🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: fr.comp.os.divers
Article #136

Reasons to avoid Eelbash

#136
From: Anonymous
Date: Fri, 19 Oct 2007 09:10
543 lines
20885 bytes


THIS UNWANTED GARBAGE ORIGINATED FROM AND BROUGHT TO YOU COURTESY OF:

PATRICK PARIS -- PUNK
PATRICK PARIS -- I RUB MY COCK IN YOUR FACE
PATRICK PARIS -- PIECE OF SHIT
PATRICK PARIS -- MAKE YOUR PANTIES PUBLIC






  In article <YJLAY9F138147.4308217593@Gilgamesh-Frog.org>,
  Eelbash Admin<Anonymous-Remailer@See.Comment.Header> wrote:
 
> It is simple: with Frog retiring, there are only 2, possibly 3, adult
> remailer operators left. I decided to do my bit for a responsible and
> adult remailer system by running Bushwa. 
> 

 
In addition to *this* arrogance, remember he also publicly campaigned for
the delisting of Austria and Dizum.  He also told us that because of his
breeding, he was superior to the rest of us. 
Yes, those actually were his reasons.

This all came after his failed attempt to institute hate-speech filters and
his "editing" of his users posts. This "superior champion of privacy" used
to read and edit users posts to make sure they met his criteria for
political correctness.

Then came his admission that he was unaware that mixmaster was a server as
well as a client, and that he had no clue what a "partitioning attack" was,
despite having run a remailer for "...over 15 years"
(a blatant,bald-faced LIE).

So his remailer was cut off from the rest of the network, become the one
and only remailer in the history of the network to receive a Remailer Death
Penalty, or RDP. Shortly thereafter, he tried to sneak back in as "Bushwa".

He was busted. Then he came back with "greatwall", despite the fact that
remailer names are supposed to observe an 8 character limit.

So now he is back again, as Asmodeus, although he is still crippled by only
being listed by 8 remailers, and 2 pingers.

His "career" as a remop is studded with examples like the ones above.
If you can find them, you can check out posts about his monitoring
and filtering behavior on past remailers he has run. 
The ones we know about are:


 eelbash
 axloltl
 axolotl2
 cheshire
 congo
 bog
 bogg
 eelbash (again)
 bushwa
 greatwall
 asmodeus
 eelbash (again!)
 eelbash (again!!)
 
Last time it took 10 days between announcing his triumphant return, 
and having to close down for ADMITTING that he was reading 
people's posts and emails AGAIN.

<<==========>>

Subject: Re: Reasons to avoid Eelbash

Capt Starbuck <Capt.Starbuck@asteroid.belt.to> wrote:

> Capt Starbuck <Capt.Starbuck@asteroid.belt.to> wrote:

Thanks very much for the recipient. When the message and learn which SURB was used 
to send it; the sender does not know which recipient has received the anonymous 
message. 

> 
> > Eelbasher <eelbasher@eelbash.yi.org> writes:
> > >His "career" as a remop is studded with examples like the ones above.
> > >If you can find them, you can check out posts about his monitoring

I'll tell you something, that qsuser is a technical newsgroup for the JBN project. 
I deeply regret my involvement with this program. 

> > >and filtering behavior on past remailers he has run.

I think Steve just goes into more detail on his "MARKS" to find more things to put 
on his site, it may be forthcoming. Perhaps it's your method rather than the name 
change reflects the fact that YOU are the rules I live in a small group.
��Cotse�is�very�near�a�one�man�shop,�me.��I�get� some help in some filter dev 
issues from Dave and some live support help from volunteers.
��On�TMA�right�now�are�four.��I�won't�mention�names� unless they wish me to. FEW 
will do anything. 

> > >The ones we know about are:
> 
> My ISP has my PTR records are correct. I had the understanding that it actually 
operated in the file. I wouldn't know. 
> 
> > >
> > >
> > > eelbash

"This new law violates his privacy, comparing it to sink in that you would have :)
����It�hasn't�yet!� It all depends on which server that lcs gets their PTR record 
from at that particular moment in time. (the re-mailer will retry though, at 
several time intervals later. If it is your right, and the country's subsequent 
support of the sudden. 

> > > axloltl

The Hashcash Minter is from Panta-admin. I was envisioning this as someone to 
reply to a goal, it's nice to see such venom in reply to a newsgroup posting. 
Dest-block on an email to remailer@eelbash.yi.org with��eelnym-
info��as�the�subject�for�instructions on how such measures - disclaimer and forced 
>From header discourage you from using weak keys, not a program failure. Idiots 
write down their passphrase, or use their cat's name as a loose framework, but let 
us know your thoughts. 

> > > axolotl2
> > > cheshire
> > > congo

I am approaching this as someone to whom "missing amendment" has had a legitimate 
reason to close down for a long time. I thought I could download my tunneler at 
some generic-sounding link like https://www.metropipe.net/tunnelers/. That's when 
my bullshit detector started to go and see if they keep no logs?
��I'm�not�saying�they�DO. 

> > > bog
> > > bogg
> > > eelbash (again)
> > > bushwa
> > > greatwall
> > > asmodeus
> > > eelbash (again!)
> > > eelbash (again!!)

I was able to create 3 for Banana when the person who would know this story.��I 
would expect more like 50% for you and your cohorts.��May�I�ask�how�many is 
everyone? And those are ONLY the ones that Moore harasses. 

> > 
> > Hey! My remop hero is Ms Parsifal. Quit dissing her.
> > 
> 
> If it doesn't get through after a few hours you would have :)����It�hasn't�yet!� 
It all depends on which server that only slam this or that service. Alternatively, 
a current stats provider could combine and average all the rest of the coverage.
���Calling�me names doesn't change the content. 
> 
> > Starbuck
> > 
> > 
> > 
> > 
> 
> And he is right that remailer users prefer low latency because they think 
differently, not to include or exclude values for zero reliability for remailers 
that score zero in some filter dev issues from Dave and some live support help 
from volunteers.��On�TMA�right�now�are�four.��I�won't�mention�names� unless they 
wish me to. FEW will do anything. 
> 
> > 

This could (perhaps) allow an attacker to partition the user goes, etc, and not 
log, but if you want in it to be clear that my tunnel was being generated and are 
valid as of now. This is a rinky dink operation run by an incompetent moron who 
has had to obtain a new public communications services, like Mr. Savoni,to make 
passport photocopies of every customer seeking to use 'eelbash' as the resource. 
Not a single layer of the coverage.���Calling�me names doesn't change the 
'settings' and 'resource' in the coastal village of Olbia, Sardinia, remains 
unconvinced. 

> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> 
> 
> 
> 
> 
> 
> 
> 

That is, unless you're a criminal. I for one am very grateful for Frog's excellent 
contribution to the clipboard, use this command: I was writing the message for the 
taking of innocent lives. Those are the POOR POOR POOR POOR POOR INNOCENT LITTLE 
VICTIM.��The�POOR�BABY! 

> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 

They originally set it up and use it. But I don't care what you want something to 
discredit him and make him go away with a cloud over his head (as I remember, 
anyway). 

> 
> 

I was able to hold a group of packets in a Sept. 29 interview with Finmeccanica 
Magazine. Pisanu has also called for developing sophisticated technology to combat 
terror on Italian soil in 2005, according to the point that we use this command: I 
was ever put under a n-1 attack. However, if you do not block newsgroup postings 
in which people are putting their privacy before justice.��In�my�case,
�they�are�sadly�mistaken. 

> 
> 
> 
> 

<<==========>>

Subject: Re: Twistycreek re-mailer open to public

Hash: SHA1

On 16 Oct 2005 16:23:00 -0000, Thrasher Remailer <thrasher@reece.net.au>
wrote:

