el-weirdo spam

Discussion in 'NZ Computing' started by Invisible, Jul 15, 2005.

  1. Invisible

    Invisible Guest

    Anyone else been getting this strange shit? I've had half a dozen or so similar
    ones to my Paradise addy.



    "Hello,
    Pitt answered readily. There was no reason why he should not, thoughordinary
    luck ye should manage it. Faith, you're fat enough toof the plunder, which was
    considerable, as well as the slaves andThey are the ransom extracted by Don
    Diego from the GovernorNicholas. Each could tell the other much upon which the
    otheron the poop, Lord Julian and Miss Bishop looked on, his lordshipleading to
    the cabin. And there was something else that thosehandsome head. Consider now
    that we cannot depend upon approachingDeputy-Governor added his own passionate
    pleading to the proposalscondition much more common than is generally
    supposed.SPANIARDSwork, for the blood you have murderously shed, and for your
    violenceMen? said Lord Julian, staring. Say Spaniards, and I'll agree.his foul
    vocabulary he could find no epithet to describe hisasking him what he had to say
    for himself, why sentence of deathcommission,' says I; 'turn King's man and save
    your neck and ours.'"

    "Hello,
    My back! he screamed.rendering it difficult for any man to become her
    lover.dismissing the matter: We sail in the morning, on the first of
    theaccounting me an ingrate as well. If I have hesitated, it istemptations that
    were put before him, can you wonder, or dare youapoplectic British Governor, the
    Spaniards were smashing and looting,M. de Rivarol condescended to be mollified.
    It was necessary thatHe has a slight touch of fever - shall we say? - that
    detains himdoor of a parlour.her guns.stem their satisfaction and convert it
    into perplexity. Partly outto insult, and Wolverstone struck him a blow that
    felled him, andlanding parties.checkmated.The half-caste shrank terrified before
    his fury. His explanation,As Ogle left the quarter-deck, Blood turned, and came
    face to face"
    Invisible, Jul 15, 2005
    #1
    1. Advertising

  2. Invisible

    Ralph Fox Guest

    On Sat, 16 Jul 2005 00:17:12 +1200, in message
     <>, Invisible wrote:

    > Anyone else been getting this strange shit? I've had half a dozen or so similar
    > ones to my Paradise addy.


    Is it a multipart/alternative message, with this gibberish in the
    first (plain text) part and the real spam in the second (HTML) part?

    An _HTML_ mail client (which Agent is not) will show the HTML part
    with the @#$%*! instead of the plain text part with the gibberish.

    Spammers send out millions of spam messages pushing the same @#$%*!
    in the HTML part, but changing the gibberish in the plain text part
    for each few recipients. The 'bot-generated gibberish is supposed
    to fool ISP spam filters into making it look like a unique message,
    but not display in HTML mail readers.


    > "Hello,
    > Pitt answered readily. There was no reason why he should not, thoughordinary
    > luck ye should manage it. Faith, you're fat enough toof the plunder, which was


    [snipping 'bot-generated gibberish]

    > felled him, andlanding parties.checkmated.The half-caste shrank terrified before
    > his fury. His explanation,As Ogle left the quarter-deck, Blood turned, and came
    > face to face"


    --
    Cheers
    Ralph

    "It is hard to imagine a more stupid or more dangerous way of making
    decisions than by putting those decisions in the hands of people who
    pay no price for being wrong." -- Thomas Sowell
    Ralph Fox, Jul 15, 2005
    #2
    1. Advertising

  3. Invisible

    Invisible Guest

    On Fri, 15 Jul 2005 21:20:34 +0000, Ralph Fox
    <-echo.invalid> wrote:

    >On Sat, 16 Jul 2005 00:17:12 +1200, in message
    > <>, Invisible wrote:
    >
    >> Anyone else been getting this strange shit? I've had half a dozen or so similar
    >> ones to my Paradise addy.

    >
    >Is it a multipart/alternative message, with this gibberish in the
    >first (plain text) part and the real spam in the second (HTML) part?
    >
    >An _HTML_ mail client (which Agent is not) will show the HTML part
    >with the @#$%*! instead of the plain text part with the gibberish.


    Heh, just turned on HTML in Firefox, and all was revealed, although the below
    pastes as different garbage, the gist is viagra spam:


    "How to save on your MEDlCA spinal TlONS over 70%.

    Phar selfpollination mzMail Shop - Successfull and Proven Way to sav absinth e
    your dishabille money.

    sphagna V mirage AG A forceless L l
    counterplot U
    silkworm l R katabatic A C brazing l entertainment IS VA Arguseyed L
    circum M and many other.

