I feel silly. It just occurred to me that the remailers operate by piping to sendmail directly; thus a lone period is interpreted as "the end". So I have cunningly arranged for my message to be indented by one space (emacs has lots of functions!). I apologize for posting this essentially three times. I'm sure by now nobody cares how to forge a usenet post :-) -----BEGIN PGP SIGNED MESSAGE----- So, we can all forge mail with smtp, use the cypherpunk remailers, use "anonymous" servers like penet and charcoal, email-to-usenet gateways, etc. I've never seen instructions on how to forge a usenet post, so here goes: 1) Telnet to an NNTP server (see Yanoff's internet services list) 2) Type 'post'. After a bit, you'll get an OK message. 3) Type in what you want to appear. Have in mind before you start what fields you want in the header, or check other posts to see what they have. 4) End with a period on a line all by itself. After a bit, you'll get a "Post OK" message. 5) Type 'quit' For example, I was experimenting and telnetted to news.fu-berlin.de 119: ====================================================================== menudo> telnet news.fu-berlin.de 119 Trying 130.133.4.250... Connected to gibb.math.fu-berlin.de. Escape character is '^]'. 200 gibb NNTP server version 1.5.11 (10 February 1991) ready at Thu Jul 8 16:19:05 1993 (posting ok). post 340 Ok Newsgroups: alt.binaries.pictures.d Path: one!two!three From: mr.smiley@other.plane Subject: A test II Content-Type: text Sender: the MailMan Nntp-Posting-Host: castle Organization: other plane hackers Date: Thu, 8 Jul 1993 07:45:00 GMT Lines: 1 This is another test. . 340 Post successful quit ====================================================================== and this is what appeared: ====================================================================== Newsgroups: alt.binaries.pictures.d Path: menudo.uh.edu!swrinde!cs.utexas.edu!math.ohio-state.edu!howland.reston.ans.net!noc.near.net!uunet!math.fu-berlin.de!one!two!three From: mr.smiley@other.plane Subject: A test II Content-Type: text Message-ID: <706EBA2L@math.fu-berlin.de> Sender: the MailMan Nntp-Posting-Host: castle Organization: other plane hackers Date: Thu, 8 Jul 1993 07:45:00 GMT Lines: 1 This is another test. ====================================================================== Although Path: contains the one!two!three I typed at the end, it reveals math.fu-berlin.de as the origin of the post. Also, the Message-ID field reveals math.fu-berlin.de. More works needs to be done on how to suppress or further disguise these fields, if possible. -----BEGIN PGP SIGNATURE----- Version: 2.3 iQCVAgUBLDyDDoOA7OpLWtYzAQHwvAP/bb8B+tMtZomonKfYfVEyzy4qVsRDcsy6 jekqxWf2F5xi/aA4EVoXvg6sBbYuO/H0o63xNnDXeA1GzYpAdDp7Ouhztvj0bhn3 TdT5nQHFU/8E5WxhttF6NHs8GNFRDb2QXAxTd5idScMyAEU0RD10VmkwryQXuPez GC93HrcCKyo= =NJA2 -----END PGP SIGNATURE-----
I apologize for posting this essentially three times. I'm sure by now nobody cares how to forge a usenet post :-)
I thought it was pretty good. After all, the implications of such a scheme are widespread. I can imagine someone posting a message to talk.politics.guns, purporting to be from clinton@whitehouse.gov (or whatever the White House email address is these days), saying that personally he thinks Sarah Brady is an idiot, but that he has to go along with the Brady Bill for political reasons, and hell, he's just an Arkansas boy who goes out behind the Oval Office and target practices with the Secret Service staff on weekends... Of course, along more sinister lines, someone anonymously posting death threats to Clinton might not be caught, but the Secret Service would sure be all over someone's system REAL FAST. I suppose it's an interesting "denial of service" attack against a site that you don't like... -- Ed Carp erc@wetware.com 510/659-9560 For anonymous mailers --> anonymus+5300@charcoal.com "Disagreements are not meant to be challenges. They are just a different reality." -- Risa D'Angeles
-----BEGIN PGP SIGNED MESSAGE----- nobody@mead.u.washington.edu writes:
I feel silly. It just occurred to me that the remailers operate by piping to sendmail directly; thus a lone period is interpreted as "the end". So I have cunningly arranged for my message to be indented by one space (emacs has lots of functions!).
This is a bug. I've added the '-oi' option to sendmail invocations
in my remail scripts. I recommend that other remail operators do
the same.
- --
Miron Cuperman
participants (3)
-
khijol!erc＠apple.com -
miron＠extropia.wimsey.com -
nobody＠mead.u.washington.edu