Re: ADMIN: Mark's message was a spoof

Jim Phillips (jim@ks.uiuc.edu)
Fri, 9 May 1997 14:53:26 -0500

Hi,

If you look at the headers on the message you will see that it originated
from lectprep7.physics.uiuc.edu, which is apparently a PC since it doesn't
respond to any connection requests as far as I can tell. As such you can type
anything you want into the "From" field of the mailer. This was a low-grade
spoof and pretty easy to spot. There are more sophisticated methods which can
hide this data, but CCSO is pretty on-the-ball about preventing those. If
we're lucky, whoever pulled this shit will send one to whitehouse.gov as well
so the Secret Service can take care of him for us. ;-)

Thanks for checking this out, Scott.

-Jim