Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.cypherpunks > #1150 > unrolled thread

Re: NymVPN's post-quantum upgrade is here - Community call #2614

Back to article view | Back to alt.cypherpunks

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Re: NymVPN's post-quantum upgrade is here - Community call #2614 Yamn3 Remailer <noreply@mixmin.net> - 2026-05-12 22:50 +0100
    Re: NymVPN's post-quantum upgrade is here - Community call #2614 Hermes <noreply@oc2mx.net> - 2026-05-12 23:06 +0000
      Re: NymVPN's post-quantum upgrade is here - Community call #2614 Radio Eriwan <bounce.me@radio-eriwan.ru> - 2026-05-15 06:24 +0300
        Re: NymVPN's post-quantum upgrade is here - Community call #2614 Anne Frank <bounce.me@n2n.oc2mx.net> - 2026-05-17 18:07 +0200

#1150 — Re: NymVPN's post-quantum upgrade is here - Community call #2614

On 03 May 2026, Hermes <noreply@oc2mx.net> posted some

> Yamn2 Remailer wrote:
>> > > > Your are still using inwtx's YAMN client, which
>> > > > was IIRC not updated in the past and therefore
>> > > > is insecure as Zax's YAMN client, along with
>> > > > the horrible OmniMix GUI, for Windows only...
>> > > > 
>> > > > It's time (comming hopefully soon) to release
>> > > > project Zeus. ???❤️????️‍?
>> > > > 
>> > > 
>> > > What is the "insecurity" in Zax's YAMN program?
>> > > I've asked this before but I never receive a helpful answer.
>> > > 
>> > > It doesn't safely do what it was designed to do?
>> > > Or it doesn't do what you want it to do?
>> > > 
>> 
>> > Hi sec3,
>> 
>> > YAMN has a couple of design flaws, because Zax copied
>> > a 30 years old Mixmaster design and added only modern
>> > crypto algorithm.

You shouldn't use Ethernet any longer then either because 
it's over 50 years old.

>> > I outlined the client flaw in an GitHub issue in frell
>> > admin's repository a while ago.
>> 
>> > https://github.com/lampeh/yamn/issues
>> 
>> > The remailer part is not on par with modern standards
>> > IMHO, if you compare it to Onion Courier mix nodes.
>> 
>> > You can compere this by yourself, since you run a YAMN
>> > middleman and simply try out the Onion Courier mix node.
>> 
>> > https://github.com/Ch1ffr3punk/oc
>> 
>>   404?
>> 
>> > Onion Courier is very much hated by some a.p.a-s LEA/TLA
>> > folks because of it's superiority over YAMN.
> 
> I announced recently here that I no longer support Tor and
> it's community and that I will integrate Onion Courier in
> the Nym ecosystem, but here is the README for you:

Was that before or after you got caught spinning the story about
the Tor control port being a security flaw? 

[toc] | [next] | [standalone]

#1151

Yamn3 Remailer wrote:
> On 03 May 2026, Hermes <noreply@oc2mx.net> posted some

> > > > Onion Courier is very much hated by some a.p.a-s LEA/TLA
> > > > folks because of it's superiority over YAMN.
> > 
> > I announced recently here that I no longer support Tor and
> > it's community and that I will integrate Onion Courier in
> > the Nym ecosystem, but here is the README for you:
> 
> Was that before or after you got caught spinning the story about
> the Tor control port being a security flaw? 

On Windows it is a security flaw and an open Tor control port
is absolutely not needed, for using an up-to-date tor.exe,
which of course Danner can't deliver...

But why to worry, there is the awesome Nym Mixnet available,
which an outdated GUI wrapper like OmniMix can't use at all
with it's third-party components...

[toc] | [prev] | [next] | [standalone]

#1155

On 12 May 2026, Hermes <noreply@oc2mx.net> posted: 

> Yamn3 Remailer wrote:
>> On 03 May 2026, Hermes <noreply@oc2mx.net> posted some
> 
>> > > > Onion Courier is very much hated by some a.p.a-s LEA/TLA
>> > > > folks because of it's superiority over YAMN.
>> > 
>> > I announced recently here that I no longer support Tor and
>> > it's community and that I will integrate Onion Courier in
>> > the Nym ecosystem, but here is the README for you:
>> 
>> Was that before or after you got caught spinning the story about
>> the Tor control port being a security flaw? 
> 
> On Windows it is a security flaw and an open Tor control port
> is absolutely not needed, for using an up-to-date tor.exe,
> which of course Danner can't deliver...

The Tor he does deliver is completely functional for intended
usage.

The control port is not "open".

"To protect Tor's control port from unauthorized access there are two
authentication methods, both supported by OmniMix. Switching between
them requires editing the 'torrc' configuration file manually." 

> But why to worry, there is the awesome Nym Mixnet available,
> which an outdated GUI wrapper like OmniMix can't use at all
> with it's third-party components...

One app, one unproven service.

Dozens of common apps can use the functionality of Omnimix 
and Tor with little effort.  

[toc] | [prev] | [next] | [standalone]

#1158

On 12 May 2026, Hermes <noreply@oc2mx.net> posted: 

> Yamn3 Remailer wrote:
>> On 03 May 2026, Hermes <noreply@oc2mx.net> posted some
> 
>> > > > Onion Courier is very much hated by some a.p.a-s LEA/TLA
>> > > > folks because of it's superiority over YAMN.
>> > 
>> > I announced recently here that I no longer support Tor and
>> > it's community and that I will integrate Onion Courier in
>> > the Nym ecosystem, but here is the README for you:
>> 
>> Was that before or after you got caught spinning the story about
>> the Tor control port being a security flaw? 
> 
> On Windows it is a security flaw and an open Tor control port
> is absolutely not needed, for using an up-to-date tor.exe,
> which of course Danner can't deliver...

> The Tor he does deliver is completely functional for intended
> usage.

> The control port is not "open".

It was open last time I downloaded OmniMix and a little Windows
Trojan, written in Assembly Language and not detectable by AV
software can then record and send all destination addresses, thanks
to the untrustworthy Control Port setting.

"To protect Tor's control port from unauthorized access there are two
authentication methods, both supported by OmniMix. Switching between
them requires editing the 'torrc' configuration file manually." 

> But why to worry, there is the awesome Nym Mixnet available,
> which an outdated GUI wrapper like OmniMix can't use at all
> with it's third-party components...

> One app, one unproven service.

What are you talking about?! The Nym ecosystem consists of multiple
trustworthy apps, where the official Nym apps had several audits.

> Dozens of common apps can use the functionality of Omnimix 
> and Tor with little effort.

We no longer need OmniMix or QSL for Windows only, as we now have
modern Virebent and Anne Frank services available, browser based
and therefore cross-platform for desktop and mobile! 😊❤️🚀

[toc] | [prev] | [standalone]

Back to top | Article view | alt.cypherpunks

csiph-web