Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

Sendmail may be safely run set-user-id to root. -- Eric Allman, "Sendmail Installation Guide"


computers / comp.sys.apple2 / Emails from Bill Buckels

SubjectAuthor
* Emails from Bill BuckelsD Finnigan
`* Re: Emails from Bill BuckelsI am Rob
 `* Re: Emails from Bill BuckelsD Finnigan
  `* Re: Emails from Bill BuckelsI am Rob
   `* Re: Emails from Bill Buckelswaynej...@gmail.com
    `* Re: Emails from Bill BuckelsD Finnigan
     `- Re: Emails from Bill BuckelsBill Buckels

1
Emails from Bill Buckels

<dog_cow-1648051262@macgui.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=4225&group=comp.sys.apple2#4225

 copy link   Newsgroups: comp.sys.apple2
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: dog_...@macgui.com (D Finnigan)
Newsgroups: comp.sys.apple2
Subject: Emails from Bill Buckels
Date: Wed, 23 Mar 2022 16:01:04 -0000 (UTC)
Organization: Mac GUI
Lines: 6
Message-ID: <dog_cow-1648051262@macgui.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 23 Mar 2022 16:01:04 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="d5151ac4b78bcba907290dcf55e2b92f";
logging-data="26154"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/jxFUaxT3P6WYC/SEZrHiG"
User-Agent: Mac GUI Usenet
Cancel-Lock: sha1:1yO6/1xyF/IQGvZf+O+AX9AfnZU=
 by: D Finnigan - Wed, 23 Mar 2022 16:01 UTC

Heads up in case anyone else gets these:

Emails claiming to be from Bill Buckels, and containing a URL to MS OneDrive
to download a file are probably not legitimate. I've gotten three of these
in past few weeks.

Re: Emails from Bill Buckels

<2e74a798-d6ac-4f7a-bb67-dce2e1264d4bn@googlegroups.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=4226&group=comp.sys.apple2#4226

 copy link   Newsgroups: comp.sys.apple2
X-Received: by 2002:a05:6214:528d:b0:441:4702:6263 with SMTP id kj13-20020a056214528d00b0044147026263mr1259487qvb.125.1648061728970;
Wed, 23 Mar 2022 11:55:28 -0700 (PDT)
X-Received: by 2002:a05:622a:510:b0:2e1:ecc0:30f7 with SMTP id
l16-20020a05622a051000b002e1ecc030f7mr1167204qtx.394.1648061728831; Wed, 23
Mar 2022 11:55:28 -0700 (PDT)
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!border2.nntp.dca1.giganews.com!nntp.giganews.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.apple2
Date: Wed, 23 Mar 2022 11:55:28 -0700 (PDT)
In-Reply-To: <dog_cow-1648051262@macgui.com>
Injection-Info: google-groups.googlegroups.com; posting-host=142.165.85.242; posting-account=U4TNXwoAAABP4nIJHynAJZ69O_f3LY2g
NNTP-Posting-Host: 142.165.85.242
References: <dog_cow-1648051262@macgui.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <2e74a798-d6ac-4f7a-bb67-dce2e1264d4bn@googlegroups.com>
Subject: Re: Emails from Bill Buckels
From: gids...@sasktel.net (I am Rob)
Injection-Date: Wed, 23 Mar 2022 18:55:28 +0000
Content-Type: text/plain; charset="UTF-8"
Lines: 6
 by: I am Rob - Wed, 23 Mar 2022 18:55 UTC

> Heads up in case anyone else gets these:
>
> Emails claiming to be from Bill Buckels, and containing a URL to MS OneDrive
> to download a file are probably not legitimate. I've gotten three of these
> in past few weeks.

I have always been baffled by this. your email address is like a phone number. If my call display shows my neighbors number but I get a telemarketer from India on the line, this shouldn't be possible.

