<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Nafurai &#187; Internet</title>
	<atom:link href="http://blog.nafurai.com/category/internet/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.nafurai.com</link>
	<description>Build your own internet</description>
	<lastBuildDate>Thu, 25 Mar 2010 18:11:21 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Shoemoney Spammer? With ReviewMe and ShoppingAds?</title>
		<link>http://blog.nafurai.com/2010/03/shoemoney-spammer-with-reviewme-and-shoppingads/</link>
		<comments>http://blog.nafurai.com/2010/03/shoemoney-spammer-with-reviewme-and-shoppingads/#comments</comments>
		<pubDate>Mon, 22 Mar 2010 21:50:35 +0000</pubDate>
		<dc:creator>maurizio</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Ramblings]]></category>
		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://blog.nafurai.com/?p=267</guid>
		<description><![CDATA[Shoemoney, MediaWhiz and ShoppingAds got victim of spammers. Their email database got probably stolen.]]></description>
			<content:encoded><![CDATA[<!--DiggClick: http://codehack.biz/wordpress/diggclick/ -->
<div class="diggclick">
<a href="http://digg.com/submit?phase=2&amp;url=http://blog.nafurai.com/2010/03/shoemoney-spammer-with-reviewme-and-shoppingads/&amp;title=Shoemoney+Spammer?+With+ReviewMe+and+ShoppingAds?&amp;bodytext=Has+Shoemoney+sold+his+soul+(and+our+addresses)+to+spammers?+No,+I+don't+think+so.+I+read+that+someone+asked+him+about+that+lately+and+he+seemed+sincere.+Of+course+you+can+lie,+but+from+what+I+read+about+him,+he's+not+the+guy+that+risk+his+reputation+selling+addresses+to+spammer+(or+being+a+spammer+himself).But..But+he+failed+victim+of+someone[...]">
<img src="http://blog.nafurai.com/wp-content/plugins/diggclick/submit.gif" alt="" /></a></div>
<!--thecontent-->
<p>Has Shoemoney sold his soul (and our addresses) to spammers? No, I don&#8217;t think so. I read that someone asked him about that lately and he seemed sincere. Of course you can lie, but from what I read about him, he&#8217;s not the guy that risk his reputation selling addresses to spammer (or being a spammer himself).</p>
<p>But..</p>
<p>But he failed victim of someone who sold his Database. </p>
<p>How do I know? Well, (almost) every time I register to a site, I use a different email address. I don&#8217;t use the &#8220;+&#8221; trick Shoe wrote on a post a while back, I&#8217;m using a completely different email address. Using the + thing is the easiest way to check who&#8217;s sending spam, but it&#8217;s not that difficult for a spammer to filter email with + sign on it..<br />
The best thing is to use several email addresses.</p>
<p>I think I know more or less what happened to him by just checking my inbox. Last year in December Shoe started to try some Email Marketing services different from the one he is using now (and he always used for what I know). Around 11-12 December 2009 he started to mail everyone on his lists about the ShoemoneySystem. He was probably evaluation bronto.com, because he sent out the same email with Aweber and with bronto. I have to admit that I messed up with my various email addresses and I probably registered on his site with 3 different email addresses. One was my original email address (easy to guess since it&#8217;s my name), the other were two special addresses created for the situation. I used to work on windows and linux without sharing the data so I probably registered once on windows and once on linux :( My fault. Anyway during the 11-12 december I received this email from Shoe. I am not complaining about this, mind you.. I got this email 3 times 2 on the aforementioned email addresses and one on an address I used to register to pimpmyblog. Again I&#8217;m not complaining. I know that when I register to a site, I get information from the owner, so it&#8217;s ok. I&#8217;m just trying to rebuild what happened at that time.</p>
<p>I don&#8217;t know how he tested bronto.com, but only 2 out of 3 email were sent with it. Judging by his latest newsletters, he didn&#8217;t like the service :)<br />
He used bronto.com again later, I am not sure when he stopped though, I should check the rest of my emails.<br />
Anyway after a week he tested another email marketing service, this time from softwareprojects.com. (you can check by yourself either by looking for link on the emails (sp.com owns spilnk.com ) or checking the email headers.<br />
This time our Shoe sent us an email about the success of the shoemoney system and a f-bomb that was left unedited from a video :)<br />