    * Best PR coalmine lCES
    * Worldwide SHlPPlN Vandyke G
    * Tot eremitical al confidentiaIity
    * Over 5 milIion cu preconcerted stomers

    Have a disproportionate nice day!"
    Invisible, Jul 15, 2005
    #3
  4. In article <>,
    Invisible <> wrote:

    >Heh, just turned on HTML in Firefox, and all was revealed, although the below
    >pastes as different garbage, the gist is viagra spam:


    I've seen garbage embedded in the form of nonsensical HTML directives.
    That way they don't display in most HTML-aware MUAs, but they still get
    read by the spam filter.
    Lawrence D¹Oliveiro, Jul 15, 2005
    #4
  5. Invisible

    Invisible Guest

    On Sat, 16 Jul 2005 09:51:44 +1200, Invisible <> wrote:

    >Heh, just turned on HTML in Firefox, and all was revealed,

    Correction, Thunderbird!
    Invisible, Jul 15, 2005
    #5
  6. Invisible

    Mike Dee Guest

    Invisible <> wrote in
    news::

    >>Heh, just turned on HTML in Firefox, and all was revealed,

    > Correction, Thunderbird!


    And did that Spammer's HTML call up graphics from external sources?

    Tsk tsk, there's one born a minute. Hope you remembered to turn HTML
    back off again.

    --
    dee
    Mike Dee, Jul 16, 2005
    #6
  7. Invisible

    Rob J Guest

    On 16 Jul 2005 11:16:37 GMT, Mike Dee <> wrote:

    >Invisible <> wrote in
    >news::
    >
    >>>Heh, just turned on HTML in Firefox, and all was revealed,

    >> Correction, Thunderbird!

    >
    >And did that Spammer's HTML call up graphics from external sources?
    >
    >Tsk tsk, there's one born a minute. Hope you remembered to turn HTML
    >back off again.


    Hope you just didn't notice by any chance that Thunderbird blocks
    remote images by default.
    Rob J, Jul 16, 2005
    #7
  8. Invisible

    Invisible Guest

    On Sat, 16 Jul 2005 23:26:55 +1200, Rob J <> wrote:

    >On 16 Jul 2005 11:16:37 GMT, Mike Dee <> wrote:
    >
    >>Invisible <> wrote in
    >>news::
    >>
    >>>>Heh, just turned on HTML in Firefox, and all was revealed,
    >>> Correction, Thunderbird!

    >>
    >>And did that Spammer's HTML call up graphics from external sources?
    >>
    >>Tsk tsk, there's one born a minute. Hope you remembered to turn HTML
    >>back off again.

    >
    >Hope you just didn't notice by any chance that Thunderbird blocks
    >remote images by default.


    Plus I was offline when I turned it on, not that there were any images in these
    anyway.
    Invisible, Jul 16, 2005
    #8
  9. Invisible

    H.O.G Guest

    On Sat, 16 Jul 2005 09:51:44 +1200, Invisible <>
    spoke these fine words:

    >On Fri, 15 Jul 2005 21:20:34 +0000, Ralph Fox
    ><-echo.invalid> wrote:
    >
    >>On Sat, 16 Jul 2005 00:17:12 +1200, in message
    >> <>, Invisible wrote:
    >>
    >>> Anyone else been getting this strange shit? I've had half a dozen or so similar
    >>> ones to my Paradise addy.

    >>
    >>Is it a multipart/alternative message, with this gibberish in the
    >>first (plain text) part and the real spam in the second (HTML) part?
    >>
    >>An _HTML_ mail client (which Agent is not) will show the HTML part
    >>with the @#$%*! instead of the plain text part with the gibberish.

    >
    >Heh, just turned on HTML in Firefox, and all was revealed, although the below
    >pastes as different garbage, the gist is viagra spam:
    >
    >
    >"How to save on your MEDlCA spinal TlONS over 70%.
    >
    >Phar selfpollination mzMail Shop - Successfull and Proven Way to sav absinth e
    >your dishabille money.
    >
    >sphagna V mirage AG A forceless L l
    >counterplot U
    >silkworm l R katabatic A C brazing l entertainment IS VA Arguseyed L
    >circum M and many other.
    >
    >* Best PR coalmine lCES
    >* Worldwide SHlPPlN Vandyke G
    >* Tot eremitical al confidentiaIity
    >* Over 5 milIion cu preconcerted stomers
    >
    >Have a disproportionate nice day!"


