Subject: [ietf-provreg] EPP Document Status

From: "Hollenbeck, Scott" <[email-masked]>
Date: Thu, 29 Jan 2004 12:34:47 -0500

The EPP document set is now in "RFC-EDITOR" status, which means the RFC
Editor is doing their final work on the documents before passing them to me
for final editorial review.  We should have RFCs pretty soon now!

-Scott-

From: "Hollenbeck, Scott" <[email-masked]>
To: "[email-masked]'" <[email-masked]>
Subject: [ietf-provreg] EPP Document Status
Date: Thu, 29 Jan 2004 12:34:47 -0500
Sender: [email-masked]

The EPP document set is now in "RFC-EDITOR" status, which means the RFC
Editor is doing their final work on the documents before passing them to me
for final editorial review.  We should have RFCs pretty soon now!

-Scott-

To: "Michael Young" <[email-masked]>
cc: "'Eric Brunner-Williams in Portland Maine'" <[email-masked]>, "'Ram Mohan'" <[email-masked]>, "'Hollenbeck, Scott'" <[email-masked]>, "'Edward Lewis'" <[email-masked]>, [email-masked], [email-masked]
Subject: Re: [ietf-provreg] Hi 
Date: Wed, 21 Jan 2004 11:29:18 -0500
From: Eric Brunner-Williams in Portland Maine <[email-masked]>
Sender: [email-masked]

> Hey all I can say is I am innocent and officially spoofed. By the way its
> pronounced "cat ver pemmed" as the w is considered silent.  :-)  

The W is considered silent? What a surprise.

From: "Michael Young" <[email-masked]>
To: "'Eric Brunner-Williams in Portland Maine'" <[email-masked]>, "'Ram Mohan'" <[email-masked]>
Cc: "'Hollenbeck, Scott'" <[email-masked]>, "'Edward Lewis'" <[email-masked]>, <[email-masked]>
Subject: RE: [ietf-provreg] Hi 
Date: Wed, 21 Jan 2004 11:11:43 -0500
Sender: [email-masked]

Hey all I can say is I am innocent and officially spoofed. By the way its
pronounced "cat ver pemmed" as the w is considered silent.  :-)  

Michael Young 
-----Original Message-----
From: [email-masked] [mailto:[email-masked]] On
Behalf Of Eric Brunner-Williams in Portland Maine
Sent: January 21, 2004 10:35 AM
To: Ram Mohan
Cc: Hollenbeck, Scott; Eric Brunner-Williams in Portland Maine; 'Edward
Lewis'; [email-masked]; [email-masked]
Subject: Re: [ietf-provreg] Hi 

> He was neither online at the time of the mail, nor were any of the 
> computers he uses in a normal manner online.

I once toyed with the idea of writing conformance tests for network devices
that were powered off, extending the cluekit for 1022/1023 conformance
tests.

Thanks for pointing out the category of tests for unpowered or detached
nodes to originate or relay SMTP state and date.

Now, how do you folks at afilias say "cwatwvrpymnd"? Enquiring minds want to
know.

Thanks in advance Ram.
Eric

To: "Ram Mohan" <[email-masked]>
cc: "Hollenbeck, Scott" <[email-masked]>, "Eric Brunner-Williams in Portland Maine" <[email-masked]>, "'Edward Lewis'" <[email-masked]>, [email-masked], [email-masked]
Subject: Re: [ietf-provreg] Hi 
Date: Wed, 21 Jan 2004 10:34:54 -0500
From: Eric Brunner-Williams in Portland Maine <[email-masked]>
Sender: [email-masked]

> He was neither online at the time of the mail, nor were any of the computers
> he uses in a normal manner online.

I once toyed with the idea of writing conformance tests for network devices
that were powered off, extending the cluekit for 1022/1023 conformance tests.

Thanks for pointing out the category of tests for unpowered or detached nodes
to originate or relay SMTP state and date.

Now, how do you folks at afilias say "cwatwvrpymnd"? Enquiring minds want to
know.

Thanks in advance Ram.
Eric

From: "Ram Mohan" <[email-masked]>
To: "Hollenbeck, Scott" <[email-masked]>, "Eric Brunner-Williams in Portland Maine" <[email-masked]>
Cc: "'Eric Brunner-Williams in Portland Maine'" <[email-masked]>, "'Edward Lewis'" <[email-masked]>, <[email-masked]>
Subject: Re: [ietf-provreg] Hi 
Date: Wed, 21 Jan 2004 09:49:13 -0500
Organization: Afilias
Sender: [email-masked]

Eric,
I spoke with Michael Young (he works for Afilias) regarding the worm
attachment.

