In my country, we have internet monitoring, not allowing anonymous letter. I tried YAMN make packets and suddenly there was mlist2.txt. Does YAMN have downloaded their unsafe internet? I am in trouble now? Thank you!

On Friday, August 27, 2021 at 7:21:54 PM UTC+2, Anonymous wrote:
> In my country, we have internet monitoring, not allowing anonymous letter. I tried YAMN make packets and suddenly there was mlist2.txt. Does YAMN have downloaded their unsafe internet? I am in trouble now? Thank you!

Before using *cryptographic* (anonymity) tools I would suggest to check
how cryptography is handled in your country.

https://www.gp-digital.org/world-map-of-encryption/

Regards
Stefan

> In my country, we have internet monitoring, not allowing anonymous letter. I tried YAMN make packets and suddenly there was mlist2.txt. Does YAMN have downloaded their unsafe internet? I am in trouble now? Thank you!

Too bad, phone-home privacy software.

Looking through the binaries I found
- fleegle.mixmin.net
- http://www.mixmin.net/yamn/mlist2.txt
- http://www.mixmin.net/yamn/pubring.mix

But my Mixmaster binaries look clean,
no connection attempts bypassing Tor.

In article <8dad3ea6-c65a-468f-8b6c-3cfa95bac0f8n@googlegroups.com>
Stefan Claas <spam.trap.usenet@gmail.com> wrote:
>
> On Friday, August 27, 2021 at 7:21:54 PM UTC+2, Anonymous wrote:
> > In my country, we have internet monitoring, not allowing anonymous letter. I tried YAMN make packets and suddenly there was mlist2.txt. Does YAMN have downloaded their unsafe internet? I am in trouble now? Thank you!
>
> Before using *cryptographic* (anonymity) tools I would suggest to check
> how cryptography is handled in your country.
>
> https://www.gp-digital.org/world-map-of-encryption/
>
> Regards
> Stefan

Thanks Stefan for your post, I find it interesting, and wondered
what might the practical aspects of posting say an anonymous email
from a Russian Hotel or wifi site be.

I'm assuming the ISP would be monitored and all TOR connections
watched, and you could expect your IP address to be logged ?

THanks
Fred

On Saturday, August 28, 2021 at 1:34:22 AM UTC+2, Nomen Nescio wrote:
> > In my country, we have internet monitoring, not allowing anonymous letter. I tried YAMN make packets and suddenly there was mlist2.txt. Does YAMN have downloaded their unsafe internet? I am in trouble now? Thank you!
> Too bad, phone-home privacy software.
>
> Looking through the binaries I found
> - fleegle.mixmin.net
> - http://www.mixmin.net/yamn/mlist2.txt
> - http://www.mixmin.net/yamn/pubring.mix
>
> But my Mixmaster binaries look clean,
> no connection attempts bypassing Tor.

Since day one, when YAMN was announced, it was generally known, by the
community, that YAMN has internal defaults, so that it can be used without
any settings, done manually. A user of the original Mixmaster software has
to create these settings manually and then Mixmaster phones home as well,
unless the user creates an extra Tor set-up, which I also provide for my
distributed YAMN binaries.

Regards
Stefan

On Saturday, August 28, 2021 at 3:21:19 AM UTC+2, Anonymous wrote:

Hi Fred,

> Thanks Stefan for your post, I find it interesting, and wondered
> what might the practical aspects of posting say an anonymous email
> from a Russian Hotel or wifi site be.

Not sure what reason one would have to send an anon email from a hotel,
when staying in another country (for holidays). If I would travel nowadays,
outside of Germany, I would only take my dumb phone with me.

> I'm assuming the ISP would be monitored and all TOR connections
> watched, and you could expect your IP address to be logged ?

I assume the same and if not in luck the Tor/VPN connections are blocked.