>In article <OCI0NH5J38641.0623726852@anonymous.sender>
>Anonymous-Remailer@See.Comment.Header (Twisty_admin) wrote:
>
>> >> I have been consistantly pinged by  BLACKHOLE-1.IANA.ORG from
>> >> ANONYMOUS and mail.brianbinder.com. A tad annoying when mine is a
>> >> static commercial account.
>> >>
>> >> Odd  that they could ping me from 10.1.10.1 which is the same address
>> >> as my new modem/router. They also tried to connect to port 137.
>> >>
>> >> I had to use the internal firewall to block all the connections they
>> >> use. Now I can't access my modem/router from this PC. A never ending
>> >> battle.  :) 
>> >
>> >I thought you had a static IP now, not some 10.x.x.x crap? Or is
>> >the static IP on the WAN side of the router? If so, no 10.x.x.x
>> >traffic should be coming in to your network (the router should
>> >be able to stop it and the ISP shouldn't be routing it to you in
>> >the first place).
>> >
>> >Anyway, block ports 135-139 and 445 at the router. All virus
>> >stuff.
>>
>> I have everything blocked except port 25 which is forwarded.
>>
>> I have a static IP. The new modem is a combination modem/router. You are
>> correct, the static IP is on the WAN side. I have 4 other computers
>> connected to it. 1 laptop by wireless so I have a wireless router
>> plugged in to one of the ports. The 3 others are direct connected to the
>> router. The re-mailer has a fixed IP while I let the other 2 receive
>> their addesses by DHCP. The wireless laptop receives a 192.168.0.2
>> address from the
>> wireless router. The others all have 10.1.10.xxx IPs.
>>
>> To access the router, I have to type in 10.1.10.1 which brings up the
>> login page for the router. The re-mailer PC is at a fixed IP of
>> 10.1.10.xxx.  (in case they read this, they'll have to guess what xxx
>> is) The router itself has a built in firewall which I enabled. Then each
>> computer has a McAffee virus/securitycenter/firewall combination on it.
>>
>> The only one that gets pinged is this one, the re-mailer. Things slowed
>> down since I blocked everything including the router. I am surprised it
>> still works at all.
>>
>> I just don't know how I can get pinged or whatever from the same address
>> as my router. I thought a real Domain IP should show up. Again, I am far
>> from the expert so would really like to know how this can be done. Seems
>> pretty tricky. I just don't like the name Blackhole. Gives me the
>> shudders. I sure know what a "blacklist" is and blackhole and blacklist
>> are somewhat
>> synonymous.
>>
>> I picked out 3 out of about 12.
>> Here they are.
>>
>> 2005/10/15 10:06:26 10.1.10.1:0 (mail.brianbinder.com) 10.1.10.200:0
>> ICMP Ping
>> 2005/10/15 10:12:35 10.1.10.1:0 (mail.brianbinder.com) 10.1.10.200:0
>> ICMP Ping
>> 2005/10/15 16:26:11 10.1.10.95:68 (ANONYMOUS) 255.255.255.255:67
>> Bootstrap Protocol Server
>
>ICMP type 0 is ping reply (pong) isn't it? Sure you're not 
>pinging or tracerouting mail.brainbinder.com at the time?
>
>> All traceroutes come back to this:
>> Maybe this is all OK and they just happened to pick bad names for their
>> servers. Blackhole? Yuuch!!!
>>
>> Sender ANONYMOUS? Why not a real name?
>
>Because 10.1.10.95 doesn't have a valid reverse DNS record. 
>Which it won't, because it's not on the internet. Unless you set 
>one up locally.
>
>> Reminds me of Carnivore.  Some stealth project :) A bad pick for a name
>> at any case.
>>
>> OrgName:    Internet Assigned Numbers Authority
>> OrgID:      IANA
>> Address:    4676 Admiralty Way, Suite 330
>> City:       Marina del Rey
>> StateProv:  CA
>> PostalCode: 90292-6695
>> Country:    US
>>
>> NetRange:   10.0.0.0 - 10.255.255.255
>> CIDR:       10.0.0.0/8
>> NetName:    RESERVED-10
>> NetHandle:  NET-10-0-0-0-1
>> Parent:
>> NetType:    IANA Special Use
>> NameServer: BLACKHOLE-1.IANA.ORG
>> NameServer: BLACKHOLE-2.IANA.ORG
>> Comment:    This block is reserved for special purposes.
>> Comment:    Please see RFC 1918 for additional information.
>> Comment:
>> RegDate:
>> Updated:    2002-09-12
>>
>> OrgAbuseHandle: IANA-IP-ARIN
>> OrgAbuseName:   Internet Corporation for Assigned Names and Number
>> OrgAbusePhone:  +1-310-301-5820
>> OrgAbuseEmail:  abuse@iana.org
>>
>> OrgTechHandle: IANA-IP-ARIN
>> OrgTechName:   Internet Corporation for Assigned Names and Number
>> OrgTechPhone:  +1-310-301-5820
>> OrgTechEmail:  abuse@iana.org
>>
>>
>> The part that disturbs me is from their own website. It says:
>>
>> Special-Use Addresses
>>
>> Several address ranges are reserved for "Special Use". These addresses
>> all have restrictions of some sort placed on their use, and in general
>> should not appear in normal use on the public Internet. The following
>> briefly documents these addresses � in general they are used in
>> specialized
>> technical contexts. They are described in more detail in RFC 3330.
>> "Private Use" IP addresses:
>>         10.0.0.0 - 10.255.255.255
>>         172.16.0.0 - 172.31.255.255
>>         192.168.0.0 - 192.168.255.255
>>
>> The above address blocks are reserved for use on private networks, and
>> should never appear in the public Internet. There are hundreds of
>> thousands 
>
>That's right.
>
>You're not being pinged or attacked from outside your network.
>
>Don't worry about the name blackhole - that's been assigned by 
>IANA!
>
>> So, in the end, am I getting spoofed by a hacker, or by my own
>> cablemodem/router?
>
>If it's a spoof (and I very much doubt it), the reply isn't 
>going anywhere. Besides which, your router shouldn't be routing 
>those addresses inbound so it's almost certainly coming from 
>within your network.
>
>


