9:29 p.m.
New subject: Apoligies Re: Dearest
On Tue, 2011-10-04 at 10:11 -0700, Joe Zeff wrote:
On 10/04/2011 06:56 AM, Michael Schwendt wrote:
> in the headers. Another indiciation that the Google Mail web interface
> has not been abused by someone from Turkey.
Thank you, McGeek. Give yourself a probie snack.
----
what is your point?
Craig
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
9:55 p.m.
New subject: Apoligies Re: Dearest
On 10/04/2011 07:29 PM, Craig White wrote:
On Tue, 2011-10-04 at 10:11 -0700, Joe Zeff wrote:
> On 10/04/2011 06:56 AM, Michael Schwendt wrote:
>> in the headers. Another indiciation that the Google Mail web interface
>> has not been abused by someone from Turkey.
>
> Thank you, McGeek. Give yourself a probie snack.
----
what is your point?
You didn't like the Law And Order reference so I decided to try NCIS
instead.
12:11 p.m.
New subject: @Michael Re: Apoligies Re: Dearest
On Tue, 04 Oct 2011 17:07:29 +0100, FM (Frank) wrote:
No idea, but I have received spam from my own email address before.
That's something completely else, and a known form of abuse.
And it isn't accurate to say "from my own email address". For spam, the
email address listed in spam messages typically has nothing to do with the
origin of the mail. With the old mail protocols and many mail servers it
is too easy to insert arbitrary sender addresses.
If you want to examine _from where_ a mail was sent, you cannot avoid
displaying and analyzing the mail headers. Bottom up and eliminating
any forged headers somebody may have inserted there.
>> Is the fact that my isp email is routed through gmail a
factor
>> (plain password) pulled every 30\60 min?
>
> Can you explain the setup in detail?
>
Originally in Gmail, it allows you can get other pop email
by entering email address and password.
It won't pull an exe attachment.
You mean the "Mail Fetcher"? If so, you would enter your ISP mail account
details there, not your Google Mail passphrase. One would need to examine
your ISP's POP server for details, such as SSL/TLS usage.
My isp does not use https, even for their webmail.
But your GMail passphrase is not the same as the one you use for you ISP,
is it? ;)
Only my eldest son "the gamer"
had tried to do anything foolish on this PC.
I don't use a screensaver, as I can never recall the password.
I keep it on a usb stick.
Ah, fresh theories! Lovely. :-)
http://images.cheezburger.com/completestore/2010/1/27/129090941151506207.jpg
--
Fedora release 16 (Verne) - Linux 3.1.0-0.rc8.git0.0.fc16.x86_64
loadavg: 0.04 0.13 0.13
11:07 a.m.
New subject: @Michael Re: Apoligies Re: Dearest
On 04/10/11 16:49, Michael Schwendt wrote:
On Tue, 04 Oct 2011 15:54:30 +0100, FM (Frank) wrote:
>> in the headers. Another indiciation that the Google Mail web interface
>> has not been abused by someone from Turkey.
>>
>
> That is true, I did have to "logout all other sessins",
> and do you recoginse all recent activity" or similar words.
> It is also true that 6.02 is the current version of TB I use.
You would need to develop a theory why somebody else would forward a
message from one of your folders at GMail -- the spam message has been
received by you at GMail via your Fedora Project address alias on Oct 2nd
according to its headers --using exactly the same Thunderbird version and
Linux OS version identifier, the same time-zone, the same machine
hostname, _and_ exactly your IP address at UPC Ireland.
No idea, but I have received spam from my own email address before.
> If you wan't to help.
> Can sonething be sent without me knowing about it?
Sure. With username and password, somebody can abuse your account via
IMAP, SMTP, POP, or even the web interface. Google Mail displays a list of
previous logins in its web interface. And by default, it stores copies of
messages sent via SMTP in the Sent folder.
> Is the fact that my isp email is routed through gmail a factor
> (plain password) pulled every 30\60 min?
Can you explain the setup in detail?
Originally in Gmail, it allows you can get other pop email
by entering email address and password.
It won't pull an exe attachment.
My isp does not use https, even for their webmail.
> rkhunter shows nothing.
There is a huge difference between capturing only a Google Mail account
passphrase and an entire Linux machine connected to the Internet.
You would need an even better theory about why somebody ("from Turkey")
Still no idea.
with access to your computer would be so stupid and on your computer
use
Thunderbird to forward a single spam message to a list you're subscribed
to. Much too big of a risk to be discovered. Rootkits exist in order to
retain access to a remote machine. They try to hide themselves.
Only my eldest son "the gamer"
had tried to do anything foolish on this PC.
I don't use a screensaver, as I can never recall the password.
I keep it on a usb stick.
