Annexcafe User2User newsgroup
~BD~
news:jde5l0GT...@GAMERA.annex.com...
"Reckon he finally figured it out?"
******
That is what 'Grybeard' posted after I had been bannished from Annexcafe.
*Is* www.Annexcafe.com a safe place for folk to go to get help with their
computer problems?
--
Dave
Scarlett
Yes it is...safe from k00ks like you.
Kelb tal-Fenek
> ~BD~ wrote:
>> "Grybeard" <grybe...@yahoo.com> wrote in message
>> news:jde5l0GT...@GAMERA.annex.com...
>>
>> "Reckon he finally figured it out?"
>>
>> ******
>>
>> That is what 'Grybeard' posted after I had been bannished from
>> Annexcafe.
>> to get help with their computer problems?
>
> Yes it is...safe from k00ks like you.
This Annexcafe; a private server I assume? Only one access point?
For me, this spells danger of the worst kind. And how are these
kooks kept away and most importantly; who decides what a kook is?
Since you are posting to [alt.computer.security] and
[alt.usenet.kooks], *they* might suspect you are trying to conceal
something from *them* because that security newsgroup is full of
posts about how to post anonymously. What are you trying to hide?
Are you doing something illegal? And you must be a kook too; why
are you posting in a newsgroup that has kook in its name? You
should be bannished too! Or would you prefer the whip? And your
name, Scarlett; a female sorcerer? Enchantress? Don't be coming
around here casting your spells. Witch!!!!!!!!!!!1
Moral of the story: Usenet good. Private servers bad.
--
WITCH, n.
1: Any ugly and repulsive old woman, in a
wicked league with the devil.
2: A beautiful and attractive young woman,
in wickedness a league beyond the devil.
Scarlett
I am not ugly!
Kelb tal-Fenek
I know. Oh baby! Sizzle!!!!!!!!!!!!!!1
~BD~
"Kelb tal-Fenek" <sp...@tioat.net> wrote in message
news:gtt55a$1nr$1...@tioat.net...
>
> This Annexcafe; a private server I assume?
Correct.
> Only one access point?
As far as I am aware www.annexcafe.com
> For me, this spells danger of the worst kind.
How would good and honest folk ever know about the existence of the
facilities available - all free, too?
> Moral of the story: Usenet good. Private servers bad.
I think you are right! The back-up server for Annexcafe may be found on
another private server, here:- www.dogagent.com
It certainly look 'different' to ordinary web sites - and only works with
Internet Explorer! Take a peek (no pun intended!)
--
Dave
Kelb tal-Fenek
> Kelb tal-Fenek wrote:
>>
>> This Annexcafe; a private server I assume?
>
> Correct.
Why are you talking about a private news server on usenet?
>> Only one access point?
>
> As far as I am aware www dot <snip>
>
>> For me, this spells danger of the worst kind.
>
> How would good and honest folk ever know about the existence of the
> facilities available - all free, too?
Why do they ban good and honest folk like you from that site?
>> Moral of the story: Usenet good. Private servers bad.
>
> I think you are right! The back-up server for Annexcafe may be found on
> another private server, here:- www dot <snip>
> It certainly look 'different' to ordinary web sites - and only works with
> Internet Explorer! Take a peek (no pun intended!)
Internet Explorer? No fucking way! Won't run on linux and I wouldn't
use that piece of shit anyway.
~BD~
>> This Annexcafe; a private server I assume?
>>
>> Correct.
>
> Why are you talking about a private news server on usenet?
Why? In the vague hope that someone, somewhere, who has an in-depth
knowledge of 'computing' and 'malware', will go there and explore in depth.
My perception is that there are 'bad guys' operating there, with or without
the knowledge of the server owner. In particular, I am confident that folk
have posted links in the User2User groups (there is a US group and a UK
group) which led to URL's hosting malware. Clicking on links on U2U (before
I knew any better!) took me to all kinds of bogus sites. The 'Sysop' of the
UK U2U site (Ann) sent me (at my request) a jpg screenshot of her PC (she
was having malware problems and I was tryin to help her). I opened it with
'notepad' and found about 12 live links which took me to websites typical of
Spam selling (Viagra etc). Not possible? Well - it happened!
> Why do they ban good and honest folk like you from that site?
They never told me. It happened after I confirmed that I am now absolutely
certain that I'm being tasked to pursue matters relentlessly until good
defeats evil here on the web. It has been extremely lonely at times and I'd
welcome help from anyone who is willing and able to help me achieve His aim.
Whilst I knew little about 'computing' per se 3 years ago - I have learnt
much about many things, but still know so little. Interestingly, though,
whenever I'm about to give up, a little prayer seems to prompt another
thought, opening up yet another route to follow. It really does work just
that way!
>>The back-up server for Annexcafe may be found on another private server,
>>here in the UK.
> Internet Explorer? No f***ing way! Won't run on linux and I wouldn't
> use that piece of sh*t anyway.
I understand your sentiments, although I believe IE8 is much
improved.<smile>
Using linux will not stop you visiting www.dogagent.com in the first
instance to explore. Someone reading here may have access to IE as well as
linux or OSX and be willing to take a looksee and report what they find.
HTH
--
Dave
Beauregard T. Shagnasty
> Using linux will not stop you visiting www.dogagent.com in the first
> instance to explore. Someone reading here may have access to IE as
> well as linux or OSX and be willing to take a looksee and report what
> they find.
Using Linux with Firefox and Opera, found:
one of world's worst web sites. :-/
Once past the splash page to:
http://www.dogagent.com/nindex.html
I found a page with 991 HTML errors. Not a record, though. And all the
VBScript has no effect.
Note that the splash page has some very annoying JavaScript code that
wants to take over my browser, by using new windows with no toolbars or
menu bars:
function openWIN()
{window.open("nindex.html","_blank","status=no,toolbar=no,menubar=no");
Site Rating: 0 | | | | 5 | | | | 10
^
^
--
-bts
-Friends don't let friends drive Windows
Kelb tal-Fenek
Thanks for the info. That is *not* the kind of site I would want to
visit.
Kelb tal-Fenek
>
> "Kelb tal-Fenek" <sp...@tioat.net> wrote in message
> news:gu6e7i$uv4$2...@tioat.net...
>
>>> This Annexcafe; a private server I assume?
>>>
>>> Correct.
>>
>> Why are you talking about a private news server on usenet?
>
> Why? In the vague hope that someone, somewhere, who has an in-depth
> knowledge of 'computing' and 'malware', will go there and explore in depth.
>
> My perception is that there are 'bad guys' operating there, with or without
> the knowledge of the server owner. In particular, I am confident that folk
> have posted links in the User2User groups (there is a US group and a UK
> group) which led to URL's hosting malware. Clicking on links on U2U (before
> I knew any better!) took me to all kinds of bogus sites. The 'Sysop' of the
> UK U2U site (Ann) sent me (at my request) a jpg screenshot of her PC (she
> was having malware problems and I was tryin to help her). I opened it with
> 'notepad' and found about 12 live links which took me to websites typical of
> Spam selling (Viagra etc). Not possible? Well - it happened!
This UK U2U is part of Annexcafe? And explain how you found links
inside a jpg file with notepage.
>> Why do they ban good and honest folk like you from that site?
>
> They never told me. It happened after I confirmed that I am now absolutely
> certain that I'm being tasked to pursue matters relentlessly until good
> defeats evil here on the web. It has been extremely lonely at times and I'd
> welcome help from anyone who is willing and able to help me achieve His aim.
Tasked? I'm having some difficulty trying to understand what you are
talking about. Who is giving you this task to defeat evil on the web
and what does this have to do with usenet?
> Whilst I knew little about 'computing' per se 3 years ago - I have learnt
> much about many things, but still know so little. Interestingly, though,
> whenever I'm about to give up, a little prayer seems to prompt another
> thought, opening up yet another route to follow. It really does work just
> that way!
>
>>>The back-up server for Annexcafe may be found on another private server,
>>>here in the UK.
>> Internet Explorer? No f***ing way! Won't run on linux and I wouldn't
>> use that piece of sh*t anyway.
>
> I understand your sentiments, although I believe IE8 is much
> improved.<smile>
>
> Using linux will not stop you visiting www <dot> <snip> in the first
> instance to explore. Someone reading here may have access to IE as well as
> linux or OSX and be willing to take a looksee and report what they find.
But why should I want to explore that site? Are there links to bogus
sites there?
Beauregard T. Shagnasty
> Thanks for the info. That is *not* the kind of site I would want to
> visit.
While the site is quite annoying, I don't see anything actually
*malicious* about it. In some of the IE-only VBScript, the author
presents a mess of clickable links to a bunch of ActiveX components, but
they are all from the Microsoft activex.microsoft.com site. Not likely
malware.
The author does demonstrate his complete and total lack of clue, though.
~BD~
But it's for dog lovers!
I looked here http://www.dogbreedinfo.com/pharaohhound.htm
Surely with a user-name like yours, there is a kind of link?!!!
--
Dave
~BD~
"Beauregard T. Shagnasty" <a.non...@example.invalid> wrote in message
news:gu9dp9$4c3$1...@news.motzarella.org...
Thanks for taking a look, BTS
It seems you were not too impressed! Why then, I wonder, would Mr Gregory
Gooden, the owner of www.annex.com , select the owner of Dogagent (a certain
Dave Higham - who recently responded to me in 'microsoft.public.test here' -
I'll copy his Header from that post at the end of this message) to act as
his back-up facility in case of an Annex server failure?
