Someone hacked my gmail

... or in any other way got access to it and sent (non critical) spam from it.

So first and foremost, if you got an unsolicited email from my gmail account this night, I do apologize. It probably only contains a link to a non existent document. If you can see any data / route / ip / trace in the email that could help me identify the source, kindly reply to me via this email.

I was under the impression that a) my google password is quite strong, and b) that I'm very selective with app or site I allow access to my gmail account.

The weird thing is the list of recipients they picked. It's a strange combination from people I've sent email to in the past, and people I follow on g+ (but did not send an email to).
They all exist in my gmail address book, and the only common denominator I found  so far is, that none of them have a phone number in the address book entry... apart from that I have to draw a blank.

I also found the original email (not only the non-delivery replies) in my sent folder, so I looks like the email has really been sent through my gmail account (and not only with my email in from/reply-to).

Of course in the meantime I not only changed my gmail password, I also reviewed the web-apps and services that have access to my gmail, and will go through the apps on my iPad and Android phone.

Again, sorry... If you have any data to help, just pass it on.

Will the money scam emails ever stop??

Now even in German... (although I received it on a .net address).
Will this ever stop ?
Will people ever stop falling for this ?

Anyway, I consider this great fun...

Whenever you receive such a nigerian/african/russian/whatever money scam, please, please, please listen to Ze Franks rendering of those scams at TED.
You cant help but laugh at this, then.


Guten Tag,

Ich habe Ihre Kontaktadresse nach eigenen Nachforschungen erhalten.
Ich mochte Ihnen ein, fur Sie profitables geschaftliches Angebot
unterbreiten. Es handelt sich hierbei um den Transfer von 20.5
Millionen US Dollar . Wie Sie sicher verstehen werden, mochte
ich Sie hier um ausserste Diskretion bitten.

Meine Name ist Mrs.Diana Meier Vandrift. Ich bin die Witwe von Herr.
Peter Vandrift.Ich wurde in Sudafrika geboren, meine Grosseltern sind
jedoch Deutscher Herkunft.

Mein verstorbener Mann hat das Familien Unternehmen seiner Eltern
geerbt, darunter mehrere Hotels in Sudafrika, Warenhauser und einige
Landwirtschaftliche Betriebe. Ich habe diese zusammen mit meinem
Mann,bis zu seinem Tod, am 25. April 2002, gefuhrt und verwaltet.
Die Vandrift Familie (Familie meines Mannes ) war beteiligt an der
Politik in Sud Afrika, zu Zeiten der Apartheid. Mein Schwiegervater
war Mitglied und ranghoher Offizier der Apartheidsregierung unter
Premierminister Hendrik Verwoerd.

mein schwiegervater war nicht verantwortlich fur menschenrechtsver-
letzungen.Jedoch ist es schlimm genug, das er fur das damalige
innenministerium gearbeitet hat.

Er beendete seine Laufbahn als Offizier mit dem Ende der Apartheid
und begann sein Kariere als Geschaftsmann. Er investierte und
erwirtschaftete in kurzester Zeit ein betrachtliches Vermogen.
Nach unserer Hochzeit, ubernahm mein Mann die Geschafte seines
Vaters. Sein grosser Traum war es jedoch, Politiker zu werden. Er
wurde Mitglied der Oppositionspartei, Demokratic Alliance ( DA ) und
unterstutzte diese auch finanziell.

Die regierende Partei ANC ( Nelson Mandela ) war nicht glucklich uber
diese Situation,trat an meinen Mann heran und forderte ihn auf,
jede finanzielle Unterstutzung einzustellen. Er gab jedoch nicht nach.
Im Marz 2002 , erschien ein Artikel in der Guardian Newspaper, in dem
die Familie meines Mannes, der Zusammenarbeit mit der
Apartheidsregierung beschuldigt wurde. Offenbar eine Aktion des ANC,
gegen meinen Mann.

Am 25. April 2002, um 4 Uhr Morgens , versammelte sich eine Gruppe
von Schwarzen vor unserem Haus und versuchte auf das Grundstuck zu
gelangen. Wir riefen die Polizei, die jedoch sehr lange auf sich
warten liess. Als mein Mann am Fenster stand wurde er von funf
Gewehrkugeln todlich getroffen.

Er starb noch in meinen Armen,bevor die Polizei und der Krankenwagen
unser Haus erreicht hatten.

Fast Sieben Jahre nach dem schrecklichen Ereignis, bin ich immer noch
depressiv, mein Herz ist gebrochen und mein Leben schein zerstort.
Ich habe sehr viel Angst. Aus diesem Grund habe ich mich entschlossen,
das Land, das mir so viel Kummer und Leid gebracht hat zu verlassen.
Ich werde gehen und nie wieder zuruckkehren. Ich habe das gesamte Erbe
meines Mannes veraussert und verfuge nun uber eine betrachtliche
Summe von 20.5 Millionen US Dollar. Diese Geld mochte ich nach Europa
senden.

