Note to everyone: Beware forged posts

[Jim Logajan]

I see someone has targeted several people who post to r.a.p and r.a.h and
begun forging their names in the "From" headers and posted troll-like posts
in an attempt to "Joe Job" the targets. Or it may simply be an attempt to
disrupt the newsgroups (more than usual, that is!). At the moment all the
forged posts _seem_ to have "albasani.net" in the "Path" header and can be
identified that way, though of course the perp may switch to an alternate
provider.

If you see an unexpectedly anal post from someone, check the headers of the
post in question and try to compare it to much older (presumably less anal)
posts from that same person.

[BobR]

On Apr 6, 6:47*pm, Jim Logajan > wrote:
> I see someone has targeted several people who post to r.a.p and r.a.h and
> begun forging their names in the "From" headers and posted troll-like posts
> in an attempt to "Joe Job" the targets. Or it may simply be an attempt to
> disrupt the newsgroups (more than usual, that is!). At the moment all the
> forged posts _seem_ to have "albasani.net" in the "Path" header and can be
> identified that way, though of course the perp may switch to an alternate
> provider.
>
> If you see an unexpectedly anal post from someone, check the headers of the
> post in question and try to compare it to much older (presumably less anal)
> posts from that same person.

Yep, just found a couple of posts that I made when I haven't even been
home to get on the computer. Now that is sick.

[Mxsmanic]

On Sun, 06 Apr 2008 18:47:26 -0500, Jim Logajan wrote:

> I see someone has targeted several people who post to r.a.p and r.a.h and
> begun forging their names in the "From" headers and posted troll-like posts
> in an attempt to "Joe Job" the targets. Or it may simply be an attempt to
> disrupt the newsgroups (more than usual, that is!). At the moment all the
> forged posts _seem_ to have "albasani.net" in the "Path" header and can be
> identified that way, though of course the perp may switch to an alternate
> provider.
>
> If you see an unexpectedly anal post from someone, check the headers of the
> post in question and try to compare it to much older (presumably less anal)
> posts from that same person.

YAWN.

[Jim Logajan]

Forger went:
> YAWN.

Okay, so far you appear to have used the following free servers (probably
others I haven't noticed):

http://news.motzarella.org/
http://www.albasani.net/index.html.en
http://www.aioe.org/

Why not stick with one until you get bounced from it so you can move on to
the next?

[clare at snyder dot ontario dot canada]

On Sun, 6 Apr 2008 16:55:56 -0700 (PDT), BobR
> wrote:

>On Apr 6, 6:47Â*pm, Jim Logajan > wrote:
>> I see someone has targeted several people who post to r.a.p and r.a.h and
>> begun forging their names in the "From" headers and posted troll-like posts
>> in an attempt to "Joe Job" the targets. Or it may simply be an attempt to
>> disrupt the newsgroups (more than usual, that is!). At the moment all the
>> forged posts _seem_ to have "albasani.net" in the "Path" header and can be
>> identified that way, though of course the perp may switch to an alternate
>> provider.
>>
>> If you see an unexpectedly anal post from someone, check the headers of the
>> post in question and try to compare it to much older (presumably less anal)
>> posts from that same person.
>
>Yep, just found a couple of posts that I made when I haven't even been
>home to get on the computer. Now that is sick.

Not the first time that's happened on R.A.H.

Wonder who they were talking about???????????

--
Posted via a free Usenet account from http://www.teranews.com

[[email protected]]

On Sun, 06 Apr 2008 20:16:17 -0500, Jim Logajan wrote:

> Forger went:
>> YAWN.
>
> Okay, so far you appear to have used the following free servers (probably
> others I haven't noticed):
>
> http://news.motzarella.org/
> http://www.albasani.net/index.html.en
> http://www.aioe.org/
>
> Why not stick with one until you get bounced from it so you can move on to
> the next?

