Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Ping: Kat and that idiot John Dorsay

83 views
Skip to first unread message

Sir Gregory Hall, Esq.

unread,
Sep 6, 2012, 1:04:34 PM9/6/12
to


Something for you both to read.

http://tools.ietf.org/html/rfc6057

It thoroughly explains how Comcast users connect to the internet.

Pay particular attention to the routing diagram about halfway down the long
page.

Notice the 'Internet Backbone Router" which connects to the Comcast Internet
Backbone.

THIS ROUTER IS IDENTIFIED BY THE IP NUMBER THAT APPEARS IN STEVE LAYTON'S
POSTS.

In other words, Layton is but one of hundreds or thousands who access the
Internet using the SAME IP number which Google displays in it's headers.

I hope this helps.

--
Sir Gregory


John Dorsay

unread,
Sep 6, 2012, 9:07:35 PM9/6/12
to
On 9/6/2012 1:04 PM, Sir Gregory Hall, Esq. wrote:

Good for you, Putzboi. I command you to waste endless time denying
the obvious, and here you are.

<snip>

> Notice the 'Internet Backbone Router" which connects to the Comcast Internet
> Backbone.
>
> THIS ROUTER IS IDENTIFIED BY THE IP NUMBER THAT APPEARS IN STEVE LAYTON'S
> POSTS.

Too bad nothing in that QOS document or anywhere else supports, much
less proves, this idiotic claim about the backbone router's ip
address, Putzboi. I command you to provide more lame insults while
you dangle in the wind, waving your hands.

HAND.

Kat

unread,
Sep 6, 2012, 10:08:35 PM9/6/12
to restim...@gmail.com
On Thursday, September 6, 2012 9:07:34 PM UTC-4, John Dorsay wrote:

> Good for you, Putzboi. I command you to waste endless time denying
>
> the obvious, and here you are.


That moron is still at it? Yeesh! We must have really bruised his tiny little "ego" :P

> I command you to provide more lame insults while
>
> you dangle in the wind, waving your hands.

Rofl! Whether baited into it or on command, Snot Boy never fails to come when he's called... just like the dog he is.


Sir Gregory Hall, Esq.

unread,
Sep 7, 2012, 11:44:35 AM9/7/12
to
"Kat" <lady...@comcast.net> wrote in message
news:af54b037-f57f-48ca...@googlegroups.com...
LOL! It seems YOU, Kat, are the one coming at my beck and
call even when you claim to have kill filled my posts. What a liar
you are, Kat! Shame on you.

And, Kat, how about your claim that Steve Layton's Google
Groups posts have his computer's DCHP assigned IP number
as the Posting Host even though the Posting Host IP number
is not even formatted like a DCHP, temporarily assigned
number? This in spite of the fact that the IP shown in the headers
is licensed to COMCAST - not to Steve Layton. Duh. I doubt any
kunt is dumber than you, Kat, and your slurper John Dorsay.

So, would you and that idiot, John Dorsay, please explain how
Steve Layton manages to register his computer to COMCAST?

Yes, you two are embarrassingly dumb. The link I provided proves
that that posting host IP number is NOT Steve Layton's. Plug it into
Whois and it will inform you that it belongs to COMCAST, the service
provider. Their Comcast server, the position of which is at the top of
the easily-understandable diagram, hosts hundreds or thousands
of end user cable modems, has an assigned IP number which number
is listed as the posting host in Google Groups headers. A Whois
search bears this out via who owns that IP number. Only a total idiot
would think Comcast cable modems each have an IP number assigned.
They do not.

--
Sir Gregory


telsar

unread,
Sep 7, 2012, 12:46:08 PM9/7/12
to
I don't know hat all you are talking about, but I had Comcast a while
back and they do assign an IP addr for each cable modem that does show
up for the users coming off that modem. Actually thats what most do in
one way or another. When I used them they provided this single IP to
the computer/router attached to it upon a DHCP exchange along with the
other goodies. It was a real IP, not a reserved one. I do not know
what they would do today if I signed with them again, but I would be
surprised if things changed much. It seems you are describing more how
things are done in the mobile phone world, a bit.

I don't know what Google Groups puts in their headers off-hand, but they
do put enough so I can delete all the posts that come from there.

--
Steal a little and go to jail, steal a lot and become King.

http://twovoyagers.com/improve-usenet.org/

Sir Gregory Hall, Esq.

unread,
Sep 7, 2012, 4:47:35 PM9/7/12
to
"telsar" <no...@nowhere.com> wrote in message
news:k2d8ck$rl5$1...@dont-email.me...
> I don't know (w)hat all you are talking about, but I had Comcast a while
> back and they do assign an IP addr for each cable modem that does show
> up for the users coming off that modem. Actually thats what most do in
> one way or another. When I used them they provided this single IP to
> the computer/router attached to it upon a DHCP exchange along with the
> other goodies. It was a real IP, not a reserved one. I do not know
> what they would do today if I signed with them again, but I would be
> surprised if things changed much. It seems you are describing more how
> things are done in the mobile phone world, a bit.
>
> I don't know what Google Groups puts in their headers off-hand, but they
> do put enough so I can delete all the posts that come from there.


