EEVblog Electronics Community Forum

General => General Technical Chat => Topic started by: EEVblog on February 05, 2020, 11:40:07 pm

Title: EEVblog Impersonation SCAM!
Post by: EEVblog on February 05, 2020, 11:40:07 pm
WARNING!
Someone is using a fake email address pretending to be me, to contact companies to elicit confidential technical information from them.
This is NOT my email address or email footer.

They got away with this and the company sent the confidential technical info requested. I only found out because the company copied my normal email address into the correspondence.

Rather clever actually.

[attachimg=1]
Title: Re: EEVblog Impersonation SCAM!
Post by: SilverSolder on February 05, 2020, 11:49:00 pm

In the olden days, they used to put criminals' heads on spikes along the Tower Bridge in London, to discourage crime...
Title: Re: EEVblog Impersonation SCAM!
Post by: chickenHeadKnob on February 06, 2020, 02:06:00 am
You may be reluctant to share more I can understand, but I remain curious. Was this phishing  trying to get information typically sought by nation state actors or more commercial in nature?
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 06, 2020, 02:07:50 am
You may be reluctant to share more I can understand, but I remain curious. Was this phishing  trying to get information typically sought by nation state actors or more commercial in nature?

 ;D not nation state level!
Title: Re: EEVblog Impersonation SCAM!
Post by: Whales on February 06, 2020, 03:02:15 am
Schematics for the new Australian submarines.  For some reason all of the electrical diagrams look like organisational charts.
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 06, 2020, 03:22:09 am
Does anyone know of any solution for securely signing emails automatically from within gmail?
(No, I'm not going to ditch gmail and use PGP or some other email client)
Title: Re: EEVblog Impersonation SCAM!
Post by: coppercone2 on February 06, 2020, 04:48:37 am
best I can think of is a VBS script or something that will put it on your copy-paste after clicking from start menu or quick start on a windows (or linux if a script can do it). So you can click a signature icon and paste. Also may be possible to put it in the browser, but I think you would need to paste. Unless you can use a hotkey macro for a shift combo to paste it in, but that might be annoying to setup

perhaps someone can make a browser plugin? Can a VBS script on windows take copied text, put it into a processing program and replace the memory with a key?
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 06, 2020, 05:10:21 am
best I can think of is a VBS script or something that will put it on your copy-paste after clicking from start menu or quick start on a windows (or linux if a script can do it). So you can click a signature icon and paste. Also may be possible to put it in the browser, but I think you would need to paste. Unless you can use a hotkey macro for a shift combo to paste it in, but that might be annoying to setup
perhaps someone can make a browser plugin? Can a VBS script on windows take copied text, put it into a processing program and replace the memory with a key?

Put what in my email? A unique key?
The way I figure something like this would work is that in the footer of my email there is a unique key generated with each email that is tied to my private key. The recipient then has the option to check that code against my private key held on some secure website somewhere. Does such a thing exist?
Doesn't of course stop someone from ding exactly what they do in this case, as every recipient would have to know that I always include a verification key in the email footer for example.
Title: Re: EEVblog Impersonation SCAM!
Post by: coppercone2 on February 06, 2020, 05:52:50 am
I thought thats what a PGP thing was? I thought you have private seed that makes a public thing that links to some modified seed available for everyone, which you would have on your website

I just meant you make a VBS script to open the gen program, put the gen on your copy paste, and paste it (and possibly use the email contents in addition to your private seed).. so you only need to hit one button to get something you can CTRL-V.. I was thinking it could be on the quick-launch bar so its always on the screen

not sure what is the easiest most available one that has a app or web applet.. then someone would need to paste your message signature and your public key into a application to see if they correlate

you could.. put a verification program on your website (is this message from dave jones?), so people don't need to find your public key every time

problem with all of this is that most bozos that use NDA to hide things.. are probably gonna take it at face value and not check it

You might actually increase security if you keep your public key private and make your website verify the key. Not sure though. That way they can only submit a key and see if it unlocks. Maybe some algorithms are better then others for this, but I have NO idea if its considered security through obscurity or if it makes it mathematically more difficult, or how to reverse engineer a pubic key from a signature or if you can 'hash' your plaintext to make a unqiue signature (i.e. like add MD5 to it).


Just thinking about it in terms of analogies, one is some kinda thing included in a cereal box with a bunch of mathematicians, the other is sliding a message under a door and seeing if it opens.... you could randomly change the decryption machinery etc if you have no public key and use your website and signatures only. Might piss someone off lol. Does give incentive to hack your website though, since it would be a curiosity to see what the hell you are doing. But I think you could essentially use a uncrackable one time pad if you did it yourself. And it could not blog down servers, since it would just be comparing plain text to shit on a list very fast (so catchpa)
Title: Re: EEVblog Impersonation SCAM!
Post by: magic on February 06, 2020, 07:48:09 am
Does anyone know of any solution for securely signing emails automatically from within gmail?
(No, I'm not going to ditch gmail and use PGP or some other email client)
The fundamental problem with signatures is that somebody has to check them. Don't ask how to create one in gmail (you probably can't anyway), ask how to create one which will be verified by every mail client that your collaborators might be using ::)

This wouldn't have happened if those people verified as much as the address they are responding to.
Title: Re: EEVblog Impersonation SCAM!
Post by: Halcyon on February 06, 2020, 08:15:36 am
Dave, I know you have a number of email addresses, but do you think it's perhaps time you use something like Google G Suite and have email connected to your own domain?