Something does not ring true - of that I am quite certain!
***************
From: "Dave H" <spam...@pepedog.com>
References: <6F22962C-C429-4EFC...@microsoft.com>
<0423819C-7561-4621...@microsoft.com>
<OMdRFAi...@TK2MSFTNGP03.phx.gbl>
<7FA72FD5-4A8C-4577...@microsoft.com>
In-Reply-To: <7FA72FD5-4A8C-4577...@microsoft.com>
Subject: Re: Anyone want to respond to test?
Date: Fri, 8 May 2009 12:02:27 +0100
Lines: 9
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="UTF-8";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Windows Mail 6.0.6001.18000
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
Message-ID: <#wE9Qy8z...@TK2MSFTNGP03.phx.gbl>
Newsgroups: microsoft.public.test.here
NNTP-Posting-Host: dogagent.com 87.194.121.94
Path:
news.motzarella.org!feeder.motzarella.org!motzarella.org!feeder.erje.net!news2.arglkargh.de!news.pimp.lart.info!newsfeed.freenet.de!feeder.news-service.com!newshub.sdsu.edu!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
Xref: news.motzarella.org microsoft.public.test.here:5069
"BoaterDave" <Boate...@discussions.microsoft.com> wrote in message
news:7FA72FD5-4A8C-4577...@microsoft.com...
> So - Why doesn't it show in Outlook Express 6 newsgroup -
> msnews.microsoft.com 'microsoft.public.test.here' group?
>
> I'm always curious. Can anyone advise? Thanks.
Because you suck
*********
I cannot help but find it intriguing that he should be in any way interested
in my search for bad guys.
He certainly doesn't seem to like me!
--
Dave
Beauregard T. Shagnasty
> "Beauregard T. Shagnasty" wrote:
>> ~BD~ wrote:
>>> Using linux will not stop you visiting www.dogagent.com
>>
>> Site Rating: 0 | | | | 5 | | | | 10
>> ^
>
> Thanks for taking a look, BTS
>
> It seems you were not too impressed! Why then, I wonder, would Mr
> Gregory Gooden, the owner of www.annex.com , select the owner of
> Dogagent (a certain Dave Higham - who recently responded to me in
> 'microsoft.public.test here' - I'll copy his Header from that post at
> the end of this message) to act as his back-up facility in case of an
> Annex server failure?
Examining the annex.com web site might indicate that its owner is also
lacking clues about how to write a site that gets much above that "0"
rating. It is, first thing I notice, very slow to respond (even on my
high-speed cable). Superfluous JavaScript. Last millennium style code.
The web hosting plans are about twice as expensive as the norm - for a
good deal less service than the norm. For example, my web site host's
Basic plan offers 40 times the monthly transfer rate and 15 times the
storage, for half the price of annex.com's Basic plan. :-/
> Something does not ring true - of that I am quite certain!
Well, maybe Mr Higham has some knowledge of how web servers operate.
This is, of course, a WAG.
~BD~
"Beauregard T. Shagnasty" <a.non...@example.invalid> wrote in message
WAG? Google gives me 16,300,000 results! Please clarify. TIA
FYI - This URL gives some extra background
http://www.pqlr.org/bbs/viewtopic.php?f=15&t=293&p=8365#p8365
Some 'interpretation' is required I'm afraid. Btw, Annexcafe has over 300
newsgroups, all funded by a business losing money and run by a recovering
alchoholic! Hmmm!
******
Annexcafe is at risk, and it is up to us to pitch in and help get us past a
rocky period. I had hoped to be able to handle the situation without
worrying everyone, but with Gregory having to be away for so long to be with
his very ill mother and her deteriorating condition, time has begun to run
out, and I need as much help as I can get.
The situation is this. Gregory's paying business, Annex Technologies, Inc,
which supports Annexcafe is losing money, approximately $2,000 a month.
Obviously, Gregory can't continue to cover this loss. Nor could we at the
Cafe. Gregory is working to cut back on expenses, and trying desperately for
us not to be one of his cutbacks. The real solution is for him to be able to
increase his customer base for Annex, and that is where we come in. WE CAN
HELP. We have an incredible pool of talent here at Annexcafe. What I am
hoping we can do is work together to design a blockbuster ad campaign for
Annex Technologies that will boost them into the black, let us all rest more
comfortably and give Gregory the time he needs to be with his mother.
Obviously, we will not spam, but I'm asking we all pool resources in support
of this project, not just to save ourselves, but to thank Gregory and show
him how appreciative we are of his years of generosity toward us. Part of
the delay was that with Gregory gone mid-effort, I didn't completely
understand what Annex Tech offered that others didn't offer for less money,
but Gregory and I had a long discussion last Thursday, and he really does
have something unique to offer. If we work as a team, I think we can help
him sell it. Toward that goal, I am opening the newsgroup Annexcafe.Team.
The purpose of this group will be to brainstorm, to share advertising ideas,
to post graphics and web ads, whatever YOU think will help promote Annex. We
can then take these ads and plans to our individual communities, both
virtual and IRL and see what we can do.
Annex Technologies is in the webhosting business. They're shifting to
hosting with Control Panel, for plans starting at $9.95 a month. Clients can
pay on a month-to-month basis (or for 6 months or a year at a discount), and
no contracts are required, so if a client wants to try out the service,
they're only committed for one month. One of the company's main selling
points is service. They are large enough to have several servers, thus the
crash of one server does not mean the client's resources go offline, but not
so large that customer service is outsourced or designated to call centers.
The support staff for Annex.com knows the individual clients and possesses a
history of any problems the client has been having, and issues are often
answered by Gregory himself.
Annex is particularly good for people or small businesses that want webpages
that load quickly without ads, but have little experience working with html
or are not wonderful with computers, particularly if they want webpages with
complicated functions, such as separate message boards, mailboxes (with spam
and antiviral filters), blogs, webnews, and photo galleries. Accessing these
features is quite easy, but critically, Annex staff will quite literally
guide a client, step by step, through the creation of anything that client
might be finding difficulty with. One feature I found really cool was the
ability for Annex to have an online store created for a client, up and
running, within a week's time.
Oh, one other cool feature is the "Rescue Service" (think firetrucks and
ambulances). Since most webhosting services come down to a guy with a
server, Annex offers a service where, if you have notification that your
current webhost is about to be shut down, taking your site with it, Gregory
will download all the information from your site, and upload it to the Annex
server.
The current site that best represents them is http://*****.com. If there are
any links there to development services, those are being phased out. He's
also planning to make some other updates to the website.
Gregory's got an admitted weakness in the advertising department (though we
adore him!). Considering I'm a total tech dummy, I think it'd be great to
appeal to people who are quite confused by the whole business of setting up
a webpage, and particularly selling stuff online. I have some rudimentary
html skills, but things like setting up customized photo galleries, message
boards, or certainly secure webpages for online sales is far beyond my
capabilities, and I'm hoping to reach my fellow dum dums. Even the term "web
hosting" for many people I've talked to, including those who'd like to set
up websites with galleries of their vacations and grandchildren and such but
don't know how to go about doing it, is a bit too technical. While I'd love
contributions of art/ads, etc, in the same sense we have for our honored
artists but with a product oriented direction, what I want to *decidedly*
avoid, as I mentioned above, is creating spam. We're rabid about anti-spam
here at the Cafe, and it certainly wouldn't be fair, even with good intent,
to inflict on other servers what we don't allow ourselves.
So you have the description, you have the board, and naturally, we
appreciate any and all help!
Ishie (Aka ........ shewhocannotbenamed)
Also: The addy for contributions is:
Annex Technologies
15315 Magnolia
Suite 203
*somewhereinCA*, CA 91403
Alternately, people can go to the main webpage
http://www.*thatLIBERALgroup*.com/main.cfm
and scroll down to the "Support Annex"
Paypal Donate button in the lower right hand corner.
Beauregard T. Shagnasty
> "Beauregard T. Shagnasty" wrote:
>> This is, of course, a WAG.
>
> WAG? Google gives me 16,300,000 results! Please clarify. TIA
Heehee. You can find most 'acronyms' at this site, including:
http://www.acronymfinder.com/WAG.html
It's not first on the list... (hint: guess)
See also: SWAG
> FYI - This URL gives some extra background
> http://www.pqlr.org/bbs/viewtopic.php?f=15&t=293&p=8365#p8365
..a thread begun in August 2006. <g>
> Some 'interpretation' is required I'm afraid. Btw, Annexcafe has over 300
> newsgroups, all funded by a business losing money and run by a recovering
> alchoholic! Hmmm!
Well, I guest that answers two questions. One: why the hosting is
expensive, and Two: why the annex.com code is so old-style.
~BD~
> ~BD~ wrote:
>> "Kelb tal-Fenek" <sp...@tioat.net> wrote in message
>> news:gu6e7i$uv4$2...@tioat.net...
>>
>>>> This Annexcafe; a private server I assume?
>>>>
>>>> Correct.
>>> Why are you talking about a private news server on usenet?
>> Why? In the vague hope that someone, somewhere, who has an in-depth
>> knowledge of 'computing' and 'malware', will go there and explore in depth.