FYI:

http://forums.comcast.com/t5/Home-Networking-Router-WiFi/How-to-verify-Comcast-as-ISP-and-understanding-IP-addresses/td-p/1282809


Please read "Baric's" comments about how Comcast assigns (leases) temporary
DCHP IP numbers to customer modems. These IP numbers are not static like the
Posting Host number that shows in Google Group headers. They don't show in
Google Groups headers due to the fact that the upstream router firewalls
customer IP leases.The format is also different which should be a giveaway to
Kat and that moron John Dorsay but apparently they are too ignorant to
understand simple IPv4 protocols.

Here is the pertinent paragraphs:

"Now the router's public interface gets a Public IP address that is in a range
that belongs to Comcast. Comcast goes to an organization canned IANA (The
Internet Assigned Numbers Authority) and says "Please give me xxx IPv4
addresses so I can give them out to our customers." IANA assigns Comcast a
block of IP addresses assuming they have it (the IPv4 address space is pretty
much exhausted which is why IPv6, which is much bigger, is such a hot topic
these days). Comcast then handles these out to their Internet customers when
requested. In your example, your router is making the request over it's WAN
interface using a protocol called DHCP. Comcast responds with one of these IP
addresses in the form of a lease, meaning "I'll give you this IP address to
use for the next 7 days, and here is the gateway to use, your subnet address
and your DNS servers. Be sure to renew it or it will expire in 7 days, OK?"
Your router then configures his WAN interface with that IP address and he's
open for business.

"This setup is pretty typical of most home based network. The router takes
care of making sure your computers with private IP addresses can all get to
public Internet servers while hiding and protecting your systems from the
Internet wilds on the other side of the router using a process called NAT
(Network Address Translation). When you go to an external Web site, like
http://www.whatsmyip.org they only see the WAN side of the router, they don't
see your computer directly, and that's why they report the router's WAN
interface IP address (i.e.. the public one gotten from Comcast) even though it
was your computer with a private IP address behind the router that made the
request."

Kat and John Dorsay claiming that they can assign sock puppet status to one
Steve Layton on the basis of the router IP number that Google Groups shows as
the posting host in the headers is embarrassingly dumb.


--
Sir Gregory



telsar

unread,
Sep 9, 2012, 5:15:32 PM9/9/12
to
I only commented about the home IP addr assigned. As I also said I
don't know off-hand what google puts in their headers. I'll take you at
your word on it... Looks like you researched it well.

I could, I guess make a post from GG and see if it uses my Ip addr...

No, I won't...because I would just delete it when it comes in.

Sir Gregory Hall, Esq.

unread,
Sep 9, 2012, 5:27:30 PM9/9/12
to
"telsar" <no...@nowhere.com> wrote in message
news:k2j0tp$90p$1...@dont-email.me...
Them main reason I've posted how Comcast works is because "Kat" has made
stupid and ignorant claims that because "Steve Layton" and some fellow named
"Higgs" happen to have the same Posting Host IP listed in the Google Groups
headers.

"Kat" asserts that she KNOWS Steve Layton and Higgs are the same person
posting using different names. She also claims "Truth Seeker" is a sock puppet
of Steve Layton for perhaps the same reason. She says she knows this to be
true because the IP number Google Groups lists is that of a user's computer or
perhaps the cable modem.

What I posted PROVES beyond any doubt that Kat is WRONG. The link and the
quoted paragraphs explains how it is a Comcast upstream router where it
connects to an Internet backbone that is identified by the Posting Host IP
number - NOT a users cable modem or computer which is fire walled by the
router so the number CANNOT be displayed by Google Groups.

Kat is a dumb kunt who when presented with proof STILL maintains she's
correct. And, please notice how when presented with the ultimate proof she
JUST RUNS AWAY. But, if you read her recent replies to Steve Layton she's
STILL claiming he can be identified by the Google Groups headers posting host
even though I have PROVEN that hundreds and perhaps thousands of Comcast
subscribers necessarily have the same Posting Host IP because of the way
Comcast routers connect to the Internet.

Kat is a typical Scientologist. All blather and bluster and no knowledge.

--
Sir Gregory



John Dorsay

unread,
Sep 9, 2012, 7:23:58 PM9/9/12
to
On 9/9/2012 5:15 PM, telsar wrote:
> On 9/7/2012 3:47 PM, Sir Gregory Hall, Esq. wrote:

<snip irrelevant trolling crap>

>> Kat and John Dorsay claiming that they can assign sock puppet status to one
>> Steve Layton on the basis of the router IP number that Google Groups shows as
>> the posting host in the headers is embarrassingly dumb.
>>
>>
>
> I only commented about the home IP addr assigned. As I also said I
> don't know off-hand what google puts in their headers. I'll take you at
> your word on it... Looks like you researched it well.