This time I correctly receive 4 emails: 1 for the pimpmyblog address and 3 for the shoemoney address. The &#8220;fun&#8221; part of this and probably the reason he never used softwareprojects.com again is that someone did a huge mistake. I don&#8217;t know who did it, but whoever did it made a huge mistake importing the data into softwareprojects&#8217; system! They imported part of the email address! Instead of import  email124@etc.com, they imported mail123@etc.com, forgetting the first letter! This is tricky to check if you use public email services and you can&#8217;t check misspelled email addresses, but I can and I can clearly see 4 email, all with the 1st character missing.</p>
<p>Around the same period the spam started to soar. Well..not really thousand of email, but still, 3-4 more than usual (usual = 1,2 per day. I already filtered a couple of addresses. They were from blogs I commented where the owner forgot to upgrade wordpress and someone stole their db) I probably deleted some of those spam messages, but I can clearly see on 28th of September the first spam from an email address I used to register to AuctionAds (which is ShoppingAds). On the 18th of December I see the first two spam to the address I used with Shoemoney.com. This is the same day he sent me the emails from softwareprojects system. I doubt they copied his list, for two reason:<br />
1st the spam arrived at only one of the four email addresses<br />
2nd the spam address was correct, while the newsletter&#8217;s one was wrong.</p>
<p>In January 2010 things get worse, I get spam to all my shoemoney&#8217;s address other than pimpmyblog&#8217;s one and together with AuctionAds&#8217;s address, also the ReviewMe one starts to get spam.<br />
All that spam come from one system. I can see that spam comes in groups and either the title or the date are the same for at least two of them at the same time.  Sometimes I see three spam email with the same title but only two have the same date. Unfortunately the email protocol is so weak that even dates can be manipulated, but having two different spam networks sending the same date and title is very difficult. </p>
<p>After that date I receive regularly spam for all those addresses, except for the pimpmyblog one.<br />
I don&#8217;t know how those bot networks works, but sometimes I got the same spam twice. Ah those inefficiencies :(</p>
<p>I have no idea what happened and if all those three companies have been a target of hackers or just victims of some black sheep employee.  The spam emails unfortunately doesn&#8217;t give much information. The only sure thing is your email address on them. Actually not even that is sure; sometimes you can get spam with someone else&#8217;s email on the &#8220;To:&#8221; Field. Checking all the spam together could reveal patterns, like the one I mentioned about the dates. So I can easily say that the spam is generated by the same organization.</p>
<p>Something else I can add is that both ReviewMe and ShoppingAds have their servers on the same center. I don&#8217;t know how it works by sungard, but if atlir8-v1-1 and v1-2 are on the same room, it could be that someone was able to access ShoppingAds and ReviewMe&#8217;s servers. I don&#8217;t know if Shoemoney has server there, but at least shoemoney.com isn&#8217;t there.</p>
<p>Anyway, I think that Shoemoney, ReviewMe and ShoppingAds got their email address database stolen in some way.<br />
I hope this post will help them find who&#8217;s responsible for that. I am also available to give the evidence if needed.</p>
<p>Oh. I forgot something. I receive spam also on my TextLinkAds address. This means MediaWiz&#8217;s got two dbs stolen :(</p>
<p>ps. I usually send an email to the siteowners when I start to see 2-3 spam emails from the address I used with them. I tried to contact Shoe, but I failed.<br />
pps. Hey, maybe it&#8217;s all a coincidence! Maybe spammers got so lucky to guess all those email addresses. :)</p>
<p class="akst_link"><a href="http://blog.nafurai.com/?p=267&amp;akst_action=share-this"  title="E-mail this, post to del.icio.us, etc." id="akst_link_267" class="akst_share_link" rel="nofollow">Share This</a>
</p>]]></content:encoded>
			<wfw:commentRss>http://blog.nafurai.com/2010/03/shoemoney-spammer-with-reviewme-and-shoppingads/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Unicode and ASCII: Busy Day again</title>
		<link>http://blog.nafurai.com/2007/08/unicode-and-ascii-busy-day-again/</link>
		<comments>http://blog.nafurai.com/2007/08/unicode-and-ascii-busy-day-again/#comments</comments>
		<pubDate>Thu, 30 Aug 2007 16:25:02 +0000</pubDate>
		<dc:creator>maurizio</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Programming]]></category>

		<guid isPermaLink="false">http://blog.nafurai.com/2007/08/unicode-and-ascii-busy-day-again/</guid>
		<description><![CDATA[Sorry, no post yesterday and no post today (apart for this one).
I am really busy looking for a job &#038; improving my Java Crawler.
You&#8217;ll never imagine how difficult is to read thousand of different websites and try to get precise stuff from them. In those days I&#8217;m fighting with page encodings.
