<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Nafurai &#187; Ramblings</title>
	<atom:link href="http://blog.nafurai.com/category/ramblings/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.nafurai.com</link>
	<description>Build your own internet</description>
	<lastBuildDate>Fri, 23 Dec 2011 10:26:50 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Shoemoney Spammer? With ReviewMe and ShoppingAds?</title>
		<link>http://blog.nafurai.com/2010/03/shoemoney-spammer-with-reviewme-and-shoppingads/</link>
		<comments>http://blog.nafurai.com/2010/03/shoemoney-spammer-with-reviewme-and-shoppingads/#comments</comments>
		<pubDate>Mon, 22 Mar 2010 21:50:35 +0000</pubDate>
		<dc:creator>maurizio</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Ramblings]]></category>
		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://blog.nafurai.com/?p=267</guid>
		<description><![CDATA[Shoemoney, MediaWhiz and ShoppingAds got victim of spammers. Their email database got probably stolen.]]></description>
			<content:encoded><![CDATA[<!--DiggClick: http://codehack.biz/wordpress/diggclick/ -->
<div class="diggclick">
<a href="http://digg.com/submit?phase=2&amp;url=http://blog.nafurai.com/2010/03/shoemoney-spammer-with-reviewme-and-shoppingads/&amp;title=Shoemoney+Spammer?+With+ReviewMe+and+ShoppingAds?&amp;bodytext=Has+Shoemoney+sold+his+soul+(and+our+addresses)+to+spammers?+No,+I+don't+think+so.+I+read+that+someone+asked+him+about+that+lately+and+he+seemed+sincere.+Of+course+you+can+lie,+but+from+what+I+read+about+him,+he's+not+the+guy+that+risk+his+reputation+selling+addresses+to+spammer+(or+being+a+spammer+himself).But..But+he+failed+victim+of+someone[...]">
<img src="http://blog.nafurai.com/wp-content/plugins/diggclick/submit.gif" alt="" /></a></div>
<!--thecontent-->
<p>Has Shoemoney sold his soul (and our addresses) to spammers? No, I don&#8217;t think so. I read that someone asked him about that lately and he seemed sincere. Of course you can lie, but from what I read about him, he&#8217;s not the guy that risk his reputation selling addresses to spammer (or being a spammer himself).</p>
<p>But..</p>
<p>But he failed victim of someone who sold his Database. </p>
<p>How do I know? Well, (almost) every time I register to a site, I use a different email address. I don&#8217;t use the &#8220;+&#8221; trick Shoe wrote on a post a while back, I&#8217;m using a completely different email address. Using the + thing is the easiest way to check who&#8217;s sending spam, but it&#8217;s not that difficult for a spammer to filter email with + sign on it..<br />
The best thing is to use several email addresses.</p>
<p>I think I know more or less what happened to him by just checking my inbox. Last year in December Shoe started to try some Email Marketing services different from the one he is using now (and he always used for what I know). Around 11-12 December 2009 he started to mail everyone on his lists about the ShoemoneySystem. He was probably evaluation bronto.com, because he sent out the same email with Aweber and with bronto. I have to admit that I messed up with my various email addresses and I probably registered on his site with 3 different email addresses. One was my original email address (easy to guess since it&#8217;s my name), the other were two special addresses created for the situation. I used to work on windows and linux without sharing the data so I probably registered once on windows and once on linux :( My fault. Anyway during the 11-12 december I received this email from Shoe. I am not complaining about this, mind you.. I got this email 3 times 2 on the aforementioned email addresses and one on an address I used to register to pimpmyblog. Again I&#8217;m not complaining. I know that when I register to a site, I get information from the owner, so it&#8217;s ok. I&#8217;m just trying to rebuild what happened at that time.</p>
<p>I don&#8217;t know how he tested bronto.com, but only 2 out of 3 email were sent with it. Judging by his latest newsletters, he didn&#8217;t like the service :)<br />
He used bronto.com again later, I am not sure when he stopped though, I should check the rest of my emails.<br />
Anyway after a week he tested another email marketing service, this time from softwareprojects.com. (you can check by yourself either by looking for link on the emails (sp.com owns spilnk.com ) or checking the email headers.<br />
This time our Shoe sent us an email about the success of the shoemoney system and a f-bomb that was left unedited from a video :)<br />
This time I correctly receive 4 emails: 1 for the pimpmyblog address and 3 for the shoemoney address. The &#8220;fun&#8221; part of this and probably the reason he never used softwareprojects.com again is that someone did a huge mistake. I don&#8217;t know who did it, but whoever did it made a huge mistake importing the data into softwareprojects&#8217; system! They imported part of the email address! Instead of import  email124@etc.com, they imported mail123@etc.com, forgetting the first letter! This is tricky to check if you use public email services and you can&#8217;t check misspelled email addresses, but I can and I can clearly see 4 email, all with the 1st character missing.</p>
