[13651] in Cypherpunks
Re: Penet spoofing
daemon@ATHENA.MIT.EDU (Jim Gillogly)
Sat May 14 11:59:12 1994
To: cypherpunks@toad.com
In-Reply-To: Your message of Sat, 14 May 94 11:02:01 -0400.
<Pine.3.89.9405141031.B2107-0100000@freenet3.scri.fsu.edu>
From: Jim Gillogly <jim@rand.org>
Reply-To: jim@rand.org
Date: Sat, 14 May 94 08:54:24 PDT
> John Clark <johncla@freenet1.scri.fsu.edu> writes:
> Yes, I got the same message. I don't know what this is all about
I hate to be paranoid, but that seems to be my natural state these days.
I'll take a guess: somebody wants to know the mapping between cypherpunk
addresses and Finnish anonymous ID's, if any.
If you have an anonymous ID registered on penet.fi and you don't have a
password registed there, anyone can find your anonymous ID by forging mail
from you to themselves via Finland; it will carefully anonymize you and
report the message to them; presumably "This is the one I forged from John
Clark." or "Test 94.217.johncla" or whatever.
If you already had an anonymous account with no password, you wouldn't get
notification... but you have one now. I don't know if there's an error msg
if you try to send mail with the wrong password.
I do have an anon ID (result of replying to some other anonymous poster)
with no password, and haven't gotten that message lately.
Jim Gillogly
Trewesday, 23 Thrimidge S.R. 1994, 15:52
