Anonymous Servers - Mr Boschloo, thanks. One more help please?

Author

Mr Boschloo, thanks. One more help please?

Randy Kehrt

2007-12-18, 1:15 pm

To Thomas Boschloo, thank you so much. I followed the link you gave
and installed PGP and tested in alt.test. It works.

Since you were so helpful and knowledgable, can you explain what is
below, please? I cannot figure it out. I found it at :
http://groups.google.com/group/rec....e765d332713dc56

Thanks.

Randy

Path:
gnilink.net!spamkiller2.gnilink.net!postnews.google.com!i12g2000prf.googleg
roups.com!not-for-mail
From: samsloan <samhsloan@gmail.com>
Newsgroups: rec.games.chess.misc, rec.games.chess.politics
Subject: Re: Kiddie XXXXing,, can trip coordinator make contact?
Date: Tue, 18 Dec 2007 02:17:05 -0800 (PST)
Organization: http://groups.google.com
Lines: 37
Message-ID:
<7b4846c5-f3b3-4ebb-ad28-e2a482ff8cf8@i12g2000prf.googlegroups.com>
References:
<87ab9477-c139-43fa-95f6-6fd89029b3c6@w28g2007hsf.googlegroups.com>
<bd535f36c176e4fad3fcafe0149b4390@msgid.frell.theremailer.net>
NNTP-Posting-Host: 69.120.149.154
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Trace: posting.google.com 1197973025 14665 127.0.0.1 (18 Dec 2007
10:17:05 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Tue, 18 Dec 2007 10:17:05 +0000 (UTC)
Complaints-To: groups-abuse@google.com
Injection-Info: i12g2000prf.googlegroups.com; posting-host=69.120.149.154;
posting- account=h0BplggAAACbakJwttbpVF72VZ8jVCAq

User-Agent: G2/1.0
X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11,gzip(gfe),gzip(gfe)
Xref: gnilink.net rec.games.chess.misc:319017
rec.games.chess.politics:388505

Path:
g2news1.google.com!news3.google.com!proxad.net!feeder1-2.proxad.net!news.mi
xmin.net!news.bananasplit.info!mail2news-x3!mail2news-x2!mail2news
Comments: This message did not originate from the Sender address above.
It was remailed automatically by anonymizing remailer software.
Please report problems or inappropriate use to the
remailer administrator at <ab...@frell.theremailer.net>.
Identifying the real sender is technically impossible.
Subject: Kiddie XXXXing,, can trip coordinator make contact?
X-No-Archive: yes
References:
<87ab9477-c139-43fa-95f6-6fd89029b3c6@w28g2007hsf.googlegroups.com>
Newsgroups:
rec.games.chess.misc,rec.games.chess.politics,alt.sex.pedophilia.girls
From: Marine Sergeant Adolphus H. Kiddie-XXXXer, Jr. (retd.)
<toontu...@journalist.com>
Message-ID: <bd535f36c176e4fad3fcafe0149b4390@msgid.frell.theremailer.net>
Precedence: anon
Date: Tue, 18 Dec 2007 10:01:43 +0100
X-Abuse-Contact: ab...@bananasplit.info
Organization: Bananasplit - Mail2News

I read in the NYT that good advise
on how to child XXXX, but stay out
of jail is at rec.games.chess.misc
or may be uscf (US child XXXXers
association ?) Can you reccomend
a site where I'd get information ?
I like traveling . Lately I do not
need little boys / blacks . Little
girls--whitey or chinky poontang .
If I cannot get to the site, reply
with the email of a coordinator .
##
Adolphus H. Kiddie-XXXXer

Randy Kehrt

2007-12-18, 7:11 pm

To All,

I did not send the above message.