<p>Around the same period the spam started to soar. Well..not really thousand of email, but still, 3-4 more than usual (usual = 1,2 per day. I already filtered a couple of addresses. They were from blogs I commented where the owner forgot to upgrade wordpress and someone stole their db) I probably deleted some of those spam messages, but I can clearly see on 28th of September the first spam from an email address I used to register to AuctionAds (which is ShoppingAds). On the 18th of December I see the first two spam to the address I used with Shoemoney.com. This is the same day he sent me the emails from softwareprojects system. I doubt they copied his list, for two reason:<br />
1st the spam arrived at only one of the four email addresses<br />
2nd the spam address was correct, while the newsletter&#8217;s one was wrong.</p>
<p>In January 2010 things get worse, I get spam to all my shoemoney&#8217;s address other than pimpmyblog&#8217;s one and together with AuctionAds&#8217;s address, also the ReviewMe one starts to get spam.<br />
All that spam come from one system. I can see that spam comes in groups and either the title or the date are the same for at least two of them at the same time.  Sometimes I see three spam email with the same title but only two have the same date. Unfortunately the email protocol is so weak that even dates can be manipulated, but having two different spam networks sending the same date and title is very difficult. </p>
<p>After that date I receive regularly spam for all those addresses, except for the pimpmyblog one.<br />
I don&#8217;t know how those bot networks works, but sometimes I got the same spam twice. Ah those inefficiencies :(</p>
<p>I have no idea what happened and if all those three companies have been a target of hackers or just victims of some black sheep employee.  The spam emails unfortunately doesn&#8217;t give much information. The only sure thing is your email address on them. Actually not even that is sure; sometimes you can get spam with someone else&#8217;s email on the &#8220;To:&#8221; Field. Checking all the spam together could reveal patterns, like the one I mentioned about the dates. So I can easily say that the spam is generated by the same organization.</p>
<p>Something else I can add is that both ReviewMe and ShoppingAds have their servers on the same center. I don&#8217;t know how it works by sungard, but if atlir8-v1-1 and v1-2 are on the same room, it could be that someone was able to access ShoppingAds and ReviewMe&#8217;s servers. I don&#8217;t know if Shoemoney has server there, but at least shoemoney.com isn&#8217;t there.</p>
<p>Anyway, I think that Shoemoney, ReviewMe and ShoppingAds got their email address database stolen in some way.<br />
I hope this post will help them find who&#8217;s responsible for that. I am also available to give the evidence if needed.</p>
<p>Oh. I forgot something. I receive spam also on my TextLinkAds address. This means MediaWiz&#8217;s got two dbs stolen :(</p>
<p>ps. I usually send an email to the siteowners when I start to see 2-3 spam emails from the address I used with them. I tried to contact Shoe, but I failed.<br />
pps. Hey, maybe it&#8217;s all a coincidence! Maybe spammers got so lucky to guess all those email addresses. :)</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.nafurai.com/2010/03/shoemoney-spammer-with-reviewme-and-shoppingads/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Back again!</title>
		<link>http://blog.nafurai.com/2008/05/back-again/</link>
		<comments>http://blog.nafurai.com/2008/05/back-again/#comments</comments>
		<pubDate>Mon, 19 May 2008 19:14:50 +0000</pubDate>
		<dc:creator>maurizio</dc:creator>
				<category><![CDATA[Ramblings]]></category>

		<guid isPermaLink="false">http://blog.nafurai.com/?p=264</guid>
		<description><![CDATA[I am back again! After more than 6 months, here I am. I spent the last 6 month moving to another (big) city. Actually I spent less than a week doing that and the rest of the time I just tried to get used to my new home city. Now I decided to go back [...]]]></description>
			<content:encoded><![CDATA[<p>I am back again!<br />
After more than 6 months, here I am. I spent the last 6 month moving to another (big) city. Actually I spent less than a week doing that and the rest of the time I just tried to get used to my new home city.<br />
Now I decided to go back to my blog because I can&#8217;t wait until I&#8217;m used to here before writing something again. And it will probably takes me decades to get used to here.</p>
<p>I&#8217;ve noticed that my blog receives more or less 30 users every day even if I&#8217;m not posting a single new thing. Most of them are just reading &#8220;my&#8221; <a href="http://blog.nafurai.com/2007/06/funny-haiku/">funny haiku</a> post. Which is in some way sad because I haven&#8217;t written that haiku myself; but at least I can prove that funny posts are a good thing.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.nafurai.com/2008/05/back-again/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>MyBlogLog is getting dumber</title>
		<link>http://blog.nafurai.com/2007/11/mybloglog-is-getting-dumber/</link>
		<comments>http://blog.nafurai.com/2007/11/mybloglog-is-getting-dumber/#comments</comments>
