Re: Ohya
On Mon, 9 Jan 2006, Kristopher Austin yowled: Well, scratch that on IE 6.0, but it definitely happens in Firefox 1.5 with no extensions installed. I can watch Firefox try .com for any unknown URL before returning an error. I've tested this on 4 machines to be sure. This is controlled by the prefs browser.fixup.alternate.enabledtrue browser.fixup.alternate.prefix www. browser.fixup.alternate.suffix .com I've disabled it here because I consider this an odious misfeature, but alas it *is* on by default :( -- `I must caution that dipping fingers into molten lead presents several serious dangers.' --- Jearl Walker
Re: Ohya
On Sun, 8 Jan 2006, [EMAIL PROTECTED] announced authoritatively: From: [EMAIL PROTECTED] ===8--- Make it happen! Here : www.rektoky ,ohya add .com ^_^ ===8--- [...] Well Raymond. it's no good if it's listed in uribl if the url does not parse as a url. That's the point. Good grief, was that mess supposed to be read as `www.rektoky.com'? I can't see how anyone would read it as that, nor how they could expect to get any custom (assuming that's what they're aiming for, as opposed to virus drops or testing spamware or something). One of the goals in _A Plan for Spam_ has certainly been achieved: the spammers are having to obfuscate their dubious `messages' so much that they no longer make any great degree of sense. -- `I must caution that dipping fingers into molten lead presents several serious dangers.' --- Jearl Walker
RE: Ohya
Well, to make matters interesting, Outlook makes www.rektoky a hyperlink. Click on it and IE and Firefox will both add the .com. Voila! You have a spam address that makes it through every time. Kris Sent to Nix only previously, meant to send this to the list. -Original Message- From: Nix [mailto:[EMAIL PROTECTED] Sent: Monday, January 09, 2006 9:59 AM To: jdow Cc: users@spamassassin.apache.org Subject: Re: Ohya On Sun, 8 Jan 2006, [EMAIL PROTECTED] announced authoritatively: From: [EMAIL PROTECTED] ===8--- Make it happen! Here : www.rektoky ,ohya add .com ^_^ ===8--- [...] Well Raymond. it's no good if it's listed in uribl if the url does not parse as a url. That's the point. Good grief, was that mess supposed to be read as `www.rektoky.com'? I can't see how anyone would read it as that, nor how they could expect to get any custom (assuming that's what they're aiming for, as opposed to virus drops or testing spamware or something). One of the goals in _A Plan for Spam_ has certainly been achieved: the spammers are having to obfuscate their dubious `messages' so much that they no longer make any great degree of sense. -- `I must caution that dipping fingers into molten lead presents several serious dangers.' --- Jearl Walker
Re: Ohya
Nix a écrit : One of the goals in _A Plan for Spam_ has certainly been achieved: the spammers are having to obfuscate their dubious `messages' so much that they no longer make any great degree of sense. actually, most (naive) users will add .com either because they understood (the message says add .com) or after an error from their browser. so the spammers goal is still achieved too;-p
Re: Ohya
Kristopher Austin a écrit : Well, to make matters interesting, Outlook makes www.rektoky a hyperlink. Click on it and IE and Firefox will both add the .com. Voila! You have a spam address that makes it through every time. not here. what versions of IE and firefox are you using? Both return an error here. Are you using a broken proxy?
RE: Ohya
Well, scratch that on IE 6.0, but it definitely happens in Firefox 1.5 with no extensions installed. I can watch Firefox try .com for any unknown URL before returning an error. I've tested this on 4 machines to be sure. We do not use any proxies. Either way, as you said lots of people will type .com anyway. Kris -Original Message- From: mouss [mailto:[EMAIL PROTECTED] Sent: Monday, January 09, 2006 1:32 PM To: Kristopher Austin Cc: users@spamassassin.apache.org Subject: Re: Ohya Kristopher Austin a écrit : Well, to make matters interesting, Outlook makes www.rektoky a hyperlink. Click on it and IE and Firefox will both add the .com. Voila! You have a spam address that makes it through every time. not here. what versions of IE and firefox are you using? Both return an error here. Are you using a broken proxy?
Re: Ohya
On Sunday 08 January 2006 02:34, Evan Platt wrote: At 11:30 PM 1/7/2006, you wrote: I love how a list devoted to spam filters get spammed. I feel so warm and fuzzy. The spammers are laughing now I can hear it. JDOW has posted to the list before. JDOW, a spammer? Now thats choice. Some of you are just whippersnappers in internet years. Joanne was there when it started I think, before me and I've been on since about '87 or so, when the thing for the masses was delphi, on a 300 baud circuit I had to pay ld charges on to get to. Running a trs-80 Color Computer and an operating system called os9 at the time. I first encountered JDOW on an amiga list in the very early 90's. Maybe this lady who uses the JDOW handle should re-introduce herself to these newbies? Tell them about the BIXIES maybe. I initially thought it was spam too, but note the slips past the filters added. I think in a weird way, JDOW was suggesting something be added to SA to score on the spam he/she received. Exactly. -- Cheers, Gene People having trouble with vz bouncing email to me should add the word 'online' between the 'verizon', and the dot which bypasses vz's stupid bounce rules. I do use spamassassin too. :-) Yahoo.com and AOL/TW attorneys please note, additions to the above message by Gene Heskett are: Copyright 2005 by Maurice Eugene Heskett, all rights reserved.
