From: guy lemke (guy@com-pair.net)
To: punkis (punkis[at]forced.attrition.org)
Cc: curtis@com-pair.net
Date: Wed, 22 Dec 1999 16:57:16 -0800
Subject: Re: Urgent! Security incident on your machine! www.contrast-clothing.com
OK you have made a claim that we have been hacked... I am forwarding
this email to our attorney and local police... I see no evidence of our
site being hacked other then your addresses in our log's. I have to
assume that you (your company) has done this to try and scare us into
using your service. I would suggest that you prove other wise very
quick...
guy lemke
Mgr. Networking Div.
From: cult hero (jericho[at]attrition.org)
To: guy@com-pair.net
Cc: curtis@com-pair.net, Staff (staff[at]attrition.org)
Date: Wed, 22 Dec 1999 17:52:58 -0700 (MST)
Subject: Re: Urgent! Security incident on your machine! www.contrast-clothing.com (fwd)
http://www.attrition.org/mirror/attrition/1999/12/22/www.contrast-clothing.com/
Bottom of the main frame. Text: m3rr1 x-m4z. (tPG). p10n33r1ng ./h4ck
s1nc3 1337. [Preston Chang].
Did you really mean to up that up there? If not, then you were indeed
hacked. Seems to me that you have an unprofessional message on your site,
or you are flat out wrong about the security incident.
http://www.attrition.org/mirror/attrition/1999/12/22/www.contrast-clothing.com/wget-log
There is the log showing exactly what we did. Our address in your logs is
not a sign of you being hacked. READ what it says.
It is very interesting that you threaten to go to the police AFTER you
claim your domain wasn't hacked. What, going to report us for being a good
net citizen? Or report us for not hacking your domain? What will your
lawyer do? Threaten to sue us for being nice? For trying to help you when
we had the chance? I'm sure a judge would go for that in a heart beat.
Your misguided notion that we are 'scaring' you in some way is absurd. If
you would bother to check our web page, you will see that we offer no
service. Any and all security contracting that is offered as a result of
this mirror is pushed onto a third company to avoid conflict of interests
like this. We have turned down over 25,000 dollars worth of consulting so
far because of ignorant misguided souls like you.
Rather than cry about our mail, why don't you take responsibility for your
site and quit threatening us? Makes more sense that way.
If you have any questions, you can KINDLY direct them (without threats) to
me and I will try to assist you.
Brian Martin
ATTRITION Staff