Most of the web pages [...]]]></description>
			<content:encoded><![CDATA[<p>Sorry, no post yesterday and no post today (apart for this one).<br />
I am really busy looking for a job &#038; improving my Java Crawler.<br />
You&#8217;ll never imagine how difficult is to read thousand of different websites and try to get precise stuff from them. In those days I&#8217;m fighting with page encodings.<br />
Most of the web pages that you see are encoded with UTF-8 which is Unicode. Unicode is an international standard to define how to &#8220;write&#8221; characters. Do you remember ASCII? Unicode is something like that but more powerful, which means it can represent more characters.  </p>
<p>What do you mean &#8220;Write&#8221; and &#8220;Represent&#8221; ? Easy. Imagine that the letter &#8220;a&#8221; has to be saved on a file. When you open that file you see an &#8220;a&#8221; but inside the file the a is represented with bytes (do you know that? the 0s and 1s?) because everything in the computers world can be divided in bit (the atom of the information on the digital world). So your &#8220;a&#8221; becomes a list of 0 and 1 which could be translated in the number 97. This is an old definition made long time ago and they called the whole set of definition <a href="http://www.asciitable.com/">ASCII</a>. As you maybe know 97 can be represented with 1byte (which is a collection of 8 bit &#8211;> eight 0 or 1). The problem is that 255 (1 byte) is not enough to define all the letter of all existing alphabets. You don&#8217;t have enough space for European languages..imagine if you have to put Cyrillic or Kanji characters too. Because of that they created <a href="http://en.wikipedia.org/wiki/List_of_Unicode_characters">Unicode</a>, which use 2 or more bytes to define all the characters. With Unicode you can represent Chinese or Japanese characters too.<br />
Unicode looks like the perfect solution for representing web pages, because you are sure that if every browser is using that encoding, everyone can see what you write. The problem is that not everyone is using it. I&#8217;ve found a lot of pages using special Chinese encoding, some other using Korean and so on. </p>
<p>The problem with my application is that I have to extract those informations, but before getting them I need to know the character set used by those pages. Hopefully html is helping me with the tag<br />
<code>&lt; meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></code><br />
But then I have to parse the site twice if the charset is not UTF8.</p>
<p class="akst_link"><a href="http://blog.nafurai.com/?p=221&amp;akst_action=share-this"  title="E-mail this, post to del.icio.us, etc." id="akst_link_221" class="akst_share_link" rel="nofollow">Share This</a>
</p>]]></content:encoded>
			<wfw:commentRss>http://blog.nafurai.com/2007/08/unicode-and-ascii-busy-day-again/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Technorati Rank Tips</title>
		<link>http://blog.nafurai.com/2007/08/technorati-rank-tips/</link>
		<comments>http://blog.nafurai.com/2007/08/technorati-rank-tips/#comments</comments>
		<pubDate>Sat, 04 Aug 2007 18:39:03 +0000</pubDate>
		<dc:creator>maurizio</dc:creator>
				<category><![CDATA[Internet]]></category>

		<guid isPermaLink="false">http://blog.nafurai.com/2007/08/technorati-rank-tips/</guid>
		<description><![CDATA[Oooh finally Technorati recognize how much my site is worth:

Well, maybe there is a problem on their side. I am not Nr 1. (yet).
Share This
]]></description>
			<content:encoded><![CDATA[<p>Oooh finally Technorati recognize how much my site is worth:</p>
<p><img src='http://blog.nafurai.com/wp-content/uploads/2007/08/technoratirank.gif' alt='Technorati Rank image' /></p>
<p>Well, maybe there is a problem on their side. I am not Nr 1. (yet).</p>
<p class="akst_link"><a href="http://blog.nafurai.com/?p=200&amp;akst_action=share-this"  title="E-mail this, post to del.icio.us, etc." id="akst_link_200" class="akst_share_link" rel="nofollow">Share This</a>
</p>]]></content:encoded>
			<wfw:commentRss>http://blog.nafurai.com/2007/08/technorati-rank-tips/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Something about me.</title>
		<link>http://blog.nafurai.com/2007/07/something-about-me/</link>
		<comments>http://blog.nafurai.com/2007/07/something-about-me/#comments</comments>
		<pubDate>Thu, 12 Jul 2007 20:12:17 +0000</pubDate>
		<dc:creator>maurizio</dc:creator>
				<category><![CDATA[Internet]]></category>

		<guid isPermaLink="false">http://blog.nafurai.com/2007/07/something-about-me/</guid>
		<description><![CDATA[Everyone is asking to speak a bit more about me, because my &#8220;about me&#8221; it&#8217;s empty. So let&#8217;s say something about me.
me :
I      pronoun, nominative I, possessive my or mine, objective me; plural nominative we, possessive our or ours, objective us; noun, plural I&#8217;s.
–pronoun
1.	the nominative singular pronoun, used by a [...]]]></description>
			<content:encoded><![CDATA[<p>Everyone is asking to speak a bit more about me, because my &#8220;<em>about me</em>&#8221; it&#8217;s empty. So let&#8217;s say something about me.</p>
<p><strong>me</strong> :<br />
I      pronoun, nominative I, possessive my or mine, objective me; plural nominative we, possessive our or ours, objective us; noun, plural I&#8217;s.<br />
–pronoun<br />
1.	the nominative singular pronoun, used by a speaker in referring to himself or herself.<br />
–noun<br />
2.	(used to denote the narrator of a literary work written in the first person singular).<br />
3.	Metaphysics. the ego.<br />
[Origin: bef. 900; ME ik, ich, i; OE ic, ih; c. G ich, ON ek, L ego, Gk eg, OCS azŭ, Lith aš, Skt ahám] </p>
<p>:-)</p>
<p>I&#8217;ll promise to write more about me soon.</p>
<p>(source <a href="http://dictionary.reference.com/search?q=me">www.dictionary.com</a>)</p>
<p class="akst_link"><a href="http://blog.nafurai.com/?p=195&amp;akst_action=share-this"  title="E-mail this, post to del.icio.us, etc." id="akst_link_195" class="akst_share_link" rel="nofollow">Share This</a>
</p>]]></content:encoded>
			<wfw:commentRss>http://blog.nafurai.com/2007/07/something-about-me/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