I knew it was MX, good catch, Jim, thanks

[Jim Logajan]

On Mon, 7 Apr 2008 00:09:57 -0400, wrote:

> On Sun, 06 Apr 2008 20:16:17 -0500, Jim Logajan wrote:
>
>> Forger went:
>>> YAWN.
>>
>> Okay, so far you appear to have used the following free servers (probably
>> others I haven't noticed):
>>
>> http://news.motzarella.org/
>> http://www.albasani.net/index.html.en
>> http://www.aioe.org/
>>
>> Why not stick with one until you get bounced from it so you can move on to
>> the next?
>
> I knew it was MX, good catch, Jim, thanks

Fake post, Dan. Not me.

[Mxsmanic]

On Mon, 7 Apr 2008 00:12:02 -0400, Jim Logajan wrote:

> On Mon, 7 Apr 2008 00:09:57 -0400, wrote:
>
>> On Sun, 06 Apr 2008 20:16:17 -0500, Jim Logajan wrote:
>>
>>> Forger went:
>>>> YAWN.
>>>
>>> Okay, so far you appear to have used the following free servers (probably
>>> others I haven't noticed):
>>>
>>> http://news.motzarella.org/
>>> http://www.albasani.net/index.html.en
>>> http://www.aioe.org/
>>>
>>> Why not stick with one until you get bounced from it so you can move on to
>>> the next?
>>
>> I knew it was MX, good catch, Jim, thanks
>
> Fake post, Dan. Not me.

I knew it all along.

Dan Mc

[Jim Logajan]

On Mon, 7 Apr 2008 00:12:48 -0400, Mxsmanic wrote:

> On Mon, 7 Apr 2008 00:12:02 -0400, Jim Logajan wrote:
>
>> On Mon, 7 Apr 2008 00:09:57 -0400, wrote:
>>
>>> On Sun, 06 Apr 2008 20:16:17 -0500, Jim Logajan wrote:
>>>
>>>> Forger went:
>>>>> YAWN.
>>>>
>>>> Okay, so far you appear to have used the following free servers (probably
>>>> others I haven't noticed):
>>>>
>>>> http://news.motzarella.org/
>>>> http://www.albasani.net/index.html.en
>>>> http://www.aioe.org/
>>>>
>>>> Why not stick with one until you get bounced from it so you can move on to
>>>> the next?
>>>
>>> I knew it was MX, good catch, Jim, thanks
>>
>> Fake post, Dan. Not me.
>
> I knew it all along.
>
> Dan Mc

I can't believe this. You screwed up, didn't you? In your haste to post,
you forgot to change IDs.

We thought you were sick but this? Playing McCormack AND MX all this
time?

Sheesh, good luck and adios into my permanent killfile, pervert.

[Bertie the Bunyip[_25_]]

Mxsmanic > wrote in
:

> On Sun, 06 Apr 2008 18:47:26 -0500, Jim Logajan wrote:
>
>> I see someone has targeted several people who post to r.a.p and r.a.h
>> and begun forging their names in the "From" headers and posted
>> troll-like posts in an attempt to "Joe Job" the targets. Or it may
>> simply be an attempt to disrupt the newsgroups (more than usual, that
>> is!). At the moment all the forged posts _seem_ to have
>> "albasani.net" in the "Path" header and can be identified that way,
>> though of course the perp may switch to an alternate provider.
>>
>> If you see an unexpectedly anal post from someone, check the headers
>> of the post in question and try to compare it to much older
>> (presumably less anal) posts from that same person.
>
> YAWN.
>
Snort.


bertie

[[email protected]]

On Apr 7, 12:12 am, Mxsmanic > wrote:
> On Mon, 7 Apr 2008 00:12:02 -0400, Jim Logajan wrote:
> > On Mon, 7 Apr 2008 00:09:57 -0400, wrote:
>
> >> On Sun, 06 Apr 2008 20:16:17 -0500, Jim Logajan wrote:
>
> >>> Forger went:
> >>>> YAWN.
>
> >>> Okay, so far you appear to have used the following free servers (probably
> >>> others I haven't noticed):
>
> >>>http://news.motzarella.org/
> >>>http://www.albasani.net/index.html.en
> >>>http://www.aioe.org/
>
> >>> Why not stick with one until you get bounced from it so you can move on to
> >>> the next?
>
> >> I knew it was MX, good catch, Jim, thanks
>
> > Fake post, Dan. Not me.
>
> I knew it all along.
>
> Dan Mc

BWAAAHHAHAHHAHAHAHAHAHAHAHAHAAAA!!!!!!!!!!!!!!!!!! !!

