How JBN blows your privacy, finally revealed

From: Agent Zero (agent0_at_nsa.gov)
Date: 04/30/04


Date: Fri, 30 Apr 2004 15:17:24 +0200

First, it gathers data about your system with a variety of techniques,
like your IP number and CPUID and OEM ID of your Windows.

Then when you choose remailers it looks to see if you are choosing a
compromised remailer as the last. It tries to trick you into picking
one by altering the stats so that the compromised remailers look the
most reliable. If you want you can compare the stats JBN reports with
the real stats from the actual source if it isn't already compromised.
The NSA is slowly buying out all stats sources, or hijacking the stats
sources en route with man in the middle attacks, substituting the NSA
version of the stats, with the compromised remailers at the top.

These are the ones that report 100% reliability and low latency all
the time, even though messages actually take longer. The best of these
is Frog, but the NSA is shutting it down because people are wise to it.

Then if you choose a compromised Mixmaster remailer because of the
magician's force trick to make the compromised ones look better (if you
pick RANDOM or AUTO you ALWAYS get a compromised remailer), it wraps
the data it collected in the earlier phase into an IP datagram that it
then folds into the mix packet. Only the compromised remailer can
extract this data, and it then passes on the data like it was normal.
Because it's encrypted all the way and looks like any other mix packet
there is no way of checking this.

It uses a polymorphing DLL that substitutes for the real DLL, so that if
you check it it looks just the same. This allows two way communication if
you use nyms, so that JBN can take instructions through nym packets and
send responses through normal Mix traffic. I bet you didn't know this
was possible but now you do.

All this totally blows your privacy so stay away from JBN and compromised
Mixmaster remailers.