<div dir="ltr">Back in the day (80's) I was designing credit card terminals for Verifone, and we bought error decks from Magtek, which contained every sort of card encoding problem there was, and one card with 100% good encoding. Nobody locked down that one card number either. Legend has it that when that number got issued to a person, their first bill had to be delivered by truck. Thousands of people in the industry had these decks, and we all put test transactions out to the banks using that number. $1, $1,000,000, $123456.. It adds up!<br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Sep 27, 2021 at 4:21 PM Kenneth Finnegan <<a href="mailto:kennethfinnegan2007@gmail.com">kennethfinnegan2007@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Looking at Internet Archive, it looks like <a href="http://wa8lmf.com" target="_blank">wa8lmf.com</a> has been dead for months if not years with various domain parking on it:<div><br></div><div><a href="http://web.archive.org/web/20210609210446/http://www.wa8lmf.com/" target="_blank">http://web.archive.org/web/20210609210446/http://www.wa8lmf.com/</a></div><div><br></div><div>So the lesson here is to make sure that you don't let the registration for any domains you care about expire and sit unregistered for a long time, because these sorts of sites will sweep them up if there's any decent number of links to them... they probably weren't banking on your APRS comment back in the day, but here we are. </div><div><br></div><div><b>I strongly suspect that this domain registration has nothing to do with BG0GE accidentally gatewaying their TNC test runs onto the APRS-IS</b>. I've emailed them directly to stop I-gating the LMF CD. </div><div><br></div><div>The lesson here is that we shouldn't have released a test CD with real callsigns recorded on it. I pity anyone who got swept up on that CD since their packets from back in the day are periodically I-gated back to APRS-IS when someone accidentally plays the CD into their I-gate. It happens regularly, and causes all sorts of confusion (in my case today celebration that the N6CP-1 digi is back online after being dead for 15 years). Someone running it on loop for several days is less common than a single run, but understandable. </div><div><div><div dir="ltr">--<br>Kenneth Finnegan<br><a href="http://blog.thelifeofkenneth.com/" target="_blank">http://blog.thelifeofkenneth.com/</a></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Sep 27, 2021 at 2:43 PM Andrew Pavlin via aprssig <<a href="mailto:aprssig@lists.tapr.org" target="_blank">aprssig@lists.tapr.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px"><div></div>
<div dir="ltr">No, because the obnoxious individual could just change his APRS-IS server login callsign, generate the corresponding passcode, and do it under a different I-gate identity. The only way would be to ban Stephen's own callsign (and there's no central authority in the APRS-IS backbone to enforce such a blacklist), and Stephen would have to change his callsign (and then the jerk could just look the new one up in the FCC public records and do it again).<br></div><div dir="ltr"><br></div><div dir="ltr">The APRS-IS backbone has a fundamental security flaw (discussed on this mailing list a few years ago), which basically allows anybody (licensed amateur radio operator or not) to connect to it, because the security is so weak and the program for generating passcodes is publicly available (including to people of weak morals and unsavory habits, such as the obnoxious individual that is harassing Stephen). Although the SSL certificate alternative works, the issue with "who is the gatekeeper?" would eventually end us all up in the same situation, because the authority for the evil operator would verify their identity and let them in, or the authentication data would be stolen or otherwise compromised. The sole present "gatekeeper" for SSL access to APRS-IS is the ARRL, which does not necessarily sit well with amateur radio operators in other nations. How do we decide which other identification authorities to trust? And how do we get it done at a reasonable cost for amateurs? And how do we deal with phasing out the old insecure mechanism without breaking thousands of amateur radio operators running old computers and software that can't handle the new authentication scheme?<br></div><div dir="ltr"><br></div><div dir="ltr">As for the domain name, once someone "owns" a name, it's very hard to get them to release it unless they don't lock it down against being released or otherwise modified in the top-level domain name servers and registrars. Now that Stephen's domain name is controlled by a Chinese registrar and locked down there, he's out of luck to get it back unless he can prove theft of a valid registration elsewhere to the satisfaction of that Chinese registrar.<br></div><div dir="ltr"><br></div><div dir="ltr">Andrew, KA2DDO</div><div dir="ltr">author of YAAC<br></div><div><br></div>
</div><div id="gmail-m_-6487937922887873687gmail-m_282913179245305307ydpb29015b7yahoo_quoted_3301107419">
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;color:rgb(38,40,42)">
<div>
