When big tech gets careless: Google Forms spam

So lately, I’ve seen a thing in my inbox. Well, I mean, I see a lot of things in my inbox, but this is an annoying thing: 419 scams inside Google Forms invites.

I’m getting a ton of these:

Google forms spam

In spam fighting communities, these are called “419 scams,” from Section 419 of the Nigerian criminal code. Most of them originate from Nigeria, and they’re a form of scam called “advance fee fraud,” where the scammer promises to give you a lot of money if you just pay these fees (bank certification fees, wire transfer fees, blah blah blah whatever) in advance. You pay all the fees and then you get…nothing. That’s it. That’s the whole scam.

I’ve noticed an absolutely enormous uptick in 419 scam emails using Google Forms as well. In fact, I’ve spent the past few weeks collecting examples and figuring out what’s happening, and I think I have a handle on what’s going on.

419 scams are a large, bulk-market business. Maybe 1 person in 10,000 is dumb enough to fall for these scams. (Fun fact, the scammers use the slang term “maga” to refer to the dupes fooled by these scams; in a pidgin of English and Yorùbá often used by these scammers in Nigeria, “maga” means “fool.”) That means a 419 scammer has to send a lot of emails to succeed.

But spam filters, especially Bayesian filters, have become really, really good at detecting 419 scams. In fact, many spam filters actually have “probably 419” as one of their identifiers for spam email.

Enter Google.

Google lets people send emails for free using Gmail. However, Gmail mail gets passed through normal spam filters, which flags the bulk of 419 scams.

However, Google has a service where you can create a Google Form and then invite people to visit your Google Form. And for some reason I don’t understand, outgoing invitations from Google servers for a Google Form don’t pass through Google’s spam filters—don’t ask me why.

Furthermore, the Google Form header or HTML wrapper or something seems to prevent client-side or email-host-side spam filters from identifying the emails as 419 scams, too. Why? ¯_ಠ

For whatever reason, 419 scams that appear within the body of a Google Form invitation fly right past spam filters. As soon as the 419 scammers discovered this, they were all over it like flies on cowshit. At the moment, I’m receiving several of these emails an hour.

It started a few weeks ago and shows no sign of letting up. I’ve emailed Google’s abuse team multiple times about it but so far no reply.

Check out my new book!

2020 has been a bit shit, no question about it. However, it’s also been the most creative year of my entire life, in no small measure because I’ve been spending all my time at home away from people.

I’m pleased to announce that one of the many projects I’ve been working on, a new novel with the delightful Eunice Hung, is now coming to fruition.

We have written the first in a series of far-future, post-scarcity erotic science fiction theocracy novels called The Passionate Pantheon. May I present: The Brazen Altar.

The book doesn’t publish until May 1, 2021, but you can get a copy before then and also help show there’s a market for smart, literate erotica with nuanced characters and rich worldbuilding! The book is live now on Indiegogo, and you can get it early for less than cover price!

The followup novel, Divine Burdens, publishes Fall 2021. Want to find out more about the world of The Passionate Pantheon? The Web site for the series is live! I guarantee you’ve never seen erotica anything like this before.

Apple Silicon and losing our legacy

[Edit] This post sparked a conversation on Ycombinator!

I am concerned about Apple’s move to its own home-grown processors.

It’s not because I’m worried about the new silicon, or Apple’s ability to make high-performance CPUs, or even because I am worried about changing architectures. I survived the move from Motorola 68K processors to PowerPC, and PowerPC to Intel.

I’m still using High Sierra on my 2016 MacBook Pro. I still have legacy 32-bit software I use professionally, and I also boot this computer into Windows with Boot Camp to play games like Fallout 4 and Witcher 3 that won’t run in Parallels.

I am concerned about the switch to Apple Silicon because I’m worried about what it means to archivists and historians.

I understand why Apple is doing it. I get it, I do. But I’m really worried about what it means to the legacy of the late 20th century.

Desktop publishing revolutionized human communication. It’s hard to overstate what a Big Deal desktop publishing was. It arguably democratized communication more than any other invention since the printing press. It fueled an explosion of creativity and led to a boom in the underground ‘zine scene.

PageMaker, the first DTP software, revolutionized entire industries…plural. Overnight the entire publishing community moved to it.

And, of course, mergers and acquisitions happened as the disruption shook itself out. Aldus, the startup that created PageMaker, got swallowed by Adobe. Quark arose to compete, and a lot of the industry jumped ship, since QuarkXPress was objectively better. Then Adobe created a new program, InDesign, which was objectively better than QuarkXPress, and the industry moved on. That’s how capitalism is supposed to work, right?

But here’s the thing:

A vast chunk of the history of desktop publishing, including countless underground ’zines of significant cultural and historical value, are still tied up in old files. Old files that can still be accessed, albeit with difficulty.

InDesign CS6 can open PageMaker and QuarkXPress documents. Later versions dropped the ability to open PageMaker files.

Old Mac emulators like SheepShaver can open even older files, by running ancient PowerPC apps directly. I recently rescued a bunch of old ‘zines I published in the early 90s this way.

But a window is closing.

It’s starting to close even without the move to Apple Silicon. When I set up a SheepShaver PowerPC Mac emulator to install the software to rescue these files, one of the pieces of software tried to contact activation servers that went offline in 1999. I had to do a bit of hacking to get the software to install.

I opened PageMaker 4 files in PageMaker 6, opened the PageMaker 6 files in InDesign CS6, and opened the InDesign CS6 files in InDesign 2020.

I opened Macromedia Freehand files in Freehand, saved them as EPS, opened the EPS files in Illustrator 6, saved them, and opened them in Illustrator 2020.

Now here it gets tricky.

InDesign CS6, the last modern app that can read a PageMaker file, won’t run on new versions of macOS because it’s 32-bit only.

It won’t run in emulators like SheepShaver because it’s OS X only.

SheepShaver and InDesign CS6 both won’t run on Apple Silicon.

We are on the cusp of losing the ability to open PageMaker files completely.

In a perfect world, someone would write a Mac emulator that lets you emulate a High Sierra Mac on Apple Silicon hardware, just like SheepShaver lets you emulate a PowerPC Mac on Intel hardware. If you can bring old software and old emulators with you, those people—historians, digital archivists, and the like—can, with enough faffing, still recover the rich legacy of information from the early days of desktop publishing.

But for various arcane technical reasons, writing an emulator for x86–64 on ARM is a huge undertaking, something beyond what an open source project is likely to do. I honestly don’t see the open source community writing a Mac emulator that will run High Sierra on Apple Silicon. Emulating x86 on ARM is an enormous project, one that requires a well-resources company to do.

A company like…Apple.

It turns out Apple has done this. It’s called Rosetta 2 and it’s built into Big Sur.

What I’d like to see is Apple donate code to emulate an Intel processor on ARM to the open source community, so they can build an emulator for Intel Macs. This would permit access to ancient files and legacy software—albeit with rather a lot of faffing—and permit access to apps and files all the way back to the PowerPC (and 68K, since the PowerPC system 9 has a 68K emulator). This would, I feel, show corporate responsibility on Apple’s part, without really costing them anything. The Intel emulation is already done.

But without that? I really do feel we as a society are, in the relentless march of late-stage capitalism, destroying part of our own history simply because there’s no profit in keeping it.

And that worries me.