« BACK  |  PRINT

RS

MEMBER DIARY

Case Closed? Leftblog Claims Definitive Proof Weiner Was Framed.

Case closed? Not so much. There is a post up at a the blog Cannonfire today titled: CASE CLOSED! CONGRESSMAN WEINER WAS FRAMED! Tweets of this article are blowing up on the #p2 hashtag on Twitter, and many blogs in the leftosphere are beginning to cite it, including Little Green Footballs and DailyKos diaries section.

The post claims to definitively prove that Rep. Weiner could not have sent the now infamous underwear photo that is causing him so much trouble this week.

It had to have been sent by someone else.

Had. To.

The problem is, they’re completely incorrect. Something I was able to actually prove with very little effort. But before I explain, here is the argument being made (click through to read more.)

If you have a yfrog account, you have an email address to which you can send photos and have them automatically post, both to your yfrog and to your Twitter feed. To do this, you attach the photo to an email, put your yfrog email address in the To: field, and the body of the tweet in the subject line or email body. You can even address it to someone by putting their twitter username in the subject line.

The problem, however, is that the email does NOT need to come from your registered email address.

Cannonfire, quoting a note from a reader, says this:

easiest way to pull off this as a hoax would be if you knew weiner’s yfrog email address. email a blackberry pic to that email address with (@subject) in text and you’d create exactly what happened here.

would require no password hacking (you wouldn’t even need to know his password to do it).

In other words, I could use my email to send a pic to your yfrog, and it would appear on your twitter feed, all without your intervention, all without hacking.

Sounds pretty bad right? Only, no. It isn’t. A yfrog email address is composed of your twitter username, a dot, and a randomly generated series of characters that look like made up words (although some of the ones I’ve seen today were actually just Latin words.)

So, for example, your email address for yfrog might be: MyTwitterHandle.machina@yfrog.com. Without that email address, you can’t send the pic.

Now, Cannonfire, still quoting a reader goes on to address this:

the chance that somewhere along the way that weiners yfrog address had been leaked? pretty damn high. it would happen if weiner or an aide simply forwarded a pic he emailed to his yfrog account to anyone else (thus showing the yfrog email address in the chain).

There is a reason the reader is emphasizing that the email address would have to have been leaked. The random word/letters after the . in the email address is tantamount to a password. You can’t just guess it. You have to know it or .. dah dah daaahhh … hack it.

Still, the blogger decided to test the process, and provided their own yfrog email address. Reader milowent, the same person quoted above, was able to send a pic through that address, thereby successfully posting to someone else’s yfrog account. Again, only because the address had been provided to him. I’m sure if I gave you the password to my yfrog account instead of the email address, you’d be equally successful.

In any case, the crux of the “proof” comes next.

From Cannonfire:

If you click on that link, you may notice something important. By using this technique, milowent (or is it Tony?) was able to create a header that does not contain the URL of the image below the account holder’s name. As we’ve seen in previous posts, that URL does appear if the account holder uploads a picture. Apparently, it does not appear if someone else emails a picture to that account.

The screencap of Congressman Weiner’s page — the one featuring the infamous “crotch shot” — lacks the URL. As far as I can tell, the only way to create that anomaly is when someone other than the account holder places an image on Yfrog, using the simple strategy outlined above.

The comparison image given here should explain the situation to anyone I’ve accidentally confused. (Click on the image to enlarge — and I’m very embarrassed by the misspelled word.) The first header was taken from the Weiner screen cap as it appeared on Breitbart. Note the lack of a URL beneath “RepWeiner” — just blank space.

That’s very unusual. Under normal circumstances, Yfrog never puts blank space there.

I demonstrate those “normal circumstances” in the second example. This is what the header looked like when I uploaded a picture to my own Yfrog account. Note that the URL for the image appears right below my pseudonym. (As noted in an earlier post, I opened the account under the name “G. Dowson,” which happens to be the name of an illustrator whose work I like.)

The only way to create a URL-free header is to have someone else send a pic to one’s Yfrog address. Milowent did just that. You can see the result: The header now has a blank space beneath Dowson’s name.

Why does Yfrog work that way? I don’t know. Ask their programmers.

The important point is this: The anomaly in the header indicates that the image was not sent by Weiner. It had to have been sent by someone else.

Had. To. Have.

However, this is just simply not so. Check out this link: http://yfrog.com/gz4hkgzj, or see screenshot below.

