[118056] in Cypherpunks
Re: Zipping to BlackNet
daemon@ATHENA.MIT.EDU (Adam Shostack)
Sat Sep 18 12:55:18 1999
Date: Sat, 18 Sep 1999 12:35:26 -0400
From: Adam Shostack <adam@zks.net>
To: Sean Roach <roach_s@mail.intplsrv.net>
Cc: cypherpunks@algebra.com
Message-ID: <19990918123526.A27172@caesar.zks.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
In-Reply-To: <3.0.6.32.19990917233043.0084b620@mail.intplsrv.net>
Reply-To: Adam Shostack <adam@zks.net>
On Fri, Sep 17, 1999 at 11:30:43PM -0500, Sean Roach wrote:
> >As of this very hour, the ZipLip guys offer unlimited https
> >accessible drive space to any user. Somebody probably should forward
> >this fact to the warez/mp3 lists... Might as well make use of it
> >while it lasts.
> >
> The thing is, with any anonymous upload capability, you can take
> advantage of a free web server until their security guys find out its
> against policy and take it down. The disadvantage here, with
> something on the model of Freedom server, unless I missed something,
> is that you will probably only get one or two such shots per server
> per nym before they wise up and start blocking habitual abusers by
> name. As far as a dirty way to provide a server, why not use
> Freedom, tied to an IRC bot. Have the bot whisper the list of files
> available for download, and the commands used to do it, when someone
> logs in. Have it also do a trace early on to see if the users site
> can be found, tell h[im/er] where the bot determines h[im/er] to be
> so that that person can refrain from relying on the "anonymity" of
> IRC to protect h[is/er] identity. Have the bot download files by DCC
> when requested to do so.
The Freedom IRC proxy blocks DCC. This is because there are
dangers that we haven't fully analyzed regarding allowing attackers to
create routes to your system. It seems likely that there are hard to
manage flooding attacks there.
> Again, the anonmity would be for the PROVIDER. The customer would
> still have to take measures to hide h[is/er] own identity. Perhaps
> using Freedom server h[im/er]self.
In addition to there being possible security problems, there are
business issues like cost of bandwidth that we'd have to take on in
allowing you to be an information provider over the network. We're
really focused right now on getting the best client privacy tools we
can deliver delivered, and aren't really focusing on the provider
part.
Clever folks will doubtless find a way to invert the directional
arrows to trade pictures of women without veils. You disgusting
pigs!
Adam
--
Are you fast enough? Are you smart enough? We're hiring those who are!
http://www.jobs.zeroknowledge.com
