Is it Possible to Mail Bomb Using Eudora?

The obvious way to mail bomb with Eudora doesn’t work. The obvious way is to put the address of your
victim into the address list a few thousand times and then attach a really big file. But the result will be only
one message going to that address. This is no thanks to Eudora itself. The mail daemons in common use on
the Internet such as sendmail, smail and qmail only allow one message to be sent to each address per email.
Of course there are better ways to forge email with Eudora. Also, there is a totally trivial way to use Eudora
to send hundreds of gigantic attached files to one recipient, crashing the mail server of the victim’s ISP. But
I’m not telling you how because this is, after all, a Guide to (mostly) Harmless Hacking.
But next time those Global kOS dudes try to snooker you into using one of their mail bomber programs
(they claim these programs will keep you safely anonymous but in fact you will get caught) just remember all
they are doing is packaging up stuff that anyone who knows two simple tricks could do much better with
Eudora. (If you are a legitimate computer security professional, and you want to join us at Infowar in solving
the problem, contact me for details and we’ll think about whether to trust you.)
************************************************
Evil Genius Tip: This deadly mailbomber thingy is a feature, yes, honest-to-gosh intended FEATURE, of
sendmail. Get out your manuals and study.
************************************************
The ease with which one may forge perfect mail and commit mail bombings which crash entire ISP mail
servers and even shut down Internet backbone providers such as has recently happened to AGIS may well
be the greatest threat the Internet faces today. I’m not happy about revealing this much. Unfortunately, the
mail forgery problem is a deeply ingrained flaw in the Internet’s basic structure. So it is almost impossible to
explain the basics of hacking without revealing the pieces to the puzzle of the perfect forgery and perfect
mailbombing.
If you figure it out, be a good guy and don’t abuse it, OK? Become one of us insiders who see the problem -
- and want to fix it rather than exploit it for greed or hatred.