Serious Abuse of Remailer
Web Server forum
Back To The Forum Home!Search!Private Messaging System

Web Server Talk Web Server Talk > WebserverTalk Community > Anonymous Servers > Serious Abuse of Remailer




Pages (2): [1] 2 »   Last Thread   Next Thread Next
  Show Printable Version Email this Page Subscribe to this Thread      Post New Thread    Post A Reply      

    Serious Abuse of Remailer  
lookingforadvise@urgentquestions.org


View Ip Address Report This Message To A Moderator Edit/Delete Message


 
10-28-06 06:17 PM

Let's assume you get back an autoreply mail forwarding you an email which we
nt originally through your remailer and was sent back to you because the rec
eiver had an autoresponder activated.
The content of the mail having been sent and bouncing back to your remailer 
is a bomb threat.
How would you remops handle such a situtation ?






[ Post a follow-up to this message ]



    Re: Serious Abuse of Remailer  
Thomas J. Boschloo


View Ip Address Report This Message To A Moderator Edit/Delete Message


 
10-28-06 06:17 PM

-----BEGIN PGP SIGNED MESSAGE-----

lookingforadvise@urgentquestions.org schreef:
> Let's assume you get back an autoreply mail forwarding you an email which 
went originally through your remailer and was sent back to you because the r
eceiver had an autoresponder activated.
> The content of the mail having been sent and bouncing back to your remaile
r is a bomb threat.
> How would you remops handle such a situtation ?

Three questions:
1) Do you allow custom from headers at your exit?
2) Will the bomb explode with your remailer's latency and uptime taken
into account?
3) Does the bombing note say something among the lines of "I HATE
REMAILERS AND IF YOU DON'T TRACE ME I WILL BLAST YOU AND YOUR FRIENDS
INTO LITTLE TINY PIECES AND THEN JUMP ON THEM UNTIL YOU HAVE HAD ENOUGH!"

Do you give in to such demands? If you do you shouldn't be a remop
IMNSHO. You do the traffic part. Not the content of that traffic. You
got the bomb threat to the recipient, thus you have done your job. It is
not like you send armed nuclear warheads or sharp exploding pencils
through your remailer (like the postal services could). We don't need
starwars to defend our mailboxes from someones radioactive tirades. And
the drugs always get to the user. Even in prison. Remember that well.
There is no place on earth that is safe from terror. With or without
remailers.

hi,
Thomas
- --
George W. Bush lets us know he would let Dick Cheney torture anyone to
learn about new terror plots. But demand generates supply!
So in order to torture more we need to get more people to dislike and
attack America. I can tell this is a winning strategy.
http://news.bbc.co.uk/2/hi/americas/6093298.stm
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

 iQB5AwUBRUNxJQEP2l8iXKAJAQG5iwMdGYC5AdC6
Hps3ZX+rx+mQEz8c7/VHosIx
WGsIpHbXF44Lx+B2URxD4zj4Sj66D8qsfWOhB/zJzHrzWik8eCPTbnBIW10i3+pc
uPp7j1YSYPAzH6Pr/LS8bdi/vvMvnzQkvYCyIw==
=w5/J
-----END PGP SIGNATURE-----





[ Post a follow-up to this message ]



    Re: Serious Abuse of Remailer  
lookingforadvise@urgentquestions.org


View Ip Address Report This Message To A Moderator Edit/Delete Message


 
10-28-06 06:17 PM

-----BEGIN PGP SIGNED MESSAGE-----

lookingforadvise@urgentquestions.org schreef:
> Let's assume you get back an autoreply mail forwarding you an email which 
went originally through your remailer and was sent back to you because the r
eceiver had an autoresponder activated.
> The content of the mail having been sent and bouncing back to your remaile
r is a bomb threat.
> How would you remops handle such a situtation ?

Three questions:
1) Do you allow custom from headers at your exit?
2) Will the bomb explode with your remailer's latency and uptime taken
into account?
3) Does the bombing note say something among the lines of "I HATE
REMAILERS AND IF YOU DON'T TRACE ME I WILL BLAST YOU AND YOUR FRIENDS
INTO LITTLE TINY PIECES AND THEN JUMP ON THEM UNTIL YOU HAVE HAD ENOUGH!"