>>
>> My perception is that there are 'bad guys' operating there, with or without
>> the knowledge of the server owner. In particular, I am confident that folk
>> have posted links in the User2User groups (there is a US group and a UK
>> group) which led to URL's hosting malware. Clicking on links on U2U (before
>> I knew any better!) took me to all kinds of bogus sites. The 'Sysop' of the
>> UK U2U site (Ann) sent me (at my request) a jpg screenshot of her PC (she
>> was having malware problems and I was tryin to help her). I opened it with
>> 'notepad' and found about 12 live links which took me to websites typical of
>> Spam selling (Viagra etc). Not possible? Well - it happened!
>
> This UK U2U is part of Annexcafe? And explain how you found links
> inside a jpg file with notepage.
It is! See here:-
http://www.annexcafe.com/community/index.cfm/Computing%20&%20Tech%20Talk/
With regard to the 'screenshot', it was sent as an attachment to an
email message. I saved it to my machine (probably to my desktop). I then
right-clicked the file and selected to 'Open with' and specified
'Notepad' (the basic Windows programme - not "notepage"!)
>
>>> Why do they ban good and honest folk like you from that site?
>> They never told me. It happened after I confirmed that I am now absolutely
>> certain that I'm being tasked to pursue matters relentlessly until good
>> defeats evil here on the web. It has been extremely lonely at times and I'd
>> welcome help from anyone who is willing and able to help me achieve His aim.
>
> Tasked? I'm having some difficulty trying to understand what you are
> talking about. Who is giving you this task to defeat evil on the web
> and what does this have to do with usenet?
Perhaps you should explore here:- http://uk.alpha.org/
I attended this course three years ago - very thought-provoking it was
too! Somewhere along the line I made a connection between bad guys
stealing money 'on-line' and then using same to train/fund terrorists
who wish to kill us
>> Whilst I knew little about 'computing' per se 3 years ago - I have learnt
>> much about many things, but still know so little. Interestingly, though,
>> whenever I'm about to give up, a little prayer seems to prompt another
>> thought, opening up yet another route to follow. It really does work just
>> that way!
>>
>>>> The back-up server for Annexcafe may be found on another private server,
>>>> here in the UK.
>>> Internet Explorer? No f***ing way! Won't run on linux and I wouldn't
>>> use that piece of sh*t anyway.
>> I understand your sentiments, although I believe IE8 is much
>> improved.<smile>
>>
>> Using linux will not stop you visiting www <dot> <snip> in the first
>> instance to explore. Someone reading here may have access to IE as well as
>> linux or OSX and be willing to take a looksee and report what they find.
>
> But why should I want to explore that site? Are there links to bogus
> sites there?
>
Simply out of general interest. The newsgroups hosted there (Dogagent)
have some very good photographs if nothing else (I never discovered any
containing malware or links to same, but I do believe malware has been
known to be hidden inside binaries).
There are 'Squats' available for use by 'others' too - Annexcafe have
used same - at, apparently, no cost. Very generous, don't you think?
More interesting to me was/is the fact that the number one
moderator/policeman at Annexcafe (Troli - aka Trollisa - aka Li) is also
employed in that very same role by Dave Higham at Dogagent.com
There is, I'm sure, another connection not far beneath the surface!
HTH
--
Dave
~BD~
> In alt.computer.security, ~BD~ wrote:
>
>> "Beauregard T. Shagnasty" wrote:
>>> This is, of course, a WAG.
>> WAG? Google gives me 16,300,000 results! Please clarify. TIA
>
> Heehee. You can find most 'acronyms' at this site, including:
> http://www.acronymfinder.com/WAG.html
>
> It's not first on the list... (hint: guess)
> See also: SWAG
>
>> FYI - This URL gives some extra background
>> http://www.pqlr.org/bbs/viewtopic.php?f=15&t=293&p=8365#p8365
>
> ..a thread begun in August 2006. <g>
>
>> Some 'interpretation' is required I'm afraid. Btw, Annexcafe has over 300
>> newsgroups, all funded by a business losing money and run by a recovering
>> alchoholic! Hmmm!
>
Thanks for your response once again, BTS
I enjoy your sense of humour! ;)
IMO there are some *very* clever folk responding to queries on U2U
Should you have the time, why not register with Annexcafe, go to U2U and
ask any technical question you can think of which might stretch to
'average' adviser.
I'll wager that you get a great selection of replies!
Btw, did you come across the Webrings?
You could start here http://webrings.annexcafe.com/?Stats&id=95
The info. doesn't quite tie in with the activity in the group AFAICT.
Cheers
--
Dave
~BD~
Thanks for your response once again, BTS
I enjoy your sense of humour! ;)
IMO there are some *very* clever folk responding to queries on U2U
Should you have the time, why not register with Annexcafe, go to U2U and
ask any technical question you can think of which might stretch an
'average' adviser.
I'll wager that you'll get a great selection of replies!
Beauregard T. Shagnasty
> Thanks for your response once again, BTS
> I enjoy your sense of humour! ;)
Thenk yew.
> Should you have the time, why not register with Annexcafe,
Time is short. Life goes on. Finding time here in retirement for such
extra-curricular activities is difficult. I think I'll have another nap.
> Btw, did you come across the Webrings?
No, I had not. Odd stats there... about an 20:1 ratio of bots to humans,
and virtually all of the humans use Internet Explorer.
Tim Jackson
> Kelb tal-Fenek wrote:
>> ~BD~ wrote:
>>> The 'Sysop' of the UK U2U site (Ann) sent me
>>> (at my request) a jpg screenshot of her PC (she was having malware
>>> problems and I was tryin to help her). I opened it with 'notepad' and
>>> found about 12 live links which took me to websites typical of Spam
>>> selling (Viagra etc). Not possible? Well - it happened!
>>
You took a file from a known compromised computer and then were
surprised that the file was compromised? Why?
>>
>>>> Why do they ban good and honest folk like you from that site?
>>> They never told me. It happened after I confirmed that I am now
>>> absolutely certain that I'm being tasked to pursue matters
>>> relentlessly until good defeats evil here on the web. It has been
>>> extremely lonely at times and I'd welcome help from anyone who is
>>> willing and able to help me achieve His aim.
>>
>> Tasked? I'm having some difficulty trying to understand what you are
>> talking about. Who is giving you this task to defeat evil on the web
>> and what does this have to do with usenet?
>
>
> Perhaps you should explore here:- http://uk.alpha.org/
>
> I attended this course three years ago - very thought-provoking it was
> too! Somewhere along the line I made a connection between bad guys
> stealing money 'on-line' and then using same to train/fund terrorists
> who wish to kill us
>
>
So your invisible friend told you that you should become a vigilante
hunting down people behaving suspiciously on the 'net? That's some big
order.
It doesn't sound surprising to me that guys struggling to keep a failing
business above water will a) behave somewhat suspiciously, and will be
suspicious of others' motives, and b) take risks which might allow
others to take advantage of their site for nefarious purposes, or at
least fail to perform due diligence in ensuring they don't.
It is commonly said in the security business "if you have nothing to
hide you have nothing to fear". This may be true in specific
circumstances, but unfortunately there are few people who have nothing
to hide one way or another. Many people behave secretively on the basic
principle of "don't trust anyone", in some cultures it is endemic. So
strange behaviour isn't per se evidence of criminal activity. This is
really a variant on "Just because you are paranoid doesn't mean they
aren't out to get you."
What I am saying is that if you chase every suspicious kook on the net
you will be a busy guy indeed, while the Mafya gets on with business as
usual by the usual methods of broadcasting malware using bot-nets to
obscure their origin, and generally leaving the talking about it on
newsgroups to teenage kids with big mouths.
Tim Jackson
©Ari®
Shit, ain't that the truth.
--
A fireside chat not with Ari!
http://tr.im/holj
Motto: Live To Spooge It!
~BD~
> In alt.computer.security, ~BD~ wrote:
>
>> Thanks for your response once again, BTS
>> I enjoy your sense of humour! ;)
>
> Thenk yew.
YW :)
>> Should you have the time, why not register with Annexcafe,
>
> Time is short. Life goes on. Finding time here in retirement for such
> extra-curricular activities is difficult. I think I'll have another nap.
I do understand the time demands - one wonders how one ever had the time
to actually earn a living! Perhaps when you awaken? <g>
>> Btw, did you come across the Webrings?
>
> No, I had not. Odd stats there... about an 20:1 ratio of bots to humans,
> and virtually all of the humans use Internet Explorer.
