Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

Re: [Full-disclosure] spammer wades into US Presidential race

Subject: Re: [Full-disclosure] spammer wades into US Presidential race
Date: Thu, 01 Nov 2007 03:16:04 -0000
Did you try contacting his campaign, and asking them if it was theres?
 While they may not fess up,  it wouldn't hurt.

Actually, it would hurt my wallet, and waste my time, compounding the 
loss
already incurred by receiving the spam in the first place.

Also, if you really believed that it might come from his campaign,

I didn't say that.

wouldn't it be worth trying to find out if

No.

Simply postulating that it's his (considering spamming is not a nice

I didn't do that.  But now you mention it - why would a spammer 
divert precious bandwidth from sending profitable spam?  That's gonna 
cost him money.  Either the spammer donated his resources for free, 
or someone paid - and who is that most likely to be?   You?  Me?  Ron 
Paul?  Hilary Clinton?  You decide.

thing) without even checking his record on such a topic, and claiming
"newsworthy" isn't quite... nice.

Check out Wired's take on it here:

http://www.wired.com/politics/security/news/2007/10/paul_bot

It seems the net is somewhat overrun with his apologists.

Stu

On 10/30/07, lsi <stuart@cyberdelix.net> wrote:
I didn't do much in the way of research, cos this is surely spam, and
we know spammers forge as much as possible.  So, I presume Derk
Gaston doesn't exist (I note his email address is
janek@stswithxxx.com, unlikely).

I note the mail is coming from .cn, a quick ping and traceroute
confirm this, again, it's unlikely Mr Paul is posting his newsletter
via China.

I also note the forged Received: line containing the hostname
dns02e.hants.gov.uk (this must be forged since it claims that host
has the IP 59.52.247.195, yet my own mailserver has resolved
59.52.247.195 to 195.247.52.59.broad.nc.jx.dynamic.163data.com.cn,
and besides, there's no reason for Hampshire Council to be forwarding
my mail, especially when it's concerning an American politican and
it's sent from China by a guy named Derk with an email address that
starts with Jane ...

Finally I note the randomness inserted and the end of the subject
line and body.

That looks like professionally-produced spam, if its possible for
spam to be professional, which is why I forwarded it, because I don't
recall seeing spammers take much of an interest in politics before.
Unless of course Ron Paul commissioned the spam, which is unlikely
but certainly newsworthy if so.  All of these unlikelies got me
curious...

Stu

On 28 Oct 2007 at 12:04, Aaron Katz wrote:

Date sent:              Sun, 28 Oct 2007 12:04:13 -0400
From:                   "Aaron Katz" <atkatz@gmail.com>
To:                     stuart@cyberdelix.net
Subject:                Re: [Full-disclosure] spammer wades into US
Presidential race
Copies to:              full-disclosure@lists.grok.org.uk

Could you provide a little more information/investigation (I'm too
lazy, at this very moment, to do the background investigation that you
should have provided, like who derk gaston is)?  According to the
headers, this looks like it might be forged (not just the little "may
be forged" notice, but the source locations, and even the name of the
person sending the mail - what association do they have to Ron Paul?)

On 10/28/07, lsi <stuart@cyberdelix.net> wrote:
[Well, it could be worse.  Spam that wants to end the Iraq war,
great! - Stu]

Return-Path: <janek@stswithxxx.com>
Received: from 195.247.52.59.broad.nc.jx.dynamic.163data.com.cn
(195.247.52.59.broad.nc.jx.dynamic.163data.com.cn [59.52.247.195]
(may be forged))
        by x.y.net (8.13.1/8.13.1) with ESMTP id l9S5irW8004442
        for <x@y.net>; Sun, 28 Oct 2007 05:44:54 GMT
Received: from [59.52.247.195] by dns02e.hants.gov.uk; Sun, 28 Oct
2007 05:44:51 +0000
Message-ID: <000701c81925$02a66001$93e966b1@qgddwrot>
From: "derk gaston" <janek@stswithxxx.com>
To: <x@y.net>
Subject: Government Wasteful Spending Eliminated By Ron Paul  yGVed
Date: Sun, 28 Oct 2007 03:57:28 +0000

[...]

Hello Scott,

Ron Paul is for the people, unless you want your children to
have human implant RFID chips, a National ID card and create
a North American Union and see an economic collapse far worse
than the great depression. Vote for Ron Paul he speaks the
truth and the media and government is afraid of him. This is
the last honest politican left to bring this country out of
this rut from the War Profiteers and bush Administration has
created. Get motivated America, don't believe the lies of the
media he has also WON the GOP Debate On Sunday! Value Freedom
and Liberty instead of corporate lies and corruption. Bypass
this media blackout they are doing to Ron Paul, tell your family
and friends and get involved in a local group at meetup.com make
your voice heard! He will end the War In Iraq immediately,
He will eliminate the IRS and wasteful government spending, and
eliminate the Federal Reserve and restore power to the people
and the only person not a member on the CFR. Can any other runner
make these claims or give Americans the true freedom we were all
raised to believe? We are all economic slaves to the banks and the
illegal federal Reserve. This is why our currency is worth nothing
because of Hidden Inflation Tax and the IRS taking everything
you make!

** RON PAUL WILL STOP THE IRAQ WAR IMMEDIATELY! **

He has NEVER voted:
* to raise taxes
* for an unbalanced budget
* to raise congressional pay
* for a federal restriction on gun ownership
* to increase the power of the executive branch

He HAS voted:
* against the Iraq war
* against the inappropriately named USA PATRIOT act
* against regulating the internet
* against the Military Commissions Act

He will eliminate the IRS, Wasteful Government Spending &
Stop The Iraq War Immediately!

Most importantly, he voted NO on anything in Congress that
is not allowed by the Constitution. And he Despises any
politican that does not do their job for the people and lives
up to the constitution!

Google.com & Youtube.com Search: "Ron Paul"
Join The Revolution!

***************************************
We Need A Real President That Will Restore And Protect
Americans! Stop The War! Protect Our Borders!
*********VOTE RON PAUL 2008************
rIQdkb


-- End --


---
Stuart Udall
stuart at@cyberdelix.dot net - http://www.cyberdelix.net/

---
 * Origin: lsi: revolution through evolution (192:168/0.2)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/




---
Stuart Udall
stuart at@cyberdelix.dot net - http://www.cyberdelix.net/

---
 * Origin: lsi: revolution through evolution (192:168/0.2)





---
Stuart Udall
stuart at@cyberdelix.dot net - http://www.cyberdelix.net/

--- 
 * Origin: lsi: revolution through evolution (192:168/0.2)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

<Prev in Thread] Current Thread [Next in Thread>