Date: Fri, 26 Sep 2003 00:23:46 +0100 Subject: Your help request for the JMBCV Anonymous Remailer Reply-To: This message is sent to you in response to an email that you sent to the JMBCV Anonymous Remailer. This automated reply was trigged by the subject "remailer-help" contained in your email. If you did not send such an email, please ignore this message. This remailer is a free service that allows individuals including crime victims, domestic violence victims, persons in recovery, and others, such as those living under oppressive regimes, to communicate confidentially in a manner that ensures their privacy under even the most adverse conditions. This independent remailer uses the Mixmaster remailer software. It is highly recommended that you obtain a copy of the Mixmaster software to utilize this remailer. This particular remailer may offer other means of accessing the remailer service. If this remailer offers other means of accessing the remailer service, the means will be described later in this help file. However, only by using the Mixmaster client software will you assure the highest level of security against third-parties compromising your privacy. How to obtain the Mixmaster software: Mixmaster source code for FreeBSD, Linux, other variants of UNIX, and Win32: If your operating system is a UNIX derivative, simply download and compile the client from the source code available at http://prdownloads.sourceforge.net/mixmaster/ Mixmaster clients binaries for Win32 (Windows 98, NT, 2000, XP) Win32 users may wish to try Jack B. Nymble, a graphical user interface client implementing the mixmaster protocol. Jack B. Nymble is developed independently of the main Mixmaster distribution. Please do not contact the Mixmaster development team or the Administrator of the JMBCV Anonymous Remailer with questions about this software. You can obtain a copy of Jack B. Nymble from http://www.skuz.net/potatoware/jbn2/ For more information about Mixmaster or to contribute to the development of Mixmaster, please see the following URL's: Official Mixmaster Project Site: http://sourceforge.net/projects/mixmaster/ General Information about Remailers and Remailer "how-to" Guides: http://www.paracrypt.com/orange/index.php http://anon.efga.org/Remailers/ http://www.remailer.fragcity.co.uk/ Locations of some Worldwide Remailers http://riot.eu.org/anon/remap.html **** You can use PGP to encrypt messages sent to this remailer if you for some reason are unable to use the Mixmaster client software. However, while PGP will securely encrypt the content of a message that you are sending to the remailer, submitting messages to the remailer that are merely PGP encrypted without the use of the Mixmaster client software greatly increases the risk of third parties being able to determine the identity of the sender (you). This remailer primarily supports the ability to submit messages for remailing without requiring the Mixmaster client software for backwards compatibility with older remailer client software. If you are able to use the Mixmaster software with your operating system (chances are you can), it is highly recommended that you use the Mixmaster client software instead. See the earlier section in this help file on how to obtain a copy of the Mixmaster client software. If you cannot use the Mixmaster software, want to use an anonymous remailer, and are willing to accept reduced security, you can do the following: Send email with Subject: remailer-key to to obtain a copy of the remailer's PGP key. Then do the following: 1) create a file containing your message 2) insert a BLANK LINE as the first line of the file 3) Insert a "::" as the second line of the file 4) Insert "Anon-To: final_recipient@destination_domain.com" as the third line of the file. At this time, the file should look as follows: ================================================================== :: Anon-To: final_recipient@destination_domain.com This is some anonymized email. ================================================================== 5) Now encrypt the file with the PGP key of this remailer. Finally, email the encrypted file to as shown in the example below. The line "Encrypted: PGP" instructs the remailer to decrypt the message and process its contents. ================================================================== From: remailer_user@sender_domain.com To: remailer@mail.jmbcv.net Subject: anonymous message :: Encrypted: PGP -----BEGIN PGP MESSAGE----- Version: 2.6.3i owE1jMsNwjAUBH3gZMk9PClnUoBPUANpwElW2OBPZD8H0gd1UCP2gduuNDNfIcSH T4zCbQmtlbzGFM9T0jSD7QVvEzaPcUlBSSWHQclbnR9YWJNp5BFSLdR9CijF3NGx ybry/1Rsqn4la3a0JiIhLvnYGCu9HFtiC8oIxnlkeuIYe+EH =HgDq -----END PGP MESSAGE----- ================================================================== Even though PGP encryption in itself is very secure, not using the Mixmaster client exposes some information to parties desiring to compromise your privacy. This information leakage permits what is known as "traffic analysis". For example, if someone receives anonymous messages soon after you sent encrypted messages to a remailer it is likely that you are the sender of those messages. To partially compensate for this information leak, you can instruct the remailer to delay your messages for some time or send the remailer empty messages to make such analysis harder: If you use the line "Null:" instead of "Anon-To:", the remailer will simply discard your message. You can add a "Latent-Time:" header to the remailer to retain your message for some time before forwarding it. "Latent-Time: +2:00" would delay the message for two hours. You can use a random delay by adding "r", for