From: Adam Back <aba@dcs.ex.ac.uk>
Date: Wed, 19 Nov 1997 04:55:34 +0800
To: JonWienk@ix.netcom.com
Subject: hotmail &c as exit remailers (Re: Databasix conspiracy theories)
In-Reply-To: <3.0.3.32.19971117175315.006a2520@popd.netcruiser>
Message-ID: <199711180916.JAA01136@server.test.net>
MIME-Version: 1.0
Content-Type: text/plain




Jonathan Wienke <JonWienk@ix.netcom.com> writes:
> [free mail by web accounts on mailexcite.com as remailers..]
> 
> Any shmuck can log on and input a fake name, address, and
> demographic data to create a new account at hotmail, mailexcite, or
> juno.  In this way, as existing remailers are harassed out of
> existence, new ones can be created on a daily or hourly basis.  It
> would probably be interesting to find out how much info these
> outfits collect (cookies, etc.) that could be definitively linked to
> a True Name.

A shortish while ago using these free email by web accounts as exit
remailers in the remailer net was discussed.  Someone enthused with
the practicality of the idea said "let's do it".  Ian Goldberg said
"OK" and did it, posting perl code to interface to them.

His code also automates the process of opening accounts on several of
these services, and even automates the process of grabbing a random
open web proxy address from a public list of them, and sending
outgoing mail via them so that the sending remailer hosts IP address
is not included in the headers.  (Several of the email by web things
include your IP address in the headers).

I think several of the remailers are using this setup.

If any remailers are thinking of throwing in the towel due to abuse,
I'd highly recommend switching to using Ian's script as the final hop
mail delivery agent.

Adam
-- 
Now officially an EAR violation...
Have *you* exported RSA today? --> http://www.dcs.ex.ac.uk/~aba/rsa/

print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<>
)]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`