Hierfur bitte ich um Ihre freundliche Unterstutzung. Ich mochte das
Geld investieren und wurde auch hierfur um Ihre Hilfe bitten. Fur
diese freundliche Unterstutzung mochte ich Ihnen 10% des Geldes
zukommen lassen.

Bitte senden Sie etwaige Antworten auf meine unten angegebene Email
Adresse.

Ich hoffe auf Ihre baldige Antwort und verbleibe hoflichst

Mrs.Diana Meier Vandrift

No more email SMS notifications

So, after 8 years or so I finally switched off the SMS (=aka text) notifications from my private email account to my mobile, since 95% of those notifications are pure spam.
I sick and tired of being told by sms that my penis is to short...

Thunderbird 2: Display Images

Yet another cool feature in TB2:
When an incoming mail contains images on the web (i.e. images not embedded into the message but rather on any arbitrary web site) Thunderbird in previous version as well as in v2.0 blocks the images per default.
This is to protect the end user from inadvertently and unknowingly sending information to malign websites.
Only if you deliberately click on "Load Images" those images will be loaded.

Now TB2 comes with an additional feature which looks like this:

The upper part has always been there, whats new is the
"Click here to always load remote iamges from some-mail-address".
If you click it, you will never see this message again for this very sender... instead images will always be loaded for mails from this sender, because you trust him, and declare your trust within Thunderbird.

This info is actually saved in the address book entry of the user.
You'll notice a new field there:
"Allow remote images in HTML mail."
This will be set by clicking on the above link. Obviously you can also do so manually...

I wonder if I want this option on a domain level... I guess not.

My first comment spam

Wow, I just got my first comment spam on IT conservations.
Shall I feel proud now? Or afraid?

Well, neither; I just removed that crap and record the fact here.

Fighting Spam

One of my mail providers with quite some heavy Spam problems recently implemented a new anti-spam technique, which actually reduced my daily Spam from about 100 to 5-10 e-mails a day. The ISP side Spam filters conveniently caught 99% of them, with not too many false positives (“false positives” are regular e-mails that erroneously are treated a spam), so the 100 really did not bother me that much. Now the 5-10 are really fine. For various reasons I wont disclose the feature they implemented, but it seems to work well so far.

Which leads me to the still unsolved problem of Spam; Spam or UBE (“unsolicited bulk email”) could only evolve because there is no cost associated with sending or transporting email. Spammers therefore can send out as many messages as they want, with the most dubious messages, because if even only 1 in ten thousand users clicks on their link or offer, it would still be worth it.

So the more general model here is, that the spammer has a means of transporting a trigger message to his supposed audience that leads at least a tiny fraction of the audience to do something that causes the spammer to receive money; e.g. place an order with him, usually for sex related drugs or fake luxury stuff, or it might be even ad sponsored web pages.

According to this, spam works if the gain (financially for the spammer) from one user performing this action times the success rate (i.e. the fraction of users who fall for this of all the messages sent) is higher then the cost of delivering the spam messages. As long as email is free, this will obviously always work. Even if we make it significantly hard for spammers to break our spam filters, with huge numbers it pays.

As a formula:

cost-per-message*messages + setup-cost + cost-of-counter-fighting-antispam
< gain-per-click * success-rate*messages

Some parties therefore suggested to collect a very tiny amount of money, say 1cent, for each email. Regular users like you and me wouldn't really notice, because with even 100 e-mail a day its only 1€or 1$. Spammers would notice, because at several thousand to million messages it would make them pay more than the receive.

I have my doubts regarding this model:

1. Morally: 1 cent per message seems little to us Europe or US, but is a significant barrier to everyone else, e.g. Africa; we don't want to truncate them from the net.

2. A problem of collection: who should collect the fee ? the ISP cant and won't, because that would be event based billing, which most of the smaller ISP simple aren't setup to do.

3. even if the ISPs were to charge for it, there would emerge at least one ISP who would break the system for a very small email flat rate, and it would pay again for spammers

4. if the receiving party collects, then from whom ?

5. the spam model is only about the relative price of the message to the gain (see above), Spam SMS (“short messaging service” on the mobile) shows that it works with high cost delivery (and SMS is probably the most expensive today) if only the gain is high enough; with SMS spam it is usually a call to a toll-number (1-900 in the US, 0190 in Germany, 09xx in Austria)

So as neat as charging for e-mail messages seems, because it would attack the very model of spamming, I doubt that it can work at all (or should work at all given the cost for the 3^rd world).

Technorati Tags:spam, e-mail