You're talking $8.40 per month for a single user and with that, you can have up to 30 aliases. For example, you might have djones@eevblog as your user, but then have aliases such as info@eevblog, store@eevblog, etc... You can even "send as" your aliases if you like and all email just gets delivered into your primary inbox.
Title: Re: EEVblog Impersonation SCAM!
Post by: PA0PBZ on February 06, 2020, 08:21:43 am
Dave, I know you have a number of email addresses, but do you think it's perhaps time you use something like Google G Suite and have email connected to your own domain?

That would not help at all in this case.
Title: Re: EEVblog Impersonation SCAM!
Post by: Halcyon on February 06, 2020, 08:41:39 am
Dave, I know you have a number of email addresses, but do you think it's perhaps time you use something like Google G Suite and have email connected to your own domain?

That would not help at all in this case.

Absolutely it would. Anyone can sign up for an @gmail.com address that looks half-way genuine. Only Dave can use an @eevblog.com email address.

It gives credibility to those with their own domain/business.
Title: Re: EEVblog Impersonation SCAM!
Post by: nctnico on February 06, 2020, 08:55:59 am
Dave, I know you have a number of email addresses, but do you think it's perhaps time you use something like Google G Suite and have email connected to your own domain?

That would not help at all in this case.

Absolutely it would. Anyone can sign up for an @gmail.com address that looks half-way genuine. Only Dave can use an @eevblog.com email address.

It gives credibility to those with their own domain/business.
Agreed. But it is still up to the recipient to verify whether an e-mail is legit or not.
Title: Re: EEVblog Impersonation SCAM!
Post by: magic on February 06, 2020, 09:10:48 am
Dave, I know you have a number of email addresses, but do you think it's perhaps time you use something like Google G Suite and have email connected to your own domain?

You're talking $8.40 per month for a single user and with that, you can have up to 30 aliases. For example, you might have djones@eevblog

I humbly propose dave@eevblog.com ;)

https://www.eevblog.com/about/contact/ (https://www.eevblog.com/about/contact/)
Title: Re: EEVblog Impersonation SCAM!
Post by: RoGeorge on February 06, 2020, 09:29:28 am
Hello Company,

Dave from EEVblog, here.
From now on, please send any oscilloscope dumpster to RoGeorge.  PM for the exact address.

Thank you!
Sincerely, Dave (not RoGeorge)
EEVblog - Sydney, Australia
Contact:  https://www.eevblog.com/forum/pm/?sa=send;u=112927 (https://www.eevblog.com/forum/pm/?sa=send;u=112927)

 ;D
Title: Re: EEVblog Impersonation SCAM!
Post by: NivagSwerdna on February 06, 2020, 10:25:20 am
The email is actually from you; you have just discovered that you are a clone.... One of many Dave Jones roaming the dumpster rooms of the planet.

PS
What was the info? Candid photos of the insides of spectrum analysers with their back panels removed?
Title: Re: EEVblog Impersonation SCAM!
Post by: RoGeorge on February 06, 2020, 10:36:20 am
The email is actually from you [yourself]

That was exactly my first thought, too, but slightly different:

https://www.youtube.com/watch?v=SUXWAEX2jlg (https://www.youtube.com/watch?v=SUXWAEX2jlg)

Great movie.  Almost any line in it is quotable.
Title: Re: EEVblog Impersonation SCAM!
Post by: ogden on February 06, 2020, 10:51:15 am
Right. First step of solution - avoid @aol, @google, @whatever for "official business" by any means. All mailboxes (https://www.eevblog.com/about/contact/) have to be on company domain only. Current situation allows very simple phishing attacks. Next time it can be goods or money redirection.
Title: Re: EEVblog Impersonation SCAM!
Post by: AndyC_772 on February 06, 2020, 11:04:44 am
I'm curious. What kind of information constitutes being tagged and treated as "confidential", but is nevertheless OK to send by email to a guy with a Youtube channel just because "he" asks for it out of the blue?
Title: Re: EEVblog Impersonation SCAM!
Post by: ebastler on February 06, 2020, 11:14:07 am
The way I figure something like this would work is that in the footer of my email there is a unique key generated with each email that is tied to my private key. The recipient then has the option to check that code against my private key held on some secure website somewhere. Does such a thing exist?

Doesn't of course stop someone from ding exactly what they do in this case, as every recipient would have to know that I always include a verification key in the email footer for example.

I quite like the idea. You wouldn't actually need any private/public key; it would be more like a one-time pad: Generate a unique ID for each message and embed it in a link which you include in the message, in plain text. When the user clicks that link, the get directed to a web page (which would, of course, need to be on your domain, as a proof of authenticity), which displays some confirming bits of information to the recipient. Like "Yes, this is a genuine message from Dave, sent on ... at ... time to ... recipient".