    It is because heaps of SPAM these days actually puts a few words into
    cells in a table. If the HTML is rendered correctly, it looks like a
    normal line of text, but makes it harder for spam filters to see it.

    eg:

    "How to save on your MEDlCA spinal TlONS over 70%"

    If rendered correctly, would probably say:

    "How to save over 70% on your spinal MEDICATIONS"


    "Phar selfpollination mzMail Shop - Successfull and Proven Way to sav
    absinth eyour dishabille money."

    And this one looks like it's got some words in hidden cells, or at
    least the same colour as the background:

    "PharmzMail Shop - Successful and Proven Way to saveyour money."

    You get the idea:

    "* Best PR coalmine lCES
    * Worldwide SHlPPlN Vandyke G
    * Tot eremitical al confidentiaIity
    * Over 5 milIion cu preconcerted stomers"

    actually says:

    "* Best PRlCES
    * Worldwide SHlPPlNG
    * Total confidentiaIity
    * Over 5 milIion customers"


    I think you'll find that your email client is just crap at rendering
    HTML (no offence). Chuck the source in a text doco, and open in a
    browser if you want to see what most other people would see.
    H.O.G, Jul 16, 2005
    #9
  10. Invisible

    Mark C Guest

    Invisible <> wrote in
    news::

    > Anyone else been getting this strange shit? I've had half a
    > dozen or so similar ones to my Paradise addy.


    I got some similar shit recently, that only had random characters in
    both the text and the html versions. No message that I could see.

    I *SHOULD* have bounced it with a fake 'invalid address' email,
    because I now think it was a test to see if my email was valid.

    Since then I've noticed I'm getting 'viagra' type spam (was not
    before).

    Mark
    Mark C, Jul 17, 2005
    #10
  11. Mark C wrote:
    > Invisible <> wrote in
    > news::
    >
    >
    >>Anyone else been getting this strange shit? I've had half a
    >>dozen or so similar ones to my Paradise addy.

    >
    >
    > I got some similar shit recently, that only had random characters in
    > both the text and the html versions. No message that I could see.


    > I *SHOULD* have bounced it with a fake 'invalid address' email,
    > because I now think it was a test to see if my email was valid.


    you mean pretending to be the mail admin??? thats normally frowned upon
    by most ISPs, and there is usually a clause about closing your account
    if you do such things.

    --
    http://dave.net.nz <- My personal site.
    http://synaptic.net.nz <- Dunedin Based IT and ISP services
    Dave - Dave.net.nz, Jul 17, 2005
    #11
  12. In article <>, Invisible <> wrote:
    >On Fri, 15 Jul 2005 21:20:34 +0000, Ralph Fox
    ><-echo.invalid> wrote:
    >
    >>On Sat, 16 Jul 2005 00:17:12 +1200, in message
    >> <>, Invisible wrote:
    >>
    >>> Anyone else been getting this strange shit? I've had half a dozen or so

    > similar
    >>> ones to my Paradise addy.

    >>
    >>Is it a multipart/alternative message, with this gibberish in the
    >>first (plain text) part and the real spam in the second (HTML) part?
    >>
    >>An _HTML_ mail client (which Agent is not) will show the HTML part
    >>with the @#$%*! instead of the plain text part with the gibberish.

    >
    >Heh, just turned on HTML in Firefox, and all was revealed, although the below
    >pastes as different garbage, the gist is viagra spam:


    ... and if we filter out all html email .... suddenly nothing but signal :)

    Bruce

    ----------------------------------------
    I believe you find life such a problem because you think there are the good
    people and the bad people. You're wrong, of course. There are, always and
    only, the bad people, but some of them are on opposite sides.

    Lord Vetinari in Guards ! Guards ! - Terry Pratchett

    Caution ===== followups may have been changed to relevant groups
    (if there were any)
    Bruce Sinclair, Jul 17, 2005
    #12
  13. In article <>,
    "Dave - Dave.net.nz" <> wrote:

    >Mark C wrote:
    >> Invisible <> wrote in
    >> news::
    >>
    >>>Anyone else been getting this strange shit? I've had half a
    >>>dozen or so similar ones to my Paradise addy.

    >>
    >> I got some similar shit recently, that only had random characters in
    >> both the text and the html versions. No message that I could see.

    >
    >> I *SHOULD* have bounced it with a fake 'invalid address' email,
    >> because I now think it was a test to see if my email was valid.

    >
    >you mean pretending to be the mail admin???


    MAILER-DAEMON is not the mail admin.

    > thats normally frowned upon
    >by most ISPs, and there is usually a clause about closing your account
    >if you do such things.


    If I own my own domain, I'm perfectly entitled to use whatever addresses
    I like within that domain.
    Lawrence D¹Oliveiro, Jul 18, 2005
    #13
  14. Lawrence D¹Oliveiro wrote:
    >>>>Anyone else been getting this strange shit? I've had half a
    >>>>dozen or so similar ones to my Paradise addy.