--
Regards,
Frank Murphy
UTF_8 Encoded
Friend of fedoraproject.org
9:54 a.m.
New subject: @Michael Re: Apoligies Re: Dearest
On 04/10/11 14:56, Michael Schwendt wrote:
<snipped>
in the headers. Another indiciation that the Google Mail web interface
has not been abused by someone from Turkey.
That is true, I did have to "logout all other sessins",
and do you recoginse all recent activity" or similar words.
It is also true that 6.02 is the current version of TB I use.
If you wan't to help.
Can sonething be sent without me knowing about it?
Is the fact that my isp email is routed through gmail a factor
(plain password) pulled every 30\60 min?
I recently switch from imap to pop (circa month)
free limit being reached.
would that have an affect?
rkhunter shows nothing.
Cisco router I cannot tell, as no user config possible.
My isp uses reserved blocks 192..
--
Regards,
Frank Murphy
UTF_8 Encoded
Friend of fedoraproject.org
8:56 a.m.
New subject: Apoligies Re: Dearest
On Tue, 04 Oct 2011 17:09:18 +0800, EG (Ed) wrote:
On 10/04/2011 04:41 PM, Michael Schwendt wrote:
> Just for the record.......
This isn't Law&Order and you're not Jack McCoy. :-)
I guessed what the first could be and didn't have a clue who Jack McCoy
might be. Had to ask Google.
Somehow I can't see anything good coming out of impugning the
character
of a fellow list member.
Next time, Frank will know better. This time his apologies should have
been sent to the list as "Sorry, I made a mistake and forwarded a message
accidentally" instead of claiming that someone from Turkey has sent the
message after hacking his account. Btw, that message also contained
| User-Agent: Mozilla/5.0 (X11; Linux x86_64;
| rv:6.0.2) Gecko/20110906 Thunderbird/6.0.2
in the headers. Another indiciation that the Google Mail web interface
has not been abused by someone from Turkey.
--
Fedora release 16 (Verne) - Linux 3.1.0-0.rc8.git0.0.fc16.x86_64
loadavg: 0.04 0.07 0.06
4:53 a.m.
New subject: Apoligies Re: Dearest
On 04/10/11 09:41, Michael Schwendt wrote:
On Mon, 03 Oct 2011 07:36:50 +0100, FM (Frank) wrote:
> On 03/10/11 02:24, Christopher Svanefalk wrote:
>> Don't think I want to open that, dunno why.
>>
>
> My gmail addy was got at:
> There was a login from Turkey,
> Back in control of my gmail.
Just for the record, I don't believe you. I cannot believe you
based on the mail's envelope contents, which contained this:
Received: from frank01.frankly3d.local ([46.7.190.94])
by mx.google.com with ESMTPS id gd6sm17286737wbb.1.2011.10.02.00.56.34
(version=SSLv3 cipher=OTHER); Sun, 02 Oct 2011 00:56:34 -0700 (PDT)
Compare that with your recent messages:
Received: from frank01.frankly3d.local ([46.7.190.94])
by mx.google.com with ESMTPS id o7sm21710881wbh.8.2011.10.02.23.36.50
(version=SSLv3 cipher=OTHER); Sun, 02 Oct 2011 23:36:51 -0700 (PDT)
According to this, you've forwarded the spam mail to this list yourself
from your local machine. Someone would not be able to do with by
capturing your GMail account.
That's all I found wrong.
And it hasn't happedned since p\w change.
So if somneone with more more experience, wants to give my box a tuneup,
on their dime. Your more than welcome.
--
Regards,
Frank Murphy
UTF_8 Encoded
Friend of fedoraproject.org
4:09 a.m.
New subject: Apoligies Re: Dearest
On 10/04/2011 04:41 PM, Michael Schwendt wrote:
Just for the record.......
This isn't Law&Order and you're not Jack McCoy. :-)
Somehow I can't see anything good coming out of impugning the character
of a fellow list member.
--
Even if you do learn to speak correct English, whom are you going to
speak it to? -- Clarence Darrow
3:41 a.m.
New subject: Apoligies Re: Dearest
On Mon, 03 Oct 2011 07:36:50 +0100, FM (Frank) wrote:
On 03/10/11 02:24, Christopher Svanefalk wrote:
> Don't think I want to open that, dunno why.
>
My gmail addy was got at:
There was a login from Turkey,
Back in control of my gmail.