The real authentication and security lies in the fact that your server is protected from 3rd party access, and that information coming from your server/domain can be clearly linked to you.

But as you say -- the weak spot is that recipients who don't even know of the existence of this scheme would still fall for phishing emails which don't include it.
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 06, 2020, 11:26:52 am
I'm curious. What kind of information constitutes being tagged and treated as "confidential", but is nevertheless OK to send by email to a guy with a Youtube channel just because "he" asks for it out of the blue?

Basically it comes down to personal and business trust. Trust without a contract/NDA etc like this is done all the time in the industry.
Legally it's called Commercial-in-Confidence, and is commonly marked on company documents, even resume's etc.
Although whether or not the actual material is marked as such and how that stands legally is up to a judge to decide.

Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 06, 2020, 11:28:02 am
UPDATE!

Because people are inherently stupid (and my middle name is Sherlock Ohms), it didn't take me long to discover who impersonated me!
I have their real gmail address, now what ever shall I do...
I'm willing to bet it's a crime in the state of Illinois.
Title: Re: EEVblog Impersonation SCAM!
Post by: RoGeorge on February 06, 2020, 11:35:18 am
Send them a glitter/stink bomb!

https://www.youtube.com/watch?v=a_TSR_v07m0 (https://www.youtube.com/watch?v=a_TSR_v07m0)

:-DD
Title: Re: EEVblog Impersonation SCAM!
Post by: mariush on February 06, 2020, 11:36:49 am
IS your email  @ eevblog.com  or @ gmail.com ?

You should be able to use gmail with your own domain.

Personally, I use fastmail.com with the 5$ a month subscription and tied that to a domain I bought, so I have several aliases ex  marius@ my domain .com  going to a single account.

fastmail as far as i know was launched by the people that made Opera, and works fine for me.
Title: Re: EEVblog Impersonation SCAM!
Post by: magic on February 06, 2020, 11:37:22 am
Because people are inherently stupid (and my middle name is Sherlock Ohms), it didn't take me long to discover who impersonated me!
I have their real gmail address, now what ever shall I do...
How is that even possible? |O :-DD
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 06, 2020, 11:57:04 am
IS your email  @ eevblog.com  or @ gmail.com ?

I use @eevblog.com for almost everything.
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 06, 2020, 11:57:53 am
Because people are inherently stupid (and my middle name is Sherlock Ohms), it didn't take me long to discover who impersonated me!
I have their real gmail address, now what ever shall I do...
How is that even possible? |O :-DD

Because I'm good  ;D
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 06, 2020, 12:45:48 pm
And I'm now watching in real time as he tries to erase the evidence trail  :palm:  :-DD
Title: Re: EEVblog Impersonation SCAM!
Post by: ebastler on February 06, 2020, 12:49:37 pm
IS your email  @ eevblog.com  or @ gmail.com ?

I use @eevblog.com for almost everything.

But there still is an "eevblog@gmail.com" address, right? Shows up in various contexts in a web search, including the registration data of eevblog.com.

So the impersonator's choice of email address was not totally absurd. They got that part right -- but apparently not much more...  ;)
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 06, 2020, 12:58:56 pm
I use @eevblog.com for almost everything.
But there still is an "eevblog@gmail.com" address, right? Shows up in various contexts in a web search, including the registration data of eevblog.com.
So the impersonator's choice of email address was not totally absurd. They got that part right -- but apparently not much more...  ;)

Yes, that address is certainly no secret, but it's not the one that most companies would have seen me use in correspondence with them.

And yep, they didn't cover their tracks very well, I even have photo evidence now that ties them to it.
It's rather hilarious, I sent them an email and what do you know, an hour later they are trying to cover their tracks, all captured and documented of course  ;D
Title: Re: EEVblog Impersonation SCAM!
Post by: rsjsouza on February 06, 2020, 01:06:34 pm
[attachimg=1]
Title: Re: EEVblog Impersonation SCAM!
Post by: SilverSolder on February 06, 2020, 01:08:43 pm

Do the police or other authorities in Australia actually do anything about these kinds of crimes?  Even if the evidence is served on a silver platter?


Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 06, 2020, 01:12:51 pm
Do the police or other authorities in Australia actually do anything about these kinds of crimes?  Even if the evidence is served on a silver platter?

When it involves someone overseas on the internet, nah. It would be a job for the Illinois police.
Title: Re: EEVblog Impersonation SCAM!
Post by: dr.diesel on February 06, 2020, 04:44:20 pm
When it involves someone overseas on the internet, nah. It would be a job for the Illinois police.

Have you reported the details to the IL police?

Though I'd be shocked if they actually do anything at all.
Title: Re: EEVblog Impersonation SCAM!
Post by: G7PSK on February 06, 2020, 04:47:50 pm
Dave you need to contact PBS space time, this must be proof of a multiverse and what you have here is bleed through on the internets. :-DD
Title: Re: EEVblog Impersonation SCAM!
Post by: nigelwright7557 on February 06, 2020, 06:14:47 pm

In the olden days, they used to put criminals' heads on spikes along the Tower Bridge in London, to discourage crime...

