Job Offer - Engraving Etc. Forum

From:	Stunt Engraver (DGL)	30 Jan 2007
To:	Harvey only (HARVEY-ONLY)	2 of 16

5899.2 In reply to 5899.1
Harvey, A company that wants me to set up a bank account to receive money (for them), doesn't sound like much of a company. Well...maybe bad company. David "The Stunt Engraver" Lavaneri DGL Engraving Port Hueneme, CA

From:	Dave Jones (DAVERJ)	30 Jan 2007
To:	Harvey only (HARVEY-ONLY)	3 of 16

5899.3 In reply to 5899.1
Sounds like either a scam (send you bad money orders, you send them your real money), or it's a money laundering business. Either way it's bad. ...Dave Dave Jones Design

From:	Stunt Engraver (DGL)	30 Jan 2007
To:	Engravin' Dave (DATAKES)	5 of 16

5899.5 In reply to 5899.4

David,

Being able to contact "Vora S." is confidence inspiring.

PS - This post is from David L. :-)

David "The Stunt Engraver" Lavaneri
DGL Engraving
Port Hueneme, CA

EDITED: 30 Jan 2007 by DGL

From:	Harvey only (HARVEY-ONLY)	30 Jan 2007
To:	Stunt Engraver (DGL)	6 of 16

5899.6 In reply to 5899.5
I love this blurb. Emphasis mine. quote: Monopoly FMCG CONSUMER PETROLEUM & COMPUTER business for small traders. Legally protected by Bombay Highcourt Order. Refill POUCH Bottle. (IMPORTED MATERIALS). Mini PUMP in every house. Available at shops. Philadelphia, PA (Really Bensalem) When you finally understand it completely... it changes.

From:	UncleSteve	30 Jan 2007
To:	Harvey only (HARVEY-ONLY)	7 of 16

5899.7 In reply to 5899.6
I tend more to the "represent not popular companies". :S Ã¢â‚¬Å“Whether you think you can, or you think you canÃ¢â‚¬â„¢t, youÃ¢â‚¬â„¢re rightÃ¢â‚¬Â

From:	Boz (CHEDDARHEAD)	30 Jan 2007
To:	ALL	8 of 16

5899.8

They asked for my CV. Do I include the boot off the CV joint, or do I keep that and they just get the CV? I'm confused.

But I really like the 5 hours part.

Do I write to them using the same venacular: Popular guy looking of big pay job with responsibility and sociability. Have happy appearance and utteral descrepency. I-)

I'M THEiR GUY! No one else needs to apply. I can hear it now, "Thank you for calling ACCESS. WE specialize in the sales of used laser engraving machines and unique components of not popular firms. Before we start discussing your needs, please leave your personal and credit information with the automated answering system." (devil)

Robert H. Bosworth
ACCESS Business Solutions, Inc.
Hudson, WI. 54016
(715) 386-8021
www.usedlasers.com

From:	Cody (BOBTNAILER)	30 Jan 2007
To:	Boz (CHEDDARHEAD)	9 of 16

5899.9 In reply to 5899.8

A little off the beaten path, but maybe along the same lines....

I've gotten several submissions from our "contact us" web page from this address: baufaufru@mispir.org.

Every one of his submissions has had some sort of html reference to prescription meds.

I used to just get the normal spam from these guys, but now they're actually using my fill-in-the-blanks form to get my own website to send me spam! :/

From:	Harvey only (HARVEY-ONLY)	30 Jan 2007
To:	Cody (BOBTNAILER)	10 of 16

5899.10 In reply to 5899.9

And I am still amazed that people actually respond to those drug ads. They are such obvious spam.

Maybe I should offer a course in how to become an expert engraver in less than ten days.

They send me $100 and I send them a link to EE.

Philadelphia, PA (Really Bensalem)

When you finally understand it completely... it changes.

From:	UncleSteve	30 Jan 2007
To:	Jim (RETAIL74)	13 of 16

5899.13 In reply to 5899.12
Easy! Tell them you will take the "Free" ad they are offering and then let them try to explain why they want $$$... (devil) Ã¢â‚¬Å“Whether you think you can, or you think you canÃ¢â‚¬â„¢t, youÃ¢â‚¬â„¢re rightÃ¢â‚¬Â

From:	Dave Jones (DAVERJ)	30 Jan 2007
To:	Cody (BOBTNAILER)	14 of 16

5899.14 In reply to 5899.9
Cody, I don't know about the script you use for your contact form, but older copies of FormMail were vulnerable to being spoofed by spammers. They could send spam to a list of email addresses that they fed to the script through the form. The only drawback for the spammer was that the person who was supposed to get the contact mail also got a copy of the spam. ...Dave Dave Jones Design

From:	Stunt Engraver (DGL)	30 Jan 2007
To:	Dave Jones (DAVERJ)	15 of 16

5899.15 In reply to 5899.14
Dave, What would be the cure for that, if indeed, that's what the spammers are doing? Another script? David "The Stunt Engraver" Lavaneri DGL Engraving Port Hueneme, CA

From:	Dave Jones (DAVERJ)	30 Jan 2007
To:	Stunt Engraver (DGL)	16 of 16

5899.16 In reply to 5899.15

I don't know if his has the potential spam problem or not, but for ones that do, yes a different script is the answer.

The problem comes from generic scripts that pass the recipient email address from the web page. The more secure scripts have the recipient email address hard coded into them in a part of the script that can not be reached from the web. FormMail was a popular CGI script that is supplied by a lot of web hosts as a simple way to have a contact form. Similar scripts in other languages abound and work in similar ways, with similar vulnerabilities.

A custom PHP script with the address hard coded is typically the most secure. The next best thing is this PHP script that a friend of mine wrote, with a bit of advice from me, called "NateMail": http://www.mindpalette.com/formprocessing/index.php

It has a hidden list of recipient email addresses stored on the server and forms can only be sent one of the names you enter in that list. The list can not be accessed or overridden from the web.

...Dave
Dave Jones Design