[109666] in Cypherpunks
Re: Melissa offshoot uses nym.alias.net
daemon@ATHENA.MIT.EDU (Robert A. Costner)
Thu Apr 1 01:08:51 1999
Date: Thu, 01 Apr 1999 00:49:40 -0500
To: cypherpunks@cyberpass.net
From: "Robert A. Costner" <pooh@efga.org>
In-Reply-To: <199904010500.HAA18409@mail.replay.com>
Reply-To: "Robert A. Costner" <pooh@efga.org>
At 07:00 AM 4/1/99 +0200, Anonymous wrote:
>This from ZDNet:
>
>: Syndicate takes the nasty Melissa scourge one step further, letting the
>: owner of one e-mail address track its spread. The so-called Syndicate
>: virus, reported by Computer Associates, acts just like Melissa -- except
>: that it sends out 70 e-mails, 69 that spread the virus to others, and
>: one to the e-mail address project1@nym.alias.net that reads "Guess whos
>: infected:" followed by the e-mail of the person who just received the
>: virus. The e-mail address appears to be anonymous. <P>
>
>nym.alias.net is one of the main cypherpunk-oriented anonymous reply
>remailers. Will we see law enforcement try to find out who project1 is?
There was, and probably still is a particular account at redneck.efga.org,
another popular nymserver, that is used to report back on a particular Word
macro virus. I think this one sends a message of "hot monkey love" to
someone who is involved in an anti-virus site. I emailed the nym and seem
to recall he verified that he wrote the virus. I have no idea what his
reply block looks like.
We would have canceled his nym account, but we couldn't find a good AUP
violation to use, nor did we see how it was doing any harm to have the
account around.
-- Robert Costner Phone: (770) 402-3580
Electronic Frontiers Georgia mailto:pooh@efga.org
http://www.efga.org/ run PGP 5.0 for my public key