Then later they just sent them to Oz !
Title: Re: EEVblog Impersonation SCAM!
Post by: Cyberdragon on February 06, 2020, 07:06:01 pm
UPDATE!

Because people are inherently stupid (and my middle name is Sherlock Ohms), it didn't take me long to discover who impersonated me!
I have their real gmail address, now what ever shall I do...

Email Bomber (auto-spam subscriber) >:D
Title: Re: EEVblog Impersonation SCAM!
Post by: andy3055 on February 06, 2020, 07:06:50 pm
Dave,
If it is someone in Illinois, please check this link. I believe you can lodge a complaint.

http://www.illinoisattorneygeneral.gov/consumers/index.html (http://www.illinoisattorneygeneral.gov/consumers/index.html)
Title: Re: EEVblog Impersonation SCAM!
Post by: dr.diesel on February 06, 2020, 07:30:14 pm
Dave,
If it is someone in Illinois, please check this link. I believe you can lodge a complaint.

I live in South West Indiana if that doesn't work,  :box:
Title: Re: EEVblog Impersonation SCAM!
Post by: fcb on February 06, 2020, 07:45:40 pm
So do they work for a potential competitor of XXX?  Would their employer have sanctioned their charade?

Does the infomation they requested give them a financial advantage? Or is just someone pissed they can't get the schematics of a 15year old boat-anchor?

https://www.youtube.com/watch?v=7XjW43YUgUA (https://www.youtube.com/watch?v=7XjW43YUgUA)
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 06, 2020, 10:21:20 pm
I heard from the impersonator!

You guessed it, the classic defense  :-DD

Quote
I can assure you it was not me. This account was hacked recently.
Here is what I found:
A user has just signed in to your Google Account from a new device. We are sending you this email to verify that it is you.
Location : Australia

I had to reset password and all other info.
I apologize for any inconvenience.

So funny. I can literally see him trying to delete photo evidence that ties him directly to it an hour after I sent him an email :popcorn:
Title: Re: EEVblog Impersonation SCAM!
Post by: andy3055 on February 06, 2020, 10:57:43 pm
There is a saying that the woodpecker learns its lesson when it pecks the banana tree! :-DD
Title: Re: EEVblog Impersonation SCAM!
Post by: thm_w on February 06, 2020, 11:03:17 pm
Was this one of those trolls thats been following you for years or you've banned from this forum?

I would do the same thing as in the glitter video, sign them up for scientology books and some flagrant post cards.
Title: Re: EEVblog Impersonation SCAM!
Post by: rhodges on February 07, 2020, 12:20:42 am
Quote
I would do the same thing as in the glitter video, sign them up for scientology books and some flagrant post cards.
Buy a subscription to a sleeazy porn magazine ("alternative?") with his name, but his address has a typo and it "accidentally" goes to his neighbor's address.
Title: Re: EEVblog Impersonation SCAM!
Post by: Ed.Kloonk on February 07, 2020, 03:09:35 am
Because people are inherently stupid (and my middle name is Sherlock Ohms), it didn't take me long to discover who impersonated me!
I have their real gmail address, now what ever shall I do...
How is that even possible? |O :-DD

Because I'm good  ;D

FIGJAM!
Title: Re: EEVblog Impersonation SCAM!
Post by: Ed.Kloonk on February 07, 2020, 03:20:42 am
I heard from the impersonator!

You guessed it, the classic defense  :-DD

Quote
I can assure you it was not me. This account was hacked recently.
Here is what I found:
A user has just signed in to your Google Account from a new device. We are sending you this email to verify that it is you.
Location : Australia

I had to reset password and all other info.
I apologize for any inconvenience.

So funny. I can literally see him trying to delete photo evidence that ties him directly to it an hour after I sent him an email :popcorn:

[attachimg=1]

Send him to Joliet where he can hang out with with Jake and Elwood.

https://www.youtube.com/watch?v=hjLruk4uZzQ (https://www.youtube.com/watch?v=hjLruk4uZzQ)

It wasn't my fault..

https://www.youtube.com/watch?v=4U9Yl5CXvcQ (https://www.youtube.com/watch?v=4U9Yl5CXvcQ)
Title: Re: EEVblog Impersonation SCAM!
Post by: Brumby on February 07, 2020, 04:16:22 am

It wasn't my fault..

https://www.youtube.com/watch?v=4U9Yl5CXvcQ (https://www.youtube.com/watch?v=4U9Yl5CXvcQ)

NAILED IT!!   :-DD
Title: Re: EEVblog Impersonation SCAM!
Post by: Wollvieh on February 08, 2020, 01:54:35 pm
I'm curious. What kind of information constitutes being tagged and treated as "confidential", but is nevertheless OK to send by email to a guy with a Youtube channel just because "he" asks for it out of the blue?

Maybe some redneck trying to get the schematics for his barbed wire fence. As the manufacturer insisted on "it's just wire, it won't give you shocks like in that video from that crazy aussie bloke."
Title: Re: EEVblog Impersonation SCAM!
Post by: GlennSprigg on February 08, 2020, 03:02:42 pm
I used to easily track down certain scumbags, and my 1st port of call was the particular
server/host/admin with the details. Unfortunately, 99% of them couldn't give a shit, and
NEVER respond!  So NOW, be-it illegal or not, I will just utterly BOMB them with 500,000
responses from an untraceable source/software. Illegal?????  PPHHTT!!!! Fuck them!!!

