Look what arrived in my e-mail box today. It's from the admin of the site where LemminGS and the Convert 3200 src was found...

--------------------------------------------------------------

Date: Thu, 06 Feb 1997 01:06:36 -0800
From: JamesMc@adidam.org (James McCreary)
Subject: Pirated software distribution by your customer
To: cward@WCO.COM, paul@WCO.COM
Cc: joko@crl.com, stankurtz@adidam.org, gpeters@adidam.org, JayF@adidam.org,
administrator@adidam.org, Pamela@adidam.org
Organization: The Matrix of Adidam

Gentlemen,

I am writing to you as the INTERNIC database lists your email addresses as the Administrative and Technical contacts for WCO.COM.

I oversee the Internet services for Adidam, a small non-profit religious organization located here near Clearlake. Many of the members of our church are presently customers of your Internet services.

I must call your attention to an unfortunate incident which occurred over the past few days, apparently involving one of your customers.

We maintain a public FTP site for the benefit of our members on our Internet server. On February 2, a user from your network accessed our FTP server and uploaded what became known to us later as pirated copyrighted software. I have included the following log activity below:

> 2/2/97 6:11:13 PM Anonymous logon request received from
cturley@wco.com at host 207.48.88.36.


> 207.48.88.36, user@host, 2/2/97, 17:22:35, MSFTPSVC, ZEPHYR, -,

929766, 681335, 0, 0, 0, [38]  created , Lems2.shk, -,

Reverse DNS on the IP address 207.48.88.36 reveals the domain address of this user to be:

 > octans36.WCO.com 

We received the following email from the alleged author of this allegedly pirated software uploaded by your customer to our FTP site:

> From: Joe Kohn <joko@crl.com>
> Date: Wed, 5 Feb 1997 17:58:13 -0800
>
>  >What led you to this site?
>  >Do you have any other clues as to the source of this activity?
>
> I received an e-mail message from one of my loyal customers. He alerted me
> to me the fact that my software was on your site.
>
> As you may realize, there are many sites on the Internet where "pirated"
> software can be downloaded. One one of them, there appeared the following
> message:
>
>
> - Red Hotz served proper with love from
> - joko666ss. Visit this ftp for my
> - Brutal Deluxe delitz.
> -
> - This is your special virtual generic type
> - ftp ;) use exact address.
> -
> - ftp://ftp.adidam.org/incoming/conv3200.src.bxy
> -
> - ftp://ftp.adidam.org/incoming/Lems1.shk
> - ftp://ftp.adidam.org/incoming/Lems2.shk
> - ftp://ftp.adidam.org/incoming/Lems3.shk
> -

I would strongly suggest that you review your server logs to identify which of your customers was logged into your above noted POP during the times recorded in the log excerpts which I copied to you above.

I would very much appreciate a response from you regarding the action which you are taking in this matter.

In the meantime, we have disabled public write access to our FTP site. It is a minor inconvenience to us, but as a small non-profit organization, we cannot expose ourselves further to illegal activity generated by irresponsible Internet users.

Thank you for your assistance and cooperation in this matter.

Sincerely,

James McCreary
Director of Technology
Adidam

--
    "When I know the Truth and the world becomes love--
      that's what I was wondering if it would happen."
          -- Sri Adi Da, from "Crazy Da Must Sing"
For more information about Adi Da see http://www.adidam.org/