Re: [tor-bugs] #6383 [Flashproxy]: Email registration helper

["Tor Bug Tracker & Wiki" <torproject-admin@xxxxxxxxxxxxxx>]

#6383: Email registration helper
------------------------+---------------------------------------------------
 Reporter:  dcf         |          Owner:  dcf
     Type:  defect      |         Status:  new
 Priority:  normal      |      Milestone:     
Component:  Flashproxy  |        Version:     
 Keywords:              |         Parent:     
   Points:              |   Actualpoints:     
------------------------+---------------------------------------------------

Comment(by dcf):

 > But unfortunately, on first investigation this incoming SMTP doesn't
 support TLS, so our messages will be blockable just by grepping for
 whatever designated address we use.

 Ignoring the lack of TLS, here is a proof of concept for determining our
 external IP address and sending it in email to a Gmail address:

 {{{
 import re
 import smtplib
 import sys

 smtp = smtplib.SMTP("gmail-smtp-in.l.google.com.", 25, "[127.0.0.1]")
 smtp.set_debuglevel(1)

 # Grep the EHLO response for our public IP address.
 smtp.ehlo()
 m = re.search(r'at your service, \[([\d.]+)\]', smtp.ehlo_resp)
 if not m:
     print >> sys.stderr, "Could not determine external IP address."
     sys.exit(1)
 client_spec = m.group(1)

 smtp.sendmail("hoddwee@xxxxxxxxx", "hoddwee@xxxxxxxxx", """\
 From: hoddwee@xxxxxxxxx
 To: hoddwee@xxxxxxxxx
 Subject: Flash proxy client registration

 client=%s
 """ % client_spec)
 smtp.quit()

 print "Registered %s." % client_spec
 }}}

 The messages end up in the spam folder, probably because we lack the
 authentication headers that gmail.com senders are supposed to have.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6383#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs