Hammer of Thor for *OUTING* S Wallace a proven forger & Blackmailer,ETC
Nomen Nescio
If Spammy don't sue, that mean that this web page is 100% correct
(so fuck that litigious bastard -- he has to hide like the coward terrorist he IS!)
SEE:
http://www.concentric.net/~cyberper/freak_of_nature.htm to learn the meaning
of embarassment!!!!! Just a small sample tidbit for now:
The post quoted below from al.mc...@worldnet.att.net (Al McDowell) is
actually (AS ONE CAN EASILY SEE) a "Just Taylor" forgery boo-boo!! It
was caught as a forgery originating from the
PROVEN FORGER, "TAYLOR JIMENEZ", AKA SANFORD WALLACE:
SOURCE:
see: <37ab3611...@skippy.mil>#1/1 where the following is quoted
(of course, "Taylor" deleted the
archive record to cover his Stoooopid SCREW ups -- NOW he has to post
x-no-archive not to further screw himself up!! <<laughing>>!!!!)
>Path: SnUK!remarQ-
uK!remarQ.com!super
news.com!newspeer.c
lara.net!news.clara
net!dispose.news.d
emon.net!demon!news.maxwell.syr.edu!newsfeed.wli.net!su-news-
hub1.bbnplanet.com!cpk-news-
hub1.bbnplanet.com!news.gtei.net!firehose.mindspring.com!not-for-mail
>From: al.mc...@worldnet.att.net (Al McDowell)
>Newsgroups: alt.usenet.kooks,alt.bathroom
>Subject: Re: I'M WAITING SKIDMARK
>Date: Tue, 06 Apr 1999 20:41:13 GMT
>Organization: "To Serve and Reject" http://www.lart.com
>Message-ID: <371070c6...@news.mindspring.com>
>References: <36f13ca2...@news.earthlink.net>
<36f1a00b...@news.mindspring.com>
<36f8c9e1...@netnews.worldnet.att.net>
<36f941f4...@netnews.worldnet.att.net>
<7da2tj$3a2$1...@samba.rahul.net>
<36fd1248...@netnews.worldnet.att.net>
<slrn7fio8...@foxtrot.rahul.net>
<36fd6d85...@netnews.worldnet.att.net>
<36fcbc49...@news.ptd.net> <373807db...@hell-flame-wars.org>
<36fd4bfa...@news.ptd.net> <37098c23...@hell-flame-wars.org>
>NNTP-Posting-Host: d1.56.c4.8a
>Mime-Version: 1.0
>Content-Type: text/plain; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>X-Server-Date: 6 Apr 1999 20:41:19 GMT
>X-Newsreader: Forte Agent 1.5/32.452
>X-No-Archive: yes
>Lines: 29
>Xref: SnUK alt.usenet.kooks:32294 alt.bathroom:2907
>
>specia...@hell-flame-wars.org (Tim Thorne) said:
>>da...@frackit.com (Dave Ratcliffe) wrote:
>>>specia...@hell-flame-wars.org (Tim Thorne) wrote:
>>>-da...@frackit.com (Dave Ratcliffe) wrote:
>>>->c.v...@worldnet.att.net (Cheryl Voss) wrote:
>>>-[...]
>>>->-Thorne ought to kick your ass again for being so stupid.
>>>->
>>>->Again?
>>>-
>>>-Yes, again.
>>>
>>>There must be a "first" before there can be an "again".
>>
>>I've kicked your ugly face out of many threads, Ratcliffe.
>
>Well well, if it's not Tim Thorne out playing with his best buddy
Skidmark.
>Do you like it when Skidmark pretends to be Cheryl Voss, Thorny?
>
>--
>Taylor Netscum (RIP 10/16/97)
>****************************************************
>I AM SO SMART! I AM SO SMART!
>s-m-r-t...I MEAN s-m-A-r-t! -Homer Simpson, 1994
>****************************************************
>****************************************************
Yep, I'm talking about the 'Just Taylor' who stalks
people he does not know into newsgroups he does not participate in
to harass and defame people for others. He goes by a real alias.
There is NO "Taylor Jimenez" in California. He uses abuse domains
and always posts off the record to further try to hide and avoid
accountability. He is a triple anon coward. There is a Sanford
Wallace and he posts from the same area as "Taylor". "Taylor" uses
the same words (like 'larting'); behaves in the same way as Sanford;
uses some of Sanford's domains (which he claims he "bought from him");
and he is the very same age and looks exactly the same as Sanford
Wallace!! Sanford Wallace no longer lives at his past addresses and
there is a Sanford Wallace in San Pablo, CA. He lives in the same area
that would be served by the mail server "taylor" uses. "Taylor" also
retaliated for Sanford in ten different newsgroups where the "open
letter" (below) was posted. I wonder why he would do that???
