRY" and keep us out since 1982.
>
> BTW, 1982 is a pretty long time. This is the equivalent of a
> centuries-old conspiracy in internet years. Can you tell us more about
> the history of the group?
>
Onslaught says:
> We
> have been into abusing technology and getting into anything that seems
> to want to "TRY" and keep us out since 1982.
BTW, 1982 is a pretty long time. This is the equivalent of a
centuries-old conspiracy in internet years. Can you tell us more about
the history of the group?
Interests are encryption and Artificial Intelligence amongst other things, cant claim to be an expert.
Thanks !
----- Original Message ---- From: Onslaught <onslaught@...> To: waste-discuss@yahoogroups.com Sent: Thursday, 25 October, 2007 8:34:35 AM Subject: [waste-discuss] Group seems rather dead...
If you wandered in here, you are on the right path!
If you are interested in topics such as WASTE, Private P2P Networks,
encryption, and all around technological abuse then contact me with a
PGP key and some of your interests for an invite into our group. We
have been into abusing technology and getting into anything that seems
to want to "TRY" and keep us out since 1982.
Script kiddies and kRAD elite d00d's need not apply.
Look forward to hearing from you,
Onslaught
Yahoo! Answers - Get better answers from someone who knows. Try
it now.