Do you give in to such demands? If you do you shouldn't be a remop
IMNSHO. You do the traffic part. Not the content of that traffic. You
got the bomb threat to the recipient, thus you have done your job. It is
not like you send armed nuclear warheads or sharp exploding pencils
through your remailer (like the postal services could). We don't need
starwars to defend our mailboxes from someones radioactive tirades. And
the drugs always get to the user. Even in prison. Remember that well.
There is no place on earth that is safe from terror. With or without
remailers.

hi,
Thomas
- --
George W. Bush lets us know he would let Dick Cheney torture anyone to
learn about new terror plots. But demand generates supply!
So in order to torture more we need to get more people to dislike and
attack America. I can tell this is a winning strategy.
http://news.bbc.co.uk/2/hi/americas/6093298.stm
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

 iQB5AwUBRUNxJQEP2l8iXKAJAQG5iwMdGYC5AdC6
Hps3ZX+rx+mQEz8c7/VHosIx
WGsIpHbXF44Lx+B2URxD4zj4Sj66D8qsfWOhB/zJzHrzWik8eCPTbnBIW10i3+pc
uPp7j1YSYPAzH6Pr/LS8bdi/vvMvnzQkvYCyIw==
=w5/J
-----END PGP SIGNATURE-----

The bomb threat was sent to the US airport of the City of Columbia Missouri 
and the email had the following text which bounced back to the remailer due 
to the autoresponder:

Subject: 	Re: Warning (Absence from the office)


Autoresponder reply which went back to the remailers bounce email address:
----------------------------------------------------------------------------
-

I will be out of the office on Friday, October 27, and returning Monday, Oct
ober 30, 2006.  If you need assistance before I return, feel free to contact
 the airport administration office at Ph# 573-442-9770.

 ________________________________________
____________________


Original bomb threat message sent to KAF@GoColumbiaMO.com:
----------------------------------------------------------

Tell ZOG police-



A BOMB AT THE COLUMBIA REGIONAL  AIRPORT IS SET TO EXPLODE AT A FIXED TIME.



IT ALSO HAS AN AH DEVICE ON A 2ND CIRCUIT.

 ________________________________________
_________


The problem is that the person to which the bomb threat was sent through the
 remailer obviously is out of the office. That means nobody could react on i
t, if this is a real threat and not a fake one. What if it is a real threat 
and the bomb explodes somet
imes and a lot of innocent people die or will be injured ?






[ Post a follow-up to this message ]



    Re: Serious Abuse of Remailer  
Thomas J. Boschloo


View Ip Address Report This Message To A Moderator Edit/Delete Message


 
10-28-06 06:17 PM

-----BEGIN PGP SIGNED MESSAGE-----

lookingforadvise@urgentquestions.org schreef:
>
> The bomb threat was sent to the US airport of the City of Columbia Missour
i and the email had the following text which bounced back to the remailer du
e to the autoresponder:
>
> Subject: 	Re: Warning (Absence from the office)
>
>
> Autoresponder reply which went back to the remailers bounce email address:
> --------------------------------------------------------------------------
---
>
> I will be out of the office on Friday, October 27, and returning Monday, October 3
0, 2006.  If you need assistance before I return, feel free to contact the airport a
dministration office at Ph# 573-442-9770.

Well, let's hope the bomb doesn't explode until Monday then. There is
not a lot you can do but call them and ask them if they want the message.

>  ________________________________________
____________________
>
>
> Original bomb threat message sent to KAF@GoColumbiaMO.com:
> ----------------------------------------------------------
>
> Tell ZOG police-
>
>
>
> A BOMB AT THE COLUMBIA REGIONAL  AIRPORT IS SET TO EXPLODE AT A FIXED TIME
.
>
>
>
> IT ALSO HAS AN AH DEVICE ON A 2ND CIRCUIT.
>
>  ________________________________________
_________
>
>
> The problem is that the person to which the bomb threat was sent through the remai
ler obviously is out of the office. That means nobody could react on it, if this is 
a real threat and not a fake one. What if it is a real threat and the bomb explodes 
som
etimes and a lot of innocent people die or will be injured ?