		<pubDate>Tue, 27 Nov 2007 15:16:53 +0000</pubDate>
		<dc:creator>maurizio</dc:creator>
				<category><![CDATA[Ramblings]]></category>

		<guid isPermaLink="false">http://blog.nafurai.com/2007/11/mybloglog-is-getting-dumber/</guid>
		<description><![CDATA[I already hate the fact that I had to open (another) Yahoo account to be able to use MyBlogLog again, but the stupid thing is that I can&#8217;t upload my old image. Every time I try it ask me to crop it. if I put a 4&#215;4 pixel image it still ask to crop it. [...]]]></description>
			<content:encoded><![CDATA[<p>I already hate the fact that I had to open (another) Yahoo account to be able to use MyBlogLog again, but the stupid thing is that I can&#8217;t upload my old image. Every time I try it ask me to crop it. if I put a 4&#215;4 pixel image it still ask to crop it. What&#8217;s happening? I thought they get better with Yahoo&#8230;</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.nafurai.com/2007/11/mybloglog-is-getting-dumber/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
		<item>
		<title>I still exist and thoughts about my blog and PageRank</title>
		<link>http://blog.nafurai.com/2007/11/i-still-exist-and-thoughts-about-my-blog-and-pagerank/</link>
		<comments>http://blog.nafurai.com/2007/11/i-still-exist-and-thoughts-about-my-blog-and-pagerank/#comments</comments>
		<pubDate>Mon, 26 Nov 2007 19:10:53 +0000</pubDate>
		<dc:creator>maurizio</dc:creator>
				<category><![CDATA[Ramblings]]></category>
		<category><![CDATA[google]]></category>
		<category><![CDATA[nofollow]]></category>
		<category><![CDATA[pagerank]]></category>
		<category><![CDATA[shoppingads]]></category>

		<guid isPermaLink="false">http://blog.nafurai.com/2007/11/i-still-exist-and-thoughts-about-my-blog-and-pagerank/</guid>
		<description><![CDATA[Hi. I know it&#8217;s been ages from my last post. I am/was busy because I&#8217;ve finally found a (new) job! And I have to move. :/ Anyway.. I wanted to post my &#8220;how-to create charts&#8221; post but it&#8217;s still uncomplete. I think I&#8217;ll post it in 2 parts. Please note my PageRank. Now it&#8217;s down [...]]]></description>
			<content:encoded><![CDATA[<p>Hi.<br />
I know it&#8217;s been ages from my last post. I am/was busy because I&#8217;ve finally found a (new) job! And I have to move. :/<br />
Anyway..<br />
I wanted to post my &#8220;how-to create charts&#8221; post but it&#8217;s still uncomplete. I think I&#8217;ll post it in 2 parts.</p>
<p>Please note my PageRank. Now it&#8217;s down to 0. Why? Probably because I wrote to them (using the tool inside Google Webmaster Tool) stating that I did something wrong and pointing at my post about <a href="http://blog.nafurai.com/2007/06/andy-coates-viralink-increase-pagerank/">Andy Coate&#8217;s viralink post</a> I did ages ago. I even corrected it. Of course that wasn&#8217;t the problem for them, but it was for me.I read Google TOS and they say I shouldn&#8217;t post something that is confusing for my readers, and that post is full of useless link so that was the only mistake I did, IMHO. They probably decreased my PR because I wrote some PayPerPost review, but I still believe they are not confusing my readers. If a reader doesn&#8217;t trust my reviews he can just skip them. If he trust me he can still check by himself.  I haven&#8217;t found anywhere that they don&#8217;t want paid links; maybe I should check again.<br />
If you can show me where they clearly write that I can&#8217;t have &#8220;FOLLOW&#8221; links on sponsored posts, I&#8217;ll &#8220;NOFOLLOW&#8221; all of them. No problem for me, but FOLLOW or NOFOLLOW are not confusing my readers; they are probably confusing just google.</p>
<p>Anyway I don&#8217;t really mind now. I&#8217;m upset but whatever.. I&#8217;ll probably stop writing PPP post because there aren&#8217;t interesting stuff to post about anymore (I haven&#8217;t checked lately though).Maybe I can&#8217;t even post now that I&#8217;m down to 0. Whatever..</p>
<p>The upsetting thing of the week (actually of the last weeks) is ShoppingAds that sent me an email stating that my account was blocked. I don&#8217;t remember why because I can&#8217;t find that email. Maybe is because I haven&#8217;t received an email but they just wrote it on my account page. Anyway I still don&#8217;t see anything appearing on my right sponsor space, which is very disappointing, because I was hoping to have at least a couple of referral subscriber since I published it very early.</p>
<p>I&#8217;m starting to consider throwing away all that ads stuff on my blog, but then I will lose the experience of managing this kind of stuff on a blog.</p>
<p>On a side note, I&#8217;ve noted that I have at least 15-16 reader daily, even if it&#8217;s almost a month that I&#8217;m not posting anything. This is  in some way good and in some other bad. It&#8217;s good because I have some kind of traffic even if I don&#8217;t post. It&#8217;s bad because I usually have 20-25 readers, which means that I&#8217;m making efforts to post stuff and just 10 people are coming here to read my new posts.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.nafurai.com/2007/11/i-still-exist-and-thoughts-about-my-blog-and-pagerank/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>

