local network only?

Derek,

>mail to me, most likely I can track you down to at LEAST the machine
>you forged it from!

I don't have an account on this machine.  The machine doesn't seem to care.
Does the machine keep a record of this letter, I don't know?

I'm using the command mconnect on a sun system.  It asks me who I am,
and then trusts me when I tell it!  I have even told it I was ROOT, and
it filled in "Operator" from the local passwd file!  Is this security
so lax because I am on a local area network unconnected to the Internet?
Does anyone know?

mconnect even gives me help if I ask it!

I didn't mail this,
                    not me

> I don't have an account on this machine.  The machine doesn't seem to care.
> Does the machine keep a record of this letter, I don't know?

You don't need an account on the machine, but I can still tell that
you came through amtel.com, and most likely originated from the
machine "bass", but I can't be sure about that.  Yes, machines do keep
logs of all mail transactions, so I could theoretically track down
that message.  It's not difficult.

Granted, it would probably take me some time to track this down
truely, although I know that you do get the cypherpunks list in some
fashion, so I can recursively track down everyone on the cypherpunks
list until I find you.  (I'm not going to do that, since its not worth
my time, but it's possible!)

Yes, using the "mconnect" command will let you type anything you want.
Like I said, forging e-mail is trivial, but it down't buy you
anything.  There are always logs at some point!

-derek

>
>Yes, using the "mconnect" command will let you type anything you want.
>Like I said, forging e-mail is trivial, but it down't buy you
>anything.  There are always logs at some point!
>


btw:

    mconnect <host>

is the same as the command:

    telnet <host> smtp

On the cypherpunks mailing list, Peter (it seems :) forged... ;-)
 > Derek Atkins wrote...
 > >mail to me, most likely I can track you down to at LEAST the machine
 > >you forged it from!
 >  
 > I don't have an account on this machine.  The machine doesn't seem to care.

So, you don't have an account on bass.sjo.atmel.com?  And, you wouldn't,
by chance, have a first name of Peter, would you?  :)  [Only the machine
name was gotten from your mail message.]

 > I didn't mail this,
 >                     not me

Of course not. ;-)  Just don't believe that simple forged mail is totally
untraceable, at least to the machine you forged it from.

FYI...

		-jeff

Jeff Kellem
Internet: composer@Beyond.Dreams.ORG