Even major Banking Scammers etc etc... I would report the 'underlying' scums 'details' down
to specific 'individuals' from a particular 'university' Server, but NO-ONE EVER replied to me,
even when reporting to various highest level system administrators/companies etc...   |O
Title: Re: EEVblog Impersonation SCAM!
Post by: SilverSolder on February 08, 2020, 05:23:22 pm
I used to easily track down certain scumbags, and my 1st port of call was the particular
server/host/admin with the details. Unfortunately, 99% of them couldn't give a shit, and
NEVER respond!  So NOW, be-it illegal or not, I will just utterly BOMB them with 500,000
responses from an untraceable source/software. Illegal?????  PPHHTT!!!! Fuck them!!!

Even major Banking Scammers etc etc... I would report the 'underlying' scums 'details' down
to specific 'individuals' from a particular 'university' Server, but NO-ONE EVER replied to me,
even when reporting to various highest level system administrators/companies etc...   |O

Until somebody "important" gets hit by a scammer, it will not receive any priority whatsoever from the "official world". 
Title: Re: EEVblog Impersonation SCAM!
Post by: coppercone2 on February 08, 2020, 06:28:01 pm
I'm curious. What kind of information constitutes being tagged and treated as "confidential", but is nevertheless OK to send by email to a guy with a Youtube channel just because "he" asks for it out of the blue?

realistically unless its considered a military/state secret, its at the discretion of sales guys. There might be company bi-laws but they can probably be violated without repercussion if it looks like it will make business relationships. No actual engineer wants secrets because its always better to have analysis and technological developments, when you share information you get applications information and possibly design improvements. The more people know about something the more likely it is to be developed and more creativity is applied to a problem. If you get a creative sales application from someone, you can probably sell more product since the person that made the NDA has capital costs down.Or R&D costs go down when someone makes an improvement. It's like having another engineer on your team for FREE when there is no secret.

On the other hand, letting people know exact missile range or radar cross sections is a bad thing.

It would make sense to let Dave Jones know about a NDA because he is good at applications, is an active product developer (i.e. he sells test equipment he designed).. its not like he has a chip fab ready to pump silicon.. more like you might get some sales with parts inside of a gadget he designed. It might make a gadget sale possible if anything. Say you have a new isolation amplifier that he might make a ver 2.0 of the isolation probe with improved specifications. It's esoteric technicians tools...
Title: Re: EEVblog Impersonation SCAM!
Post by: coppercone2 on February 08, 2020, 06:53:48 pm
Do the police or other authorities in Australia actually do anything about these kinds of crimes?  Even if the evidence is served on a silver platter?

When it involves someone overseas on the internet, nah. It would be a job for the Illinois police.

could even be a FBI crime, possibly. Say it has ties to chinese industrial espionage..
Title: Re: EEVblog Impersonation SCAM!
Post by: Halcyon on February 08, 2020, 10:08:27 pm

Do the police or other authorities in Australia actually do anything about these kinds of crimes?  Even if the evidence is served on a silver platter?

Generally no. The time and effort involved would outweigh the end result. It's really not that important. Perhaps if it was more serious or there was significant loss to a company, then maybe.

Coordinating between international law enforcement agencies isn't a simple task and is generally reserved for serious matters.
Title: Re: EEVblog Impersonation SCAM!
Post by: Nominal Animal on February 08, 2020, 11:17:35 pm
In my opinion, the proper response here is to let the swindled company know exactly who swindled them, and let them decide if they care.

If someone does it twice (I mean as in at least two separate scams where they impersonate you), then outing them publicly is warranted, IMO.
Title: Re: EEVblog Impersonation SCAM!
Post by: jancumps on February 08, 2020, 11:54:34 pm
Do the police or other authorities in Australia actually do anything about these kinds of crimes?  Even if the evidence is served on a silver platter?

When it involves someone overseas on the internet, nah. It would be a job for the Illinois police.

Gammel, you’re busted  :D
Title: Re: EEVblog Impersonation SCAM!
Post by: Nusa on February 09, 2020, 12:33:53 am
So NOW, be-it illegal or not, I will just utterly BOMB them with 500,000
responses from an untraceable source/software. Illegal?????  PPHHTT!!!! Fuck them!!!

Your victim might not have even have noticed such a obvious retaliation, unless they looked in their spam folder. Gmail hosts are actually GOOD at detecting and removing spam mail from view. That's actually the number one reason I use it myself. The number two reason is that it's an email address it isn't going away almost overnight if I have to move to a different ISP (learned that one the hard way, sadly).

Title: Re: EEVblog Impersonation SCAM!
Post by: Cyberdragon on February 09, 2020, 01:41:27 am
So NOW, be-it illegal or not, I will just utterly BOMB them with 500,000
responses from an untraceable source/software. Illegal?????  PPHHTT!!!! Fuck them!!!

