1997-07-19 - Re: Something of Interest (fwd)

Header Data

From: Declan McCullagh <declan@pathfinder.com>
To: Alan <alan@ctrl-alt-del.com>
Message Hash: b671cf839efbb753f258d9d2c27d093a9062aeaa58689ed1eaa71668907fddfc
Message ID: <Pine.GSO.3.95.970719015013.17780A-100000@cp.pathfinder.com>
Reply To: <Pine.LNX.3.95.970718201810.14227A-100000@www.ctrl-alt-del.com>
UTC Datetime: 1997-07-19 05:59:27 UTC
Raw Date: Sat, 19 Jul 1997 13:59:27 +0800

Raw message

From: Declan McCullagh <declan@pathfinder.com>
Date: Sat, 19 Jul 1997 13:59:27 +0800
To: Alan <alan@ctrl-alt-del.com>
Subject: Re: Something of Interest (fwd)
In-Reply-To: <Pine.LNX.3.95.970718201810.14227A-100000@www.ctrl-alt-del.com>
Message-ID: <Pine.GSO.3.95.970719015013.17780A-100000@cp.pathfinder.com>
MIME-Version: 1.0
Content-Type: text/plain



Hey, I'm here. Didn't get one of these IRS msgs at any of my accounts.

Is it just me, or does anyone else remember a similar message being pumped
out about the same time Bell was raided (April 1).

-Declan


On Fri, 18 Jul 1997, Alan wrote:

> 
> On Fri, 18 Jul 1997, Tim May wrote:
> 
> > 
> > At 3:56 PM -0700 7/18/97, Alan wrote:
> > >I recieved this today via e-mail.  I find it strange since I have never
> > >asked to be put on any sort of "interest list" by anyone at the IRS.  (And
> > >my Cypherpunks mail shows up at a different address.
> > 
> > What makes you think the "interest" is your interest in them?
> > 
> > It's _their_ interest in _you_.
> 
> Yes.  It looks like every e-mail address on Jim Bell's computer got this
> nice little "warning/example".
> 
> Has there ever been a case where seized e-mail addresses have been used to
> spam those listed with the results of the case?
> 
> Where is Declan when you need him. ]:>
> 
> > Yes, I got _two_ copies of this message. I'm waiting to confirm it was
> > really sent by a sender at the IRS, namely, " IRS Inspection
> > <irsnwpr@net.insp.irs.gov>", before taking action.
> 
> If it is a forgery, it is a *very* good forgery.  The addresses in the
> header are registered to the US government.  The headers do not look like
> the standard sendmail spoof.  It looks pretty damn legit to me.  (I have a
> freind who also recieved this that has his copy of sendmail to keep pretty
> impresive logs as to sender's identity.  It does not look like a spoof,
> unless they hacked behind the IRS firewall.)
> 
> 
> alan@ctrl-alt-del.com | Note to AOL users: for a quick shortcut to reply
> Alan Olsen            | to my mail, just hit the ctrl, alt and del keys.
> 
> 
> 






Thread