Nicholas Knouf on Mon, 13 Dec 2010 15:42:20 +0100 (CET)


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: <nettime> Wikileaks and spam


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/12/2010 10:31 PM, Joly MacFie wrote:
> That IP address is, indeed, on the Spamhaus block list, but it isn't because
> of Wikileaks -- it is because the address is in an IP address range
> belonging to a Russian ISP that is part of an alleged criminal enterprise
> specializing in distribution of spam, botnets, phising, and malware.   The
> machines in that range do distribute spam and bad software.  Whether or not
> there is really a wikileaks mirror there or not is not something I do not
> intend to check -- even if there is a mirror, there is a good possibility
> the documents have been seeded with malware.

- From the wikileaks.info about page:

"This site is not affiliated with Wikileaks. It is hosted on a different
server, uses different DNS servers, a different registrar and has a
different owner. So if Wikileaks is not reachable any more (due to
technical or due to legal reasons), you can try different links from
this site. "

It would appear to be a solidarity site that simply hosts the IP
addresses of different "official" wikileaks sites.

And it would be hard for the documents to be seeded with malware; all of
the Cablegate mirrors are serving straight HTML---no PDFs, no DOCs, etc.
 Only a single archive file with torrents of their earlier releases.
Different unscrupulous mirror providers could do something malicious
with the files once they are uploaded to their server, but this is
nothing different than connecting to any other server on the internet.
This sounds similar to the "OMG the CIA setup a honey-pot wikileaks
mirror" brouhaha that was the result of---willful or
not---misinformation; see
http://breakingthecalm.blogspot.com/2010/12/musing-on-misinformation-morons.html
.

Anyone hosting a WikiLeaks mirror on a home cable or DSL connection will
also probably come from an IP within a spam blocklist because so much
spam comes from compromised home machines.

nick
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk0Fq5sACgkQoHDFiKQ8nMkZDgCcC06eviet0OzLhy/bOCiqFTlC
iYYAn1bDs2H8g5zJ8i3+NnxxskT57Pjz
=eEOs
-----END PGP SIGNATURE-----





#  distributed via <nettime>: no commercial use without permission
#  <nettime>  is a moderated mailing list for net criticism,
#  collaborative text filtering and cultural politics of the nets
#  more info: http://mail.kein.org/mailman/listinfo/nettime-l
#  archive: http://www.nettime.org contact: nettime@kein.org