I know nothing about server stats. Perhaps you'd review these and
comment thereafter:-
Server status:
Server running
Allowing remote connections
Parameters c 10 i 50 (0) l 2000000 o 1011 t 300 H 2 T 60 X 0 normal
specified
Not reserved
Readers follow enabled
Perl filtering enabled
Perl filter stats: Pass: 1562 Reject: Refuse: MD5: 0 PHL: 0 FSL: 0
Disk usage:
/etc/news 20297852 Kbytes available
(58.7%)
/var/lib/news 20297852 Kbytes available
(58.7%)
/var/log/news 20297852 Kbytes available
(58.7%)
/var/spool/news/articles 20297852 Kbytes available
(58.7%)
/var/spool/news/incoming 20297852 Kbytes available
(58.7%)
/var/spool/news/outgoing 20297852 Kbytes available
(58.7%)
/var/spool/news/overview 20297852 Kbytes available
(58.7%)
Batch file sizes:
Log file sizes:
0 errlog 12 news 9888 news.notice
4 expire.log 0 news.crit 4 nntpsend.log
0 innfeed.log 0 news.err 0 unwanted.log
Lock files:
LOCK.innwatch
Server connections:
TOTAL: 0 0
Daily Usenet report for dogagent from May 11 04:02:10 to May 12 04:02:07
Log entries by program:
Program name Lines %Lines Size
%Size
nnrpd 112621 99.7% 11.8 MB
99.7%
inn 172 0.2% 13.3 KB
0.1%
innd 159 0.1% 17.5 KB
0.1%
TOTAL: 3 112952 100.0% 11.9 MB
100.0%
Control commands to INND:
Command
Number
flushlogs
1
go
2
logmode
2
mode
147
name
2
pause
2
renumber
1
reserve
2
TOTAL: 8
159
Incoming articles:
Date Articles %Arts Art/sec Size %Size
KB/sec
May 11 04:02:10 - 04:59:59 9 7.6% 0.00 62.0 KB 4.6%
0.02
May 11 05:00:00 - 05:59:59 5 4.2% 0.00 10.4 KB 0.8%
0.00
May 11 06:00:00 - 06:59:59 4 3.4% 0.00 8.6 KB 0.6%
0.00
May 11 07:00:00 - 07:59:59 3 2.5% 0.00 185.5 KB 13.6%
0.05
May 11 08:00:00 - 08:59:59 8 6.7% 0.00 464.2 KB 34.1%
0.13
May 11 09:00:00 - 09:59:59 0 0.0% 0.00 0.0 KB 0.0%
0.00
May 11 10:00:00 - 10:59:59 0 0.0% 0.00 0.0 KB 0.0%
0.00
May 11 11:00:00 - 11:59:59 0 0.0% 0.00 0.0 KB 0.0%
0.00
May 11 12:00:00 - 12:59:59 0 0.0% 0.00 0.0 KB 0.0%
0.00
May 11 13:00:00 - 13:59:59 4 3.4% 0.00 3.7 KB 0.3%
0.00
May 11 14:00:00 - 14:59:59 0 0.0% 0.00 0.0 KB 0.0%
0.00
May 11 15:00:00 - 15:59:59 0 0.0% 0.00 0.0 KB 0.0%
0.00
May 11 16:00:00 - 16:59:59 2 1.7% 0.00 2.7 KB 0.2%
0.00
May 11 17:00:00 - 17:59:59 4 3.4% 0.00 9.7 KB 0.7%
0.00
May 11 18:00:00 - 18:59:59 62 52.1% 0.02 501.1 KB 36.9%
0.14
May 11 19:00:00 - 19:59:59 6 5.0% 0.00 52.9 KB 3.9%
0.01
May 11 20:00:00 - 20:59:59 1 0.8% 0.00 1.3 KB 0.1%
0.00
May 11 21:00:00 - 21:59:59 0 0.0% 0.00 0.0 KB 0.0%
0.00
May 11 22:00:00 - 22:59:59 4 3.4% 0.00 25.9 KB 1.9%
0.01
May 11 23:00:00 - 23:59:59 5 4.2% 0.00 28.8 KB 2.1%
0.01
May 12 00:00:00 - 00:59:59 1 0.8% 0.00 1.5 KB 0.1%
0.00
May 12 01:00:00 - 01:59:59 0 0.0% 0.00 0.0 KB 0.0%
0.00
May 12 02:00:00 - 02:59:59 0 0.0% 0.00 0.0 KB 0.0%
0.00
May 12 03:00:00 - 04:02:07 1 0.8% 0.00 1.3 KB 0.1%
0.00
TOTAL: 23:59:57 119 100.0% 0.00 1.3 MB 100.0%
0.02
NNRP auth users [Top 20]:
User
Conn
amigo54321
602
CoyoteV
258
Katherine
211
TrolLisaTroll
114
cks
78
dave
74
Lana
37
Kuno
16
Aleeta
7
Herbert
6
Gisele2
6
lisa_sff
5
tom
5
Sara
5
Kandra
3
Katie
3
kev
2
TOTAL: 17
1432
---------
Renumbering active file.
Expire messages:
expireover start Tue May 12 04:03:03 BST 2009: ( -z/var/log/news/expire.rm)
Article lines processed 19970
Articles dropped 130
Overview index dropped 130
expireover end Tue May 12 04:03:09 BST 2009
expirerm start Tue May 12 04:03:09 BST 2009
expirerm end Tue May 12 04:03:11 BST 2009
expire begin Tue May 12 04:03:41 BST 2009: (-v1)
Article lines processed 20439
Articles retained 20259
Entries expired 180
expire end Tue May 12 04:06:27 BST 2009
all done Tue May 12 04:06:27 BST 2009
---------
Post expiration status:
Server status:
Server running
Allowing remote connections
Parameters c 10 i 50 (0) l 2000000 o 1011 t 300 H 2 T 60 X 0 normal
specified
Not reserved
Readers follow enabled
Perl filtering enabled
Perl filter stats: Pass: 1562 Reject: Refuse: MD5: 0 PHL: 0 FSL: 0
Disk usage:
/etc/news 20308824 Kbytes available
(58.7%)
/var/lib/news 20308824 Kbytes available
(58.7%)
/var/log/news 20308824 Kbytes available
(58.7%)
/var/spool/news/articles 20308824 Kbytes available
(58.7%)
/var/spool/news/incoming 20308824 Kbytes available
(58.7%)
/var/spool/news/outgoing 20308824 Kbytes available
(58.7%)
/var/spool/news/overview 20308824 Kbytes available
(58.7%)
Batch file sizes:
Log file sizes:
0 errlog 0 innfeed.log 0 news.crit 24 news.notice 0
unwanted.log
4 expire.log 0 news 0 news.err 0 nntpsend.log
Lock files:
LOCK.innwatch
Server connections:
TOTAL: 0 0
Beauregard T. Shagnasty
> I know nothing about server stats. Perhaps you'd review these and
> comment thereafter:-
To tell you the troot, Dave, I'm not really interested in what goes on
at annexcafe... sorry.
Kelb tal-Fenek
> ~BD~ wrote:
>> Kelb tal-Fenek wrote:
>>> ~BD~ wrote:
>>>> The 'Sysop' of the UK U2U site (Ann) sent me
>>>> (at my request) a jpg screenshot of her PC (she was having malware
>>>> problems and I was tryin to help her). I opened it with 'notepad' and
>>>> found about 12 live links which took me to websites typical of Spam
>>>> selling (Viagra etc). Not possible? Well - it happened!
>
> You took a file from a known compromised computer and then were
> surprised that the file was compromised? Why?
I've only heard of certain media formats being used to do damage or
whatever when executed but that's all so I'm curious what they can
do and which formats to watch out for. What is he talking about when
he says there were "live links" in that file. I'm assuming he is
talking about the jpg screenshot but his answer was a little vague.
Actually, this "nothing to hide, nothing to fear" saying isn't quite
accurate; it never was and it is especially misleading these days
when access to information and other various tools is available to
just about anyone. You really can't even say, if you have virtually
nothing than you have nothing to fear. When we are talking about
people with invisible friends on vigilate missions, it's not what
you have, it's what they *think* you have.
How would you order these things by security risk? Marketers,
corporations, government agencies, crime organizations, vigilates,
religious fanatics, spurned lovers, kooks, etc., etc. And they all
have access to computers and the internet.
Any of them could pose a risk to you. One reason I'm replying to
this thread is because the main reason I decided it would be good
to learn about security "on the net" was because my first negative
experiences online involved kooks of the stalker kind and, for me,
they would be at the top of the list.
Could it be that "my opinions" are something to hide? Expressing
an opinion on just about anything online puts you at risk from
these "mission from god" types. Should we hide our opinions?
~BD~
> In alt.computer.security, ~BD~ wrote:
>
>> I know nothing about server stats. Perhaps you'd review these and
>> comment thereafter:-
>
> To tell you the troot, Dave, I'm not really interested in what goes on
> at annexcafe... sorry.
>
Interesting response, BTS - the stats I posted were *not* from AnnexCafe.
Maybe someone more knowledgeable will comment.
--
Dave
Beauregard T. Shagnasty
What? You equate my lack of interest as a lack of knowledge? <lol!>
~BD~
> ~BD~ wrote:
>> Kelb tal-Fenek wrote:
>>> ~BD~ wrote:
>>>> The 'Sysop' of the UK U2U site (Ann) sent me
>>>> (at my request) a jpg screenshot of her PC (she was having malware
>>>> problems and I was tryin to help her). I opened it with 'notepad'
>>>> and found about 12 live links which took me to websites typical of
>>>> Spam selling (Viagra etc). Not possible? Well - it happened!
>>>
>
> You took a file from a known compromised computer and then were
> surprised that the file was compromised? Why?
I've been pondering what to say in response to you, Tim! (Here in the
newsgroup - where there is an element of fishing!)
I suppose the simple answer is that I was experimenting - that is what I
do! I was *not* surprised to find live links (in a blue font) within, or
rather, showing above all the 'gobbledegook' one sees when a picture
file is opened with Notepad. I wasn't even surprised that these links
'worked' and took me to multifarious web pages (Viagra, cures, etc.)
What DID surprise me was what followed. I explained what had happened to
folk by posting on the UK U2U newsgroup and was greeted by disbelief and
notification that such things were impossible. However, within minutes
of posting my message, the file had been 'doctored' - the links had been
removed removed. I am convinced that, at that time, someone other than
me was able to control my machine!
