[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (fwd) Possible compromise of anon.penet.fi



Roy wrote about the attack on annon.penet.fi:
>
>I think this might be a forked attack... trying to flood penet with
>traffic, and also outing people who have used penet for anonymous
>traffic previously.  This is a good argument against maintaining a
>double-blind database (and in favor of systems like soda.berkeley.edu's
>remailer with its 'response block' strategy).
>

I am not sure I understand the outing part of the attack. If you have a PW
set for your anon ID then how can someone else fake your mail? If you use
no PW, then you need to wake up anyway. Perhaps outing would be what it
takes.

-- Lucky Green <[email protected]>  PGP public key by finger