Bitcoin Forum
May 06, 2024, 04:11:16 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 3 »  All
  Print  
Author Topic: update: casascius.COM is GOOD but casascius.NET is EVIL / FRAUD / SCAM / 1%  (Read 5379 times)
mizerydearia (OP)
Hero Member
*****
Offline Offline

Activity: 574
Merit: 507



View Profile
October 25, 2011, 06:05:25 PM
Last edit: October 25, 2011, 07:29:33 PM by mizerydearia
 #1

Imp Note: HumansMen aren't perfect <- Sexism

Quote
Sorry to be sending e-mail to the Mt.Gox leak list.

Please be advised that a recent e-mail purporting to be from me regarding Casascius Physical
Bitcoins is fake and leads to a phishing site.  Don't give out your info unless you're sure you're
at the right place.

The real Casascius Physical Bitcoins website is at https://www.casascius.com.
If you do not know how to verify my PGP signature, consider looking me up on the forums to make
sure you have the right address and are not being phished.

Sorry for the hassle and the inconvenience, but I suppose this was going to happen sooner or later.

Mike Caldwell

Note: I received this email three times. O_O
If you received it 3 times, it means you had 3 accounts at MtGox... =)  I only sent it once.

Hint: I never received a phishing email most likely because I was not affiliated with the collection of email addresses that were sent phishing emails.

Note: Casascius is real human existence (that frequents freenode irc network) and has contributed stuffs, however, this particular email seems a tad bit obnoxious.  Although, at least he apologized.

Musical Note:

Consulting with Casascius on freenode IRC network he confirmed that email is authentic and from him.

I shall try this, one for each of my projects, and of course, provide an apology to excuse my sending to thousands of emails to propagate the message that contains links to each of the projects. ^_^  It shall be very effective without any backlash, eh?  Yay traffic to my websites!



Perhaps there could be a better way to reach large audience of bitcoiners than relying on leaked email lists to better propagate these types of informations in a way that is more solicited/expected/desired?  Maybe someone can establish a site/service for this particular purpose?
TalkImg was created especially for hosting images on bitcointalk.org: try it next time you want to post an image
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715011876
Hero Member
*
Offline Offline

Posts: 1715011876

View Profile Personal Message (Offline)

Ignore
1715011876
Reply with quote  #2

1715011876
Report to moderator
casascius
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1136


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
October 25, 2011, 06:20:24 PM
 #2

It appeared that the leaked e-mail list was targeted, and that's why I sent to it.  I certainly do understand that receiving the e-mail is obnoxious.  I suppose I have to weigh it against how obnoxious it is to hear about people getting scammed.

It should be obvious I hate spam as much as the next guy, and I feel I'm running the gauntlet even trying that (with respect to my ISP).

If you received it 3 times, it means you had 3 accounts at MtGox... =)  I only sent it once.

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
I.Goldstein
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
October 25, 2011, 06:27:51 PM
 #3

I stand by Casascius and his actions. The inconvenience from a soliciting email is arbitrary compared to the potential theft that could from being a client to casascius.net.

I thank him for being responsible and vigilant. Shine on you crazy diamond.
xxxcoin
Newbie
*
Offline Offline

Activity: 57
Merit: 0



View Profile WWW
October 25, 2011, 06:32:21 PM
 #4

I also did receive the email from casascius "warning" me about the fraudulent site, but I did not receive any other emails from the leak list that is supposedly being spammed.

 Huh
mizerydearia (OP)
Hero Member
*****
Offline Offline

Activity: 574
Merit: 507



View Profile
October 25, 2011, 06:32:28 PM
 #5

Within minutes of collaborating regarding this issue and establishing better understanding of the issue, although it may seem a bit obnoxious to have received the email as I had referenced/suggested in my initial post, I do agree that it is helpful to better spread awareness of this concern/issue.  I have changed topic (in my own way) to reflect better reality of what is important: that there is a fraudulent site still that may trick/deceive/scam users and that they should avoid it.

Add to your hosts file:
Code:
0.0.0.0 casascius.net
xxxcoin
Newbie
*
Offline Offline

Activity: 57
Merit: 0



View Profile WWW
October 25, 2011, 06:41:47 PM
 #6

So it is acceptable then that an unsolicited email was sent out to a hacked list "warning" people of a fraudulent site?

I received the email but it was not wanted by me, I did not ask to be notified about this and never did I provide my email address for this purpose to the sender.
It was also completely irrelevant to me since I have not used either site nor would I have planned to.


Quote
I shall try this, one for each of my projects, and of course, provide an apology to excuse my sending to thousands of emails to propagate the message that contains links to each of the projects. ^_^  It shall be very effective without any backlash, eh?  Yay traffic to my websites!
Exactly.
Inaba
Legendary
*
Offline Offline

Activity: 1260
Merit: 1000



View Profile WWW
October 25, 2011, 06:48:27 PM
 #7

This is bullshit.  I received a blatant marketing email (and nothing else) from this site.  After examining the headers, it's clearly from his site and sent from him.  Not hacked, not fake, not phishing.  A pure, unadulterated spam email sent to the leaked MT Gox list.  