Randy Kehrt

"Randy Kehrt" <rankeh@bellsouth.net> wrote in message
news:44f8df1a21d27b6d9c0b3d351d66fabc@ny
mkey.com...
> To Thomas Boschloo, thank you so much. I followed the link you gave
> and installed PGP and tested in alt.test. It works.
>
> Since you were so helpful and knowledgable, can you explain what is
> below, please? I cannot figure it out. I found it at :
> http://groups.google.com/group/rec....e765d332713dc56
>
> Thanks.
>
> Randy
>
>
>
> Path:
> gnilink.net!spamkiller2.gnilink.net!postnews.google.com!i12g2000prf.googleg
> roups.com!not-for-mail
> From: samsloan <samhsloan@gmail.com>
> Newsgroups: rec.games.chess.misc, rec.games.chess.politics
> Subject: Re: Kiddie XXXXing,, can trip coordinator make contact?
> Date: Tue, 18 Dec 2007 02:17:05 -0800 (PST)
> Organization: http://groups.google.com
> Lines: 37
> Message-ID:
> <7b4846c5-f3b3-4ebb-ad28-e2a482ff8cf8@i12g2000prf.googlegroups.com>
> References:
> <87ab9477-c139-43fa-95f6-6fd89029b3c6@w28g2007hsf.googlegroups.com>
> <bd535f36c176e4fad3fcafe0149b4390@msgid.frell.theremailer.net>
> NNTP-Posting-Host: 69.120.149.154
> Mime-Version: 1.0
> Content-Type: text/plain; charset=ISO-8859-1
> Content-Transfer-Encoding: 7bit
> X-Trace: posting.google.com 1197973025 14665 127.0.0.1 (18 Dec 2007
> 10:17:05 GMT)
> X-Complaints-To: groups-abuse@google.com
> NNTP-Posting-Date: Tue, 18 Dec 2007 10:17:05 +0000 (UTC)
> Complaints-To: groups-abuse@google.com
> Injection-Info: i12g2000prf.googlegroups.com; posting-host=69.120.149.154;
> posting- account=h0BplggAAACbakJwttbpVF72VZ8jVCAq

> User-Agent: G2/1.0
> X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
> rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11,gzip(gfe),gzip(gfe)
> Xref: gnilink.net rec.games.chess.misc:319017
> rec.games.chess.politics:388505
>
> Path:
> g2news1.google.com!news3.google.com!proxad.net!feeder1-2.proxad.net!news.mi
> xmin.net!news.bananasplit.info!mail2news-x3!mail2news-x2!mail2news
> Comments: This message did not originate from the Sender address above.
> It was remailed automatically by anonymizing remailer software.
> Please report problems or inappropriate use to the
> remailer administrator at <ab...@frell.theremailer.net>.
> Identifying the real sender is technically impossible.
> Subject: Kiddie XXXXing,, can trip coordinator make contact?
> X-No-Archive: yes
> References:
> <87ab9477-c139-43fa-95f6-6fd89029b3c6@w28g2007hsf.googlegroups.com>
> Newsgroups:
> rec.games.chess.misc,rec.games.chess.politics,alt.sex.pedophilia.girls
> From: Marine Sergeant Adolphus H. Kiddie-XXXXer, Jr. (retd.)
> <toontu...@journalist.com>
> Message-ID: <bd535f36c176e4fad3fcafe0149b4390@msgid.frell.theremailer.net>
> Precedence: anon
> Date: Tue, 18 Dec 2007 10:01:43 +0100
> X-Abuse-Contact: ab...@bananasplit.info
> Organization: Bananasplit - Mail2News
>
> I read in the NYT that good advise
> on how to child XXXX, but stay out
> of jail is at rec.games.chess.misc
> or may be uscf (US child XXXXers
> association ?) Can you reccomend
> a site where I'd get information ?
> I like traveling . Lately I do not
> need little boys / blacks . Little
> girls--whitey or chinky poontang .
> If I cannot get to the site, reply
> with the email of a coordinator .
> ##
> Adolphus H. Kiddie-XXXXer
>

Thomas J. Boschloo

2007-12-18, 7:11 pm

-----BEGIN PGP SIGNED MESSAGE-----

That is a big relief :-)

About the only thing different from your headers is the path header,
which originates at dizum. It was probably directly posted to its
mail2news gateway. Maybe it is time to draft a PGP key so we know your
posts are not forgeries :-/ The attitude of some of this group's
regulars is something that would make Jesus cry.

Thomas

Randy Kehrt wrote:[vbcol=seagreen]
> To All,
>
> I did not send the above message.
>
> Randy Kehrt
>
>
> "Randy Kehrt" <rankeh@bellsouth.net> wrote in message
> news:44f8df1a21d27b6d9c0b3d351d66fabc@ny
mkey.com...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQB5AwUBR2hAfAEP2l8iXKAJAQFRtgMeI+VvOCSL
epfSo0GDSsGxM1O/Pi3ynQwy
7W9PdzAGKhmor25O0ObxghS2jlwADw+IV5ONHFw3
L/JjRH1O5Ss2TZwDY11kLe89
b0nRMt8p4BnGmofvpQtGKXbQXbuHEkn/mrF29w==
=dj1Z
-----END PGP SIGNATURE-----

Anonymous

2007-12-18, 7:11 pm

On Tue, 18 Dec 2007, Randy Kehrt <rankeh@bellsouth.net> wrote:
>
>To All,
>
>I did not send the above message.