Re: Emails from Bill Buckels

<dog_cow-1648064503@macgui.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=4227&group=comp.sys.apple2#4227

 copy link   Newsgroups: comp.sys.apple2
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: dog_...@macgui.com (D Finnigan)
Newsgroups: comp.sys.apple2
Subject: Re: Emails from Bill Buckels
Date: Wed, 23 Mar 2022 19:41:44 -0000 (UTC)
Organization: Mac GUI
Lines: 63
Message-ID: <dog_cow-1648064503@macgui.com>
References: <dog_cow-1648051262@macgui.com> <2e74a798-d6ac-4f7a-bb67-dce2e1264d4bn@googlegroups.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 23 Mar 2022 19:41:44 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="d5151ac4b78bcba907290dcf55e2b92f";
logging-data="9357"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+gx0g0DeNCm4AlCUanU9kZ"
User-Agent: Mac GUI Usenet
Cancel-Lock: sha1:ApreI8iEkwVaO9GlOJE86GlEshE=
In-Reply-To: <2e74a798-d6ac-4f7a-bb67-dce2e1264d4bn@googlegroups.com>
 by: D Finnigan - Wed, 23 Mar 2022 19:41 UTC

I am Rob wrote:
>> Heads up in case anyone else gets these:
>>
>> Emails claiming to be from Bill Buckels, and containing a URL to MS
>> OneDrive
>> to download a file are probably not legitimate. I've gotten three of
>> these
>> in past few weeks.
>
> I have always been baffled by this. your email address is like a phone
> number. If my call display shows my neighbors number but I get a
> telemarketer from India on the line, this shouldn't be possible.
>

Here's the header of one, should there be any interest.... you'll note that
the name matches, but the email address does not seem to correspond. Someone
is taking old csa2 posts and making it look like a direct email reply from
someone in the newsgroup.

Return-Path: <Brooke.Cynthia@deliciouswebsites.co.uk>
X-Original-To: dog_cow@macgui.com
Delivered-To: dog_cow@macgui.com
Received: by sarah.macgui.net (Postfix, from userid 111)
id BB001E1487; Wed, 23 Mar 2022 15:53:33 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 sarah.macgui.net BB001E1487
Authentication-Results: sarah.macgui.net;
dkim=pass (1024-bit key; unprotected) header.d=deliciouswebsites.co.uk
header.i=Brooke.Cynthia@deliciouswebsites.co.uk header.b="NbulbzV9";
dkim-atps=neutral
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on sarah.macgui.net
X-Spam-Level:
X-Spam-Status: No, score=0.6 required=3.7 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,
SPF_HELO_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no
version=3.4.2
Received: from deliciouswebsites.co.uk (deliciouswebsites.co.uk
[93.170.123.99])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits)
server-digest SHA256)
(No client certificate requested)
by sarah.macgui.net (Postfix) with ESMTPS id 302F5E0E7C
for <df@macgui.com>; Wed, 23 Mar 2022 15:53:32 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=mail;
d=deliciouswebsites.co.uk;
h=MIME-Version:Date:Content-Type:Content-Transfer-Encoding:From:To:Subject:
Message-ID; i=Brooke.Cynthia@deliciouswebsites.co.uk;
bh=zbZbppZ5sn3Fe+igU0iO9OUlUepfZiovBS7v1g/sgEM=;
b=NbulbzV9uYiBQqpq70Y8s13uJ1sXu/8X5D2Pdpry1SjtK2xvbsVyHbtpnFp4buuisbplsu6QqXn9
6PZ3UzIITcdNqxWXgZ2CCQXutqmJKefU0Ai37a1EfeqlEm+JGHmLzVwcqxBM4WyRpsUtl0V/qX8n
Do31n1xyRjcA8PgWOL8=
MIME-Version: 1.0
Date: Wed, 23 Mar 2022 07:52:44 -0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
From: "Bill Buckels" <Brooke.Cynthia@deliciouswebsites.co.uk>
To: "D Finnigan" <df@macgui.com>
Subject: Re: Please Remove re: Apple II Joystick USB Adapter for AppleWin
Message-ID: <omsakp5intftd6rncuni8aocvxt9e0hd@deliciouswebsites.co.uk>

