Bonum Certa Men Certa

British Intelligence, GCHQ, Oxford & Debian conspiracy theories, Edward & Una Brocklesby fact checking

posted by Roy Schestowitz on Jun 07, 2024

Reprinted with permission from Daniel Pocock.

At 21:00 UTC on 5 June 2024, I published the first disclosure about the secret expulsion of Edward Brocklesby from Debian.

A few hours later and some of the rogue elements at Debian started spreading more defamation about me. It looks like the disclosure about Debian's lack of competence for security has struck a chord and people need to look more deeply at this particular case.

As the elections are in progress the Internet is full of conspiracy theories right now. An Irish election candidate poking fun at British Intelligence should be viewed with scepticism and fact checked very carefully.

Therefore, I will simply link to some of the facts and leave it up to the community to draw conclusions.

The first thing to note is that GCHQ is reknowned for their use of puzzles. For example, they have published puzzles as a strategy for recruiting people. The stuff about GCHQ using puzzles is widely known and published by GCHQ themselves and it is also described by the press in the UK and abroad. From RTE, Ireland's national broadcaster:

An Irish code-breaker, along with two others, has proved he is almost a match for the UK's national intelligence and security agency by winning its Christmas card cryptography challenge.

One of the first things that people found about Edward Brocklesby is a web page about Chess scores from the Oxford Cambridge Varsity competition in London. The games took place in 1935 and 1936. The page tells us that this particular Edward Brocklesby was born 29 April 1914 and died 9 December 2004. Clicking through the pages we find a link to another article telling us this was Edward Willingham Brocklesby who was originally associated with Cambridge but later went to Oxford. However, the middle initial doesn't match Edward J Brocklesby in Debian.

In practice, we know that people are not always using their real names in Debian and free software. People may tweak their initials or use pseudonyms. For example, the woman using the name "cryptie" in the FSFE subsequently had to reveal she was a French Government employee moving to a job at the European Union. She admitted her real name is Amandine Jambert and her conflict of interest and resigned.

It is not uncommon for people to commit identity fraud by using the names of other real people, whether alive or dead, rather than making up names that are entirely fictitious. Using the name of somebody who is elderly or somebody with a disability is a special case.

The name of the FSFE is itself an example of identity fraud because it is confusingly similar to the real FSF. This type of thing is very common in open source software.

People found a HP Enterprise Forum account for Edward Brocklesby. The account was created 12 May 2003 and last used on 21 June 2011. It is not uncommon for accounts in online forums to be hacked so even if the account was created by the "real" Edward Brocklesby from Debian, it may have been used by another person in later years.

The 192.com directory service finds both Edward Brocklesby and Una Brocklesby living at the same address that is used in the document submitted to the IETF. 192.com tells us they are on the electoral roll at that address at the same time and both of them were removed from the electoral roll in 2002, not long after the Debian expulsion.

There are various reasons somebody could be removed from the electoral roll. They might die, they might move to another country or they might have simply moved to another address and decided not to enroll again. However, there are also special cases for police and military employees to have their status on the electoral roll protected.

There are many regular police units who have engaged in undercover activities. It would be wrong to assume every person using a fake name in Debian is with GCHQ or the NSA. London's Met Police issues with the undercover officer Mark Kennedy have been widely documented. It wouldn't be a big surprise to find people like this operating in free software communities.

There is an Una Brocklesby account on Trustpilot and she is in the UK and active between 2017 and 2024.

In the St Hugh's College, Oxford Chronicle of 1998-1999, we find that Una Brocklesby is listed in the staff section as a Finance Assistant.

Una Brocklesby, St Hugh's College, Oxford

This adds weight to the idea that they were either using their real names or they were very sophisticated deep cover agents, living as a couple, having paperwork and jobs.

Looking at Edward Brocklesby's activities in the debian-private cubby house over the years, we find most of his messages concern security topics. He appears to have various email addresses on different networks.

Subject: www.tr.debian.org security
Date: Sun, 6 Jun 1999 17:26:49 +0000
From: Edward Brocklesby <ejb@fairport.styx.uk.eu.org>
To: debian-private@lists.debian.org

Hi,
A user on #shells was offering to trade www.tr.debian.org. It might be an idea to check security on this host.
-- Edward Brocklesby System Administrator ejb@styx.uk.eu.org Styx Public Access Unix System http://www.styx.uk.eu.org

and in this second example, Brocklesby signs off with Diolch, which is Welsh.

Subject: Re: another security hole
Date: Sun, 11 Jul 1999 21:55:00 +0000
From: Edward Brocklesby <ejb@incest.dhis.org>
To: Josip Rodin <joy@cibalia.gkvk.hr>
CC: Grzegorz Stelmaszek <greg@tenet.pl>, Josip Rodin <jrodin@public.srce.hr>, security@debian.org, debian-devel@lists.debian.org, 39395@bugs.debian.org

On Sun, Jul 11, 1999 at 05:21:02PM +0200, Josip Rodin wrote: > > > Note bene - AIK debian still uses unpatched version of pine, so there is > > easy way to run any command via it IF you know to whom send an email. > > File a bug, if it already isn't reported.
I filed a bug on this. In the end, we decided it was not a pine bug, but in fact some other program was inserting the bad stuff.
(Bug#33099, BTW)
Diolch, Edward.