You must mean the below message. There was no above message. Conversing
with Tommy Boschloo often produces a great confusion. He frequently
confuses below and above. He claimed that he commited suicide below but
still survived above. His MO is to forge people after he talks at them.

Everyone understood you did not write the obscene message, all you did
was draw the attention to what you found in google. Probably Boschloo
forwarded you something misleading. The answer to your question is
there is no significance to what you found.
[vbcol=seagreen]
>
>Randy Kehrt
>
>"Randy Kehrt" <rankeh@bellsouth.net> wrote in message
>news:asD8k.23091$vx2.12813@bignews8.bellsouth.net...

local host

2007-12-19, 1:16 am

"Anonymous" <nobody@remailer.paranoici.org> wrote in message
news:eb80b7255955c8f386632db7869b3bcc@re
mailer.paranoici.org...
> On Tue, 18 Dec 2007, Randy Kehrt <rankeh@bellsouth.net> wrote:
>
> You must mean the below message. There was no above message. Conversing
> with Tommy Boschloo often produces a great confusion. He frequently
> confuses below and above. He claimed that he commited suicide below but
> still survived above. His MO is to forge people after he talks at them.
>
> Everyone understood you did not write the obscene message, all you did
> was draw the attention to what you found in google. Probably Boschloo
> forwarded you something misleading. The answer to your question is
> there is no significance to what you found.

Frogadmin knows the answer, He was the bestist remailer ever!

Anonymous

2007-12-19, 1:16 am

On Tue, 18 Dec 2007 22:49:48 +0100, "Thomas J. Boschloo"
<nospam@hccnet.nl> wrote:

>That is a big relief :-)
>
>About the only thing different from your headers is the path
header,
>which originates at dizum. It was probably directly posted to
its
>mail2news gateway. Maybe it is time to draft a PGP key so we
know your
>posts are not forgeries :-/ The attitude of some of this group's
>regulars is something that would make Jesus cry.
>
>Thomas

Hmmm. That new remailer he used - nymkey has an interesting conf
file...

<snip>

$remailer{"nymkey"} = "<mixmaster@nymkey.com> cpunk max mix pgp
pgponly repgp remix latent hash cut test ekx inflt50 rhop5 reord
post";

The following header lines will be filtered:
/^Sender:/
/^X-Sender:/
/^Resent-/
/^Approved:/
/^Errors-To:/
/^Message-ID:/
/^Comments: Authenticated sender is/
/^Path:/
/^Received:/
/^Control: rmgroup/ => delete message
/^Control: newgroup/ => delete message
/^Control: sendsys/ => delete message
/^Control: checkgroups/ => delete message
/^Control: version/ => delete message
/^Newsgroups:.*,.*,.*,.*,.*,/ => delete message

<snip>

Not many items filtered. Interesting.

Cyberiade.it Anonymous Remailer

2007-12-19, 1:16 am

On Tue, 18 Dec 2007 14:50:13 -0500, "Randy Kehrt"
<rankeh@bellsouth.net> wrote:

>To All,
>
>I did not send the above message.
>
>Randy Kehrt

Yeah. Right.

Randy Kehrt

2007-12-19, 7:15 am

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

To All,

That message did not come from me. This message does as it is clear
signed. Feel free to call me in Louisville and I can
confirm my PGP key number.

Randy Kehrt
Louisville,KY
USA

"Cyberiade.it Anonymous Remailer" <anonymous@remailer.cyberiade.it> wrote
in message news:815bb4eac7783349ce393f9be3b97dc8@re
mailer.cyberiade.it...
> On Tue, 18 Dec 2007 14:50:13 -0500, "Randy Kehrt"
> <rankeh@bellsouth.net> wrote:
>
>
> Yeah. Right.

