From: Magnus Y Alvestad <magnus@ii.uib.no>
Date: Sun, 7 Apr 1996 13:24:27 +0800
To: Steve Reid <steve@edmweb.com>
Subject: Re: Someone's screwing around with anon.penet.fi
In-Reply-To: <Pine.BSF.3.91.960406114609.5026B-100000@kirk.edmweb.com>
Message-ID: <evpw9kq1z3.fsf@vipe.ii.uib.no>
MIME-Version: 1.0
Content-Type: text/plain


| I have a feeling lots of people on the Cypherpunks list are going to
l be getting these... My first post to the list was only about two
| days ago, and someone's already messing around. :(

Something like that.

No doubt, someone is subscribed to the cypherpunks list with an
anonymous account on anon.penet.fi - of the an???? variant.  When you
posted to the cypherpunks list, your posting was sent to this
account.

Now, an???? accounts are supposed to be anonymized both ways, which
means that when anon.penet.fi recieved your message, it anonymized it
and assigned you an anon id.

The nasty consequence is that the receiver can easily find the
correspondence between your real and anon id, even if it wasn't
generated just now.

I thought there was some kind of mechanism on anon.penet.fi to prevent
this, but it seems not.

-Magnus