From: Anonymous <anon@anon.efga.org>
Date: Sun, 2 Nov 1997 01:30:55 +0800
To: toxic@content.org
Subject: [FWD] Further Attacks on "cajones.com" Vindicate Jeff Burchell and the Huge Cajones Remailer
Message-ID: <a0f23b37c01ef3769a3b265ba166e085@anon.efga.org>
MIME-Version: 1.0
Content-Type: text/plain



dr@ripco.com (David Richards) wrote:

> It appears that the domain 'cajones.com' is being abandoned due to the
                              ^^^^^^^^^^^
> massive forgery by spammers? No nameservers respond...
  ^^^^^^^^^^^^^^^

> Enclosed is a spam recently received, through the open relay 'rio.bravo.net'
> from an IBM.NET dialup.
>  
> Note that the only body text in this spam is a URL that doesn't work because
> the spammer truncated the URL, and the complete url points to what appears
> to be a legitimate site, so he was probably trying to promote a personal
> home page or other sub-site on 'http://www.fcl.metronet.lib.mi.us/'
>  
>  
> === Spam with headers intact ===
> 
> From cajones.com!weijoro79 Fri Oct 31 22:58:42 1997
> Return-Path: <weijoro79@cajones.com>
> Received: from rio.bravo.net (root@207.48.46.12)
>   by XXXXX.ZZZZZ.com with SMTP; 1 Nov 1997 04:58:38 -0000
> Received: from LOCALNAME (slip166-72-172-87.fl.us.ibm.net [166.72.172.87]) by rio.bravo.net (8.6.12/8.6.9) > with SMTP id WAA24372; Fri, 31 Oct 1997 22:32:27 -0600            
> Date: Fri, 31 Oct 1997 22:32:27 -0600
> From: weijoro79@cajones.com               
> To: weijoro79@cajones.com
> Comments: Authenticated sender is <weijoro79@cajones.com>
> Errors-To: nobody@nowhere.com
> Subject: Create custom targeted e-mail address lists...
> Message-Id: <199711012578NAA22995@cajones.bravo.net>
>  
> http://www.fcl.metronet.lib.m
 
That's quite interesting.  Spam is arriving with forged headers that
attempt to implicate "cajones.com".

That domain has quite a colorful history.  According to InterNIC records,
it's operated by Jeff Burchell, who is also the former operator of the
defunct Huge Cajones Remailer which he operated as part of that domain.

Along came Gary Burnore <gburnore@netcom.com>, CEO of DataBasix, who
claimed that Jeff's remailer at cajones.com was being used to "forge"
his e-mail address to Usenet articles.  His only evidence was a few 
messages which happened to have a "cajones.com" message id in the 
headers, and they weren't even very convincing forgery attempts at that. 

Gary Burnore, Belinda Bryan <eridani@ix.netcom.com>, and William J. 
McClatchie (aka "Wotan") <wmcclatc@primenet.com> managed to harass Jeff 
sufficiently that he shut the remailer down.  At the time, Burnore
refused to concede the possibility that any "forgeries" of articles in 
his name might also have forged headers designed to implicate 
"cajones.com" as well.  Rather he relied on the fact that Jeff kept no
logs which could prove the innocence of himself and his remailer.

Now the "cajones.com" domain is dead, and yet it's still showing up in
forged headers!  It looks like another of Gary Burnore's "shoot first
and ask questions later" accusations has been cast into doubt.
Unfortunately, it's probably too late to undo the disinformation
campaign that he waged against Jeff Burchell and other remailer
operators.

--
Without censorship, things can get terribly confused in the public mind.

 -- General William Westmoreland