Re: [PLUG] [OT?] Internet privacy? ?? ???

[Ishak Micheil]

I'm not sure if I missed it, however  am still struggling to understand his
email "publication" part.

We're somewhat veering towards privacy vs security and this will be indeed
an endless debate.

By viewing YouTube contents, you already have agreed to some level of use
of content terms.

You probably have seen this, but here it is
https://www.youtube.com/t/privacy_guidelines

Keep us posted,


On Feb 2, 2018 10:38 PM, "Mke C"  wrote:

> On 02/02/2018 06:33 PM, plug-requ...@pdxlinux.org wrote:
>
>> If anyone can suggest how I could better handle this -- public or
>> private responses requested.
>>
>> I'd tell you brother to start here => https://mic.com/articles/62163
> /6-things-you-need-to-know-so-your-private-youtube-videos-
> don-t-end-up-on-google#.CLRknPVQj
>
> "Click on your avatar and select*YouTube Settings*On the next screen,
> click on*Privacy*at the top left
>
> On this screen you’re able to set up and check your account privacy
> settings. Under “Likes and Subscriptions,” you can check the box to make
> sure any videos you like and any channels you subscribe to stay private and
> confidential. Under “Search and Contacts,” you can control who can contact
> you, share your videos, and find you by email address."
>
> I saw a link to another article about how people who have YouTube channels
> can capture email addresses of subscribers. Maybe that's what's happening
> here.
>
> Then if that's not what's going on, I'd have him contact YouTube directly
> about his specific privacy concerns. https://www.youtube.com/static
> ?template=privacy_guidelines
>
> But generally these days, you'd have to invest some serious time and
> energy to have any degree of privacy on the internet. I aim for anonymity
> and obfuscation with the smallest time & energy investment.
>
> Also, you can use YouTube anonymously. You don't have to have an account
> to watch videos. If he wants all the "features" of YouTube he can create an
> alternate email address for his account. There are plenty of fee throw away
> / single use email addresses to be had on the Internet.
>
> ___
> PLUG mailing list
> PLUG@pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
>
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

[PLUG] Additional information -- [OT?] Internet privacy? ?? ???

[Richard Owlett]

On 02/02/2018 05:48 PM, Richard Owlett wrote:

Called my brother to wish him a "Happy Birthday".
As I'm the geek sibling, he asked a geek type question.
He has been viewing youtube(sp?) videos.
He suspects they have been publishing his email address.
He objects.



I spoke to him this morning.
He is viewing the youtube videos anonymously - so problems are not login 
information.


He clarified a symptom I hadn't caught before.
He is getting his mail without signing in to his gmail account.
He is now using Windows 10. He did not have this problem when he was 
using Windows 7.


I'm beginning to suspect a cookie problem.
I've also sent him an email asking to reply so I can see the header 
information so I tell exactly what email client he is using.


Thanks for the help.


___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Ticket Received response from Web Africa after posting to PLUG

[Rich Shepard]

On Sat, 3 Feb 2018, Jim Garrison wrote:


Why do I get a message from supp...@webafrica.freshdesk.com after sending
a message to PLUG?


Same here, posted in response to Rich's thread on ledger123.org and I
immediately received a "Ticket Created" message from webafrica.co.za with
replyto supp...@webafrica.freshdesk.com


  I added that domain to the postfix badaddr file and they are rejected,
sight unseen. Wasted electrons.

Rich

___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] [OT?] Internet privacy? ?? ???

[Mke C>]

On 02/03/2018 11:00 AM, plug-requ...@pdxlinux.org wrote:

He clarified a symptom I hadn't caught before.
He is getting his mail without signing in to his gmail account.
He is now using Windows 10. He did not have this problem when he was
using Windows 7.
I'm not sure if you've ever done paid technical support before, but 
ideally you'd want to try to understand the problem to the best of your 
ability with ALL of the available information before trying to solve it. 
We don't do Windows. Thanks for the wild goose chase...

___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Domain dead; Mailman sends monthly reminders

[Jim Garrison]

On 2/1/2018 6:47 AM, Rich Shepard wrote:
>   A curios situation. The SQL Ledger fork, ledger123, died some time in the
[snip]
> 
>   'whois' shows:
> 
> Updated Date: 2018-01-22T01:04:39Z
> Creation Date: 2011-01-19T01:36:38Z
> Registry Expiry Date: 2019-01-19T01:36:38Z

There is absolutely zero correlation required between any of the
following:

1) whether or not a domain exists (as shown by whois)

2) whether it has a DNS entry

3) whether there is a web server running

4) whether there is a mailman server running

5) whether there is an SMTP server running to receive email

6) whether it is possible to send email that looks like it comes
   from that domain

For these six conditions:

1) The domain exists (is registered) and expires 2019-01-18

2) There is a DNS entry for domain, pointing to 209.99.64.25
   which resolves back to 209-99-64-25.fwd.datafoundry.com,
   which is owned by Confluence Networks

3) There appears to be a web server running, but it returns
   a blank page containing some Javascript that is supposed to
   load a "Domain Parked" notice but doesn't, at least on Firefox

4) Obviously, there is a mailman server still sending out the
   subscription notices. This is wholly independent of anything else,
   and it's probably running on the host that USED TO serve the website,
   or it could even be a completely different host somewhere else.