Your victim might not have even have noticed such a obvious retaliation, unless they looked in their spam folder. Gmail hosts are actually GOOD at detecting and removing spam mail from view. That's actually the number one reason I use it myself. The number two reason is that it's an email address it isn't going away almost overnight if I have to move to a different ISP (learned that one the hard way, sadly).

Email bombers are nasty (look up list linking). They can spam you with anything and everything, they find anywhere they can input an email and sign you up. Even if Google filtered 90% of it, your email would still be destroyed.
Title: Re: EEVblog Impersonation SCAM!
Post by: Nominal Animal on February 09, 2020, 04:18:34 am
Using spam to retaliate is a bad weapon, because it helps the spammers.

The help spammers actually need, in my opinion, is a bullet to the head.  Don't be a spammer.
Title: Re: EEVblog Impersonation SCAM!
Post by: Muttley Snickers on February 09, 2020, 05:22:21 am
Do the police or other authorities in Australia actually do anything about these kinds of crimes?  Even if the evidence is served on a silver platter?
When it involves someone overseas on the internet, nah. It would be a job for the Illinois police.

It sounds like a job for this mob.   :wtf:
When it comes to liar pants on fire nobody can surpass the questionable methods and antics employed by Metro State. Also, check out the other videos on Real World Police, the comments sections are just hilarious. A warning, the video linked below contains strong language and disturbing behaviour. 

https://www.youtube.com/watch?v=ifG-6D7LJy8 (https://www.youtube.com/watch?v=ifG-6D7LJy8)
Title: Re: EEVblog Impersonation SCAM!
Post by: bitwelder on February 09, 2020, 08:11:48 am
Does anyone know of any solution for securely signing emails automatically from within gmail?
(No, I'm not going to ditch gmail and use PGP or some other email client)

Even if you send mails from your own domain @eevblog.com, where you could set provisions like SPF, DKIM, DMARC which essentially announce to the world of mail servers (at least those that care to check) that the only legit mails from Dave are sent from some specific email servers, it would still not cover phishing attempts like this one where the recipient doesn't know (and has no wish to spend time to verify) whether an email from some Dave Jones @gmail/@yahoo/@hotmail is from the trusted person they know.
And this situation is further aggravated by some email clients (especially those popular in the corporate world...)  that try to be 'user friendly' and hide the full email address.
Title: Re: EEVblog Impersonation SCAM!
Post by: ogden on February 09, 2020, 08:37:41 am
it would still not cover phishing attempts like this one where the recipient doesn't know (and has no wish to spend time to verify) whether an email from some Dave Jones @gmail/@yahoo/@hotmail is from the trusted person they know.
Currently anyone can create "misspelled" e-mail accounts like eevblog.business@gmail.com, eevblog_business@gmail.com, eevblog-business@gmail.com and so on - to trick even those who knows. I would miss to notice "+" versus "." difference, however it is much harder to mistake @google.com with @eevblog.com.
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 09, 2020, 10:07:41 am
it would still not cover phishing attempts like this one where the recipient doesn't know (and has no wish to spend time to verify) whether an email from some Dave Jones @gmail/@yahoo/@hotmail is from the trusted person they know.
Currently anyone can create "misspelled" e-mail accounts like eevblog.business@gmail.com, eevblog_business@gmail.com, eevblog-business@gmail.com and so on - to trick even those who knows. I would miss to notice "+" versus "." difference, however it is much harder to mistake @google.com with @eevblog.com.

When you send an email to eevblog@gmail.com or eevblog+business@gmail.com etc then you get a reply from dave@eevblog.com, I almost never send email from eevblog@gmail.com.
Title: Re: EEVblog Impersonation SCAM!
Post by: ogden on February 09, 2020, 10:16:48 am
it would still not cover phishing attempts like this one where the recipient doesn't know (and has no wish to spend time to verify) whether an email from some Dave Jones @gmail/@yahoo/@hotmail is from the trusted person they know.
Currently anyone can create "misspelled" e-mail accounts like eevblog.business@gmail.com, eevblog_business@gmail.com, eevblog-business@gmail.com and so on - to trick even those who knows. I would miss to notice "+" versus "." difference, however it is much harder to mistake @google.com with @eevblog.com.

When you send an email to eevblog@gmail.com or eevblog+business@gmail.com etc then you get a reply from dave@eevblog.com, I almost never send email from eevblog@gmail.com.

Are you sure every business partner knows that and are careful enough to suspect something fishy when he receives email from business.eevblog@gmail.com? How about misspelling like this: eevbIog@gmail.com ? What I am telling here: @gmail.com for business is not that good idea and it does not look reputable move as well.
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 09, 2020, 10:23:22 am
Are you sure every business partner knows that and are careful enough to suspect something fishy when he receives email from business.eevblog@gmail.com? How about misspelling like this: eevbIog@gmail.com ? What I am telling here: @gmail.com for business is not that good idea and it does not look reputable move as well.

