Tech Support > Computers & Technology > Computer Security > Re: Another cotse.net bug: 14 aliases deleted w/o warning.
Re: Another cotse.net bug: 14 aliases deleted w/o warning.
Posted by Chief Thracian Usenet on July 24th, 2004


On 24 Jul 2004 02:31:40 GMT, "[ Doc Jeff ]" <me@privacy.net>
wrote:

SUB-aliases? Wow, making us stuff just to have your way! And you're
another cotse.net VOLUNTEER? Ha, that just proves my point further,
about questionable service.

Yeah, well tell the other volunteers about it. He (or she) therefore
did *not advise my client w/anything relevant...he just gave a quick
answer because he's either lazy or ignorant. It could even have been
*you. No surprise there, since you make up things as you go (such as
"sub aliases").

I allow for that. But when I am told by Steve and his apologists that
it's "strange" no one responded to my helpdesk query within 24 hrs....
then they are lying: it's *not strange at all. Okay, once in a while I
can accept that. But when they consistantly don't answer queries, it's
only reasonable for me to point this out here, in a newsgroup.

You can't have it both ways: claim that *all queries are answered
within 24 hrs....and then do not do so, consistently. And some of the
folks at IRC online help apparantly enjoy giving misinformation,
rather than asking some standard questions to narrow down the problem.

Aren't you the crude dude. You *know the author (a young man) recently
died (in May I think)...because I mentioned that in my original
article that started this thread. Proxomitron will remain a powerful
privacy tool for at least several more years. And longer, assuming
that some of his dedicated and talented admirers will continue
evolving this program.

If you really believe cotse.net is all so wonderful, then howz cum you
feel you must make things up (IOW: lie)? It was certainly hitting
below the belt to use the death of a talented hacker dedicated to
providing a powerful privacy tool for free...by calling his program a
"dead product". You only serve to prove my point at the poor help
provided by volunteers. You probably couldn't get a job doing this,
precisely because you make things up...but Steve will take you on
board, won't he? If he had any sense, he'd fire volunteers like you.
Oh, wait, you're not employed, so you *can't be fired. Sorry!

I know of them, too. However, Zone Alarm has consistantly rated higher
than any other that is offered for free. However, those two you
mentioned are perfectly fine, also.

PGP is another way to go, and there are good utilities out there to
simply its use. Java and Javascript can enhance security, if used the
right way. Hushmal uses it the right way. The javascript is necessary,
in order to encrypt one's mail *before sending it out. To encrypt
during transmission, or on hushmail's server provides an opening for a
hacker to intercept the msg. before it's encrypted.

I am not bothering anyone who cares to know the truth about this
service...only the apologists. I *am developing my free package for
myself and others to use...and will cease using cotse.net in due time.
I don't care to pay for a security service that lies about its quality
and reliablity. Just common sense.

By your blatantly MAKING THINGS UP, you only served to affirm my
disappointed conclusions about his service. You certainly didn't do
your (pseudo) BOSS any favor!






Posted by marvin9999 on July 25th, 2004


On 24 Jul 2004 02:31:40 GMT, "[ Doc Jeff ]" <me@privacy.net>
wrote:

Not when cotse.net suggests you use a seperate alias for each online
subscription you use...then if you get any spam, you'll know who
caused it. Actually, 39 is not very many at all, if that is how you
want to use your aliases.

Quoting from cotse's own help file
https://www.cotse.net/support/aliases.html:

"With your Cotse Account you receive "Unlimited Aliases", if you
choose to use any at all, it's totally up to you.
<snip>
As an example, I have around 100 filters setup in my desktop email
client. "

Keeping catchall "on" as system default is indeed a security breach.
It should preferably be "off" system-wide...or (second choice) users
should have control over whether they want this "on" or "off". There
is no explanation of their alias settings re. "catchall", so most
users remain clueless.

Thracian explained ad nauseum why this is a breach, and even consulted
other admins to be sure he was correct in his assumption.

I thought Geoffrey Dahmer was killed in prison. Or is this a "Silence
of the Lambs" shtick? Either way, such violent language only serves to
weaken your case.

That is a bandaid measure, which does not make the security breach
disappear. Thracian surmised that Steve does not have catchall "on" by
choice, but because that function was left out of the version of the
mail service he presently used. Instead of admitting that, Steve most
likely pretended he has catchall "on" by choice. His example of why
someone would like it "on" was trivial (as Thracian correctly stated),
and not worth the security risk.

No excuse for the sudden deletion of his aliases. Some would even call
it a "cop out".

There is no sub-alias feature in cotse.net...at least, not one that's
documented, or made available in a user's account. If anything, all
aliases created are a sub-alias of one's original user name, in
Thracian's case that is: user0000@cotse.net.

Why then wouldn't all aliases be erased, when one deletes just one?
That is what your kind of reasoning implies.

You're another apologist, pullling rabbits out of your hat in order to
cover for blatant errors in cotse.net's system.


They should, but they're not. So a user is in the awkward position of
speaking out, only to be mostly harassed and insulted. With Steve
himself participating in this crude behavior, including making up
excuses for this or that glitch, bug, or poor service.

There are no "sub-aliases". Each aliases is made independently, with
no further option such as "sub-alias". Each when deleted, should not
delete any other. I'm sure Steve knows about this glitch too, but
rather than alert people (so they can be sure to create a text
backup), he'd rather keep it swept under the carpet.

Especially when it comes to online security services that don't
acknowledge known glitches, and whose help

Sure. But when cotse.net advertises itself as "the best", and "all
queries are answered within 24 hrs."...it ought to stand by this. When
Thracian has made about 10 queries in a few weeks, with only 2 or 3
responded to, I'd say that his pointing this out is only fair. If
cotse.net says they are using volunteers, not all queries will be
answered promptly, please be patient"...then they wouldn't be lying
about their service as it really is.

Word of mouth? That's a large part of what Usenet's about. It is the
online equivalent of "word of mouth"...something that's "hot" (really
good) is quickly shared in newsgroups. I haven't come across any
discussions of alt.cotse, in doing a google-usenet search outside of
alt.cotse itself.

I believe that is necessary in order to encode the messages on a
user's hard drive, before transmission. If the javascript is not used
for any surreptitious reason, it is very secure.

One can learn to use PGP instead, if you do not want any javascript in
your world. Even Steve admitted the usefulness of javascript by
services that respect user privacy.

He's doing cotse customers a favor, by alerting them to glitches they
otherwise wouldn't know about, since not acknowledged.


Similar Posts