5) There is no MX entry in DNS for ledger123.org, so the fallback is
   to use the main address 209.99.64.25.  Attempting to telnet to
   port 25 at this IP address times out, so it appears there is no
   SMTP server available to receive email.  Sending email to
   @ledger123.org will sit in your outgoing queue until it
   times out, and then you'll receive a bounce.

6) Anybody can send email that LOOKS LIKE it came from ledger123.org


The crucial bit of information we don't have is in the headers of the
subscription emails you're receiving.  It would be the IP address of the
actual originating host.  Once you have that you could do a whois lookup
of the IP and figure out whom to contact about it.

___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] [OT?] Internet privacy? ?? ???

[Rigel Hope]

without knowing more about what makes him think his email is being given
out, it's hard to say what caused it, because theres lots of levels this,
or phenomena similar enough to be confused with actual distribution, can
happen on.

it could be someone licensing a third party mailing list, like a lookup
table, and using that to key targeted ad buys. it could be related to any
number of third party cookies set and used by a bewildering array of
websites. it could be some field set in his browser local storage or other
internal configuration information that is being exploited by someone.
heck, someone could have set a root CA key up in his browser and has been
MITM-ing him the whole time (fairly unlikely).

to suggest a response would require knowing the underlying symptoms in more
detail, really.

On Sat, Feb 3, 2018 at 11:57 AM, Mke C>  wrote:

> On 02/03/2018 11:00 AM, plug-requ...@pdxlinux.org wrote:
>
>> He clarified a symptom I hadn't caught before.
>> He is getting his mail without signing in to his gmail account.
>> He is now using Windows 10. He did not have this problem when he was
>> using Windows 7.
>>
> I'm not sure if you've ever done paid technical support before, but
> ideally you'd want to try to understand the problem to the best of your
> ability with ALL of the available information before trying to solve it. We
> don't do Windows. Thanks for the wild goose chase...
>
> ___
> PLUG mailing list
> PLUG@pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
>
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

[PLUG] Ticket Received response from Web Africa after posting to PLUG

[Jim Garrison]

On 2/1/2018 8:05 PM, Michael Rasmussen wrote:
> I believe it was Rich Shepard who asked about this. Now I am too. 
> 
> Why do I get a message from supp...@webafrica.freshdesk.com after
> sending a message to PLUG? 

Same here, posted in response to Rich's thread on ledger123.org
and I immediately received a "Ticket Created" message from
webafrica.co.za with replyto supp...@webafrica.freshdesk.com

Here are the headers (some emails obfuscated):


