<p dir="ltr">It's simple.<br>
Someone made a mistake. Best was initially assumed full of shit by JYA, as he's a neophyte - and is consistently 'off-message' for this list.</p>
<p dir="ltr">Others, wishing to read more into it, other than face value of hubris, see plans within plans.</p>
<p dir="ltr">At the end of the day, Bests' disclosures amount to nothing of consequence. At best he overhyped them, being a neophyte. At worst he's JTRIGd the list, hilariously easily. The technical cognoscenti on the list stay quiet, "code compiling" as the good doctor says.</p>
<p dir="ltr">In general, this oversight is valuable because it demonstrates one thing:<br>
Even if you try to delete it.<br>
If there's a signal it will leak. Purposefully or not.</p>
<p dir="ltr">When the protocol you use doesn't provide metadata anonymity, don't expect it because you won't get it. If you don't understand this - keep studying.</p>
<p dir="ltr">Why guess at 'motivation'? Do we need to FUD yet another leaker site? Put your money where your mouth is - improve it, donate, write your own, fix the bug & plug the hole.</p>
<p dir="ltr">Travis</p>
<br><div class="gmail_quote"><div dir="ltr">On Sun, Oct 11, 2015, 5:28 PM Dr. J Feinstein <<a href="mailto:drjfeinstein@mail.com" target="_blank">drjfeinstein@mail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Maybe, but why those foldersmonths only? Itd be good to hear from JYA, especially b/c Netsol contradicts him.<br>
<br>
> Sent: Sunday, October 11, 2015 at 9:13 PM<br>
> From: "Alfie John" <<a href="mailto:alfiej@fastmail.fm" target="_blank">alfiej@fastmail.fm</a>><br>
> To: <a href="mailto:cypherpunks@cpunks.org" target="_blank">cypherpunks@cpunks.org</a><br>
> Subject: Re: Why cryptome sold web logs to their paying customers?<br>
><br>
> On Mon, Oct 12, 2015, at 04:08 AM, Dr. J Feinstein wrote:<br>
> > Resend–HTML email scrubbed<br>
> ><br>
> > Calling bullshit. Mirimirs right, this makes no sense. And JYA says<br>
> > netsol won't let him delete the logs but Netsol says logs are disabled<br>
> > by default[<br>
> > <a href="https://www.networksolutions.com/support/how-to-enable-download-the-web-logs/" rel="noreferrer" target="_blank">https://www.networksolutions.com/support/how-to-enable-download-the-web-logs/</a>]<br>
> > and you have to turn them on.<br>
> ><br>
> > So how the fuckd this really happen?<br>
> ><br>
> > Mirimir <<a href="mailto:mirimir@riseup.net" target="_blank">mirimir@riseup.net</a>> Are you arguing that users could have<br>
> > found those logs?<br>
> ><br>
> > I almost can't imagine that. Logs are normally in /var/log/ somewhere,<br>
> > and I can't imagine making them searchable. And indeed, I can't<br>
> > imagine how Cryptome archives would have included anything from<br>
> > /var/log/, even after system restore from backups.<br>
> ><br>
> > <--SNIP--><br>
> ><br>
> > > Should access logs be kept for that long? Absolutely not. From what<br>
> > > I> have read in the email exchange that was posted, the log files<br>
> > > were> included in a NetSol total restore. My guess is that<br>
> > > John/Cryptome did> not intentionally keep these files, and did not<br>
> > > realize these files were> included in the archive.<br>
> > But that's the thing. Logs should have been in /var/log/. And how<br>
> > would the "NetSol total restore" have changed that?<br>
><br>
> Not necessarily...<br>
><br>
> Logs in /var/log is where they should be by default, but if the box is<br>
> on a shared hosting account, then things are completely different. For<br>
> instance, Bluehost charges $3.95/month, which gets you a home directory<br>
> on a box shared with hundreds of other users. In your home directory,<br>
> you get something like (from memory, which was a long, long time ago):<br>
><br>
> ~/<br>
> ~/public_www/<br>
> ~/public_www/html/<br>
> ~/public_www/access_log<br>
> ~/public_www/error_log<br>
><br>
> So as you can see, the user does have permissions to access logs, but<br>
> are kept in the user's _home_ directory. Now you can see why this could<br>
> have mistakenly been distributed:<br>
><br>
> tar zcf cryptome-backup.tar.gz ~/<br>
><br>
> The backup would have also slurped in all the logs. There was no malice,<br>
> just an easy mistake that everyone here could have make given the same<br>
> circumstances.<br>
><br>
> Alfie<br>
><br>
> --<br>
> Alfie John<br>
> <a href="mailto:alfiej@fastmail.fm" target="_blank">alfiej@fastmail.fm</a><br>
><br>
><br>
<br>
</blockquote></div>