Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

Re: [Full-Disclosure] hushmail.com, is this true?

Subject: Re: [Full-Disclosure] hushmail.com, is this true?
Date: Tue, 25 Jan 2005 12:43:56 -0800 (PST)
Thank you Valdis, you were spot on.  I'm sorry, I must
have been misunderstood, my main concern IS a blunt
legal object being used against hushmail to find my
identity.  Without contact with their staff there is
no way to prove their claim that their log files do
not correlate IP addresses to e-mail addresses.  I
wanted to know if anyone on the list has had
experiences with them that would support this claim
(that hushmail does not know their own user's IPs).

I'm sorry I came off as harsh to Mr. Smith but when I
saw his email addy was "stfunub" I got a little
carried away.  I thought it would be ironic. :-).

And Atte, I am not posting from my IP address as I am
aware Yahoo leaks that information.

Again, any information related to this claim of
their's would be very helpful.


--- Valdis.Kletnieks@vt.edu wrote:

On Tue, 25 Jan 2005 11:22:25 CST,
Bart.Lansing@kohls.com said:

Figuring out what correlating information is in the
headers of the mail isn't
rocket science.

Figuring out what correlating information is left in
the various logfiles on
the hushmail servers *is* rocket science for those
who aren't hushmail staff.

In fact, I'm fairly sure that "hushmail tells you
what is in their logfiles" is
the only legal way to do it (of course, getting them
to tell you will likely
require the use of a subpoena or other legalistic
blunt weapon...)


                
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - Helps protect you from nasty viruses. 
http://promotions.yahoo.com/new_mail
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

<Prev in Thread] Current Thread [Next in Thread>