Path: news.voyager.net!aanews.merit.net!pub1.tln.lib.mi.us!news2.acs.oakland.edu!wsu-cs!usenet.ins.cwru.edu!slider.bme.ri.ccf.org!kira.cc.uakron.edu!ns.mcs.kent.edu!news.ysu.edu!news.ecn.uoknor.edu!munnari.OZ.AU!news.mel.connect.com.au!melba.bby.com.au!news.mira.net.au!Germany.EU.net!howland.reston.ans.net!math.ohio-state.edu!uwm.edu!fnnews.fnal.gov!unixhub!news.Stanford.EDU!not-for-mail
From: rich@c2.org (Rich Graves)
Newsgroups: alt.revisionism,news.admin.net-abuse.misc
Subject: Re: MATT GIWER REPORT for Jun 1-9: 12.7% / 18.3%
Followup-To: news.admin.net-abuse.misc
Date: 20 Jun 1996 13:03:43 -0700
Organization: Uncensored Internet, http://www.c2.org/uncensored/
Lines: 29
Sender: llurch@Networking.Stanford.EDU
Message-ID: <4qcaqv$5j4@Networking.Stanford.EDU>
References: <4q8dtd$3i7@nizkor.almanac.bc.ca>
NNTP-Posting-Host: networking.stanford.edu
Xref: news.voyager.net alt.revisionism:49198 news.admin.net-abuse.misc:54880

jamie@nizkor.almanac.bc.ca writes:
>Matt Giwer has singlehandedly hijacked alt.revisionism.

I don't believe this is true. Posts "from Matt Giwer" have come from more
than one machine at once. They've got at least two Windows boxes, one
configured with a WinGate proxy server and "From: mgiwer@ix.netcom.com
(Matt Giwer)", the other a WinGate client and "From: mgiwer@ix.netcom.com" 
[no GCOS name]. Because of the proxy server setup, articles show up with
the same NNTP-Posting-Host, but the From: line and other differences
distinguish which articles were posted from which machine.

Here are some more long-term stats culled from DejaNews over the period
96/04/15 - 96/06/15. The number of articles is inflated somewhat because
DejaNews breaks up long articles and counts the pieces, but this shouldn't
skew the percentages much.

Articles in alt.revisionism: 18,327
Articles from mgiwer@*: 2,862 or 15.6%
Articles matching "giwer* | myshkin | mgiwer*": 7,256 or 39.6%

(Prince Myshkin, the lead character in Dostoievsky's "The Idiot," is a
common synonym for Giwer.)

The last statistic includes articles by Giwer. DejaNews doesn't (seem to)
have a way to filter all articles EXCEPT those from a specific author. The
logical ! only seems to work with & or |, i.e., you need to do a positive 
search.

-rich





Path: news.voyager.net!clmx50.dial.voyager.net!user
From: jamie@voyager.net (Jamie McCarthy)
Newsgroups: news.admin.net-abuse.misc
Subject: Re: MATT GIWER REPORT for Jun 1-9: 12.7% / 18.3%
Date: Thu, 20 Jun 1996 18:28:17 -0400
Organization: Absence Software
Lines: 29
Message-ID: 
References: <4q8dtd$3i7@nizkor.almanac.bc.ca> <4qcaqv$5j4@Networking.Stanford.EDU>
NNTP-Posting-Host: vixa.voyager.net

rich@c2.org (Rich Graves) wrote:

> >singlehandedly
> 
> I don't believe this is true. Posts "from Matt Giwer" have come from more
> than one machine at once. They've got at least two Windows boxes, one
> configured with a WinGate proxy server and "From: mgiwer@ix.netcom.com
> (Matt Giwer)", the other a WinGate client and "From: mgiwer@ix.netcom.com" 
> [no GCOS name].

Rich, for those of us who don't know what WinGate is, could you explain
what this means?

Is it logical to conclude that Giwer has a friend, or multiple friends,
using his account?  Are the client and server necessarily on the same LAN,
or could a client anywhere on the internet access his server?

Do we know for sure that WinGate is the culprit?

And what possible advantage could there be in his using WinGate?

Thanks.

Posted/emailed.
-- 
 Jamie McCarthy          http://www.absence.prismatix.com/jamie/
 jamie@voyager.net     Co-Webmaster of http://www.almanac.bc.ca/
 Unless you specify otherwise, I assume pro-"revisionism" email
 to be in the public domain.            I speak only for myself.






Path: news.voyager.net!aanews.merit.net!newsxfer.itd.umich.edu!news.kreonet.re.kr!news.postech.ac.kr!news.dacom.co.kr!bofh.dot!hookup!nctuccca.edu.tw!howland.reston.ans.net!math.ohio-state.edu!uwm.edu!fnnews.fnal.gov!unixhub!news.Stanford.EDU!not-for-mail
From: rich@c2.org (Rich Graves)
Newsgroups: news.admin.net-abuse.misc
Subject: Re: MATT GIWER REPORT for Jun 1-9: 12.7% / 18.3%
Date: 20 Jun 1996 17:08:57 -0700
Organization: Uncensored Internet, http://www.c2.org/uncensored/
Lines: 41
Sender: llurch@Networking.Stanford.EDU
Message-ID: <4qcp6p$793@Networking.Stanford.EDU>
References: <4q8dtd$3i7@nizkor.almanac.bc.ca> <4qcaqv$5j4@Networking.Stanford.EDU> 
NNTP-Posting-Host: networking.stanford.edu