Just for the record, I don't believe you. I cannot believe you
based on the mail's envelope contents, which contained this:
Received: from frank01.frankly3d.local ([46.7.190.94])
by mx.google.com with ESMTPS id gd6sm17286737wbb.1.2011.10.02.00.56.34
(version=SSLv3 cipher=OTHER); Sun, 02 Oct 2011 00:56:34 -0700 (PDT)
Compare that with your recent messages:
Received: from frank01.frankly3d.local ([46.7.190.94])
by mx.google.com with ESMTPS id o7sm21710881wbh.8.2011.10.02.23.36.50
(version=SSLv3 cipher=OTHER); Sun, 02 Oct 2011 23:36:51 -0700 (PDT)
According to this, you've forwarded the spam mail to this list yourself
from your local machine. Someone would not be able to do with by
capturing your GMail account.
--
Fedora release 16 (Verne) - Linux 3.1.0-0.rc8.git0.0.fc16.x86_64
loadavg: 0.08 0.05 0.05
4:38 a.m.
New subject: Apoligies Re: Dearest
On Mon, Oct 3, 2011 at 2:28 AM, Hiisi <hiisi(a)fedoraproject.org> wrote:
Is your password still a 'password'?
The other day I installed my Mom's Mac OS Xsecurity updates. I'm
afraid she's not technophilic enough to use GNU/Linux. The very last
thing I did was to have her set at her iMac herself, open the System
Preferences, go to Users and Groups, and give herself a password.
I was able to install all of her operating system patches without
entering a password at all! I am quite certain that her identical
twin sister's MacBook likewise has no password.
I myself installed a whole bunch of application upgrades and security
updates on Windows XP yesterday. While I have a password for my user
account, I was able to do all those installations without any
authentication.
A while back I tried to "secure" my Windows 2000 box, for example by
disabling write permision in the Program Files folder. Nothing worked
after that, because so many programs save user data right next to
their executables.
I'd like to secure my WinXP installation but it's going to take some
study to figure out how to.
With Ubuntu, I have to use "sudo" to install all my patches, and root
logins are disabled, although I can do "sudo sh" to get a root shell.
Don Quixote
--
Don Quixote de la Mancha
Dulcinea Technologies Corporation
Software of Elegance and Beauty
http://www.dulcineatech.com
quixote(a)dulcineatech.com
4:28 a.m.
New subject: Apoligies Re: Dearest
On 3 October 2011 10:36, Frank Murphy <frankly3d(a)gmail.com> wrote:
My gmail addy was got at:
There was a login from Turkey,
Back in control of my gmail.
As I am using pop, so no idea until I got a heads up.
Is your password still a 'password'?
;-)
Frank
--
Hiisi.
Registered Linux User #487982. Be counted at: http://counter.li.org/
--
Spandex is a privilege, not a right.
8:24 p.m.
New subject: Dearest
Don't think I want to open that, dunno why.
On Sun, Oct 2, 2011 at 9:56 AM, Frank Murphy <frankly3d(a)gmail.com> wrote:
--
users mailing list
users(a)lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
10:49 a.m.
New subject: @Michael Re: Apoligies Re: Dearest
On Tue, 04 Oct 2011 15:54:30 +0100, FM (Frank) wrote:
> in the headers. Another indiciation that the Google Mail web
interface
> has not been abused by someone from Turkey.
>
That is true, I did have to "logout all other sessins",
and do you recoginse all recent activity" or similar words.
It is also true that 6.02 is the current version of TB I use.
You would need to develop a theory why somebody else would forward a
message from one of your folders at GMail -- the spam message has been
received by you at GMail via your Fedora Project address alias on Oct 2nd
according to its headers -- using exactly the same Thunderbird version and
Linux OS version identifier, the same time-zone, the same machine
hostname, _and_ exactly your IP address at UPC Ireland.
If you wan't to help.
Can sonething be sent without me knowing about it?
Sure. With username and password, somebody can abuse your account via
IMAP, SMTP, POP, or even the web interface. Google Mail displays a list of
previous logins in its web interface. And by default, it stores copies of
messages sent via SMTP in the Sent folder.
Is the fact that my isp email is routed through gmail a factor
(plain password) pulled every 30\60 min?
Can you explain the setup in detail?
rkhunter shows nothing.
There is a huge difference between capturing only a Google Mail account
passphrase and an entire Linux machine connected to the Internet.
You would need an even better theory about why somebody ("from Turkey")
with access to your computer would be so stupid and on your computer use
Thunderbird to forward a single spam message to a list you're subscribed
to. Much too big of a risk to be discovered. Rootkits exist in order to
retain access to a remote machine. They try to hide themselves.
--
Fedora release 16 (Verne) - Linux 3.1.0-0.rc8.git0.0.fc16.x86_64
loadavg: 0.01 0.05 0.05
4596
days inactive
4599
days old
16 comments
8 participants
participants (8)
-
Christopher Svanefalk -
Craig White -
Don Quixote de la Manvha -
Ed Greshko -
Frank Murphy -
Hiisi -
Joe Zeff -
Michael Schwendt