From: "David A. Wagner" <dawagner@phoenix.Princeton.EDU>
Date: Sun, 20 Nov 94 16:22:43 PST
To: cypherpunks@toad.com
Subject: remailer security, sendmail
Message-ID: <9411210020.AA06110@tucson.Princeton.EDU>
MIME-Version: 1.0
Content-Type: text/plain


I just read an interesting post on alt.hackers.  Apparently you
can figure out who's sending mail to who by repeatedly running
the command /usr/lib/sendmail -bp.  I just tested this out and
it *seems* to work, as does running /usr/ucb/mailq repeatedly.
How's that for an obscure feature?

Does anyone run a remailer on a multi-user machine where sendmail
is used?  Is this sendmail feature a problem?  If so, how would
one fix it? (write a wrapper for sendmail? but that requires root
access *sigh*)  Am I missing something?

-------------------------------------------------------------------------------
David Wagner                                             dawagner@princeton.edu