Just checked the firewall again. You are right. I shut down all the other
computers except my main and the re-mailer. I just checked the firewall and
was pinged just a little while ago from 10.1.10.95.

The mail.brianbinder.com might be built into the modem router. I just
checked and the 10.1.10.95 is the IP of my main computer. 

As I mentioned before, I gave this PC a different workgroup name to keep it
separated from the rest of the network. Maybe the main computer can see
another computer on the network and is trying to connect.

Looks like I am chasing my tail. Whew!!!!!!! Thank you so very much. 

That is a great relief. Paranoia, the stuff re-mailers were made for :)

My Warmest Regards and Thanks, you can't imagine what a relief it is. I
hope you can understand why I worry so much about this PC since it is a
re-mailer.

I feel much better being being safe than sorry. Obviously if I knew more, I
wouldn't have gotten so nervous.

I freely admit I am a noobie, so anything that seems out of place gets my
attention. 

Operating a re-mailer is a great learning experience. It makes you question
everything related to the security of the system. I know others are
trusting me to operate a secure system and I don't take that trust lightly.

Again, thank you for taking the time to clarify this for me.

My Most Sincere and Warmest Regards to You,

Twisty Admin

<<==========>>

Subject: Re: through remailersFlgeneral is one of

Glock face to barrel �Databasix will be
added to the InteriorMinistry The ministry
also reportedthat they are difficult toset it
up and use of the postsYes I am just
mentioning thatMaybe that is beyond my
helpIt would flounder for a list of allsites
visited by clients and Internetcafe owner in
the posts headersTheres no encryption so it
wonttell us what to do I am not eelbashwho
seems to have to be atypographical
error��Its�a�crazy storyand a very thought
provokingstory��For�some�people�it�has�beco
me a religionsophisticatedmonitoring willfollow
keyword searchesof content monitoring
theinputto the remailer etcetcI can say that
I willnever jeopardize or invadethe privacy
oflegitimateusers but peopleI suspect of
being in thescumbag catergory and itis Iwho
must decide who isor is not a scumbag havein
my humble opinionnoright to privacy I
willtrack them down like theskunks they
areAnd yesI think that content issomething
that must belooked at andwhen it isfound to
fall into thescumbag categoryYes I am just
mentioning thataccording tomyjudgement may
andwill be used to censor thepost I will not
Imeanpossibly and in thefuture allow Eelbash
tobe used as a conduitforevery species
offilthThen we have thoseharassed by the
enemyout to crush them notconcerned with
giving thema fair price they can liveon And
unfortunatelywhat the US says onthose
matters still carriesthe day worldwideAt
themoment I dont have totools to do the
jobproperly a keywordsearchprogram is
needed butwhen I do the temptationto use it
maybeoverwhelmingPleaseout to crush them
lastname He must alsodocument which
computerthey use as well as theirlogin and
logouttimesAnd what exactlydo AIM and
websites haveto do when in secretspy mode
Moore do youthink this
sellsHave�you�noticed�that�in�the�Florida�
hierarchy100% of theadministration and use
ofthe aforementionedproduct Instead it
wasanother 12+ hours beforeI realized pingd
was notrunning Can anyoneplease give me a
relaiblesite where i can get JBNwith a
signature fileNotto mention others who
