Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.misc > #2420

Re: alt.anonymous.messages

From Mike Easter <MikeE@ster.invalid>
Newsgroups comp.misc
Subject Re: alt.anonymous.messages
Date 2014-04-17 17:45 -0700
Message-ID <brbatmF4iuoU1@mid.individual.net> (permalink)
References <20140416111547.ba81b447.rsw@therandymon.com> <br79srF8p3cU1@mid.individual.net> <lippdu$puq$1@solani.org>

Show all headers | View raw


RS Wood wrote:
> Mike Easter wrote:
>> RS Wood wrote:
>>> Question: does anyone have any idea what is going on in that group?
>>> Endless, PGP messages of the same format and length?
>>
>> It's a form of shared mailbox; mixing a bunch of different people's
>> messages into the same pile.

> That's a good explanation, thanks.  A very clever system.

Actually it has a number of flaws from a security viewpoint.

There was a recent in-depth evaluation by Tom Ritter, called 
De-Anonymizing Alt.Anonymous.Messages and presented at the DefCon 21 
conference.  It is a 116 p. .pdf doc and there are discussions about the 
'revelations' such as:

// It seems there are issues with AAM, many of them related to the size 
of the mixmaster network, the poor tools available, and the sloppy 
operational practices of the people who use it... //

Ritter did a lot of analysis of metadata as well as a little cracking by 
acquiring 1.1 million messages over the last 10 years and 'digesting' them.

There are plenty of places to get the .pdf and here's Ritter's page 
intro'ing http://ritter.vg/blog-deanonymizing_amm.html



-- 
Mike Easter

Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

alt.anonymous.messages RS Wood <rsw@therandymon.com> - 2014-04-16 11:15 +0000
  Re: alt.anonymous.messages Huge <Huge@nowhere.much.invalid> - 2014-04-16 11:28 +0000
  Re: alt.anonymous.messages Mike Easter <MikeE@ster.invalid> - 2014-04-16 05:03 -0700
    Re: alt.anonymous.messages RS Wood <rsw@therandymon.com> - 2014-04-17 23:51 +0000
      Re: alt.anonymous.messages Mike Easter <MikeE@ster.invalid> - 2014-04-17 17:45 -0700
        Re: alt.anonymous.messages RS Wood <rsw@therandymon.com> - 2014-04-18 21:12 +0000
          Re: alt.anonymous.messages RS Wood <rswood@therandymon.com> - 2014-04-19 17:47 +0000
            Re: alt.anonymous.messages Mike Easter <MikeE@ster.invalid> - 2014-04-20 10:07 -0700
        Re: alt.anonymous.messages Randy Westlund <Vorzakir@invalid.invalid> - 2014-04-19 20:18 +0000

csiph-web