jamie@voyager.net (Jamie McCarthy) writes:
>rich@c2.org (Rich Graves) wrote:
>
>> >singlehandedly
>> 
>> I don't believe this is true. Posts "from Matt Giwer" have come from more
>> than one machine at once. They've got at least two Windows boxes, one
>> configured with a WinGate proxy server and "From: mgiwer@ix.netcom.com
>> (Matt Giwer)", the other a WinGate client and "From: mgiwer@ix.netcom.com" 
>> [no GCOS name].
>
>Rich, for those of us who don't know what WinGate is, could you explain
>what this means?
>
>Is it logical to conclude that Giwer has a friend, or multiple friends,
>using his account?  Are the client and server necessarily on the same LAN,
>or could a client anywhere on the internet access his server?

The easiest tool for what he seems to be doing, and a likely suspect given
his son's job, is Adrien de Croy's WinGate, a proxy server for Windows
95/NT (some people improperly call it a router). Basically, it lets you
connect multiple computers to the Internet through one SLIP/PPP
connection.  See http://www.windows95.com/connect/lansing.html

Whether it's WinGate or not, I think it has to be multiple machines,
probably operated by more than one person. Either that, or he's going into
Agent Preferences after every other post to add and remove his name from
the From: line. It isn't multiple people logged on to multiple Netcom PPP
ports, because the NNTP-Posting-Host remains the same.

For confirmation, someone would need to do a port scan of his machine
while he's logged on. But that wouldn't be nice.

Sorry this is a bit garbled, but I've still got a lot of work to do... the
fact that he's posting simultaneously with the same software under
different From: lines should be suggestive enough for most people.

posted/emailed back.

-rich
 http://www.c2.org/~rich/







Path: news.voyager.net!aanews.merit.net!imci3!newsfeed.internetmci.com!news.mathworks.com!news.kei.com!nntp.coast.net!netnews.worldnet.att.net!ix.netcom.com!news
From: mgiwer@ix.netcom.com (Matt Giwer)
Newsgroups: news.admin.net-abuse.misc,alt.revisionism
Subject: Re: MATT GIWER REPORT for Jun 1-9: 12.7% / 18.3%
Date: Sat, 22 Jun 1996 20:12:15 GMT
Organization: images incarnate
Lines: 54
Message-ID: <4qhk74$7b7@dfw-ixnews7.ix.netcom.com>
References: <4q8dtd$3i7@nizkor.almanac.bc.ca> <4qcaqv$5j4@Networking.Stanford.EDU>  <4qcp6p$793@Networking.Stanford.EDU>
NNTP-Posting-Host: tam-fl6-06.ix.netcom.com
X-NETCOM-Date: Sat Jun 22  3:14:28 PM CDT 1996
X-Newsreader: Forte Free Agent 1.0.82
Xref: news.voyager.net news.admin.net-abuse.misc:55275 alt.revisionism:49742

rich@c2.org (Rich Graves) wrote:

>jamie@voyager.net (Jamie McCarthy) writes:
>>rich@c2.org (Rich Graves) wrote:
>>
>>> >singlehandedly
>>> 
>>> I don't believe this is true. Posts "from Matt Giwer" have come from more
>>> than one machine at once. They've got at least two Windows boxes, one
>>> configured with a WinGate proxy server and "From: mgiwer@ix.netcom.com
>>> (Matt Giwer)", the other a WinGate client and "From: mgiwer@ix.netcom.com" 
>>> [no GCOS name].
>>
>>Rich, for those of us who don't know what WinGate is, could you explain
>>what this means?
>>
>>Is it logical to conclude that Giwer has a friend, or multiple friends,
>>using his account?  Are the client and server necessarily on the same LAN,
>>or could a client anywhere on the internet access his server?

>The easiest tool for what he seems to be doing, and a likely suspect given
>his son's job, is Adrien de Croy's WinGate, a proxy server for Windows
>95/NT (some people improperly call it a router). Basically, it lets you
>connect multiple computers to the Internet through one SLIP/PPP
>connection.  See http://www.windows95.com/connect/lansing.html

        I have noticed this myself.  In fact all that it is, is that netcom has
multiple outgoing news servers and they are not set the same.  There
appear to be only three variants.  

        What these people are trying to do is create, out of whole cloth, a case
that I am abusing the net.  

        The situation is that some years ago there was an organized effort by at
least six people to take over alt.revisionism in order to prevent
revisionism to be discussed.  They brag about having driven off everyone
who tries to discuss revisionism.

        They use any method open to them.  They start with simple verbal abuse
which one has to expect in an alt conference.  But then it goes to
harrassing people ISP, the person personally, and even their families.
All of this happened in my case.  

        These people are the real scum of the earth.

        This thread in this newsgoup is merely one more attempt to get me to
stop posting.  

        There is no truth to it.  They are merely presenting information in a
false light so as to make it appear that I am doing something improper.

Home ·  Site Map ·  What's New? ·  Search Nizkor