headers
Edward Lewis | 21 Jan 2004 10:02

Re: Hi

For those that might not have seen this...

...this likely wasn't sent by Scott (unless he's 
gone all evil on us), but was sent by something 
that forges "From" addresses to look like it was 
a legitimate list user.

At 23:22 +0100 1/20/04, shollenbeck <at> verisign.com wrote:
>  Test =)
>vydjjruuqei
>--
>Test, yep.
>
>Attachment converted: edlewis:ihhy.exe (bina/«IC») (00012248)

--

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis                                            +1-703-227-9854
ARIN Research Engineer

History repeats, therefore my life is a rerun.
Permalink | Reply | 0 comments |
headers
Hollenbeck, Scott | 21 Jan 2004 13:04
Picon
Favicon

RE: Hi

Nope, not me.  This is the beagle/bagel virus, and I'm clean!

-Scott-

> -----Original Message-----
> From: Edward Lewis [mailto:edlewis <at> arin.net] 
> Sent: Wednesday, January 21, 2004 4:02 AM
> To: shollenbeck <at> verisign.com
> Cc: ietf-provreg <at> cafax.se
> Subject: Re: [ietf-provreg] Hi
> 
> 
> For those that might not have seen this...
> 
> ...this likely wasn't sent by Scott (unless he's 
> gone all evil on us), but was sent by something 
> that forges "From" addresses to look like it was 
> a legitimate list user.
> 
> At 23:22 +0100 1/20/04, shollenbeck <at> verisign.com wrote:
> >  Test =)
> >vydjjruuqei
> >--
> >Test, yep.
> >
> >Attachment converted: edlewis:ihhy.exe (bina/<IC>) (00012248)
> 
> -- 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> -=-=-=-=-
(Continue reading)

Permalink | Reply | 1 comment |
headers
Eric Brunner-Williams in Portland Maine | 21 Jan 2004 14:29
Favicon

Re: Hi

> unless he's gone all evil on us

Scott, if you had gone all evil on us, would you tell us that you had?

I assume it is the semi-annual who-uses-open-malware race.
LibertyRMS beat VGRS.
Wild cheering somewhere.

Eric
Permalink | Reply | 0 comments |
headers
Hollenbeck, Scott | 21 Jan 2004 14:22
Picon
Favicon

RE: Hi

> > unless he's gone all evil on us
> 
> Scott, if you had gone all evil on us, would you tell us that you had?

Of course -- I imagine it wouldn't be any fun being evil if no one knew
about it.

-Scott-
Permalink | Reply | 502 comments |
headers
Eric Brunner-Williams in Portland Maine | 21 Jan 2004 15:43
Favicon

Re: Hi

How do you feel about coming in 2nd to Micheal Young?

Does VGRS have a statement on LRMS's prior announcement of its revolutionary
new "cwatwvrpymnd" registry service?

Are these two new registry services, LRMS's "cwatwvrpymnd", and VGRS's
"vydjjruuqei", compatible?

How do I sign up to participate in the new, lucrative resale channel
partners of each registry for these amazing new services?

Eric

P.S. The gal in marketing wants to know how to pronounce these damn things.
Permalink | Reply | 502 comments |
headers
Ram Mohan | 21 Jan 2004 15:49

Re: Hi

Eric,
I spoke with Michael Young (he works for Afilias) regarding the worm
attachment.

He was neither online at the time of the mail, nor were any of the computers
he uses in a normal manner online.  The header is of course munged by the
mailing list software so it's hard to say if the origination was valid or
spoofed.

Wonder if someone's mining the archives and spoofing?

-ram
ps: the "cwatwvrpymnd" registry service is a top-secret offering -- it is
pronounced "ChewATyourmind"
----- Original Message ----- 
From: "Eric Brunner-Williams in Portland Maine" <brunner <at> nic-naa.net>
To: "Hollenbeck, Scott" <shollenbeck <at> verisign.com>
Cc: "'Eric Brunner-Williams in Portland Maine'" <brunner <at> nic-naa.net>;
"'Edward Lewis'" <edlewis <at> arin.net>; <ietf-provreg <at> cafax.se>;
<brunner <at> nic-naa.net>
Sent: Wednesday, January 21, 2004 9:43 AM
Subject: Re: [ietf-provreg] Hi

> How do you feel about coming in 2nd to Micheal Young?
>
> Does VGRS have a statement on LRMS's prior announcement of its
revolutionary
> new "cwatwvrpymnd" registry service?
>
> Are these two new registry services, LRMS's "cwatwvrpymnd", and VGRS's
(Continue reading)

Permalink | Reply | 3 comments |
headers
Eric Brunner-Williams in Portland Maine | 21 Jan 2004 16:34
Favicon

Re: Hi

> He was neither online at the time of the mail, nor were any of the computers
> he uses in a normal manner online.

I once toyed with the idea of writing conformance tests for network devices
that were powered off, extending the cluekit for 1022/1023 conformance tests.

Thanks for pointing out the category of tests for unpowered or detached nodes
to originate or relay SMTP state and date.

Now, how do you folks at afilias say "cwatwvrpymnd"? Enquiring minds want to
know.

Thanks in advance Ram.
Eric
Permalink | Reply | 2 comments |
headers
Michael Young | 21 Jan 2004 17:11

RE: Hi

Hey all I can say is I am innocent and officially spoofed. By the way its
pronounced "cat ver pemmed" as the w is considered silent.  :-)  

Michael Young 
-----Original Message-----
From: owner-ietf-provreg <at> cafax.se [mailto:owner-ietf-provreg <at> cafax.se] On
Behalf Of Eric Brunner-Williams in Portland Maine
Sent: January 21, 2004 10:35 AM
To: Ram Mohan
Cc: Hollenbeck, Scott; Eric Brunner-Williams in Portland Maine; 'Edward
Lewis'; ietf-provreg <at> cafax.se; brunner <at> nic-naa.net
Subject: Re: [ietf-provreg] Hi 

> He was neither online at the time of the mail, nor were any of the 
> computers he uses in a normal manner online.

I once toyed with the idea of writing conformance tests for network devices
that were powered off, extending the cluekit for 1022/1023 conformance
tests.

Thanks for pointing out the category of tests for unpowered or detached
nodes to originate or relay SMTP state and date.

Now, how do you folks at afilias say "cwatwvrpymnd"? Enquiring minds want to
know.

Thanks in advance Ram.
Eric
(Continue reading)

Permalink | Reply | 1 comment |
headers
Eric Brunner-Williams in Portland Maine | 21 Jan 2004 17:29
Favicon

Re: Hi

> Hey all I can say is I am innocent and officially spoofed. By the way its
> pronounced "cat ver pemmed" as the w is considered silent.  :-)  

The W is considered silent? What a surprise.
Permalink | Reply | 0 comments |
headers
Hollenbeck, Scott | 29 Jan 2004 18:34
Picon
Favicon

EPP Document Status

The EPP document set is now in "RFC-EDITOR" status, which means the RFC
Editor is doing their final work on the documents before passing them to me
for final editorial review.  We should have RFCs pretty soon now!

-Scott-
Permalink | Reply | 0 comments |

Gmane