From: Anonymous <anon@anon.efga.org>
Date: Tue, 30 Sep 1997 02:56:45 +0800
To: cypherpunks@cyberpass.net
Subject: Re: Remailers and ecash
Message-ID: <aebdbed8f7d662facb0d7258bb0f6c3f@anon.efga.org>
MIME-Version: 1.0
Content-Type: text/plain



-----BEGIN PGP SIGNED MESSAGE-----

Lucky Green wrote:
>On Sun, 28 Sep 1997, Anonymous wrote:
>> 
>> Nonsense.  Type 1 remailers offer a certain level of security.  It is
>> suitable for many applications.  Type 1 remailers require a fairly
>> determined attacker to thwart.  They would certainly keep you safe
>> from the IRS, but maybe not the NSA.
>> 
>> Even if you were running a child kidnapping ring and failing to report
>> the income, you would be pretty safe using Type 1 remailers.  The NSA
>> would never take the chance of revealing their capabilities just to
>> save a few kids.
>
>I disagree. The entire Type 1 networks can be trivially analyzed. It
>doesn't require an NSA for this. A single person that understands mixes
>and a few hackers to compromise some of the upstream, downstream servers,
>not even the remailers themselves, could do it.
>
>Type 1 remailers are fun toys. No more.

Please pardon my ignorance, but could you elaborate on this attack?
Assuming the user's machine is not compromised, in which case the game
is over, whose machines are being broken into?  Are you saying that
The Enemy just watches the messages going in and out of a particular
site and then watches the site where they suspect the messages are
going?

Monty Cantsin
Editor in Chief
Smile Magazine
http://www.neoism.org/squares/smile_index.html
http://www.neoism.org/squares/cantsin_10.html

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQEVAwUBNC/lZ5aWtjSmRH/5AQFZqQf+IDR2uv2cB77x0DmEb83Zqq1+a63MjLr1
jUB8v/sQoCXRX0WfoEls5FBqu19/13AVk8y1UdNdXz6oFwEZ0hlBeLBt6jOhSQcq
nl49H1sFsYOuQKTAMioaO8srlENVETK5kUb0PUPrah9jgj3j66zR3FdDQWUeur5C
+DcpCkjfrv9BwQt8PJ4PYtnmsaHDTuI1ESI1qpE5U0UdKUx2i2FtP9HtwUamWSA7
ZviDOfqlliVIhe3HWmC1rcr2VizqWA++HetEEehmPNVt2AwpWvUiIn15fnhL1HW4
vnOJAcxRx/ThI/ON5L4Y0af8Q1YowkNIvqWLU8vEaNFfgC8sxV50pQ==
=IAPf
-----END PGP SIGNATURE-----