It is not your problem. By reading this message it has become your
problem, but when talking about remailers it is the problem of the
sender and the receiver not taking into account every possibility. If
you are lucky the bomber will read this message and defuse his bomb. Or
the US airport security guys are smart enough to scan all incoming mail
for threats and forward them to a special 24/7 terror alert department.
Again, it is not a normal thing a remop should worry about.

Don't shoot the messenger.

Frog-Admin would have made sure the e-mail was delivered to 'KAF', even
if he had to ride there by bicycle. A remop like Alex de Joode would
have missed the message to this group because the term 'dizum' was not
in the header. Panta Rhei would go down because of a power failure and
deliver the message too late. Eelbash Admin would have monitored and
mangled the message and be in the problem you are in now.

Thomas
- --
George W. Bush lets us know he would let Dick Cheney torture anyone to
learn about new terror plots. But demand generates supply!
So in order to torture more we need to get more people to dislike and
attack America. I can tell this is a winning strategy.
http://news.bbc.co.uk/2/hi/americas/6093298.stm
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

 iQB5AwUBRUOAKQEP2l8iXKAJAQEW9AMfUP5Ic4rN
8zv4OMSIFxoOc9KflIdF0o4m
ixv/ vp9GqZXzqLNICHRYLUf8HvcSYlOyfxJijYs7CJZn
fIwrQU3BP8Yw4tyMPKCX
 4r8HLpcotj1kidzCtO9fVyPBOwlWGO7QAiWz1Q==

=Z3D0
-----END PGP SIGNATURE-----





[ Post a follow-up to this message ]



    Re: Serious Abuse of Remailer  
lookingforadvise@urgentquestions.org


View Ip Address Report This Message To A Moderator Edit/Delete Message


 
10-28-06 06:17 PM

<<<snip>>>

It is not your problem. By reading this message it has become your
problem, but when talking about remailers it is the problem of the
sender and the receiver not taking into account Svery possibility. If
you are lucky the bomber will read this message and defuse his bomb. Or
the US airport security guys are smart enough to scan all incoming mail
for threats and forward them to a special 24/7 terror alert department.
Again, it is not a normal thing a remop should worry about.

Don't shoot the messenger.

Frog-Admin would have made sure the e-mail was delivered to 'KAF', even
if he had to ride there by bicycle.

==> This is not a choice, it might be to late.

A remop like Alex de Joode would
have missed the message to this group because the term 'dizum' was not
in the header. Panta Rhei would go down because of a power failure and
deliver the message too late.

==> this is not a choice because the meassage was already sent

Eelbash Admin would have monitored and
mangled the message and be in the problem you are in now.

==> I have not monitored in the way eelbash is doing. As explained the mail 
bounced back to due to the fact that the receiver had an autoresponder on. S
ince the sender address was the remailer sender email address it bounced bac
k to it. In normal circumst
ances bounce backs are due to several kinds of delivery failures which give 
a remops very good hints in case something goes wrong in the remailer networ
k. To ensure best possible delivery of mails send out by the remailer it can
 be quite helpful to look a
t the bounce backs. It is an exception that something bounces back due to au
toreply which was the case here.
So I came across this mail not by a regulary systematic scanning like eelbas
h is doing but by accident going throgh the bounces. I like to make that ver
y clear because I do not support the systematic scanning eelbash seems to do
. I am not interested in th
e content going through my remailer apart from the fact that I was looking a
t bounce backs to see if something goes wrong in the remailer network. This 
is quite useful and shortens the time to react on problems.

