Full Disclosure mailing list archives
Re: Please help to spam abryson () bytefocus com.
From: Valdis.Kletnieks () vt edu
Date: Mon, 24 Jul 2006 13:54:34 -0400
On Mon, 24 Jul 2006 11:59:34 CDT, Paul Schmehl said:
What does that prove? telnet mail.40networks.com 25 Trying 64.114.199.200... Connected to mail.40networks.com. Escape character is '^]'. 220 40networks.com ESMTP Sendmail 8.13.1/8.13.1; Mon, 24 Jul 2006 09:45:17 -0700 EHLO utdallas.edu
Paul, Paul, Paul... You *really* need to pay attention. Yes, you can do the whole telnet thing. That wasn't what she said. What she *said* was that *if* I were to mail her a large random number, like this: % dd if=/dev/urandom bs=16 count=16 2> /dev/null | md5sum 63cbd14c2612b7cbc7b7ce6d0e0b7fcb - that she would be able to repeat that number back to me - proving that she's at least sufficiently Alice that she can read Alice's mail and respond to it. Strictly speaking, it doesn't prove she's Alice - but it proves she's in control of that e-mail address. Usually that's considered "close enough", as demonstrated by all the mailing list software that considers "reply to this random cookie/link/whatever to confirm your subscription" (which is exactly this same "proof of pseudo-identity"...) Yes, she could have hijacked the real Alice's e-mail account - but at that point, Alice has bigger problems already....
Attachment:
_bin
Description:
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Please help to spam abryson () bytefocus com., (continued)
- Re: Please help to spam abryson () bytefocus com. Nigel Horne (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Alice Bryson (Jul 24)
- Message not available
- Re: Please help to spam abryson () bytefocus com. Nancy Kramer (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Nigel Horne (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Valdis . Kletnieks (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Alice Bryson (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Paul Schmehl (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Brian Eaton (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Exibar (Jul 24)
- Re: Please help to spam abryson () bytefocus com. evilrabbi (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Paul Schmehl (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Valdis . Kletnieks (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Cardoso (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Aaron Gray (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Alice Bryson (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Alice Bryson (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Exibar (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Valdis . Kletnieks (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Cardoso (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Alice Bryson <abryson () bytefocus com> (Jul 24)
- Re: Please help to spam abryson () bytefocus com. Duke (Jul 25)
- Re: Please help to spam abryson () bytefocus com. Alice Bryson <abryson () bytefocus com> (Jul 25)
- Re: Please help to spam abryson () bytefocus com. Exibar (Jul 25)