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wsBVAwUBR2jwYvrE65bKenDGAQiZ9gf7BeGTx715
0o9148sFJ96r8TYnZlloly9l
cdKBbpJvAbDbTBJISZs5VI+yZAqETDQwn+WKZgDL
ntKrlNmd/+m9v8r9c7z2E//w
VxN8zxv2qL1VQIUWXfaOPFTnTxMTNP6uQftXkfG6
NTLQvbCYCcwfBp8PcECh3PIr
zaP7LcC5In4p1tEC4+VMC0KtmkmULlJIPdaRgwh+
ll728/74Ktv/rmD1LRPwqQ4A
zGz0hbnaiQmtBLfZKyCPwFOFkA5I/dSAKyJTOxjr20lWJ+MQCjTWsvakCyjC9/ps
UJTm5tN9Y3yNTE83TGEZhuVmOuGsjwQ5CVfrEtvk
m+6EDcYyWkIP7g==
=q+JH
-----END PGP SIGNATURE-----

Thomas J. Boschloo

2007-12-19, 7:15 am

-----BEGIN PGP SIGNED MESSAGE-----

Anonymous wrote:
> On Tue, 18 Dec 2007 22:49:48 +0100, "Thomas J. Boschloo"
> <nospam@hccnet.nl> wrote:
>
> header,
> its
> know your
>
> Hmmm. That new remailer he used - nymkey has an interesting conf
> file...

He used nymkey? How can you tell? You know something we do not?

I say he posted to the mail2news directly. Proof me wrong.

At least Randy has a PGP key now so it will not happen again. Any post
from Randy that is not from his ISP or signed by him is a forgery.

You think nymkey is *yet* another vile incarnation of the Eelbash remailer?

Thomas
- --
A society with suicide bombers
is a polite society
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQB5AwUBR2kNrwEP2l8iXKAJAQHCVgMfdcspT5Rl
Mqqxa/GaXUjw0gL+ujU/wXSV
QN1zE7EazrppOnCY/ xHVEhznZOS877LQ53Z6O0lhxkxJXG3JpU3XkLTsF
U/5Q1wk
dW0Kk20kUp1s7EsF4/B7GG9gW3FjZ6352Xz/3w==
=o9zV
-----END PGP SIGNATURE-----

Anonymous

2007-12-20, 1:16 am

On Wed, 19 Dec 2007 13:25:19 +0100, "Thomas J. Boschloo"
<nospam@hccnet.nl> wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>
>Anonymous wrote:
group's[vbcol=seagreen]
conf[vbcol=seagreen]
>
>He used nymkey? How can you tell? You know something we do not?

Look at the message id:

Path:
****.*
**!feeder.erje.net!zen.net.uk!dedekind.zen.co.uk!newsfeed.hal-
mli.net!feeder1.hal-mli.net!news.alt.net!news.dizum.com!sewer-
output!mail2news
Subject: Mr Boschloo, thanks. One more help please?
Reply-To: "Randy Kehrt" <rankeh@bellsouth.net>
From: "Randy Kehrt" <rankeh@bellsouth.net>
Newsgroups: alt.privacy.anon-server
X-No-Archive: yes
Organization: Home Use Only
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Windows Mail 6.0.6000.16480
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6000.16545
X-RFC2646: Format=Flowed; Original
X-Complaints-To: abuse@bellsouth.net
X-Abuse-Info: Please forward a copy of all headers for proper
handling
NNTP-Posting-Date: Tue, 18 Dec 2007 12:51:04 EST
X-Trace:
pofjmidba
ofeaohdod
bdpiflmbc
ekedmfhoj
hikkbagfl
hcbombhnm
ogdmgjgpc
lkdbkmhnc
lplkafeji
pjoomfmpc
ffbaklnbp
eclalcloiihiplhminiipoomejnhdhfmlfejfnce
hpbooakbplmeacnfkebom
Message-ID: <44f8df1a21d27b6d9c0b3d351d66fabc@nymkey.com>
Date: Tue, 18 Dec 2007 16:49:58 +0000 (UTC)
Mail-To-News-Contact: abuse@dizum.com

>
>I say he posted to the mail2news directly. Proof me wrong.

I guess it is possible that the author posted through dizum m2n
directly. That could explain all the extra outlook express
headers. Indeed, if the supposed imposter sent mail directly
to dizum's smtp, using the right software they could add any
headers they wanted, even putting in the nymkey msg id. I doubt
that the two time stamps are faked though. Also it is not
impossible that an adversary or troll could have the exact same
build of outlook express as "Randy".

I find it unlikely though.

>
>At least Randy has a PGP key now so it will not happen again.
Any post
>from Randy that is not from his ISP or signed by him is a
forgery.

