Groups > comp.os.linux.advocacy > #372795

Re: Ping: Owl

From	"Octavian W. Lagrange" <olagrang@perch.invalid>
Newsgroups	comp.os.linux.advocacy
Subject	Re: Ping: Owl
Date	2016-09-25 22:28 +0000
Organization	O.W.L.
Message-ID	<ahdkflg.39gila@perch.invalid> (permalink)
References	<36bbb87b-48ff-494f-b2ec-49bfd1328de1@googlegroups.com> <OWL-36bbb87b-48ff-494f-b2ec-49bfd1328de1@googlegroups.com> <ed8e932b-64bc-4de0-aa6c-97f3c0dbf52a@googlegroups.com>

Show all headers | View raw

Steve Carroll <fretwizzer@gmail.com> wrote:
> On Sunday, September 25, 2016 at 3:32:59 PM UTC-6, Steve Carroll wrote:
>> Steve Carroll <fretwizzer@gmail.com> wrote:
>> > -----BEGIN PGP SIGNED MESSAGE-----
>> > Hash: SHA512
>> > 
>> > You said any header can be spoofed, can you spoof my entire header from this post, every field, every character ?
>> > -----BEGIN PGP SIGNATURE-----
>> > Comment: GPGTools - https://gpgtools.org
>> > 
>> > iQIcBAEBCgAGBQJX6DVXAAoJELnOYK54exUCAoMQAJH6if+3h1yByCIU5jVBVl+4
>> > YAzRyEKDBYU+V2OTQhbxXqZisllms93GbjUdLVo3ucGJq+0QKCegX+ghmW/w0qLV
>> > vZ/KmxZR2y0FgX/+ZhPsGH4rloMdzQoL1az9i1PlJzceFRU75LwPFjdLmT285P6C
>> > 0A0t/Dy3oZ9DdPaXh7A0HuBbK9TRsZGzQ/8HHQSI+AHKqjiXliDf2RzRbhvUOYnc
>> > k3Q2rg8RA4voDXks12/uforxXwg2rLHwPGlqRp262IWWjFtqJvOFAmAOl/UUFP4N
>> > 5xVjOH26sK6e+xhdnb2/zGZX2to+33nb+V7rZnsiRAgwwt2eE4wjc3ql3FbzsFFZ
>> > Jg7xcZcoa374Ifx58YUfhrPKNfLHeiNMdcymMPwRgdFG8rR7infYNs0YFWWbbePx
>> > gzbmV/bF1OneDW4hModL0EYlZs6QCI7d/oIS+KPblgFKR82N8pNOqwyhi3yfQKz1
>> > WU2adIWHmgJF8sG7KNQN865gdfjWyxKT03uu5F7D7te3J1WpYQZTzM5EUmKf/MEt
>> > zHJXuJOhlC0fg9+0SjdgQrPy3HU5WTc0oLqpvcLOzfjs1I/muG37truZeUOEAAp0
>> > /c/qcolcQH2Juu6TZZbYqNCF23+uvjmqkaSzZumiMgYMd/YJ5LrNkZmbKOZ0XUgW
>> > lx0txQL703K+oUvZKxej
>> > =aRHo
>> > -----END PGP SIGNATURE-----
>> 
>> This is a test forgery with permission of the email account owner.
>> Steve, I said most all headers can be forged.  Both client and
>> server must allow it.  Here I stripped Path and Xref, and gave
>> it a new message-id and organization.  Path preload is against
>> my TOS, Xref only specifies article number and is meaningless
>> outside that server, Organization because the server adds one
>> if I don't, and of course it needs a unique message id.
> 
> Didn't fool it but the headers aren't exactly the same

Could be login/messag-id tracking, but what do you mean
by "didn't fool it"?  Do you mean because it's not a unique
post here:

https://groups.google.com/forum/#!profile/comp.os.linux.advocacy/APn2wQex7ZDHcyvKXrYEFomvvGEe6q-7LlNoING2TTevZvRIYzflnEJjf7Vl4bCLnGnc9SiNpURO

Would it have made a difference if I had not posted as a followup,
but instead as a new post?

Thread

Ping: Owl Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 13:36 -0700
  Ping: Owl Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 13:36 -0700
    Re: Ping: Owl Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 15:14 -0700
      Re: Ping: Owl "Octavian W. Lagrange" <olagrang@perch.invalid> - 2016-09-25 22:28 +0000
        Re: Ping: Owl Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 15:44 -0700
          Re: Ping: Owl Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 22:46 +0000
            Re: Ping: Owl Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 16:03 -0700
              Re: Ping: Owl Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 23:14 +0000
                Re: Ping: Owl Steven Petruzzellis <OLnewscat3three@news.eternal-september.org> - 2016-09-25 23:20 +0000
                Re: Ping: Owl Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 16:29 -0700
                Re: Ping: Owl Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 23:47 +0000
          Re: Ping: Owl "Octavian W. Lagrange" <olagrang@perch.invalid> - 2016-09-25 23:10 +0000

csiph-web