This guy is a spammer and should be painted as such.  No one should do business with him and he should be fair game for being ripped off left and right to pay for his spam.  I charge $1500 per spam piece for reading, so he owes me $1500... whatever else other people charge, that's what he owes if he wants to pay for my time of reading garbage and using my bandwidth and hard drive space to store the email on my servers.

Just a point of reference:

Mail was sent from 62.76.188.230, casascius.net resolves to that IP address.  

If you're searching these lines for a point, you've probably missed it.  There was never anything there in the first place.
Raoul Duke
aka psy
Legendary
*
Offline Offline

Activity: 1358
Merit: 1002



View Profile
October 25, 2011, 06:49:23 PM
 #8

Wanna know something funny... The scammer used a Google Analytics code in his site, so maybe contacting Google to shut his account down and report him as a phishing site to his host and registrar can at least take the site down.
casascius
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1136


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
October 25, 2011, 06:52:22 PM
 #9

This is bullshit.  I received a blatant marketing email (and nothing else) from this site.  After examining the headers, it's clearly from his site and sent from him.  Not hacked, not fake, not phishing.  A pure, unadulterated spam email sent to the leaked MT Gox list.  

This guy is a spammer and should be painted as such.  No one should do business with him and he should be fair game for being ripped off left and right to pay for his spam.  I charge $1500 per spam piece for reading, so he owes me $1500... whatever else other people charge, that's what he owes if he wants to pay for my time of reading garbage and using my bandwidth and hard drive space to store the email on my servers.

Just a point of reference:

Mail was sent from 62.76.188.230, casascius.net resolves to that IP address.  

And that's the scammer site...  the real one is casascius.com and 50.73.45.250

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
Gavin Andresen
Legendary
*
Offline Offline

Activity: 1652
Merit: 2216


Chief Scientist


View Profile WWW
October 25, 2011, 06:54:24 PM
 #10

I think Casascius did the right thing.

He has no way of knowing how many people got the phishing email, and no other way of contacting people who might fall for the scam.

If you're upset because you have to poke the 'delete' button on your email one extra time... then I think you're overreacting.


How often do you get the chance to work on a potentially world-changing project?
molecular
Donator
Legendary
*
Offline Offline

Activity: 2772
Merit: 1019



View Profile
October 25, 2011, 06:58:34 PM
 #11

So it is acceptable then that an unsolicited email was sent out to a hacked list "warning" people of a fraudulent site?

I received the email but it was not wanted by me, I did not ask to be notified about this and never did I provide my email address for this purpose to the sender.
It was also completely irrelevant to me since I have not used either site nor would I have planned to.

Oh come on, I think it's ok to warn people. Don't be so uptight. Complain to magicaltux about all spam Wink

PGP key molecular F9B70769 fingerprint 9CDD C0D3 20F8 279F 6BE0  3F39 FC49 2362 F9B7 0769
molecular
Donator
Legendary
*
Offline Offline

Activity: 2772
Merit: 1019



View Profile
October 25, 2011, 07:00:33 PM
 #12

This is bullshit.  I received a blatant marketing email (and nothing else) from this site.  After examining the headers, it's clearly from his site and sent from him.  Not hacked, not fake, not phishing.  A pure, unadulterated spam email sent to the leaked MT Gox list.  

This guy is a spammer and should be painted as such.  No one should do business with him and he should be fair game for being ripped off left and right to pay for his spam.  I charge $1500 per spam piece for reading, so he owes me $1500... whatever else other people charge, that's what he owes if he wants to pay for my time of reading garbage and using my bandwidth and hard drive space to store the email on my servers.

Just a point of reference:

Mail was sent from 62.76.188.230, casascius.net resolves to that IP address.  

You're still adressing the wrong person here. casascius.com is 50.73.45.250.

PGP key molecular F9B70769 fingerprint 9CDD C0D3 20F8 279F 6BE0  3F39 FC49 2362 F9B7 0769
Inaba
Legendary
*
Offline Offline

Activity: 1260
Merit: 1000



View Profile WWW
October 25, 2011, 07:00:56 PM
 #13

Don't get me started on magicaltux and his inept security.  

I withdraw my previous statements in regards to casascius.com since .net is located in Russia and .com is in Utah.  I'm all for giving the benefit of the doubt in this instance.

If you're searching these lines for a point, you've probably missed it.  There was never anything there in the first place.
Vandroiy
Legendary
*
Offline Offline

Activity: 1036
Merit: 1002


View Profile
October 25, 2011, 07:07:48 PM
 #14

Thanks for the warning! These days, I could use a browser addon that warns when hosts are in countries like Russia (as this one).

