[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Is the list down?
> I guess that means forging a message from each of us; when I first tried
> subscribing, it wouldn't accept my subscription from mycroft.rand.org for
> my mail address of rand.org without human intervention, so the attacker
> couldn't do it from his own account without forging. I just did an
> experiment verifying that "Reply-to" is honored by Majordomo, which
> would explain why I didn't get acked for the unsubscribe on Saturday.
>
would Majordomo still have copies of these replies???
that should point the finger (hopefully)
> Cooperative anarchy works only when people can be either motivated
> or coerced into being cooperative. As the net keeps increasing
> exponentially the probability of sucking in a critical mass of loonies
> increases along with it. As with public key cryptography, it takes only
> a linear increase in loonies to seriously interfere with the exponentially
> increasing (relatively) sane population.
>
> Well... countermeasures. Majordomo could require its subscriptions signed
> with a valid public key (PGP or RIPEM) with the public key in the signed
> body, and process future transactions for that individual only if they're
> signed. That's still open to a spam attack, though, where the attacker
> can subscribe 30 variations of (say) Jim Gillogly's address with different
> public keys constructed just for that, and Gillogly wouldn't be able to
> send the right unsubscriptions.
>
increase human intervention ie a human needs to authorise unsubscribes
(or doesn't accept replys) as not all ppl use pgp or ripem
> Hurm.
>
> Jim Gillogly
> Mersday, 18 Thrimidge S.R. 1994, 16:09
Yours in SYNC. Robert Sturtz
__ __
__/// [email protected] (Ice-Fox on irc) __///
\XX/ Vice-President of Eastern Wargamers And Roleplayers Club \XX/