Is he real or just raed?

Paul Boutin takes a shot at finding out for sure.

Rather than guess, I emailed Salam and asked for proof of his location just before the first attack on Baghdad this morning. "how can i do that?" he emailed back. "you don't expect me to run out in the street and take a picture near something you'll recognize." Actually, I pointed out, a +964 phone number where I could reach him would do. Dialing into Iraq from here is tough right now, but not impossible, and rerouting a phone number would be much tougher than posting a blog from outside the country. Salam hasn't given me one, but that's understandable.

Instead, I mixed what I learned as a Unix sysadmin in the 80s with what I learned as a daily reporter in the 90s. A barrage of late-night phone calls and emails to bloggers, Google, and network engineers produced the following evidence:

- Salam claims to connect to the Net via Uruklink, the state-run Iraqi ISP, using Web-based email from the British music magazine New Musical Express. Remember the Sex Pistols line, "I use the NME?" So does he.

IP addresses in his email headers aren't sufficient to pinpoint his location, but they're consistent with his story, being in the same range used by past Uruklink posters. I'm reluctant to publish his exact headers.

A whois and traceroute on Salam's most recent originating address got as far as Transtrum, a unit of the Lebanon-based ISP TerraNet. Requests for further routing info from Transtrum went unanswered, but senior network engineers who looked at the headers for me in the US think they're legitimately from Iraq.

Here is the full text of the article in case the link goes bad:

http://paulboutin.weblogger.com/2003/03/20

Paul Boutin Technology writer for Slate, Wired, The New York Times, Salon, etc
Home | Portfolio | TV and Radio appearances | Bio | Résumé

Today's Entry:
Q: Is the Baghdad Blogger for real?
Permanent link to archive for 3/20/03. Thursday, March 20, 2003

A: Probably.

Speculation continues that Dear Raed, the weblog of a young man in Baghdad who posts under the name Salam Pax, is a hoax, perhaps even a disinformation campaign by the CIA or Mossad. A month after Computerworld published a story quoting a "terrorist" who turned out to be one of their former writers pranking them, it would be foolish not to wonder.

Rather than guess, I emailed Salam and asked for proof of his location just before the first attack on Baghdad this morning. "how can i do that?" he emailed back. "you don't expect me to run out in the street and take a picture near something you'll recognize." Actually, I pointed out, a +964 phone number where I could reach him would do. Dialing into Iraq from here is tough right now, but not impossible, and rerouting a phone number would be much tougher than posting a blog from outside the country. Salam hasn't given me one, but that's understandable.

Instead, I mixed what I learned as a Unix sysadmin in the 80s with what I learned as a daily reporter in the 90s. A barrage of late-night phone calls and emails to bloggers, Google, and network engineers produced the following evidence:

- Salam claims to connect to the Net via Uruklink, the state-run Iraqi ISP, using Web-based email from the British music magazine New Musical Express. Remember the Sex Pistols line, "I use the NME?" So does he.

IP addresses in his email headers aren't sufficient to pinpoint his location, but they're consistent with his story, being in the same range used by past Uruklink posters. I'm reluctant to publish his exact headers.

A whois and traceroute on Salam's most recent originating address got as far as Transtrum, a unit of the Lebanon-based ISP TerraNet. Requests for further routing info from Transtrum went unanswered, but senior network engineers who looked at the headers for me in the US think they're legitimately from Iraq.

Details on Iraq's network can be found in this Salon story by Brian McWilliams, the same hacker/journalist who duped Computerworld and cracked the "send email to Saddam" mailbox on Uruklink.

- Salam's blog is hosted in Santa Clara, California, at a high speed co-location facility along with the rest of blogspot.com. This seems obvious to Net veterans, but an MSNBC article's wording misled some readers into believing the site is served from Iraq. Salam posts his blog remotely using Blogger's editing software on a PC. That means blogspot.com (aka Pyra, now a division of Google) has IP records of his previous posts in their log files. No luck getting them yet.

- Yes, blogspot.com was one of the domains blocked by Iraqi network administrators in January, possibly in response to Slammer. But Salam and other Iraqis know how to use Web proxies and other tricks to get around the blocks.

- Salam Pax is a pseudonym composed of the Arabic and Latin words for peace. But he has signed what may be his real name in personal correspondence to another blogger.

- At least one American has received a package from Salam, apparently mailed from Jordan where the titular Raed (a friend for whom Salam says he originally created his weblog) lives.

- Salam posted this morning to say BBC reports that state radio had been taken over were false. He was right about that.

In the end, it's still a matter of faith. Yes, I think he's really in Baghdad. And so far, he's still alive and well.