Re: Piracy

[shoppa@alph02.triumf.ca (Tim Shoppa)]

In article <5dom1f$1ik@crl5.crl.com>, Joe Kohn <joko@crl.com> wrote:
>Charles Turley has placed me, and some of you, in a very weird and
>uncomfortable situation.
>
>Some of you may think that "anonymous ftp" means that your anonymity is
>protected. But, it's not. Every one of your keystrokes are saved to a
>logfile when you are connected to an anonymous ftp server. Whether you know
>it or not, your actual e-mail address is also logged.

Not necessarily.  If you provide your actual e-mail address to the server, it
is logged.  You can also provide some completely bogus e-mail address
to the server if you choose.  Some of the more advanced ftp servers
will compare the node name of the supplied e-mail address with the 
IP address that the ftp request is coming from, and reject the connection
if the two don't match up.  But I know of no way to force the
a match on the username portion of the e-mail addressi.

Most intelligent ftp servers will log the IP address that the ftp
connection comes from.  If there is only one user at that IP address
at a given point in time, it's trivial to figure who actually did
the transfer.  If there were hundreds of users on the machine that
the ftp request came from, then it can be rather difficult to track
down the exact user on the machine that attempted the transfer.  With
cooperation between administrators on both machines, and careful comparison
of all the logs, it is often possible to determine the actual user.

Tim. (shoppa@triumf.ca)