Re: Will anyone help me understand, please?
~BD~
"Brian Cryer" <not.here@localhost> wrote in message
news:YMCdnUvP1f89T_TX...@pipex.net...
> "~BD~" <Boate...@hotmail.co.uk> wrote in message
> news:h4c7g3$iqn$1...@news.eternal-september.org...
>>
>> "Brian Cryer" <not.here@localhost> wrote in message
>> news:haadnQkVmYpyDPTX...@pipex.net...
>>> "~BD~" <Boate...@hotmail.co.uk> wrote in message
>>> news:h4alkb$udf$1...@news.eternal-september.org...
>>>> Here is a message reference:-
>>>>
>>>> "PA Bear [MS-MVP]" <PABear...@gmail.com> wrote in message
>>>>>> news:659b4628-831b-48fd...@o6g2000yqj.googlegroups.com...
>>>>
>>>> That apears to show that the poster sent his message from Google
>>>> Groups
>>>>
>>>> The real PA Bear doesn't (from my observation) use Google Groups to
>>>> post
>>>> on the Microsoft newsgroups.
>>>
>>> Looking back through the last few posts by "PA Bear [MS MVP]" I
>>> would agree with you. He/She normally posts with Outlook Express.
>>> You can tell by looking at the headers.
>>>
>>>> So the question remains - was it posted by Robear Dyer (PA Bear) -
>>>> or is it a forgery posted by an imposter?
>>>
>>> Looking at the posting-ids which are logged in the headers
>>> (NNTP-Posting-Host), the ip address is the same for this and the
>>> previous posts by "PA Bear", so I think its genuine - or at least
>>> done by someone using the same internet gateway/router.
>>> --
>>> Brian Cryer
>>> www.cryer.co.uk/brian
>>
>> Hello Brian - thank you for your comments.
>>
>> It's odd that TRT and Mike think otherwise isn't it?
>
> TRT has a reputation for being unreliable - both in pirating other
> people's work (as is often reported) and in falsely claiming to be an
> MVP.
>
> Mike didn't disagree, from his post he clearly looked at the headers
> because he referred to the posting IP address and he just jumped to
> the (correct) conclusion that PA-Bear does sometimes use Google
> Groups. He just cut out the middle logic in confirming the observation
> that PA-Bear seems mostly not to.
>
>> I'm not really familiar with newsgroups, but I strongly suspect that
>> there is an element of abuse taking place in the Microsoft (?)
>> newsgroups I've visited!
>
> There is a lot of trolling and spamming in many groups, so its easy to
> people to become twitchy. Sad, but a sign of the times.
> --
> Brian Cryer
> www.cryer.co.uk/brian
>
>
Thanks for your additional post, Brian.
You might like to review this post (from another group) - the poster
seems totally genuine from past contact.
I'm still confused!
Regards, Dave
"N. Miller" <anon...@msnews.aosake.net> wrote in message
news:1l43c6mjgmj6q$.dlg@msnews.aosake.net...
> On Fri, 24 Jul 2009 12:46:54 +0100, ��BD�� wrote:
>
>> Two new friends in another group tell me that PA Bear always posts
>> from Google Groups. Do you agree with that?
>
> I have never seen a genuine PA Bear post come through Google Groups.
> While
> he uses a 'gmail.com' email address, I have not seen a PA Bear post
> from
> Google Groups. Not unless he is prone to using proxies, so his
> "NNTP-Posting-Host:" looks different. Something which could not be
> proven
> (that a proxy user is the same as somebody else, not that he is, or
> isn't
> using a proxy to access Google Groups).
>
> --
> Norman
> ~Oh Lord, why have you come
> ~To Konnyu, with the Lion and the Drum
Mike Easter
> I'm still confused!
You are misquoting people. Not 'always' - not 'never'.
The issue is does PABear *ever* (post via GG) and the answer is yes.
Here's one each very recent, GG and MS's newsserver.
From: "PA Bear [MS-MVP]"
Newsgroups: microsoft.public.security
Subject: Re: Prevx - is it the best protection?
