Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

"Frog" and "Azerty" under mail-bombing this week-end

2 views
Skip to first unread message

Frog-Admin

unread,
Feb 13, 2000, 3:00:00 AM2/13/00
to
-----BEGIN PGP SIGNED MESSAGE-----


Apparently, "Frog" and "Azerty" got mail-bombed this WE.
It looked like groups of 5* or 10* 400K chunks,
chaining azerty-frog-azerty-frog.... 10 times
They were automatically remixed, generating hundreds of 28K messages.

Response time plummeted to 30+ minutes / reliability is 100%
It stopped by 4 this morning GMT
Frog churned in more than 4.000 messages / 100 Mb a day.
So did Azerty.
My CPU was 100% all the time
Latest Graphs will be available at 2:00 GMT
Browse into Frog Remailer Load Graphs
http://www.multimania.com/frogadmin/Graphs/Browse.html

Here is a post in fr.misc.cryptologie
a thread between a remailer user and a remailer-hater
pie...@datarescue.com (Pierre Vandevenne)
Frog gets a DOS attack promised

*please* support privacy in fr. newsgroups
====================================================================================
From: pie...@datarescue.com (Pierre Vandevenne)
Subject: Re: discussion entre personnes incompetentes
Date: 05 Feb 2000 00:00:00 GMT
Message-ID: <87hiua$lk_...@be.kpnqwest.net>
References: <389820BB...@cicrp.jussieu.fr> <slrn89ggms...@pc-90174.lal.in2p3.fr> <879k20$3so...@be.kpnqwest.net> <FYRXOSUA36559.7291782407@IdNumber@usenet.net> <87d4qa$1os...@be.kpnqwest.net> <200002041...@nyarlatheotep.frog.org>
X-Complaints-To: newsm...@kpnqwest.net
X-Trace: nreader1.kpnqwest.net 949767946 195.0.122.9 (Sat, 05 Feb 2000 17:25:46 MET)
Organization: DataRescue
Reply-To: pie...@datarescue.com
NNTP-Posting-Date: Sat, 05 Feb 2000 17:25:46 MET
Newsgroups: fr.misc.cryptologie

In article <200002041...@nyarlatheotep.frog.org>, Frog <Use-Author-Address-Header@[127.1]> wrote:

>2a) si vous referencez ce qui a ete poste dans fmc,
> vous avez confondu statistiques et configuration / cles

Je ne confonds rien du tout. Je remarque simplement que je reçois dans un news
usenet des statistiques dont je n'ai que foutre et ce, en double exemplaire.

Est-ce clair dans votre petite tête maintenant ?

Vous mériteriez que l'on expose comment n'importe qui peut procéder à une
attaque de type "denial of service" sur votre remailer :-)


- ---
Pierre Vandevenne, MD
www.datarescue.com, home of the IDA Pro Disassembler
Version 4.01 available
====================================================================================

WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW
Frog Remailer WWW Page:
index
http://www.multimania.com/frogadmin/
Main with stats
http://www.multimania.com/frogadmin/Main.html
Internal Data
http://www.multimania.com/frogadmin/Sta_.shtml
All Remailer's Page
http://www.multimania.com/frogadmin/Remailers.shtml
Comments on Keyrings & Capability-string Update
http://www.multimania.com/frogadmin/Keys/Remailer-Comment.html
Browse into Frog Remailer Load Graphs
http://www.multimania.com/frogadmin/Graphs/Browse.html
DownLoads
http://www.multimania.com/frogadmin/MyDownLoad.html
Thesaurus
http://www.multimania.com/frogadmin/Thesaurus/Thesaurus.html

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQEVAwUBOKcHlIDgT488d3zFAQGxGgf/VpZmfXbeH66OrTPW0IuemFmGGJsG/1a6
whFeYukwaLBErWfz29Xj0R9jHvYWVtGpof5NM5hVYRUsannsw//r2FyGGGPrRH2H
X56fvBq44p2Ojw6YzL5s3iypmef/abL9HEAlyzdZ1sh23o2M5B7mRdA4VdFiQEMg
MFvqmKxv3naSqaMc/xt2tb2oUEjn6iZndJYZo6dohhiLuEfPys4IpAb+uO5dKX63
2FqrtVDxuzS4ZFW81h7ENtl7ZlF+9sh27D+XEvFOYDk+I/r7Frbw4oqOYKKCWdUv
2GPbIeWnNQvExdZo86zm2ghOxU2f8tDMeZnrlvfrcPKvFX55lrB51g==
=YhG7
-----END PGP SIGNATURE-----