Putzboi is just flailing in the wind because he follows my orders.
In the OP of this very thread he made this idiotic claim:

>> From: Sir Gregory Hall, Esq. <greghall@home.fåke>
>> Subject: Ping: Kat and that idiot John Dorsay
>> Date: Thu, 6 Sep 2012 13:04:34 -0400
>> Message-ID: <5u7ak4....@news.alt.net>

<snip>

>> http://tools.ietf.org/html/rfc6057
>>
>> It thoroughly explains how Comcast users connect to the
>> internet.
>>
>> Pay particular attention to the routing diagram about halfway
>> down the long page.
>>
>> Notice the 'Internet Backbone Router" which connects to the
>> Comcast Internet Backbone.
>>
>> THIS ROUTER IS IDENTIFIED BY THE IP NUMBER THAT APPEARS IN
>> STEVE LAYTON'S POSTS.

I pointed out that nothing in that particular document or anywhere
else supports, much less proves, his idiotic claim about the
backbone router's ip address. I then commanded him to provide more
lame insults while dangling in the wind.

Rather than prove that his original claim about the upstream router
was valid (which of course he can't, because he pulled it out of his
sorry ass), he quoted a comcast document about assignment of ip
addresses to home users with home-based networks. They of course
have their own home (*not* upstream) routers, each of which is
assigned its own ip address by comcast.

Putzboi is claiming that this same ip address is assigned to
upstream routers, which is complete nonsense. But since he can't
prove anything with this document either, he will continue to utter
lame insults while he flails in the wind.

If he had any clue whatsoever, he would have claimed that comcast
routes all web traffic through a caching proxy, and that is the
address seen (and reported) by google groups. Unlike Putzboi's
stupid claims, that's at least plausible. Still wrong, but plausible.

But rather than attempt a competent troll, Putzboi will continue to
utter lame insults and flail helplessly. He has no choice. He does
what I tell him to do.

> I could, I guess make a post from GG and see if it uses my Ip addr...

No need. It always has.

> No, I won't...because I would just delete it when it comes in.

Not a bad plan, that.


John

Davis

unread,
Sep 9, 2012, 7:44:05 PM9/9/12
to
Considering the average density of Scientologists in any given area (outside
S.California or C. Florida), I've got to wonder, what are the overall odds of
having two Scientology trolls originating off the same cable trunk?

And now considering that there are only a handful of OSA-approved
Scientologists in the whole country that are allowed to engage in internet
debate with SP's -- what are the odds that there are two of them that happen
to be living in the same area by sheer coincidence?

That's not to say there can't be other possibilities (proxies, spoofs,
counterfeit macs, hijacked IPs, etc) but I've got to wonder -- what are the
odds?

--Davis

Sir Gregory Hall, Esq.

unread,
Sep 10, 2012, 8:49:18 AM9/10/12
to
"Davis" <da...@mailinator.com> wrote in message
news:504d29b7$0$7489$a826...@newsreader.readnews.com...
The odds are long, very long.

Each DHCP router is licensed to give out 255 different, individual user, IP
number leases. If, like Comcast, several DHCP routers are distributing these
individual user IP number leases through a main upstream router the WAN (wide
area network)side of which connects to the Internet backbone then one can
multiply 255 dynamic user leases by the number of routers in question.

Pick a number of routers. Pick a dozen. 12 X 255 = 3060 individual DCHP
subscriber (user) leases from the router that connects to the Internet because
the LAN (local area network) side connects to a dozen local area network
routers.

So the odds, in Steve Layton's case assuming a dozen LAN routers, can be said
to be 3,060 to one that any given poster having the same backbone router IP
number as Layton IS a sock of Layton. Would you put some serious money betting
on those long shot odds? I sure wouldn't.

More proof that Kat and her slurper Dorsay are stupid, ignorant and boorish in
their refusal to integrate the facts - typical, closed-minded, Scientology
obsessed losers. Ugly in both mind and body.

--
Sir Gregory


telsar

unread,
Sep 10, 2012, 1:50:44 PM9/10/12
to
Tell you what. Please tell noone, but I used GG to post a while back
before I turned on it completely, I will go look at one of these and let
you know if its my ip or not. I may even look at the headers and will
let you guys know...if course I may have no more credibility than anyone
else...

telsar

unread,
Sep 10, 2012, 2:11:30 PM9/10/12
to
OK. Posting Host means really nothing except what Google Host was used
to submit the Google Groups Message to their NNTP/GG host.

All I can see for identity, which is consistent, is:

posting-account=

This encrypted value is consistent across the board no matter what part
of the world I emanated from. Its the encrypted/cypher for userid
logged in. You can also match up the software versions of browsers.

Thats all I got.