Regards
Stefan

Stefan Claas <spam.trap.usenet@gmail.com> wrote:

>On Saturday, August 28, 2021 at 1:34:22 AM UTC+2, Nomen Nescio wrote:
>> > In my country, we have internet monitoring, not allowing anonymous letter. I tried YAMN make packets and suddenly there was mlist2.txt. Does YAMN have downloaded their unsafe internet? I am in trouble now? Thank you!
>> Too bad, phone-home privacy software.
>>
>> Looking through the binaries I found
>> - fleegle.mixmin.net
>> - http://www.mixmin.net/yamn/mlist2.txt
>> - http://www.mixmin.net/yamn/pubring.mix
>>
>> But my Mixmaster binaries look clean,
>> no connection attempts bypassing Tor.
>
>Since day one, when YAMN was announced, it was generally known, by the
>community, that YAMN has internal defaults, so that it can be used without
>any settings, done manually.

Generally known? Go tell that to the marines. I found no such warning.

> A user of the original Mixmaster software has
>to create these settings manually and then Mixmaster phones home as well,
>unless the user creates an extra Tor set-up, which I also provide for my
>distributed YAMN binaries.

Mixmaster can't phone home, as it doesn't know where "home" is. If you
present it no more than a stats and a keys file you're safe.

In article <691532ef-8b70-4b74-9322-83ecf3b86227n@googlegroups.com>
Stefan Claas wrote:

> On Saturday, August 28, 2021 at 3:21:19 AM UTC+2, Anonymous wrote:
>
> Hi Fred,
>
> > Thanks Stefan for your post, I find it interesting, and wondered
> > what might the practical aspects of posting say an anonymous email
> > from a Russian Hotel or wifi site be.
>
> Not sure what reason one would have to send an anon email from a hotel,
> when staying in another country (for holidays). If I would travel nowadays,
> outside of Germany, I would only take my dumb phone with me.
>
> > I'm assuming the ISP would be monitored and all TOR connections
> > watched, and you could expect your IP address to be logged ?

But they can't tell whether I'm sending messages anonymously or
simply surfing the net. That makes a huge difference.

>
> I assume the same and if not in luck the Tor/VPN connections are blocked.

Tor connections through HTTP/S ports may help.

On Saturday, August 28, 2021 at 11:48:09 AM UTC+2, Anonymous wrote:
> Stefan Claas <spam.tra...@gmail.com> wrote:
>
> >On Saturday, August 28, 2021 at 1:34:22 AM UTC+2, Nomen Nescio wrote:
> >> > In my country, we have internet monitoring, not allowing anonymous letter. I tried YAMN make packets and suddenly there was mlist2.txt. Does YAMN have downloaded their unsafe internet? I am in trouble now? Thank you!
> >> Too bad, phone-home privacy software.
> >>
> >> Looking through the binaries I found
> >> - fleegle.mixmin.net
> >> - http://www.mixmin.net/yamn/mlist2.txt
> >> - http://www.mixmin.net/yamn/pubring.mix
> >>
> >> But my Mixmaster binaries look clean,
> >> no connection attempts bypassing Tor.
> >
> >Since day one, when YAMN was announced, it was generally known, by the
> >community, that YAMN has internal defaults, so that it can be used without
> >any settings, done manually.
> Generally known? Go tell that to the marines. I found no such warning.

You telling me, us, that service men are using YAMN without an approved
field manual?

> > A user of the original Mixmaster software has
> >to create these settings manually and then Mixmaster phones home as well,
> >unless the user creates an extra Tor set-up, which I also provide for my
> >distributed YAMN binaries.
> Mixmaster can't phone home, as it doesn't know where "home" is. If you
> present it no more than a stats and a keys file you're safe.

The OP said phone home, when using the default settings, which are downloading
the stats and pub keys from Mixmin, hence I used the same wording, because
I do not see a difference with Mixmaster, once configured.

