Re: SEVERE undercapacity, we need more remailer servers FAST
At 18:29 1996-05-15 -0400, Black Unicorn wrote:
I would really like to see a remailer that is somehow blinded.
I don't know enough about how mail paths are generatered, but is it impossible to conceal the origin of remailer postings?
IP spoofing would do this nicely.Since SMTP doesn't require any significant responses, you can send blind and fake your IP address. To do that you need root access on your mailer machine and an ISP that doesn't sniff and filter its network for spoofing attacks. See ftp://info.cert.org/pub/cert_advisories/CA-95:01.IP.spoofing for a good description of spoofing attacks and defenses. If you're not up to writing spoofing code into your (re-)mailer, then an easier solution is to send everything through anon.lcs.mit.edu after you have removed all headers that point at you. Matts
On Sun, 19 May 1996, Matts Kallioniemi wrote:
IP spoofing would do this nicely.Since SMTP doesn't require any significant responses, you can send blind and fake your IP address. To do that you need root access on your mailer machine and an ISP that doesn't sniff and filter its network for spoofing attacks.
It is my understanding that IP spoofing will become much more difficult, if not impossible when IP6/whatever gets put into place. It seems to me that IP spoofing is not a long term option. Deep Thought Question for the Constitutional Scholars: What chance would a remailer operator have in the court system today positing the following set of circumstances: 1. Case is concerns retrans of either copyrighted/trade secret material (i.e. CO$ shit) or basically anything _but_ child porn or a murder contract. 2. Remailer operator did not violate any laws. 3. Remailer operator has big enough legal guns (ala EFF & ACLU etc.) to back him. I realize that this would be a civil case rather than a criminal one, maybe it would have to be child porn or something illegal to get that far, but if I were to set up a remailer under my real name, and the CO$ came after me, given that I had the financial backup to carry the case to trial, what are my chances? Would it be worth it to do a Scopes Monkey Trial like case on this, get someone willing to take the chance, and establish that it _is_ legal to run a remailer? I might be willing to be the test case for this, but I would need to know the ramifications, and I would need to get my wifes approval for this, and I don't want to expose Suba to any liability in this. (So relax Alex). Petro, Christopher C. petro@suba.com <prefered for any non-list stuff> snow@crash.suba.com
participants (2)
-
Matts Kallioniemi -
snow