From: CyberEyes <cyberia@cam.org>
Date: Fri, 5 Jul 1996 05:18:55 +0800
To: cypherpunks@toad.com
Subject: Re: CWD -- Jacking in from the "Keys to the Kingdom" Port
In-Reply-To: <199607032025.QAA25327@apollo.gti.net>
Message-ID: <Pine.GSO.3.94.960704140708.29085H-100000@Stratus.CAM.ORG>
MIME-Version: 1.0
Content-Type: text/plain


On Wed, 3 Jul 1996, Mark Rogaski wrote:

> I would assume that the filters look for regexp's in the query string, too.
> How about a nice little Nutscape plugin that uses a rot13'd query string?

	Do you have a copy of that plugin? If it exists.

> http://www.one.site.com/cgi-bin/sneaky-rd?uggc://jjj.cbeab-fvgr.pbz/
> 
> Hmmm, no bad words in the query string.  Of course the filter package would
> start looking for rot13'd stuff in the next release.  So the next logical
> step is to use the URL encrypted with the redirector's public key ... or
> better yet, a dynamically generated key.  Just convert it to radix64 so
> as to avoid ?'s &'s or ='s, and use that as the query string.  
> 
> The plug-in would only be necessary to generate the first request.  Any
> URL preparation could be handled by passing the output of netcat through
> a stream filter before sending it to the client.

	That "creative child" would have to be pretty damn smart to do
what you described.

Ryan A. Rowe - Montreal, Quebec        /Seeking Internet-related job!/ 
aka CyberEyes, Rubik'S Cube              I will relocate _ANYWHERE_.

Tel. -> +1-514-626-0328                |                 __o         o
E-Mail -> cyberia@cam.org              |               _ \<_        <\
WWW -> http://www.cam.org/~cyberia     | __/\o_       (_)/(_)       />
IRC -> #CAli4NiA, #Triathlon, #Surfing |
FTP -> ftp.cam.org /users/cyberia      |  swim          bike       run

          Read my C.V. at http://www.cam.org/~cyberia/resume-e.html 
           "In lieu of experience, I have a willingness to learn."

             "Everyone has their day, mine is July 15th, 1998."