> So your invisible friend told you that you should become a vigilante
> hunting down people behaving suspiciously on the 'net? That's some big
> order.
I wouldn't have put it quite like that, Tim!
I read this (somewhere!) recently :-
"If you have a challenge, a want, or a need in your life and you bring
that to God, do so knowing that every communication that you extend to
God is heard and every prayer is answered. Then allow yourself to become
aware of how that answer is unfolding in your life.
Spend a few minutes now in meditation with your eyes closed. Then when
you're ready, begin a dialogue with God. Share with God what's in your
heart and on your mind, and then ask God for communication, guidance, or
understanding.
When you feel complete, allow yourself to hear God's reply. If you don't
experience receiving an answer immediately, allow the answer to unfold
in your life knowing that God has answered. Be patient with yourself in
this process and continue to allow your faith and trust to deepen."
Read: God and the Modern Scientist http://newhumanist.org.uk/451
> It doesn't sound surprising to me that guys struggling to keep a failing
> business above water will a) behave somewhat suspiciously, and will be
> suspicious of others' motives, and b) take risks which might allow
> others to take advantage of their site for nefarious purposes, or at
> least fail to perform due diligence in ensuring they don't.
>
> It is commonly said in the security business "if you have nothing to
> hide you have nothing to fear". This may be true in specific
> circumstances, but unfortunately there are few people who have nothing
> to hide one way or another. Many people behave secretively on the basic
> principle of "don't trust anyone", in some cultures it is endemic. So
> strange behaviour isn't per se evidence of criminal activity. This is
> really a variant on "Just because you are paranoid doesn't mean they
> aren't out to get you."
Thank you for your comments. I think you one told me that you use lined
paper - but not everyone does. That does leave room for me to 'read
between the lines' so to speak!
> What I am saying is that if you chase every suspicious kook on the net
> you will be a busy guy indeed, while the Mafya gets on with business as
> usual by the usual methods of broadcasting malware using bot-nets to
> obscure their origin, and generally leaving the talking about it on
> newsgroups to teenage kids with big mouths.
Your words are wise! Perhaps I have over-iced the cake.
I cannot afford the time to chase *everyone* - I have a boat to steer!
It is Annex and Dogagent which have attracted my attention, along with
www.Aumha.net . God (really does) know why!
--
Dave
An active poster in 'microsoft.public.test.here' - and folk respond!!!
How crazy is that? Or is something still not quite as it seems?
Tim Jackson
> Tim Jackson wrote:
>> ~BD~ wrote:
>>> Kelb tal-Fenek wrote:
>>>> ~BD~ wrote:
>>>>> The 'Sysop' of the UK U2U site (Ann) sent me
>>>>> (at my request) a jpg screenshot of her PC (she was having malware
>>>>> problems and I was tryin to help her). I opened it with 'notepad' and
>>>>> found about 12 live links which took me to websites typical of Spam
>>>>> selling (Viagra etc). Not possible? Well - it happened!
>> You took a file from a known compromised computer and then were
>> surprised that the file was compromised? Why?
>
> I've only heard of certain media formats being used to do damage or
> whatever when executed but that's all so I'm curious what they can
> do and which formats to watch out for. What is he talking about when
> he says there were "live links" in that file. I'm assuming he is
> talking about the jpg screenshot but his answer was a little vague.
>
I understand that he received a file identified as .jpg, which when
examined in ASCII was found to contain the URLs of suspect sites. I
think the phrase "live link" is a mistake, that is a function of the
viewer and notepad does not have the capability to display live links.
I don't suppose that viewing such a file with a regular jpg viewer would
have been able to activate the links either. *Why* any malware should
put them there is a question I had no intention of addressing. *That*
it put them there would not surprise me.
>> It is commonly said in the security business "if you have nothing to
>> hide you have nothing to fear". This may be true in specific
>> circumstances, but unfortunately there are few people who have nothing
>> to hide one way or another.
> Actually, this "nothing to hide, nothing to fear" saying isn't quite
> accurate; it never was and it is especially misleading these days
> when access to information and other various tools is available to
> just about anyone.
Oh, absolutely, it's specious BS.
> How would you order these things by security risk? Marketers,
> corporations, government agencies, crime organizations, vigilates,
> religious fanatics, spurned lovers, kooks, etc., etc. And they all
> have access to computers and the internet.
>
> Any of them could pose a risk to you. One reason I'm replying to
> this thread is because the main reason I decided it would be good
> to learn about security "on the net" was because my first negative
> experiences online involved kooks of the stalker kind and, for me,
> they would be at the top of the list.
>
I guess one has to do one's own individual risk assessment. For example
in my case spurned lovers come a long way down (a chance would be a fine
thing), I don't have a lot worth stealing, and I really can't think of
anything that I do have to hide.
> Could it be that "my opinions" are something to hide? Expressing
> an opinion on just about anything online puts you at risk from
> these "mission from god" types. Should we hide our opinions?
>
Absolutely not. This is 'alternative' Usenet. Without opinions it has
no raison d'etre whatsoever. "Publish and be damned". Or maybe
"Publish, and be damned" That damned comma. You want to be involved in
a debate, chances are you get attacked sooner or later. Mostly its
harmless and can be resolved diplomatically. Many people don't bother
with the diplomacy though, which is silly, it's like fighting with
light-sabres - hitting your opponent with something that isn't really
there. I never saw anyone back down from a flame war, they just get
bored and walk away, long after everyone else got bored and plonked them.
Tim
Tim Jackson
> Tim Jackson wrote:
>> ~BD~ wrote:
>>> Kelb tal-Fenek wrote:
>>>> ~BD~ wrote:
>>>>> The 'Sysop' of the UK U2U site (Ann) sent me
>>>>> (at my request) a jpg screenshot of her PC (she was having malware
>>>>> problems and I was tryin to help her). I opened it with 'notepad'
>>>>> and found about 12 live links which took me to websites typical of
>>>>> Spam selling (Viagra etc). Not possible? Well - it happened!
>>>>
>>
>> You took a file from a known compromised computer and then were
>> surprised that the file was compromised? Why?
>
>
>
> I've been pondering what to say in response to you, Tim! (Here in the
> newsgroup - where there is an element of fishing!)
>
> I suppose the simple answer is that I was experimenting - that is what I
> do! I was *not* surprised to find live links (in a blue font) within, or
> rather, showing above all the 'gobbledegook' one sees when a picture
> file is opened with Notepad. I wasn't even surprised that these links
> 'worked' and took me to multifarious web pages (Viagra, cures, etc.)
>
That's NOT MS notepad you were running. I admit my knowledge of Windows
is a bit out of date, but I just checked it out on a Vista machine and
notepad still displays in a single font and does not recognise URLs as
anything special. Was this on your Mac? Or, if Windoze, what are the
chances notepad itself had been compromised?
>
> What DID surprise me was what followed. I explained what had happened to
> folk by posting on the UK U2U newsgroup and was greeted by disbelief and
> notification that such things were impossible. However, within minutes
> of posting my message, the file had been 'doctored' - the links had been
> removed removed. I am convinced that, at that time, someone other than
> me was able to control my machine!
>
I find that highly unlikely. I would join in the disbelief. Not only
the 'how' but more the 'why'. OK, you don't say how you received and
opened the file, eg whether this was by regular POP3 email or through
some sort of online chat service or whatever. But if the file was on
your hard disk it would be a big job for someone to set up a remote
access and use it just to tease you, and then cease. What sort of
motive would a wizard of such powers have to stoop so low? ("Those who
the gods would destroy they first drive mad" maybe :) ).
Consider the possibility that what your computer was showing you was not
the file that had been sent, but that either the file transfer encoding
or decoding, or the viewer had been compromised. Or that on the two
occasions you did not actually look at the same copy of the same file in
the same place. I think it almost certain that you are jumping to an
unwarranted conclusion here.
>
>> So your invisible friend told you that you should become a vigilante
>> hunting down people behaving suspiciously on the 'net? That's some
>> big order.
>
> I wouldn't have put it quite like that, Tim!
>
I wouldn't expect you to. :)
> I read this (somewhere!) recently :-
>
> "If you have a challenge, a want, or a need in your life and you bring
> that to God, do so knowing that every communication that you extend to
> God is heard and every prayer is answered. Then allow yourself to become
> aware of how that answer is unfolding in your life.
>
> Spend a few minutes now in meditation with your eyes closed. Then when
> you're ready, begin a dialogue with God. Share with God what's in your
> heart and on your mind, and then ask God for communication, guidance, or
> understanding.
>
> When you feel complete, allow yourself to hear God's reply. If you don't
> experience receiving an answer immediately, allow the answer to unfold
> in your life knowing that God has answered. Be patient with yourself in
> this process and continue to allow your faith and trust to deepen."
>
That is dangerous advice to take literally. The line to God is prone to
phishing attacks. I would imagine most suicide bombers use a similar
justification. The concept is perfectly reasonable, but the method is
readily abused, you are likely to hear what you expect to hear. Just
like your bank, don't take instructions from God unless they are
properly encrypted and authenticated. (Well what would you expect to
hear on a.c.s.)
>
> Read: God and the Modern Scientist http://newhumanist.org.uk/451
>
Not today thank you, I've enough reading matter already.