Re: Ohya
===8---
Make it happen!
Here : www.rektoky ,ohya add .com ^_^
===8---
Slips past the filters.
sigh
{^_^}
Looks like a relatively new pair of ROKSO members,
Brian Fabian/Gregory Parsons. Mostly pills and porn from
Canada - largely hosted on zombies. The name servers at
nsX.robinsml.com have been known for a couple of weeks.
Paul Shupak
[EMAIL PROTECTED]
Re: Re: Ohya
Hi!
===8---
Make it happen!
Here : www.rektoky ,ohya add .com ^_^
===8---
Slips past the filters.
sigh
{^_^}
Looks like a relatively new pair of ROKSO members,
Brian Fabian/Gregory Parsons. Mostly pills and porn from
Canada - largely hosted on zombies. The name servers at
nsX.robinsml.com have been known for a couple of weeks.
RBL: skipping uri lookups on ip-based RBLs
URIBL: multi.surbl.org: listed [Blocked, rektoky.com on lists [jp][ws], See:
http://www.surbl.org/lists.html]
URIBL: multi.uribl.com: listed [Black, See http://l.uribl.com/?d=rektoky.com]
Other ones:
survey-reward. com
z932742. org
robinsml. com
nice-inks. com
datefiuture. com
bendtrie. com
z984132. net
q98721. net
s096298. com
j65102. com
d19821. com
g10928. org
b928301. org
vedged. com
trespon. com
rezment. com
rektoky. com
redfrw. com
grenha. com
extrabe. com
dougansss. com
kalpler1. com
they-need-much. net
they-love-much. net
they-like-much. net
they-enjoy-much.net
they-crave-much. net
napmack. com
armoredboxes. com
marketparticipant. com
we-help-you. org
we-help-save. com
we-help-everyone. com
monthly-savings. com
we-save-money. net
save-money-today. net
you-love-much. net
you-like-much. net
you-enjoy-much. net
you-crave-much. net
we-love-alot. net
we-enjoy-much. net
they-want-alot. net
simple-123. com
justin30seconds. com
just-60-seconds. com
123-savenow. com
we-help-you. net
we-help-save. net
so-ezy. net
we-can-lower. org
ezy-savings. org
as-easy-123. org
you-want-much. net
you-want-alot. net
you-need-alot. net
you-love-alot. net
you-like-alot. net
you-enjoy-alot. net
you-crave-alot. net
like-getting-laid. net
enjoy-getting-laid. net
crave-getting-laid. net
good-girlz. com
sumtransfer. com
hightransfer. com
zpoe. com
umakemesweat. com
umakemecrawl. com
poeje. com
make-love-to-a-cutie. com
good-times-tonight. com
find-a-cutie. com
umakemesweat. net
umakemecrawl. net
offers-gallore. net
umakemesweat. org
ineedu2nite. org
Bye,
Raymond.
Re: Re: Ohya
From: [EMAIL PROTECTED]
Hi!
===8---
Make it happen!
Here : www.rektoky ,ohya add .com ^_^
===8---
Slips past the filters.
sigh
{^_^}
Looks like a relatively new pair of ROKSO members,
Brian Fabian/Gregory Parsons. Mostly pills and porn from
Canada - largely hosted on zombies. The name servers at
nsX.robinsml.com have been known for a couple of weeks.
RBL: skipping uri lookups on ip-based RBLs
URIBL: multi.surbl.org: listed [Blocked, rektoky.com on lists [jp][ws], See:
http://www.surbl.org/lists.html]
URIBL: multi.uribl.com: listed [Black, See http://l.uribl.com/?d=rektoky.com]
Other ones:
...
rektoky. com
Well Raymond. it's no good if it's listed in uribl if the url does not
parse as a url. That's the point.
{^_-}
Re: Ohya
At 11:40 PM 1/7/2006, you wrote: Suggest you check the list archives. JDOW is a very frequent poster. JDOW knows of what he/she speaks. Uhhh isn't that what I said?
Re: Ohya
From: Evan Platt [EMAIL PROTECTED]
At 11:30 PM 1/7/2006, you wrote:
I love how a list devoted to spam filters get spammed.
I feel so warm and fuzzy. The spammers are laughing now I can hear it.
JDOW has posted to the list before.
I initially thought it was spam too, but note the slips past the
filters added.
I think in a weird way, JDOW was suggesting something be added to SA
to score on the spam he/she received.
The duh factor strikes again.
{^_-}Joanne Speaketh from behind that glyph and [EMAIL PROTECTED]
Re: Ohya
From: Evan Platt [EMAIL PROTECTED]
At 11:40 PM 1/7/2006, you wrote:
Suggest you check the list archives. JDOW is a very frequent poster.
JDOW knows of what he/she speaks.
Uhhh isn't that what I said?
There was a madness to my method, too. It was brief enough it inspired
comment. It'll be noticed fer shure, now. I'm a sneaky little devil.
{^_-}
