Anonymous Servers - Thrasher and X-No-Archive test results

This is Interesting: Free IT Magazines  
Home > Archive > Anonymous Servers > April 2005 > Thrasher and X-No-Archive test results





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Thrasher and X-No-Archive test results
Thrasher Remailer

2005-04-08, 2:45 am

After various tests I have come to the following conclusions for getting a
post through thrasher with the X-No-Archive header present.

A post using X-No-Archive: Yes
the header will not be present in the post.

A post using X-No-Archive: yes
the header will be present in the post but will have changed to X-No-Archive: Yes

This seems to be peculiar to the thrasher remailer and I have found the above
to be true in all the tests that I have made.

The Google help page states to use X-No-archive: yes (weird, but am trying
this in this post for the first time) and the use of X-No-Archive: yes which I
can't find a way to do through thrasher, although its metamorphosed form
X-No-Archive: Yes appears to do as supposed.

I hope that these observations are useful.

Thrasher Admin

2005-04-08, 7:45 am

-----BEGIN PGP SIGNED MESSAGE-----

On 8 Apr 2005 07:29:03 -0000, Thrasher Remailer
<thrasher@reece.net.au> wrote:

>After various tests I have come to the following conclusions for
>getting a post through thrasher with the X-No-Archive header
>present.
>
>A post using X-No-Archive: Yes
>the header will not be present in the post.
>
>A post using X-No-Archive: yes
>the header will be present in the post but will have changed to
>X-No-Archive: Yes
>
>This seems to be peculiar to the thrasher remailer and I have found
>the above to be true in all the tests that I have made.
>
>The Google help page states to use X-No-archive: yes (weird, but am
>trying this in this post for the first time) and the use of
>X-No-Archive: yes which I can't find a way to do through thrasher,
>although its metamorphosed form X-No-Archive: Yes appears to do as
>supposed.
>
>I hope that these observations are useful.


More than "useful". I tried what you suggested, and it worked every
time. I repeated the same with random remailers and found that Panta
behaves in exactly the same way as Thrasher. As far as I know, we are
the only remailers running this version of Reliable. That should make
it quite easy to isolate and rectify the problem.

Once again, thanks for the time and effort you have put in. A cheque
is in the mail...

- --
Cheers,
Thrasher.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQEVAwUBQlXoSGe9vBuCUlx7AQE8PQf9E2vhhcbE
FBr54eNOZXoDDMOnxa5NdOj0
+GmfvWlMk2WsAv06LJEGFjsHk9xF7W5vWiee7cXI
rl5zOCmyC19iM/FV6L1uN/7n
uUWQGss0bXondJ8l/ CQVN32zP3e96lfQ27PE9GrP0gp6Y4lgiL7ZnutLo
KxK1E69
+8utkt6m8NZQgphVOuuwVhhKrZ2nEGMCr5tPh5T+
Svu0e2aV+yls51MNy+TUkluU
/ 2gtFKZNGJfKDLDrM8NJMPVm+hzythM0uAR0ry2mn
1rKS6w8O6LDn8V+70wTJGwe
hWXbBNYQwHggvptDQQ/NDCcqQxcm5Cpe2K9k9hNOKaGAuv/gMSgqaQ==
=I4v0
-----END PGP SIGNATURE-----

panta-admin

2005-04-08, 7:45 am

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi !

>behaves in exactly the same way as Thrasher. As far as I know, we are
>the only remailers running this version of Reliable. That should make
>it quite easy to isolate and rectify the problem.


Mea culpa !

A missing lcase() was the culprit, just compiling new version.
Should be in the downloads section very soon.