In short it is clear that "Taylor" who is an irresponsible criminal-type
stalking and harassing abuser who tries to remain unaccountable and
anonymous is indeed Sanford "Spamford" Wallace.
Still you can see him defending and
speaking for Sanford Wallace even recently (YET MORE evidence that
"Taylor" is indeed Sanford Wallace)!!! To wit:
Go to http://groups.google.com and do an advanced search with the
Message ID <adovba$sam$1...@calcite.rhyolite.com> and with the
Message ID <997.3cffc831.ce98a@biskybox>
AND <3CDC6E97...@clifto.com>
AND, in 1998 there is a defense of Sanford Walace BY "Taylor Netscum",
aka "Just Taylor" aka "Taylor Jimenez" (tay...@wilhelp.com)!:
<34c082e3...@news.mindspring.com>#1/1
And, for just SOME of the direct evidence you can see to prove to
yourself that "Taylor" is Sanford Wallace, see:
<a1en7uo2k6jf60pat...@4ax.com>
AND
<213268cd7a376090...@remailer.segfault.net>
That is just SOME of the evidence (all verifiable).
Also see:
<a1en7uo2k6jf60pat...@4ax.com>
<may106-1305...@js2.arl.psu.edu>#1/1
<1997052519...@fat.doobie.com>#1/1
<5sg3kg$l...@garcia.efn.org>#1/1
<MPG.e11ef4dd...@news.cris.com>#1/1
<5kvf16$l...@web.nmti.com>#1/1
<3383a9ce.166056576@rabendary>#1/1
<5ld072$d...@news-central.tiac.net>#1/1
It should also be noted that Sanford Wallace made posts MUCH like
"Taylor Jimenez" does. (He disappears then 'Taylor' appears.)
Sanford Wallace was a forgery when he posted by his real name to
(YEARS AGO) (psychopaths stay psychopaths!!!!! THEY ARE THE SICKEST
PSYCHOS!!!!):
Sanford Wallace (THE SELF SAME INDIVIDUAL) WAS ALSO A FORGER WHEN HE POSTED
BY NAME ABOUT 5 YEARS AGO. Here is the evidence:
From: Mike Dusseault <mi...@bulwark1.ic.gc.ca>
Subject: Threats traced back to Cyber Promotions
Date: 1997/06/23
Message-ID: <33AEA220...@bulwark1.ic.gc.ca>
Organization: The Communications Research Centre
Newsgroups: news.admin.net-abuse.misc
I have recieved a few emails that have been traced right
back to one of Sanford's systems. One was also routed
though an SMTP server that is wide open at priceton.edu.
I am going to pursue getting them to ID the originating
system of that email.
Here's the messages with full headers, including the
most interesting contents.
And to Sanford Wallace: You are a useless forger. You are
also no impressing me at all. If you think threats from
an idiot like you bother me much, you're mistaken. And
the legal threats are stupid since I am in Canada, and
you are harassing me on Government property. If you think
the Canadian Government will listen to your useless crap,
you need a reality check.
Also note I will be persuing this however I can.
Without further ado, here's those messages:
--- SOM ---
Received: from bulwark.ic.gc.ca (bulwark.ic.gc.ca [142.53.1.1]) by
jewel.ic.gc.ca (8.7.1/8.7.1) with SMTP id AAA14902 for
<mi...@jewel.ic.gc.ca>; Mon, 23 Jun 1997 00:18:18 -0400
Received: from [142.53.2.241] by bulwark.ic.gc.ca via smtpd (for
jewel.ic.gc.ca [142.53.67.245]) with SMTP; 23 Jun 1997 03:52:33 UT
Received: from bulwark2.ic.gc.ca by strategis.ic.gc.ca;
(5.65v3.2/1.1.8.2/27Jun96-1159AM) id AA14936; Mon, 23 Jun 1997 00:25:41
-0400
Received: from [207.124.161.77] by bulwark2.ic.gc.ca via smtpd (for
[142.53.2.241]) with SMTP; 23 Jun 1997 03:52:32 UT
Received: from unverified source.
X-Note: Visit http://www.cyberpromo.com to read about the bulk email
saga.