Date: Wed, 22 Jul 2009 14:05:01 -0700 (PDT)
Message-ID:
<659b4628-831b-48fd...@o6g2000yqj.googlegroups.com>
NNTP-Posting-Host: 24.152.248.232
From: "PA Bear [MS MVP]"
Subject: Re: User named "microsoft" in administrators group
Date: Wed, 22 Jul 2009 15:42:30 -0400
Message-ID: <uF#xCawCK...@TK2MSFTNGP03.phx.gbl>
Newsgroups: microsoft.public.security
NNTP-Posting-Host: 24.152.248.232.res-cmts.tvh.ptd.net 24.152.248.232
since one of those - the GG - is in current 'contention', here's another
older GG one
From: "PA Bear [MS-MVP]"
Newsgroups: microsoft.public.security,<snip>
Subject: Re: MS will "soon" unveil free anti-virus software "Morro"
Date: Wed, 17 Jun 2009 17:20:07 -0700 (PDT)
Message-ID:
<bd1dd4d8-e732-491b...@k38g2000yqh.googlegroups.com>
NNTP-Posting-Host: 24.152.248.232
--
Mike Easter
~BD~
"Mike Easter" <Mi...@ster.invalid> wrote in message
news:7cuimjF...@mid.individual.net...
> ~BD~ wrote:
>
>> I'm still confused!
>
> You are misquoting people. Not 'always' - not 'never'.
>
> The issue is does PABear *ever* (post via GG) and the answer is yes.
>
Mike, first of all I should like to thank you for taking an interest in
helping me to understand what is actually happening! :)
FYI, I post using Google Groups with my full user name of BoaterDave. I
use ~BD~ when using msnews.microsoft.com and, indeed, Eternal-September.
I've used BD2 when posting via 'news.aioe.org' - solely so that I can
keep some sort of track during my experimentation.
There is a 'PA Bear' who has consistently lied with regard to me being
banned by ISP's. This is completely untrue. 'He' will not correspond
with me either.
In my simplistic view, someone who is such a prolific poster as PA Bear
is highly unlikely to modify his posting manner - it would be one way or
another and not change. It thus follows, to my mind, that another entity
comes into the equasion. How, and why, I have not yet finally
established. If 'he' does change his posting 'method' - the question I
would pose is ......... *why*?
Maybe he'd explain if someone else asked him!
I sure could do with some help in pinning down the bad guys!
--
Dave
Tom Willett
: There is a 'PA Bear' who has consistently lied with regard to me being
: banned by ISP's. This is completely untrue. 'He' will not correspond
: with me either.
:
Actually, he, and many others, know it *is* true.
nobody >
Methinks you are extremely paranoid about this.
~BD~
>> I've been using them for a while now because they don't publish
>> one's IP address in numerical form.
>
> Everyone can still tell when it is you that post even without IP .
> That certain arrogance comes through clear as day in your posts. That
> is what gave you and gives you away every single time when you forge
> other peoples names such as mine for example and as to the ones that
> you play stupid to as to not to know it when you post with forged
> names
> Forger and liar and you are also a thief by posting other peoples
> views which you claim or pretend to be yours.You did it today also
> when you posted to D Lipman like you knew what you were talking
> about. We all had a great laugh on your expense.
Interesting comments, Peter. You said "We all had a great laugh ..."
What I need to clarify is your use of "WE" - it rather sounds as if
there are lots of you in the same room - is that the case?
Always wondering!
--
Dave
~BD~
<snip>
> Methinks you are extremely paranoid about this.
Hi!
You are fully entitled to have a view on matters! ;>)
I become confused by things I do not understand. Others have persuaded
me to be suspicious of headers where I can't see a numerical IP
address - one like yours, in fact, viz:-
NNTP-Posting-Date: Fri, 24 Jul 2009 19:59:56 -0500
Date: Fri, 24 Jul 2009 17:59:53 -0700
From: "nobody >" <useneth...@aol.com>
User-Agent: Thunderbird 2.0.0.22 (Windows/20090605)
MIME-Version: 1.0
Newsgroups:
24hoursupport.helpdesk,microsoft.public.outlookexpress.general
Subject: Re: Will anyone help me understand, please?