==> Now the question remains, should a remop stumbling accross such a seriou
s (in case it real and not fake) bomb threat ignore it ? May be somebody in 
US could give the police a call before it is too late (in case of real threa
t) ??? As you all lnow ther
e is no way to identify the real sender of this bomb threat because the mail
 went through the remailer network but at least such a call could avoid may 
be that innocent people die or will be injured. Nobody can judge whether it 
is a real threat but would
it be right to lay back and ignore taking the risk that something serious co
uld happen which could have been may be avoided ? Let's just keep in mind th
at human beings might be in danger and a call at the City of Columbia Police
 might avoid a desaster. Or
shall we just say we are just the postman of the bad message but we do not t
ake action because we are not responsible for content.

Thomas
- --
George W. Bush lets us know he would let Dick Cheney torture anyone to
learn about new terror plots. But demand generates supply!
So in order to torture more we need to get more people to dislike and
attack America. I can tell this is a winning strategy.
http://news.bbc.co.uk/2/hi/americas/6093298.stm
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

 iQB5AwUBRUOAKQEP2l8iXKAJAQEW9AMfUP5Ic4rN
8zv4OMSIFxoOc9KflIdF0o4m
ixv/ vp9GqZXzqLNICHRYLUf8HvcSYlOyfxJijYs7CJZn
fIwrQU3BP8Yw4tyMPKCX
 4r8HLpcotj1kidzCtO9fVyPBOwlWGO7QAiWz1Q==

=Z3D0
-----END PGP SIGNATURE-----






[ Post a follow-up to this message ]



    Re: Serious Abuse of Remailer  
Anonymous


View Ip Address Report This Message To A Moderator Edit/Delete Message


 
10-29-06 12:14 AM

lookingforadvise@urgentquestions.org wrote:

> Let's assume you get back an autoreply mail forwarding you an email which
> went originally through your remailer and was sent back to you because
> the receiver had an autoresponder activated. The content of the mail
> having been sent and bouncing back to your remailer is a bomb threat. How
> would you remops handle such a situtation ?

Simple: The remailer sends an autoreply or drops the message if it has sent
one before. Remops don't read bounces.





[ Post a follow-up to this message ]



    Re: Serious Abuse of Remailer  
Nomen Nescio


View Ip Address Report This Message To A Moderator Edit/Delete Message


 
10-29-06 12:14 AM

"lookingforadvise@urgentquestions.org" <lookingforadvise@urgentquestions.org
> wrote:

> ==> Now the question remains, should a remop stumbling accross such a
> serious (in case it real and not fake) bomb threat ignore it ?

Yes.

1. It's most probably faked
2. Airport security should find each and every bomb before it comes into
critical range. What do you think they got all the spending and laws
for?
3. The airport should have made sure that mail is read by someone even if
the original recipient is on vacation.
4. The remop should not have stumbled across this message in the first
place.

Lay back. If you manage not to give up within the first half year, the
amount of abuse decreases to a level of one or two complaint waves every
few months.






[ Post a follow-up to this message ]



    Re: Serious Abuse of Remailer  
Redwood


View Ip Address Report This Message To A Moderator Edit/Delete Message


 
10-29-06 05:14 AM

"lookingforadvise@urgentquestions.org"
<lookingforadvise@urgentquestions.org> wrote in
news:638841796638538.Post@ithinknot.net:

> <<<snip>>>
>
> It is not your problem. By reading this message it has become
> your problem, but when talking about remailers it is the problem
> of the sender and the receiver not taking into account Svery
> possibility. If
>   you are lucky the bomber will read this message and defuse his
>   bomb. Or
> the US airport security guys are smart enough to scan all
> incoming mail for threats and forward them to a special 24/7
> terror alert department. Again, it is not a normal thing a remop
> should worry about.
>
> Don't shoot the messenger.
>
> Frog-Admin would have made sure the e-mail was delivered to
> 'KAF', even if he had to ride there by bicycle.
>
> ==> This is not a choice, it might be to late.
>
> A remop like Alex de Joode would
> have missed the message to this group because the term 'dizum'
> was not in the header. Panta Rhei would go down because of a
> power failure and deliver the message too late.
>
> ==> this is not a choice because the meassage was already sent
>
>  Eelbash Admin would have monitored and
> mangled the message and be in the problem you are in now.
>
> ==> I have not monitored in the way eelbash is doing. As
> explained the mail bounced back to due to the fact that the
> receiver had an autoresponder on. Since the sender address was
> the remailer sender email address it bounced back to it. In
> normal circumstances bounce backs are due to several kinds of
> delivery failures which give a remops very good hints in case
> something goes wrong in the remailer network. To ensure best
> possible delivery of mails send out by the remailer it can be
> quite helpful to look at the bounce backs. It is an exception
> that something bounces back due to autoreply which was the case
> here. So I came across this mail not by a regulary systematic
> scanning like eelbash is doing but by accident going throgh the
> bounces. I like to make that very clear because I do not support
> the systematic scanning eelbash seems to do. I am not interested
> in the content going through my remailer apart from the fact
> that I was looking at bounce backs to see if something goes
> wrong in the remailer network. This is quite useful and shortens
> the time to react on problems.
>
> ==> Now the question remains, should a remop stumbling accross
> such a serious (in case it real and not fake) bomb threat ignore
> it ? May be somebody in US could give the police a call before
> it is too late (in case of real threat) ??? As you all lnow
> there is no way to identify the real sender of this bomb threat
> because the mail went through the remailer network but at least
> such a call could avoid may be that innocent people die or will
> be injured. Nobody can judge whether it is a real threat but
> would it be right to lay back and ignore taking the risk that
> something serious could happen which could have been may be
> avoided ? Let's just keep in mind that human beings might be in
> danger and a call at the City of Columbia Police might avoid a
> desaster. Or shall we just say we are just the postman of the
> bad message but we do not take action because we are not
> responsible for content.
>

It does not matter.  You will be contacted about it and probably
have your machine seized.  That message was delivered, the bounce
is a vacation autoreply, which means "I received your message but
won't be around to read it until I return".  So it will be read, it
will be reported, and they will investigate.


























































[ Post a follow-up to this message ]



    Re: Serious Abuse of Remailer  
Anonymous


View Ip Address Report This Message To A Moderator Edit/Delete Message


 
10-29-06 12:12 PM

Redwood <anon@comments.header> wrote:

> It does not matter.  You will be contacted about it and probably
> have your machine seized.

The FBI and CIA know how remailers work and that seizing a machine costs
much and gains nothing.





[ Post a follow-up to this message ]



    Re: Serious Abuse of Remailer  
Alex de Joode


View Ip Address Report This Message To A Moderator Edit/Delete Message


 
10-29-06 06:12 PM

Anonymous <nobody@mixmin.net> wrote:
: lookingforadvise@urgentquestions.org wrote:

: > Let's assume you get back an autoreply mail forwarding you an email whic
h
: > went originally through your remailer and was sent back to you because
: > the receiver had an autoresponder activated. The content of the mail
: > having been sent and bouncing back to your remailer is a bomb threat. Ho
w
: > would you remops handle such a situtation ?

: Simple: The remailer sends an autoreply or drops the message if it has sen
t
: one before. Remops don't read bounces.

I'm a bit at a loss here.

Dizum is configured to have all mail sent out as 'nobody@dizum.com', all
incomming mail sent to nobody@dizum.com is collected by mrss Dev & Null.

I see absolutely no reason to read mail or to fix user problems, other
then those due to my system malfunctioning. The system is there, it can
be used, it can be abused, it may work or it may not work. There should be
a best effort by the remop to have the system work 'as advertised'. Doing
more might land you in the hot zone....

Cheers,
-AJ-





[ Post a follow-up to this message ]



    Sponsored Links  




 





   All times are GMT. The time now is 05:37 AM.      Post New Thread    Post A Reply      
Pages (2): [1] 2 »   Last Thread   Next Thread Next


Most Popular forums 

Forum Jump:
Rate This Thread:

Forum Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is OFF
vB code is ON
Smilies are ON
[IMG] code is OFF
 
Medical and Health forum | Computer Games Reviews | Graphics design forum

Back To The Top
Home | Usercp | Faq | Register