From: Robbie Lindauer (robblin@thetip.org)
Date: Mon Sep 01 2003 - 15:00:56 MDT
As I recall in the early days, they explained how it was working and it
need to be "Installed on ISP's SMTP Servers". I expect it is, as you
said, a passive sniffer of SMTP traffic, equivalent to tcpdump with
protocol set to smtp.
The delay detector obviously wouldn't work.
What would be interesting would be to put a pixel-tracker inside an
HTML-ONLY email with highly controversial content and make the content
only readable by the pixel-tracker (for instance, precompose the
message in a GIF or something and stuff the text with "controversial"
language).
Then just track to see if more than one person opens the gif and if any
of them come from nipr.mil.
Hmmm.
On Monday, September 1, 2003, at 12:29 PM, Christian Weisgerber wrote:
> Extropian Agroforestry Ventures Inc. <megao@sasktel.net> wrote:
>
>> If emails about subject matter carnivore is not interested in and
>> material
>> with just the right word/context to make it subject to scrutiny are
>> sent is
>> it possible to detect
>> carnivore by looking at time delays between send and reciept.
>
> I don't know how Carnivore is/was supposed to be implemented, but
> the sensible way to tap email on the fly is to passively snoop on
> SMTP traffic.
>
>> I sent some emails to the same location with excerpts of the patriot
>> act and
>> some rather inflammatory deliberate references to cannabis and police
>> state. Those took 2 hours longer to pop up at the recipient site than
>> ordinary emails sent the same time to the same location. Ones simply
>> sent to
>> myself poped up in minutes.
>
> You might want to invest a bit of time into learning how email is
> transferred on the Internet.
>
> --
> Christian "naddy" Weisgerber
> naddy@mips.inka.de
This archive was generated by hypermail 2.1.5 : Mon Sep 01 2003 - 15:11:59 MDT