From: Declan McCullagh <declan@pathfinder.com>
To: Alan <alan@ctrl-alt-del.com>
Message Hash: b671cf839efbb753f258d9d2c27d093a9062aeaa58689ed1eaa71668907fddfc
Message ID: <Pine.GSO.3.95.970719015013.17780A-100000@cp.pathfinder.com>
Reply To: <Pine.LNX.3.95.970718201810.14227A-100000@www.ctrl-alt-del.com>
UTC Datetime: 1997-07-19 05:59:27 UTC
Raw Date: Sat, 19 Jul 1997 13:59:27 +0800
From: Declan McCullagh <declan@pathfinder.com>
Date: Sat, 19 Jul 1997 13:59:27 +0800
To: Alan <alan@ctrl-alt-del.com>
Subject: Re: Something of Interest (fwd)
In-Reply-To: <Pine.LNX.3.95.970718201810.14227A-100000@www.ctrl-alt-del.com>
Message-ID: <Pine.GSO.3.95.970719015013.17780A-100000@cp.pathfinder.com>
MIME-Version: 1.0
Content-Type: text/plain
Hey, I'm here. Didn't get one of these IRS msgs at any of my accounts.
Is it just me, or does anyone else remember a similar message being pumped
out about the same time Bell was raided (April 1).
-Declan
On Fri, 18 Jul 1997, Alan wrote:
>
> On Fri, 18 Jul 1997, Tim May wrote:
>
> >
> > At 3:56 PM -0700 7/18/97, Alan wrote:
> > >I recieved this today via e-mail. I find it strange since I have never
> > >asked to be put on any sort of "interest list" by anyone at the IRS. (And
> > >my Cypherpunks mail shows up at a different address.
> >
> > What makes you think the "interest" is your interest in them?
> >
> > It's _their_ interest in _you_.
>
> Yes. It looks like every e-mail address on Jim Bell's computer got this
> nice little "warning/example".
>
> Has there ever been a case where seized e-mail addresses have been used to
> spam those listed with the results of the case?
>
> Where is Declan when you need him. ]:>
>
> > Yes, I got _two_ copies of this message. I'm waiting to confirm it was
> > really sent by a sender at the IRS, namely, " IRS Inspection
> > <irsnwpr@net.insp.irs.gov>", before taking action.
>
> If it is a forgery, it is a *very* good forgery. The addresses in the
> header are registered to the US government. The headers do not look like
> the standard sendmail spoof. It looks pretty damn legit to me. (I have a
> freind who also recieved this that has his copy of sendmail to keep pretty
> impresive logs as to sender's identity. It does not look like a spoof,
> unless they hacked behind the IRS firewall.)
>
>
> alan@ctrl-alt-del.com | Note to AOL users: for a quick shortcut to reply
> Alan Olsen | to my mail, just hit the ctrl, alt and del keys.
>
>
>
Return to July 1997
Return to “Tim May <tcmay@got.net>”