Message-Id: <1997062302...@199706230223.WAA08412>
Comments: Authenticated sender is <admin@localhost>
From: "Root" <ro...@root-servers.net>
To: "Postmaster" <postm...@root-servers.net>
Date: Sun, 22 Jun 1997 22:11:03 +0000
X-Distribution: Bulk
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7BIT
Subject: Account Cancellation
Reply-To: postm...@root-servers.net
X-Confirm-Reading-To: postm...@root-servers.net
X-Pmrqc: 1
Return-Receipt-To: postm...@root-servers.net
Priority: urgent
X-Mailer: Pegasus Mail for Win32 (v2.54)
X-Mozilla-Status: 0001
I regret to inform you that, due to your abuse of the Internet, we
have been forced to close your account. Effective Tuesday June,
24th, you will not be able to use the system. Please retreive all
email you wish to keep by that day. We appologize for the
inconvience, but feel that this action is necessary. Your name and
address have also been provided to the FBI who is currently
investigating the matter. Expect them to contact you by the end of
the week. We may also take legal action against you. You will
receive a certified letter with further information.
Thanks,
Harold Surreptious
System Administrator
--- EOM ---
--- SOM ---
Received: from bulwark.ic.gc.ca (bulwark.ic.gc.ca [142.53.1.1]) by
jewel.ic.gc.ca (8.7.1/8.7.1) with SMTP id JAA08256 for
<mi...@jewel.ic.gc.ca>; Mon, 23 Jun 1997 09:42:57 -0400
Received: from [142.53.2.241] by bulwark.ic.gc.ca via smtpd (for
jewel.ic.gc.ca [142.53.67.245]) with SMTP; 23 Jun 1997 13:17:06 UT
Received: from bulwark2.ic.gc.ca by strategis.ic.gc.ca;
(5.65v3.2/1.1.8.2/27Jun96-1159AM) id AA29634; Mon, 23 Jun 1997 09:50:21
-0400
Message-Id: <970623135...@strategis.ic.gc.ca>
Received: from pucc.Princeton.EDU ([128.112.129.99]) by
bulwark2.ic.gc.ca via smtpd (for [142.53.2.241]) with SMTP; 23 Jun 1997
13:17:05 UT
Received: from gs by pucc.PRINCETON.EDU (IBM VM SMTP V2R2) with TCP;
Mon, 23 Jun 97 09:37:14 EDT
Comments: Authenticated sender is <admin@localhost>
From: "Root" <ro...@root-servers.net>
To: "Postmaster" <postm...@root-servers.net>
Date: Mon, 23 Jun 1997 09:34:19 +0000
X-Distribution: Bulk
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7BIT
Subject: Thee bluelist
Reply-To: postm...@root-servers.net
Priority: urgent
X-Mailer: Pegasus Mail for Win32 (v2.54)
X-Mozilla-Status: 0001
I can't believe that they haven't fixed this server yet. Oh well,
not my problem.
Note to Lorraine: You're screwed when I find out what your new email
address is.
Note to Beth: You will be screwed later, nontheless you WILL be
screwed.
Note to everyone else: (hysterical laughter) I WILL LEARN YOU GOOD
FUKERZZZZZ. Next time don't post the the net abuse newsgroups.
--- EOM ---
Fogery analysis:
Both messages originated from the same mail package with the same
version. The authenticated host (useless though it is) remains the
same on both messages (admin@localhost) so again, it's the same
person.
One was recieved directly from the IP address 207.124.161.77 (nothing
in DNS) which is likely the hacker's system. This was the IP address
that the mail message was recieved from as told by OUR SMTP server.
Let's see if we can get any hints:
[root@jewel /root]# telnet 207.124.161.77 25
Trying 207.124.161.77...
Connected to 207.124.161.77.
Escape character is '^]'.
220 auto-relay2.cybermirror1.com ESMTP Sendmail 8.8.5/8.7.3; Mon, 23
Jun 1997 11:43:42 -0400 (EDT)
Looking in the InterNIC database:
Cyber Promotions CYBERMIRROR-DOM
8001 Castor Avenue, Suite #127
Philadelphia, PA 19152
USA
Domain Name: CYBERMIRROR1.COM
Administrative Contact, Technical Contact, Zone Contact:
Wallace, Sanford SW1708 dom...@CYBERPROMO.COM
215-628-9780
Billing Contact:
Wallace, Sanford SW1708 dom...@CYBERPROMO.COM
215-628-9780
Record last updated on 25-Apr-97.
Record created on 25-Apr-97.
Database last updated on 23-Jun-97 05:35:18 EDT.