Thanks for finding the bug,
Cheers,
panta-admin

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQA/AwUBQlZgw9crLUqmoDLIEQLpKQCfS/m+fjeFIv0Un4QQeO3xU7UydswAoJhg
z8BxrNTvzGh0dbmgHLrihPLz
=Es9Q
-----END PGP SIGNATURE-----
~~~~~~~~~~~~~~~~~~~~~
This message was posted via one or more anonymous remailing services.
The original sender is unknown. Any address shown in the From header
is unverified. You need a valid hashcash token to post to groups other
than alt.test and alt.anonymous.messages. Visit www.panta-rhei.dyndns.org
for abuse and hashcash info.



BiKiKii Admin

2005-04-08, 7:45 am

-----BEGIN PGP SIGNED MESSAGE-----

On Fri, 08 Apr 2005, Thrasher Admin wrote:
>=====BEGIN PGP SIGNED MESSAGE=====
>Signature: 0x82525C7B Thrasher Admin
>Date: Thu Apr 07 21:11:20 2005
>Status: OK (Invalid)
>
>On 8 Apr 2005 07:29:03 -0000, Thrasher Remailer wrote:
>
>
>More than "useful". I tried what you suggested, and it worked every
>time. I repeated the same with random remailers and found that Panta
>behaves in exactly the same way as Thrasher. As far as I know, we are
>the only remailers running this version of Reliable. That should make
>it quite easy to isolate and rectify the problem.
>
>Once again, thanks for the time and effort you have put in. A cheque
>is in the mail...
>
>--
>Cheers,
>Thrasher.
>=====END PGP SIGNATURE=====



Fix for two lines in Panta's modified Process.bas


HashHeaders:

[. . .]

'***** panta-admin *****
'read hashcash and x-no-archive state
Case "x-hashcash"
RemH.Hashcash = c
Case "x-no-archive"
'If c = "yes" Then RemH.Xnoarchive = True
If LCase(c) = "yes" Then RemH.Xnoarchive = True
'***** panta-admin *****


Private Function BuildHash(RemH As RemHType) As String

[. . .]


'***** panta-admin *****
' we need to set the X-NoArchive flag manually as we have removed the header
'If RemH.Xnoarchive = True Then BuildHash = BuildHash + "X-No-Archive: Yes" + vbCrLf
If RemH.Xnoarchive = True Then BuildHash = BuildHash + "X-No-Archive: yes" + vbCrLf
'***** panta-admin *****


Ciao!

BiKiKii

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQEVAwUBQlZmv/Rwi/ QFFzi5AQGrywf+Ir4yej19xCXO2tCkOGjGg5nqz2
D2Xwwi
eu3MJZQSbOTdl1godeFzUpdd0E77OOYHS5D+hUp6
pCtdPGVjoeuFHfs3hi/tCf0b
NQjGPpe7+OpJJPFfxvRe1E4Kq4iUtjMkNweou5Lb
ON2l7Ks8vJfry2HwFQx0npTt
UwcveifrPIY3hmS3Ovuq0cZQc3ArM4OXBFs69ur+
b+cdRNOe9xS387EV9F4UDxeN
oRODqCyrOu7DGRk0OYo/cwTnhU6qE7/fiv02Umhf4aG5SNUt1B0FCu1K2DseJBx/
BYsrNV5fLikyqpdPosiacee6psCXXkbSb9dtb7jj
QffcmryBc9n5ng==
=vgUC
-----END PGP SIGNATURE-----

panta-admin

2005-04-08, 7:45 am

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi !

New version is at
http://www.panta-rhei.dyndns.org/downloads

Let me quickly explain why this problem occured in the Panta Reliable mod:

I have implemented an easy way for the operator to request hashcash tokens
for news posts.
In the early days I tried several ways of what to do if no valid hashcash
is present, and one of them was to force x-no-archive to yes.
For this to work I had to read the original header (if present) and
converted it to bool true or false.
After processing I added the header again, and set it to yes if no hashcash
was present.

So basically the reliable mod will rewrite the x-no-archive header on all
news posts.

The error was in the header parsing, here:
If c = "yes" Then RemH.Xnoarchive = True

Which should have been something like:
If Trim(LCase(c)) = "yes" Then RemH.Xnoarchive = True

This is in the new version, which now runs on Panta Rhei.

Thrasher Admin, sorry for the cock-up, hope you are happy to get the new
version.
Thanks to the original poster for finding this,
Cheers,
panta-admin

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQA/AwUBQlZnvdcrLUqmoDLIEQLeKwCeKBzFzc+9U/jn3ah1Wu4gqMNNApMAoIOQ
zwbPUfhYOGMFvkSVZ3Uujtrp
=AchD
-----END PGP SIGNATURE-----
~~~~~~~~~~~~~~~~~~~~~
This message was posted via one or more anonymous remailing services.
The original sender is unknown. Any address shown in the From header
is unverified. You need a valid hashcash token to post to groups other
than alt.test and alt.anonymous.messages. Visit www.panta-rhei.dyndns.org
for abuse and hashcash info.