Sir Gregory Hall, Esq.

unread,
Sep 10, 2012, 2:21:15 PM9/10/12
to
"telsar" <no...@nowhere.com> wrote in message
news:k2lagp$j4c$1...@dont-email.me...
EXACTLY! Now open a command prompt and type in ipconfig and hit enter.

There you will find your personal computer IP number and lease if your ISP is
using DHCP which is most likely the case. Note how different these numbers are
from what the public sees as the posting host in Google headers. Not even in
the same ballpark and plugging them into WHOIS will provide ambiguous results
because WHOIS doesn't do PCs.

>
> All I can see for identity, which is consistent, is:
>
> posting-account=
>
> This encrypted value is consistent across the board no matter what part
> of the world I emanated from. Its the encrypted/cypher for userid
> logged in. You can also match up the software versions of browsers.
>
> Thats all I got.

And the idiots Kat and Dorsay have assumed they can identify Steve Layton's PC
from this information. Bwahahahahhahahahhahaha.

--
Sir Gregory


telsar

unread,
Sep 10, 2012, 2:51:47 PM9/10/12
to
On 9/10/2012 1:21 PM, Sir Gregory Hall, Esq. wrote:

>
> And the idiots Kat and Dorsay have assumed they can identify Steve Layton's PC
> from this information. Bwahahahahhahahahhahaha.
>

If someone changes their handle and uses the same google account, it
will be obvious its a sock. Of course it possible to decrypt the
posting-account if they can get the salt from google and determine what
scheme is used to encrypt it, but it may just be a look-up in a internal
database. Maybe they can have their buddy at google do it for them.

I find just one handle is enough, some use many for various reasons, but
its a foolish game to play and really rarely fools anyone. Google
Groups is so clumsy to use, its hard to believe that folks use it
instead of a real NNTP free service like:

eternal-september.org
mixmin.net
aioe.org

And there are many other free text only usenet servers anyone can use
with a real news client like:

IE6
Thunderbird
Opera

I guess folks get used to Google, but so many delete these posts its
hard to participate in Usenet.

Sir Gregory Hall, Esq.

unread,
Sep 10, 2012, 3:07:10 PM9/10/12
to
"telsar" <no...@nowhere.com> wrote in message
news:k2lcsa$2rb$1...@dont-email.me...
I agree that Google Group users are inept, stupid and disruptive. The old
Google Groups couldn't do attribution right and didn't attribute at all in
replies. They tried to fix it in the new Google Groups format but managed to
screw up the fix which now double spaces and wastes bandwidth because of the
extra spaces.

Also, the new Google Groups seems to have no concept of word wrap.

This is why when somebody like Kat tries to act like a Usenet authority and an
expert at what Google Groups posting host information really means it's just
so embarrassingly laughable for her and anybody stupid enough to support her
delusional thinking.

Keep in mind that not all Google Groups posting hosts are formatted the same
as yours. Some actually list the correct IP number that is registered to the
company (such as Comcast) who owns the IP number. I think this is the case
with Steve Layton's Posting Host information listed by Google Groups in the
headers. At least the IP number listed when searched in Whois resolves to be
owned by Comcast.

But, this IP number owned by Comcast is that of a router than is chained to
other routers on the LAN side and connected to the Internet backbone on the
WAN side. The IP number shown by Google Groups is the WAN side IP number and
the LAN side IP numbers propagated via sub-servers to subscribers are fire
walled and not accessible to Google Groups. Thus neither Steve Layton's DHCP
leased IP number nor anybody else's are known to anybody except Comcast.

I have posted using Google Groups and what they list for my IP number is a
Bell South upstream node located in Miami where this main router identified by
the IP number is connected to the Internet backbone. Or it can also be a
Comcast router also located in Miami. I am about a hundred miles from Miami
and the Internet Service providers I use vary. I can even connect using
Comcast cable by pirating unsecured home wi-fi that connect via Comcast.

So, I know of which I speak and poor ignorant Kat and her jilted lover,
Dorsay, do not.

--
Sir Gregory


John Dorsay

unread,
Sep 10, 2012, 7:02:06 PM9/10/12
to
On 9/10/2012 2:11 PM, telsar wrote:

> OK. Posting Host means really nothing except what Google Host was used
> to submit the Google Groups Message to their NNTP/GG host.

You previously gave me the impression that you have some
understanding of the how the internet works. Either I was completely
mistaken, or you are trolling irresponsibly right now.

Posts from google groups identify the source ip address in both the
NNTP-Posting-Host header and the Injection-Info header, as has been
the case for years. The source ip address identified by google
groups is the same as the external ip address of a person's internet
connection. For people posting from home, this is one of two things.
If they are posting from a home network, it is the WAN facing
address of their home router. If they are directly connected to the
internet, it is the address of their directly-connected PC.

