ANON: nntp, apology

I feel silly.  It just occurred to me that the remailers operate by
piping to sendmail directly; thus a lone period is interpreted as "the
end".  So I have cunningly arranged for my message to be indented by
one space (emacs has lots of functions!).

I apologize for posting this essentially three times.  I'm sure by now
nobody cares how to forge a usenet post :-)

-----BEGIN PGP SIGNED MESSAGE-----

 So, we can all forge mail with smtp, use the cypherpunk remailers, use
 "anonymous" servers like penet and charcoal, email-to-usenet gateways,
 etc.  I've never seen instructions on how to forge a usenet post, so
 here goes:

 1) Telnet to an NNTP server (see Yanoff's internet services list)
 2) Type 'post'.  After a bit, you'll get an OK message.
 3) Type in what you want to appear.  Have in mind before you start
    what fields you want in the header, or check other posts to see what
    they have.
 4) End with a period on a line all by itself.  After a bit, you'll get
    a "Post OK" message.
 5) Type 'quit'

 For example, I was experimenting and telnetted to news.fu-berlin.de 119:

 ======================================================================
 menudo> telnet news.fu-berlin.de 119
 Trying 130.133.4.250...
 Connected to gibb.math.fu-berlin.de.
 Escape character is '^]'.
 200 gibb NNTP server version 1.5.11 (10 February 1991) ready at Thu Jul  8 16:19:05 1993 (posting ok).
 post
 340 Ok
 Newsgroups: alt.binaries.pictures.d
 Path: one!two!three
 From: mr.smiley@other.plane
 Subject: A test II
 Content-Type: text
 Sender: the MailMan
 Nntp-Posting-Host: castle
 Organization: other plane hackers
 Date: Thu, 8 Jul 1993 07:45:00 GMT
 Lines: 1

 This is another test.
 .
 340 Post successful
 quit
 ======================================================================

 and this is what appeared:

 ======================================================================
 Newsgroups: alt.binaries.pictures.d
 Path: menudo.uh.edu!swrinde!cs.utexas.edu!math.ohio-state.edu!howland.reston.ans.net!noc.near.net!uunet!math.fu-berlin.de!one!two!three
 From: mr.smiley@other.plane
 Subject: A test II
 Content-Type: text
 Message-ID: <706EBA2L@math.fu-berlin.de>
 Sender: the MailMan
 Nntp-Posting-Host: castle
 Organization: other plane hackers
 Date: Thu, 8 Jul 1993 07:45:00 GMT
 Lines: 1

 This is another test.
 ======================================================================

 Although Path: contains the one!two!three I typed at the end, it
 reveals math.fu-berlin.de as the origin of the post.  Also, the
 Message-ID field reveals math.fu-berlin.de.  More works needs to be
 done on how to suppress or further disguise these fields, if possible.

-----BEGIN PGP SIGNATURE-----
Version: 2.3

iQCVAgUBLDyDDoOA7OpLWtYzAQHwvAP/bb8B+tMtZomonKfYfVEyzy4qVsRDcsy6
jekqxWf2F5xi/aA4EVoXvg6sBbYuO/H0o63xNnDXeA1GzYpAdDp7Ouhztvj0bhn3
TdT5nQHFU/8E5WxhttF6NHs8GNFRDb2QXAxTd5idScMyAEU0RD10VmkwryQXuPez
GC93HrcCKyo=
=NJA2
-----END PGP SIGNATURE-----

> I apologize for posting this essentially three times.  I'm sure by now
> nobody cares how to forge a usenet post :-)

I thought it was pretty good.  After all, the implications of such a scheme
are widespread.  I can imagine someone posting a message to talk.politics.guns,
purporting to be from clinton@whitehouse.gov (or whatever the White House
email address is these days), saying that personally he thinks Sarah Brady
is an idiot, but that he has to go along with the Brady Bill for political
reasons, and hell, he's just an Arkansas boy who goes out behind the Oval
Office and target practices with the Secret Service staff on weekends...

Of course, along more sinister lines, someone anonymously posting death threats
to Clinton might not be caught, but the Secret Service would sure be all over
someone's system REAL FAST.  I suppose it's an interesting "denial of service"
attack against a site that you don't like...
-- 
Ed Carp				erc@wetware.com			510/659-9560
   For anonymous mailers -->   anonymus+5300@charcoal.com
"Disagreements are not meant to be challenges.  They are just a different
 reality."  -- Risa D'Angeles

-----BEGIN PGP SIGNED MESSAGE-----

nobody@mead.u.washington.edu writes:

>I feel silly.  It just occurred to me that the remailers operate by
>piping to sendmail directly; thus a lone period is interpreted as "the
>end".  So I have cunningly arranged for my message to be indented by
>one space (emacs has lots of functions!).

This is a bug.  I've added the '-oi' option to sendmail invocations
in my remail scripts.  I recommend that other remail operators do
the same.
- -- 
        Miron Cuperman <miron@extropia.wimsey.com> | NeXTmail/Mime ok
        Unix/C++/DSP,  consulting/contracting      | Public key avail
        AMIX: MCuperman                            |
Laissez faire, laissez passer. Le monde va de lui meme.



-----BEGIN PGP SIGNATURE-----
Version: 2.3

iQCVAgUBLDzZQJNxvvA36ONDAQHYKQP+Mpok7m5fABZG/PTkQ5TAVFtPUHdSyzQT
MpZF6MhWSEdR3Tj+8tpUahS3J/ZXfXENeacL9r2Nd2ORXwCNDziGoCkdjV1sKmS9
NR+HKS8uq/WVt7rlpZMHmf/9nSlvx4l5KTVJ/5iy8FtppbbJrlFpf0HsDvDMF7if
/PEAoSZs11I=
=0U6k
-----END PGP SIGNATURE-----