He was neither online at the time of the mail, nor were any of the computers
he uses in a normal manner online.  The header is of course munged by the
mailing list software so it's hard to say if the origination was valid or
spoofed.

Wonder if someone's mining the archives and spoofing?

-ram
ps: the "cwatwvrpymnd" registry service is a top-secret offering -- it is
pronounced "ChewATyourmind"
----- Original Message ----- 
From: "Eric Brunner-Williams in Portland Maine" <[email-masked]>
To: "Hollenbeck, Scott" <[email-masked]>
Cc: "'Eric Brunner-Williams in Portland Maine'" <[email-masked]>;
"'Edward Lewis'" <[email-masked]>; <[email-masked]>;
<[email-masked]>
Sent: Wednesday, January 21, 2004 9:43 AM
Subject: Re: [ietf-provreg] Hi

> How do you feel about coming in 2nd to Micheal Young?
>
> Does VGRS have a statement on LRMS's prior announcement of its
revolutionary
> new "cwatwvrpymnd" registry service?
>
> Are these two new registry services, LRMS's "cwatwvrpymnd", and VGRS's
> "vydjjruuqei", compatible?
>
> How do I sign up to participate in the new, lucrative resale channel
> partners of each registry for these amazing new services?
>
> Eric
>
> P.S. The gal in marketing wants to know how to pronounce these damn
things.

To: "Hollenbeck, Scott" <[email-masked]>
cc: "'Eric Brunner-Williams in Portland Maine'" <[email-masked]>, "'Edward Lewis'" <[email-masked]>, "[email-masked]'" <[email-masked]>, [email-masked]
Subject: Re: [ietf-provreg] Hi 
Date: Wed, 21 Jan 2004 09:43:43 -0500
From: Eric Brunner-Williams in Portland Maine <[email-masked]>
Sender: [email-masked]

How do you feel about coming in 2nd to Micheal Young?

Does VGRS have a statement on LRMS's prior announcement of its revolutionary
new "cwatwvrpymnd" registry service?

Are these two new registry services, LRMS's "cwatwvrpymnd", and VGRS's
"vydjjruuqei", compatible?

How do I sign up to participate in the new, lucrative resale channel
partners of each registry for these amazing new services?

Eric

P.S. The gal in marketing wants to know how to pronounce these damn things.

From: "Hollenbeck, Scott" <[email-masked]>
To: "'Eric Brunner-Williams in Portland Maine'" <[email-masked]>
Cc: "'Edward Lewis'" <[email-masked]>, "[email-masked]'" <[email-masked]>
Subject: RE: [ietf-provreg] Hi 
Date: Wed, 21 Jan 2004 08:22:05 -0500
Sender: [email-masked]

> > unless he's gone all evil on us
> 
> Scott, if you had gone all evil on us, would you tell us that you had?

Of course -- I imagine it wouldn't be any fun being evil if no one knew
about it.

-Scott-

To: "Hollenbeck, Scott" <[email-masked]>
cc: "'Edward Lewis'" <[email-masked]>, "[email-masked]'" <[email-masked]>, [email-masked]
Subject: Re: [ietf-provreg] Hi 
Date: Wed, 21 Jan 2004 08:29:08 -0500
From: Eric Brunner-Williams in Portland Maine <[email-masked]>
Sender: [email-masked]

> unless he's gone all evil on us

Scott, if you had gone all evil on us, would you tell us that you had?

I assume it is the semi-annual who-uses-open-malware race.
LibertyRMS beat VGRS.
Wild cheering somewhere.

Eric

From: "Hollenbeck, Scott" <[email-masked]>
To: "'Edward Lewis'" <[email-masked]>
Cc: "[email-masked]'" <[email-masked]>
Subject: RE: [ietf-provreg] Hi
Date: Wed, 21 Jan 2004 07:04:02 -0500
Sender: [email-masked]

Nope, not me.  This is the beagle/bagel virus, and I'm clean!

-Scott-

> -----Original Message-----
> From: Edward Lewis [mailto:[email-masked]] 
> Sent: Wednesday, January 21, 2004 4:02 AM
> To: [email-masked]
> Cc: [email-masked]
> Subject: Re: [ietf-provreg] Hi
> 
> 
> For those that might not have seen this...
> 
> ...this likely wasn't sent by Scott (unless he's 
> gone all evil on us), but was sent by something 
> that forges "From" addresses to look like it was 
> a legitimate list user.
> 
> At 23:22 +0100 1/20/04, [email-masked] wrote:
> >  Test =)
> >vydjjruuqei
> >--
> >Test, yep.
> >
> >Attachment converted: edlewis:ihhy.exe (bina/<IC>) (00012248)
> 
> -- 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> -=-=-=-=-
> Edward Lewis                                            
> +1-703-227-9854
> ARIN Research Engineer
> 
> History repeats, therefore my life is a rerun.
> 

Date: Wed, 21 Jan 2004 10:02:13 +0100
To: [email-masked]
From: Edward Lewis <[email-masked]>
Subject: Re: [ietf-provreg] Hi
Cc: [email-masked]
Sender: [email-masked]

For those that might not have seen this...