There are free services that people can browse to that will report
their WAN ip, such as whatsmyip.org. This is the same address that
will be seen, and reported, by google groups. It is also the same
WAN ip address they will see if they read their router's config info.

The ip address identified by ipconfig is different from this address
for users on home networks. In that case, the address is a
nonroutable lan address, commonly in the 192.168.x.x range. The
reported "gateway" ip address is the LAN facing address of their own
router. To try to convince people that the difference between a
user's LAN address and the user's WAN address somehow masks the
user's location (as Putzboi is currently doing) is downright malicious.

Anyone who believes that google groups itself hides their ip address
will leak information every time they use google groups to post.


John

Sir Gregory Hall, Esq.

unread,
Sep 10, 2012, 7:30:00 PM9/10/12
to
"John Dorsay" <restim...@gmail.com> wrote in message
news:k2lrha$vm2$1...@arscc.eternal-september.org...
Wrong! The Posting Host IP address that Google Groups shows in the header is
NOT that of the subscriber but that of the router that belongs to the service
provider of the subscriber. In the case of Steve Layton the service provider
is Comcast. The Posting Host number listed by Google Groups is that of the WAN
side of the Comcast router. NO LAN side information is available to Google
Groups as it is all fire walled.

Dumbass! Read the link I provided elsewhere for it says precisely that in
slightly more technical terms.

--
Sir Gregory


John Dorsay

unread,
Sep 10, 2012, 7:47:46 PM9/10/12
to
Okay, Putzboi, you may take a break from flailing your arms wildly,
and post right here, in *this* thread, the exact text from your link
that proves your idiot claim.

I'm sorry. That was unfair of me. There is no such text. Flail away.






Sir Gregory Hall, Esq.

unread,
Sep 11, 2012, 12:02:08 PM9/11/12
to
"John Dorsay" <restim...@gmail.com> wrote in message
news:k2lu74$i9a$1...@arscc.eternal-september.org...
Message-ID: <5uac28....@news.alt.net>

Evidently you missed it the first time around, loser!

--
Sir Gregory


telsar

unread,
Sep 11, 2012, 1:06:43 PM9/11/12
to
I don't know everything about it. I just looked at my own posts I made
and they do not contain an IP addr that is even owned by my ISP. I
don't know why that is. I guessed the value was simply their host
anchoring my browser session, that was a guess I made. I made this
guess after VPNing around the world and using different google hosts. I
saw no value in that field that represented my IP address that I
masqueraded as.

I offer no other info as I simply do not know. The value they put in
there I did guess at. The posting host header should be used for the
purpose you describe and still is on many servers, although they usually
encrypt it using a salt they keep for their purposes. The same value
shows up for the same hosts until the salt is changed.

Perhaps I did troll irresponsibly as I did guess. Sorry.

roger....@live.com

unread,
Sep 11, 2012, 1:51:48 PM9/11/12
to
Automatic control engineering consists of ON’s and Off’s. It’s something basic in the computer world. Scientologists aren’t the only ones created by programmers.

telsar

unread,
Sep 11, 2012, 2:03:36 PM9/11/12
to
I spent a while searching about and can find nothing that says that the
NNTP-Posting-Host is anything but the server address injecting the msg
into the usenet system. I see references to using this IP addr to
contact the host for a log review using the Message-ID to find who
posted, but thats all I could find.

I see many Usenet posts claiming to use it for more, but they are not
credible.

John: If you look at your own posted msgs using Google Groups, does it
have your real ip address in the headers?

I know Google has my real IP since I can see it when I am logged into
gmail, but thats not what ends up in my posts to GG.

John Dorsay

unread,
Sep 11, 2012, 3:46:31 PM9/11/12
to
On 9/11/2012 12:02 PM, Sir Gregory Hall, Esq. wrote:
> "John Dorsay" <restim...@gmail.com> wrote in message

>> Okay, Putzboi, you may take a break from flailing your arms wildly,
>> and post right here, in *this* thread, the exact text from your link
>> that proves your idiot claim.
>>
>> I'm sorry. That was unfair of me. There is no such text. Flail away.
>
>
> Message-ID: <5uac28....@news.alt.net>
>
> Evidently you missed it the first time around, loser!

What part of "post right here, in *this* thread, the exact text from
your link that proves your idiot claim" is too complicated for you
to understand?



Kat

unread,
Sep 11, 2012, 4:37:19 PM9/11/12
to restim...@gmail.com
He's still arguing this? How very sad.

I find it sad that I know more about WAN IP's than Snot Boy. The only thought that is more sad is that he may actually know I'm right... and is simply being contrary because he's obsessed with verbally abusing me.

Bottom line, 71.200.118.150 is a unique WAN IP. If it wasn't unique, it would start with 192.

The funny part about Comcast's variable WAN IPs is they only cycle when you unplug your Comcast box long enough... a process that I know from personal experience takes roughly 8 hours. So, two posts with the same WAN made within a short period of time.... yeah. There is no logical reason for this unless it's the same person.