>
> Thank you for your comments. I think you one told me that you use lined
> paper - but not everyone does. That does leave room for me to 'read
> between the lines' so to speak!
>
I think I said I try not to write between the lines.
>
> Dave
> An active poster in 'microsoft.public.test.here' - and folk respond!!!
> How crazy is that? Or is something still not quite as it seems?
Dammit this is the Internet. It is rare for anything to be as it seems.
Deception is the norm.
Tim
~BD~
> That's NOT MS notepad you were running. I admit my knowledge of Windows
> is a bit out of date, but I just checked it out on a Vista machine and
> notepad still displays in a single font and does not recognise URLs as
> anything special. Was this on your Mac? Or, if Windoze, what are the
> chances notepad itself had been compromised?
What I have referred to happened a number of years ago, so I cannot be
categoric. It was on a PC using Windows XP Home.
I've just opened up a photograph of my boat engine using TextEdit.app on
my Mac.
This is part of what I see:-
ˇÿˇ· ¥Exif
~BD~
> That's NOT MS notepad you were running. I admit my knowledge of Windows
> is a bit out of date, but I just checked it out on a Vista machine and
> notepad still displays in a single font and does not recognise URLs as
> anything special. Was this on your Mac? Or, if Windoze, what are the
> chances notepad itself had been compromised?
What I have referred to happened a number of years ago, so I cannot be
categoric. It was on a PC using Windows XP Home.
I've just opened up a photograph of my boat engine using the
TextEdit.app on my Mac.
This is part of what I see:-
£ ? „ # C c É § ?  ' I j ã ? Œ ? 4 V x õ ? ‡ & I l è ? ÷ ? A e â Æ “ ˜ @ e ä Ø ’ ?
E k ë ? › * Q w û ? Ï ; c ä ? ? * R { £ Ã ? G p ô ? Ï @ j î æ È > i î ø Í
A l ò ƒ ?! !H!u!°!Œ!?"'"U"Ç"Ø"›#
#8#f#î#¬#?$ $M$|$´$?% %8%h%ó%«%˜&'&W&á&?&Ë' 'I'z'´'‹(
(?(q(¢(‘) )8)k)ù)–* *5*h*õ*œ+ +6+i+ù+—, ,9,n,¢,?- -A-v-´-·. .L.Ç.?.Ó/$/Z/ë/«/?050l0§0€1 1J1Ç1?1Ú2*2c2õ2‘3
3F3 3?3Ò4+4e4û4ÿ5 5M5á5¬5?676r6Æ6È7$7`7ú7?8 8P8å8»9 9B9 9º9?:6:t:?:Ô;-;k;™;Ë<'<e<§<„="=a=°=‡>
>`>†>‡?!?a?¢?‚@#@d@¶@ÁA)AjA¨AÓB0BrBµB˜C:C}C¿D DGDäDŒE EUEöEfiF"FgF´F?G5G{G¿H HKHëH?I IcI©I?J7J}JƒK KSKöK‚L*LrL?M MJMìM‹N%NnN?O
~BD~
I've attempted to send a message twice already - each has been cut off
in its prime! Curious.
Anyway, this is the type of 'gobbledegook' to which I refer.
It happens now on my wife's laptop (XP Home) if *I* open a photograph
with Notepad.
What do *you* see if you right-click on a photograph and select 'open
with'....... then select Notepad or similar?
Thanks Tim
--
Dave
Tim Jackson
> Tim Jackson wrote:
>
>> That's NOT MS notepad you were running. I admit my knowledge of
>> Windows is a bit out of date, but I just checked it out on a Vista
>> machine and notepad still displays in a single font and does not
>> recognise URLs as anything special. Was this on your Mac? Or, if
>> Windoze, what are the chances notepad itself had been compromised?
>
> What I have referred to happened a number of years ago, so I cannot be
> categoric. It was on a PC using Windows XP Home.
>
Then it wasn't notepad you were running, I can be categoric about that.
> I've just opened up a photograph of my boat engine using the
> TextEdit.app on my Mac.
>
> This is part of what I see:-
>
>
> � ? � # C c � � ? � ' I j � ? � ? 4 V x � ? � & I l � ? � ? A e � � � � @ e � � � ?
> E k � ? � * Q w � ? � ; c � ? ? * R { � � ? G p � ? � @ j � � � > i � � �
> A l � � ?! !H!u!�!�!?"'"U"�"�"�#
> #8#f#�#�#?$ $M$|$�$?% %8%h%�%�%�&'&W&�&?&�' 'I'z'�'�(
> (?(q(�(�) )8)k)�)�* *5*h*�*�+ +6+i+�+�, ,9,n,�,?- -A-v-�-�. .L.�.?.�/$/Z/�/�/?050l0�0�1 1J1�1?1�2*2c2�2�3
>
> 3F3 3?3�4+4e4�4�5 5M5�5�5?676r6�6�7$7`7�7?8 8P8�8�9 9B9 9�9?:6:t:?:�;-;k;�;�<'<e<�<�="=a=�=�>
> >`>�>�?!?a?�?�@#@d@�@�A)AjA�A�B0BrB�B�C:C}C�D DGD�D�E EUE�EfiF"FgF�F?G5G{G�H HKH�H?I IcI�I?J7J}J�K KSK�K�L*LrL?M MJM�M�N%NnN?O
>
I am so much the wiser now. That's pretty much the sort of thing I'd
expect, after a slightly more meaningful header. Your point being?
Tim
~BD~
> ~BD~ wrote:
>> Tim Jackson wrote:
>>
>>> That's NOT MS notepad you were running. I admit my knowledge of
>>> Windows is a bit out of date, but I just checked it out on a Vista
>>> machine and notepad still displays in a single font and does not
>>> recognise URLs as anything special. Was this on your Mac? Or, if
>>> Windoze, what are the chances notepad itself had been compromised?
>>
>> What I have referred to happened a number of years ago, so I cannot be
>> categoric. It was on a PC using Windows XP Home.
>>
>
> Then it wasn't notepad you were running, I can be categoric about that.
Now you have me *really* confused! Notepad is a part and parcel of
Windows XP - at least it is here on my machines!
>> I've just opened up a photograph of my boat engine using the
>> TextEdit.app on my Mac.
>>
>> This is part of what I see:-
>>
>>
>> £ ? „ # C c É § ?  ' I j ã ? Œ ? 4 V x õ ? ‡ & I l è ? ÷ ? A e â Æ “ ˜ @ e ä Ø ’ ?
>> E k ë ? › * Q w û ? Ï ; c ä ? ? * R { £ Ã ? G p ô ? Ï @ j î æ È > i î ø Í
>> A l ò ƒ ?! !H!u!°!Œ!?"'"U"Ç"Ø"›#
>> #8#f#î#¬#?$ $M$|$´$?% %8%h%ó%«%˜&'&W&á&?&Ë' 'I'z'´'‹(
>> (?(q(¢(‘) )8)k)ù)–* *5*h*õ*œ+ +6+i+ù+—, ,9,n,¢,?- -A-v-´-·. .L.Ç.?.Ó/$/Z/ë/«/?050l0§0€1 1J1Ç1?1Ú2*2c2õ2‘3
>>
>> 3F3 3?3Ò4+4e4û4ÿ5 5M5á5¬5?676r6Æ6È7$7`7ú7?8 8P8å8»9 9B9 9º9?:6:t:?:Ô;-;k;™;Ë<'<e<§<„="=a=°=‡>
>> >`>†>‡?!?a?¢?‚@#@d@¶@ÁA)AjA¨AÓB0BrBµB˜C:C}C¿D DGDäDŒE EUEöEfiF"FgF´F?G5G{G¿H HKHëH?I IcI©I?J7J}JƒK KSKöK‚L*LrL?M MJMìM‹N%NnN?O
>>
>
> I am so much the wiser now. That's pretty much the sort of thing I'd
> expect, after a slightly more meaningful header. Your point being?
>
>
> Tim
Well - listed above that gobbledegook *WERE* the links which took me to
the URL's I have mentioned.
How? I have no idea!
--
Dave
Tim Jackson
> Tim Jackson wrote:
>> ~BD~ wrote:
>>> Tim Jackson wrote:
>>>
>>>> That's NOT MS notepad you were running. I admit my knowledge of
>>>> Windows is a bit out of date, but I just checked it out on a Vista
>>>> machine and notepad still displays in a single font and does not
>>>> recognise URLs as anything special. Was this on your Mac? Or, if
>>>> Windoze, what are the chances notepad itself had been compromised?
>>>
>>> What I have referred to happened a number of years ago, so I cannot
>>> be categoric. It was on a PC using Windows XP Home.
>>>
>>
>> Then it wasn't notepad you were running, I can be categoric about that.
>
>
> Now you have me *really* confused! Notepad is a part and parcel of
> Windows XP - at least it is here on my machines!
>
>
Notepad is an accessory program supplied with all versions of Windows.
Parcel yes, but not part. It does not have the capability AFAIK to
display clickable URLs, or hyperlinks, it's a simple ASCII text editor.
If you opened a file with Notepad and it displayed hyperlinks, then I
would say your copy of Notepad had been replaced by something else. It
does seem feasible to me that some malware might hook notepad with
something that displays a few of its own hyperlinks, then reverts to
business as usual. But it's pretty dumb malware because a lot of users
would know this was abnormal behaviour for this program, and that they
had been had. So it probably brushed snow over its tracks once you had
run it (and followed a link), that's why it reverted to normal.