The bug report gives us another email address and permutation of the name:

From unknown Fri Jun 07 17:33:16 2024
Received: (at submit) by bugs.debian.org; 8 Feb 1999 20:12:40 +0000
Received: (qmail 26297 invoked from network); 8 Feb 1999 20:12:39 -0000
Received: from finch-post-10.mail.demon.net (HELO post.mail.demon.net) (194.217.242.38)
  by master.debian.org with SMTP; 8 Feb 1999 20:12:39 -0000
Received: from [212.228.198.242] (helo=klamath)
        by post.mail.demon.net with esmtp (Exim 2.12 #1)
        id 109x2j-0005B7-00
        for submit@bugs.debian.org; Mon, 8 Feb 1999 20:12:30 +0000
Received: by klamath.lilithfair.org
        via sendmail from stdin
        id <m109x2g-0005KHC@klamath> (Debian Smail3.2.0.102)
        for submit@bugs.debian.org; Mon, 8 Feb 1999 20:12:26 +0000 (GMT)
Message-ID: <19990208201225.A1194@klamath.lilithfair.org>
Date: Mon, 8 Feb 1999 20:12:25 +0000
From: "Edward John M. Brocklesby" <ejb@klamath.lilithfair.org>
To: submit@bugs.debian.org
Subject: PINE allows remote users to execute commands as the user running PINE, by sending an email
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.91.1i
X-Operating-System: Linux klamath 2.1.131
X-No-Archive: yes

Package: pine396-src Version: 2 Severity: critical
PINE does not handle the ` character correctly.
Take a look at this email:
************************** MIME MESSAGE FOLLOWS ************************** From: Attacker <attacker@eleet.net> To: Victim <victim@somewhere.net> Subject: Happy birthday ... MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="8323328-235065145-918425607=:319"
--8323328-235065145-918425607=:319 Content-Type: TEXT/PLAIN; charset='US-ASCII'
Make a wish...
--8323328-235065145-918425607=:319 Content-Type: TEXT/PLAIN; charset=``touch${IFS}ME``; name="logexec.c" Content-Transfer-Encoding: BASE64 Content-Description: wish Content-Disposition: attachment; filename="wish.c"
...it could be your last. *************************** MIME MESSAGE ENDS ***************************
When pine sees this, it expands:
text/plain; shownonascii iso-8859-1 %s; test=test "`echo %{charset} | tr '[A-Z]' '[a-z]'`" = iso-8859-1; copiousoutput
to this:
[...] execve </bin/sh> (sh) (-c) (test "`echo '``touch${IFS}ME``' | tr '[A-Z]' '[a-z]'`" = iso-8859-1)
This allows any command to be executed. The following patch works against PINE 4.10, it may require modification to compile against slink's version:
--- pine4.10.orig/pine/mailcap.c Wed Nov 18 13:00:15 1998 +++ pine4.10/pine/mailcap.c Mon Feb 8 09:17:46 1999 @@ -905,14 +905,18 @@ * have to put those outside of the single quotes. * (The parm+1000 nonsense is to protect against * malicious mail trying to overlow our buffer.) + * + * TCH - Change 2/8/1999 + * Also quote the ` slash to prevent execution +of arbirtrary code */ for(p = parm; *p && p < parm+1000; p++){ - if(*p == '\''){ + if((*p == '\'')||(*p=='`')){ *to++ = '\''; /* closing quote */ *to++ = '\\'; - *to++ = '\''; /* below will be opening quote */ - } - *to++ = *p; + *to++ = *p; /* quoted character */ + *to++ = '\''; /* opening quote */ + } else + *to++ = *p; }
fs_give((void **) &parm); @@ -954,7 +958,7 @@ */ if(!used_tmp_file && tmp_file) sprintf(to, MC_ADD_TMP, tmp_file); - + return(cpystr(tmp_20k_buf)); }

Other Recent Techrights' Posts

Evidence Contradicting Microsoft's Non-Denying Denials and Expectation of Many Layoffs Soon
"Microsoft has had this constant drip of layoffs for months."
At Least 3 Richard Stallman Talks in Europe Confirmed So Far, Next Week in Rome There's Another
Dr. Stallman has not announced this yet
 