Re: Emails from Bill Buckels

<6efdb55f-9f5a-49ce-b9f4-76ccc0dbebb8n@googlegroups.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=4229&group=comp.sys.apple2#4229

 copy link   Newsgroups: comp.sys.apple2
X-Received: by 2002:a05:620a:1386:b0:67e:46c1:1b33 with SMTP id k6-20020a05620a138600b0067e46c11b33mr1458389qki.53.1648073948812;
Wed, 23 Mar 2022 15:19:08 -0700 (PDT)
X-Received: by 2002:ad4:5f0f:0:b0:441:1e3a:dbf with SMTP id
fo15-20020ad45f0f000000b004411e3a0dbfmr1806216qvb.79.1648073948654; Wed, 23
Mar 2022 15:19:08 -0700 (PDT)
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!border2.nntp.dca1.giganews.com!nntp.giganews.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.apple2
Date: Wed, 23 Mar 2022 15:19:08 -0700 (PDT)
In-Reply-To: <dog_cow-1648064503@macgui.com>
Injection-Info: google-groups.googlegroups.com; posting-host=142.165.85.242; posting-account=U4TNXwoAAABP4nIJHynAJZ69O_f3LY2g
NNTP-Posting-Host: 142.165.85.242
References: <dog_cow-1648051262@macgui.com> <2e74a798-d6ac-4f7a-bb67-dce2e1264d4bn@googlegroups.com>
<dog_cow-1648064503@macgui.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <6efdb55f-9f5a-49ce-b9f4-76ccc0dbebb8n@googlegroups.com>
Subject: Re: Emails from Bill Buckels
From: gids...@sasktel.net (I am Rob)
Injection-Date: Wed, 23 Mar 2022 22:19:08 +0000
Content-Type: text/plain; charset="UTF-8"
Lines: 2
 by: I am Rob - Wed, 23 Mar 2022 22:19 UTC

Right. But doesn't the name that is attached to an email address come from your address book?

A persons real name is not part of the FROM: address. That should get converted from within the email application you are using. Wouldn't this mean that your computer is the one infected?

Re: Emails from Bill Buckels

<ee648a81-aeac-44d6-93a5-58b796eae13en@googlegroups.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=4230&group=comp.sys.apple2#4230

 copy link   Newsgroups: comp.sys.apple2
X-Received: by 2002:ae9:e411:0:b0:67e:616f:400a with SMTP id q17-20020ae9e411000000b0067e616f400amr1835671qkc.645.1648083388523;
Wed, 23 Mar 2022 17:56:28 -0700 (PDT)
X-Received: by 2002:a37:b93:0:b0:67b:3129:68ff with SMTP id
141-20020a370b93000000b0067b312968ffmr1794744qkl.162.1648083388374; Wed, 23
Mar 2022 17:56:28 -0700 (PDT)
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!border2.nntp.dca1.giganews.com!nntp.giganews.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.apple2
Date: Wed, 23 Mar 2022 17:56:28 -0700 (PDT)
In-Reply-To: <6efdb55f-9f5a-49ce-b9f4-76ccc0dbebb8n@googlegroups.com>
Injection-Info: google-groups.googlegroups.com; posting-host=2605:b100:915:dc7e:ed50:12c9:fb36:e917;
posting-account=gfImqAoAAADLPQA4QYpvBjZaDWiOEyxM
NNTP-Posting-Host: 2605:b100:915:dc7e:ed50:12c9:fb36:e917
References: <dog_cow-1648051262@macgui.com> <2e74a798-d6ac-4f7a-bb67-dce2e1264d4bn@googlegroups.com>
<dog_cow-1648064503@macgui.com> <6efdb55f-9f5a-49ce-b9f4-76ccc0dbebb8n@googlegroups.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <ee648a81-aeac-44d6-93a5-58b796eae13en@googlegroups.com>
Subject: Re: Emails from Bill Buckels
From: waynejst...@gmail.com (waynej...@gmail.com)
Injection-Date: Thu, 24 Mar 2022 00:56:28 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Lines: 9
 by: waynej...@gmail.com - Thu, 24 Mar 2022 00:56 UTC

Sometimes the name on an email address comes from your address book but not always. I’ve had a number of emails that have names but they aren’t in my address book.

For phone numbers, there’s devices out there that can make a phone call look like it’s coming from any number. Often scammers use random numbers. Last year I had a couple of Revenue Canada scam calls, one showed it as coming from a grocery store, the other a restaurant. Took one of the calls on the hands device in my car. It was so bad that the 7 year old girl with me could tell it wasn’t real.