Anonymous via Panta Rhei

2005-04-08, 5:45 pm

In article <QS10JEJI38450.5054398148@anonymous.poster>, panta-admin wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>Hi !
>
>
>Mea culpa !
>
>A missing lcase() was the culprit, just compiling new version.
>Should be in the downloads section very soon.
>



Yo PA! would you *please* make the source available for your modified
Reliable???? I'd *REALLY* like to use it but I am just paranoid enough
that I insist on compiling from source after I have examined it
thouroughly.



~~~~~~~~~~~~~~~~~~~~~
This message was posted via one or more anonymous remailing services.
The original sender is unknown. Any address shown in the From header
is unverified. You need a valid hashcash token to post to groups other
than alt.test and alt.anonymous.messages. Visit www.panta-rhei.dyndns.org
for abuse and hashcash info.




Thrasher Admin

2005-04-08, 5:45 pm

-----BEGIN PGP SIGNED MESSAGE-----

On 8 Apr 2005 11:23:44 -0000, panta-admin
<anonymous@panta-rhei.dyndns.org> wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>Hi !
>
>New version is at
>http://www.panta-rhei.dyndns.org/downloads
>
>Let me quickly explain why this problem occured in the Panta
>Reliable mod:
>
>I have implemented an easy way for the operator to request hashcash
>tokens for news posts.
>In the early days I tried several ways of what to do if no valid
>hashcash is present, and one of them was to force x-no-archive to
>yes.
>For this to work I had to read the original header (if present) and
>converted it to bool true or false.
>After processing I added the header again, and set it to yes if no
>hashcash was present.
>
>So basically the reliable mod will rewrite the x-no-archive header
>on all news posts.
>
>The error was in the header parsing, here:
>If c = "yes" Then RemH.Xnoarchive = True
>
>Which should have been something like:
>If Trim(LCase(c)) = "yes" Then RemH.Xnoarchive = True
>
>This is in the new version, which now runs on Panta Rhei.
>
>Thrasher Admin, sorry for the cock-up, hope you are happy to get the
>new version.


No worries. Thanks for the prompt fix.

>Thanks to the original poster for finding this,
>Cheers,


Agreed.

- --
Cheers,
Thrasher.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQEVAwUBQlaZJme9vBuCUlx7AQGBDQf/YbqiBNB+6AeV1zlVCjKIi7SRghVyXdw6
obGIT3vH68jKRbw2PMTYDtPuJPEcjFx9AXJSx8dh
k8nejxoItAtA1KpwYD6q0rk3
38WqbD16SQnJmL3MC1NQTm1JGJBwhXw6so9sLMNG
TR2VcEyQWTpAK/mFhQCWIHs3
jsA0FVFJEVnZZDFzCowi5X3iq+wELmVgmLH6l/kC3ljNp/rI93xDZ1rCD9zB1wA/
vH+xtbN/ PQpbh6ageck55LdgwEPkwpvM9nuYYxH9RT2HHe5S
RWURiaWdGCDdvhyt
O7gR0AkAZkcWWJt9dWDLnqQyVguAwYa/+d0pyz57/LeVjSRgQ9wNuQ==
=5INy
-----END PGP SIGNATURE-----

Thrasher Remailer

2005-04-09, 8:45 pm

On Fri, 08 Apr 2005, Anonymous via Panta Rhei
<anonymous@panta-rhei.dyndns.org> wrote:
> In article <QS10JEJI38450.5054398148@anonymous.poster>, panta-admin wrote:
>
>
> Yo PA! would you *please* make the source available for your modified
> Reliable???? I'd *REALLY* like to use it but I am just paranoid enough
> that I insist on compiling from source after I have examined it
> thouroughly.
>


By not providing the source code to his modified version of
Reliable, he's violating the GPL which Reliable is released
under.

I know that panta admin has the best intentions. He's probably
waiting to make sure his modifications are stable or whatever.
However by not providing the source to those who want it, he is
still violating the license regardless of his intentions.

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com