References: <h4alkb$udf$1...@news.eternal-september.org>
<haadnQkVmYpyDPTX...@pipex.net>
<h4c7g3$iqn$1...@news.eternal-september.org>
<YMCdnUvP1f89T_TX...@pipex.net>
<h4d385$ktr$1...@news.eternal-september.org>
<7cuimjF...@mid.individual.net>
<h4d6ts$433$1...@news.eternal-september.org>
In-Reply-To: <h4d6ts$433$1...@news.eternal-september.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Antivirus: avast! (VPS 090724-0, 07/24/2009), Outbound message
X-Antivirus-Status: Clean
Message-ID: <zamdnSoDEsiRxPfX...@supernews.com>
Lines: 40
X-Trace:
sv3-HoA/526Eg9Ym1DgoNOF9wr7KgmnIYtuFZX/pUaSAi3eYymcuFwAo8Ndm3tw7Ji/KGJG6P+yc8P6g/uH!SrJ96f+0lS8u0+7AIjy5uTeRLedMf7hdjtgD+iVGMyUN5NfQ1jzwC5vUsYtjvQv1gWEcJWp/9j/m!NMeLTvhTHeY=
X-Complaints-To: www.supernews.com/docs/abuse.html
X-DMCA-Complaints-To: www.supernews.com/docs/dmca.html
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
complaint properly
X-Postfilter: 1.3.39
Bytes: 3083
Path:
TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed00.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!nntp.giganews.com!backlog2.nntp.dca.giganews.com!nntp.supernews.com!news.supernews.com.POSTED!not-for-mail
Xref: TK2MSFTNGP01.phx.gbl microsoft.public.outlookexpress.general:62204
~BD~
>
> Well, you yourself admitted to being banned at aumha.org
>
> http://preview.tinyurl.com/kwv3xf
I do not dispute that, Mara.
In my quest to discover the bad guys and learn more about the
exponential increase in Cybercrime, I've asked many questions.
Some folk have become ......... 'edgy', if I've got too near the truth.
In particular, those at www.annexcafe.com and those at www.aumha.net.
I confirm that *both* of these organisations have banned me from posting
there.
As far as I'm aware, I have been banned by NO other organisation.
HTH
--
Dave
N. Miller
> I become confused by things I do not understand. Others have persuaded
> me to be suspicious of headers where I can't see a numerical IP
> address ...
Whether a post carries an "NNTP-Posting-Host:" header line, or not, is
generally dependent on the news service used. I use to post through
'news.sf.sbcglobal.net', before AT&T shut it down. That server included the
"NNTP-Posting-Host:". So does 'msnews.microsoft.com', which I mostly use for
posting to the Microsoft newsgroups. However, since I had to find a
replacement for the now defunct AT&T news servers, I settled on a free news
service called, "eternal-september" (formerly called, "Motzarella"). There
server does not add the "NNTP-Posting-Host:" header line. Nor do some other
news services. A poster's IP address is hardly necessary to determine if
they are trustworthy, or not.
Mara
On Sat, 25 Jul 2009 07:34:55 +0100, "~BD~" <Boate...@hotmail.co.uk> wrote:
>Mara wrote:
>
>>
>> Well, you yourself admitted to being banned at aumha.org
>>
>> http://preview.tinyurl.com/kwv3xf
>
>I do not dispute that, Mara.
>
>In my quest to discover the bad guys and learn more about the
>exponential increase in Cybercrime, I've asked many questions.
>
>Some folk have become ......... 'edgy', if I've got too near the truth.
>
>In particular, those at www.annexcafe.com and those at www.aumha.net.
>
>I confirm that *both* of these organisations have banned me from posting
>there.
Nice backpedal, but it just doesn't work.
That's not what you said. You said, and I quote directly:
>>I HAVE NEVER - *EVER* - BEEN BANNED BY *ANY* ISP - NEVER!
>>
>>As God is my judge.
--------------------------------------------
You said you had never been banned by anyone anywhere. Those are YOUR words. I
don't think you expected anyone to find the real truth, but hey, them's the
breaks.
You can't have it both ways. If you had been banned and now claim as in your
words above, you lied. If you haven't been banned, then the post I found is a
lie. And I haven't even looked further than that - yet. You seem to be terribly
interested in drawing attention away from what *you* have said and done by
reflecting it onto others.
Say goodbye to your credibility. :)
--
"Ph'nglui mglw'nafh Cthulhu R'lyeh wagn'nagl fhtagn."