Domain servers in listed order:
NS7.CYBERPROMO.COM 205.199.2.250
NS5.CYBERPROMO.COM 205.199.212.50
NS8.CYBERPROMO.COM 207.124.161.65
NS9.CYBERPROMO.COM 207.124.161.50
So it looks like I've recieved personal attention from someone
at Cyber Promotions. Likely Sanford Wallace or a lackey.
The second message is a little harder since it was relayed through
pucc.Princeton.EDU ([128.112.129.99]) who apparently have unsecure
servers. Let's see:
[root@jewel /root]# telnet pucc.princeton.edu 25
Trying 128.112.129.99...
Connected to pucc.princeton.edu.
Escape character is '^]'.
220 pucc.PRINCETON.EDU running IBM VM SMTP V2R2 on Mon, 23 Jun 97
11:38:07
EDT
HELO blah
250 pucc.PRINCETON.EDU is my domain name.
MAIL FROM:<g...@heaven.com>
250 OK
RCPT TO:<mi...@bulwark1.ic.gc.ca>
250 OK
DATA
354 Enter mail body. End by new line with just a '.'
This is a test of this SMTP server. It looks like it's wide
open. They need to fix this !!!
.
250 Mail Delivered
QUIT
221 pucc.PRINCETON.EDU running IBM VM SMTP V2R2 closing connection
Connection closed by foreign host.
Indeed I later recieved that message. They need to fix their servers.
Here's the InterNIC entry:
Princeton University PRINCETON-DOM
Computing and Information Technology
87 Prospect Avenue
Princeton, NJ 08544-2007
Domain Name: PRINCETON.EDU
Administrative Contact:
Varian, Lee C. LCV lva...@PUCC.PRINCETON.EDU
(609) 258-6067 (FAX) (609) 258-3943
Technical Contact, Zone Contact:
Olenick, Peter A. PAO3 pole...@PRINCETON.EDU
1-609-258-6024 (FAX) 1-609-258-3943
Record last updated on 29-Jan-96.
Record created on 03-Apr-87.
Database last updated on 23-Jun-97 05:35:18 EDT.
PRINCETON.EDU 128.112.128.1
NS.CWRU.EDU 129.22.4.1
NISC.JVNC.NET 128.121.50.7
And here's another one that arrived when I was writing this:
--- SOM ---
Received: from bulwark.ic.gc.ca (bulwark.ic.gc.ca [142.53.1.1]) by
jewel.ic
gc.ca (8.7.1/8.7.1) with SMTP id LAA08670 for <mi...@jewel.ic.gc.ca>;
Mon,
23 Jun 1997 11:41:40 -0400
Received: from [142.53.2.241] by bulwark.ic.gc.ca
via smtpd (for jewel.ic.gc.ca [142.53.67.245]) with SMTP; 23
Jun
1997 15:15:49 UT
Received: from bulwark2.ic.gc.ca by strategis.ic.gc.ca;
(5.65v3.2/1.1.8.2/2
7Jun96-1159AM)
id AA18470; Mon, 23 Jun 1997 11:49:06 -0400
Received: from [207.124.161.77] by bulwark2.ic.gc.ca
via smtpd (for [142.53.2.241]) with SMTP; 23 Jun 1997 15:15:48
UT
Received: from unverified source.
X-Note: Visit http://www.cyberpromo.com to read about the bulk email
saga.
Message-Id: <1997062313...@199706231355.JAA17214>
Comments: Authenticated sender is <admin@localhost>
From: "Root" <ro...@root-servers.net>
To: "Postmaster" <postm...@root-servers.net>
Date: Mon, 23 Jun 1997 09:43:26 +0000
X-Distribution: Bulk
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7BIT
Subject: Lawsuit
Reply-To: postm...@root-servers.net
X-Confirm-Reading-To: postm...@root-servers.net
X-Pmrqc: 1
Return-Receipt-To: postm...@root-servers.net
Priority: urgent
X-Mailer: Pegasus Mail for Win32 (v2.54)
X-Mozilla-Status: 0001
Hi, I'm Bob from the legal department. I understand that you have
been attacking our servers. I would like to let you know that we
will be taking legal action. You will receive more information by
certified letter. We plan on suing you for no more than 30,000
dollars so don't worry too much. Maybe we can settle out of court?
How about that? I think we would be willing to take $10,000.
Thanks,
Bob
--- EOM ---
Note that this one attempts blackmail.
Also note that I've never attacked their servers. I refuse
to lower myself to Sanford's level.
(end quoted post)
(WHAT DO YOU KNOW, ALSO A BLACKMAIL ATTEMPT. THAT DIDN'T CHANGE OVER THE
YEARS EITHER!!)