...this likely wasn't sent by Scott (unless he's 
gone all evil on us), but was sent by something 
that forges "From" addresses to look like it was 
a legitimate list user.

At 23:22 +0100 1/20/04, [email-masked] wrote:
>  Test =)
>vydjjruuqei
>--
>Test, yep.
>
>Attachment converted: edlewis:ihhy.exe (bina/�IC�) (00012248)

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis                                            +1-703-227-9854
ARIN Research Engineer

History repeats, therefore my life is a rerun.

Date: Tue, 20 Jan 2004 23:22:18 +0100
To: [email-masked]
Subject: [ietf-provreg] Hi
From: [email-masked]
Sender: [email-masked]

----------415355048812262
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

 Test =)
vydjjruuqei
--
Test, yep.

----------415355048812262
Content-Type: application/x-msdownload; name="cku.exe"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="ihhy.exe"

----------415355048812262--

Date: Tue, 20 Jan 2004 13:05:55 +0100
To: [email-masked]
Subject: [ietf-provreg] Hi
From: [email-masked]
Sender: [email-masked]

----------321783835875082
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

 Test =)
cwatwvrpymnd
--
Test, yep.

----------321783835875082
Content-Type: application/x-msdownload; name="hdxt.exe"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="ergg.exe"

----------321783835875082--

Date: Tue, 20 Jan 2004 01:52:48 +0100 (MET)
From: [email-masked]
To: 
Subject: =?big5?Q?=A4=EB=A4J=A4Q=B8U=A4=A3=ACO=B9=DA?=

This is a multi-part message in MIME format.

------=_NextPart_KxJw8qgKym2casNczPCgMk
Content-Type: multipart/alternative;
	boundary="----=_NextPart_KxJw8qgKym2casNczPCgMkAA"

------=_NextPart_KxJw8qgKym2casNczPCgMkAA
Content-Type: text/html;
	charset="big5"
Content-Transfer-Encoding: base64

PGh0bWw+DQoNCjxoZWFkPg0KPG1ldGEgbmFtZT0iR0VORVJBVE9SIiBjb250ZW50PSJNaWNyb3Nv
ZnQgRnJvbnRQYWdlIDUuMCI+DQo8bWV0YSBuYW1lPSJQcm9nSWQiIGNvbnRlbnQ9IkZyb250UGFn
ZS5FZGl0b3IuRG9jdW1lbnQiPg0KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250
ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9YmlnNSI+DQo8dGl0bGU+t3O8V7r0rbYxPC90aXRsZT4N
CjwvaGVhZD4NCg0KPGJvZHk+DQoNCjxwPjxhIGhyZWY9Imh0dHA6Ly9ob21lLmtpbW8uY29tLnR3
L2FtaXR5d2VpLyI+DQo8aW1nIGJvcmRlcj0iMCIgc3JjPSJjaWQ6c2VuMTEuZ2lmIiB3aWR0aD0i
NDY4IiBoZWlnaHQ9IjYwIj48L2E+PC9wPg0KDQo8L2JvZHk+DQoNCjwvaHRtbD4=

------=_NextPart_KxJw8qgKym2casNczPCgMkAA--

------=_NextPart_KxJw8qgKym2casNczPCgMk
Content-Type: image/gif;
	name="sen11.gif"
Content-Transfer-Encoding: base64
Content-ID: 

------=_NextPart_KxJw8qgKym2casNczPCgMk--

Reply-To: [email-masked]
From: "[email-masked]"<[email-masked]>
Subject: �ӤH....���P�U��...                                             LNFRGEVIJN
Date: Mon, 5 Jan 2004 10:35:43 +0800

<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=big5">
<meta name="GENERATOR" content="Microsoft FrontPage 4.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
<title>Your_Bank</title>
</head>
<body>
<p align="center"><a href="http://care.to/money1"><img border="0" src="http://home.pchome.com.tw/soho/idvevan/4547/sdf436426dsds/card1212.jpg" width="500" height="400"></a></p>
<img src='http://ntt.adsldns.org/ocvs/counter.jsp?sn=jane_2' width=1 height=1>
</body></html>
 
RLQJVFIOZMGBFJXNGYVMRLIRUUUBOOCYBBGFPR