~BD~
Whist I'm sure you mean well, Mara, please note ............
An ISP is an Internet Service Provider.
Here in the UK I have used Freeserve, which became Wanadoo and then
Orange. I have used AOL (the global one) and I have used AOL (UK). I'm
currently using 3 (Three) - mobile broadband, using the 3G network -
from my narrowboat.
I repeat - just for you! I have NEVER been banned by *ANY* ISP.
HTH
--
Dave
~BD~
> On Sat, 25 Jul 2009 07:20:08 +0100, ��BD�� wrote:
>
>> I become confused by things I do not understand. Others have
>> persuaded me to be suspicious of headers where I can't see a
>> numerical IP address ...
>
> Whether a post carries an "NNTP-Posting-Host:" header line, or not, is
> generally dependent on the news service used. I use to post through
> 'news.sf.sbcglobal.net', before AT&T shut it down. That server
> included the "NNTP-Posting-Host:". So does 'msnews.microsoft.com',
> which I mostly use for posting to the Microsoft newsgroups. However,
> since I had to find a replacement for the now defunct AT&T news
> servers, I settled on a free news service called, "eternal-september"
> (formerly called, "Motzarella"). There server does not add the
> "NNTP-Posting-Host:" header line. Nor do some other news services. A
> poster's IP address is hardly necessary to determine if they are
> trustworthy, or not.
Thank you for that explanation, Norman. I'm sure you will have noticed
that I, too, use Eternal-September, sometimes, nowadays.
I am a little confused by "phx.gbl" which appears in many of the headers
of PA Bear - yet he says that he usually posts from the Microsoft web
interface although he's confirmed that he does sometimes use Google
Groups.
Any ideas?
--
Dave
Aardvark
Heh. I wonder how many colonials would know what a narrowboat was.
The Hoffmeister (David Hasselhoff) and his daughters took a trip on one
recently and when being interviewed by Scott Mills about the trip on Radio
1, continually referred to it as a 'longboat'.
Mike Easter
> I am a little confused by "phx.gbl"
For someone who spends a lot of time looking at headers, it doesn't seem
that you learn (about them)very fast.
Newsservers may or may not create the MID message-id which belongs to
every message. If the message already has a mid, then the newsserver
may not create one for it. More typically a message does not have an
mid - that is bring the mid with it from the newsreader, in which case
the newsserver by which it is posted creates & stamps a unique mid for
each message it accepts.
Typically that mid has the 'flavor' of the newsserver which
injected/propagated/stamped it.
The msnews.microsoft.com newsserver stamps its messages' mid/s with
.phx.gbl. Those posters who use/ post with/ that MS newsserver whose
newsreaders don't create the (their own) mid are stamped with the MS
newsservers mid creation ending with phx.gbl.
Messages injected by the GG system are stamped with a googlegroups.com
mid.
--
Mike Easter
~BD~
Mike - thanks for posting.
You are, I'm fairly sure, trying to help me .......... but you are
right, my 'learning' speed (and comprehension) has certainly
deteriorated over the years! When I had my first contact with computers
they had thermionic valves (tubes!)
I now half-understand that I need have no concern regarding phx.gbl
I'll let it rest!
Maybe you'll pop into 'microsoft.public.test.here' and give me some much
needed help! ;>)
--
Dave
BoaterDave
> Peter Foldes wrote:
> >> I've been using them for a while now because they don't publish
> >> one's IP address in numerical form.
> >
> > Everyone can still tell when it is you that post even without IP .
> > That certain arrogance comes through clear as day in your posts. That
> > is what gave you and gives you away every single time when you forge
> > other peoples names such as mine for example and as to the ones that
> > you play stupid to as to not to know it when you post with forged
> > names
> > when you posted to D Lipman like you knew what you were talking
> Interesting comments, Peter. You said "We all had a great laugh ..."
>
> What I need to clarify is your use of "WE" - it rather sounds as if
> there are lots of you in the same room - is that the case?
>
> Always wondering!
> --
> Dave
Now I'm wondering if Bulwinkle/Burford is one of the group.
Sadly, there's no way of knowing - unless folk tell us the truth.
--
Just checking functionality really! :-)
David B.
--
"Do something wonderful, people may imitate it." (Albert Schweitzer)