I sent that photo to my own yfrog account from my own email, and it subsequently tweeted on my timeline. (I eventually deleted the tweet so as not to give away my big reveal before I could write my post.)

Again, the supposed nail in the coffin was that:

“The only way to create a URL-free header is to have someone else send a pic to one’s Yfrog address.”

(emphasis added.)

So what does cannonfire prove definitively? That it is possible to post to someone else’s yfrog and twitter, assuming you know the email address of their account, and that sometimes, yfrog photos don’t have a URL visible under the name of the person who posted the image.

What does this mean for Rep. Weiner? Well … nothing as far as I can tell. It doesn’t point to his guilt or innocence. Could someone who knew his yfrog email address post the picture without his knowledge? Sure. So could someone who knows his password. Or someone who hacked into his accounts. But so far, there’s no evidence for any of these theories.

Case closed? Not by a long shot.

Thanks to Mediaite’s Tommy Christopher, who acted as a guinea pig in some of my yfrog testing for this post.

UPDATE: Astute DailyKos commenter Pico seems to have noticed the URL issue as well, and judging by the time stamp, before I posted this. Credit where due.

Get Alerts

COMMENTS

  • FlyingTigress

    It’s sad to recall the days when you couldn’t mention Little Green Footballs and the DK as being on the same side of the blogosphere.

    /former Lizard

    .

  • patryott

    to close the case whenever it’s one of ‘their’ people caught in some sleazy deal, but never close the case on their enemies, ‘US’ so I’ll stick to the supposition that wiener posted this pic himself

    • patryott

      Who Is Pat-Ryott.com

  • jaykali

    I am not in the Weiner fan-club but my ears perk up when this sort of thing makes news bc I am a web programmer. The email method of posting a pic sounds extremely plausible. That would be my guess as to how this happened.

    One thing that has me a little confused is that if Weiner had his yfrog account hacked, did he immediately shut it down or at least change the password? That’s the first step if you get hacked, less you get ‘pranked’ again. I haven’t read yet if he did that. It does seem much more likely that yfrog got hacked bc otherwise it would seem like both twitter and yfrog were compromised.

    The yfrog email could have been accidentally leaked somewhere or hacked. If you write a script to email 1 million different combinations theoretically that would work but yfrogs servers would prob notice they’re getting spammed before you cracked the code.

    I would be interested to see if yfrog has any kind of security response writeup to defend or explain how a yfrog account could be compromised.

    I just think those ‘secret’ email addresses aren’t secure enough unless they are tied to like your computer’s IP address. Note that email is very insecure so if he was on some public wifi he could have had his yfrog account stolen by some kind of sniffer. That is a bit difficult to accomplish. Somewhere there was a breach, either accidentally forwarding the email somewhere where it got sniffed or someone hacked his account, something like that had to have happened.

    I am thinking the yfrog programmers could prob give some kind of plausible account to how it would have happened.

    One other thing, the way a lot of passwords are hacked. What happens is that people use the same username or email/password for a lot of different websites. They sign up for a very insecure site that gets hacked easily and then those hackers will try the same password combos against more secure sites like facebook/google/yahoo etc. And so what looks like for example a ‘facebook’ intrusion is really an intrusion on some 1-off dinky website out there that was hacked. So it is still possible that the yfrog account itself was hacked instead of the email address stolen.

    • Adjoran

      and about as likely.

      The problem is Weiner isn’t acting like a guy whose account was hacked. He isn’t acting like a victim.

      If he had the slightest concern about “protecting his wife” the simplest way would have been to call the FBI right away – then he couldn’t be expected to comment on an ongoing investigation, it’s the perfect cover.

      So why didn’t he? The only plausible alternative to him having done it himself is that he knows an investigation would turn up far worse stuff he’s been doing.

      Those are your reasonable choices. Hackers and Lobster-men just aren’t likely.

      • steve010

        under examination, a hacker would become evident, and even if the hacker isn’t found, the investigator would be able to confirm quickly that the data came from somewhere other than Weiner’s ip.

        My belief is that this is an Occam’s Razor moment. The simplest explanation is that the message data came from his home computer ip or blackberry ip and now after consulting with his IT staff, he knows he can’t cover it up.

    • The_Gadfly

      prove to me he is lying. I don’t know EXACTLY what he is lying about or why, I just know he is lying.

      Other posters here have correctly noted that IF your account gets hacked and you are in government, there are certain proscribed process you follow, most of which eventually involve law enforcement. He didn’t. It is possible he was hacked. But the only reason NOT to follow the process is because you KNOW who the hacker was and you are protecting him.