On Monday, September 27, 2021, 05:10:13 PM EDT, david vanhorn <<a href="mailto:kc6ete@gmail.com" target="_blank">kc6ete@gmail.com</a>> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="gmail-m_-6487937922887873687gmail-m_282913179245305307ydpb29015b7yiv5138778404"><div><div dir="ltr"><div>Is there a way to drop his packets?</div><div><br clear="none"></div></div><br clear="none"><div><div id="gmail-m_-6487937922887873687gmail-m_282913179245305307ydpb29015b7yiv5138778404yqt87312"><div dir="ltr">On Mon, Sep 27, 2021 at 2:19 PM Stephen H Smith via aprssig <<a shape="rect" href="mailto:aprssig@lists.tapr.org" rel="nofollow" target="_blank">aprssig@lists.tapr.org</a>> wrote:<br clear="none"></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div>On 9/27/2021 12:51 PM, WA8LMF via
<a shape="rect" href="http://groups.io" rel="nofollow" target="_blank">groups.io</a> wrote:<br clear="none">
</div>
<blockquote type="cite">For
about a week now, looking up WA8LMF on <a shape="rect" href="http://findu.com" rel="nofollow" target="_blank">findu.com</a> or <a shape="rect" href="http://aprs.fi" rel="nofollow" target="_blank">aprs.fi</a> has
yielded a map showing my location as being in Los Angeles.
(Rather than my current location in Haslett in central Michigan.)
<br clear="none">
<br clear="none">
This is due to the igate BG0GE-6 in Xi'an China constantly
igating a playback of the APRS Test CD I created over 16 years
ago. This CD was intended for direct audio playback into TNCs for
testing; not for over-the-air transmission. One of the tracks on
the CD is a recording of me, off-the-air, doing a 20-mile drive
test around the San Gabriel Valley east of Los Angeles. <br clear="none">
</blockquote>
<p><br clear="none">
</p>
<p> BG0GE has now upped the transmit rate into the APRS-IS to once
every 10 seconds, apparently in response to my once a minute
beaconing of the correct posit. Further, he is including the
Chinese porn site URL in his comment/status field. <br clear="none">
</p>
<p>A portion of APRS.fi's raw packet log:</p>
<p><span>2021-09-27 13:19:56 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>APU25N,TCPIP*,qAC,T2USANW:=/8qp_9/pH> BBG0GE-6 Igate In China Disrupting My Posit!
<b>[Rate limited (< 5 sec)]</b></span><br clear="none">
<span>2021-09-27 13:20:03 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXV,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.\!n^_>/]"4v}
<b>[Location changes too fast (adaptive limit)]</b></span><br clear="none">
<span>2021-09-27 13:20:08 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXV,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.\.nh_>/]"4w}</span><br clear="none">
<span>2021-09-27 13:20:14 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXU,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.\7nh_>/]"4x}</span><br clear="none">
<span>2021-09-27 13:20:19 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXU,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.\An,_>/]"4y}</span><br clear="none">
<span>2021-09-27 13:20:24 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXU,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.\Cl"_>/]"4y}</span><br clear="none">
<span>2021-09-27 13:20:30 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXT,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.\Pn^_>/]"4y}</span><br clear="none">
<span>2021-09-27 13:20:35 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXT,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.\]n^_>/]"4z}</span><br clear="none">
<span>2021-09-27 13:20:40 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXT,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.\fn^_>/]"4{}</span><br clear="none">
<span>2021-09-27 13:20:45 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXS,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.\sn^_>/]"4z}</span><br clear="none">
<span>2021-09-27 13:20:51 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXS,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.]<span><0x1c></span>nT^>/]"4z}</span><br clear="none">
<span>2021-09-27 13:20:56 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXR,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.]$n^_>/]"4z}</span><br clear="none">
<span>2021-09-27 13:20:57 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>APU25N,TCPIP*,qAC,T2USANW:=/8qp_9/pH> BBG0GE-6 Igate In China Disrupting My Posit!
<b>[Rate limited (< 5 sec)]</b></span><br clear="none">
<span>2021-09-27 13:21:01 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXR,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.]1nT^>/]"4{}
<b>[Location changes too fast (adaptive limit)]</b></span><br clear="none">
<span>2021-09-27 13:21:12 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXQ,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.]FnT_>/]"4{}</span><br clear="none">
<span>2021-09-27 13:21:17 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPTXQ,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'.]Gl"W>/]"4{}</span><br clear="none">
<span>2021-09-27 13:21:56 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>APU25N,TCPIP*,qAC,T2USANW:=/8qp_9/pH> BBG0GE-6 Igate In China Disrupting My Posit!