John Dorsay

unread,
Sep 11, 2012, 5:05:51 PM9/11/12
to
On 9/11/2012 4:37 PM, Kat wrote:
> On Tuesday, September 11, 2012 3:46:33 PM UTC-4, John Dorsay
> wrote:
>> On 9/11/2012 12:02 PM, Sir Gregory Hall, Esq. wrote:

>>> Message-ID: <5uac28....@news.alt.net>
>>
>>>
>>
>>> Evidently you missed it the first time around, loser!
>>
>>
>>
>> What part of "post right here, in *this* thread, the exact text
>> from
>>
>> your link that proves your idiot claim" is too complicated for
>> you
>>
>> to understand?
>
> He's still arguing this? How very sad.

Putzboi's not arguing anything anymore. He's just trying to generate
distraction by flailing his arms and shouting "look over here!". In
his defense, that is *exactly* what I told him to do.

> I find it sad that I know more about WAN IP's than Snot Boy. The
> only thought that is more sad is that he may actually know I'm
> right... and is simply being contrary because he's obsessed with
> verbally abusing me.

He does have a deep-seated misogynist streak.

> Bottom line, 71.200.118.150 is a unique WAN IP. If it wasn't
> unique, it would start with 192.

There are actually three different blocks of non-routable (LAN) ip
addresses. 192.168.x.x is just the most widely used with home networks.

> The funny part about Comcast's variable WAN IPs is they only
> cycle when you unplug your Comcast box long enough... a process
> that I know from personal experience takes roughly 8 hours. So,
> two posts with the same WAN made within a short period of
> time.... yeah. There is no logical reason for this unless it's
> the same person.

Coupled with the consistent posting style and content, there's no
other reasonable possibility. Even without the ip address gotcha, it
would still be pretty suspicious. Put it all together and trhere is
no doubt.


John

John Dorsay

unread,
Sep 11, 2012, 6:03:30 PM9/11/12
to
On 9/11/2012 2:03 PM, telsar wrote:
> I spent a while searching about and can find nothing that says that the
> NNTP-Posting-Host is anything but the server address injecting the msg
> into the usenet system. I see references to using this IP addr to
> contact the host for a log review using the Message-ID to find who
> posted, but thats all I could find.

Way back in the day when usenet was accessible only from unix shell
accounts, the nntp posting host nomenclature, and the advice you
quote, made sense. Now, for those of us who use newsreaders, our own
pc is the nntp posting host. For those who use google groups, the
nntp posting host is some server at google that takes whatever
people have entered into the web interface, and posts it to an nntp
server.

> I see many Usenet posts claiming to use it for more, but they are not
> credible.

It's not used consistently, either. Google uses it to identify the
source ip of messages. Homer Wilson Smith, who hosts a free ars/act
nntp server at Lightlink, shows another lightlink server as the
posting host. He added a "X-Original-NNTP-Posting-Host" to show the
source ip of messages posted via lightlink.

> John: If you look at your own posted msgs using Google Groups, does it
> have your real ip address in the headers?

Only if I post via the google groups web interface (which is what
Steve Layton/Truthseeker does). In that case, google adds the
indformation. When I post from eternal-september.org, since
eternal-september does not include my ip address (at least not in
plain text), google has no way of knowing it. Whether or not your ip
address appears in your posts depends only on how you post.

> I know Google has my real IP since I can see it when I am logged into
> gmail, but thats not what ends up in my posts to GG.

When you say "posts to google groups", do you mean posts made from
the google groups web interface, or do you mean posts of yours that
you view via the web interface, but that originated somewhere else
(such as eternal-september.org)?

You could create a one-time-only throwaway google account, post a
message via the google groups web interface to alt.test, and look at
the headers in that message. You will find it will show your ip
address at the time of posting the message.

Putzboi, or Gregory Hall as he sometimes calls himself, is a
long-time troll who probably realizes that this is indeed the case,
and the claims he is making about Steve Layton/Truthseeker are
completely FOS. But he makes FOS claims anyway because it is the
only way he knows to gain some attention. The possibility that some
naive newcomer might post using google groups believing it conceals
source ip addresses is of no concern to him.

Accept Putzboi's advice at your peril.


John

Kat

unread,
Sep 11, 2012, 6:08:32 PM9/11/12
to restim...@gmail.com
On Tuesday, September 11, 2012 5:05:53 PM UTC-4, John Dorsay wrote:

> Putzboi's not arguing anything anymore. He's just trying to generate
> distraction by flailing his arms and shouting "look over here!". In
> his defense, that is *exactly* what I told him to do.

As I said before, that dog always comes when he's called. It's good to know he rolls over and plays tricks on command as well. :P

>
> He does have a deep-seated misogynist streak.

At first I thought he was trying for some Colbert style satire but then I realized.. he's not that intelligent.