      It’s also possible he fat fingered a message he intended to send to someone specific, and inadvertently posted it publicly. Or that he did so when drunk or something and when he realized what happened, needed a cover story for the “indiscretion.”

      I’m sure there are other possibilities, these are just two that immediately come to mind and seem reasonably plausible.

      • jaykali

        That part leads me to believe he’s guilty of something.

        But just look at what happened. His name is ‘Weiner’, it’s a funny looking crotch shot, directed at someone he’s never met, on his public timeline. Those type of facts seem to lean more toward cruel prank than Brett Favre-type sexual harrassment.

        I am trying to be fair to the guy, if it was a shirtless picture of him directed at a chick like the last congressman then it would be case closed. But the weirdness of it makes it fuzzy and his bizarre behavior makes him look guilty of something.

        The picture must be of him but it could have been from a long time ago – regardless I think he calculated that if he admits the picture is of him that alone will make him at least guilty of lewd conduct even if it was stolen and published.

        As of right this second that would be my guess, I don’t think he published the pic, I think it was compromised but the pic is of him which would explain his bizzarre behavior.

        • Locked and Loaded

          and in the process, you are being very dismissive of a great number of sensible Americans of all stripes.

          • jaykali

            But in 24 hours I have already I think abandoned my position that he could be the victim here, his behavior is so strange that it seems he definitely was involved in something fishy.

    • streiff

      which is just as plausible

  • victrola

    When the Mark Sanford story broke, I was the first one asking for his resignation. I was angry at him, not my political opponents, for making our entire “team” look bad, and I certainly did not want to make myself look like a fool to defend someone that didn’t deserve it. Does anyone with half a brain really think this was an elaborate set up by conservatives?

    I would have “bought” the hacking story (just because I couldn’t believe a seasoned politician could be that stupid, shame on me) but his behavior says loud and clear that he’s lying.

    If this was a hack, he would A) called law enforcement to investigate, hacking a US Congressman’s computer is a very big deal and a normal victim would want the perpetrators to be found and made an example of B) denied the picture was actually him (not that hard to do, how many pics of your crotch do you possibly have floating around and C) had a reasonable explanation of why he seemed to have a strange”friendship” with a young co-ed.

    At the end of the day, it is nice to see that even the liberal MSM that would have liked to spike this story can’t, the alternative media dragged this story bag into the spotlight (thanks Breitbart) You can tell reporters are absolutely beside themselves that they’re having to cover this story.

    Weiner’s career is over, he’ll never be Mayor of NYC, and he’ll likely lose his primary for his Congressional seat for the next election if he doesn’t step down. It really could not have happened to a more shrill or disgusting figure.

    • radicalrighty

      Weiner’s career is over?

      Hardly. Why? Because he is a Democrat. See Barney Frank, Charlie Rangle, Bill Clinton, etc.

      Lefties circle the wagons and protect their lawbreakers. Weiner will probably get a higher perchantage of the vote in his district next election cycle.

    • http://impudent.edublogs.org/ kyle8

      Republicans have ethics and standards, therefore they have something to live up to, and when they fail they have to face the music.

      But being a Democrat is so much easier. Make threats, steal campaign material, slash opponents tires, philander, commit adultery, run a gay prostitution ring, contribute to financial disaster, use military jets for private fundraisers, give billions to union cronies, lie all the time, support abortionists, commit character assassination, blunder into undeclared wars, steal money.

      The sky is the limit when your constituents do not expect you to have any ethics.

      They truly are the evil party.

      • vandalii

        nt

  • NeoKong

    Why do we have to pretend it could have been someone else….?
    It was him.
    He did it and everyone knows it.
    If he was innocent he would have gone to the police in a heart beat especially if he could pin it on some right- wing blogger.

    If his account is so easy to hack then why doesn’t someone just go ahead and do it again to prove their point…?

    Let them do it to Rush Limbaugh or Michele Bachmann to prove their case.
    They can’t.

    It was Weiner.
    Case closed.

    • littlehouse18

      His behavior, words, and body language are Obvious. He did it himself. Sometimes you just gotta use a little common sense. It’s also the simplest explanation, which is usually the correct one.

  • milo

    you’ll note that in the comments to the cannonfire post, i questioned the URL not posting theory and said it needed more testing. my main point was that with someone’s yfrog email you could easily duplicate what happened to weiner.

