latest false flag attack?

Razer g2s at riseup.net
Mon Sep 10 14:49:08 PDT 2018


Screenshots of Youtube's message and the plaintext view in tbird.

In order:

https://78.media.tumblr.com/7daac9f305ff3f24dc6d82d8241c3e01/tumblr_pev0ea92gW1s925jyo2_1280.png

https://78.media.tumblr.com/35e57ce6c7ccdcc5a794368307b12754/tumblr_pev0ea92gW1s925jyo1_1280.png


https://www.youtube.com/watch?v=3DSPpXY1aWKgI redirects to
https://www.youtube.com/watch?v=3DSPpXY1aWK every time.

Rr

On 09/10/2018 02:05 PM, John Newman wrote:

Return-Path: <jnn at synfin.org>
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
spoonbill.riseup.net
X-Spam-Level:
X-Spam-Pyzor: Reported 0 times.
X-Spam-Status: No, score=0.7 required=5.0 tests=AM_TRUNCATED,BAYES_50,
   
CK_419SIZE,CK_KARD_SIZE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FORWARD_RELAY,
    SPF_PASS shortcircuit=no autolearn=disabled version=3.4.1
Delivered-To: g2s at riseup.net
Received: from mx1.riseup.net (mx1-pn.riseup.net [10.0.1.33])
    (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
    (Client CN "*.riseup.net", Issuer "COMODO RSA Domain Validation
Secure Server CA" (verified OK))
    by spoonbill.riseup.net (Postfix) with ESMTPS id F2586EF
    for <g2s at riseup.net>; Mon, 10 Sep 2018 14:05:17 -0700 (PDT)
Received: from wintermute.synfin.org (synfin.org [198.154.106.50])
    by mx1.riseup.net (Postfix) with ESMTP id A1C8C1A14E9
    for <g2s at riseup.net>; Mon, 10 Sep 2018 14:05:17 -0700 (PDT)
Authentication-Results: mx1.riseup.net; dkim=pass
    reason="1024-bit key; unprotected key/testing"
    header.d=synfin.org header.i=@synfin.org header.b=jq44UGUQ;
    dkim-adsp=pass; dkim-atps=neutral
Received: from wintermute.synfin.org (localhost [127.0.0.1])
    by wintermute.synfin.org (Postfix) with ESMTP id EBB703A2EF2;
    Mon, 10 Sep 2018 17:05:10 -0400 (EDT)
X-Virus-Scanned: amavisd-new at synfin.org
Received: from wintermute.synfin.org ([127.0.0.1])
    by wintermute.synfin.org (wintermute.synfin.org [127.0.0.1])
(amavisd-new, port 10024)
    with LMTP id ftxbQ2azdMA6; Mon, 10 Sep 2018 17:05:10 -0400 (EDT)
Received: by wintermute.synfin.org (Postfix, from userid 1001)
    id 49B9F3A2EEE; Mon, 10 Sep 2018 17:05:09 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=synfin.org; s=SYNFIN;
    t=1536613509; bh=z3ql+zv5aXsTdNvL6VQcq9aYHyrErCo/rp+HRAMOKiI=;
    h=Date:From:To:Cc:Subject:References:In-Reply-To;
    b=jq44UGUQ8751Uvpw4wxgZCB+mj9dEI7SYsIA76Jj+2eUvetOWcLC073FHx0tA9LND
     ruKjyfP/i+0mrmBoUmS7slCFAGEuCPI4eWSPUl28SNywalgEC4G7edxqaPr+HTQ4kh
     Ir0gu3BesKs5Qau4lmRmrJ+lXdJXmnRswHqazDHE=
Date: Mon, 10 Sep 2018 17:05:09 -0400
From: John Newman <jnn at synfin.org>
To: Razer <g2s at riseup.net>
Cc: cypherpunks at lists.cpunks.org
Subject: Re: latest false flag attack?
Message-ID: <20180910210509.caa4qio2imhfvkqb at synfin.org>
References: <5b9301d3.1c69fb81.ec5a2.b89a at mx.google.com>
 <dc83172a-89d2-abd6-ed1c-a55215d8bd30 at pilobilus.net>
 <1e5a8098-d8fb-329c-dab1-1c68d5909432 at echeque.com>
 <5b9590db.1c69fb81.a484b.1898 at mx.google.com>
 <dafde8a6-bcdb-ffcf-8187-31e998864757 at riseup.net>
 <b1706d7f-5855-af31-f0a2-0a718f061742 at pilobilus.net>
 <2494c4ff-20b6-7f37-85f4-093d28705d30 at echeque.com>
 <e836f7e0-2cc9-8569-e8e8-32d8707357b8 at pilobilus.net>
 <20180910184229.jineyhssxbxfdql2 at synfin.org>
 <c279992e-57ec-1c54-bfbd-0daa2b0e09e6 at riseup.net>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
    protocol="application/pgp-signature"; boundary="trm7cgddxkjxy4bi"
Content-Disposition: inline
In-Reply-To: <c279992e-57ec-1c54-bfbd-0daa2b0e09e6 at riseup.net>
User-Agent: NeoMutt/20180716


--trm7cgddxkjxy4bi
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Sep 10, 2018 at 01:11:00PM -0700, Razer wrote:
>=20
>=20
> On 09/10/2018 11:42 AM, John Newman wrote:
>=20
> (In some fucking weird font that doesn't display at all in plaintext or
> html in tbird, so, view source)

It's just plain text, generated by mutt. There is no fucking weird
font. It has a content-type line of

"Content-Type: text/plain; charset=3Diso-8859-1
 Content-Disposition: inline
 Content-Transfer-Encoding: quoted-printable"

It looks fine in gmail, in a couple clients on my phone, in mutt, in the
archives -

https://lists.cpunks.org/pipermail/cypherpunks/2018-September/043119.html

And the link works fine. It was=20

https://www.youtube.com/watch?v=3DSPpXY1aWKgI

It opens, I promise. Dunno why thunderbird is having issues. Period!  :)

--
John

--trm7cgddxkjxy4bi
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEF/1hWtINr+iz5MnS4yQgvtR6eMcFAluW3IEACgkQ4yQgvtR6
eMdq2ggAu4yJ8Tnd68WwxocukVVBb1k1qqVowxWljOS7B4kVNO6E+MUVTDFzyOik
+sYP7zilOKuPGvEwLdmTkjAAqrpSXtl5OObpnnijCMsvh3kC0ayNperA9tNIOT/H
mjgB8U/DsM5MaK3/TbS/XdBsWWFRVBYil7SLzVoCSI0vlgGDJSI0hXWv02vyJKlq
P56ofuE2toiJmc3d+ypOlPWYH5JWc0dcz9DbyNiF0o5zYzSuzH4D/DWCA3DJSY5Z
XlBIx1IVYmR8S61b17P+M10EgYmR/nxNSBb+bOBhImM1NqttrwDE9CiQs5YKxBjk
eaMfkHFmYPt0Yv8rJSFJtKhPG5SwTw==
=zDAA
-----END PGP SIGNATURE-----

--trm7cgddxkjxy4bi--




More information about the cypherpunks mailing list