It's essentially not my problem, it's their problem. One issue in over a decade is not cause to notify countless companies about.
As I said, I do NOT send business email from @gmail.com, it comes from @eevblog.com
Title: Re: EEVblog Impersonation SCAM!
Post by: ogden on February 09, 2020, 10:48:35 am
It's essentially not my problem, it's their problem. One issue in over a decade is not cause to notify countless companies about.
As I said, I do NOT send business email from @gmail.com, it comes from @eevblog.com

It is not only about issues. It is about looking cheap with google mailbox. Potential business partners who look your contacts page do not see big disclaimer "I write emails only from dave@eevblog.com, yet by business mailbox is my @gmail.com account. Be careful if you receive e-mails coming seemingly from my business account". That is brain**ck - send email to one address and expect reply from another e-mail domain(!). Whatever. It is face & security of your business, not mine. Peace.
Title: Re: EEVblog Impersonation SCAM!
Post by: ebastler on February 09, 2020, 06:10:36 pm
As I said, I do NOT send business email from @gmail.com, it comes from @eevblog.com

Didn‘t I just read in some other thread here, about someone’s difficulties registering or logging in on the forum, that they received an email from “eevblog.official@gmail.com”? Was that a fake?
Title: Re: EEVblog Impersonation SCAM!
Post by: ogden on February 09, 2020, 06:18:52 pm
As I said, I do NOT send business email from @gmail.com, it comes from @eevblog.com

Didn‘t I just read in some other thread here, about someone’s difficulties registering or logging in on the forum, that they received an email from “eevblog.official@gmail.com”? Was that a fake?
This post:
https://www.eevblog.com/forum/blog/so-my-eevblog-store-order-is-apparently-lost-in-transit-how-do-i-contact-dave/msg1603756/#msg1603756 (https://www.eevblog.com/forum/blog/so-my-eevblog-store-order-is-apparently-lost-in-transit-how-do-i-contact-dave/msg1603756/#msg1603756)
Title: Re: EEVblog Impersonation SCAM!
Post by: ebastler on February 09, 2020, 07:06:36 pm
No, actually I was referring to this one:
https://www.eevblog.com/forum/chat/forum-registration-issues/ (https://www.eevblog.com/forum/chat/forum-registration-issues/)

And this page gives plenty of official @gmail.com addresses for Dave and EEVblog:
https://www.eevblog.com/about/contact/ (https://www.eevblog.com/about/contact/)
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 09, 2020, 11:34:38 pm
And this page gives plenty of official @gmail.com addresses for Dave and EEVblog:
https://www.eevblog.com/about/contact/ (https://www.eevblog.com/about/contact/)

Again, and for the last time, that's for sending email to me.
When you get a reply it will come from @eevblog.com
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 09, 2020, 11:38:55 pm
It's essentially not my problem, it's their problem. One issue in over a decade is not cause to notify countless companies about.
As I said, I do NOT send business email from @gmail.com, it comes from @eevblog.com

It is not only about issues. It is about looking cheap with google mailbox. Potential business partners who look your contacts page do not see big disclaimer "I write emails only from dave@eevblog.com, yet by business mailbox is my @gmail.com account. Be careful if you receive e-mails coming seemingly from my business account". That is brain**ck - send email to one address and expect reply from another e-mail domain(!). Whatever. It is face & security of your business, not mine. Peace.

You summed it up nicely, "whatever".
Care factor zero about "looking cheap".
Title: Re: EEVblog Impersonation SCAM!
Post by: ogden on February 09, 2020, 11:48:44 pm
Again, and for the last time, that's for sending email to me.
When you get a reply it will come from @eevblog.com
For the last time: if you would use (as every other business) your domain @eevblog.com for *all* mailboxes, this thread would not even exist. Happily for you this incident was not about your documents, goods or money going wrong way (https://www.google.com/search?q=facebook+google+rimasauskas). Next time could be different. Just saying.
Title: Re: EEVblog Impersonation SCAM!
Post by: Mr. Scram on February 10, 2020, 12:00:32 am

In the olden days, they used to put criminals' heads on spikes along the Tower Bridge in London, to discourage crime...
It unfortunately didn't work for shit.
Title: Re: EEVblog Impersonation SCAM!
Post by: SilverSolder on February 10, 2020, 12:20:07 am

In the olden days, they used to put criminals' heads on spikes along the Tower Bridge in London, to discourage crime...
It unfortunately didn't work for shit.

Absolutely true, but it just feeeeels soooo gooood!!   :-DD
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 10, 2020, 04:19:36 am
Again, and for the last time, that's for sending email to me.
When you get a reply it will come from @eevblog.com
For the last time: if you would use (as every other business) your domain @eevblog.com for *all* mailboxes, this thread would not even exist.