Not necessarily. Think about it.

>
>You think nymkey is *yet* another vile incarnation of the
Eelbash remailer?

The remailer appears to be in Spain (according to whois), so
unless EELBASH has recently relocated - I don't think it is her.
Still, I wouldn't use it at this point in time. Too much funny
business. Look at these headers:

---------------

Sender: Anonymous <nobody@nymkey.com>
Comments: This message did not originate from the Sender address
above.
It was remailed automatically by anonymizing remailer software.
Please report problems or inappropriate use to the
remailer administrator at <admin@nymkey.com>.
Subject: Am I really, really anonymous?
From: Anonymous Sender <remailer@nospam.nymkey.com>
Comment1: Last octet of originating IP suppressed
Abuse-Info: Forward with all headers to admin@zerofreedom.net
Posting-FAQ: http://tinyurl.com/2of5h9
Message-ID: <85c7e11d04c0c2fdeb7426e954108cc2@nymkey.com>
Date: Wed, 19 Dec 2007 19:15:57 +0000 (UTC)
Newsgroups: alt.privacy.anon-server
Path:
****.*
**!news.mixmin.net!news.bananasplit.info!mail2news.mixmin.net
X-Abuse-Contact: abuse@bananasplit.info

-------------

Sender: Anonymous <nobody@nymkey.com>
Comments: This message did not originate from the Sender address
above.
It was remailed automatically by anonymizing remailer software.
Please report problems or inappropriate use to the
remailer administrator at <admin@nymkey.com>.
Subject: Re: Am I really, really anonymous?
From: Anonymous Sender <remailer@nospam.nymkey.com>
X-NNTP-Posting-Host: 69.120.149.xxx
Comment1: Last octet of originating IP suppressed
Abuse-Info: Forward with all headers to admin@zerofreedom.net
Posting-FAQ: http://tinyurl.com/2of5h9
References: <85c7e11d04c0c2fdeb7426e954108cc2@nymkey.com>
Message-ID: <6a8bc1c3451b5e1db3c074f4710c9a77@nymkey.com>
Date: Wed, 19 Dec 2007 20:56:32 +0000 (UTC)
Newsgroups: alt.privacy.anon-server
Path:
****.*
**!fee
der.er
je.net
!news2.arglkargh.de!news.bananasplit.info!mail2news.mixmin.net
X-Abuse-Contact: abuse@bananasplit.info

--------------

Thomas J. Boschloo

2007-12-20, 1:12 pm

-----BEGIN PGP SIGNED MESSAGE-----

Anonymous wrote:
> On Wed, 19 Dec 2007 13:25:19 +0100, "Thomas J. Boschloo"
> <nospam@hccnet.nl> wrote:
[snip]
>
> Look at the message id:
[snip]
> Message-ID: <44f8df1a21d27b6d9c0b3d351d66fabc@nymkey.com>

You do have a point there. That is something the remop of nymkey should
look into ;-)

[snip]
> Eelbash remailer?
>
> The remailer appears to be in Spain (according to whois), so
> unless EELBASH has recently relocated - I don't think it is her.
> Still, I wouldn't use it at this point in time. Too much funny
> business. Look at these headers:

Frog-Admin speaks French, English and Spanish (in that order). It is
good to have the old king of APA-S back. And it is good to know that he,
Eelbash Admin and someone other are bound together by some insane
consortium to make remailer posts traceable from end to end in case of
copyright law infringements. (Just like with penet.fi).

Next level reached, now the fun begins. I am all exited about it :-))
This group unfolds just like a detective novel.. you really think there
are three of them? Will you be safe if you use only remailers predating
Frog and if you use more than three hops? What if you use e.g. Italian
remailers? How do all the renegade remops know each other, coordinate
between them and make sure they're not infiltrated? What kind of
software do they use, what are its capabilities and how is it
distributed between them?

hi,
Thomas
- --
A society with suicide bombers
is a polite society
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQB5AwUBR2p+5gEP2l8iXKAJAQGpYAMfQuAuoyoY
m9f8R//nHL5Hcp9rBoXcKkon
UJbZfVM4T7xpA93XDDpgInzZiHTFGAxq+9W0oGCd
HAFAJyR8r71Ihm13g2FPBGSk
k2VNmbmJa10K/FmRY8/zVoyG+wxw/S/A9DbS4Q==
=MHEV
-----END PGP SIGNATURE-----