> There are actually three different blocks of non-routable (LAN) ip
>
> addresses. 192.168.x.x is just the most widely used with home networks.

Aye, I saw that as well. But, since TS's IP doesn't apply to those exceptions...


>
> Coupled with the consistent posting style and content, there's no
> other reasonable possibility. Even without the ip address gotcha, it
> would still be pretty suspicious. Put it all together and trhere is
> no doubt.

Yup. I'm debating sending a complaint to Comcast myself with the emails he sent to Aida. They don't like customers using their service to make threatening comments like "why have you elected me your executioner?". Hopefully, Aida will do the same.

Kat

unread,
Sep 11, 2012, 6:28:01 PM9/11/12
to restim...@gmail.com
You know John, the ultimate irony of all this is- TS bragged to Aida about his prowess with computers.

Not even 5 minutes of reading google groups/ usenet FAQs and IP dissection tutorials... and I knew what his IP meant. How long as TS been posting to usenet now? Over a decade?

Either he's made thousands of posts from various socks and never realized that his IP was quite visible and quite unique.... or he's made thousands of posts from various socks knowing that his IP was visible but didn't make the mental connection that it would matter.

I'm inclined to think it is the latter, given the arrogance and mental disconnect involved with threatening someone via email from their home computer.

With people like this filling the ranks, it's no wonder the cult is dying.

Emmett Badass Gulley

unread,
Sep 11, 2012, 7:59:34 PM9/11/12
to
On Sep 11, 12:02 pm, " Sir Gregory Hall, Esq." <gregh...@home.fåke>
wrote:
> "John Dorsay" <restimula...@gmail.com> wrote in message
>
> news:k2lu74$i9a$1...@arscc.eternal-september.org...
>
>
>
>
>
> > On 9/10/2012 7:30 PM,  Sir Gregory Hall, Esq. wrote:
> >> "John Dorsay" <restimula...@gmail.com> wrote in message
> Message-ID: <5uac28.uuq.1...@news.alt.net>
>
> Evidently you missed it the first time around, loser!
>
> --
> Sir Gregory

Hi Gweggles. Emmett is looking for his $300.

telsar

unread,
Sep 11, 2012, 8:58:55 PM9/11/12
to
Yes I mean from the web interface. I used to use GG, but now as you do
use news.eternal-september.org In those posts using their web interface
my real ip never showed. I have a gmail address and have used it for years.
>
> You could create a one-time-only throwaway google account, post a
> message via the google groups web interface to alt.test, and look at
> the headers in that message. You will find it will show your ip
> address at the time of posting the message.

Well I just went back and looked at what was there. I will probably
give it another try though, just to confirm this.

>
> Putzboi, or Gregory Hall as he sometimes calls himself, is a
> long-time troll who probably realizes that this is indeed the case,
> and the claims he is making about Steve Layton/Truthseeker are
> completely FOS. But he makes FOS claims anyway because it is the
> only way he knows to gain some attention. The possibility that some
> naive newcomer might post using google groups believing it conceals
> source ip addresses is of no concern to him.
>
> Accept Putzboi's advice at your peril.
>
>
> John
>

I don't know about the beef, as it doesn't involve me. I just noticed
the issue about the header and thought I knew what the deal was, which
perhaps I don't.

John Dorsay

unread,
Sep 11, 2012, 10:12:13 PM9/11/12
to
On 9/11/2012 8:58 PM, telsar wrote:

> Yes I mean from the web interface. I used to use GG, but now as you do
> use news.eternal-september.org In those posts using their web interface
> my real ip never showed. I have a gmail address and have used it for years.
>>
>> You could create a one-time-only throwaway google account, post a
>> message via the google groups web interface to alt.test, and look at
>> the headers in that message. You will find it will show your ip
>> address at the time of posting the message.
>
> Well I just went back and looked at what was there. I will probably
> give it another try though, just to confirm this.

I can't figure out how to do this from the new improved gg
interface. But if I go back to the old format, under "View Options",
I can "Show Original", then "Show only message text", which shows
pretty much the same thing as "view message source" in thunderbird.

I don't know how long ago you used gg to post. I don't know if they
have shown the nntp-posting-host header since day 1. But it has been
in use for at least the last 7 years, and it has always shown the
source ip address.


John

Kat

unread,
Sep 11, 2012, 10:31:51 PM9/11/12
to restim...@gmail.com
On Tuesday, September 11, 2012 10:12:15 PM UTC-4, John Dorsay wrote:

> I can't figure out how to do this from the new improved gg
> interface. But if I go back to the old format, under "View Options",
> I can "Show Original", then "Show only message text", which shows
> pretty much the same thing as "view message source" in thunderbird.


Over on the top right hand side of a post there is a little drop down box where "show original" is hidden now.

John Dorsay

unread,
Sep 11, 2012, 10:40:23 PM9/11/12
to
On 9/11/2012 10:31 PM, Kat wrote:

> Over on the top right hand side of a post there is a little drop
> down box where "show original" is hidden now.

