[DLC] MYSTERY! Fwd: [UIC-LUG] Flourish meeting 01/09/2008

Thu Jan 3 17:27:24 CST 2008

Okay... sure.  But going all the way to compromise his blackberry to send a
useful email to the list?  isn't that kinda counterproductive for the
attacker?

It's like... I hacked your box, downloaded all the patches and security
updates and installed them for you.  Oh, and the backdoor I got in through,
i closed that too.

--
Samir

On 1/3/08, Brian Engert <lart2150 at gmail.com> wrote:
>
> the body was base64 encoded but the headers are just fine.  I don't
> know if this is normal for blackberry's but this e-mail address looks
> a lot like a attack to me rushlogistics at sbcglobal.net@216.9.249.121
> but that ip is owned by Research In Motion Inc. who seems to do work
> with blackbarries.  does your blackberry keep track of sent e-mails?
>
>
> Received: from merlin.depaul.edu (unknown [127.0.0.1])
>         by merlin.depaul.edu (Postfix) with ESMTP
>         id 4F3B0180C9; Wed,  2 Jan 2008 17:21:10 -0600 (CST)
> Delivered-To: dlc at mailman.depaul.edu
> Received: from smtp102-mob.biz.mail.re2.yahoo.com
>         (smtp102-mob.biz.mail.re2.yahoo.com [206.190.36.117])
>         by merlin.depaul.edu (Postfix) with SMTP id 25FB218068
>         for <dlc at mailman.depaul.edu>; Wed,  2 Jan 2008 17:21:09 -0600
> (CST)
> Received: (qmail 61361 invoked from network); 2 Jan 2008 23:21:08 -0000
> Received: from unknown (HELO bda121-cell01.bisx.prod.on.blackberry)
>         (rushlogistics at sbcglobal.net@216.9.249.121 with xymcookie)
>         by smtp102-mob.biz.mail.re2.yahoo.com with SMTP;
>         2 Jan 2008 23:21:08 -0000
>
> On Jan 3, 2008 12:09 PM, Jamesha Y Fisher <jamfish728 at gmail.com> wrote:
> > Richard,
> >
> > Somebody might've possibly mimicked your header...cause when I looked at
> his
> > message in the archives, all I saw were lines of random characters.
> >
> > -Jamesha
> >
> >
> >
> > On Jan 3, 2008 11:31 AM, Gianfranco Berardi < pigeon_gb at yahoo.com>
> wrote:
> > > It's an election year? El Nino? Trans-universal echoes?
> > >
> > >
> > >
> > >
> > >
> > > --- Richard Reina <richard at rushlogistics.com> wrote:
> > >
> > > > This is very strange.  The message below says that it was sent from
> > > > me via my blackberry at 11:20 last night.  I was asleep by 9pm.  And
> > > > so were my wife and kids.  What is more is that my blackberry was
> put
> > > > away in the breast pocket of my coat where no one could have found
> it
> > > > much less figured out how to send an email from it.  There's also no
> > > > record of the outgoing email on the email log.  Does anyone know how
> > > > this could have happened?
> > > >
> > > > Thanks,
> > > >
> > > > Richard
> > > >
> > > > richard at rushlogistics.com wrote:
> > > > Sent via BlackBerry from T-Mobile
> > > >
> > > > -----Original Message-----
> > > > From: "Samir Faci"
> > > >
> > > > Date: Wed, 2 Jan 2008 17:15:36
> > > > To:"DePaul Linux Community"
> > > > Subject: [DLC] Fwd: [UIC-LUG] Flourish meeting 01/09/2008
> > > >
> > > >
> > > > For anyone interested in helping with flourish, an fyi on our next
> > > > planned meeting.
> > > >
> > > > ---------- Forwarded message ----------
> > > > From: Jen Anderson <
> > > > jander22 at uic.edu  >
> > > > Date: Jan 2, 2008 3:15 PM
> > > > Subject: [UIC-LUG] Flourish meeting 01/09/2008
> > > > To: LUG at listserv.uic.edu
> > > >
> > > > Hi Everyone!
> > > >
> > > > I hope everyone had a good holiday. Now that the crazy holiday
> season
> > > > has
> > > > passed, we were hoping to have one last Flourish meeting before the
> > > > Spring
> > > > Semester begins. Mark your calendars for Wednesday the 9th (one week
> > > > from
> > > > today) @5:30pm in the linux lounge (next to sel2262). We need to
> > > > finish off
> > > > our SAFC application, so any more speakers or sponsors need to be
> > > > added. We
> > > > will be proposing in front of the SAFC committee during their first
> > > > meeting
> > > > on the 14th or so.
> > > >
> > > > Also, we will also discuss the website, stage plans, and room
> > > > arrangements.
> > > > Now that we have more speakers and sponsors we will need to discuss
> > > > advertisements and t-shirts, as well as a more organized schedule. A
> > > > few
> > > > people could take ownership of some of the events as well.
> > > >
> > > > I hope you will all be able to make it. Flourish plans are finally
> > > > coming
> > > > together into something more organized and complete. Let's keep it
> > > > together
> > > > and make this year's Flourish better than the last! :)
> > > >
> > > > Hope to see you soon! :)
> > > >
> > > > Jen
> > > >
> > > >
> > >
> >
> -------------------------------------------------------------------------------
> > > > To post, send an email to lug at listserv.uic.edu   To UNSUBSCRIBE from
> > > > the listserv, send a message to listserv at uic.edu   with SIGNOFF LUG
> > > > in the message body.
> > > >  _______________________________________________
> > > > DLC mailing list
> > > > DLC at mailman.depaul.edu
> > > > http://mailman.depaul.edu/mailman/listinfo/dlc
> > > > http://linux.depaul.edu/
> > > >
> > > > _______________________________________________
> > > > DLC mailing list
> > > > DLC at mailman.depaul.edu
> > > > http://mailman.depaul.edu/mailman/listinfo/dlc
> > > > http://linux.depaul.edu/
> > > >
> > > >
> > > >
> > > > Your beliefs become your thoughts.  Your thoughts become your words.
> > > > Your words become your actions.  Your actions become your habits.
> > > > Your habits become your values.  Your values become your
> destiny.  --
> > > > Mahatma Gandhi> _______________________________________________
> > >
> > > > DLC mailing list
> > > > DLC at mailman.depaul.edu
> > > > http://mailman.depaul.edu/mailman/listinfo/dlc
> > > > http://linux.depaul.edu/
> > > >
> > >
> > >
> > >
> > >
> > >
> >
> ____________________________________________________________________________________
> > > Be a better friend, newshound, and
> > > know-it-all with Yahoo! Mobile.  Try it now.
> > http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> > >
> > >
> > >
> > >
> > > _______________________________________________
> > > DLC mailing list
> > > DLC at mailman.depaul.edu
> > > http://mailman.depaul.edu/mailman/listinfo/dlc
> > > http://linux.depaul.edu/
> > >
> >
> >
> >
> > --
> > Jamesha "JamFish" Fisher
> >
> > _______________________________________________
> > DLC mailing list
> > DLC at mailman.depaul.edu
> > http://mailman.depaul.edu/mailman/listinfo/dlc
> > http://linux.depaul.edu/
> >
> >
> _______________________________________________
> DLC mailing list
> DLC at mailman.depaul.edu
> http://mailman.depaul.edu/mailman/listinfo/dlc
> http://linux.depaul.edu/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.depaul.edu/pipermail/dlc/attachments/20080103/cec80ffe/attachment.htm