Re: Happy St Patrick's Day, Boss!

"Peter Wieck" <pfjw@[EMAIL PROTECTED]
> wrote in message 
news:7e146691-3e55-4efa-9630-a2108c0f7013@[EMAIL PROTECTED]
 Mar 17, 3:19 pm, flipper <flip...@[EMAIL PROTECTED]
> wrote:
>> On Mon, 17 Mar 2008 20:29:33 +0200, "Iain Churches"
>>
>> <Iai...@[EMAIL PROTECTED]
> wrote:
>>
>> >"Peter Wieck" <p...@[EMAIL PROTECTED]
> wrote in message
>>
>news:b2884b82-ee97-487a-a319-095efdd2f0e2@[EMAIL PROTECTED]
>>
>> >> X-HTTP-UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us)
>> >> AppleWebKit/523.15.1 (KHTML, like Gecko) Version/3.0.4 Safari/
>> >> 523.15,gzip(gfe),gzip(gfe)
>>
>> >From where do you get this info, Peter?
>>
>> In Outlook Express, right click on the message in the preview pane and
>> select properties, then the details tab.
>
> Yep. That's the way. Each reader has its own very similar system, but
> the end-results are the same.

> Every machine has a unique signature which cannot be disguised by the
> "typical" anonymous remailer - at least not since 9/11. One cannot get
> (easily) to a location or an original e-mail address, but one can
> determine whether the same machine sent various messages.

I think that you actually mean an anonymous proxy rather than remailer,but

that is a quibble, the effect is the same. The headers have nothing to do 
with 9/11, they have been a part of usenet fron the start, just delve back

in google groups an look at old messages.

The information above doesn't actually pin it to a machine since a proxy
was 
used, however it is unusual enough to make it fairly certain that both 
messages came from joot. Funny, if he wasn't such an Apple nazi, and had 
used outlook express, nobody would have noticed.
>
> What set me onto it was that there were two message within eight
> minutes of each other at 2:46am and 2:54am both Irish time. One
> through a South African remailer, one through a Pacific Rim remailer.
> Go figure. And, South Africa is two hours different from Ireland such
> that the time-stamps could not work anyway - nor a Pacific Rim time-
> stamp of course.
>
> It is really too bad. Andre could have made a much more credible
> effort simply by going to a local internet cafe or computer seller and
> ask for a demonstration or some such. He must have been drinking (more
> than usual, that is) to be caught in so transparent a lie. Or he could
> have messed with the time-stamp on his computer making the lie less
> obvious.

It is even easier than that (on a PC at least) all you need is a usb
storage 
key and you can disguise everything other than your IP address and that is

what proxies are for
>
> Equally too bad that the Italian Sock-Puppet e-mails are so far back -
> it might have been possible to discern the origin of them as well very
> likely putting Andre into another lie.

What was the sockpuppet's name? very little gets lost on the internet, it 
may still be possible to check.
>
> Ah, well...
>
> Peter Wieck
> Wyncote, PA

Jootie has been caught by his unique mixture of arrogance and ignorance, 
arrogant enough to think that nobody was clever enough to notice, and 
ignorant enough to be unable to do anything about it.

Keith