Re: Emails from Bill Buckels

<dog_cow-1648084541@macgui.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=4231&group=comp.sys.apple2#4231

 copy link   Newsgroups: comp.sys.apple2
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: dog_...@macgui.com (D Finnigan)
Newsgroups: comp.sys.apple2
Subject: Re: Emails from Bill Buckels
Date: Thu, 24 Mar 2022 01:15:42 -0000 (UTC)
Organization: Mac GUI
Lines: 16
Message-ID: <dog_cow-1648084541@macgui.com>
References: <dog_cow-1648051262@macgui.com> <2e74a798-d6ac-4f7a-bb67-dce2e1264d4bn@googlegroups.com> <ee648a81-aeac-44d6-93a5-58b796eae13en@googlegroups.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 24 Mar 2022 01:15:42 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="5ddcea9ccfe576fa27aeebcaa14e539f";
logging-data="25259"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/GCCIpi2sFfUYI/9JK0O1p"
User-Agent: Mac GUI Usenet
Cancel-Lock: sha1:C6DFPAAfw46PmX7sugbZz8DZeL0=
In-Reply-To: <ee648a81-aeac-44d6-93a5-58b796eae13en@googlegroups.com>
 by: D Finnigan - Thu, 24 Mar 2022 01:15 UTC

waynej...@gmail.com wrote:
> Sometimes the name on an email address comes from your address book but
> not
> always. I’ve had a number of emails that have names but they aren’t in my
> address book.

It's like writing on a paper envelope. You can write any return address you
want. And with varying levels of additional effort, you can mail it from any
post office. The From line in an email header can contain any name, any
address. Here's another From line from another one of the scam emails. It's
a totally different email address:

From: "Bill Buckels" <Lois.Pukansky@gatogordo.com>

Blame it on the Russians. :-/ That domain resolves to a Russian ISP.

Re: Emails from Bill Buckels

<6694439b-2500-450b-a054-a65e84df3f71n@googlegroups.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=4550&group=comp.sys.apple2#4550

 copy link   Newsgroups: comp.sys.apple2
X-Received: by 2002:a05:620a:17a4:b0:6b6:7ef7:643 with SMTP id ay36-20020a05620a17a400b006b67ef70643mr3273422qkb.759.1659005414011;
Thu, 28 Jul 2022 03:50:14 -0700 (PDT)
X-Received: by 2002:a05:620a:270b:b0:6b5:d5aa:6d2a with SMTP id
b11-20020a05620a270b00b006b5d5aa6d2amr19619140qkp.179.1659005413801; Thu, 28
Jul 2022 03:50:13 -0700 (PDT)
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!feed1.usenet.blueworldhosting.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.apple2
Date: Thu, 28 Jul 2022 03:50:13 -0700 (PDT)
In-Reply-To: <dog_cow-1648084541@macgui.com>
Injection-Info: google-groups.googlegroups.com; posting-host=74.120.7.131; posting-account=lfN1DgkAAAAuU7dh9hSE-dqv44ZCj35R
NNTP-Posting-Host: 74.120.7.131
References: <dog_cow-1648051262@macgui.com> <2e74a798-d6ac-4f7a-bb67-dce2e1264d4bn@googlegroups.com>
<ee648a81-aeac-44d6-93a5-58b796eae13en@googlegroups.com> <dog_cow-1648084541@macgui.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <6694439b-2500-450b-a054-a65e84df3f71n@googlegroups.com>
Subject: Re: Emails from Bill Buckels
From: bbuck...@escape.ca (Bill Buckels)
Injection-Date: Thu, 28 Jul 2022 10:50:13 +0000
Content-Type: text/plain; charset="UTF-8"
X-Received-Bytes: 1712
 by: Bill Buckels - Thu, 28 Jul 2022 10:50 UTC

On Wednesday, March 23, 2022 at 8:15:44 PM UTC-5, D Finnigan wrote:

>Blah, Blah, Blah

It must have been a slow day in the Apple II Community to use my name as an OT post lol :)

I am writing to advise you that my new email is now bill @clipshop.ca

My old email(s) (bbuckels @mymts.net) (bbuckels @mts.net) (bbuckels @escape.ca) will cease to exist shortly.

Please update all records to now use bill @clipshop.ca

Thank you.

All the Best,

William James (Bill) Buckels

1
server_pubkey.txt

rocksolid light 0.9.7
clearnet tor