Lef Arris

unread,
Feb 13, 2000, 3:00:00 AM2/13/00
to
-----BEGIN PGP SIGNED MESSAGE-----

On 13 Feb 2000 19:41:19 -0000, Frog-Admin
<Use-Author-Address-Header@[127.1]> wrote:

>>2a) si vous referencez ce qui a ete poste dans fmc,
>> vous avez confondu statistiques et configuration / cles
>
>Je ne confonds rien du tout. Je remarque simplement que je reçois
>dans un news usenet des statistiques dont je n'ai que foutre et ce,
>en double exemplaire.
>
>Est-ce clair dans votre petite tête maintenant ?
>
>Vous mériteriez que l'on expose comment n'importe qui peut procéder
>à une attaque de type "denial of service" sur votre remailer :-)
>
>
>
>
>- ---
>Pierre Vandevenne, MD

hummm
le nom que l'on donne ici a ce genre de personnage
n'est pas disable meme sur un NG anglophone...


-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>

iQCVAwUBOKcUwkobzvztKJ1BAQGuzAP8CivcWy7Vnq6ZlaNVlpy1usddmXcJt7zF
h4+5Tk35Q4tpmjSU11IiNK0GeJRY6E99I4BCiEFm3F/h1i58DF/w9+cN5qvjv8nN
wMwX+8mg3PvhehzAMgVxZQJq2GwAFlamMTpZRjDXQ7l1p+kzz4571N3Fca2nKorD
QzJluFRjxBs=
=EyQr
-----END PGP SIGNATURE-----

Lef

Lef Arris <lef...@nym.alias.net> 0xED289D41
My mother language isn't English,
so there may be some spelling
or grammatical mistakes.
Forgive and correct me!

Pierre Vandevenne

unread,
Feb 13, 2000, 3:00:00 AM2/13/00
to
-----BEGIN PGP SIGNED MESSAGE-----

Hello,

Thanks for the anonymous users who forwarded this to me immediately.
They know that kind of attack is not my type.

1) This is a partial quote of a very long thread which wasn't about
remailers in the first place. Please have a look at the whole thread.
Some users of these remailers had sent me a batch of hate mail. While
I favor re-mailers in principle, I don't favor re-mailers when they
are used for abuse.

2) This remailer admin posted stats in groups where they have nothing
to do.


http://x26.deja.com/getdoc.xp?AN=582244261&search=thread&CONTEXT=9504756
76.675872795&HIT_CONTEXT=950475676.675872795&hitnum=19

This behaviour is typically the behaviour that causes hostility
against remailers and bad publicity.

3) when I mentioned my disagreement about newsgroup spamming with
stats, I got a lengthy message explaining me that I did not understand
anything.

>Vous mériteriez que l'on expose comment n'importe qui peut procéder
>à une attaque de type "denial of service" sur votre remailer :-)

About the above sentence, please note the conditional tense and the
smiley. The thread had settled btw. The comment makes a reference to
explaining how to conduct an attack, not on conducting one and the
explanation has not even been given.

4) we are a commercial organization but we offer a free e-mail
attachment encryptor with source ( www.acrypt.com ) : this is a CLEAR
demonstration that we SUPPORT privacy actively. Feel free to have a
look, it might even interest you.

5) as a commercial organization, it is extremely easy to sue us for a
denial of service attack. We have a lot to loose and nothing to gain
by attacking anyone.

6) at the time this attack is claimed to have occurred, we were
heavily involved in the upgrade of our customers to version 4.02 of
our main product which was released late friday. Our bandwidth is
already fully saturated with our customers downloading these upgrades,
we would have had an extremely hard time conducting anything against
anybody.

Hope this makes it clear. This will be my only post here but I will
happily answer any question that you might have in private.