Thanks!


pinky

unread,
Sep 12, 2012, 10:31:21 AM9/12/12
to
My IP address is 199.58.84.52, so this is a test to see if this header is showing the right thing or not.

telsar here on a temp deal.

telsar

unread,
Sep 12, 2012, 10:41:27 AM9/12/12
to
I sent a test msg to this group using nym pinky. It should show how the
GG field works. I put my IP addr in the msg before I wrote it. Reply
to it when it comes so I can see it, as I delete all GG stuff.

John Dorsay

unread,
Sep 12, 2012, 10:51:22 AM9/12/12
to
On 9/12/2012 10:31 AM, pinky wrote:

> My IP address is 199.58.84.52, so this is a test to see if this header is showing the right thing or not.
>
> telsar here on a temp deal.

Here are your headers as shown by thunderbird.

> Received: by 10.224.182.74 with SMTP id cb10mr9582619qab.0.1347460281879;
> Wed, 12 Sep 2012 07:31:21 -0700 (PDT)
> Received: by 10.52.29.131 with SMTP id k3mr2903775vdh.5.1347460281856; Wed, 12
> Sep 2012 07:31:21 -0700 (PDT)
> Path: news.eternal-september.org!!eternal-september.org!mx04.eternal-september.org!feeder.eternal-september.org!news.bbs-scene.org!border4.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!v8no2110059qap.0!news-out.google.com!da15ni3445qab.0!nntp.google.com!v8no2110055qap.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail
> Newsgroups: alt.religion.scientology
> Date: Wed, 12 Sep 2012 07:31:21 -0700 (PDT)
> In-Reply-To: <k2or1u$19d$1...@arscc.eternal-september.org>
> Complaints-To: groups...@google.com
> Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=199.58.84.52; posting-account=89kbLQoAAADZNZ2ilWk1CdgWvdbvJVYn
> NNTP-Posting-Host: 199.58.84.52
> References: <5u7ak4....@news.alt.net> <k2bhck$s4c$1...@arscc.eternal-september.org>
> <af54b037-f57f-48ca...@googlegroups.com> <5u9qa5....@news.alt.net>
> <k2d8ck$rl5$1...@dont-email.me> <5uac28....@news.alt.net>
> <k2j0tp$90p$1...@dont-email.me> <k2j8ef$m24$1...@arscc.eternal-september.org>
> <504d29b7$0$7489$a826...@newsreader.readnews.com> <5uhd5g....@news.alt.net>
> <k2l99p$7il$1...@dont-email.me> <k2lagp$j4c$1...@dont-email.me> <k2lrha$vm2$1...@arscc.eternal-september.org>
> <k2nr3a$vk$1...@dont-email.me> <k2nue0$odj$1...@dont-email.me> <k2ocfk$k84$1...@arscc.eternal-september.org>
> <k2omon$cvv$1...@dont-email.me> <k2or1u$19d$1...@arscc.eternal-september.org>
> User-Agent: G2/1.0
> MIME-Version: 1.0
> Message-ID: <b00277dc-d048-49dc...@googlegroups.com>
> Subject: Re: Ping: Kat the imbecile and that idiot John Dorsay
> From: pinky <telsa...@gmail.com>
> Injection-Date: Wed, 12 Sep 2012 14:31:21 +0000
> Content-Type: text/plain; charset=ISO-8859-1
> X-Received-Bytes: 3251
> Lines: 55
> Xref: news.eternal-september.org alt.religion.scientology:99578

You can see your ip address in both the NNTP-Posting-Host and
Injection-Info headers.

Cue more frantic arm-flailing by Putzboi.


John

John Dorsay

unread,
Sep 12, 2012, 10:56:32 AM9/12/12
to
On 9/12/2012 10:41 AM, telsar wrote:

> I sent a test msg to this group using nym pinky. It should show how the
> GG field works. I put my IP addr in the msg before I wrote it. Reply
> to it when it comes so I can see it, as I delete all GG stuff.

See it here: http://tinyurl.com/9xmrhfv or
https://groups.google.com/group/alt.religion.scientology/msg/de33b4440a2d3bc1?dmode=source&output=gplain&noredirect


John

telsar

unread,
Sep 12, 2012, 11:16:00 AM9/12/12
to
crap, they put my email address in there too, dammit...

Well that does rip it though, I stand corrected on my earlier guess.

You know, I think I was using the TOR network to do all those posts to
hide my IP addr, worked so well it fooled me for a while. Its the sort
of thing I would instinctively do and forget. Oh, for sock puppets or
folks who do not want their privacy revealed use this:

http://www.torproject.org/

The Tor browser bundle comes bundled with a special version of Firefox
and will work with google stuff. If you have never heard of Tor, then
read up at the site. I recommend it and use it mucho. They have code
for windows, mac, and Linux.
0 new messages