One of your attempts showed "Exif " Which should be the seventh byte
onwards of a jpg file, usually followed by some readable identification
of the system that created it. Anything more than six bytes it shows
before that isn't part of the file.
I am convinced the problem lay in Notepad, not the displayed file. It
also explains why other 'helpers' were confused.
Tim
BoaterDave
<a.nony.m...@example.invalid> wrote:
> In alt.computer.security, ~BD~ wrote:
> > Beauregard T. Shagnasty wrote:
> >> In alt.computer.security, ~BD~ wrote:
> >>> I know nothing about server stats. Perhaps you'd review these and
> >>> comment thereafter:-
>
> >> To tell you the troot, Dave, I'm not really interested in what goes
> >> on at annexcafe... sorry.
>
> > Interesting response, BTS - the stats I posted were *not* from
> > AnnexCafe.
>
> > Maybe someone more knowledgeable will comment.
>
> What? You equate my lack of interest as a lack of knowledge? <lol!>
>
> --
> -bts
> -Friends don't let friends drive Windows
:))) But .......................
I had a look at the most frequent 'user' in these statistics -
amigo5432 - (via Google) and discovered that this poster is on a
*Russian* site:-
See:- http://forum.arena.ru/index.php?showtopic=82377&mode=threaded&pid=684890
Now *I* find things like this intriguing - why would someone posting
on a Russian URL be the most prolific poster on the Dogagent.com
server? Hmmm!
The next most frequent poster is CoyoteV - a member of staff at
Annexcafe (and moderator of Scorched Earth)
Significant in any way? Probably not ........ but I bet we don't get a
satisfactory explanation from Dave Higham, the owner of Dogagent!
--
Dave (BD)
~BD~
"G. Morgan" <usenet...@gawab.com> wrote in message
news:47b14101f9ca8c80a...@mypost.invalid...
> ~BD~ wrote:
>
>>Some 'interpretation' is required I'm afraid. Btw, Annexcafe has over 300
>>newsgroups, all funded by a business losing money and run by a recovering
>>alchoholic! Hmmm!
>
>
>
Not at all. I have never suggested that Gregory Gooden himself is evil
........... but he *might* be!
> Why are you "investigating" these people?
'Cause I can! Honest folk give straight-forward answers - others lie!
> What do you mean by getting rid of "evil" on the "web"?
Like ....... stopping kids when I see them scrawling graffiti on walls or
riding motorbikes along canal towpaths (illegal)!
HTH
--
Dave
~BD~
"Tim Jackson" <t...@tim-jackson.co.uk> wrote in message
news:WsWdnSpgiuNeYpfX...@brightview.co.uk...
> also explains why other 'helpers' were confused.
>
>
> Tim
You are, in all probability, correct, Tim.
I found this item: http://www.swishtalk.com/showthread.php?t=37681
This seems to relate to Notepad being replaced
http://mc-computing.com/Parasites/notepad_virus.html
> One of your attempts showed "Exif " Which should be the seventh byte
> onwards of a jpg file, usually followed by some readable identification of
> the system that created it. Anything more than six bytes it shows before
> that isn't part of the file.
I did notice that - but had no idea what it meant!
Thanks for your patience.
--
Dave
Tim Jackson
> "G. Morgan" <usenet...@gawab.com> wrote in message
> news:47b14101f9ca8c80a...@mypost.invalid...
>
>> What do you mean by getting rid of "evil" on the "web"?
>
> Like ....... stopping kids when I see them scrawling graffiti on walls or
> riding motorbikes along canal towpaths (illegal)!
>
Ah, poor kids. Somehow it seems a bit mean for an ex fighter jock to be
stopping kids seeking a bit of a thrill in today's so-restrictive and
boring world.
What we need is more activities for kids to exercise their creativity
and let off steam, not more vigilantes trying to cage them. Don't
punish them, take them paintballing. :)
Tim
~BD~
Well .... I have been known to let one or two steer my narrowboat! ;)
It's good to know that you still have that attitude when you have
advised that vandals shredded your pond liner with a broken wine glass!
--
Dave
Tim Jackson
> Tim Jackson wrote:
>> ~BD~ wrote:
>>> "G. Morgan" <usenet...@gawab.com> wrote in message
>>> news:47b14101f9ca8c80a...@mypost.invalid...
>>
>>>
>>>> What do you mean by getting rid of "evil" on the "web"?
>>>
>>> Like ....... stopping kids when I see them scrawling graffiti on
>>> walls or riding motorbikes along canal towpaths (illegal)!
>>>
>>
>> Ah, poor kids. Somehow it seems a bit mean for an ex fighter jock to
>> be stopping kids seeking a bit of a thrill in today's so-restrictive
>> and boring world.
>>
>> What we need is more activities for kids to exercise their creativity
>> and let off steam, not more vigilantes trying to cage them. Don't
>> punish them, take them paintballing. :)
>>
>>
>> Tim
>
> Well .... I have been known to let one or two steer my narrowboat! ;)
>
Perfect opportunity for a practical physics lesson - Newtonian mechanics
in the flesh.
> It's good to know that you still have that attitude when you have
> advised that vandals shredded your pond liner with a broken wine glass!
>
I was a kid once. Unlike some of my generation, I remember it pretty
well, and empathise. I'd rather channel their energy than dam it. My
peers and I did worse things and took more risks than most of today's
kids do, so I find it hard to criticise them.
Tim
~BD~
> I find that highly unlikely. I would join in the disbelief. Not only
> the 'how' but more the 'why'. OK, you don't say how you received and
> opened the file, eg whether this was by regular POP3 email or through
> some sort of online chat service or whatever. But if the file was on
> your hard disk it would be a big job for someone to set up a remote
> access and use it just to tease you, and then cease. What sort of
> motive would a wizard of such powers have to stoop so low? ("Those who
> the gods would destroy they first drive mad" maybe :) ).
>
> Consider the possibility that what your computer was showing you was not
> the file that had been sent, but that either the file transfer encoding
> or decoding, or the viewer had been compromised. Or that on the two
> occasions you did not actually look at the same copy of the same file in
> the same place. I think it almost certain that you are jumping to an
> unwarranted conclusion here.
You are, almost certainly, correct. Discussion ends.
>>> So your invisible friend told you that you should become a vigilante
>>> hunting down people behaving suspiciously on the 'net? That's some
>>> big order.
>>
>> I wouldn't have put it quite like that, Tim!
>>
>
> I wouldn't expect you to. :)
You are getting to know me!
>> I read this (somewhere!) recently :-
>>
>> "If you have a challenge, a want, or a need in your life and you bring
>> that to God, do so knowing that every communication that you extend to
>> God is heard and every prayer is answered. Then allow yourself to
>> become aware of how that answer is unfolding in your life.
>>
>> Spend a few minutes now in meditation with your eyes closed. Then when
>> you're ready, begin a dialogue with God. Share with God what's in your
>> heart and on your mind, and then ask God for communication, guidance, or
>> understanding.
>>
>> When you feel complete, allow yourself to hear God's reply. If you don't
>> experience receiving an answer immediately, allow the answer to unfold
>> in your life knowing that God has answered. Be patient with yourself
>> in this process and continue to allow your faith and trust to deepen."
>>
>
> That is dangerous advice to take literally. The line to God is prone to
> phishing attacks. I would imagine most suicide bombers use a similar
> justification. The concept is perfectly reasonable, but the method is
> readily abused, you are likely to hear what you expect to hear. Just
> like your bank, don't take instructions from God unless they are
> properly encrypted and authenticated. (Well what would you expect to
> hear on a.c.s.)
I do enjoy your sense of humour! ;)
>
>> Read: God and the Modern Scientist http://newhumanist.org.uk/451
>>
>
> Not today thank you, I've enough reading matter already.
Quote then:-
"You may eventually press me to tell you what, in my opinion, is God. In
my view it is first of all a construction of the human mind. As far as
that is concerned, all words are actually in that category! So, what
does this word mean? It stands for a presumed ultimate cause, i.e. one
which does not itself have a cause. Further it is a cause which (or
who!) some of us believe, or hope, to be essentially well inclined
towards mankind.
Such views are widely agreed and are hardly very new or original
observations. They also remind us that the belief in a personal God
among scientists has seriously declined in the period from 1914 to 1998.
The figures for American scientists are actually 27.7% to 7.0% of the
people questioned. If one wants a proof of the existence of a God, then,
since the attempts over the ages have been unsuccessful, one can safely
say that the proposition that God exists cannot be proved or disproved .
Such propositions exist elsewhere in philosophy, and I have called them
Godelian, after the logician and mathematician Kurt Gödel. The question
about God's existence thus takes its place along with other statements
which can, strictly speaking, be neither proved nor disproved. As an
example one can think of the statement that the universe is expanding!
It is probably so, but it cannot be proved in any strict sense. Indeed
many scientific statements are in this category. Allow me a sweeping
statement in conclusion: science is a study of the likely, not of the
certain."
The article is not long - I think, perhaps, you could have written it!!!
>> Thank you for your comments. I think you one told me that you use
>> lined paper - but not everyone does. That does leave room for me to
>> 'read between the lines' so to speak!
>>
>
> I think I said I try not to write between the lines.
I think you did. No offence intended!