-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.0.2i

iQCVAwUBOKcRSsOb/vD3u8xFAQFa8wQAsSjhrzsJgCH5ODYMraHi0M+aKB/f3aqR
yNWh5qBx49ROMzBS+bn9rW5kwWJxKNAGfo515H1ypreK/TO9Qh3AmKimmbznViW5
tN/dLtykk+ecVmJkabmJo5WAEbCI0WfO8QuyZkSz6IwZqOstRYUNJcGHfpJ8huuw
DIVtvwSCWZw=
=9UwR
-----END PGP SIGNATURE-----

Frog-Admin

unread,
Feb 13, 2000, 3:00:00 AM2/13/00
to
-----BEGIN PGP SIGNED MESSAGE-----

On Sun, 13 Feb 2000, pie...@datarescue.com (Pierre Vandevenne) wrote:

| >Vous mériteriez que l'on expose comment n'importe qui peut procéder
| >à une attaque de type "denial of service" sur votre remailer :-)

|4) we are a commercial organization but we offer a free e-mail


|attachment encryptor with source ( www.acrypt.com ) : this is a CLEAR
|demonstration that we SUPPORT privacy actively. Feel free to have a
|look, it might even interest you.

With friends like those, who needs ennemies ?


-----BEGIN PGP SIGNATURE-----
Version: N/A

iQEVAwUBOKc0B4DgT488d3zFAQHZdQgA3Ix8wTi+gNgCUZ0+I1DryVWvJZPsFYX3
kIu4bwazik1CuluWxEz98bDM+2Q7mvx87DAb6N0M2W1V2xUJl4+MeQikuZ5y7+M1
z1ipCd2ujdB/tWONgrjsuBIHzTKnDDPrIyW5MSFxNifJw9rtUvADZJB+p7ENCYFT
C4EbrwFL4M/AE/LtNEnWgwq8KNmeEpxrId0+6EXCjhMghMiPSWuMMimpmLQs5vIh
eTdP9PXwpVbGTnoCH4SK6HRL4vvNNictX3uRPQ6voS+sTJEwosn74qAIWm4un7bX
CIyOoAjcI8X/6Phs0Ngbf3BJx2RbgjYba+m/qMrygPKSY9MEsYuZHg==
=EqFS
-----END PGP SIGNATURE-----


J.K. Geek

unread,
Feb 13, 2000, 3:00:00 AM2/13/00
to
On the message to which I'm replying, I get:

*** PGP Signature Status: good
*** Signer: lefnym <lef...@nym.alias.net> (Invalid)
*** Signed: 2/13/00 2:32:02 PM
*** Verified: 2/13/00 10:03:21 PM
*** BEGIN PGP VERIFIED MESSAGE ***

Why does the Signer show (invalid)?

On Frog's message, I was unable to find his public key, either using the
master key servers or on his site. How does one find his key to validate
messages with?


Frog-Admin

unread,
Feb 14, 2000, 3:00:00 AM2/14/00
to
-----BEGIN PGP SIGNED MESSAGE-----

On Sun, 13 Feb 2000, "J.K. Geek" <jk_...@anon.nymserver.com> wrote:

|On Frog's message, I was unable to find his public key, either using the
|master key servers or on his site. How does one find his key to validate
|messages with?


http://pgp5.ai.mit.edu:11371/pks/lookup?op=get&search=0x3C777CC5

+ posted on apas
+ brodcast on remops list

+ http://www.multimania.com/frogadmin/Keys/pgpkeys.pgp
+ http://www.multimania.com/frogadmin/Keys/pgpkeys.asc
+ http://www.multimania.com/frogadmin/Keys/pubring.pkr

I might add to WWW with "bubble" background when I get some free time.

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQEVAwUBOKeIwIDgT488d3zFAQHp5Qf/aIQYg7uJ9UshEP8iQC1f2P7iB/y4uZw3
Mto4lhU1H7kyfex++FTIEW7hG1EAoDOX7ZPsKZUw3b/+Z37nceHcAfaBkM/WAlSr
Rk3C0/9Mx0cFmCj0n5uqzJW2ClW1OWPCXqHwE5iovPFgBg8EzZqKsry2L/H/FtdE
mbpLQtkRz/VgliylWUv3RB0TQMtf4imw8L1tXL0xYmXlTbWjzp6SLVFRfqD9Qlx2
L7i+2FrFziE5NSn9LciS+EbMLmyK/DEenfmyIve89dPosIOv3cw6nzDubdogWUJh
CXkIvD5fu+nJ9jpFE7nxSEH64ECSYoVJARv45j0U2KGYpF0gCIRmQQ==
=W3UY
-----END PGP SIGNATURE-----


0 new messages