From: Bob Snyder <rsnyder@janet.advsys.com>
Date: Sat, 26 Aug 95 04:28:52 PDT
To: cypherpunks@toad.com
Subject: Re: Wide Release (Re: PGPfone (BETA TEST) is released)
In-Reply-To: <199508252155.XAA06116@utopia.hacktic.nl>
Message-ID: <199508261129.HAA22154@janet.advsys.com>
MIME-Version: 1.0
Content-Type: text/plain


> ftp host: net-dist.mit.edu, AKA bitsy.mit.edu
> 
> 220 bitsy FTP server (Version wu-2.4(1) Thu Apr 14 20:21:35 EDT 1994) ready.
> USER ftp
> 331 Guest login ok, send your complete e-mail address as password.
> PASS *****

The fact that it uses exactly 5 *'s, and the MACB E command below indicate 
this was probably an Anarchie transcript, a ftp/archie client for the Mac.

> PWD
> 257 "/" is current directory.
> MACB E
> 500 'MACB E': command not understood.
> TYPE A
> 200 Type set to A.
> 
> CWD /pub/PGPfone
> 250-Please read the file README
> 250-  it was last modified on Fri Aug 25 15:52:05 1995 - 0 days ago
> 250 CWD command successful.
> PORT 199,117,100,36,7,146

Too bad "Anonymous" isn't more aware of the FTP protocol.  This indicates that 
the connection was made from 199.117.100.36, p36.Boulder-2.dialup.csn.net.

> 200 PORT command successful.
> LIST
> 150 Opening ASCII mode data connection for /bin/ls.
> total 29
> -r--r--r--  1 0        1001         4287 Aug 25 15:52 README
> drwxr-x---  4 1        27            512 Aug 25 17:00 dist
> -r--r--r--  1 0        1001         2172 Aug 24 22:02 mitlicen.txt
> -r--r--r--  1 0        1001        19546 Aug 24 23:43 rsalicen.txt
> 226 Transfer complete.
> 
> CWD /pub/PGPfone/dist
> 250 CWD command successful.

This indicates "Anonymous" is either making up everything from this point on, 
or has access to the machine other than normal anonymous FTP.  The permissions 
on dist would prevent the CWD from happening.  Actually, the permissions on 
dist prevent this from working at all.

Look, if you want to make PGPfone available overseas in violation of ITAR, go 
ahead.  It's a stupid law, and you aren't likely to get caught.  But don't 
make MIT or Phil the fall guy for it.  Send it out yourself.  MIT and Phil 
have contributed greatly to the privacy community, and stupid stunts like this 
aren't going to encourage them much.

Bob