ID of anonymous posters via word analysis?

[Jim McCoy]

> From owner-cypherpunks at toad.com Fri Oct 29 18:11:38 1993
> Received: from relay2.UU.NET by ccwf.cc.utexas.edu with SMTP id AA01696
>   (5.65c/IDA-1.4.4 for <mccoy at ccwf.cc.utexas.edu>); Fri, 29 Oct 1993 17:39:18 -0500
> Received: from toad.com by relay2.UU.NET with SMTP 
> 	(5.61/UUNET-internet-primary) id AA20384; Fri, 29 Oct 93 18:38:51 -0400
> Received: by toad.com id AA27077; Fri, 29 Oct 93 15:25:23 PDT
> Received: by toad.com id AA27054; Fri, 29 Oct 93 15:23:54 PDT
> Return-Path: <mdiehl at triton.unm.edu>
> Received: from triton.unm.edu ([129.24.8.235]) by toad.com id AA27050; Fri, 29 Oct 93 15:23:50 PDT
> Received: by triton.unm.edu (5.65/0.1)
> 	id <AA13784>; Fri, 29 Oct 1993 16:23:35 -0600
J. Michael Diehl asks:
> According to Jon Boede:
> > 
> > People interested in fingerprinting anonymous posters might be
> > interested in a Markov tuple analysis program that was posted to the
> > net eons ago.
>
> Has anyone found this program?  I'd sure like a copy of it.  Thanx in
> advance. 

I found it in a net.sources archive (which should give a trip through the
wayback machine for some old-timers...)  You can now get it via anonymous
ftp in ftp.cc.utexas.edu:/pub/cypherpunks/utils/markov.shar.gz

jim