They've Run Out of Things to Rebrand or Label as "AI"
The next few years will be interesting because if Microsoft lays off tens of thousands of workers each year, there won't be much left except mountains of debt and dying brands
The Register MS is Still Being Paid to Participate in the "AI" Ponzi Scheme Which Will Crash the Economy
The Register MS is hoping to get lucky by tricking people into a scam
Richard Stallman Confirms His Talk in Göteborg This Coming Friday
"The hosts say that the list will not be given to the state"
Most of the "Linux" Results This Morning in Google News Are LLM Slop From the Same Slopfarm, Plagiarising Phoronix
The main question is, does Google even care at this point?
Gemini Links 07/10/2025: Civil War and "Goodbye Web"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, October 06, 2025
IRC logs for Monday, October 06, 2025
The "AI Revolution" is Going Very Well, Right?
money that does not exist and alleged potential that is pure fiction
Links 06/10/2025: Scam Altman Himself Admits He Runs a Scam Based on a Bubble, US Administration Adopts “War From Within” Narrative to Crush Opposition/Dissent
Links for the day
Slopwatch: Fake Ubuntu 'Articles' and Google News Helps People Who Plagiarise Phoronix Using LLMs
Michael Larabel can't possibly be happy about that
6,000 Pages/Articles a Year
Today in one month from now the site turns 19
When Things Become So Ubiquitous That They're Almost Nameless
The notion or the concept of software freedom isn't tied to any particular brand or project, so it should still resonate
IDG Seems to Have Abandoned Sandra Henry Stocker's UNIX/Linux Column
Unless we hear otherwise or see some update/s, this may mark another death blow from IDG
Gemini Links 06/10/2025: Winter Nights and "Virtue Signaling"
Links for the day
Links 06/10/2025: Scientific Awards and Typhoon Matmo
Links for the day
IP Kat Gone Bonkers, Pushing Slop in Patents (Likely Illegal, With Severe Consequences)
AstraZenecaKat: "Last time, this Kat covered some practical steps on how to ensure client confidentiality when using AI tools (IPKat)."
Links 06/10/2025: Grokipedia as Malicious Slop, US 'Martial Law' a "New Normal"
Links for the day
Fake Economics and Clown Computing Circuses
who's gonna pay for these scams?
Nobel Prize in Economics Does Not Exist, It's Propaganda From Sveriges Riksbank
"It is that time of the year when it is important to remind people that there are no Nobel Prizes for professional wrestling, astrology, or economics"
Rust is Eating Linux
That's a recipe for problems
Cindy Cohn (Executive Director of EFF) is a Millionaire, Earned Almost $30,000 Per Month Before Departing While the EFF Lost Money
EFF is "Big Business"
Non-Denying Denial From Microsoft (Again) Regarding the End of XBox Consoles
It's kind of hilarious that even the site chosen by Microsoft to relay its BS, based on past loyalty, isn't quite buying it
Bringing Back Lost Articles From the 1990s: Microsoft Products Leave Door Open to NSA
Nothing has changed since then
When the Slop Bubble Pops People Will Say Richard Stallman Was Right (Again)
What was once known as Computer Science turned into "IT"
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, October 05, 2025
IRC logs for Sunday, October 05, 2025
Links 06/10/2025: Science, Hardware, and Andrej Babis Making a Comeback
Links for the day
Links 05/10/2025: Slow News Day and Wondering About the Canada Post Walkout
Links for the day
Gemini Links 05/10/2025: Telnet Debugging and The Programmer’s Brain
Links for the day
More Than "Just a Rumour": XBox Seems to Have Just Died
At this point, why would any studio out there target or partner with XBox?
How to Tell Your Community, Project or Company is Being Infiltrated by Saboteurs
How to identify nefarious social engineering
The Fortieth Birthday of the FSF Made Us Extremely Happy
It feels like the 'hacker community' is regrouping to discuss things and prepare for the next Big Challenge
Chat Control 2 Them, Not 2 U
Follow the advice of Dr. Patrick Breyer
Mozilla: Throw Away Your "Old" PC and Enable "Digital Rights Management (DRM)"
This is heading in a bad direction
Controlling Our Computing for Another Forty Years
40 years of freedom
Motivational Small Place to Run Large Sites
We deem this scenery motivational and inspiring
Techrights' Text Version (Daily Bulletin) Turns Five This Month
our plain-text bulletins are turning 5 this month
We'll Continue Covering the Moribund OSI and Other Dysfunctional if Not Hostile Institutions
Stefano Maffulli's departure is due to his defection and due to him failing the mission in pursuit of money (his salary)
Microsoft XBox is Dying as More Retailers Stop Stocking It and Massive Layoffs Planned Again
Microsoft is circling down the drain
Links 05/10/2025: Lufthansa Layoffs (4,000) and More Spotify Woes (Aside From Massive Debt)
Links for the day
The Free Software Foundation's Livestream Has Ended, Video/s Might be Online Next
I've asked whether they'll upload video of some of the event; I still wait for an answer
The Register MS Does Not Know the Difference Between Microsoft GitHub and GitLab
At the time of writing (October 5) the article from "Thu 2 Oct 2025" remains uncorrected
Linux and the Freedom Paradox
Linux is losing freedom if some external actors who only use Microsoft tools for development wrest control
"Bullshit Generators" (What RMS Calls LLMs) and Fake Images Already Target the FSF
Why does Google News promote fake articles about the FSF while omitting all the real ones?
Software Patents as a Bubble
Don't invest resources in hype; if you detect a bubble, run away from it
Links 05/10/2025: Political Leftovers, Climate Change, and Security Incidents
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, October 04, 2025
IRC logs for Saturday, October 04, 2025