>> Dave
>> An active poster in 'microsoft.public.test.here' - and folk respond!!!
>> How crazy is that? Or is something still not quite as it seems?
>
> Dammit this is the Internet. It is rare for anything to be as it seems.
> Deception is the norm.
There's that sense of humour again! Can you/will you explain why posts
made using Motzarella or aioe servers do not always replicate in the
associated newsgroups in 'news.microsoft.com' (all of which I now access
using Thunderbird) ? Maybe you could find a few minutes to test to see
if the same thing happens to you? If you do, please use the
'microsoft.public.test.here' group. Many thanks, Tim.
--
Dave
Tim Jackson
> Tim Jackson wrote:
>
> made using Motzarella or aioe servers do not always replicate in the
> associated newsgroups in 'news.microsoft.com' (all of which I now access
> using Thunderbird) ? Maybe you could find a few minutes to test to see
> if the same thing happens to you? If you do, please use the
> 'microsoft.public.test.here' group. Many thanks, Tim.
>
> --
> Dave
I think this has drifted off topic for a.c.s. I'll reply to this one
personally.
Tim
BoaterDave
I've no idea if you'll get to read this - it's been a very long time coming!
To save 're-inventing the wheel' so to speak, please read my posts here:-
https://social.technet.microsoft.com/Forums/en-US/6a77429e-9a0c-4f41-a4a4-cb861b717224/hacked-web-site-of-an-mvp-advice-please?forum=WindowsDefenderATPPreview#766f62e1-95b0-4f2b-89a6-7ef8caf1cdba
Or https://goo.gl/NpGsQv
IMO, it's exactly the same scenario as I'd described to you in THIS thread!
Cheers!
David B.
David B.
> Hello Tim
>
> I've no idea if you'll get to read this - it's been a very long time coming!
>
> To save 're-inventing the wheel' so to speak, please read my posts here:-
>
> https://social.technet.microsoft.com/Forums/en-US/6a77429e-9a0c-4f41-a4a4-cb861b717224/hacked-web-site-of-an-mvp-advice-please?forum=WindowsDefenderATPPreview#766f62e1-95b0-4f2b-89a6-7ef8caf1cdba
>
> Or https://goo.gl/NpGsQv
>
> IMO, it's exactly the same scenario as I'd described to you in THIS thread!
https://groups.google.com/d/msg/alt.computer.security/AqNFP2Ic2AI/joPjR_goRDcJ
All comments welcome! :-)
--
"I am always doing things I can't do, that's how I get to do them."
Pablo Picasso (1881 - 1973)
David B.
https://productforums.google.com/forum/?utm_medium=email&utm_source=footer#!msg/webmasters/YFOuzfjcRh4/lHKxtOV5AQAJ
Comments welcome - either here or there! :-)
David B.
David B.
> On 21/08/2016 06:58, BoaterDave wrote:
>
>> Hello Tim
>>
>> I've no idea if you'll get to read this - it's been a very long time
>> coming!
>>
>> To save 're-inventing the wheel' so to speak, please read my posts here:-
>>
>> https://social.technet.microsoft.com/Forums/en-US/6a77429e-9a0c-4f41-a4a4-cb861b717224/hacked-web-site-of-an-mvp-advice-please?forum=WindowsDefenderATPPreview#766f62e1-95b0-4f2b-89a6-7ef8caf1cdba
>>
>>
>> Or https://goo.gl/NpGsQv
>>
>> IMO, it's exactly the same scenario as I'd described to you in THIS
>> thread!
>
> The whole (very interesting!) thread may be found here:-
>
> https://groups.google.com/d/msg/alt.computer.security/AqNFP2Ic2AI/joPjR_goRDcJ
>
>
> All comments welcome! :-)
posted. I'm convinced that I stumbled over the truth and that
unscrupulous criminal elements HAVE been abusing the Microsoft Answers
forums.
--
"The important thing is not to stop questioning."
- Albert Einstein
Mike Duffy
> I have a distinct impression that nobody
> bothered to read at the link I posted.
read any of the links you post here, or did you have an epiphany?
David B.
know that THEY/he/she/it *DO* read at my links and now understand what
the bad guys have been involved in.
--
"Do something wonderful, people may imitate it." (Albert Schweitzer)
Mike Duffy
> My 'handler' (as Pooh-the-cat likes to refer to the TLAs) wants you to
> know that THEY/he/she/it *DO* read at my links and now understand what
> the bad guys have been involved in.
"We are aware of the value of the information you have given us, and your
concerns will receive all the consideration they deserve."
In any case, will you stop pestering us here, now that the big guns are on
the case?
David B.
> On Tue, 21 Mar 2017 18:23:31 +0000, David B. wrote:
>
>> My 'handler' (as Pooh-the-cat likes to refer to the TLAs) wants you to
>> know that THEY/he/she/it *DO* read at my links and now understand what
>> the bad guys have been involved in.
>
> What did they tell you? I suspect it was something like:
>
> "We are aware of the value of the information you have given us, and your
> concerns will receive all the consideration they deserve."
> In any case, will you stop pestering us here, now that the big guns are on
> the case?
Do you actually read what I *DO* show you? I sometimes take copies of
items I post to Microsoft because things sometimes 'disappear' - here's
an example:
https://www.dropbox.com/s/au6zjy3pbj9urwj/Reply%20to%20Rob%20in%20Microsoft%20Answers%20%28JPG%29.jpg?dl=0
There can be no mistaking what I saw - or do _you_ think otherwise?
Diesel
news:zLiAA.336988$tP2.1...@fx19.fr7 Tue, 21 Mar 2017 23:33:50 GMT
> There can be no mistaking what I saw - or do _you_ think
> otherwise?
was a cofounder of Malwarebytes and provided a screenshot of an older
version of the program with my name on it as your proof. I told you,
years ago, I was not a co-founder. So, it's easy for you to mistake
what you've seen.
--
Sarcasm, because beating the living shit out of deserving people is
illegal.
burfordTjustice
"David B." <Dav...@nomail.afraid.invalid> wrote:
> On 21/03/2017 14:16, Mike Duffy wrote:
> > On Tue, 21 Mar 2017 11:51:40 +0000, David B. wrote:
> >
> >> I have a distinct impression that nobody
> >> bothered to read at the link I posted.
> >
> > Was it everyone here who continually posts to tell you they never
> > bother to read any of the links you post here, or did you have an
> > epiphany?
>
> My 'handler' (as Pooh-the-cat likes to refer to the TLAs) wants you
> to know that THEY/he/she/it *DO* read at my links and now understand
> what the bad guys have been involved in.
>
to prison....FAILURE!
David B.
> "David B." <Dav...@nomail.afraid.invalid>
> news:zLiAA.336988$tP2.1...@fx19.fr7 Tue, 21 Mar 2017 23:33:50 GMT
> in alt.politics.scorched-earth, wrote:
>
>> There can be no mistaking what I saw - or do _you_ think
>> otherwise?
>
> You're trying to play him. There's no mistaking that.
> You stated that I
> was a cofounder of Malwarebytes and provided a screenshot of an older
> version of the program with my name on it as your proof. I told you,
> years ago, I was not a co-founder.
were NOT involved as a founder member.
"Dustin Cook" may clearly be seen!
https://www.dropbox.com/s/v8qhlhj5f74ysnw/Dustin%20Cook%20-%20Malwarebytes%20copy.tiff?dl=0
> So, it's easy for you to mistake what you've seen.
on this screenshot:-
https://www.dropbox.com/s/0bv02nqdhnvbivz/IdentIt.ca%20-%20Phishing%20warning.tiff?dl=0
David B.
> Malwarebytes was already at v1.42/mebbe 1.43 when I officially
> started working for them. My name wasn't included on the about page
> until the version you screenshot. In other words, IT ALREADY EXISTED
> prior to my being recruited to work for them.
Now you are surely having a brain fart!
It says quite clearly on the screenshot I provided that the version I
captured was 1.09 - so your name was 'put up in lights' LONG before you
started to work for Malwarebytes.
Do, please, explain.
David B.
burfordTjustice
"David B." <Dav...@nomail.afraid.invalid> wrote:
> WHY was your name highlighted on the early product 'Front Page' if
> you were NOT involved as a founder member.
Diesel
news:djvAA.405437$jN1.3...@fx28.fr7 Wed, 22 Mar 2017 13:51:03 GMT
> On 22/03/2017 13:20, Diesel wrote:
>> Malwarebytes was already at v1.42/mebbe 1.43 when I officially
>> started working for them. My name wasn't included on the about
>> page until the version you screenshot. In other words, IT ALREADY
>> EXISTED prior to my being recruited to work for them.
>
> Now you are surely having a brain fart!
version numbers, but, it is what it is.
> It says quite clearly on the screenshot I provided that the
> version I captured was 1.09 - so your name was 'put up in lights'
> LONG before you started to work for Malwarebytes.
awhile ago. No, my name obviously wasn't put up in lights before I
started working for them.
Infact, my name wasn't even included on the next release after my
official hiring. It wasn't until the release after. It was a
technical issue, not a personal one.
> Do, please, explain.
I already did, David. Just had version numbers a ways off. I did not
co found Malwarebytes. I had nothing to do with the formation of
Malwarebytes. My involvement came after their existance was already
established.
And, I really don't know why you insist on claiming that I did co
found the company. Has the company wronged you in some way, David?
Just what do you have against them? Or, myself for that matter?