Rubbish.
The company in question have never had an email from @gmail.com from me. I doubt they even know I have a gmail address.
They just didn't verify the email address, they would have fallen for it anyway regardless of whether it was @gmail @hotmail or a fake @eevbl0g.com
Title: Re: EEVblog Impersonation SCAM!
Post by: ebastler on February 10, 2020, 06:29:03 am
And this page gives plenty of official @gmail.com addresses for Dave and EEVblog:
https://www.eevblog.com/about/contact/ (https://www.eevblog.com/about/contact/)

Again, and for the last time, that's for sending email to me.
When you get a reply it will come from @eevblog.com

Sure. And that's clear as mud to anyone who might want to check the viability of the sender address of an email which claims to come from you.  ::)
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 10, 2020, 06:47:08 am
And this page gives plenty of official @gmail.com addresses for Dave and EEVblog:
https://www.eevblog.com/about/contact/ (https://www.eevblog.com/about/contact/)

Again, and for the last time, that's for sending email to me.
When you get a reply it will come from @eevblog.com

Sure. And that's clear as mud to anyone who might want to check the viability of the sender address of an email which claims to come from you.  ::)

 :palm:

They are all listed on my damn website in the Contact page, as well as being blatantly obvious to even Stevie Wonder that @eevblog.com is my official website.
It's extremely common practice for people to have multiple domain emails these days, and anyone with any modicum of intelligence knows this.
Title: Re: EEVblog Impersonation SCAM!
Post by: ebastler on February 10, 2020, 07:00:14 am
:palm:

They are all listed on my damn website in the Contact page, as well as being blatantly obvious to even Stevie Wonder that @eevblog.com is my official website.
It's extremely common practice for people to have multiple domain emails these days, and anyone with any modicum of intelligence knows this.

Not sure why you feel the need to face-palm me and question my intelligence. I don't think I have insulted you in any similar way.

It was you who got excited about the impersonation scam (understandably so), and there is no doubt that your generous use of generic gmail addresses does not help to provide clarity to email recipients. Frankly, I don't understand why you don't transition to "@eevblog.com" addresses throughout. They provide a "seal of authenticity", and help your brand.
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 10, 2020, 07:38:52 am
:palm:

They are all listed on my damn website in the Contact page, as well as being blatantly obvious to even Stevie Wonder that @eevblog.com is my official website.
It's extremely common practice for people to have multiple domain emails these days, and anyone with any modicum of intelligence knows this.

Not sure why you feel the need to face-palm me and question my intelligence. I don't think I have insulted you in any similar way.


Because you keep harping on about it, as if it's I'm doomed if I don't use only my own eevblog.com domain.

Quote
It was you who got excited about the impersonation scam (understandably so), and there is no doubt that your generous use of generic gmail addresses does not help to provide clarity to email recipients. Frankly, I don't understand why you don't transition to "@eevblog.com" addresses throughout. They provide a "seal of authenticity", and help your brand.

Here you go again...
I could, but I won't, just to annoy some people ;D
Title: Re: EEVblog Impersonation SCAM!
Post by: magic on February 10, 2020, 08:14:21 am
Perhaps they wouldn't have fallen for @hotmail because @gmail is more popular and raises fewer eyebrows.

But here's the problem: you can use your own email all day long and unless you become a world famous gmail hater, people will still assume that name@gmail is yours. And even if you are a gmail hater not everybody will know about it.

I have a name@gmail account which sometimes receives other people's mail because somebody sends it to name@gmail instead of name@somethingelse :-DD
Title: Re: EEVblog Impersonation SCAM!
Post by: ogden on February 10, 2020, 09:33:16 am
I could, but I won't, just to annoy some people ;D
Most likely you will entertain them instead.
p.s. Seems like my previous post "just disappeared". Fun!
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 10, 2020, 11:49:22 am
p.s. Seems like my previous post "just disappeared". Fun!

(https://media0.giphy.com/media/12NUbkX6p4xOO4/giphy.webp?cid=790b76114a7a400b744b5a73875a9cc9dc7565ebe1048a53&rid=giphy.webp)
Title: Re: EEVblog Impersonation SCAM!
Post by: ebastler on February 10, 2020, 11:51:32 am
p.s. Seems like my previous post "just disappeared". Fun!

(https://media0.giphy.com/media/12NUbkX6p4xOO4/giphy.webp?cid=790b76114a7a400b744b5a73875a9cc9dc7565ebe1048a53&rid=giphy.webp)

That guy is showing too many fingers.
Title: Re: EEVblog Impersonation SCAM!
Post by: EEVblog on February 10, 2020, 01:24:59 pm
That guy is showing too many fingers.

That guy is Doug Henning, THE 70's hippy magician. He shows precisely the number of fingers intended.
Title: Re: EEVblog Impersonation SCAM!
Post by: ogden on February 10, 2020, 01:35:44 pm
That guy is Doug Henning, THE 70's hippy magician. He shows precisely the number of fingers intended.
WYSIWYG :)  Thank you and your mods for excellent job here. Many forums can learn from EEVblog. I truly mean it.
Title: Re: EEVblog Impersonation SCAM!
Post by: GlennSprigg on February 11, 2020, 01:10:43 pm
I 'Thought' I had a bad day, for 127 reasons beyond my current control...
However, I feel a lot better now!!  :)   Seinfeld once said...
"Laughter is like a small island of relief, amongst all the things in life, that
we just don't want to know about!
"...
So I find humor in the little things, in the short time I have left!!   8)
Title: Re: EEVblog Impersonation SCAM!
Post by: jake111 on February 13, 2020, 03:12:52 am
Let's face it, if the company didn't verify the email address and the content wasn't covered under a signed NDA then it wasn't very "secret"... Just saying  :P