example "Latent-Time: +5:00r" would delay the message for up to five hours. For example: ================================================================== :: Anon-To: final_recipient@destination_domain.com Latent-Time: +2:00 This is some anonymized email. ================================================================== You can chain remailers by using another remailer to send the message to anonymously. For example, take the message ================================================================== :: Anon-To: remailer@mail.jmbcv.net :: Encrypted: PGP -----BEGIN PGP MESSAGE----- Version: 2.6.3i owE1jMsNwjAUBH3gZMk9PClnUoBPUANpwElW2OBPZD8H0gd1UCP2gduuNDNfIcSH T4zCbQmtlbzGFM9T0jSD7QVvEzaPcUlBSSWHQclbnR9YWJNp5BFSLdR9CijF3NGx ybry/1Rsqn4la3a0JiIhLvnYGCu9HFtiC8oIxnlkeuIYe+EH =HgDq -----END PGP MESSAGE----- ================================================================== Next, encrypt the message with the PGP key of the JMBCV Anonymous Remailer and send the twice-encrypted message to . Similar to a nested Russian matryoshka doll, containing increasingly smaller dolls inside the each outer doll, you can layer multiple encryption layers and remailer hops around your message. If this sounds confusing, just use the Mixmaster client software instead. If you send your messages through a chain of several independent remailers, it will be become increasingly difficult, though not necessarily impossible, to trace the anonymous message back to you. A vastly more secure solution is to use the Mixmaster client software to send your anonymous mail. Some remailers supporting PGP encrypted messages offer pseudonymous "nym" service that allow you to not only send emails privately, but also receive emails without enabling the sender to determine your recipient destination email address. For more information about such nym services, see the following URLs. http://lexx.shinn.net/nym/ http://riot.eu.org/anon/doc/nym.html ***** You can use this remailer to post messages to Usenet newsgroups. To send a message to Usenet, insert the "Anon-post-to:" header as per the examples below. ================================================================== To: remailer@mail.jmbcv.net :: Anon-Post-To: alt.test,misc.test ## Subject: An Anonymous Usenet Post This message is anonymous. =================================================================== When posting test messages, please use the appropriate test newsgroups such as alt.test and misc.test. The newsgroup alt.privacy.anon-server is not a test newsgroup. Please do not use alt.privacy.anon-server for testing purposes. To post a follow-up to a Usenet article, you must insert a "References:" header. Here is an example as to how to reply to a message that originally contained the following headers: ================================================================== Newsgroups: soc.rights.human Subject: Re: Are you a witness of torture in West Africa? Message-ID: <6643215551.110344173@news.newssender_domain.com> References: <19990101182004.17714.qmail@nym.some_nymserver.com> ================================================================== Your anonymous follow-up message should begin as follows. Note the required blank line between the "To:" header and the double colon. ================================================================== To remailer@mail.jmbcv.net :: Anon-Post-To: soc.rights.human ## Subject: RE: Are you a witness of torture in West Africa? References: 19990101182004.17714.qmail@nym.some_nymserver.com Two weeks ago, soldiers came to our village. The soldiers all had machine guns. Nobody in our village has any guns, since the police had come by our village about a year ago and took away all of our guns to protect us from bandits. There was nothing we could do to resist the soldiers. The soldiers rounded up all the men, except young children and the very old. Then the soldiers lead the men away from the village. About half an hour later, we heard many shots in the distance. When we went looking for our people, all men were dead. The soldiers had left. The next day, they went to another village in the [. . .] ================================================================== ***** Abuse Policy: Unfortunately, there will always be a very small percentage of individuals that choose to abuse the anonymity that this and similar systems worldwide afford to send otherwise unwelcome email. The JMBCV Anonymous Remailer does not condone such messages, or their content, in any way. Just as the Post Office is unable to prevent abuse of the mail system as long as there are public mailboxes into which a person can drop a letter without including a return address, the JMBCV Anonymous Remailer cannot preemptively prevent irresponsible individuals from using this system to send inappropriate messages. However, unlike the Post Office, this remailer enables you to assure that you will not be inconvenienced by users of this remailer in the future. To block the users of this remailer from sending email to your address, please send a message to containing the line destination-block FrogThesaurus@libertysurf.fr anywhere in the body text of the email. You can simply reply to this message using your email program and send back this entire message for your current email address to be permanently blocked from users of the JMBCV Anonymous Remailer. For additional information on this remailer's abuse policy, instructions on how to block more than one email address, and to reach the JMBCV Anonymous Remailer operator, please send email to . Thank you for your interest in secure and private communications, -- The JMBCV Anonymous Remailer Administrator