Regards
Stefan

Stefan Claas <spam.trap.usenet@gmail.com> wrote:

> On Saturday, August 28, 2021 at 11:48:09 AM UTC+2, Anonymous wrote:
> > Stefan Claas <spam.tra...@gmail.com> wrote:
> >
> > >On Saturday, August 28, 2021 at 1:34:22 AM UTC+2, Nomen Nescio wrote:
> > >> > In my country, we have internet monitoring, not allowing anonymous letter. I tried YAMN make packets and suddenly there was mlist2.txt. Does YAMN have downloaded their unsafe internet? I am in trouble now? Thank you!
> > >> Too bad, phone-home privacy software.

> The OP said phone home, when using the default settings, which are downloading
> the stats and pub keys from Mixmin, hence I used the same wording, because
> I do not see a difference with Mixmaster, once configured.

The OP didn't say "phone home". He only reported, that after
naively starting the yamn program he downloaded, he surprisingly
found unsolicitedly downloaded statistics files on his disk, which
may have put him at risk. And that's what won't happen by running a
bare mixmaster executable, and with yamn should be deactivated asap
to prevent users from being exposed.

On Saturday, August 28, 2021 at 3:46:52 PM UTC+2, Nomen Nescio wrote:
> Stefan Claas <spam.tra...@gmail.com> wrote:
>
> > On Saturday, August 28, 2021 at 11:48:09 AM UTC+2, Anonymous wrote:
> > > Stefan Claas <spam.tra...@gmail.com> wrote:
> > >
> > > >On Saturday, August 28, 2021 at 1:34:22 AM UTC+2, Nomen Nescio wrote:
> > > >> > In my country, we have internet monitoring, not allowing anonymous letter. I tried YAMN make packets and suddenly there was mlist2.txt. Does YAMN have downloaded their unsafe internet? I am in trouble now? Thank you!
> > > >> Too bad, phone-home privacy software.
> > The OP said phone home, when using the default settings, which are downloading
> > the stats and pub keys from Mixmin, hence I used the same wording, because
> > I do not see a difference with Mixmaster, once configured.
> The OP didn't say "phone home". He only reported, that after
> naively starting the yamn program he downloaded, he surprisingly
> found unsolicitedly downloaded statistics files on his disk, which
> may have put him at risk. And that's what won't happen by running a
> bare mixmaster executable, and with yamn should be deactivated asap
> to prevent users from being exposed.

Understood. In yamn.cfg they can set under the [URLs] section 'Fetch = false'
and then try to use YAMN's new parameter -refresh. If this does not work as
expected then please contact Zax directly. When Fetch = false is enabled
the YAMN client should no longer download stats and keys automatically.

With Fetch = false set (for Tor and socat usage) users can then manually
download the stats and keys with cURL or wget, which I did so in the past.

I distribute compiled software only in it's original state along with it's
source code, to not become an inofficial maintainer of a software.

Regards
Stefan

>>Since day one, when YAMN was announced, it was generally known, by the
>>community, that YAMN has internal defaults, so that it can be used without
>>any settings, done manually.
>
>Generally known? Go tell that to the marines. I found no such warning.

Not quite a warning, but in https://mixmin.net/yamn.html I found

: Urls section:
: Yamn has the capability to pull stats and key sources from URLs published by pingers. The following settings determine which source URLS should be used if periodic downloading is required.
:
:
: Fetch
:
:
: Should Yamn attempt to retrieve stats/keys at periodic intervals? Default: yes
:
: Pubring
:
: URL of a Public Keyring source. See also Files/Pubring for the default save location of the downloaded file. Default: http://www.mixmin.net/yamn/pubring.mix.
:
:
: Mlist2
:
:
: URL of an Mlist2 style stats source. See also Files/Mlist2 for the default save location of the download files. Default: http://www.mixmin.net/yamn/mlist2.txt.

That's opt-out where there has to be opt-in, for people living in
restrictive jurisdictions a time bomb waiting for missing data.