CAUGHT, You disgusting, vile, mendacious freak.

Bertie, I'll never doubt your judgement on these kooks again..

Jim -- well done and thanks!

Dan McCormack

[Larry Dighera]

On Sun, 06 Apr 2008 18:47:26 -0500, Jim Logajan >
wrote:

>I see someone has targeted several people who post to r.a.p and r.a.h and
>begun forging their names in the "From" headers and posted troll-like posts
>in an attempt to "Joe Job" the targets.

Forged messages are a violation of many anonymous news gateways.

http://www.albasani.net/info/terms_of_use.html.en
Addresses specified in From:, Reply-To: and Sender: must be valid
and at the user's disposal. The top level domain (TLD) invalid may
be used for the From: address, e.g. . See
also RFC2606: http://www.faqs.org/rfcs/rfc2606.html

[[email protected]]

On Apr 6, 7:55 pm, BobR > wrote:

> Yep, just found a couple of posts that I made when I haven't even been
> home to get on the computer. Now that is sick.

It's been happening to me ever since WJRFlyBoy "left" the group.

How circumstantial.

I've also received some threatening emails on my blog form
"anonymous," spouting higher-octane venom of the same putrescence on
display here.

The list of servers Jim provided matches what I've seen in the blog
comments.

MX is FakeFlyBoy.

We'll see if he responds to this....



Dan McCormack

[[email protected]]

On Apr 7, 6:56 am, " > wrote:
> On Apr 6, 7:55 pm, BobR > wrote:
>
> > Yep, just found a couple of posts that I made when I haven't even been
> > home to get on the computer. Now that is sick.
>
> It's been happening to me ever since WJRFlyBoy "left" the group.
>
> How circumstantial.
>
> I've also received some threatening emails on my blog form
> "anonymous," spouting higher-octane venom of the same putrescence on
> display here.
>
> The list of servers Jim provided matches what I've seen in the blog
> comments.
>
> MX is FakeFlyBoy.
>
> We'll see if he responds to this....
>
> Dan McCormack

[[email protected]]

On Apr 6, 9:16 pm, Jim Logajan > wrote:

> Okay, so far you appear to have used the following free servers (probably
> others I haven't noticed):
>
> http://news.motzarella.org/http://www.albasani.net/index.html.enhttp://www.aioe.org/
>
> Why not stick with one until you get bounced from it so you can move on to
> the next?


More evidence:
--------------------------------------------------------------------------
WJRFlyboy > wrote in news:MPG.
:
--------------------------------------------------------------------------

And, most damning:
--------------------------------------------------------------------------
Newsgroups: rec.aviation.student, rec.aviation.piloting
From: WJRFlyBoy >
Date: Tue, 1 Apr 2008 14:23:19 -0400
Local: Tues, Apr 1 2008 2:23 pm
Subject: Re: Rod Machado's New PPL Manual

{snipped usual crap}

Here's free post and read text servers.
www.motzarella.org
nntp.aioe.org
news.albasani.net

See, you're all set, My Little Trick Pony. Bet you don't do it, bet
you don't. Bet you lied, again, Dan.
--------------------------------------------------------------------------

Pretty clear who's bile we're seeing.

[Jim Logajan]

Note Path header folks: all my posts come through Supernews.

The forger, posting as me wrote this oddity:
> I can't believe this. You screwed up, didn't you? In your haste to
> post, you forgot to change IDs.
>
> We thought you were sick but this? Playing McCormack AND MX all this
> time?
>
> Sheesh, good luck and adios into my permanent killfile, pervert.

I've sent a complaint to albasani.net. Hopefully they'll bounce you soon
from that particular server. And hopefully those who have been targets of
your forgeries have filed complaints with the other NSPs you've used.

Other than pointing out your forgeries, do you have any other beefs with
me?

[Larry Dighera]

On Mon, 07 Apr 2008 12:34:33 -0500, Jim Logajan >
wrote:

[Off topic stuff snipped]

I know you mean well, but it is you (and now me), and those of us who
respond to these trolls who fuel their ongoing abuse. It is the
indignation and perplexity of respectable folks that they find
rewarding. Anyone who is unable to realize the trolls' true
mobilization is part of the problem. Aside from reporting them to the
appropriate administrators, the sole weapon available to us is to
IGNORE THEM.

