XPost: alt.privacy.anon-server   
   From: bounce.me@mini.mailer.msg   
      
   Hi all,   
      
   I have uploaded the latest oniux binary v0.6.0 at:   
      
   https://github.com/Ch1ffr3punk/oniux   
      
   with that and netcat, it is very easy to send anonymous emails   
   to onion email addresses, which are histed with an smtpdump(+)   
   server.   
      
   Example message with netcat usage:   
      
   $ oniux nc yeffqiea4xtcu6woyab6z6bz4oehisfuzgtmk4e277bydq25p7nha7ad.onion 2525   
   < m sg.txt   
   220 bob SMTPDump ESMTP Service ready   
   250-bob greets x   
   250-SIZE 1048576   
   250-STARTTLS   
   250-AUTH CRAM-MD5   
   250 ENHANCEDSTATUSCODES   
   250 2.1.0 Ok   
   250 2.1.5 Ok   
   354 Start mail input; end with .   
   250 2.0.0 Ok: queued   
   221 2.0.0 bob SMTPDump ESMTP Service closing transmission channel   
      
   The encrypted message, without any headers:   
      
   EHLO x   
   MAIL FROM:    
   RCPT TO:    
   DATA   
      
   2SzjXMFo4L+jEOfCoIkdPiGMUZnHvHZ8wbq43HLLqjAwor4bVDyFkIP9Bf7Fwfjq   
   lXC2HwD0eTiYLFHlt5D71+NTb+X9/NLPAoXD90kQyHGX97SPK5QE116qtmqRiItw   
   [...]   
   RYKbf08KSLDU5OLAPFfn91Y+htzSz1iMRPPYCvy6tHZq2rtyh/q8vCbih0lb7XIi   
   g32NVRiJMzjmlVrWPAXnPfOpOXiV3/J+6XtV1VHlZFmjNOn9pV4vMr6G1kxHIPBd   
   ZLrhRjq0AQxsYErTxc3SC5WbypaFH6WwAV/uY/UwVxWydThogdldBA==   
      
   .   
   QUIT   
      
   Please note, the email must use CRLF to be RFC compliant and to   
   be accepted by smtpdump(+)   
      
   The received message under Windows looks like this:   
      
   C:\Users\xxxxxxxxxxxxxx\Desktop>oget   
   Successfully processed: kvnye1dc.eml   
      
   Received: from x (localhost [127.0.0.1])   
           by bob (SMTPDump) with SMTP   
           for ; Wed, 30 Jul 2025 09:48:50 +0000 (UTC)   
      
   2SzjXMFo4L+jEOfCoIkdPiGMUZnHvHZ8wbq43HLLqjAwor4bVDyFkIP9Bf7Fwfjq   
   lXC2HwD0eTiYLFHlt5D71+NTb+X9/NLPAoXD90kQyHGX97SPK5QE116qtmqRiItw   
   [...]   
   RYKbf08KSLDU5OLAPFfn91Y+htzSz1iMRPPYCvy6tHZq2rtyh/q8vCbih0lb7XIi   
   g32NVRiJMzjmlVrWPAXnPfOpOXiV3/J+6XtV1VHlZFmjNOn9pV4vMr6G1kxHIPBd   
   ZLrhRjq0AQxsYErTxc3SC5WbypaFH6WwAV/uY/UwVxWydThogdldBA==   
      
   That way, should the receiving parties computer been compromised,   
   while decrypting offline, the attacker only sees this format and   
   not from where it originated. The sending party could also use a   
   pluto smtp relay, so in case the PC is compromised as well, the   
   attacker would only see the encrypted ORB and encrypted message.   
      
   Regards   
   Stefan   
      
   --   
   ----Ed25519 Signature----   
   43dcc9f31f42d474a8b9cd05b91f68f7e0ec9965ad717ec6a63aa3720e6793c8   
   a29ce47a4a4b32d3eda5ebaaa8b25126a412891f390c8e68a90b479ffaddf607   
   c0ffee5a36e581eb10f60b2831b3cdb955d2e7ef680dd282a8d43ad8b84b357a   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)