re: changes to remailer@jpunix.com
I read about some changes that John Perry made to his remailer, since it is being abused. (Sorry to hear it!) I thought he said he is doing source blocking (I deleted the message and can't check.) Is this true? Were there no hops between the abuser and the remailer? How can you prevent the abuser from just chaining through different paths to reach your remailer and continuing to use it? Or am I remembering incorrectly ;) Random Factor suggested (among other things)
* require encryption for incoming messages.
Requiring encryption is OK, as long as you don't require the remailing header and message body to be encrypted together. If you do, like the extropia remailer does, then you can't form reply blocks that include such a remailer (since the reply block is created by a sender who obviously doesn't have the message body that his recipient will use the reply block to respond to).
-----BEGIN PGP SIGNED MESSAGE----- In message <9411172231.AA27739@fast.owlnet.rice.edu> you write:
I thought he said he is doing source blocking (I deleted the message and can't check.) Is this true? Were there no hops between the abuser and the remailer? How can you prevent the abuser from just chaining through different paths to reach your remailer and continuing to use it? Or am I remembering incorrectly ;)
There were no hops and the person that did it signed the message. That is why it was so easy to track. John A. Perry - KG5RG - perry@jpunix.com WWW - http://jpunix.com PGP 2.62 key for perry@jpunix.com is on the keyservers. PGP-encrypted e-mail welcome! Finger kserver@jpunix.com for PGP keyserver help. Finger remailer@jpunix.com for remailer help. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Finger kserver@jpunix.com for PGP keyserver help. iQCVAwUBLsvnyVOTpEThrthvAQGoOwP/cmEamhUubgd+aCJm1PyIw9mzr1PDzdJW i5Cl7mb6m110tLzTmQhs+pau2K/lF7I52IBekewr/LLS5KZOtpinb52dhj/Dp20X 5kBcvRRy2R5d0N/gvuVWon8rs6J0j2quJknTYA6fk024ACph864aeHUgyK/1U7V6 sWg8ExanhAs= =PlZO -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- John Perry writes:
There were no hops and the person that did it signed the message. That is why it was so easy to track.
*quizzical look* Any idea, then, why the person bothered with remailing at all ? - -L. McCarthy -----BEGIN PGP SIGNATURE----- Version: 2.6.1 iQCVAwUBLsv0lWf7YYibNzjpAQG+AAP/eSuWa9P6tjNe8u87nNOmcJkHaLfKakYS wMzvD05xqwvJn1VXwpTBNs6WFmAdRsQZT90X5Absr1Ntvr19JMF8AVqqggE+JqNf L9o3xj3Vnln1VajpGvPtloW5nw/JG8gn7IZJZX5yUePuzF+ywtNV81RgLPs8tIzT SMEgSJJl0MQ= =/1Cj -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- In message <199411180026.TAA02840@bali.cs.umass.edu> you write:
-----BEGIN PGP SIGNED MESSAGE-----
John Perry writes:
There were no hops and the person that did it signed the message. That is why it was so easy to track.
*quizzical look* Any idea, then, why the person bothered with remailing at all ?
I'm sure he didn't realize what he had done. When he "shar"ed the code it added his email address to each segment. He probably didn't think to check it. All I had to do was go to the newsgroup and read the article to see who it was.. Duh.. John A. Perry - KG5RG - perry@jpunix.com WWW - http://jpunix.com PGP 2.62 key for perry@jpunix.com is on the keyservers. PGP-encrypted e-mail welcome! Finger kserver@jpunix.com for PGP keyserver help. Finger remailer@jpunix.com for remailer help. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Finger kserver@jpunix.com for PGP keyserver help. iQCVAwUBLsv/i1OTpEThrthvAQGjnQP/fub8+NqlLd4KhFkWSUFRxjnntbmLLd5A 5awgaObwmMBzIph++vjxnb8c/Bywp+U6m83pF9k3UdPsd1RmBoXuIPtu7UskhvTC ZNo7ubE/Y4prrlZnuhgM6tkym4VUVAuJNp5rPvz+R96WpwEevRS6fBAPqTW+d4GX z0Ay1ZPXC9k= =h/gx -----END PGP SIGNATURE-----
participants (3)
-
John A. Perry -
Karl Lui Barrus -
L. McCarthy