My Psych 101 professor taught me, that the best way to extinguish a
behavior is to stop rewarding it.

[[email protected]]

On Apr 7, 2:01 pm, Larry Dighera > wrote:


> I know you mean well, but it is you (and now me), and those of us who
> respond to these trolls who fuel their ongoing abuse. It is the
> indignation and perplexity of respectable folks that they find
> rewarding. Anyone who is unable to realize the trolls' true
> mobilization is part of the problem. Aside from reporting them to the
> appropriate administrators, the sole weapon available to us is to
> IGNORE THEM.

Larry, I agree.

Let's see if it works (This one is rather pernicious, like fleas).

[Mxsmanic]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

writes:

> MX is FakeFlyBoy.

There is no connection between myself and FakeFlyBoy,
or whomever you are talking about. I always post under
the same name.

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2

iQA/AwUBR/qGPRv8knkS0DI6EQLqQQCfYI/+jhW28/0AaBVgq58mnuYYo2AAnRMP
r/ChOzrJkKnGHZcngwRffPMG
=2EPt
-----END PGP SIGNATURE-----

[Darkwing]

> wrote in message
...
> On Apr 7, 12:12 am, Mxsmanic > wrote:
>> On Mon, 7 Apr 2008 00:12:02 -0400, Jim Logajan wrote:
>> > On Mon, 7 Apr 2008 00:09:57 -0400, wrote:
>>
>> >> On Sun, 06 Apr 2008 20:16:17 -0500, Jim Logajan wrote:
>>
>> >>> Forger went:
>> >>>> YAWN.
>>
>> >>> Okay, so far you appear to have used the following free servers
>> >>> (probably
>> >>> others I haven't noticed):
>>
>> >>>http://news.motzarella.org/
>> >>>http://www.albasani.net/index.html.en
>> >>>http://www.aioe.org/
>>
>> >>> Why not stick with one until you get bounced from it so you can move
>> >>> on to
>> >>> the next?
>>
>> >> I knew it was MX, good catch, Jim, thanks
>>
>> > Fake post, Dan. Not me.
>>
>> I knew it all along.
>>
>> Dan Mc
>
> BWAAAHHAHAHHAHAHAHAHAHAHAHAHAAAA!!!!!!!!!!!!!!!!!! !!
>
> CAUGHT, You disgusting, vile, mendacious freak.
>
> Bertie, I'll never doubt your judgement on these kooks again..
>
> Jim -- well done and thanks!
>
> Dan McCormack
>

Trolls have way to much time on their hands apparently.

[Benjamin Dover]

Mxsmanic > wrote in
:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> writes:
>
>> MX is FakeFlyBoy.
>
> There is no connection between myself and FakeFlyBoy,
> or whomever you are talking about. I always post under
> the same name.
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 8.0.2
>
> iQA/AwUBR/qGPRv8knkS0DI6EQLqQQCfYI/+jhW28/0AaBVgq58mnuYYo2AAnRMP
> r/ChOzrJkKnGHZcngwRffPMG
> =2EPt
> -----END PGP SIGNATURE-----
>
>

Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!
Liar. Liar. Pants on fire!

[C J Campbell[_1_]]

On 2008-04-06 16:47:26 -0700, Jim Logajan > said:

> I see someone has targeted several people who post to r.a.p and r.a.h and
> begun forging their names in the "From" headers and posted troll-like posts
> in an attempt to "Joe Job" the targets. Or it may simply be an attempt to
> disrupt the newsgroups (more than usual, that is!). At the moment all the
> forged posts _seem_ to have "albasani.net" in the "Path" header and can be
> identified that way, though of course the perp may switch to an alternate
> provider.
>
> If you see an unexpectedly anal post from someone, check the headers of the
> post in question and try to compare it to much older (presumably less anal)
> posts from that same person.

Haven't seen them. Are they coming from Google Groups? I have filtered
those guys out because of all the spam.
--
Waddling Eagle
World Famous Flight Instructor