<b>[Location changes too fast (adaptive limit)]</b></span><br clear="none">
<span>2021-09-27 13:22:03 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>APU25N,WIDE1-1,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:>202337zhttp://<a shape="rect" href="http://wa8lmf.com" rel="nofollow" target="_blank">wa8lmf.com</a></span><br clear="none">
<span>2021-09-27 13:22:57 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>APU25N,TCPIP*,qAC,T2USANW:=/8qp_9/pH> BBG0GE-6 Igate In China Disrupting My Posit!
<b>[Duplicate position packet]</b></span><br clear="none">
<span>2021-09-27 13:23:56 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>APU25N,TCPIP*,qAC,T2USANW:=/8qp_9/pH> BBG0GE-6 Igate In China Disrupting My Posit!
<b>[Duplicate position packet]</b></span><br clear="none">
<span>2021-09-27 13:24:57 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>APU25N,TCPIP*,qAC,T2USANW:=/8qp_9/pH> BBG0GE-6 Igate In China Disrupting My Posit!
<b>[Duplicate position packet]</b></span><br clear="none">
<span>2021-09-27 13:25:56 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>APU25N,TCPIP*,qAC,T2USANW:=/8qp_9/pH> BBG0GE-6 Igate In China Disrupting My Posit!
<b>[Duplicate position packet]</b></span><br clear="none">
<span>2021-09-27 13:26:47 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>STPYXT,WIDE2-2,qAR,<a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=BG0GE-6" rel="nofollow" target="_blank">BG0GE-6</a>:'._<span><0x1d></span>l#?>/]"7,} <b>[Location
changes too fast (adaptive limit)]</b></span><br clear="none">
<span>2021-09-27 13:26:57 EDT: <b><a shape="rect" href="https://aprs.fi/?c=raw&limit=&call=WA8LMF" rel="nofollow" target="_blank">WA8LMF</a></b>>APU25N,TCPIP*,qAC,T2USANW:=/8qp_9/pH> BBG0GE-6 Igate In China Disrupting My Posit!
<b>[Location changes too fast (adaptive limit)]</b></span></p>
<p><span><b><br clear="none">
</b></span></p>
<p><span><b><br clear="none">
</b></span></p>
</div>
_______________________________________________<br clear="none">
aprssig mailing list<br clear="none">
<a shape="rect" href="mailto:aprssig@lists.tapr.org" rel="nofollow" target="_blank">aprssig@lists.tapr.org</a><br clear="none">
<a shape="rect" href="http://lists.tapr.org/mailman/listinfo/aprssig_lists.tapr.org" rel="nofollow" target="_blank">http://lists.tapr.org/mailman/listinfo/aprssig_lists.tapr.org</a><br clear="none">
</blockquote></div></div><br clear="all"><br clear="none">-- <br clear="none"><div dir="ltr"><div dir="ltr">K1FZY (WA4TPW) SK 9/29/37-4/13/15<br clear="none"></div></div>
</div></div><div id="gmail-m_-6487937922887873687gmail-m_282913179245305307ydpb29015b7yqt44789">_______________________________________________<br clear="none">aprssig mailing list<br clear="none"><a shape="rect" href="mailto:aprssig@lists.tapr.org" rel="nofollow" target="_blank">aprssig@lists.tapr.org</a><br clear="none"><a shape="rect" href="http://lists.tapr.org/mailman/listinfo/aprssig_lists.tapr.org" rel="nofollow" target="_blank">http://lists.tapr.org/mailman/listinfo/aprssig_lists.tapr.org</a><br clear="none"></div></div>
</div>
</div></div>_______________________________________________<br>
aprssig mailing list<br>
<a href="mailto:aprssig@lists.tapr.org" target="_blank">aprssig@lists.tapr.org</a><br>
<a href="http://lists.tapr.org/mailman/listinfo/aprssig_lists.tapr.org" rel="noreferrer" target="_blank">http://lists.tapr.org/mailman/listinfo/aprssig_lists.tapr.org</a><br>
</blockquote></div>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr">K1FZY (WA4TPW) SK 9/29/37-4/13/15<br></div></div>