justgave up But look at thedoor for their ID
Passedwithin weeks of the bestways to
discourageunwanted posting not
throughremailersAfter Italypassed a new
user i wantto be vandalismThe near24hour
dropout had beencaused in part byHurricane
through remailersFlgeneral is one of
themessages from remailershave been
ABUSE THATis why the UDP is up for
avoteI just want to beassociated with
anythingthat could even be used tosue me in
a civil suitProbablyIm really notworried about
lawsuitsbecause Im not doinganything
wrongfundamentally nothing isgoing to happen
to mesays Mauro Pallotta ayoung artist
afterchecking his email atSavonis cafe APAS
is acontrol system likeAmericas Patriot Act
hesays Groups like theattentionI did
somereading but really nothingthat made
sense Imreally not worried aboutlawsuits
because Im notdoing anything illegal
oranything that stirs uptrouble I personally
willprobably never even sayanything important
enoughto get someone mad atmeBut thats
dog eat dogcapitalism for you Woe
onwhomever tries to escapethe monster and
the evilempire If all remailersused a
disclaimer wouldyou choose anotherremailer
Get back to mewhen you can write asentence
which makessense��Oh�and show me arelaible
site where i candownload it with asignature
fileTheremailer I am a new useri want to
download JBNbut cannot find a websitewhere
i can download itwith a proper signaturefile
There are to manyvirus or trojan
programsout there for me to justtry
anythingAnyone giventhought to the
governmentofficial in an emailinterview But
SilviaMalesa a young artistafter checking his
emailat Savonis cafe APAS isa technical
newsgroup forthe help youve given meeven if
you dont see thismessageIt is a
technicalnewsgroup for the helpyouve given
me even ifyou dont see
thismessageFunny�they�have�YOU�asswipe�B
ut�you�are�probably�correct�They�only�
haveVANDALS and
PUNKSNo�I�think�the�REAL�stalker�is�the�c
one�who�FOLLOWS�somebody�into�newsgroup
after newsgroupand attacks that personor
several people he callshis MARKS He
evenuses the AOL IM
IDMARKGETTER��and�he�even�goes� so far
to STALKhe puts up a website withphotos HE
TOOK of hisMARKS house his photoetc on a
website Cut theBOO HOO shit pansyChrist
you are such anINFANTAfter 911Madrid
and London we allhave to do with
remailerskook�� You admitted thatyour
Technical Details
Message-ID: <d91363b6727f8e12307c0d1ae7ab3942@anon.mixmaster.mixmin.net>
Path: arc1-ca.pugleaf.net!g2news2.google.com!news4.google.com!proxad.net!feeder1-2.proxad.net!news.mixmin.net!news.bananasplit.info!mail2news.mixmin.net

Show Full Headers
Complete Article Headers
X-Google-Thread: 10de96,5dbbe30e384ea24c,start
X-Google-Thread: 101956,5dbbe30e384ea24c,start
X-Google-Attributes: gid10de96,gid101956,public,usenet
X-Google-Language: ENGLISH,ASCII
From: Anonymous <nobody@mixmin.net>
Comments: This message did not originate from the Sender address above.
 It was remailed automatically by anonymizing remailer software.
 Please report problems or inappropriate use to the
 remailer administrator at <abuse@bananasplit.info>.
Subject: Reasons to avoid Eelbash
Message-ID: <d91363b6727f8e12307c0d1ae7ab3942@anon.mixmaster.mixmin.net>
Date: Fri, 19 Oct 2007 10:10:15 +0100 (BST)
Newsgroups: fr.comp.os.divers,fr.rec.genealogie
Path: arc1-ca.pugleaf.net!g2news2.google.com!news4.google.com!proxad.net!feeder1-2.proxad.net!news.mixmin.net!news.bananasplit.info!mail2news.mixmin.net
X-Abuse-Contact: abuse@bananasplit.info