Message-ID: <4F09B9C0.1010402@usa.net>
Date: Sun, 08 Jan 2012 16:44:00 +0100
From: Alberto di Bene <dibene@usa.net>
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:9.0) Gecko/20111222 Thunderbird/9.0.1
MIME-Version: 1.0
To: rsgb_lf_group@blacksheep.org
References: <D819638B2801464E9ED44F27DD146653@JimPC>
In-Reply-To: <D819638B2801464E9ED44F27DD146653@JimPC>
Z-USANET-MsgId: XID233qaHPSD3072X39
Subject: Re: LF: G4WGT
Content-Type: multipart/alternative;
 boundary="------------090304080405060304010308"
Sender: owner-rsgb_lf_group@blacksheep.org
Precedence: bulk
Reply-To: rsgb_lf_group@blacksheep.org
X-AOL-SCOLL-URL_COUNT: 0  
x-aol-sid: 3039ac1d608c4f09ba1f1456
X-AOL-IP: 195.171.43.25
X-AOL-SPF: domain : blacksheep.org SPF : none


This is a multi-part message in MIME format.
--------------090304080405060304010308
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit

On 1/8/2012 2:23 PM, James Moritz wrote:
> For your information - I seem to be receiving suspicious-looking e-mails 
> claiming to be from G4WGT, containing even more suspicious-looking links to 
> videos. But the sender's address is a Hotmail one, not Tiscali as normal.
It happened to me too...  I received claims by persons that knew who I2PHD is, saying
that they received emails from  i2phd@weaksignals.com  (one of my email addresses)
containing spam...  of course not originated by me....

The problem is that it is too easy to forge the sender field of an email message...
you don't even need to know what the password of the account is....  you just use
a so-called open SMTP server, one that do not require authentication (and there are
some, especially in the Eastern part of the world), and a simple PHP script, where
you can put anything to your likes in the From:  field.   Using this technique, you can
even send a message to a closed Yahoo group, pretending to be one of its members,
and apparently it works...  until the much discussed reverse authentication will be
actually implemented, this is an inevitable risk exposure of the Internet world...

73  Alberto  I2PHD
 

--------------090304080405060304010308
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

<html>
  <head>
    <meta content=3D"text/html; charset=3Dwindows-1252"
      http-equiv=3D"Content-Type">
  </head>
  <body bgcolor=3D"#FFFFFF" text=3D"#000000">
    On 1/8/2012 2:23 PM, James Moritz wrote:
    <blockquote cite=3D"mid:D819638B2801464E9ED44F27DD146653@JimPC"
      type=3D"cite">
      <pre wrap=3D"">For your information - I seem to be receiving suspic=
ious-looking e-mails=20
claiming to be from G4WGT, containing even more suspicious-looking links =
to=20
videos. But the sender's address is a Hotmail one, not Tiscali as normal.=
</pre>
    </blockquote>
    <font face=3D"Tahoma">It happened to me too...=A0 I received claims b=
y
      persons that knew who I2PHD is, saying<br>
      that they received emails from=A0 <a class=3D"moz-txt-link-abbrevia=
ted" href=3D"mailto:i2phd@weaksignals.com">i2phd@weaksignals.com</a>=A0 (=
one of my
      email addresses)<br>
      containing spam...=A0 of course not originated by me....<br>
      <br>
      The problem is that it is too easy to forge the sender field of an
      email message...<br>
      you don't even need to know what the password of the account
      is....=A0 you just use<br>
      a so-called open SMTP server, one that do not require
      authentication (and there are<br>
      some, especially in the Eastern part of the world), and a simple
      PHP script, where<br>
      you can put anything to your likes in the From:=A0 field.=A0=A0 Usi=
ng
      this technique, you can<br>
      even send a message to a closed Yahoo group, pretending to be one
      of its members,<br>
      and apparently it works...=A0 until the much discussed reverse
      authentication will be<br>
      actually implemented, this is an inevitable risk exposure of the
      Internet world...<br>
      <br>
      73=A0 Alberto=A0 I2PHD<br>
      =A0<br>
    </font>
  </body>
</html>

--------------090304080405060304010308--