We really don’t know anything about the “Ministers for Keryl” email

Here’s something I recently learned: You can create a free account on MailChimp, the bulk mailer used by the Keryl Douglas campaign and also by whoever sent that awful “Ministers for Keryl” email. You can do this pretty much anonymously, and can send a lot of email that way. See for yourself.

With MailChimp’s Forever Free plan, you can send 12,000 emails a month to a list of up to 2,000 subscribers, but there are a few features that are only available to users with paid accounts.

Is it really free forever?

Yep, there’s no catch. As long as you’ve got less than 2,000 subscribers, you can send up to 12,000 emails per month without paying us a dime. We won’t even ask for a credit card.

Here’s a screenshot from their Signup page:

So what that means is that we really don’t know who sent that “Ministers for Keryl” email. All that fancy analysis of the headers tells us is that the email was sent via MailChimp. We can’t determine anything further from it. It means that Keryl Douglas’ denial is entirely plausible. Anyone, for any reason, could have done this. Two thousand emails are more than enough to make it seem like a normal email blast. The only way we can get closer to the truth is for MailChimp to provide whatever details it can about the email from its logs. Maybe the IP address will tell us something, or maybe the sender accidentally exposed some other information about himself or herself. Everything else is just speculation.

Now, this doesn’t mean that the Keryl Douglas campaign didn’t send that email. Sometimes the simplest explanation is the best one. However, knowing about this free service means that in the absence of any further information from MailChimp, there is sufficient reasonable doubt to acquit. Douglas has said she filed a criminal complaint about this, and I hope that means HPD is investigating and that they have requested and received log files from MailChimp. If not, the longer we go without an answer the more likely we’ll never get one, because sooner or later those log files are going to be deleted or overwritten. If someone with a stake in this hasn’t made that request by now, time is running out.

As I’ve thought about this, I’ve debated whether the sender of this email was really smart, or really stupid. I’m now leaning towards “smart, but maybe not as smart as they think”. The thing that’s been nagging at me is the difference in the List-Unsubscribe information between the legitimate Douglas email and the Ministers email. If you’re smart enough to know that the Douglas campaign uses MailChimp and you want to frame them for something like this, why not use the same list name her campaign had used before? Of course, changing it from the generic “democrats” to the more provocative “keryldouglascampaign” did accomplish the goal of getting someone to point a finger, and maybe that’s all any potential troublemaker might have cared about. It stands out as odd under scrutiny, but it sure did take me long enough to notice, and any intended damage is already done. And who knows, maybe I’m just overthinking this. The less you know for sure, the more you want to try to fill in the blanks.

One thing I do know for sure is that if I’m affiliated with a campaign, I would not use MailChimp on a bet. This episode demonstrates clearly that it’s far too insecure to use for that purpose. Use a mailer that doesn’t allow freebies, or take your chances that someone will spoof you. Consider yourselves warned.

Related Posts:

This entry was posted in Election 2012 and tagged , , , , . Bookmark the permalink.

6 Responses to We really don’t know anything about the “Ministers for Keryl” email

  1. Paul Havlak says:

    We may know more than that:

    – The headers establish that the emails came from MailChimp.

    – *If* the metadata at the end of the “Ministers” emails, mentioned earlier by you and the Dallas Voice as agreeing with that from the KD campaign, are part of the MailChimp wrapper (not part of the user-determined message) *and* encode a unique identifier for the originating MailChimp account, then the “Ministers” emails came from the campaign’s account.

  2. IPonder says:

    Another issue: why is there a PO box on the ministers email registered in denver harbor, but in the orig douglas emails from jan. the address is to the douglas home?
    This thing just makes not alot of sense-and more and more folks every day are concluding this. Something stinks.

  3. joshua bullard says:

    This is about as close as we will ever get from a full charles kuffner retraction-lets now talk about the facts-lane lewis ran a highly overlly aggressive campaign when he ran for city council-he came up with the questable legal campaign tactics that many said where down right deplorable-this kid has a chip on his shoulder and is a live wire ready to burst.
    I invite further scientific investigation into this matter because the more we keep looking at it the further away we get from the falsey accussed keryl and might we find the true “evil doers”,

    i knew along keryls campaign would never have any thing to do with that sick letter,

    this race will be close,but keryl wins by a few steps and rightfully so

    “joshua” ben “bullard”…………………….2012

  4. IPonder says:

    If there is such doubt now 2 wks into this should some of the politicans etc retract some of their remarks pertaining to douglas herself? condemn the language but should there now be a period of retractions on calling douglas herself a bigot? It would seem so.
    thx kuff for doing all this work

  5. Devil's Advocate says:

    Paul,

    This is where you’re missing the point, the vaunted metadata only has to do with the name of the list so anyone can go into MailChimp and open up an account, create an email list and name it KerylDouglasCamapaign and send the email out. What’s captured on the screenshot that Kuff links to is what the email list was named and that could be done by anyone under any account. Open up a dummy account and test for yourself. Keryl’s past emails were sent to a list named Democrats. Also, with MailChimp you’re required to provide a website without verifying you’re the web owner.

    This doesn’t absolve Keryl, but it also doesn’t indict her.

  6. Paul Havlak says:

    Regarding the metadata, I don’t mean the embedded URL, I mean the “u=” and “id=” fields. I haven’t had time to determine whether those values uniquely identify a MailChimp account or not. That would require experiments with two different MailChimp accounts *or* a discussion with the MailChimp support staff.

    I’m working on it, but no promises…

Comments are closed.