All this scamming has become a massive annoyance. This is one of the cases where we could have another organization funded with Bitcoin, Job: gather donations, select a scammer at random, trace, attack (report to police, DoS, hack, whatever). Post results. Just for the heck of it.

They never got me so far, still, if I ever happen to identify one of these people, they will not have a nice time with me.
Inaba
Legendary
*
Offline Offline

Activity: 1260
Merit: 1000



View Profile WWW
October 25, 2011, 07:09:01 PM
 #15

I think Casascius did the right thing.

He has no way of knowing how many people got the phishing email, and no other way of contacting people who might fall for the scam.

If you're upset because you have to poke the 'delete' button on your email one extra time... then I think you're overreacting.



You would be wrong, then.  He may have no way of knowing how many people got a phishing email, but he also has no responsibility to protect people from making stupid mistakes.  What he DOES have a responsibility to do is be a good net citizen and NOT spam people.  In this, apparently, he failed.  Much less egregious than commercial spamming, but no less irresponsible.

Your attitude of "IF you're upset because you have to poke delete button on your email one extra time" is exactly the reason we have so much spam.  You are the type of person that makes spam possible.  You just ignore it instead of actively combating it.  You and that attitude towards spam contributes to the problem.  If no one took that attitude, we've had made much more significant inroads into migrating to a more secure email protocol... but instead, it's too much trouble for people like you, so you just "deal" with it.  Your apathy causes spam.

And as a point of fact, it's not "just pressing delete one more time," billions upon billions of spam is sent each day.  That is billions of "pressing deletes" and it is a large portion of bandwidth and a significant portion of storage space.  You clearly have never had to manage a large scale email system.  Let those of us who have to deal with the aggregate consequences of spam make the decisions as to what constitutes over-reacting.



If you're searching these lines for a point, you've probably missed it.  There was never anything there in the first place.
molecular
Donator
Legendary
*
Offline Offline

Activity: 2772
Merit: 1019



View Profile
October 25, 2011, 07:13:50 PM
 #16

Don't get me started on magicaltux and his inept security.  

I withdraw my previous statements in regards to casascius.com since .net is located in Russia and .com is in Utah.  I'm all for giving the benefit of the doubt in this instance.


Cool. Thanks for being reasonable. After reading your harsh language I didn't expect this. Kudos for still being able to think in an agitated state.

PGP key molecular F9B70769 fingerprint 9CDD C0D3 20F8 279F 6BE0  3F39 FC49 2362 F9B7 0769
molecular
Donator
Legendary
*
Offline Offline

Activity: 2772
Merit: 1019



View Profile
October 25, 2011, 07:15:48 PM
 #17

Thanks for the warning! These days, I could use a browser addon that warns when hosts are in countries like Russia (as this one).

Actually: wouldn't it be real easy to detect this mtgox-related spam? Just make a central place and have 5 people forward md5sums of all their emails. If they all receive that mail, it's most likely spam to that list, rigth?

Is there a system for this kind of thing?

PGP key molecular F9B70769 fingerprint 9CDD C0D3 20F8 279F 6BE0  3F39 FC49 2362 F9B7 0769
Vandroiy
Legendary
*
Offline Offline

Activity: 1036
Merit: 1002


View Profile
October 25, 2011, 07:16:37 PM
 #18

Mail was sent from 62.76.188.230, casascius.net resolves to that IP address.  

This is confusing. The spammer is warning about himself?

Maybe he's switched to troll mode now and is replicating the warning email so people flame about casascius spamming?

Oh, whatever. I just got two of the physical Bitcoins, they're awesome. I'm considering buying a bunch of them, so the fraudster site was really dangerous for me. So I appreciate the warning (even though I never received it per email).



Think about it this way: between an advantage of a fraudster or casascius, there is no doubt what should be put preference. These physical coins are a huge marketing boost for Bitcoin, it would suck if a scammer were to ruin that business.
molecular
Donator
Legendary
*
Offline Offline

Activity: 2772
Merit: 1019



View Profile
October 25, 2011, 07:20:36 PM
 #19

Mail was sent from 62.76.188.230, casascius.net resolves to that IP address.  

This is confusing. The spammer is warning about himself?

No, I think Inaba was still talking about the first, original spam message.

PGP key molecular F9B70769 fingerprint 9CDD C0D3 20F8 279F 6BE0  3F39 FC49 2362 F9B7 0769
Wody
Newbie
*
Offline Offline

Activity: 10
Merit: 0


View Profile
October 25, 2011, 07:28:26 PM
 #20

Dear casascius.

Today I found in my email a spam coming from your website and IP-address, advertising for your website casascius.com. Sending such unsollicited email to people in my country is a crime. In addition, because of costs of spam for me, I also charge per spam, feel free to pay the bill by sending 100 bitcoin to: 1DESYhdFBUdQyTWBpLif6BQdr3FRcKBHWL
Pages: [1] 2 3 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!