    • Adjoran

      Victims demand justice. Victims call the cops.

      Perps call lawyers.

      Weiner refuses to call the cops, and called the lawyers.

      If it looks like a duck, walks like a duck, and quacks like a duck – it’s almost certainly not a hippopotamus.

      • milo

        how many people do you know that have had their facebook password phished. how many have involved the police? the fact that he hasn’t reported it as a crime does not suprise me. this guy is a new yorker, if you’ve lived in manhattan you’ll know that petty crime get shrugged off all the time, you don’t bother with the cops. but if you find the guy, you beat him down.

        • davesinsanantonio

          ambitions! If you have been in public office for more than a few days, you know the importance of jumping on something like this immediately. Weiner didn’t jump, he skulked. He didn’t demand justice, he evaded, he equivocated, he bullied, he weaseled.
          Even if he is squeaky clean on this, which no one really believes, he comes across as a sleaze. Because that is what he basically is. The only people who will vote for him now are other sleazes or their true believing fellow travellers. Nobody with brains will accept his whiny twisted dodging aggressive non-answers.

        • streiff

          the man hasn’t even denied that 1) it is his rather unimpressive junk or 2) that he did it.

          If you want to be an apologist, fine. But don’t make us watch you go throw a self-beclowning because it demeans us.

        • vandalii

          As a politician, he more than “Joe Plumber” would see to be exonerated of this scandal if he were truly innocent. He should be screaming for the hacker (or pranker) to be caught and his besmirched name restored. And without stretching, he *had* been following this hapless co-ed for some time. Hmm…

          Instead of protesting his innocence, he lawyers-up and talks about pie-throwing. Can you say, “mis-direction”? If you’ve ever watchd the show “Lie To Me”, you’ll know we’re talking about here.

          Amazing how the willfully deluded will continue to defend their indefensible (and tainted) heroes.

          Maybe a first step to prove his innocence regarding the photo itself would be to have someone (maybe a “trained” TSA agent? ;-) check the picture against his physical attachment for identifying marks like moles or bends or size? Seemed to work for Clinton…oh wait, that *exposed* Clinton, that’s right.

  • ohiohistorian

    I think that Weiner’s wiener was framed;)

  • milo

    i find this interesting, at the very least.

    http://i89.photobucket.com/albums/k225/milowent/disabled11-55et6-1-2011.jpg

  • garhighway4

    …to hack a yFrog account.

    http://littlegreenfootballs.com/page/248630_yfrog_secret_email_addresses_a

    I’m no expert, but this doesn’t sound hard to do.

    • http://slcliberty.blogivists.com randy streu

      first, somebody would have had to be motivated to do so. And of course, the ability to do something, doesn’t mean it happened that way. As Caleb demonstrated above, it’s also just as easy to DO IT YOURSELF without being hacked.

      The point is that this idea of “it HAD to be a hacker” is just stupid, and patently false.

      And, as somebody in another thread mentioned, there’s the fact that Weiner told reporters he couldn’t say “with certitude” whether it was a picture of him or not. Which means, of course, that such a picture does, in fact, exist.

      I dunno about you, but if somebody showed a picture of random manhood around, I could absolutely say “with certitude” that it wasn’t mine.

    • streiff

      the most likely explanation, sure it is easy to do.

      • acat
        • http://slcliberty.blogivists.com randy streu

          nt

  • paledon

    Well, if Cannonfire is so confident then turn your evidence over to the FBI so they can open an investigation. It does not require the victim to file a complaint to open an investigation. If his account was really hacked it is no a federal crime and the perpetrator needs to be prosecuted. But Cannonfire or any other left leaning blog or news agency wont press it because it will only take the FBI a warrant and 15 minutes and they will find exactly what web addy. sent it. What ever computer sent it whether they hacked his account and posted through his account it leaves a trail. This could be resolved in a few days and if there is a real person behind this they would be caught. Mr. Weiner won’t go to the authorities is because he is hiding something. Whether it is he sent the pic, or knows who did, or he could be hiding the fact he has a small penis. One way or another he is hiding something. Will politicians ever learn. Or will they always think they are above the law.

  • realskinny

    If the Left believed Weiner was hacked, they’d think someone on the Right was behind it. They would be screaming for an investigation so the right-wing SOB could be punished and they could indulge in some right-wing bashing.

    The lack of calls for an investigation by Democrats shouts their belief in Weiner’s guilt.

  • Pingback: click here