1994-05-14 - Re: Penet spoofing

Header Data

From: Jim Gillogly <jim@rand.org>
To: cypherpunks@toad.com
Message Hash: 6324a34f3af634b85023a3b7aa42f1ee634d6564df9d7d011928b2a0bae70e51
Message ID: <9405141554.AA29674@mycroft.rand.org>
Reply To: <Pine.3.89.9405141031.B2107-0100000@freenet3.scri.fsu.edu>
UTC Datetime: 1994-05-14 15:54:52 UTC
Raw Date: Sat, 14 May 94 08:54:52 PDT

Raw message

From: Jim Gillogly <jim@rand.org>
Date: Sat, 14 May 94 08:54:52 PDT
To: cypherpunks@toad.com
Subject: Re: Penet spoofing
In-Reply-To: <Pine.3.89.9405141031.B2107-0100000@freenet3.scri.fsu.edu>
Message-ID: <9405141554.AA29674@mycroft.rand.org>
MIME-Version: 1.0
Content-Type: text/plain



> John Clark <johncla@freenet1.scri.fsu.edu> writes:
> Yes, I got the same message. I don't know what this is all about

I hate to be paranoid, but that seems to be my natural state these days.
I'll take a guess: somebody wants to know the mapping between cypherpunk
addresses and Finnish anonymous ID's, if any.

If you have an anonymous ID registered on penet.fi and you don't have a
password registed there, anyone can find your anonymous ID by forging mail
from you to themselves via Finland; it will carefully anonymize you and
report the message to them; presumably "This is the one I forged from John
Clark." or "Test 94.217.johncla" or whatever.

If you already had an anonymous account with no password, you wouldn't get
notification... but you have one now.  I don't know if there's an error msg
if you try to send mail with the wrong password.

I do have an anon ID (result of replying to some other anonymous poster)
with no password, and haven't gotten that message lately.

	Jim Gillogly
	Trewesday, 23 Thrimidge S.R. 1994, 15:52





Thread