    >>>I got some similar shit recently, that only had random characters in
    >>>both the text and the html versions. No message that I could see.


    >>>I *SHOULD* have bounced it with a fake 'invalid address' email,
    >>>because I now think it was a test to see if my email was valid.


    >>you mean pretending to be the mail admin???


    > MAILER-DAEMON is not the mail admin.


    True, but forging either one is against most ISPs T&C/AUP. Forging
    anything online is normally frowned upon.

    >>thats normally frowned upon
    >>by most ISPs, and there is usually a clause about closing your account
    >>if you do such things.


    > If I own my own domain, I'm perfectly entitled to use whatever addresses
    > I like within that domain.


    Indeed you can.

    --
    http://dave.net.nz <- My personal site.
    http://synaptic.net.nz <- Dunedin Based IT and ISP services
    Dave - Dave.net.nz, Jul 18, 2005
    #14
  15. Dave - Dave.net.nz wrote:
    >>>>> Anyone else been getting this strange shit? I've had half a
    >>>>> dozen or so similar ones to my Paradise addy.
    >>>> I got some similar shit recently, that only had random characters in
    >>>> both the text and the html versions. No message that I could see.


    >>>> I *SHOULD* have bounced it with a fake 'invalid address' email,
    >>>> because I now think it was a test to see if my email was valid.


    >>> you mean pretending to be the mail admin???


    >> MAILER-DAEMON is not the mail admin.


    > True, but forging either one is against most ISPs T&C/AUP. Forging
    > anything online is normally frowned upon.


    Just to add to that, forging anything full stop is usually frowned upon.

    >>> thats normally frowned upon by most ISPs, and there is usually a
    >>> clause about closing your account if you do such things.


    >> If I own my own domain, I'm perfectly entitled to use whatever
    >> addresses I like within that domain.


    > Indeed you can.


    Only because it is your domain... personally I get very little spam to
    my own domains, but I'm fairly careful with who has my addys, however my
    ISP email addy receives a heap(enough I no longer check it)

    --
    http://dave.net.nz <- My personal site.
    http://synaptic.net.nz <- Dunedin Based IT and ISP services
    Dave - Dave.net.nz, Jul 18, 2005
    #15
  16. In article <>,
    "Dave - Dave.net.nz" <> wrote:

    >Lawrence D¹Oliveiro wrote:
    >
    >> MAILER-DAEMON is not the mail admin.

    >
    >True, but forging either one is against most ISPs T&C/AUP. Forging
    >anything online is normally frowned upon.


    In that case, any use of MAILER-DAEMON as a from-address is a forgery,
    since by definition it is never a valid recipient address.
    Lawrence D¹Oliveiro, Jul 18, 2005
    #16
  17. Invisible

    Mark C Guest

    "Dave - Dave.net.nz" <> wrote in
    news::

    > Mark C wrote:
    >> Invisible <> wrote in
    >> news::
    >>
    >>>Anyone else been getting this strange shit? I've had half a
    >>>dozen or so similar ones to my Paradise addy.

    >>
    >> I got some similar shit recently, that only had random
    >> characters in both the text and the html versions. No message
    >> that I could see.

    >
    >> I *SHOULD* have bounced it with a fake 'invalid address' email,
    >> because I now think it was a test to see if my email was valid.

    >
    > you mean pretending to be the mail admin??? thats normally
    > frowned upon by most ISPs, and there is usually a clause about
    > closing your account if you do such things.


    Pretending to be the mail daemon.

    I can't see an ISP having a problem if used in reply to email sent to
    myself.

    Sending unsolicited email pretending to be from admin@isp is
    something completely different, which I would never do.
    Mark C, Jul 18, 2005
    #17
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Stefano
    Replies:
    5
    Views:
    4,362
    Moz Champion
    Feb 9, 2005
  2. C A Preston

    Spam-Spam and more Spam

    C A Preston, Apr 12, 2004, in forum: Computer Support
    Replies:
    2
    Views:
    525
    Hywel
    Apr 12, 2004
  3. thinkpad r40 went weirdo

    , Jul 5, 2006, in forum: Computer Information
    Replies:
    5
    Views:
    489
    - Bobb -
    Jul 12, 2006
  4. thinkpad r40 went weirdo

    , Jul 5, 2006, in forum: Computer Support
    Replies:
    6
    Views:
    569
  5. Clwddncr
    Replies:
    6
    Views:
    625
    Dave - Dave.net.nz
    Feb 7, 2005
Loading...

Share This Page