> From - Sat Feb 03 10:49:21 2018
> X-Mozilla-Status: 0001
> X-Mozilla-Status2: 
> X-Mozilla-Keys:   
>   
> Return-Path: 
> 
> X-Original-To: j...@qq.com
> Delivered-To: j...@smtp.qq.com
> X-Greylist: whitelisted by SQLgrey-1.8.0
> DKIM-Filter: OpenDKIM Filter v2.11.0 smtp.qq.com 93C134034C
> Authentication-Results: smtp.qq.com;
> dkim=pass (1024-bit key) header.d=freshdesk.com header.i=@freshdesk.com 
> header.b="MHHRP9WX"
> Received: from acmsmtp02.acm.org (ACMSMTP02.acm.org [64.238.147.79])
> (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits))
> (No client certificate requested)
> by smtp.qq.com (Postfix) with ESMTPS id 93C134034C
> for ; Sat,  3 Feb 2018 13:49:20 -0500 (EST)
> Received: from in-004.las.mailroute.net
> by acmsmtp02.acm.org (ACM Email Forwarding Service) with ESMTP id 
> 2201802031349177266
> for ; Sat, 03 Feb 2018 13:49:17 -0500
> Received: from localhost (localhost.localdomain [127.0.0.1])
> by in-004.las.mailroute.net (Postfix) with ESMTP id 3zYjZ54GMhz5vRc
> for ; Sat,  3 Feb 2018 18:49:17 + (UTC)
> X-Virus-Scanned: by MailRoute
> X-Spam-Flag: NO
> X-Spam-Score: 1.722
> X-Spam-Level: *
> X-Spam-Status: No, score=1.722 tagged_above=- tests=[DKIM_SIGNED=-0.1,
> DKIM_VALID=-0.01, DKIM_VERIFIED=-0.01, HTML_FONT_LOW_CONTRAST=0.001,
> HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.635, MIME_HTML_ONLY=1.105,
> T_KAM_HTML_FONT_INVALID=0.01, T_RP_MATCHES_RCVD=-0.01,
> URI_IMAGES_PARTLY=0.1] autolearn=no autolearn_force=no
> X-Spam-ASN:  
> X-Spam-Language: en
> X-Spam-Relay-Countries: US US
> Authentication-Results: 004.las.mailroute.net. (mroute_mailscanner);
> dkim=pass (1024-bit key) header.d=freshdesk.com
> Received: from in-004.las.mailroute.net ([199.89.4.7])
> by localhost (004.las.mailroute.net. [127.0.0.1]) (mroute_mailscanner, 
> port 10024)
> with LMTP id i0yuZMjrdHLq for ;
> Sat,  3 Feb 2018 18:48:55 + (UTC)
> X-Envelope-From: 
> Received: from o9.email.freshdesk.com (o9.email.freshdesk.com [167.89.69.3])
> (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
> (No client certificate requested)
> by in-004.las.mailroute.net (Postfix) with ESMTPS id 3zYjYg5Pmqz5vRr
> for ; Sat,  3 Feb 2018 18:48:55 + (UTC)
> DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=freshdesk.com; 
> 
> h=content-transfer-encoding:content-type:from:mime-version:reply-to:to:subject:references:in-reply-to;
>  
> s=s1; bh=2oj3c39e21+8KuUD83kkoK7YCgI=; b=MHHRP9WXHI81TqXM6zHloNw
> Y8d6Tvn7a4gN7D/BcN9bPGohzXBT1cpdnuO8a7FOXT64v0Xf6TM1bedbv7Yd4Rge
> sE4ZhIfyBBWBluedBE3PcMRGilTesLSdLsiZwSmAc3O5hMIFzysh6BaGYsuJZhVU
> UdLxAEMTXTcYC8YIB5go=
> Received: by filter1179p1mdw1.sendgrid.net with SMTP id 
> filter1179p1mdw1-22397-5A760416-10
> 2018-02-03 18:48:54.697463863 + UTC
> Received: from NDcxODAxNQ (ec2-34-198-193-174.compute-1.amazonaws.com 
> [34.198.193.174])
> by ismtpd0006p1iad1.sendgrid.net (SG) with HTTP id e95_BW4kQtGQYoi_bBGtWw
> Sat, 03 Feb 2018 18:48:54.810 + (UTC)
> Content-Transfer-Encoding: quoted-printable
> Content-Type: text/html; charset=UTF-8
> Date: Sat, 03 Feb 2018 18:48:54 + (UTC)
> From: "Web Africa" 
> Mime-Version: 1.0
> Reply-to: "Web Africa" 

___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] [OT?] Internet privacy? ?? ???

[Cryptomonkeys.org]

Its not even clear if that is particularly useful. Its not difficult to match 
similar browsing habits across multiple systems that don’t share login 
information. Companies are interested in this so they can ensure they are 
targeting the correct user when an IP address may not be specific enough (many 
people behind the same NAT for example).


> On Feb 2, 2018, at 8:06 PM, Michael Barnes  wrote:
> 
> In short, there is no such thing as privacy on the internet, period. If he
> wants to look at anything anywhere on the internet, any information on his
> computer is subject to retrieval. I would suggest he acquire a separate
> computer (preferably running Linux) and put absolutely no user identifiable
> information on it, i.e. user Fred Flinstone, address Bedrock, etc. Create a
> new email for the purpose, like fredf100...@gmail.com, and use that system
> for all internet activity. Whatever personal info is gleaned from that
> computer is worthless and he will have nothing to worry about. Of course he
> will have to create new YouTube, Facebook, etc. accounts. That's the cost
> of "privacy".
> 
> On Feb 2, 2018 17:37, "Dick Steffens"  wrote:
> 
>> On 02/02/2018 05:11 PM, Richard Owlett wrote:
>> 
>>> On 02/02/2018 06:21 PM, Carl Karsten wrote:
>>> 
 He suspects they have been publishing his email address.
> 
 
 Please elaborate.
 
 
>>> I would if I could.
>>> 
>>> I b geek -- he not
>>> 
>>> He has associated the publication of his email address with videos he has
>>> viewed.
>>> 
>> 
>> My own experience shows that YouTube keeps track of what videos I've
>> watched and, no doubt using Google's technology, gives me more options
>> similar to ones I've watched. Sometimes that's useful. Sometimes it's not.
>> But from the descriptions you've given, it sounds to me like he's just
>> seeing what YouTube thinks he wants to see. How that relates to email, I
>> have no idea.
>> 
>> 
>> --
>> Regards,
>> 
>> Dick Steffens
>> 
>> ___
>> PLUG mailing list
>> PLUG@pdxlinux.org
>> http://lists.pdxlinux.org/mailman/listinfo/plug
>> 
> ___
> PLUG mailing list
> PLUG@pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
> 
> 

--
Louis Kowolowskilou...@cryptomonkeys.org
Cryptomonkeys:   http://www.cryptomonkeys.com/

Making life more interesting for people since 1977

___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug